# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
changelog:
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
changelog:
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-3
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-4
changelog:
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9]
  - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9]
  - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9]
  - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9]
  - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-5
changelog:
  - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8]
  - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8]
  - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8]


author: Viktor Ashirov <vashirov@redhat.com> - 2.9.0-1
changelog:
  - Bump version to 2.9.0
  - Resolves: RHEL-165978 - Replication halt caused by an incorrect setting of "nsslapd-changelogmaxage"
  - Resolves: RHEL-166003 - Crash in replica_config_add when manually configuring a replica with an incorrect nsds5ReplicaRoot.
  - Resolves: RHEL-166004 - Possible memory leak when using the Retro Changelog plugin.
  - Resolves: RHEL-168908 - ns-slapd fails to shutdown when deferred memberof update is in progress
  - Resolves: RHEL-168964 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9]
  - Resolves: RHEL-168972 - Replica installation is failing with message MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED [rhel-9]
  - Resolves: RHEL-169530 - Rebase 389-ds-base to 2.9.x
  - Resolves: RHEL-170270 - DS 12 does not handle escape char in bind user [rhel-9]
  - Resolves: RHEL-170275 - dnaSharedConfig: "dnaPortNum: 0" [rhel-9]
  - Resolves: RHEL-170280 - Memory leaks in syncrepl plugin during persistent search operations [rhel-9]
  - Resolves: RHEL-170287 - access log - suspicious wtime  optime negative and large values in internal op [rhel-9]
  - Resolves: RHEL-170477 - An online reinitialization with LMDB is terminating the receiving server [rhel-9]
  - Resolves: RHEL-170480 - dsctl healthcheck DSMOLE0001 inaccurate recommendations when there is more than 1 LDAP backend [rhel-9]
  - Resolves: RHEL-170651 - passwordbadwords attribute of the local password policy is not functioning [rhel-9]
  - Resolves: RHEL-170732 - Memory leaks in IPA context on server restart [rhel-9]
  - Resolves: RHEL-174525 - [RFE] Add OS-level thread names to all server threads [rhel-9]
  - Resolves: RHEL-180717 - Online export is failing when using the option "-s" [rhel-9]


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Ján Václav <jvaclav@redhat.com> - 1:1.54.4-1
changelog:
  - Update to 1.54.4
  - fix handling onlink route flag for ECMP routes (RHEL-157391)
  - Add Geneve support (RHEL-154245)
  - Fix arp_missed_max/lacp_active error on reapply (RHEL-157392)
  - Removed 802.1x auth patch as it was released upstream


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Jon Maloy <jmaloy@redhat.com> - 2.14.0.1-3
changelog:
  - wla-Jira-https-issues.redhat.com-browse-RHEL-133507.patch [RHEL-133507]
  - Resolves: RHEL-133507
    (Backport ConditionVirtualization=|microsoft for waagent in RHEL 9.x)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-4
changelog:
  - wla-Change-redhat-waagent-network-setup.service-path-to-.patch [RHEL-82232]
  - Resolves: RHEL-82232
    ([Azure][image mode][WALA][RHEL-9] Unable to setup the persistent firewall rules)


author: Jerry Snitselaar <jsnitsel@redhat.com> - 4.1.6-2
changelog:
  - Fix faulty logic in dsa_user_test_runner device clean up.
  - Adds a couple of test clean ups as well.
  Resolves: RHEL-32451


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.12-1
changelog:
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-129787
  - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues
    (k.koukiou)
    Related: RHEL-74145
  - ostree needs to have /boot be bindmounted into sysroot. (a.badger)
    Resolves: RHEL-74145


author: Adam Kankovsky <adamkankovsky@gmail.com> - 34.25.7.15-1
changelog:
  - Increase GUI startup timeout to 120 seconds (mkolman)
    Related: RHEL-148965
    Resolves: RHEL-92999
  - chore: Support multiple console= kernel entries (ppolawsk)
    Resolves: RHEL-101787


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.0-6
changelog:
  - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
    empty - no content was marked for inclusion!)
  - Remove scope from dependencies in pom.xml files (fixes missing
    dependencies, dependencies marked with scope provided are ignored by
    the rpm dependency generator)
  - Drop some more commands: shell, exportreport, mbr (uses parts that
    are not packaged)
  - Resolves: rhbz#2033709


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-65
changelog:
  - Resolves: rhbz#2121828 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Bastien Nocera <bnocera@redhat.com> - 5.86-1
changelog:
  - Update to 5.86
  - Re-add btmgmt as it does not require bluetoothd to be running,
    unlike bluetoothctl mgmt
  - Fix audio output not working in some circumstances
    Resolves: RHEL-147734


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Jon Maloy <jmaloy@redhat.com> - 4.0.2-11
changelog:
  - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow)
    Resolves: RHEL-137760


author: Roland Grunberg <rgrunber@redhat.com> - 3.2.9-5
changelog:
  - Set maven-javadoc-plugin source to 1.8 for Java 11 build.
  - Ignore 5 test failures from upstream when run on Java 9 or above.


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-2
changelog:
  - Resolves: RHEL-163817
  - Resolves: RHEL-163838

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-3
changelog:
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.6-1
changelog:
  - Update to cryptsetup 2.8.6.
  - patch: ci: Replace jq with bash wrapper.
  - patch: ci: Fix jq no longer handling 0x00 characters.
  - patch: reencrypt: update internal reencryption error state descriptions.
  - patch: reencrypt: merge REENC_ERR and REENC_ROLLBACK errors in one.
  - patch: reencrypt: better name error values to match the description.
  - patch: reencrypt: refactor overlay devices teardown.
  - patch: reencrypt: add more gracefull reencryption error path.
  - patch: tests: Add reencryption error path tests.
  - Resolves: 161183


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-30
changelog:
  - Add 0120-multipath-tools-fix-multipath-ll-bug-for-Native-NVME.patch
    * Fixes RHEL-28068
  - Add 0121-multipathd-set-reply-length-to-zero-for-NULL-replies.patch
    * Fixes RHEL-44569
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-31
changelog:
  - Modify multiple tests especially medium_error_scsi_debug and squelch_scsi_id
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-32
changelog:
  - Modify bindings, find_multipaths, and user_friendly_names tests
    * Fixes RHEL-28068 & RHEL-4459
  - Resolves: RHEL-28068
  - Resolves: RHEL-44569


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-38
changelog:
  - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82534


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39
changelog:
  - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
  - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
  - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
  - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
  - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103109 ("Update multipath builtin config to add new
      device defaults")
  - Resolves: RHEL-103109


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-40
changelog:
  - Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0161-limpathpersist-redesign-failed-release-workaround.patch
  - Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
  - Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
  - Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
  - Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0167-libmultipath-rename-prflag_value-enums.patch
  - Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
  - Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
  - Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
      reservation handling")
  - Resolves: RHEL-118515


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-41
changelog:
  - Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
      reservation handling")
  - Resolves: RHEL-118515


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-42
changelog:
  - Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
      storage [rhel-9]")
  - Resolves: RHEL-128396


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-43
changelog:
  - Add 0198-multipathd-print-path-offline-message-even-without-a.patch
    * Fixes RHEL-133814 ("log_checker_err is not printing messages
      repeatedly for failed path [rhel-9]")
  - Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
  - Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
  - Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
  - Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
  - Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
  - Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
  - Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
    * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
      "Could not open '/dev/dm-95': No such file or directory")
  - Resolves: RHEL-133814
  - Resolves: RHEL-135904


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-44
changelog:
  - Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
  - Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
    * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
      [rhel-9]")
  - Resolves: RHEL-141291


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-45
changelog:
  - Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
  - Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
  - Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
    * Fixes RHEL-148462 ("Improve multipathd's handling of updating
      persistent reservations on restored paths. [rhel-9]")
  - Resolves: RHEL-148462


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-46
changelog:
  - Add 0211-libmultipath-set-offline-whenever-path-is-not-online.patch
    * Fixes RHEL-151448 ("multipathd doesn't print checker messages for
      some offline path states [rhel-9]")
  - Resolves: RHEL-151448


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-16
changelog:
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
  - fix building with latest openssl (RHEL-140619)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-17
changelog:
  - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640)
  - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288)
  - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-6
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983]
  - Resolves: RHEL-121983
    ([edk2] VM panic on booting SNP guest with large memory on Genoa)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-7
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100]
  - Resolves: RHEL-126100
    ([edk2,rhel-9] dbx update to 20251016 / v1.6.1)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-8
changelog:
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922]
  - Resolves: RHEL-115922
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8])


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Miro Hrončok <mhroncok@redhat.com> - 0.29.22-2
changelog:
  - Remove an obsoleted patch
  - Remove old Obsoletes and Conflicts
  - Update description
  - Provide cython, python3-cython


author: Tomas Orsava <torsava@redhat.com> - 0.29.22-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Jan Grulich <jgrulich@redhat.com> - 1.12.9-5
changelog:
  - Fix arbitrary code execution via crafted symlinks in sandbox-expose options
    Resolves: RHEL-165644
  - Fix arbitrary file deletion on host via improper cache file path validation
    Resolves: RHEL-170172


author: Tomas Popela <tpopela@redhat.com> - 34-2
changelog:
  - Sync with Fedora
  - Correctly substitute /app/lib in flatpak-builder defaults.json ldflags (by klember)
  - Include fonts-dirs.xml in fontconfig flatpak configuration (by tagoh)
  - Add 05-flatpak-fontpath.conf that forces a different MD5 for fontconfig cache to avoid
    conflict between caches on host and flatpak (by tagoh)


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-7
changelog:
  - Resolves: RHEL-138206
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138228
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138158
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-3
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363
    Resolves: RHEL-142348, RHEL-142332


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-6
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081
    Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032
    Resolves: RHEL-149043, RHEL-149066, RHEL-155994


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-8
changelog:
  - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984)
  - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983)
    Resolves: RHEL-162960, RHEL-162986


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-9
changelog:
  - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986)
  - Fix growth of preallocated buffers (CVE-2026-27951)
  - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775)
  - Add DSP format checks (CVE-2026-31884)
  - Fix DSP array bounds checks (CVE-2026-31883)
  - Fix DSP array bounds checks (CVE-2026-31885)
  - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985)
    Resolves: RHEL-168466, RHEL-169222, RHEL-161048, RHEL-161483
    Resolves: RHEL-161520, RHEL-161086, RHEL-167804


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-43
changelog:
  - Backport passwordless feature to RHEL 9
    Resolves: https://redhat.atlassian.net/browse/RHEL-139178


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-44
changelog:
  - Add pam-extension helpers in pam-extensions-devel
    Related: https://redhat.atlassian.net/browse/RHEL-139178


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-45
changelog:
  - Update how GDM handles Registering session/display
    to properly terminate plymouth
    Resolves: https://redhat.atlassian.net/browse/RHEL-178686


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-46
changelog:
  - Fix last change when setting xsession program
    Related: https://redhat.atlassian.net/browse/RHEL-178686


author: Joan Torres Lopez <joantolo@redhat.com> - 40.1-47
changelog:
  - Create display in "legacy-xorg" mode checking displays in tty
    Resolves: https://redhat.atlassian.net/browse/RHEL-180822


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT	
    compatibility. (RHEL-109622)


author: Frédéric Bérat <fberat@redhat.com> - 2.34-265
changelog:
  - Fix null pointer dereference and assertion failures in __nss_database_get
    (bug 28940) (RHEL-150269)


author: Joonas Sarajärvi <muep@iki.fi> - 0.9.9.8-1
changelog:
  - New upstream release (#1823615)
  - pkgconfig support is no longer supported in upstream and not shipped


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Kalev Lember <klember@redhat.com> - 1.33-1
changelog:
  - Update to 1.33
  - Switch to meson build system
  - Explicitly byte-compile python files using py_byte_compile macro


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-2
changelog:
  - Verify IMA signature to make sure it's correct (RHEL-105471)
  - Drop old libimaevm.so.4 (RHEL-82797)


