# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-1
changelog:
  - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9]
  - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9]
  - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9]
  - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9]
  - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used.  [rhel-9]
  - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9]
  - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9]
  - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9]
  - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9]
  - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9]
  - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9]
  - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9]
  - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9]
  - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9]
  - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9]
  - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9]
  - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9]
  - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9]
  - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9]
  - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9]
  - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x
  - Resolves: RHEL-140089 - Upgrading IDM  to latest version: 389-ds-base and ipa-server breaks replication  [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.8.0-2
changelog:
  - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9]


author: Michel Lind <salimma@fedoraproject.org> - 25.01-1
changelog:
  - Update to 25.01
  - 25.00+ fixes CVE-2025-11001; Resolves: rhbz#2416011
  - Backport Debian patch to disable echo-ing password; Resolves:
    rhbz#2412315


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Dean Nelson <dnelson@redhat.com> - 20210604-4
changelog:
  - Add in big-endian patches for PRMT, RGRT and SVKL tables.
  - Fix big-endian related prmt.asl compiler errors.


author: Dean Nelson <dnelson@redhat.com> - 20210604-5
changelog:
  - Backport 19b11f91660b ("Add the subtable CFMWS to the CEDT table").
  - Backport d9798f5275bb ("Fix Compile issue with CEDT and add template").
  - Backport 0914618b553d ("Automated cleanup; No functional changes").
  - Backport 7021087eedb0 ("Remove a duplicate of ACPI_SIG_CEDT").
  - Add in big-endian patch for CEDT tble.


author: Sumit Bose <sbose@redhat.com> - 0.9.3.1-1
changelog:
  - Rebase to latest upstream version
    Resolves: RHEL-134944
    Resolves: RHEL-134945
    Resolves: RHEL-134946
    Resolves: RHEL-134947
    Resolves: RHEL-134948
    Resolves: RHEL-134950
    Resolves: RHEL-134951
    Resolves: RHEL-134952


author: Sumit Bose <sbose@redhat.com> - 0.9.3.1-2
changelog:
  - Add explicit selinux dependencies to avoid policycoreutils-python-utils dependency
    Resolves: RHEL-134944


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.12-1
changelog:
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-129787
  - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues
    (k.koukiou)
    Related: RHEL-74145
  - ostree needs to have /boot be bindmounted into sysroot. (a.badger)
    Resolves: RHEL-74145


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-55
changelog:
  - bz2223252 - filesystems mount and expire immediately
    - fix expire retry looping.
    - correct day in changelog entry for revision 53.
  - Resolves: rhbz#2223252


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-56
changelog:
  - RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
    - allow -null map in indirect maps.
  - Resolves: RHEL-13083


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-57
changelog:
  - RHEL-13084 - multi mount detection fails for share with blank+dash causing
    SEGV crash
    - fix multi-mount check.
  - Resolves: RHEL-13084


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-58
changelog:
  - RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-19731


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-59
changelog:
  - RHEL-69485 - Sporadic mount failures with amd program maps on RHEL8
    - fix amd external mount error handling.
    - fix amd external mount mount handling.
    - don't free ext mount if mounted.
    - refactor amd function do_program_mount().
    - refactor umount_amd_ext_mount().
    - add flags argument to amd do_program_mount().
  - Resolves: RHEL-69485
  - RHEL-71359 RFE: autofs: add handling for AMD 'nounmount' option
    - fix amd cache options not copied.
    - seperate amd mount and entry flags.
    - make iocl ops ->timeout() handle per-dentry expire.
    - refactor amd mount options handling.
    - add some unimplemented amd map options.
    - fix lookup search type in umount_subtree_mounts().
    - fix remount_active_mount() not remounting symlinks.
    - log when setting amd per-mount timeout.
    - update per-mount expire timeout on readmap.
    - clear per-mount timeout if not set.
  - Resolves: RHEL-71359
  - RHEL-57466 - RHEL9.4 - autofs crashes on startup after IDM client configuration
    - fix submount shutdown race.
  - Resolves: RHEL-57466


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-60
changelog:
  - RHEL-77321 - autofs: deadlock between mnts_lookup_mount and mnts_remove_mount
    - fix deadlock in master_notify_submount().
  - Resolves: RHEL-77321


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-61
changelog:
  - RHEL-32684 - sssd autofs fails to get correct EHOSTDOWN if requested
    incorrect mount after upgrade to sssd-2.9.1-4.el8_9.5.x86_64
    - handle sss special case getautomntbyname() error
  - Resolves: RHEL-32684


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-63
changelog:
  - RHEL-87031 - autofs hang - autofs-5.1.4-114.el8_10.2
    - fix lock ordering deadlock in expire_cleanup().
    - change spec file %patchN to %patch -P N as required by rpm(8).
    - Fix compile error caused by function pointer types in cyrus-sasl module.
    - removed references to patch1 and patch2 due to rbmbuild(8) complaints.
  - Resolves: RHEL-87031


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-64
changelog:
  - RHEL-81885 - autofs: segfault while dereferencing null mapent
    - fix handling of ignored offsets.
    - fix invalidated map entry handling in hosts module.
    - fix changelog revision number of previous change.
  - Resolves: RHEL-81885


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-65
changelog:
  - RHEL-85615 - autofs fails to mount shares when using kerberised LDAP
    - always recreate credential cache.
    - fix always recreate credential cache.
  -Resolves: RHEL-85615


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-65
changelog:
  - Resolves: rhbz#2121828 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Siteshwar Vashisht <svashisht@redhat.com> - 5.1.8-9
changelog:
  - Fix a performance regression while using large number of environment variables
    Resolves: RHEL-20020


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Jakub Martisko <jamartis@redhat.com> - 3.9.0-13
changelog:
  - Add explicit requires to the devel subpackages
  - Note: the the cblas64 seems to be linked against the libblas (not the 64 version)
  - this is not a regression, however in the Fedora it uses libblas64 instead.
  - Resolves: RHEL-5768


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Kate Hsuan <hpa@redhat.com> - 0.9.10-1
changelog:
  - Update to the upstream version 0.9.10
  - Update to 0.9.10
  - Fix bolt exits when opening an empty version file
  - Fix a NULL syspath variable causes SIGSEGV


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Colin Walters <walters@verbum.org> - 1.12.1-1
changelog:
  - Update to 1.12.1
  - Fix mount point check regression breaking bootc-image-builder
  - Resolves: RHEL-142112


author: Jan Friesse <jfriesse@redhat.com> - 1.1-2
changelog:
  - Resolves: RHEL-32613

  - attr: Fix reading of server_reply
  - auth: Check result of gcrypt gcry_md_get_algo_dlen (fixes CVE-2024-3049)


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Joseph Marrero <jmarrero@redhat.com> - 0.6.3-1
changelog:
  - Rebase to 0.6.3 which is supported upstream
    This release also includes the fix for CVE-2024-42472
    Fixes: #RHEL-56797


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.4-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/ee5b574)
  - fixes "buildah: create parent directories of mount targets with mode 0755 - [RHEL-9.7]  0day"
  - Resolves: RHEL-115166


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/2ece502)
  - fixes "[Minor Incident] CVE-2025-52881 buildah: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-9.7.z]"
  - Resolves: RHEL-126925


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/e363f79)
  - fixes "Bump to runc v1.2.9 or v1.3.4 to get CVE and regression fixes - Buildah [rhel-9.7.z]"
  - Resolves: RHEL-132846


author: Jindrich Novy <jnovy@redhat.com> - 2:1.41.8-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.41
    (https://github.com/containers/buildah/commit/f85ff89)
  - fixes "CVE-2025-47913 buildah: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-9.7.z]"
  - Resolves: RHEL-134792