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Eugene Syromiatnikov <esyr@redhat.com> - 23.11-2
changelog:
  - Revert commit "lib: update detection of non-architectural L3CAT" that removed
    L3CAT detection support on Tiger Lake and Erkhart Lake CPUs (RHEL-22729)


author: Tony Camuso <tcamuso@redhat.com> - 25.04-1
changelog:
  - Update to latest upstream.
  - Clean up install paths, drop obsolete patches, and improve flag injection
  handling
  - Replaced hard-coded install paths in Makefiles with sed-based DESTDIR
    fixes for lib, pqos, rdtset, and membw
    - Using sed during %prep is more robust and version-agnostic than patching,
      which requires rebasing each release
  - Relocated admin tools (pqos*, rdtset) from /usr/bin to /usr/sbin for FHS
    compliance
    - These tools require root and interact with system-level cache controls
  - Updated %files to match SONAME bump (libpqos.so.5 -> libpqos.so.6) introduced
    upstream
  - Dropped patches 0001, 0002, 0004, 0005
    - 0001/0002 replaced by sed
  - Ensure CFLAGS and LDFLAGS are augmented, not overridden by using sed to
    convert assignments to +=
    - Ensures compatibility with distro-injected flags (e.g. -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection,
      hardening) without carrying a version-specific patch
    Resolves: RHEL-122380


author: Tony Camuso <tcamuso@redhat.com> - 25.04-1
changelog:
  - Update to latest upstream.
  - Clean up install paths, drop obsolete patches, and improve flag injection
  handling
  - Replaced hard-coded install paths in Makefiles with sed-based DESTDIR
    fixes for lib, pqos, rdtset, and membw
    - Using sed during %prep is more robust and version-agnostic than patching,
      which requires rebasing each release
  - Relocated admin tools (pqos*, rdtset) from /usr/bin to /usr/sbin for FHS
    compliance
    - These tools require root and interact with system-level cache controls
  - Updated %files to match SONAME bump (libpqos.so.5 -> libpqos.so.6) introduced
    upstream
  - Dropped patches 0001, 0002, 0004, 0005
    - 0001/0002 replaced by sed
  - Ensure CFLAGS and LDFLAGS are augmented, not overridden by using sed to
    convert assignments to +=
    - Ensures compatibility with distro-injected flags (e.g. -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection,
      hardening) without carrying a version-specific patch
    Resolves: RHEL-122380


author: Vladislav Dronov <vdronov@redhat.com> - 1.9.0-2
changelog:
  - Enable Intel CET support and install tests
  - Enable Intel CET support in assembler sources
    (https://github.com/intel/qpl/pull/56)
  - Make tests installable as intel-qpl-tests package
    (https://github.com/intel/qpl/pull/57)
  - Build a standalone googletest-1.14.0 library as static
  - Switch SANITIZE_THREADS off as ThreadSanitizer introduces massive
    overhead
  - Fix accel_conf.sh warning
  - Adjust the package description
  - Adjust a test set run in a check stage
  - Adjust the package files layout


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73554
  - Related: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-3
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-73554
  - Related: RHEL-74302
  - Related: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-1
changelog:
  - Update to 8u482-b08 (GA).
  - Update release notes for 8u482-b08.
  - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this
  - Turn on system FreeType as on later JDK versions and add to _privatelibs
  - Set bundled FreeType version to 2.13.2 following JDK-8316028
  - Bump LCMS 2 version to 2.14.0 following JDK-8297088
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-142687
  - Resolves: RHEL-139534
  - Resolves: RHEL-131588
  - Resolves: RHEL-131600
  - Resolves: RHEL-142875
  - Resolves: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142687
  - Related: RHEL-139534
  - Related: RHEL-131588
  - Related: RHEL-131600
  - Related: RHEL-142875
  - Related: RHEL-142697


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-3
changelog:
  - Update tagging scripts to include signature checks and correctly handle gating
  - Add gating scripts to simplify obtaining results and waiving issues
  - Resolves: RHEL-147634
  - Resolves: RHEL-151197


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.18+7 (EA)
  - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
  - Set updatever to 18
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.18+7-ea.tar.xz
  - Set bundled libpng version to 1.6.51
  - Resolves: RHEL-131590
  - Resolves: RHEL-131601
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-1
changelog:
  - Update to jdk-17.0.18+8 (GA)
  - Add to .gitignore openjdk-17.0.18+8.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.18+8.tar.xz
  - Resolves: RHEL-139552
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Set rpmrelease to 2
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set fipsver to e1780dd5d39
  - Resolves: RHEL-122136


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Add test to ensure blocked.certs is valid (OPENJDK-4362)
  - Restore NEWS file so portable can be rebuilt
  - Resolves: RHEL-149327


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-2
changelog:
  - Set portablerelease to 2
  - Remove test to ensure blocked.certs is valid, done in portable
  - Related: RHEL-122136
  - Related: RHEL-131590
  - Related: RHEL-131601
  - Related: RHEL-139552
  - Related: RHEL-149327


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142859
  - Resolves: RHEL-139560
  - Resolves: RHEL-131592
  - Resolves: RHEL-131602
  - Resolves: RHEL-122121
  - Resolves: RHEL-142820
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-142859
  - Related: RHEL-139560
  - Related: RHEL-131592
  - Related: RHEL-131602
  - Related: RHEL-122121
  - Related: RHEL-142820


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86635


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-1
changelog:
  - Update to jdk-25.0.2+10 (GA)
  - Update release notes to 25.0.2+10
  - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch
  - Test for java.security's existence in create-redhat-properties-files.bash
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-139577
  - Resolves: RHEL-143373
  - Resolves: RHEL-143368
  - Resolves: RHEL-142856
  - Resolves: RHEL-142808


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.2.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-139577
  - Related: RHEL-142856
  - Related: RHEL-142808


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Vladislav Dronov <vdronov@redhat.com> - 3.7.0-1
changelog:
  - Update to the upstream v3.7.0 @ e783cf1c (RHEL-176349)
  - Fix PowerPC architecture detection code
  - Simplify jent_get_nstime() for PowerPC
  - Restore previous jitterentropy public api


author: Tomas Halman <thalman@redhat.com> - 1.6-21
changelog:
  - Fix CVE-2026-40164 - Denial of Service via crafted JSON object causing hash collisions
  - Resolves: RHEL-168186