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-1
changelog:
  - update to 4.5 (RHEL-6522 RHEL-6520 RHEL-9969 RHEL-9971 RHEL-9973 RHEL-9975
    RHEL-12411)
  - add chronyd-restricted service (RHEL-9972)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.5-3
changelog:
  - don't repeat error log messages when reloading sourcedir (RHEL-51786)
  - add support for leap-seconds.list file (RHEL-53484)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-1
changelog:
  - update to 4.6.1 (RHEL-61877)
  - keep PHC refclock reachable when dropping samples due to high delay
    (RHEL-65421)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.6.1-2
changelog:
  - improve description of refresh directive (RHEL-82096)
  - improve logging of selection failures (RHEL-80388 RHEL-80413 RHEL-80415)
  - fix sourcedir reloading to not multiply sources (RHEL-95016)
  - switch from patchX to patch -P X


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Paul Murphy <murp@redhat.com> - 20.1.8-3
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Packit <hello@packit.dev> - 350-1
changelog:
  - networking: fix renaming of bridges and other groups (RHEL-117883)
  - bridge: fix OpenSSH_10.2p1 host key detection


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-7
changelog:
  - Remove "Requires: glibc-all-langpacks" again and drop the
    posttrans and postun scripts instead. If these scripts are removed,
    glibc-all-langpacks is not needed anymore.
    This avoids problems with /usr/sbin/build-locale-archive.
  - Resolves: rhbz#1698464


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-8
changelog:
  - Remove  BuildArch: noarch. The binary locales are architecture
    dependent.
  - Related: rhbz#1698464


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-9
changelog:
  - Add Conflicts: compat-locales-sap <= 1.0.10-6 to avoid
    rpmdeplint error because of the architecture change.
  - Related: rhbz#1698464


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-10
changelog:
  - SAPSJIS and SAPSJISX0213 locales need to be part of compat-locales-sap again
  - Resolves: rhbz#1691404


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-11
changelog:
  - Bump release number because the scripts for the CI tests have been updated
  - Related: rhbz#1682139


author: Mike Fabian <mfabian@redhat.com> - 1.0.10-14
changelog:
  - glibc_post_upgrade.<_target_cpu> does not exist anymore, iconvconfig
    needs to be used in the posttrans script.
  - Related: rhbz#1737442


author: Marek Polacek <polacek@redhat.com> 10.2.1-1
changelog:
  - GCC 10.2 release
  - disable -flto in %{optflags}, lto bootstrap will be enabled the GCC way
    later
  - require MPFR Library version 3.1.0 (or later)


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Jan Friesse <jfriesse@redhat.com> - 3.0.4-1
changelog:
  - Resolves: RHEL-123650
  - Resolves: RHEL-67471

  - New upstream release (RHEL-123650)
  - Support for running corosync-qnetd-tool and corosync-qdevice-tool
    as a non-root user (RHEL-67471)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.5.7-14
changelog:
  - Rename variables in get_range()
  - Step size out fo bound handling 
  - Fix range parsing
  - Resolves: RHEL-82795


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.5.7-16
changelog:
  - Forward XDG_SESSION_CLASS to PAM for session classification
  - Also use systemd_tmpfiles to create files in /var, to ensure Cronie
  - works properly in Image mode
  - Resolves: RHEL-131190, RHEL-136491, RHEL-136492


author: Daniel Zatovic <dzatovic@redhat.com> - 2.7.2-1
changelog:
  - Update to cryptsetup 2.7.2
  - Use OpenSLL Argon implementation instead of the built-in one
  - Resolves: RHEL-32377


author: Ondrej Kozina <okozina@redhat.com> - 2.7.2-2
changelog:
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - patch: Abort online reencryption for misconfigured devices.
  - patch: Harden online reencryption checks in initialization phase.
  - patch: Fix detection of direct-io with suspended devices.
  - patch: Return suspended status also for unknow target types.
  - patch: Do not handle device as suspended on error.
  - Resolves: RHEL-39003 RHEL-41238


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-3
changelog:
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122297 RHEL-125152 RHEL-125167 RHEL-132585 RHEL-140106


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-37
changelog:
  - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack
  - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-35
changelog:
  - Add 0124-libmultipath-add-missing-assert-to-checkers.c.patch
  - Add 0125-libmultipath-foreign-fix-memory-leak-in-nvme-foreign.patch
    * Fixes RHEL-73413
  - Add 0126-libmultipath-export-udev-pthread-cleanup-functions.patch
  - Add 0127-multipathd-set-rport-port_state-to-marginal-for-NVMe.patch
    * Fixes RHEL-67472
  - Resolves: RHEL-73413
  - Resolves: RHEL-67472


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-36
changelog:
  - Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
  - Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
  - Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
    * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-78758


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-37
changelog:
  - Add 0140-multipath-clean-up-find_multipaths-value-names.patch
  - Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
      to communicate with a process in another network namespace")
  - Fix multipath_conf_syntax OSCI test.
  - Resolves: RHEL-82307


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-38
changelog:
  - Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82534


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-39
changelog:
  - Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
  - Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
  - Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
  - Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
  - Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103109 ("Update multipath builtin config to add new
      device defaults")
  - Resolves: RHEL-103109


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-40
changelog:
  - Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0161-limpathpersist-redesign-failed-release-workaround.patch
  - Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
  - Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
  - Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
  - Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0167-libmultipath-rename-prflag_value-enums.patch
  - Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
  - Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
  - Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
      reservation handling")
  - Resolves: RHEL-118515


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-41
changelog:
  - Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
      reservation handling")
  - Resolves: RHEL-118515


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-42
changelog:
  - Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
      storage [rhel-9]")
  - Resolves: RHEL-128396


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-43
changelog:
  - Add 0198-multipathd-print-path-offline-message-even-without-a.patch
    * Fixes RHEL-133814 ("log_checker_err is not printing messages
      repeatedly for failed path [rhel-9]")
  - Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
  - Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
  - Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
  - Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
  - Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
  - Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
  - Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
    * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
      "Could not open '/dev/dm-95': No such file or directory")
  - Resolves: RHEL-133814
  - Resolves: RHEL-135904


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-44
changelog:
  - Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
  - Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
    * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
      [rhel-9]")
  - Resolves: RHEL-141291


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-2
changelog:
  - Allow non-zero values in unused index block entries.
  - Fix boundary check on the bitset for cached blocks.
  - Fix incorrect index_entry.nr_free on expansion affecting free space estimate.
  - Fix thin_repair checking keys on a node with a zero key.
  - Enhance error message in cache_check suggesting fix when applicable.


author: Marian Csontos <mcsontos@redhat.com> - 1.0.9-3
changelog:
  - Fix --version string compatibility with LVM tools.
  - Fix confusing Broken pipe warning when used in lvconvert --repair.


author: Marian Csontos <mcsontos@redhat.com> - 1.1.0-1
changelog:
  - Update to latest upstream release 1.1.0.
  - Support listing the highest mapped block in thin_ls.
  - Introduce thin_migrate for volume migration.
  - See CHANGES.