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-692.el9]
changelog:
  - l2tp: avoid one data-race in l2tp_tunnel_del_work() (Guillaume Nault) [RHEL-152697]
  - l2tp: reset skb control buffer on xmit (Guillaume Nault) [RHEL-152697]
  - gpu: host1x: Add MLOCK recovery for rest of engines (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Allow drivers to control VF BAR size (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Check that VF BAR fits within the reservation (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Allow IOV resources to be resized in pci_resize_resource() (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Add pci_resource_num_to_vf_bar() to convert VF BAR number to/from IOV resource (Anusha Srivatsa) [RHEL-158926]
  - PCI/IOV: Restore VF resizable BAR state after reset (Anusha Srivatsa) [RHEL-158926]
  - PCI: Cache offset of Resizable BAR capability (Anusha Srivatsa) [RHEL-158926]
  - workqueue: Add system_percpu_wq and system_dfl_wq (Anusha Srivatsa) [RHEL-158926]
  - gpio: tegra186: Support multi-socket devices (Charles Mirabile) [RHEL-151652]
  - gpio: tegra186: Simplify GPIO line name prefix handling (Charles Mirabile) [RHEL-151652]
  - redhat/configs: Enable additional RV monitors on debug kernels (Gabriele Monaco) [RHEL-116707]
  - redhat/configs: Enable sched and rtapp RV monitors (Gabriele Monaco) [RHEL-116707]
  - rv: Replace non-existing rt_or_dl_task() in ltl monitors (Gabriele Monaco) [RHEL-116707]
  - rv: Fix wrong arguments to __assign_str() in tracepoints (Gabriele Monaco) [RHEL-116707]
  - perf test: Ensure lock contention using pipe mode (Michael Petlan) [RHEL-141682]
  - perf sched timehist: decode process names of processes in zombie state (Anubhav Shelat) [RHEL-33442]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-693.el9]
changelog:
  - x86/msr: Rename 'wrmsrl_on_cpu()' to 'wrmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'wrmsrl_safe_on_cpu()' to 'wrmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (David Arcari) [RHEL-128565]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: disable wakeup_mode during hibernation (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: Add Dell 16 Plus 2-in-1 to dmi_vgbs_allow_list (David Arcari) [RHEL-128565]
  - platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list (David Arcari) [RHEL-128565]
  - platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks (David Arcari) [RHEL-128565]
  - platform/x86: int0002: Remove IRQF_ONESHOT from request_irq() (David Arcari) [RHEL-128565]
  - platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable (David Arcari) [RHEL-128565]
  - platform/x86: intel_telemetry: Fix PSS event register mask (David Arcari) [RHEL-128565]
  - platform/x86: intel_telemetry: Fix swapped arrays in PSS output (David Arcari) [RHEL-128565]
  - platform/x86/intel/vsec: Add Nova Lake PUNIT support (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Remove double empty line (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Enable substate residencies for multiple PMCs (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Move LPM mode attributes to PMC (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmc: Change LPM mode fields to u8 (David Arcari) [RHEL-128565]
  - platform/x86/intel/uncore-freq: Replace sprintf() with sysfs_emit() (David Arcari) [RHEL-128565]
  - platform/x86/intel/uncore-freq: Replace sprintf() with scnprintf() (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmt/discovery: use valid device pointer in dev_err_probe (David Arcari) [RHEL-128565]
  - platform/x86/intel/pmt: Fix kobject memory leak on init failure (David Arcari) [RHEL-128565]
  - platform/x86: intel/pmt: Replace sprintf() with sysfs_emit() (David Arcari) [RHEL-128565]
  - platform/x86: intel: punit_ipc: fix memory corruption (David Arcari) [RHEL-128565]
  - New configs in drivers/platform (David Arcari) [RHEL-128565]
  - platform/x86/intel: Introduce Intel Elkhart Lake PSE I/O (David Arcari) [RHEL-128565]
  - platform/x86/intel/speed_select_if: Convert PCIBIOS_* return codes to errnos (David Arcari) [RHEL-128565]
  - platform/x86/intel/hid: Add Nova Lake support (David Arcari) [RHEL-128565]
  - gfs2: Clean up SDF_JOURNAL_LIVE flag handling (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: No longer thaw filesystems during a withdraw (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: gfs2_freeze_unlock cleanup (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Refcounting fix in gfs2_thaw_super (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Minor gfs2_{freeze,thaw}_super cleanup (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Withdraw immediately in gfs2_trans_add_meta (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: New gfs2_withdraw_helper (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Clean up properly during a withdraw (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Rename gfs2_{gl_dq_holders => withdraw_glocks} (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: fix infinite loop when checking ail item count before go_inval" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Allow some glocks to be used during withdraw" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Check for log write errors before telling dlm to unlock" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: fix a deadlock on withdraw-during-mount" (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (6/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (5/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (4/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (3/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (2/6) (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: Force withdraw to replay journals and wait for it to finish" (1/6) (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Follow-up to flag rename in sysfs status file (Andreas Gruenbacher) [RHEL-65700]
  - Revert "gfs2: don't stop reads while withdraw in progress" (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Rename LM_FLAG_{NOEXP -> RECOVER} (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Kill gfs2_io_error_bh_wd (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Withdraw immediately on log write errors (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Fix freeze consistency check in log_write_header (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Get rid of delayed withdraws (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Fix usage of bio->bi_status in gfs2_end_log_write (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Asynchronous withdraw (Andreas Gruenbacher) [RHEL-65700]
  - gfs2: Add clean argument to lm_unmount hook (Andreas Gruenbacher) [RHEL-65700]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-694.el9]
changelog:
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165107]
  - Documentation/rtla: Document --bpf-action option (Tomas Glozar) [RHEL-153391]
  - Documentation/rtla: Rename sample/ to example/ (Tomas Glozar) [RHEL-153391]
  - rtla/tests: Run Test::Harness in verbose mode (Tomas Glozar) [RHEL-153391]
  - rtla/tests: Test BPF action program (Tomas Glozar) [RHEL-153391]
  - rtla/timerlat: Add example for BPF action program (Tomas Glozar) [RHEL-153391]
  - rtla/timerlat: Add --bpf-action option (Tomas Glozar) [RHEL-153391]
  - rtla/timerlat: Support tail call from BPF program (Tomas Glozar) [RHEL-153391]
  - tools/power turbostat: Allow execution to continue after perf_l2_init() failure (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix delimiter bug in print functions (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix --show/--hide for individual cpuidle counters (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix incorrect format variable (David Arcari) [RHEL-128571]
  - tools/power turbostat: Consistently use print_float_value() (David Arcari) [RHEL-128571]
  - tools/power/turbostat: Fix microcode patch level output for AMD/Hygon (David Arcari) [RHEL-128571]
  - tools/power turbostat: Eliminate unnecessary data structure allocation (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix swidle header vs data display (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix illegal memory access when SMT is present and disabled (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix AMD RAPL regression (David Arcari) [RHEL-128571]
  - tools/power turbostat: version 2026.02.14 (David Arcari) [RHEL-128571]
  - tools/power turbostat: Fix and document --header_iterations (David Arcari) [RHEL-128571]
  - tools/power turbostat: Use strtoul() for iteration parsing (David Arcari) [RHEL-128571]
  - tools/power turbostat: Favor cpu# over core# (David Arcari) [RHEL-128571]
  - tools/power turbostat: Expunge logical_cpu_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Enhance HT enumeration (David Arcari) [RHEL-128571]
  - tools/power turbostat: Simplify global core_id calculation (David Arcari) [RHEL-128571]
  - tools/power turbostat: Unify even/odd/average counter referencing (David Arcari) [RHEL-128571]
  - tools/power turbostat: Allocate average counters dynamically (David Arcari) [RHEL-128571]
  - tools/power turbostat: Delete core_data.core_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Rename physical_core_id to core_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Cleanup package_id (David Arcari) [RHEL-128571]
  - tools/power turbostat: Cleanup internal use of "base_cpu" (David Arcari) [RHEL-128571]
  - tools/power turbostat: Add L2 cache statistics (David Arcari) [RHEL-128571]
  - tools/power turbostat: Remove redundant newlines from err(3) strings (David Arcari) [RHEL-128571]
  - tools/power turbostat: Allow more use of is_hybrid flag (David Arcari) [RHEL-128571]
  - tools/power turbostat: Rename "LLCkRPS" column to "LLCMRPS" (David Arcari) [RHEL-128571]
  - tools/power turbostat.8: Document the "--force" option (David Arcari) [RHEL-128571]
  - tools/power turbostat: Harden against unexpected values (David Arcari) [RHEL-128571]
  - tools/power turbostat: Dump hypervisor name (David Arcari) [RHEL-128571]
  - tools/power turbostat: Dump CPUID.1.ECX[31] (Hypervisor) (David Arcari) [RHEL-128571]
  - tools/power turbostat: Dump CPUID(1) consistently with CPUID(6) (David Arcari) [RHEL-128571]
  - tools/power turbostat: AMD: msr offset 0x611 read failed: Input/output error (David Arcari) [RHEL-128571]
  - tools/power turbostat: version 2025.12.02 (David Arcari) [RHEL-128571]
  - tools/power turbostat: Print wide names only for RAW 64-bit columns (David Arcari) [RHEL-128571]
  - tools/power turbostat: Print percentages in 8-columns (David Arcari) [RHEL-128571]
  - tools/power turbostat: Print "nan" for out of range percentages (David Arcari) [RHEL-128571]
  - tools/power turbostat: Enhance perf probe (David Arcari) [RHEL-128571]
  - tools/power turbostat: Validate RAPL MSRs for AWS Nitro Hypervisor (David Arcari) [RHEL-128571]
  - tools/power turbostat: Add run-time MSR driver probe (David Arcari) [RHEL-128571]
  - tools/power turbostat: Set per_cpu_msr_sum to NULL after free (David Arcari) [RHEL-128571]
  - tools/power turbostat: Add LLC stats (David Arcari) [RHEL-128571]
  - tools/power turbostat: Remove dead code (David Arcari) [RHEL-128571]
  - tools/power turbostat: Refactor floating point printout code (David Arcari) [RHEL-128571]
  - tools/power turbostat.8: Update example (David Arcari) [RHEL-128571]
  - tools/power turbostat: Refactor added-counter value printing code (David Arcari) [RHEL-128571]
  - tools/power turbostat: Refactor added column header printing (David Arcari) [RHEL-128571]
  - tools/power turbostat: Regression fix Uncore MHz printed in hex (David Arcari) [RHEL-128571]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-695.el9]
changelog:
  - iommu/ipmmu-vmsa: fix device leak on of_xlate() (Jerry Snitselaar) [RHEL-147906]
  - of/device: Fix up of_dma_configure_id() stub (Jerry Snitselaar) [RHEL-147906]
  - iommu/tegra: fix device leak on probe_device() (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-qcom: Enable use of all SMR groups when running bare-metal (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Set INTEL_IOMMU_FLOPPY_WA depend on BLK_DEV_FD (Jerry Snitselaar) [RHEL-147906]
  - lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets (Jerry Snitselaar) [RHEL-147906]
  - dma-mapping: benchmark: Restore padding to ensure uABI remained consistent (Jerry Snitselaar) [RHEL-147906]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Jerry Snitselaar) [RHEL-147906]
  - dma/pool: eliminate alloc_pages warning in atomic_pool_expand (Jerry Snitselaar) [RHEL-147906]
  - dma/pool: distinguish between missing and exhausted atomic pools (Jerry Snitselaar) [RHEL-147906]
  - iommufd: Make vfio_compat's unmap succeed if the range is already empty (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Fix unused invalidation hint in qi_desc_iotlb (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Flush piotlb for SVM and Nested domain (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Flush cache for PASID table before using it (Jerry Snitselaar) [RHEL-147906]
  - iommu/io-pgtable-arm: fix size_t signedness bug in unmap path (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Fix error check in arm_smmu_alloc_cd_tables (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Remove IAS (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence (Jerry Snitselaar) [RHEL-147906]
  - iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Use core's primary handler and set IRQF_ONESHOT (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Fix pci_segment memleak in alloc_pci_segment() (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Propagate the error code returned by __modify_irte_ga() in modify_irte_ga() (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Fix error path in amd_iommu_probe_device() (Jerry Snitselaar) [RHEL-147906]
  - iommu/amd: Block identity domain when SNP enabled (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: PRS isn't usable if PDS isn't supported (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Only handle IOPF for SVA when PRI is supported (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Fix race condition during PASID entry replacement (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Clear Present bit before tearing down context entry (Jerry Snitselaar) [RHEL-147906]
  - iommu/vt-d: Clear Present bit before tearing down PASID entry (Jerry Snitselaar) [RHEL-147906]
  - selftests: net: check jq command is supported (Guillaume Nault) [RHEL-146140]
  - selftests: rtnetlink: Fix do_test_address_proto() (Guillaume Nault) [RHEL-146140]
  - selftests: rtnetlink: Add an address proto test (Guillaume Nault) [RHEL-146140]
  - net: ipv4: Allow changing IPv4 address protocol (Guillaume Nault) [RHEL-146140]
  - net: Add new protocol attribute to IP addresses (Guillaume Nault) [RHEL-146140]
  - l2tp: do not use sock_hold() in pppol2tp_session_get_sock() (Guillaume Nault) [RHEL-152688]
  - ppp: fix race conditions in ppp_fill_forward_path (Guillaume Nault) [RHEL-152688]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-696.el9]
changelog:
  - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-148561]
  - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-148561]
  - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-148561]
  - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-148561]
  - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-148561]
  - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-148561]
  - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-148561]
  - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-148561]
  - KVM: arm64: Discard PC update state on vcpu reset (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix vma_shift staleness on nested hwpoison path (Eric Auger) [RHEL-154746]
  - KVM: arm64: nv: Report addrsz fault at level 0 with a bad VTTBR.BADDR (Eric Auger) [RHEL-154746]
  - KVM: arm64: nv: Check S2 limits based on implemented PA size (Eric Auger) [RHEL-154746]
  - KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault (Eric Auger) [RHEL-154746]
  - KVM: arm64: Eagerly init vgic dist/redist on vgic creation (Eric Auger) [RHEL-154746]
  - KVM: arm64: nv: Add trap config for DBGWCR<15>_EL1 (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix Trace Buffer trapping for protected VMs (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix EL2 S1 XN handling for hVHE setups (Eric Auger) [RHEL-154746]
  - KVM: arm64: Move pagetable definitions to common header (Eric Auger) [RHEL-154746]
  - KVM: arm64: Remove ISB after writing FPEXC32_EL2 (Eric Auger) [RHEL-154746]
  - KVM: arm64: Fix comment in fpsimd_lazy_switch_to_host() (Eric Auger) [RHEL-154746]
  - KVM: arm64: Use kvzalloc() for kvm struct allocation (Eric Auger) [RHEL-154746]
  - KVM: arm64: Drop useless __GFP_HIGHMEM from kvm struct allocation (Eric Auger) [RHEL-154746]
  - KVM: arm64: Prevent access to vCPU events before init (Eric Auger) [RHEL-154746]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-697.el9]
changelog:
  - x86/resctrl: Fix memory bandwidth counter width for Hygon (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add missing resctrl initialization for Hygon (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Update documentation for telemetry events (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Enable RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Move RMID initialization to first mount (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Compute number of RMIDs as minimum across resources (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Handle number of RMIDs supported by RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Fix non-contiguous CBM check for Hygon (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Add CPU vendor detection for Hygon (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Define CPU vendor IDs as bits to match usage (Gavin Shan) [RHEL-163713]
  - selftests/resctrl: Fix a division by zero error on Hygon (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add energy/perf choices to rdt boot option (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Handle domain creation/deletion for RDT_RESOURCE_PERF_PKG (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Refactor rmdir_mondata_subdir_allrdtgrp() (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Refactor mkdir_mondata_subdir() (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Read telemetry events (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Find and enable usable telemetry events (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Add architectural event pointer (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Fill in details of events for performance and energy GUIDs (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Discover hardware telemetry events (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Emphasize that L3 monitoring resource is required for summing domains (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Add and initialize a resource for package scope monitoring (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Add an architectural hook called for first mount (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Support binary fixed point event counters (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Handle events that can be read from any CPU (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Make event details accessible to functions when reading events (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Rename some L3 specific functions (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Use struct rdt_domain_hdr when reading counters (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Split L3 dependent parts out of __mon_event_count() (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Refactor domain create/remove using struct rdt_domain_hdr (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Clean up domain_remove_cpu_ctrl() (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Refactor domain_remove_cpu_mon() ready for new domain types (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Move L3 initialization into new helper function (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Improve domain type checking (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Update bit_usage to reflect io_alloc (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to modify io_alloc capacity bitmasks (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Modify struct rdt_parse_data to pass mode and CLOSID (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to display io_alloc CBMs (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add user interface to enable/disable io_alloc feature (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to display "io_alloc" support (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Implement "io_alloc" enable/disable handlers (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Detect io_alloc feature (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add SDCIAE feature in the command line options (Gavin Shan) [RHEL-163713]
  - x86/cpufeatures: Add support for L3 Smart Data Cache Injection Allocation Enforcement (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Consider sparse masks when initializing new group's allocation (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Fix NULL pointer dereference with events force-disabled in mbm_event mode (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Support Sub-NUMA Cluster (SNC) mode on Clearwater Forest (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Fix counter auto-assignment on mkdir with mbm_event enabled (Gavin Shan) [RHEL-163713]
  - MAINTAINERS: resctrl: Add myself as reviewer (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Configure mbm_event mode if supported (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce the interface to switch between monitor modes (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Disable BMEC event configuration when mbm_event mode is enabled (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce the interface to modify assignments in a group (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce mbm_L3_assignments to list assignments in a group (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Auto assign counters on mkdir and clean up on group removal (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce mbm_assign_on_mkdir to enable assignments on mkdir (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Provide interface to update the event configurations (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add event configuration directory under info/L3_MON/ (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Support counter read/reset with mbm_event assignment mode (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Pass struct rdtgroup instead of individual members (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add the functionality to unassign MBM events (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add the functionality to assign MBM events (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Implement resctrl_arch_config_cntr() to assign a counter with ABMC (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce event configuration field in struct mon_evt (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add data structures and definitions for ABMC assignment (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce interface to display number of free MBM counters (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce mbm_cntr_cfg to track assignable counters per domain (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Add resctrl file to display number of assignable counters (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Introduce the interface to display monitoring modes (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add support to enable/disable AMD ABMC feature (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Detect Assignable Bandwidth Monitoring feature details (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Consolidate monitoring related data from rdt_resource (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Add ABMC feature in the command line options (Gavin Shan) [RHEL-163713]
  - x86/cpufeatures: Add support for Assignable Bandwidth Monitoring Counters (ABMC) (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Prepare for more monitor events (Gavin Shan) [RHEL-163713]
  - x86/resctrl: Remove the rdt_mon_features global variable (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Replace architecture event enabled checks (Gavin Shan) [RHEL-163713]
  - x86,fs/resctrl: Consolidate monitor event descriptions (Gavin Shan) [RHEL-163713]
  - fs/resctrl: Optimize code in rdt_get_tree() (Gavin Shan) [RHEL-163713]
  - Documentation: Fix filesystems typos (Gavin Shan) [RHEL-163713]
  - Prevent stripping of rtla and rv binaries during install (John Kacur) [RHEL-85867 RHEL-96913]
  - Fix rtla and rv debuginfo package definitions (John Kacur) [RHEL-85867 RHEL-96913]
  - Add debuginfo package for rtla tool (John Kacur) [RHEL-85867 RHEL-96913]
  - Add debuginfo package for rv tool (John Kacur) [RHEL-85867 RHEL-96913]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-698.el9]
changelog:
  - thermal: intel: intel_soc_dts_thermal: Switch to new Intel CPU model defines (David Arcari) [RHEL-128567]
  - thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: soc_slider: Set offset only for balanced mode (David Arcari) [RHEL-128567]
  - thermal: int340x: Fix sysfs group leak on DLVR registration failure (David Arcari) [RHEL-128567]
  - drivers: thermal: intel: tcc_cooling: Drop redundant local variable (David Arcari) [RHEL-128567]
  - thermal: intel: x86_pkg_temp_thermal: Handle invalid temperature (David Arcari) [RHEL-128567]
  - thermal: intel: Use sysfs_emit() in a sysfs show function (David Arcari) [RHEL-128567]
  - thermal: intel: fix typo "nagative" in comment for cpu argument (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Use sysfs_emit{_at}() in sysfs show functions (David Arcari) [RHEL-128567]
  - thermal: int340x: processor_thermal: Enable slow workload type hints (David Arcari) [RHEL-128567]
  - thermal: intel: intel_pch_thermal: Drop explicit driver data clearing (David Arcari) [RHEL-128567]
  - thermal: intel: intel_tcc_cooling: Add CPU models in the support list (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Enable power slider interface for Wildcat Lake (David Arcari) [RHEL-128567]
  - powercap: intel_rapl: Prepare read_raw() interface for atomic-context callers (David Arcari) [RHEL-128567]
  - ACPI: DPTF: Support Nova Lake (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Add DLVR support for Nova Lake (David Arcari) [RHEL-128567]
  - thermal: int340x: processor_thermal: Add Nova Lake processor thermal device (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Replace sprintf() with sysfs_emit() (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Use symbolic constant for UUID comparison (David Arcari) [RHEL-128567]
  - thermal: intel: Select INT340X_THERMAL from INTEL_SOC_DTS_THERMAL (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Power Slider: Validate slider_balance range (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Add module parameter to change slider offset (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Add module parameter for balanced Slider (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Enable power slider interface for Panther Lake (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Add support for power slider (David Arcari) [RHEL-128567]
  - thermal: intel: int340x: Remove redundant acpi_has_method() call (David Arcari) [RHEL-128567]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128567]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128567]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (David Arcari) [RHEL-128567]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (David Arcari) [RHEL-128567]
  - x86/msr: Rename 'wrmsrl_on_cpu()' to 'wrmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128563]
  - x86/msr: Rename 'rdmsrl_on_cpu()' to 'rdmsrq_on_cpu()' [partial] (David Arcari) [RHEL-128563]
  - x86/msr: Rename 'wrmsrl_safe_on_cpu()' to 'wrmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128563]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128563]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128563]
  - x86/msr: Rename 'wrmsrl()' to 'wrmsrq()' [partial] (David Arcari) [RHEL-128563]
  - x86/msr: Rename 'rdmsrl()' to 'rdmsrq()' [partial] (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Add comment explaining nominal_perf usage for performance policy (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Call cppc_set_auto_sel() only for online CPUs (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Add static asserts for EPP indices (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Fix some whitespace issues (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Adjust return values in amd_pstate_update_status() (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Make amd_pstate_get_mode_string() never return NULL (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Drop NULL value from amd_pstate_mode_string (David Arcari) [RHEL-128563]
  - cpufreq/amd-pstate: Use sysfs_match_string() for epp (David Arcari) [RHEL-128563]
  - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-169569] {CVE-2025-68724}
  - Documentation/powerpc: update fadump implementation details (Mamatha Inamdar) [RHEL-138954]
  - powerpc/fadump: add hotplug_ready sysfs interface (Mamatha Inamdar) [RHEL-138954]
  - powerpc: make fadump resilient with memory add/remove events (Mamatha Inamdar) [RHEL-138954]
  - sfc: add transmit timestamping support (Izabela Bakollari) [RHEL-74331]
  - wifi: ath10k: fix station lookup failure during disconnect (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cw1200: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: correct use sequence of driver_data in skb->info (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mvm: pause TCM on fast resume (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: cancel mlo_scan_start_wk (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: correctly decode TTLM with default link map (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: ignore link disabled flag from userspace (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: apply advertised TTLM from association response (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: parse all TTLM entries (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: don't perform DA check on S1G beacon (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Fix wrong P2P device link id issue (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix dead lock while flushing management frames (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: cancel scan only on active scan vdev (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: correctly check if CSA is active (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: Fix bitrate calculation overflow for HE rates (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: don't force radio frequency check in freq_to_idx() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath10k: fix dma_free_coherent() pointer (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: collect station statistics earlier when disconnect (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: restore non-chanctx injection behaviour (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211_hwsim: disable BHs for hwsim_radio_lock (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: don't iterate not running interfaces (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: avoid kernel-infoleak from struct iw_point (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Remove blank line after mt792x firmware version dmesg (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - Revert "wifi: mt76: Strip whitespace from build ddate" (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: ocb: skip rx_no_sta when interface is not joined (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: do not use old MBSSID elements (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: don't WARN for connections on invalid channels (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: sme: store capped length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: fix list iteration in ieee80211_add_virtual_monitor() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: Discard Beacon frames to non-broadcast address (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - Revert "wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users" (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtlwifi: 8192cu: fix tid out of range in rtl92cu_tx_fill_desc() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: allow sharing identical chanctx for S1G interfaces (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: include s1g_primary_2mhz when comparing chandefs (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: include s1g_primary_2mhz when sending chandef (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: correct FILS status codes (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - mt76: mt7615: Fix memory leak in mt7615_mcu_wtbl_sta_add() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Strip whitespace from build ddate (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: Add missing locking in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: skip ieee80211_iter_keys() on scanning link remove (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: skip deflink accounting for offchannel links (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: move mt7996_update_beacons under mt76 mutex (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: grab mt76 mutex in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7925: ensure the 6GHz A-MPDU density cap from the hardware. (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix using wrong phy to start in mt7996_mac_restart() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix MLO set key and group key issues (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix MLD group index assignment (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: use correct link_id when filling TXD and TXP (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: set link_valid field when initializing wcid (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix teardown command for an MLD peer (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix several fields in mt7996_mcu_bss_basic_tlv() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: support fixed rate for link station (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix implicit beamforming support for mt7992 (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: no need to wait ACK event for SDO command (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix max nss value when getting rx chainmask (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7925: cqm rssi low/high event notify (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: adjust BSS conf pointer handling (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - Revert "wifi: mt76: mt792x: improve monitor interface handling" (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mmio_*_copy fix byte order and alignment (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Use of_reserved_mem_region_to_resource() for "memory-region" (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix typos in comments (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Add the capability to set TX token start ID (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Add mt76_dev pointer in mt76_queue struct. (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Move Q_READ/Q_WRITE definitions in dma.h (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: Remove useless check in mt7996_msdu_page_get_from_cache() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: relicense to BSD-3-Clause-Clear (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: fix license/copyright of util.h (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: use GFP_DMA32 for page_pool buffer allocation (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7915: add bf backoff limit table support (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: Fix DTS power-limits on little endian systems (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: connac: Replace memcpy + hard-coded size with strscpy (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: Remove unnecessary link_id checks in mt7996_tx (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: stop radar detection in cfg80211_leave() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: use cfg80211_leave() in iftype change (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: fix channel switching code (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Enable 40 MHz width by default (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Fix RX channel width reported by RTL8192FU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Fix the 40 MHz subchannel for RTL8192EU, RTL8723BU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Make RTL8192CU, RTL8723AU TX with 40 MHz width (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8852a: correct field mask of reset DAC/ADC FIFO (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw88: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtlwifi: add WQ_UNBOUND to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: refactor CMAC packet handlers (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: refactor CMAC crypt functions (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: utilize the newly defined CMAC constants (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: add generic MMIE struct defines (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: fix CMAC functions not handling errors (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: Add support for 6GHz AP role not relevant AP type (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add default ID 0bda:b831 for RTL8831BU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: use separated function to set RX filter (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: correct user macid mask of RX info for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: update format of addr cam H2C command (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: add addr cam H2C command v1 (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: fill addr cam H2C command by struct (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: align RA H2C format v1 for RTL8922A (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: fw: print band and port where beacon update on (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: phy: ignore DCFO if not defined in chip_info (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: phy: consider type 15 in BB gain table (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: mac: update wcpu_on to download firmware for RTL8922D (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: mac: remove undefined bit B_BE_PPDU_MAC_INFO (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: phy: calling BB pre-init by chips with/without BB MCU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: mac: separate pre-init code before downloading firmware (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: fw: part size to download firmware by header info (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: flush TX queue before deleting key (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: rtw8852bu: Added dev id for ASUS AX57 NANO USB Wifi dongle (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: configure RX antenna if chips can support (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: do RF calibration once setting channel when running pure monitor mode (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: consider data rate/bandwidth/GI for injected packets (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: phy: fix out-of-bounds access in rtw89_phy_read_txpwr_limit() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8852c: add compensation of thermal value from efuse calibration (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: debug: add parser to diagnose along DIAG_MAC fw element (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: fw: parse firmware element of DIAG_MAC (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: pci: add to read PCI configuration space from common code (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: make monitor link info check more specific (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: track MU-MIMO configuration on disabled interfaces (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211/mac80211: Add fallback mechanism for INDOOR_SP connection (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211/mac80211: clean up duplicate ap_power handling (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: use a C99 initializer in wiphy_register (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtlwifi: rtl8188ee: correct allstasleep in P2P PS H2C command (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Enable the new rtw89_8852au module (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw8852au.c (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8852a: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw8852a_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw8852a_dle_mem_usb (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Use the correct power sequences for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: fix doc of struct key_params (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: remove unnecessary vlan NULL check (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: pass frame type to element parsing (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: remove "disabling VHT" message (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: add and use chanctx usage iteration (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: simplify ieee80211_recalc_chanctx_min_def() API (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: remove chanctx to link back-references (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: make link iteration safe for 'break' (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: fix EHT typo (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split NAN definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split P2P definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split S1G definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split EHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split HE definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split VHT definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split HT definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ieee80211: split mesh definitions out (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Fix timeout error during beacon stats retrieval (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Make firmware stats reset caller-driven (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: process TX wait skbs for USB via C2H handler (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: provide TX reports for management frames (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: handle IEEE80211_TX_CTL_REQ_TX_STATUS frames for USB (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: anchor TX URBs (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: fill TX descriptor of FWCMD in shortcut (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: implement C2H TX report handler (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: refine rtw89_core_tx_wait_complete() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: use ieee80211_free_txskb() where appropriate (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: fix leak in rtw89_usb_write_port() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: use common error path for skbs in rtw89_usb_rx_handler() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw88: Add BUFFALO WI-U3-866DHP to the USB ID list (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw88: 8822c: use fixed rate and bandwidth to reply CSI packets (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Enable the new rtw89_8852cu module (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw8852cu.c (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8852c: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw8852c_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw8852c_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8852c: Fix rtw8852c_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Fix rtw89_mac_dmac_func_pre_en_ax() for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_post_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: Prepare rtw89_usb_ops_mac_pre_init() for RTL8852CU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: usb: Move bulk out map to new struct rtw89_usb_info (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Add rtw89_core_get_ch_dma_v2() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8832cu: turn off TX partial mode (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath10k: use = {} to initialize bmi_target_info instead of memset (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath10k: use = {} to initialize pm_qos_request instead of memset (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: unassign arvif on scan vdev create failure (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: enforce vdev limit in ath12k_mac_vdev_create() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Set EHT fixed rates for associated STAs (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: add EHT rates to ath12k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Add EHT fixed GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Add EHT MCS/NSS rates to Peer Assoc (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: add EHT rate handling to existing set rate functions (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: generalize GI and LTF fixed rate functions (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix error handling in creating hardware group (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix reusing m3 memory (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix potential memory leak in ath12k_wow_arp_ns_offload() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: Allow HT Action frame processing on 6 GHz when HE is supported (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rt2x00: add nvmem eeprom support (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: add RX flag to report radiotap VHT information (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: add null check for kzalloc() in iwl_mld_send_proto_offload() (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: check for NULL pointer after kmalloc (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: cfg: fix a few device names (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: Move EMLSR prints to IWL_DL_EHT (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: disable EHT if the device doesn't allow it (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: use FW_CHECK on bad ROC notification (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mvm/mld: report non-HT frames as 20 MHz (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: bump core version for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: fix build when mvm/mld not configured (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: check the validity of noa_len (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: stop checking the firmware's error pointer (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: be more chatty when we fail to find a wifi7 device (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: fw: remove support of several iwl_lari_config_change_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: include raw PHY notification in radiotap (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: update to new sniffer API (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: set wiphy::iftype_ext_capab dynamically (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: support get/set_antenna (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mvm: cleanup unsupported phy command versions (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: fix remaining kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: tests: check listed PCI IDs have configs (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: cfg: add new device names (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: iwlmld is always used for wifi7 devices (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mvm: move rate conversions to utils.c (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: reschedule check_tpt_wk also not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: mld: remove support from of alive notif version 6 (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: iwlwifi: align the name of iwl_alive_ntf_v6 to the convention (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: improve scan time on 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: restart hardware to recover firmware if power-save becomes abnormal (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: 8852c: fix ADC oscillation in 160MHz affecting RX performance (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: regd: apply ACPI policy even if country code is programmed (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: support EHT rate pattern via bitrate mask (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: mlo: handle needed H2C when link switching is requested by stack (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: use skb_dequeue() for queued ROC packets to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: splice C2H events queue to local to prevent racing (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: Add parameters to radio-specific debugfs directories (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: Add debugfs support for multi-radio wiphy (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: fix missing RX bitrate update for mesh forwarding path (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211: default S1G chandef width to 1MHz (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: get probe response chan via ieee80211_get_channel_khz (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211: reset CRC valid after CSA (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: mac80211_hwsim: advertise puncturing feature support (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: cfg80211/mac80211: validate radio frequency range for monitor mode (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rt2x00: check retval for of_get_mac_address (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Assert base_lock is held before allocating REO update element (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: add support for BSS color change (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: Correctly use "ab" macro parameter (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: advertise NL80211_FEATURE_TX_POWER_INSERTION (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: wrap ath11k_mac_op_get_txpower() with lock-aware internal helper (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: relocate some Tx power related functions in mac.c (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: fix peer HE MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath10k: Support for FTM TLV test commands (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Use correct power off sequence for RTL8192CU (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Dump the efuse right after reading it (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Report the signal strength only if it's known (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw89: Replace hardcoded strings with helper functions (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtw88: Add USB ID 2001:3329 for D-Link AC13U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: rtl8xxxu: Add USB ID 2001:3328 for D-Link AN3U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Add MODULE_FIRMWARE() entries (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix TX and RX MCS rate configurations in HE mode (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: fix VHT MCS assignment (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Fix NSS value update in ext_rx_stats (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Defer vdev bring-up until CSA finalize to avoid stale beacon (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: track dropped MSDU buffer type packets in REO exception ring (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Fix MSDU buffer types handling in RX error path (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: restore register window after global reset (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath12k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath11k: Remove struct wmi_bcn_send_from_host_cmd (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - wifi: ath10k: move recovery check logic into a new work (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-163622]