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-16
changelog:
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098)
  - fix building with latest openssl (RHEL-140619)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.3.0-2
changelog:
  - fix intermittent test failures (RHEL-82109)
  - fix source-sh test with non-default manpath (RHEL-82109)


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-1
changelog:
  - fapolicyd-1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3
    https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4.3-2
changelog:
  - Fix binary path of rpm-loader
  - Map file with MAP_SHARED instead of MAP_PRIVATE
  - Fix segfault when interrupting fapolicyd startup


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-100
changelog:
  - fence_ibm_powervs: update description of api-type parameter to show
    correct default value
    Resolves: RHEL-114753


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-105
changelog:
  - bundled urllib3: fix CVE-2025-66471
  - bundled urllib3: fix CVE-2026-21441
    Resolves: RHEL-139799, RHEL-140796


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Release Engineering <releng@rockylinux.org> - 140.7.0-1
changelog:
  - Add custom Rocky Linux firefox prefs (Louis Abel)
  - Ensure mozilla API key is set for Rocky Linux (Mustafa Gezen)
  - Ensure s390x and riscv64 are locked to 3 CPU's (Louis Abel)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.9.18-0.6.20200715git0cd2e4a
changelog:
  - Use newest code from upstream, fixes build
  - Update foma-harden-build.patch
  - Package the pkgconfig file


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.9.18-0.9.20200928gitb44022c
changelog:
  - Fix typo in spec
  - Rewrite patch, name it foma-harden-build-fedora.patch and explain the need for it


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-7
changelog:
  - Resolves: RHEL-138206
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138228
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138158
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Jindrich Novy <jnovy@redhat.com> - 1.16-1
changelog:
  - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.16
  - fixes "Update fuse-overlayfs to 1.16 [rhel-9.7.z]"
  - Resolves: RHEL-128520


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Milan Crha <mcrha@redhat.com> - 2.6.0-8
changelog:
  - Backport Fedora change to provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format)
  - Resolves: RHEL-78739


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Andrew Price <anprice@redhat.com> - 3.5.0-1
changelog:
  - New upstream version
    Resolves: rhbz#2170017
  - Update tests
  - Disable LTO to fix unit test breakage in el9
  - gfs2_edit: Fix savemeta test failures in 32-bit environments


author: Andrew Price <anprice@redhat.com> - 3.5.1-2
changelog:
  - gfs2_edit: truncate to filesystem size at end of restoremeta()
    Resolves: RHEL-26661
  - Update tests/testsuite


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT
    compatibility. (RHEL-109622)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - Rebase to 3.8.10
  - Revert defaulting to PBMAC1 in FIPS mode
  - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.26.1-2
changelog:
  - fix buffer overflow in NMEA2000 driver (CVE-2025-67268)
  - fix integer underflow in handling of Navcom packets (CVE-2025-67269)


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Sayan Paul <saypaul@redhat.com> - 0.16.2
changelog:
  - restrict manual restart of healthcheck service
  - fixed error while running healtcheck inside container
  - removed bootupd dependency
  - fixed CI tests


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-12
changelog:
  - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass
    via AllowOverride FileInfo (CVE-2025-66200)
  - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable
    override (CVE-2025-65082)
  - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds
    query string to #exec cmd=... (CVE-2025-58098)


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Kamal Heib <kheib@redhat.com> - 60.0-1
changelog:
  - Rebase to upstream release v60.0
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-2
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-3
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 61.0-1
changelog:
  - Rebase to upstream release v61.0
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-2
changelog:
  - Verify IMA signature to make sure it's correct (RHEL-105471)
  - Drop old libimaevm.so.4 (RHEL-82797)


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
  - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
  - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
  - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
  - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-141297 Memory leaks in IPA plugins
  - Resolves: RHEL-141054 IPA fails to sign zone
  - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Andrea Claudi <aclaudi@redhat.com> - 1.2.2-1.el9
changelog:
  - New version 1.2.2 (Andrea Claudi) [RHEL-77280]
  - Fix buffer overflow via ifaces.c (Andrea Claudi) [RHEL-71493]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.482.b08-1
changelog:
  - Update to 8u482-b08 (GA).
  - Update release notes for 8u482-b08.
  - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this
  - Turn on system FreeType as on later JDK versions and add to _privatelibs
  - Set bundled FreeType version to 2.13.2 following JDK-8316028
  - Bump LCMS 2 version to 2.14.0 following JDK-8297088
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **
  - Resolves: RHEL-142687
  - Resolves: RHEL-139534
  - Resolves: RHEL-131588
  - Resolves: RHEL-131600
  - Resolves: RHEL-142875
  - Resolves: RHEL-142697


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.6-0.2.ea
changelog:
  - Update to jdk-11.0.25+6 (EA)
  - Update release notes to 11.0.25+6
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Related: RHEL-58775


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.7-0.3.ea
changelog:
  - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml
  - RHJDKBP-874 - Removed 
  - Related: RHEL-58775


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-2
changelog:
  - Update to jdk-11.0.25+9 (GA)
  - Update release notes to 11.0.25+9
  - Switch to GA mode for release
  - Related: RHEL-58775
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Antonio Vieiro <avieirov@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z
  - Resolves: RHEL-63042 
  - See-Also: RHEL-63043
  - See-Also: RHEL-63044


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.25.0.9-6
changelog:
  - Make java-11-openjdk the default JDK only on RHEL x86_32
  - Drop system timezone data dependency from base RHEL 11u builds
  - Resolves: RHEL-70599
  - See-Also: RHEL-70600
  - See-Also: RHEL-70601
  - Resolves: RHEL-71242
  - See-Also: RHEL-71243
  - See-Also: RHEL-71244


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.25.0.9-3
changelog:
  - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17
  - Disable copy-jdk-configs for Flatpak builds
  - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction
  - Resolves: RHEL-73880
  - See-Also: RHEL-73881
  - See-Also: RHEL-73882
  - See-Also: RHEL-73873


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.18+7 (EA)
  - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz
  - Set updatever to 18
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.18+7-ea.tar.xz
  - Set bundled libpng version to 1.6.51
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.18.0.8-1
changelog:
  - Update to jdk-17.0.18+8 (GA)
  - Add to .gitignore openjdk-17.0.18+8.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.18+8.tar.xz
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.10.0.7-1
changelog:
  - Update to jdk-21.0.10+7 (GA)
  - Update release notes to 21.0.10+7
  - Bump libpng version to 1.6.51 following JDK-8372534
  - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT
  - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-142859
  - Resolves: RHEL-139560
  - Resolves: RHEL-131592
  - Resolves: RHEL-131602
  - Resolves: RHEL-122121
  - Resolves: RHEL-142820
  - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Add java-25-openjdk-crypto-adapter subpackage
  - Update library setting in create-redhat-properties-files.bash
  - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties
  - Resolves: RHEL-132520
  - Resolves: RHEL-132523


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-2
changelog:
  - Incorporate new FIPS patch for 25u
  - Drop static libjvm.a following adjusted build target for portable build
  - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image
  - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-133743
  - Resolves: RHEL-133737
  - Related: RHEL-131898