  - bus: mhi: host: pci_generic: Add Foxconn T99W760 modem (Jose Ignacio Tornos Martinez) [RHEL-163621]
  - bus: mhi: ep: add WQ_PERCPU to alloc_workqueue users (Jose Ignacio Tornos Martinez) [RHEL-163621]
  - bus: mhi: host: pci_generic: Add Telit FE990B40 modem support (Jose Ignacio Tornos Martinez) [RHEL-163621]
  - bus: mhi: ep: Make mhi_ep_bus_type const (Jose Ignacio Tornos Martinez) [RHEL-163621]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-699.el9]
changelog:
  - redhat/configs: Enable MPAM options (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Make resctrl_mon_ctx_waiters static (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Fix the check for no monitor components found (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Fix MBA CDP alloc_capable handling on unmount (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Add initial MPAM documentation (Gavin Shan) [RHEL-164227]
  - arm_mpam: Quirk CMN-650's CSU NRDY behaviour (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add workaround for T241-MPAM-6 (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add workaround for T241-MPAM-4 (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add workaround for T241-MPAM-1 (Gavin Shan) [RHEL-164227]
  - arm_mpam: Add quirk framework (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Call resctrl_init() on platforms that can support resctrl (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add empty definitions for assorted resctrl functions (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Update the rmid reallocation limit (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Allow resctrl to allocate monitors (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add support for csu counters (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add monitor initialisation and domain boilerplate (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add kunit test for control format conversions (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add support for 'MB' resource (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Wait for cacheinfo to be ready (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add rmid index helpers (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Convert to/from MPAMs fixed-point formats (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Hide CDP emulation behind CONFIG_EXPERT (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add CDP emulation (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add plumbing against arm64 task and cpu hooks (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Implement helpers to update configuration (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Implement resctrl_arch_reset_all_ctrls() (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (Gavin Shan) [RHEL-164227]
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (Gavin Shan) [RHEL-164227]
  - KVM: arm64: Force guest EL1 to use user-space's partid configuration (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Add helpers to change a task or cpu's MPAM PARTID/PMG values (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Initialise and context switch the MPAMSM_EL1 register (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Add cpu_pm notifier to restore MPAM sysregs (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Advertise the CPUs MPAM limits to the driver (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Drop the CONFIG_EXPERT restriction (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Re-initialise MPAM regs when CPU comes online (Gavin Shan) [RHEL-164227]
  - arm64: mpam: Context switch the MPAM registers (Gavin Shan) [RHEL-164227]
  - KVM: arm64: Make MPAMSM_EL1 accesses UNDEF (Gavin Shan) [RHEL-164227]
  - KVM: arm64: Preserve host MPAM configuration when changing traps (Gavin Shan) [RHEL-164227]
  - arm64/sysreg: Add MPAMSM_EL1 register (Gavin Shan) [RHEL-164227]
  - arm_mpam: Reset when feature configuration bit unset (Gavin Shan) [RHEL-164227]
  - arm_mpam: Ensure in_reset_state is false after applying configuration (Gavin Shan) [RHEL-164227]
  - arm_mpam: Force __iomem casts (Gavin Shan) [RHEL-100931]
  - arm_mpam: Disable preemption when making accesses to fake MSC in kunit test (Gavin Shan) [RHEL-100931]
  - arm_mpam: Fix null pointer dereference when restoring bandwidth counters (Gavin Shan) [RHEL-100931]
  - arm_mpam: Use non-atomic bitops when modifying feature bitmap (Gavin Shan) [RHEL-100931]
  - arm_mpam: Remove duplicate linux/srcu.h header (Gavin Shan) [RHEL-100931]
  - arm_mpam: Stop using uninitialized variables in __ris_msmon_read() (Gavin Shan) [RHEL-100931]
  - MAINTAINERS: new entry for MPAM Driver (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add kunit tests for props_mismatch() (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add kunit test for bitmap reset (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add helper to reset saved mbwu state (Gavin Shan) [RHEL-100931]
  - arm_mpam: Use long MBWU counters if supported (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe for long/lwd mbwu counters (Gavin Shan) [RHEL-100931]
  - arm_mpam: Consider overflow in bandwidth counter state (Gavin Shan) [RHEL-100931]
  - arm_mpam: Track bandwidth counter state for power management (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add mpam_msmon_read() to read monitor value (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add helpers to allocate monitors (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe and reset the rest of the features (Gavin Shan) [RHEL-100931]
  - arm_mpam: Allow configuration to be applied and restored during cpu online (Gavin Shan) [RHEL-100931]
  - arm_mpam: Use a static key to indicate when mpam is enabled (Gavin Shan) [RHEL-100931]
  - arm_mpam: Register and enable IRQs (Gavin Shan) [RHEL-100931]
  - arm_mpam: Extend reset logic to allow devices to be reset any time (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add a helper to touch an MSC from any CPU (Gavin Shan) [RHEL-100931]
  - arm_mpam: Reset MSC controls from cpuhp callbacks (Gavin Shan) [RHEL-100931]
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe the hardware features resctrl supports (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add helpers for managing the locking around the mon_sel registers (Gavin Shan) [RHEL-100931]
  - arm_mpam: Probe hardware to find the supported partid/pmg values (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add MPAM MSC register layout definitions (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add the class and component structures for firmware described ris (Gavin Shan) [RHEL-100931]
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (Gavin Shan) [RHEL-100931]
  - ACPI / MPAM: Parse the MPAM table (Gavin Shan) [RHEL-100931]
  - ACPI: Define acpi_put_table cleanup handler and acpi_get_table_pointer() helper (Gavin Shan) [RHEL-100931]
  - platform: Define platform_device_put cleanup handler (Gavin Shan) [RHEL-100931]
  - arm64: kconfig: Add Kconfig entry for MPAM (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Find cache level by cache-id (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Add acpi_pptt_cache_v1_full to use pptt cache as one structure (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Stop acpi_count_levels() expecting callers to clear levels (Gavin Shan) [RHEL-100931]
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (Gavin Shan) [RHEL-100931]
  - cpumask: Add initialiser to use cleanup helpers (Gavin Shan) [RHEL-100931]
  - ACPICA: MPAM: Correct the typo in struct acpi_mpam_msc_node member (Gavin Shan) [RHEL-100931]
  - ACPICA: Add support for Arm's MPAM ACPI table version 2 (Gavin Shan) [RHEL-100931]
  - platform/x86/amd/pmf: Added a module parameter to disable the Smart PC function (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Introduce new interface to export NPU metrics (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Prevent TEE errors after hibernate (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Use ring buffer to store custom BIOS input values (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Use devm_mutex_init() for mutex initialization (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add BIOS_INPUTS_MAX macro to replace hardcoded array size (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Refactor repetitive BIOS output handling (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Replace magic table id with METRICS_TABLE_ID (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Use explicit SET_CMD/GET_CMD flags in amd_pmf_send_cmd() (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Rename IPU metrics fields to NPU for consistency (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Support new ACPI ID AMDI0108 (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add debug logs for pending requests and custom BIOS inputs (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Call enact function sooner to process early pending requests (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Preserve custom BIOS inputs for evaluating the policies (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add custom BIOS input support for AMD_CPU_ID_PS (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add helper to verify BIOS input notifications are enable/disable (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Update ta_pmf_action structure member (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Extend custom BIOS inputs for more policies (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Fix the custom bios input handling mechanism (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Add support for adjusting PMF PPT and PPT APU thresholds (David Arcari) [RHEL-128575]
  - platform/x86/amd/pmf: Remove redundant ternary operators (David Arcari) [RHEL-128575]
  - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164439]
  - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164439]
  - ipv4: ip_gre: make ipgre_header() robust (Guillaume Nault) [RHEL-152693]
  - ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (Guillaume Nault) [RHEL-152693]
  - erspan: Initialize options_len before referencing options. (Guillaume Nault) [RHEL-152693]
  - arp: do not assume dev_hard_header() does not change skb->head (Guillaume Nault) [RHEL-152693]
  - ip6_gre: make ip6gre_header() robust (Guillaume Nault) [RHEL-152693]
  - net/ip6_tunnel: Prevent perpetual tunnel growth (Guillaume Nault) [RHEL-152693]
  - vxlan: Handle error of rtnl_register_module(). (Guillaume Nault) [RHEL-152693]
  - sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting (Herton R. Krzesinski) [RHEL-157267]
  - iommu/amd: Fix potential out-of-bounds read in iommu_mmio_show (Jerry Snitselaar) [RHEL-140473]
  - redhat/configs: Enable AMD IOMMU DebugFS support (Jerry Snitselaar) [RHEL-140473]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-700.el9]
changelog:
  - tools/power/x86/intel-speed-select: v1.25 release (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Fix file descriptor leak in isolate_cpus() (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Use pkg-config for libnl-3.0 detection (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Allow non root users (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: v1.24 release (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Reset isst_turbo_freq_info for invalid buckets (David Arcari) [RHEL-128562]
  - tools/power/x86/intel-speed-select: Check feature status (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Increase minor version (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Reset core count to 0 (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Correct locked bit width (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Check HWP support before MSR access (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Optimize suspend/resume callbacks (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Check for admin capability for write commands (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Store and restore all domains data (David Arcari) [RHEL-128562]
  - platform/x86: ISST: Add missing write block check (David Arcari) [RHEL-128562]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-701.el9]
changelog:
  - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172207]
  - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172207]
  - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172207]
  - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172207]
  - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172207] {CVE-2026-31431}
  - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172207] {CVE-2026-23060}
  - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172207]
  - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172207] {CVE-2026-31677}
  - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172207] {CVE-2026-31431}
  - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172207]
  - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171433] {CVE-2026-31607}
  - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (CKI Backport Bot) [RHEL-171326] {CVE-2026-31408}
  - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-169810]
  - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-159283]
  - s390/mm: Add missing secure storage access fixups for donated memory (Mete Durlu) [RHEL-168793]
  - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-144961]
  - audit: merge loops in __audit_inode_child() (Ricardo Robaina) [RHEL-145408]
  - audit: Use kzalloc() instead of kmalloc()/memset() in audit_krule_to_data() (Ricardo Robaina) [RHEL-145408]
  - audit: fix comment misindentation in audit.h (Ricardo Robaina) [RHEL-145408]
  - audit: add a missing tab (Ricardo Robaina) [RHEL-145408]
  - audit: fix typo in auditfilter.c comment (Ricardo Robaina) [RHEL-145408]
  - audit: Replace deprecated strcpy() with strscpy() (Ricardo Robaina) [RHEL-145408]
  - audit: fix indentation in audit_log_exit() (Ricardo Robaina) [RHEL-145408]
  - audit: mark audit_log_vformat() with __printf() attribute (Ricardo Robaina) [RHEL-145408]
  - auditsc: replace memcpy() with strscpy() (Ricardo Robaina) [RHEL-145408]
  - audit: use fsnotify group lock helpers (Ricardo Robaina) [RHEL-145408]
  - x86/kaslr: Recognize all ZONE_DEVICE users as physaddr consumers (Ricardo Robaina) [RHEL-144439]
  - kaslr: rename physmem_end and PHYSMEM_END to direct_map_physmem_end (Ricardo Robaina) [RHEL-144439]
  - arm64: Expose the end of the linear map in PHYSMEM_END (Ricardo Robaina) [RHEL-144439]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-702.el9]
changelog:
  - crypto: testmgr - block Crypto API xxhash64 in FIPS mode (Vladislav Dronov) [RHEL-170673]
  - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-167866] {CVE-2025-22075}
  - pcpcntrs: fix dying cpu summation race (Ravi Singh) [RHEL-154600]
  - sched/rt: Skip currently executing CPU in rto_next_cpu() (Herton R. Krzesinski) [RHEL-147187]
  - sched/clock: Avoid false sharing for sched_clock_irqtime (Herton R. Krzesinski) [RHEL-147187]
  - sched: Update rq->avg_idle when a task is moved to an idle CPU (Herton R. Krzesinski) [RHEL-147187]
  - sched/debug: Convert copy_from_user() + kstrtouint() to kstrtouint_from_user() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fix pelt clock sync when entering idle (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Remove nohz.nr_cpus and use weight of cpumask instead (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Change likelyhood of nohz.nr_cpus (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Move checking for nohz cpus after time check (Herton R. Krzesinski) [RHEL-147187]
  - sched: Deadline has dynamic priority (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Use cpumask_weight_and() in sched_balance_find_dst_group() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Simplify task_numa_find_cpu() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Drop useless cpumask_empty() in find_energy_efficient_cpu() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fix sched_avg fold (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Sort out 'blocked_load*' namespace noise (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Avoid rq->lock bouncing in sched_balance_newidle() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fold the sched_avg update (Herton R. Krzesinski) [RHEL-147187]
  - <linux/compiler_types.h>: Add the __signed_scalar_typeof() helper (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Fix unfairness caused by stalled tg_load_avg_contrib when the last task migrates out (Herton R. Krzesinski) [RHEL-147187]
  - sched/headers: Remove whitespace noise from kernel/sched/sched.h (Herton R. Krzesinski) [RHEL-147187]
  - sched/isolation: Force housekeeping if isolcpus and nohz_full don't leave any (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Proportional newidle balance (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Small cleanup to update_newidle_cost() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Small cleanup to sched_balance_newidle() (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Revert max_newidle_lb_cost bump (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Have SD_SERIALIZE affect newidle balancing (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: Minor cleanup in select_task_rq_dl() (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: Use cpumask_weight_and() in dl_bw_cpus (Herton R. Krzesinski) [RHEL-147187]
  - sched/core: Optimize core cookie matching check (Herton R. Krzesinski) [RHEL-147187]
  - sched/fair: Only update stats for allowed CPUs when looking for dst group (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: only set free_cpus for online runqueues (Herton R. Krzesinski) [RHEL-147187]
  - sched/core: Avoid direct access to hrtimer clockbase (Herton R. Krzesinski) [RHEL-147187]
  - sched/deadline: Fix race in push_dl_task() (Herton R. Krzesinski) [RHEL-147187]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-703.el9]
changelog:
  - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-164873]
  - redhat/configs: Enable FFA for TPM on AArch64 (Marcin Juszkiewicz) [RHEL-168115]
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169055]
  - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169055]
  - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169055]
  - RDMA/core: RDMA/mlx5: replace use of system_unbound_wq with system_dfl_wq (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169055]
  - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169055]
  - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169055]
  - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169055]
  - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169055]
  - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169055]
  - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169055]
  - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169055]
  - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169055]
  - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169055]
  - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169055]
  - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169055]
  - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169055]
  - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169055]
  - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169055]
  - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169055]
  - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169055]
  - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169055]
  - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169055]
  - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169055]
  - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169055]
  - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169055]
  - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169055]
  - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169055]
  - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169055]
  - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169055]
  - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169055]
  - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169055]
  - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169055]
  - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169055]
  - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169055]
  - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169055]
  - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169055]
  - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169055]
  - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169055]
  - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169055]
  - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169055]
  - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169055]
  - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169055]
  - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169055]
  - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169055]
  - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169055]
  - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169055]
  - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169055]
  - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169055]
  - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169055]
  - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169055]
  - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169055]
  - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169055]
  - net: Fix typos (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169055]
  - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169055]
  - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169055]
  - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169055]
  - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169055]
  - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169055]
  - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169055]
  - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169055]
  - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169055]
  - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169055]
  - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169055]
  - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169055]
  - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169055]
  - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169055]
  - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169055]
  - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169055]
  - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169055]
  - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169055]
  - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169055]
  - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169055]
  - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169055]
  - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169055]
  - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169055]
  - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169055]
  - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169055]
  - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169055]
  - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169055]
  - redhat/configs: enable ARCH_TEGRA_241_SOC (Marcin Juszkiewicz) [RHEL-166729]
  - soc/tegra: fuse: Define tegra194_soc_attr_group for Tegra241 (Marcin Juszkiewicz) [RHEL-166729]
  - soc/tegra: fuse: Add support for Tegra241 (Marcin Juszkiewicz) [RHEL-166729]
  - drivers/base/node: fix double free in register_one_node() (Mark Langsdorf) [RHEL-156429]
  - PM: domains: Detach on device_unbind_cleanup() (Mark Langsdorf) [RHEL-156429]
  - driver core: get_dev_from_fwnode(): document potential race (Mark Langsdorf) [RHEL-156429]
  - driver core/PM: Set power.no_callbacks along with power.no_pm (Mark Langsdorf) [RHEL-156429]
  - arm64: topology: Do not warn on missing AMU in cpuhp_topology_online() (Mark Langsdorf) [RHEL-156429]
  - genirq: Fix percpu_devid irq affinity documentation (Mark Langsdorf) [RHEL-156429]
  - software node: Also support referencing non-constant software nodes (Mark Langsdorf) [RHEL-156429]
  - platform/x86: intel: chtwc_int33fe: don't dereference swnode args (Mark Langsdorf) [RHEL-156429]
  - usb: hcd: queue wakeup_work to system_freezable_wq workqueue (Mark Langsdorf) [RHEL-156429]
  - device property: Allow secondary lookup in fwnode_get_next_child_node() (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: wakeirq: Update outdated documentation comments (Mark Langsdorf) [RHEL-156429]
  - driver core: remove device_change_owner() export (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Handle empty list in wakeup_sources_walk_start() (Mark Langsdorf) [RHEL-156429]
  - regcache: Demote defaults readback from HW to debug print (Mark Langsdorf) [RHEL-156429]
  - regmap: add KUnit coverage for reg_default_cb callback (Mark Langsdorf) [RHEL-156429]
  - regmap: Add reg_default_cb callback for flat cache defaults (Mark Langsdorf) [RHEL-156429]
  - driver-core: move devres_for_each_res() to base.h (Mark Langsdorf) [RHEL-156429]
  - driver core: faux: stop using static struct device (Mark Langsdorf) [RHEL-156429]
  - driver core: make pinctrl_bind_pins() private (Mark Langsdorf) [RHEL-156429]
  - driver core: attribute_container: change return type to void (Mark Langsdorf) [RHEL-156429]
  - devtmpfs: Replace simple_strtoul with kstrtoint in mount_param (Mark Langsdorf) [RHEL-156429]
  - devtmpfs: make 'devtmpfs_context_ops' static (Mark Langsdorf) [RHEL-156429]
  - regmap: Enable REGMAP when REGMAP_SLIMBUS is enabled (Mark Langsdorf) [RHEL-156429]
  - regmap: Fix race condition in hwspinlock irqsave routine (Mark Langsdorf) [RHEL-156429]
  - driver core: make bus_find_device_by_acpi_dev() stub prototype aligned (Mark Langsdorf) [RHEL-156429]
  - arm64: topology: Handle AMU FIE setup on CPU hotplug (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: Do not clear needs_force_resume with enabled runtime PM (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: Do not flag runtime PM workqueue as freezable (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: Make pm_runtime_barrier() return void (Mark Langsdorf) [RHEL-156429]
  - PM: WQ_UNBOUND added to pm_wq workqueue (Mark Langsdorf) [RHEL-156429]
  - regmap: i3c: switch to use i3c_xfer from i3c_priv_xfer (Mark Langsdorf) [RHEL-156429]
  - driver core: Check drivers_autoprobe for all added devices (Mark Langsdorf) [RHEL-156429]
  - driver core: WQ_PERCPU added to alloc_workqueue users (Mark Langsdorf) [RHEL-156429]
  - driver core: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156429]
  - tick/nohz: avoid showing '(null)' if nohz_full= not set (Mark Langsdorf) [RHEL-156429]
  - sysfs/cpu: Use DEVICE_ATTR_RO for nohz_full attribute (Mark Langsdorf) [RHEL-156429]
  - software node: allow referencing firmware nodes (Mark Langsdorf) [RHEL-156429]
  - software node: increase the reference of the swnode by its fwnode (Mark Langsdorf) [RHEL-156429]
  - software node: read the reference args via the fwnode API (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Add out-of-band system wakeup support for devices (Mark Langsdorf) [RHEL-156429]
  - devres: Move devm_alloc_percpu() and related to devres.h (Mark Langsdorf) [RHEL-156429]
  - devres: Remove unused devm_free_percpu() (Mark Langsdorf) [RHEL-156429]
  - PM: Introduce new PMSG_POWEROFF event (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Update after recent wakeup source removal ordering change (Mark Langsdorf) [RHEL-156429]
  - PM: wakeup: Delete timer before removing wakeup source from list (Mark Langsdorf) [RHEL-156429]
  - regmap: i3c: Use ARRAY_SIZE() (Mark Langsdorf) [RHEL-156429]
  - regcache: flat: Split ->populate() from ->init() (Mark Langsdorf) [RHEL-156429]
  - regcache: flat: Remove unneeded check and error message for -ENOMEM (Mark Langsdorf) [RHEL-156429]
  - regcache: rbtree: Split ->populate() from ->init() (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: fix typos in runtime.c comments (Mark Langsdorf) [RHEL-156429]
  - regmap: add flat cache with sparse validity (Mark Langsdorf) [RHEL-156429]
  - of/irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156429]
  - ACPI: irq: Add interrupt affinity reporting interface (Mark Langsdorf) [RHEL-156429]
  - irqdomain: Add firmware info reporting interface (Mark Langsdorf) [RHEL-156429]
  - platform: Add firmware-agnostic irq and affinity retrieval interface (Mark Langsdorf) [RHEL-156429]
  - PM: runtime: docs: Update pm_runtime_allow/forbid() documentation (Mark Langsdorf) [RHEL-156429]
  - arch_topology: move parse_acpi_topology() to common code (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: Do not wait on SYNC_STATE_ONLY device links (Mark Langsdorf) [RHEL-156429]
  - drivers/base/node: handle error properly in register_one_node() (Mark Langsdorf) [RHEL-156429]
  - devres: provide devm_kmemdup_const() (Mark Langsdorf) [RHEL-156429]
  - driver core: auxiliary bus: Optimize logic of auxiliary_match_id() (Mark Langsdorf) [RHEL-156429]
  - driver core: auxiliary bus: Drop dev_pm_domain_detach() call (Mark Langsdorf) [RHEL-156429]
  - PM: domains: Add flags to specify power on attach/detach (Mark Langsdorf) [RHEL-156429]
  - driver core: Fix order of the kernel-doc parameters (Mark Langsdorf) [RHEL-156429]
  - driver core: Export get_dev_from_fwnode() (Mark Langsdorf) [RHEL-156429]
  - drivers: base: fix "publically"->"publicly" (Mark Langsdorf) [RHEL-156429]
  - PM: core: Add two macros for walking device links (Mark Langsdorf) [RHEL-156429]
  - PM: core: Annotate loops walking device links as _srcu (Mark Langsdorf) [RHEL-156429]
  - driver core: faux: Set power.no_pm for faux devices (Mark Langsdorf) [RHEL-156429]
  - PM: sleep: core: Clear power.must_resume in noirq suspend error path (Mark Langsdorf) [RHEL-156429]
  - regmap: use int type to store negative error codes (Mark Langsdorf) [RHEL-156429]
  - software node: Constify node_group in registration functions (Mark Langsdorf) [RHEL-156429]
  - irqdomain: Make of_phandle_args_to_fwspec() generally available (Mark Langsdorf) [RHEL-156429]
  - cpufreq: Add new helper function returning cpufreq policy (Mark Langsdorf) [RHEL-156429]
  - regmap: Remove superfluous check for !config in __regmap_init() (Mark Langsdorf) [RHEL-156429]
  - regmap: mmio: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-156429]
  - x86/mm: Add missing saved dirty bit to page protection change mask (Thomas Lopatic) [RHEL-151306]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-704.el9]
changelog:
  - powercap: intel_rapl_tpmi: Remove FW_BUG from invalid version check (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Expose all package CPUs in PMU cpumask (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Remove incorrect CPU check in PMU context (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Add PL4 support for Ice Lake (David Arcari) [RHEL-128568]
  - powercap: Replace sprintf() with sysfs_emit() in sysfs show functions (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Fix possible recursive lock warning (David Arcari) [RHEL-128568]
  - powercap: fix sscanf() error return value handling (David Arcari) [RHEL-128568]
  - powercap: fix race condition in register_control_type() (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Enable MSR-based RAPL PMU support (David Arcari) [RHEL-128568]
  - x86/msr: Rename 'rdmsrl_safe_on_cpu()' to 'rdmsrq_safe_on_cpu()' [partial] (David Arcari) [RHEL-128568]
  - x86/msr: Rename 'wrmsrl_safe()' to 'wrmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
  - x86/msr: Rename 'rdmsrl_safe()' to 'rdmsrq_safe()' [partial] (David Arcari) [RHEL-128568]
  - powercap: intel_rapl: Add support for Nova Lake processors (David Arcari) [RHEL-128568]
  - powercap: idle_inject: use us_to_ktime() where appropriate (David Arcari) [RHEL-128568]
  - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172741] {CVE-2026-43051}
  - RDMA/rw: Fall back to direct SGE on MR pool exhaustion (Kamal Heib) [RHEL-163491]
  - RDMA/umem: Fix double dma_buf_unpin in failure path (Kamal Heib) [RHEL-163491]
  - RDMA/core: Fix stale RoCE GIDs during netdev events at registration (Kamal Heib) [RHEL-163491]
  - RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc (Kamal Heib) [RHEL-163491]
  - RDMA/core: add rdma_rw_max_sge() helper for SQ sizing (Kamal Heib) [RHEL-163491]
  - RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send (Kamal Heib) [RHEL-163491]
  - RDMA/iwcm: Fix workqueue list corruption by removing work_list (Kamal Heib) [RHEL-163491]
  - IB/cache: update gid cache on client reregister event (Kamal Heib) [RHEL-163491]
  - RDMA/core: always drop device refcount in ib_del_sub_device_and_put() (Kamal Heib) [RHEL-163491]
  - RDMA/core: Fix logic error in ib_get_gids_from_rdma_hdr() (Kamal Heib) [RHEL-163491]
  - RDMA/cm: Fix leaking the multicast GID table reference (Kamal Heib) [RHEL-163491]
  - RDMA/core: Check for the presence of LS_NLA_TYPE_DGID correctly (Kamal Heib) [RHEL-163491]
  - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-99101]
  - md/raid5: Fix UAF on IO across the reshape position (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: raise barrier before state machine transition (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: skip reading rdevs that are not in_sync (Nigel Croxon) [RHEL-129338]
  - md: suppress spurious superblock update error message for dm-raid (Nigel Croxon) [RHEL-129338]
  - md/dm-raid: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - block: introduce max_{hw|user}_wzeroes_unmap_sectors to queue limits (Nigel Croxon) [RHEL-129338]
  - md: ignore discard return value (Nigel Croxon) [RHEL-129338]
  - dm: clear unmap write zeroes limits when disabling write zeroes (Nigel Croxon) [RHEL-129338]
  - md: adding a CONFIG_MD_LLBITMAP file to build (Nigel Croxon) [RHEL-129338]
  - md: fix return value of mddev_trylock (Nigel Croxon) [RHEL-129338]
  - md/raid1: fix memory leak in raid1_run() (Nigel Croxon) [RHEL-129338]
  - md raid: fix hang when stopping arrays with metadata through dm-raid (Nigel Croxon) [RHEL-129338]
  - md-cluster: fix NULL pointer dereference in process_metadata_update (Nigel Croxon) [RHEL-129338]
  - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: fix percpu_ref not resurrected on suspend timeout (Nigel Croxon) [RHEL-129338]
  - md/raid5: fix IO hang with degraded array with llbitmap (Nigel Croxon) [RHEL-129338]
  - md: remove recovery_disabled (Nigel Croxon) [RHEL-129338]
  - md/raid10: cleanup skip handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
  - md/raid10: fix any_working flag handling in raid10_sync_request (Nigel Croxon) [RHEL-129338]
  - md: move finish_reshape to md_finish_sync() (Nigel Croxon) [RHEL-129338]
  - md: factor out sync completion update into helper (Nigel Croxon) [RHEL-129338]
  - md: remove MD_RECOVERY_ERROR handling and simplify resync_offset update (Nigel Croxon) [RHEL-129338]
  - md: update curr_resync_completed even when MD_RECOVERY_INTR is set (Nigel Croxon) [RHEL-129338]
  - md: factor error handling out of md_done_sync into helper (Nigel Croxon) [RHEL-129338]
  - md/raid1: simplify uptodate handling in end_sync_write (Nigel Croxon) [RHEL-129338]
  - md/raid5: make sure max_sectors is not less than io_opt (Nigel Croxon) [RHEL-129338]
  - md/raid5: use mempool to allocate stripe_request_ctx (Nigel Croxon) [RHEL-129338]
  - md: merge mddev serialize_policy into mddev_flags (Nigel Croxon) [RHEL-129338]
  - md: merge mddev faillast_dev into mddev_flags (Nigel Croxon) [RHEL-129338]
  - md: merge mddev has_superblock into mddev_flags (Nigel Croxon) [RHEL-129338]
  - md/raid5: fix raid5_run() to return error when log_init() fails (Nigel Croxon) [RHEL-129338]
  - md: fix missing integer (Nigel Croxon) [RHEL-129338]
  - md: Fix forward incompatibility from configurable logical block size (Nigel Croxon) [RHEL-129338]
  - md: Fix logical_block_size configuration being overwritten (Nigel Croxon) [RHEL-129338]
  - md: suspend array while updating raid_disks via sysfs (Nigel Croxon) [RHEL-129338] {CVE-2025-71225}
  - md/raid5: fix possible null-pointer dereferences in raid5_store_group_thread_cnt() (Nigel Croxon) [RHEL-129338] {CVE-2025-71135}
  - md: Fix static checker warning in analyze_sbs (Nigel Croxon) [RHEL-129338]
  - md: remove legacy 1s delay in md_notify_reboot (Nigel Croxon) [RHEL-129338]
  - md/raid5: fix IO hang when array is broken with IO inflight (Nigel Croxon) [RHEL-129338]
  - md: warn about updating super block failure (Nigel Croxon) [RHEL-129338]
  - md/raid0: fix NULL pointer dereference in create_strip_zones() for dm-raid (Nigel Croxon) [RHEL-129338]
  - md: allow configuring logical block size (Nigel Croxon) [RHEL-129338]
  - md: add check_new_feature module parameter (Nigel Croxon) [RHEL-129338]
  - md: fix how device node is created and removed (Nigel Croxon) [RHEL-129338]
  - md/raid0: Move queue limit setup before r0conf initialization (Nigel Croxon) [RHEL-129338]
  - md: init bioset in mddev_init (Nigel Croxon) [RHEL-129338] {CVE-2025-68368}
  - md: delete md_redundancy_group when array is becoming inactive (Nigel Croxon) [RHEL-129338]
  - md: prevent adding disks with larger logical_block_size to active arrays (Nigel Croxon) [RHEL-129338]
  - md/raid5: remove redundant __GFP_NOWARN (Nigel Croxon) [RHEL-129338]
  - md: avoid repeated calls to del_gendisk (Nigel Croxon) [RHEL-129338] {CVE-2025-68373}
  - md/md-llbitmap: Remove unneeded semicolon (Nigel Croxon) [RHEL-129338]
  - md/md-linear: Enable atomic writes (Nigel Croxon) [RHEL-129338]
  - Factor out code into md_should_do_recovery() (Nigel Croxon) [RHEL-129338]
  - md: fix rcu protection in md_wakeup_thread (Nigel Croxon) [RHEL-129338] {CVE-2025-68374}
  - md: init queue_limits->max_hw_wzeroes_unmap_sectors parameter (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: Use DIV_ROUND_UP_SECTOR_T (Nigel Croxon) [RHEL-129338]
  - md/md-llbitmap: introduce new lockless bitmap (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: make method bitmap_ops->daemon_work optional (Nigel Croxon) [RHEL-129338]
  - md: add a new recovery_flag MD_RECOVERY_LAZY_RECOVER (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new method blocks_synced() in bitmap_operations (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new method skip_sync_blocks() in bitmap_operations (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: delay registration of bitmap_ops until creating bitmap (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new sysfs api bitmap_type (Nigel Croxon) [RHEL-129338]
  - md: add a new mddev field 'bitmap_id' (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: support discard for bitmap ops (Nigel Croxon) [RHEL-129338]
  - md: factor out a helper raid_is_456() (Nigel Croxon) [RHEL-129338]
  - md: add a new parameter 'offset' to md_super_write() (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: introduce CONFIG_MD_BITMAP (Nigel Croxon) [RHEL-129338]
  - md: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/raid5: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/raid10: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/raid1: check before referencing mddev->bitmap_ops (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: remove the parameter 'init' for bitmap_ops->resize() (Nigel Croxon) [RHEL-129338]
  - md/raid1: check bitmap before behind write (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: handle the case bitmap is not enabled before end_sync() (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: handle the case bitmap is not enabled before start_sync() (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add md_bitmap_registered/enabled() helper (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: add a new parameter 'flush' to bitmap_ops->enabled (Nigel Croxon) [RHEL-129338]
  - md/md-bitmap: merge md_bitmap_group into bitmap_operations (Nigel Croxon) [RHEL-129338]
  - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
  - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-148781] {CVE-2025-71089}
  - ext4: fix dirtyclusters double decrement on fs shutdown (Brian Foster) [RHEL-145583]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-705.el9]
changelog:
  - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172621] {CVE-2026-43027}
  - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171156] {CVE-2026-31685}
  - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170915]
  - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169624]
  - dm cache: fix missing return in invalidate_committed's error path (Benjamin Marzinski) [RHEL-169976]
  - dm cache metadata: fix memory leak on metadata abort retry (Benjamin Marzinski) [RHEL-169975]
  - dm cache: prevent entering passthrough mode after unclean shutdown (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix dirty mapping checking in passthrough mode switching (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix concurrent write failure in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - dm cache policy smq: fix missing locks in invalidating cache blocks (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix write hang in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix write path cache coherency in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - dm cache: fix null-deref with concurrent writes in passthrough mode (Benjamin Marzinski) [RHEL-169976]
  - x86/platform/uv: Handle deconfigured sockets (Krzysztof Pawlinski) [RHEL-158968]
  - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-161149] {CVE-2025-68741}
  - netfilter: ctnetlink: use netlink policy range checks (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (Florian Westphal) [RHEL-152685]
  - netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (Florian Westphal) [RHEL-152685]
  - nfnetlink_osf: validate individual option lengths in fingerprints (Florian Westphal) [RHEL-152685]
  - netfilter: bpf: defer hook memory release until rcu readers are done (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (Florian Westphal) [RHEL-152685]
  - netfilter: xt_CT: drop pending enqueued packets on template removal (Florian Westphal) [RHEL-152685]
  - netfilter: nft_ct: drop pending enqueued packets on removal (Florian Westphal) [RHEL-152685]
  - nf_tables: nft_dynset: fix possible stateful expression memleak in error path (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() (Florian Westphal) [RHEL-152685]
  - netfilter: conntrack: add missing netlink policy validations (Florian Westphal) [RHEL-152685]
  - netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() (Florian Westphal) [RHEL-152685]
  - netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels (Florian Westphal) [RHEL-152685]
  - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (Florian Westphal) [RHEL-152685]
  - netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path (Florian Westphal) [RHEL-152685]
  - netfilter: x_tables: guard option walkers against 1-byte tail reads (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: unconditionally bump set->nelems before insertion (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: fix set size with rbtree backend (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: always increment set element count (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: cleanup documentation (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats with basechain hook (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_bitmap: fix lockdep splat due to missing annotation (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats in set walker (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats with flowtables (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splats with sets (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: missing extended netlink error in lookup functions (Florian Westphal) [RHEL-152685]
  - netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion (Florian Westphal) [RHEL-152685]
  - netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (Florian Westphal) [RHEL-152685]
  - netfilter: nft_set_hash: fix get operation on big endian (Florian Westphal) [RHEL-152685]
  - netfilter: xt_tcpmss: check remaining length before reading optlen (Florian Westphal) [RHEL-152685]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-706.el9]
changelog:
  - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-142433]
  - io_uring/kbuf: check if target buffer list is still legacy on recycle (Jeff Moyer) [RHEL-161185]
  - sctp: discard stale INIT after handshake completion (Xin Long) [RHEL-158357]
  - netfilter: skip recording stale or retransmitted INIT (Xin Long) [RHEL-158357]
  - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (CKI Backport Bot) [RHEL-169733] {CVE-2025-68183}
  - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766}
  - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-166730] {CVE-2025-39766}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-707.el9]
changelog:
  - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176447] {CVE-2026-46333}
  - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174754] {CVE-2026-43303}
  - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172822]
  - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172822]
  - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172822]
  - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172822]
  - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172822] {CVE-2026-31709}
  - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167274]
  - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167834]
  - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167834]
  - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167834]
  - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172939]
  - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172939]
  - blk-cgroup: wait for blkcg cleanup before initializing new disk (Ming Lei) [RHEL-105810]
  - scsi: ses: Fix devices attaching to different hosts (Tomas Henzl) [RHEL-68372]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-708.el9]
changelog:
  - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176922] {CVE-2026-43329}
  - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174565] {CVE-2026-43284}
  - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171139] {CVE-2026-31684}
  - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-159632]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-709.el9]
changelog:
  - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173885] {CVE-2026-43116}
  - xfs: fix remote xattr valuelblk check (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: fix the xattr scrub to detect freemap/entries array collisions (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: strengthen attr leaf block freemap checking (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: refactor attr3 leaf table size computation (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174056] {CVE-2026-43158}
  - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172859] {CVE-2026-31772}
  - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172600] {CVE-2026-43023}
  - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172573] {CVE-2026-43020}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-710.el9]
changelog:
  - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-171801] {CVE-2025-38653}
  - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-171801] {CVE-2025-38653}
  - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (Abhi Das) [RHEL-171801] {CVE-2025-38653}
  - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172166]
  - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172166]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Add binutils-devel as buildrequire to potentially enable the CTF
    backend.  This will allow the enabling of the CTF backend for
    binutils-devel > 2.35.2
  - Update to changing SONAME (libabigail.so.6.0.0)
  - Add --enable-ctf to the configure command line