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-662.el9]
changelog:
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139463] {CVE-2025-68305}
  - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Guillaume Nault) [RHEL-138491]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Ivan Vecera) [RHEL-132646]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Ivan Vecera) [RHEL-132646]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Ivan Vecera) [RHEL-132646]
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-137482]
  - powercap: intel_rapl: Add support for Wildcat Lake platform (CKI Backport Bot) [RHEL-95625]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136967] {CVE-2025-40294}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136823] {CVE-2025-38568}
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134735]
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134735]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Encode COMPOUND operation status on page boundaries (Olga Kornievskaia) [RHEL-134735]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134735]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134735]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134735]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136257] {CVE-2025-40318}
  - net: vlan: sync VLAN features with lower device (CKI Backport Bot) [RHEL-80409]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134449] {CVE-2025-40258}
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134005] {CVE-2025-40240}
  - inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-116117]
  - ipv4/route: avoid unused-but-set-variable warning (Guillaume Nault) [RHEL-116117]
  - net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133365]
  - openvswitch: Stricter validation for the userspace action (Paolo Valerio) [RHEL-115648]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Paolo Valerio) [RHEL-115648]
  - net: openvswitch: fix nested key length validation in the set() action (Paolo Valerio) [RHEL-115648]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Paolo Valerio) [RHEL-115648]
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Paolo Valerio) [RHEL-115648]
  - ethtool: Don't check for RXFH fields conflict when no input_xfrm is requested (Ivan Vecera) [RHEL-127561]
  - net: ethtool: don't mux RXFH via rxnfc callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hns3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hinic: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: nfp: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: mlx5: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: qede: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: benet: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: siena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: falcon: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sxgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: niu: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: otx2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: thunder: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnxt: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnx2x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: iavf: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ice: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: i40e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: fm10k: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ixgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igb: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: e1000e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: lan743x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cxgb4: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cisco: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: gianfar: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: hyperv: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: virtio: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: vmxnet3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: remove empty RXFH handling from drivers (Ivan Vecera) [RHEL-127561]
  - net: ethtool: add dedicated callbacks for getting and setting rxfh fields (Ivan Vecera) [RHEL-127561]
  - net: ethtool: require drivers to opt into the per-RSS ctx RXFH (Ivan Vecera) [RHEL-127561]
  - net: ethtool: remove the duplicated handling from rxfh and rxnfc (Ivan Vecera) [RHEL-127561]
  - net: ethtool: copy the rxfh flow handling (Ivan Vecera) [RHEL-127561]
  - net: ethtool: mm: reset verification status when link is down (Ivan Vecera) [RHEL-127569]
  - net: ethtool: mm: extract stmmac verification logic into common library (Ivan Vecera) [RHEL-127569]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129085] {CVE-2025-40170}
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-129085]
  - net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-129085]
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129022] {CVE-2025-40135}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128985] {CVE-2025-40158}
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128985]
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128985]
  - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128985]
  - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128985]
  - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 (Hangbin Liu) [RHEL-128985]
  - vrf: Fix lockdep splat in output path (Hangbin Liu) [RHEL-128985]
  - ipv6: remove nexthop_fib6_nh_bh() (Hangbin Liu) [RHEL-128985]
  - net: remove rcu_dereference_bh_rtnl() (Hangbin Liu) [RHEL-128985]
  - neighbour: switch to standard rcu, instead of rcu_bh (Hangbin Liu) [RHEL-128985]
  - ipv6: flowlabel: do not disable BH where not needed (Hangbin Liu) [RHEL-128985]
  - ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() (Hangbin Liu) [RHEL-128985]
  - neigh: introduce neigh_confirm() helper function (Hangbin Liu) [RHEL-128985]
  - net: Prevent use after free in netif_napi_set_irq_locked() (Petr Oros) [RHEL-83023]
  - net: move aRFS rmap management and CPU affinity to core (Petr Oros) [RHEL-83023]
  - xfrm: Check inner packet family directly from skb_dst (Hangbin Liu) [RHEL-95005]
  - xfrm: fix offloading of cross-family tunnels (Hangbin Liu) [RHEL-95005]
  - udp: also consider secpath when evaluating ipsec use for checksumming (Hangbin Liu) [RHEL-95005]
  - xfrm: restore GSO for SW crypto (Hangbin Liu) [RHEL-95005]
  - xfrm: always initialize offload path (Hangbin Liu) [RHEL-95005]
  - xfrm: check for PMTU in tunnel mode for packet offload (Hangbin Liu) [RHEL-95005]
  - xfrm: provide common xdo_dev_offload_ok callback implementation (Hangbin Liu) [RHEL-95005]
  - xfrm: rely on XFRM offload (Hangbin Liu) [RHEL-95005]
  - xfrm: simplify SA initialization routine (Hangbin Liu) [RHEL-95005]
  - xfrm: delay initialization of offload path till its actually requested (Hangbin Liu) [RHEL-95005]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-663.el9]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-58952]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140261] {CVE-2025-68349}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131389] {CVE-2025-39933}
  - redhat/kernel.spec.template: Let kernel-modules installation rebuild initrd in UKI system (Li Tian) [RHEL-135721]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129113] {CVE-2025-40154}
  - xfrm: bring back device check in validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - bonding: Fix multiple long standing offload races (Hangbin Liu) [RHEL-116770]
  - bonding: Mark active offloaded xfrm_states (Hangbin Liu) [RHEL-116770]
  - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Hangbin Liu) [RHEL-116770]
  - xfrm: Remove unneeded device check from validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - xfrm: Use xdo.dev instead of xdo.real_dev (Hangbin Liu) [RHEL-116770]
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Hangbin Liu) [RHEL-116770]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-664.el9]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137435]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137435]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137435] {CVE-2025-38576}
  - objtool: Fix standalone --hacks=jump_label (Rado Vrbovsky) [RHEL-114923]
  - objtool: Fix weak symbol detection (Rado Vrbovsky) [RHEL-114923]
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Rado Vrbovsky) [RHEL-114923]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135362]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9]
changelog:
  - sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542]
  - sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326]
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722]
  - devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722]
  - devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722]
  - devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722]
  - devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722]
  - devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722]
  - devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722]
  - devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722]
  - devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722]
  - devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722]
  - devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722]
  - devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722]
  - devlink/port: Simplify return checks (Petr Oros) [RHEL-121722]
  - netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722]
  - devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722]
  - selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722]
  - devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722]
  - netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722]
  - docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722]
  - selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722]
  - documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722]
  - devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722]
  - x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225]
  - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225]
  - x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225]
  - x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225]
  - x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225]
  - cpu: Define attack vectors (Waiman Long) [RHEL-119225]
  - Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225]
  - x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225]
  - x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225]
  - x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225]
  - x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225]
  - x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225]
  - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225]
  - Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225]
  - redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225]
  - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225]
  - cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225]
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-666.el9]
changelog:
  - wifi: rtw88: limit indirect IO under powered off for RTL8822CS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix firmware version handling (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Move mt76_abort_scan out of mt76_reset_device() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: hw_scan: Don't let the operating channel be last (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: always take beacon ies in link grading (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: fix beacon template/fixed rate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix aux ROC time event iterator usage (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Fix possible NULL dereference (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: skip rate verification for not captured PSDUs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reject address change while connecting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: zero init info->status in wmi_process_mgmt_tx_comp() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Limit destroy_on_close radio removal to netgroup (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath12k: Fix missing station power save configuration" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for csa.switch_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ml_reconf_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: use wiphy_hrtimer_work for ttlm_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: add an hrtimer based delayed work item (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Revert "wifi: ath10k: avoid unnecessary wait for service ready message" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix key tailroom accounting leak (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix crash while sending Action Frames in standalone AP Mode (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40321}