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify the %check section
  - Resolves: RHEL-121666


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Ales Matej <amatej@redhat.com> - 0.69.0-18
changelog:
  - Fix a crash when parsing multiple key files fails (RHEL-145618)
  - Mark all protected packages as user installed for all transactions (RHEL-76112)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-115194)
  - Clearer error for protected package broken dependencies


author: Jan Grulich <jgrulich@redhat.com> - 0.6.22-7
changelog:
  - Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
    Resolves: RHEL-170254, RHEL-170235


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-42
changelog:
  - Replace statfs64 with statfs (RHEL-127105)
  - NFS export symlink vulnerability fix (RHEL-127105)
  - mountd: Minor refactor of get_rootfh() (RHEL-127105)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
  - Add requires for selinux-policy (RHEL-127105)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-43
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158527)
  - nfsrahead: zero-initialise device_info struct (RHEL-158527)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158527)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Vit Mojzis <vmojzis@redhat.com> - 3.6-4
changelog:
  - Ignore files removed during relabeling (RHEL-123884)
  - Ignore directories removed during relabeling (RHEL-123884)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Iker Pedrosa <ipedrosa@redhat.com> - 2.9.9-1
changelog:
  - Resolves: RHEL-173741 - SSSD Rebase for RHEL 9.9
  - Resolves: RHEL-173740 - CVE-2026-6245 sssd: out-of-bounds read in the sssd
  - Resolves: RHEL-150439 - Poor performance of `BE_REQ_INITGROUPS` handling by 'sssd_be' (LDAP RFC2307, no nested groups)
  - Resolves: RHEL-143416 - Performance impact with enumerate in SSSD > 2.7.3
  - Resolves: RHEL-152067 - [RFE] SSSD PAM: Support Microsoft AD PKINIT authentication indicator (ms-pkca) for pam_gssapi_indicators_map
  - Resolves: RHEL-173742 - Man page update: man sssd_krb5_localauth_plugin – Missing disable = an2ln
  - Resolves: RHEL-173743 - Concurrent child processes trigger unnecessarily backtrace
  - Resolves: RHEL-173744 - Detect foreign security principals in AD group members and silently ignore them
  - Resolves: RHEL-156519 - GDM Support for IdM IdP feature and MFA [SSSD]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-16
changelog:
  - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
  - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
  - qemu: Introduce privateData for hostdevs (RHEL-126345)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126345)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126345)
  - qemu: open iommufd FD from libvirt backend (RHEL-126345)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
  - qemu: Implement support for persistent reservation migration control (RHEL-140614)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866)
  - Introduce support for disk operation latency histogram collection (RHEL-147866)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
  - util: Move openning IOMMU device to viriommufd (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
  - util: Move openning VFIO device to virpci (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150353)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
  - qemu: Save IOMMUFD state into status XML (RHEL-150353)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
  - conf: Introduce iommufd enum for domaincaps (RHEL-138544)
  - qemu: Fill iommufd domain capability (RHEL-138544)
  - tests: properly mock VFIO and IOMMU checks (RHEL-138544)
  - iommufd: fix FD leak in case of error (RHEL-150353)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - domain_conf: initialize network hostdev private data (RHEL-151953)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-13
changelog:
  - conf: Parse hyperv features even for host-model (RHEL-151688)
  - qemu: Wire up new hyperv host-model mode behavior (RHEL-151688)
  - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-153653)
  - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-153653)
  - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-153653)
  - docs: Clarify host-model description in domain capabilities (RHEL-153653)
  - qemu: Fix job handling when domain dies in post-copy migration (RHEL-145179)
  - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159902)
  - security: Cleanup hostdev label error logic (RHEL-159902)
  - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159902)
  - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-156803)
  - conf: Move and rename virStorageSourceFDTuple object (RHEL-156803)
  - conf: Refactor virHostdevIsPCIDevice (RHEL-156803)
  - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-156803)
  - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-156803)
  - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-156803)
  - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-156803)
  - conf: Introduce domain iommufd element (RHEL-156803)
  - qemu: Implement iommufd (RHEL-156803)
  - conf: Add iommufd fdgroup support (RHEL-156803)
  - qemu: Implement iommufd fdgroup (RHEL-156803)
  - tests: Add iommufd fdgroup test (RHEL-156803)
  - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-156803)
  - qemuMigrationSrcBeginXML: Don't call 'qemuMigrationSrcBeginPhaseBlockDirtyBitmaps' with offline VM (RHEL-173433)
  - qemuMigrationSrcBeginPhase: Don't call 'qemuBlockNodesEnsureActive' with offline VM (RHEL-173433)
  - util: virGetSubIDs: do not limit file size (RHEL-174491)
  - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-177364)
  - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-177364)
  - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-177364)
  - qemu_capabilities: Always sort features in host-model CPU (RHEL-177364)
  - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-177364)
  - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-177364)
  - qemu_capabilities: Cache expanded CPU (RHEL-177364)
  - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-177364)
  - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-177364)
  - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-177364)
  - cpu: Introduce virCPUUpdateFeatures (RHEL-177364)
  - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-177364)
  - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-177364)
  - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-177364)
  - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-177364)
  - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-177364)
  - distro: Replace old gating with tmt