  - wifi: mac80211: reset FILS discovery and unsol probe resp intervals (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fix potential use after free in iwl_mld_remove_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: free skb during idr cleanup callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix memory leak on unsupported WMI command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: fix width unit in cfg80211_radio_chandef_valid() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: HAL SRNG: don't deinitialize and re-initialize again (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enforce CPU endian format for all QMI data (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Use 1KB Cache Flush Command for QoS TID Descriptors (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Fix flush cache failure during RX queue update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add Retry Mechanism for REO RX Queue Update Failures (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor REO command to use ath12k_dp_rx_tid_rxq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID buffer cleanup into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Refactor RX TID deletion handling into helper function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Increase DP_REO_CMD_RING_SIZE to 256 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove IEEE80211_CHAN_{1,2,4,8,16}MHZ flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix Rx packet handling when pubsta information is not available (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: remove ieee80211_s1g_channel_width (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: correctly initialise S1G chandef for STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: correctly implement and validate S1G chandef (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: remove tx_handlers_drop debugfs stats (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Remove redundant rcu_read_lock/unlock() in spin_lock (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211_hwsim: Add simulation support for NAN device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Extend support for changing NAN configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Export an API to check if NAN is started (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Get the correct interface for non-netdev skb status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Track NAN interface start/stop (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Accept management frames on NAN interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Support Tx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Store the NAN cluster ID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Support Tx/Rx of action frame for NAN (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Advertise supported NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more NAN capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Add cluster joined notification APIs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add NAN Discovery Window (DW) notification (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add more configuration options for NAN commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Extend beacon miss handling for MLO non-AP STA (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to handle reason inactivity STA kickout event for QCN9274/IPQ5332 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: enhance the WMI_PEER_STA_KICKOUT event with reasons and RSSI reporting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: report station mode per-chain signal strength (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: Fix connection after GTK rekeying (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath10k: avoid unnecessary wait for service ready message (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: fix NULL dereference in ath11k_qmi_m3_load() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-39991}
  - wifi: ath10k: remove gpio number assignment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: Remove redundant semicolon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix wrong logging ID used for CE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath11k: downgrade log level for CE buffer enqueue failure (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add fallback for invalid channel number in PHY metadata (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix the fetching of combined rssi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix HAL_PHYRX_COMMON_USER_INFO handling in monitor mode (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: fix signal in radiotap for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: ath12k: Add support to set per-radio RTS threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: enable TKIP related feature (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8922a: add TAS feature support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: open C2H event waiting window first before sending H2C command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: renew a completion for each H2C command waiting C2H event (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852b: enable beacon tracking support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: support SER L0 simulation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: phy: initialize AFE by firmware element table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: obtain RX path from ppdu status IE00 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: disable RTW89_PHYSTS_IE09_FTR_0 for ppdu status (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use ieee80211_tx_info::driver_data to store driver TX info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: chan: allow callers to check if a link has no managed chanctx (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: abort scan/roc on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: improve phy reset on hw restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fill User Priority in skb->priority for rx packets (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: set VTA in txwi (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove the mem_total field of STA_REC_BF command (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: disable promiscuous mode by default (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: use altx queue for offchannel tx on connac+ (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix updating beacon protection with beacons enabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix key add/remove imbalance (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: delete vif keys when requested (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix memory leak on mt7996_mcu_sta_key_tlv error (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: fix setting beacon protection keys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: decrease timeout for commonly issued MCU commands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: improve hardware restart reliability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: remove redundant per-phy mac80211 calls during restart (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921u: Add VID/PID for Netgear A7500 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt76_eeprom_override to int (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: support writing MAC TXD for AddBA Request (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: refine the txpower initialization flow (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7915: fix mt7981 pre-calibration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add mt76_dma_get_rxdmad_c_buf utility routione (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Decouple RRO logic from WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add rx_queue_init callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce RRO MSDU callbacks (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix tx-queues initialization for second phy on mt7996 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Introduce the capability to reset MT7992 WED device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable HW RRO for MT7992 chipset (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Initial DMA configuration for MT7992 WED support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Do not always enable NAPIs for WED RRO queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Differentiate between RRO data and RRO MSDU queues (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove q->ndesc check in mt76_dma_rx_fill() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Add reset_idx to reset_q mt76_queue_ops signature. (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Enable MLO support for client interfaces (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set EML capabilities for AP interface (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Export MLO AP capabilities to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Temporarily disable EPCS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Implement MLD address translation for EAPOL (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Add all active links to poll list in mt7996_mac_tx_free() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_reverse_frag0_hdr_trans for MLO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use proper link info in mt7996_mcu_add_group (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: Add 160MHz beamformee capability for mt7922 device (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add pci restore for hibernate (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Check phy before init msta_link in mt7996_mac_sta_add_links() (Jose Ignacio Tornos Martinez) [RHEL-132587] {CVE-2025-40066}
  - wifi: mt76: mt7996: Use proper link_id in link_sta_rc_update callback (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: Remove dead code in mt76_scan_work (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Use deflink for AMPDU rx reordering (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7921: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: fix potential memory leak in mt76_wmac_probe() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925: add MBSSID support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7925u: Add VID/PID for Netgear A9000 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set proper link destination address in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Set def_wcid pointer in mt7996_mac_sta_init_link() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_bss_mld_tlv routine (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Fix mt7996_mcu_sta_ba wcid configuration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mt76: mt7996: Overwrite unspecified link_id in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix endianness handling in mwifiex_send_rgpower_table (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove the redundant wiphy_dev (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: fix incorrect comment (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: update the time stamps in hidden ssid (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix HE capabilities element check (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: add tx_handlers_drop statistics to ethtool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: CHANNEL_SURVEY_NOTIF is always supported (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of iwl_esr_mode_notif version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support from of sta cmd version 1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of roc cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove support of mac cmd ver 2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider phy cmd version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: implement wowlan status notification API update (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: fw: Add ASUS to PPAG and TAS list (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add kunit tests for nvm parse (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: api: add a flag to iwl_link_ctx_modify_flags (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move ltr_enabled to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: move pm_support to the specific transport (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: rename iwl_finish_nic_init (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: replace SUPPRESS_CMD_ERROR_ONCE status bit with a boolean (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add STATUS_FW_ERROR API (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:3327 for D-Link AX18U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: Add USB ID 2001:332a for D-Link AX9U rev. A1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: expose efuse via debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Fix dentry reference leak in iwl_mld_add_link_debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mei: Remove unused flexible-array member in struct iwl_sap_hdr (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove redundant header files (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: Remove duplicated include in trans.c (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: fix double free in mwifiex_send_rgpower_table() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: Fix 6 GHz Band capabilities element advertisement in lower bands (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of rts_threshold (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: reduce the scope of link_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: support AP isolation to restrict reachability between stations (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: strict checking attributes for NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: drivers: indicate support for attributes in NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: allow drivers to support subset of NL80211_CMD_SET_BSS (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: nl80211: Add EHT fixed Tx rate support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: kunit: add kunit tests for S1G PVB decoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support parsing S1G TIM PVB (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: support block bitmap S1G TIM encoding (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: send world regulatory domain to driver (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mwifiex: add rgpower table loading support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: brcmfmac: avoid assignment in if/else-if conditions in NVRAM load path (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: mac80211: count reg connection element in the size (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: cfg80211: Remove unused tracepoints (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Remove redundant off_reverse variables (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: use int type to store negative error codes (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add getting function of DMA channel v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: abstract getting function of DMA channel (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add RPP parser v1 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: abstract RPP parser (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add group BD address design (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: define TX/RX buffer descriptor pool (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: add struct rtw89_{tx,rx}_rings to put related fields (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: use RDU status of R_BE_PCIE_DMA_IMR_0_V1 instead for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: prepare interrupt related registers and functions for 8922DE (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: pci: move chip ISR definition out from chip generation (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Remove TL-WN722N V2 (0x2357: 0x010c) from untested devices (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't support WH a step (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: remove a TODO (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: carefully select the PNVM source (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: make iwl_mld_rm_vif void (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: remember when interrupts are disabled (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support TLC command version 5 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: move gen specific code to a function (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: gen1_2: rename iwl_trans_pcie_op_mode_enter (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: really remove hw_wfpm_id (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove unneeded jacket indication (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: don't publish TWT capabilities (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: move dev_cmd_pool to trans specific (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove .pnvm files from module info (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: acpi: make iwl_guid static (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: uefi: remove runtime check of constant values (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: refactor iwl_pnvm_get_from_fs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: iwl-config: include module.h (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't modify trans state where not needed (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_trans_pcie_d3_resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove STATUS_SUSPENDED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: trans: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: remove dump file name extension support (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove d3 test code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: add a new FW file numbering scheme (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: add few missing hcmd/notif names (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: Add debug log for second link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: simplify iwl_poll_prph_bit return value (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: pcie: relocate finish_nic_init logic to gen1_2 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: trigger mlo scan only when not in EMLSR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't check the cipher on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't validate keys state on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: rename iwl_mld_set_key_rx_seq (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: refactor iwl_mld_add_all_rekeys (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: don't consider old versions of PPAG (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: make ppag versioning clear (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - Reapply "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: bump MIN API in HR/GF/BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove a function declaration (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld/mvm: set beacon protection capability in wowlan config (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm/mld: correctly retrieve the keyidx from the beacon (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: track BIGTK per link (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: support MLO rekey on resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mld: cleanup cipher lookup in resume (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: iwlwifi: mvm: remove MLO code (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Use led->brightness_set_blocking for PCI too (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: coex: Limit Wi-Fi scan slot cost to avoid A2DP glitch (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: update firmware crash trigger type for newer firmware (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report average RSSI to avoid unnecessary scanning (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852a: report per-channel noise level by get_survey ops (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Simplify unnecessary if-else conditions in _dpk_onoff() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtl8xxxu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188 (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix group frames loss when connected to non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: fix BSSID comparison for non-transmitted BSSID (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852c: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update TX wideband IQK (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8851b: rfk: update IQK TIA setting (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: wow: remove notify during WoWLAN net-detect (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: debug: add beacon_info debugfs (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: introduce beacon tracking to improve connection stability (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: 8852bt: Use standard helper for string choice (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: add dummy C2H handlers for BCN resend and update done (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw89: print just once for unknown C2H events (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: Lock rtwdev->mutex before setting the LED (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - wifi: rtw88: sdio: use indirect IO for device registers before power-on (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - ktime: Add us_to_ktime() (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - net: convert to nla_get_*_default() [wireless] (Jose Ignacio Tornos Martinez) [RHEL-132587]
  - eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138032] {CVE-2025-38349}
  - blk-mq: Abort suspend when wakeup events are pending (Ming Lei) [RHEL-137855]
  - fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137099] {CVE-2025-40271}
  - idpf: set mac type when adding and removing MAC filters (Michal Schmidt) [RHEL-82234 RHEL-91991 RHEL-92017]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-667.el9]
changelog:
  - nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready() (Maurizio Lombardi) [RHEL-87800]
  - ata: libata-scsi: Fix system suspend for a security locked drive (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Use correct DMI identifier for ASUSPRO-D840SA LPM quirk (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix ata_to_sense_error() status handling (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for Asus B550-F motherboard (Tomas Henzl) [RHEL-106827]
  - ata: ahci: Disallow LPM for ASUSPRO-D840SA motherboard (Tomas Henzl) [RHEL-106827]
  - ata: libata-scsi: Fix offsets for the fixed format sense data (Tomas Henzl) [RHEL-106827]
  - RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug (CKI Backport Bot) [RHEL-137065] {CVE-2025-38024}
  - scsi: qla2xxx: Update version to 10.02.10.100-k (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Fix bsg_done() causing double free (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Query FW again before proceeding with login (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate sp before freeing associated memory (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Free sp in error path to fix system crash (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Delay module unload while fabric scan in progress (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Allow recovery for tape devices (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add bsg interface to support firmware img validation (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Validate MCU signature before executing MBC 03h (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add load flash firmware mailbox support for 28xxx (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add support for 64G SFP speed (Nilesh Javali) [RHEL-136530]
  - scsi: qla2xxx: Add Speed in SFP print information (Nilesh Javali) [RHEL-136530]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-668.el9]
changelog:
  - bonding: don't set oif to bond dev when getting NS target destination (CKI Backport Bot) [RHEL-128764]
  - thunderbolt: Add support for Intel Wildcat Lake (Desnes Nunes) [RHEL-95661]
  - crypto: seqiv - Do not use req->iv after crypto_aead_encrypt (Xin Long) [RHEL-118175]