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-126090, RHEL-128107
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-118197)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-108915)
  - tests: Test virFileIsSharedFSOverride (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-135287)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-135287)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-1
changelog:
  - Update to openwsman-2.8.1
    Resolves: RHEL-97643
  - Add libwsman-client.so.4 for backward compatibility
    Related: RHEL-97643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-2
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-127516
  - Fix bogus 'sscg' arguments
    Related: RHEL-118292


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Phil Sutter <psutter@redhat.com> [1.0.9-7.el9]
changelog:
  - src: fix reset element support for interval set type (Phil Sutter) [RHEL-153461]
  - src: netlink: fix crash when ops doesn't support udata (Phil Sutter) [RHEL-153461]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28
changelog:
  - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connection


author: Petr Dancak <pdancak@redhat.com> - 2:1.20.1-29
changelog:
  - Resolves: RHEL-159563 - CVE-2026-27654 nginx: NGINX: Denial of Service
    or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159542 - CVE-2026-27784 nginx: NGINX: Denial of Service
    due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159450 - CVE-2026-27651 nginx: NGINX: Denial of Service
    via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157891 - CVE-2026-32647 nginx: NGINX: Denial of Service
    or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1
changelog:
  - new version 1.20.1
  - Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
    when labels are followed by a pointer to a root domain name


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-141606
  - alt-name: Remove alt-names when interface marked as absent. RHEL-141602
  - hsr: Automatically disable IP on hsr port. RHEL-141609
  - hsr: add support for configuring "interlink" property. RHEL-141608
  - Support referring interface name using its alternative name. RHEL-141601


author: Ján Václav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - ipv4: Add new parameter prefix-route-metric RHEL-166365
  - Fix error when modify port list of down interfaces RHEL-166366
  - Add support for configuring ipip tunnel in nmstate RHEL-166367


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-1
changelog:
  - Rebase to 2026.1
    Release https://github.com/ostreedev/ostree/releases/tag/v2026.1
    Resolves: #RHEL-167078


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: RHEL Packaging Agent <jotnar@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi 7.2.0
  - Update license tag to BSD-3-Clause
  - Remove old patches and add new patches for 7.2.0 compatibility
  - Update configure options and package files
  - Resolves: RHEL-121673


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.2-6
changelog:
  - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel
  - Resolves: RHEL-38108


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143117
  Resolves: RHEL-143174
  Resolves: RHEL-144897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143117, RHEL-143174, RHEL-144897


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
  - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-141297 Memory leaks in IPA plugins
  - Resolves: RHEL-141054 IPA fails to sign zone
  - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive
  - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system)
  - RHEL-145854 Include latest fixes in python3-ipatests package
  - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - RHEL-141500 ipa use systemd-sysusers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-3
changelog:
  - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured"
  - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8


author: David Hanina <dhanina@redhat.com> - 4.13.1-3.1
changelog:
  - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]
  - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z]
  - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z]
  - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-5
changelog:
  - Rebuilt needed for moving buildroot package to CRB
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed
  - Resolves: RHEL-67341 move python3-setuptools-rust to CRB [rhel-9]


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-6
changelog:
  - Rebuilt needed to trigger signing of the package
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-6
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143110
  Resolves: RHEL-143170
  Resolves: RHEL-144894


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-7
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143110, RHEL-143170, RHEL-144894


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