  - redhat: hsr: Remove tech preview tainting (Felix Maurer) [RHEL-100941]
  - redhat: Package net/hsr selftests (Felix Maurer) [RHEL-127796]
  - net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() (Felix Maurer) [RHEL-127794]
  - hsr: Follow standard for HSRv0 supervision frames (Felix Maurer) [RHEL-127794]
  - hsr: Fix supervision frame sending on HSRv0 (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent creation of HSR device with slaves from another netns (Felix Maurer) [RHEL-127794]
  - net/hsr: add interlink to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - net/hsr: add protocol version to fill_info output (Felix Maurer) [RHEL-127764 RHEL-127794]
  - hsr: hold rcu and dev lock for hsr_get_port_ndev (Felix Maurer) [RHEL-127794]
  - hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr (Felix Maurer) [RHEL-127794]
  - hsr: use rtnl lock when iterating over ports (Felix Maurer) [RHEL-127794]
  - hsr: use netdev_master_upper_dev_link() when linking lower ports (Felix Maurer) [RHEL-127794]
  - net, hsr: reject HSR frame if skb can't hold tag (Felix Maurer) [RHEL-127794] {CVE-2025-39703}
  - net: hsr: sync hw addr of slave2 according to slave1 hw addr on PRP (Felix Maurer) [RHEL-127794 RHEL-130474]
  - redhat: hsr: Enable KUnit test for PRP duplicate discard (Felix Maurer) [RHEL-127794]
  - net: hsr: Add KUnit test for PRP (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix PRP duplicate detection (Felix Maurer) [RHEL-127794]
  - net: hsr: Create and export hsr_get_port_ndev() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove synchronize_rcu() from hsr_add_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: remove one synchronize_rcu() from hsr_del_port() (Felix Maurer) [RHEL-127794]
  - net: hsr: must allocate more bytes for RedBox support (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Add test for VLAN (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN CTAG filter support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - net: hsr: Add VLAN support (Felix Maurer) [RHEL-127794 RHEL-130476]
  - tests: hsr: Increase timeout to 50 seconds (Felix Maurer) [RHEL-127794]
  - net: hsr: convert to use new timer APIs (Felix Maurer) [RHEL-127794]
  - net: hsr: Remove interlink_sequence_nr. (Felix Maurer) [RHEL-127794]
  - net: hsr: Use the seqnr lock for frames received via interlink port. (Felix Maurer) [RHEL-127794]
  - net: hsr: prevent NULL pointer dereference in hsr_proxy_announce() (Felix Maurer) [RHEL-127794]
  - net: hsr: cosmetic: Remove extra white space (Felix Maurer) [RHEL-127794]
  - treewide, timers: Rename from_timer() to timer_container_of() (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Send supervisory frames to HSR network with ProxyNodeTable data (Felix Maurer) [RHEL-100940 RHEL-127794]
  - selftests: hsr: Extend the hsr_ping.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the hsr_redbox.sh test to use fixed MAC addresses (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Fix "File exists" errors for hsr_ping (Felix Maurer) [RHEL-127794]
  - test: hsr: Extend the hsr_redbox.sh to have more SAN devices connected (Felix Maurer) [RHEL-127794]
  - test: hsr: Call cleanup_all_ns when hsr_redbox.sh script exits (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: init prune_proxy_timer sooner (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Add test for HSR RedBOX (HSR-SAN) mode of operation (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Extract version agnostic information from ping command output (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Move common code to hsr_common.sh file (Felix Maurer) [RHEL-100940 RHEL-127794]
  - test: hsr: Remove script code already implemented in lib.sh (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Provide RedBox support (HSR-SAN) (Felix Maurer) [RHEL-100940 RHEL-127794]
  - net: hsr: Use full string description when opening HSR network device (Felix Maurer) [RHEL-127794]
  - net: hsr: Fix typo in the hsr_forward_do() function comment (Felix Maurer) [RHEL-127794]
  - net: hsr: constify the struct device_type usage (Felix Maurer) [RHEL-127794]
  - net: fill in MODULE_DESCRIPTION()s for HSR (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Extend the testsuite to also cover HSRv1. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Reorder the testsuite. (Felix Maurer) [RHEL-127794]
  - selftests: hsr: Use `let' properly. (Felix Maurer) [RHEL-127794]
  - net/hsr: Remove unused function declarations (Felix Maurer) [RHEL-127794]
  - net: ionic: map SKB after pseudo-header checksum prep (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: add dma_wmb() before ringing TX doorbell (Jakub Ramaseuski) [RHEL-127815]
  - ionic: convert to ndo_hwtstamp API (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix memory leak of admin q_wr (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Use ether_addr_copy instead of memcpy (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Fix build failure on SPARC due to xchg() operand size (Jakub Ramaseuski) [RHEL-127815]
  - ionic: use int type for err in ionic_get_module_eeprom_by_page (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Add Makefile/Kconfig to kernel build environment (Jakub Ramaseuski) [RHEL-127815]
  - RDMA: Add IONIC to rdma_driver_id definition (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Implement device stats ops (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for miscellaneous functionality (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for datapath (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register device ops for control path (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Create device queues to support admin operations (Jakub Ramaseuski) [RHEL-127815]
  - RDMA/ionic: Register auxiliary module for ionic ethernet adapter (Jakub Ramaseuski) [RHEL-127815]
  - redhat/configs: Disable CONFIG_INFINIBAND_IONIC in generic (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide doorbell and CMB region information (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide interrupt allocation support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Provide RDMA reset support for the RDMA driver (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Export the APIs from net driver to support device commands (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Update LIF identity with additional RDMA capabilities (Jakub Ramaseuski) [RHEL-127815]
  - net: ionic: Create an auxiliary device for rdma driver (Jakub Ramaseuski) [RHEL-127815]
  - ethernet: ionic: Fix DMA mapping tests (Jakub Ramaseuski) [RHEL-127815]
  - ionic: cancel delayed work earlier in remove (Jakub Ramaseuski) [RHEL-127815]
  - ionic: clean dbpage in de-init (Jakub Ramaseuski) [RHEL-127815]
  - ionic: print firmware heartbeat as unsigned (Jakub Ramaseuski) [RHEL-127815]
  - ionic: Prevent driver/fw getting out of sync on devcmd(s) (Jakub Ramaseuski) [RHEL-127815]
  - redhat: enable TDX host config (Paolo Bonzini) [RHEL-115482]
  - KVM: TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-115482]
  - x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-115482]
  - x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-115482]
  - x86/virt/tdx: Avoid indirect calls to TDX assembly functions (Paolo Bonzini) [RHEL-115482]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-669.el9]
changelog:
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144333] {CVE-2026-22998}
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Scott Mayhew) [RHEL-141483]
  - virtio-net: remove unused delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't schedule delayed refill worker (Laurent Vivier) [RHEL-139819]
  - virtio-net: don't re-enable refill work too early when NAPI is disabled (Laurent Vivier) [RHEL-139819]
  - virtio-net: disable delayed refill when pausing rx (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_disable paths (Laurent Vivier) [RHEL-139819]
  - virtio-net: Refactor napi_enable paths (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_tx_resize() (Laurent Vivier) [RHEL-139819]
  - virtio_net: separate virtnet_rx_resize() (Laurent Vivier) [RHEL-139819]
  - vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137698] {CVE-2025-38403}
  - ftrace: bpf: Fix IPMODIFY + DIRECT in modify_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix BPF fexit with livepatch (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/modules: replace stub allocation sentinel with an explicit counter (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: ensure ftrace record ops are always set for NOPs (Mamatha Inamdar) [RHEL-14156]
  - redhat: Add CONFIG_PPC_FTRACE_OUT_OF_LINE_NUM_RESERVE (Mamatha Inamdar) [RHEL-14156]
  - ftrace: fix incorrect hash size in register_ftrace_direct() (Mamatha Inamdar) [RHEL-14156]
  - kbuild: dummy-tools: pretend we understand -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - ftrace: Fix modification of direct_function hash while in use (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix module loading without patchable function entries (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Replace kretprobe code with rethook on powerpc (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: fix clobbered r15 during livepatching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/bpf: fix JIT code size calculation of bpf trampoline (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Fix ftrace bug with KASAN=y (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Add support for bpf trampolines (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_DIRECT_CALLS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for DYNAMIC_FTRACE_WITH_CALL_OPS (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Support .text larger than 32MB with out-of-line stubs (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Move ftrace sequence out of line (Mamatha Inamdar) [RHEL-14156]
  - kbuild: Add generic hook for architectures to use before the final vmlinux link (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add a postlink script to validate function tracer (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Move ftrace stub used for init text before _einittext (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Skip instruction patching if the instructions are the same (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Remove pointer to struct module from dyn_arch_ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc64/ftrace: Nop out additional 'std' instruction emitted by gcc v5.x (Mamatha Inamdar) [RHEL-14156]
  - powerpc/kprobes: Use ftrace to determine if a probe is at function entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/trace: Account for -fpatchable-function-entry support by toolchain (Mamatha Inamdar) [RHEL-14156]
  - kbuild: move vmlinux.o rule to the top Makefile (Mamatha Inamdar) [RHEL-14156]
  - powerpc/code-patching: Use dedicated memory routines for patching (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Ignore ftrace locations in exit text sections (Mamatha Inamdar) [RHEL-14156]
  - powerpc: Fix build issue with LD_DEAD_CODE_DATA_ELIMINATION and FTRACE_MCOUNT_USE_PATCHABLE_FUNCTION_ENTRY (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add support for -fpatchable-function-entry (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement ftrace_replace_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Replace use of ftrace_call_replace() with ftrace_create_branch_inst() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_modify_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_call() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify ftrace_make_nop() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add separate ftrace_init_nop() with additional validation (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Stop re-purposing linker generated long branches for ftrace (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_modify_code() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Simplify function_graph support in ftrace.c (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Use patch_instruction() return directly (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Have arch_ftrace_get_regs() return NULL unless FL_SAVE_REGS is set (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Add recursion protection in prepare_ftrace_return() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Also save r1 in ftrace_caller() (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: directly call of function graph tracer by ftrace caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Refactor ftrace_{en/dis}able_ftrace_graph_caller (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Implement CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]
  - powerpc/ftrace: Prepare PPC64's ftrace_caller() for CONFIG_DYNAMIC_FTRACE_WITH_ARGS (Mamatha Inamdar) [RHEL-14156]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-670.el9]
changelog:
  - memblock: Accept allocated memory before use in memblock_double_array() (Aristeu Rozanski) [RHEL-140475]
  - Reapply "Bluetooth: revert TX timestamping" for kernel v6.18 rebase. (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: enable PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: SMP: Fix not generating mackey and ltk when repairing (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Avoid btusb_mtk_claim_iso_intf() NULL deref (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: lookup hci_conn on RX path on protocol side (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix triggering cmd_timer for HCI_OP_NOP (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: mediatek: Fix kernel crash when releasing mtk iso interface (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Avoid loading the config file on security chips (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: Fix not handling PA Sync Lost event (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: add missing l2cap_chan_lock() (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: Don't hold spin lock over sleeping functions (David Marlin) [RHEL-141499]
  - Bluetooth: L2CAP: export l2cap_chan_hold for modules (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: fix BDADDR_LE vs ADDR_LE_DEV address type confusion (David Marlin) [RHEL-141499]
  - Bluetooth: 6lowpan: reset link-local header on ipv6 recv path (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: cancel mesh send timer when hdev removed (David Marlin) [RHEL-141499]
  - Bluetooth: btrtl: Fix memory leak in rtlbt_parse_firmware_v2() (David Marlin) [RHEL-141499]
  - Bluetooth: hci_event: validate skb length for unknown CC opcode (David Marlin) [RHEL-141499]
  - Bluetooth: rfcomm: fix modem control handling (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Fix tracking of periodic advertisement (David Marlin) [RHEL-141499]
  - Bluetooth: hci_conn: Fix connection cleanup with BIG with 2 or more BIS (David Marlin) [RHEL-141499]
  - Bluetooth: fix corruption in h4_recv_buf() after cleanup (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Fix event packet loss issue (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix another instance of dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: btmtksdio: Add pmctrl handling for BT closed state during reset (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Fix BIS connection dst_type handling (David Marlin) [RHEL-141499]
  - Bluetooth: Avoid a couple dozen -Wflex-array-member-not-at-end warnings (David Marlin) [RHEL-141499]
  - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: don't leak skb in ISO_CONT RX (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: free rx_skb if not consumed (David Marlin) [RHEL-141499]
  - Bluetooth: SCO: Fix UAF on sco_conn_free (David Marlin) [RHEL-141499]
  - Bluetooth: bcsp: receive data only if registered (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3633 for MT7922 (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add new VID/PID 13d3/3627 for MT7925 (David Marlin) [RHEL-141499]
  - Bluetooth: remove duplicate h4_recv_buf() in header (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Check for unexpected bytes when defragmenting HCI frames (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print information of hcon on hci_low_sent (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Print number of packets in conn->data_q (David Marlin) [RHEL-141499]
  - Bluetooth: Add function and line information to bt_dbg (David Marlin) [RHEL-141499]
  - Bluetooth: MGMT: Fix not exposing debug UUID on MGMT_OP_READ_EXP_FEATURES_INFO (David Marlin) [RHEL-141499]
  - Bluetooth: hci_core: Detect if an ISO link has stalled (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Use sk_sndtimeo as conn_timeout (David Marlin) [RHEL-141499]
  - Bluetooth: HCI: Fix using LE/ACL buffers for ISO packets (David Marlin) [RHEL-141499]
  - Bluetooth: ISO: Don't initiate CIS connections if there are no buffers (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Refactor Device Coredump (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Use strscpy() instead of strscpy_pad() (David Marlin) [RHEL-141499]
  - Bluetooth: Annotate struct hci_drv_rp_read_info with __counted_by_le() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Define hdev->wakeup() callback (David Marlin) [RHEL-141499]
  - Bluetooth: btusb: Add USB ID 2001:332a for D-Link AX9U rev. A1 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Move model comment before its definition (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add id of Scorpious, Panther Lake-H484 (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add Bluetooth core/platform as comments (David Marlin) [RHEL-141499]
  - Bluetooth: btintel_pcie: Add support for _suspend() / _resume() (David Marlin) [RHEL-141499]
  - Bluetooth: btintel: Add support for BlazarIW core (David Marlin) [RHEL-141499]
  - Revert "Bluetooth: revert TX timestamping" (David Marlin) [RHEL-141499]
  - dm log-writes: Add missing set_freezable() for freezable kthread (Benjamin Marzinski) [RHEL-136400]
  - dm-raid: fix possible NULL dereference with undefined raid type (Benjamin Marzinski) [RHEL-136400]
  - dm-snapshot: fix 'scheduling while atomic' on real-time kernels (Benjamin Marzinski) [RHEL-136400]
  - dm-verity: fix unreliable memory allocation (Benjamin Marzinski) [RHEL-136400]
  - perf jitdump: Add sym/str-tables to build-ID generation (Michael Petlan) [RHEL-139923]
  - perf genelf: Fix NO_LIBDW=1 build (Michael Petlan) [RHEL-139923]
  - perf genelf: Remove libcrypto dependency and use built-in sha1() (Michael Petlan) [RHEL-139923]
  - perf util: add a basic SHA-1 implementation (Michael Petlan) [RHEL-139923]
  - dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139700]
  - dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-139700]
  - net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-131711]
  - net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-131711]
  - gfs2: Clean up quotad timeout handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Minor cosmetic remote delete cleanups (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix remote evict for read-only filesystems (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: fix freeze error handling (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: Use wait_event_freezable_timeout() for freezable kthread (Andreas Gruenbacher) [RHEL-129403]
  - gfs2: low-memory forced flush fixes (Andreas Gruenbacher) [RHEL-129403]
  - redhat/configs: Add CONFIG_CRYPTO_DEV_QAT_6XXX (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix warning on adf_pfvf_pf_proto.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add bank state save and restore for qat_420xx (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix parameter order used in ICP_QAT_FW_COMN_FLAGS_BUILD (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix duplicate restarting msg during AER error (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add WQ_PERCPU to alloc_workqueue users (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use simple_strtoull to improve qat_uclo_parse_num (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Return pointer directly in adf_ctl_alloc_resources (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - Replace kzalloc() + copy_from_user() with memdup_user() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use kcalloc() in qat_uclo_map_objs_from_mof() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add command queue telemetry counters for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add ring buffer idle telemetry counter for GEN6 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - make adf_dev_autoreset() static (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor ring-related debug functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix seq_file position update in adf_ring_next() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix DMA direction for compression on GEN2 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - flush misc workqueue during device shutdown (Vladislav Dronov) [RHEL-94929] {CVE-2025-39721}
  - crypto: qat - enable rate limiting feature for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add compression slice count for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add get_svc_slice_cnt() in device data structure (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add adf_rl_get_num_svc_aes() in rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate service related functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - consolidate service enums (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service for rate limiting (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - validate service in rate limiting sysfs api (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update debugfs-driver-qat_telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable telemetry for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add decompression service to telemetry (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable power management debugfs for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate power management debugfs helper APIs (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix virtual channel configuration for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add live migration enablers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate and rename bank state structure definition (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - relocate bank state helper functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - replace CHECK_STAT macro with static inline function (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in adf_gen4_hw_data.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - disable ZUC-256 capability for QAT GEN5 (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - restore ASYM service support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - remove duplicate masking for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - lower priority for skcipher and aead algorithms (Vladislav Dronov) [RHEL-94929]
  - Documentation: qat: update sysfs-driver-qat for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add support for decompression service to GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - fix state restore for banks with exceptions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - allow enabling VFs in the absence of IOMMU (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use unmanaged allocation for dc_data (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add missing header inclusion (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable reporting of error counters for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - enable RAS support for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat/qat_6xxx - Fix NULL vs IS_ERR() check in adf_probe() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add qat_6xxx driver (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add firmware headers for GEN6 devices (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - update firmware api (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_init_admin_pm() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - expose configuration functions (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - export adf_get_service_mask() (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - add GEN6 firmware loader (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor FW signing algorithm (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - use pr_fmt() in qat uclo.c (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - refactor compression template logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - rename and relocate timer logic (Vladislav Dronov) [RHEL-94929]
  - crypto: qat - include qat_common in top Makefile (Vladislav Dronov) [RHEL-94929]
  - workqueue: Add new WQ_PERCPU flag (Vladislav Dronov) [RHEL-94929]
  - bitfield: Add FIELD_MODIFY() helper (Vladislav Dronov) [RHEL-94929]
  - sprintf.h requires stdarg.h (Vladislav Dronov) [RHEL-94929]
  - smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (CKI Backport Bot) [RHEL-130018] {CVE-2025-40168}


author: Release Engineering <releng@rockylinux.org> - 5.14.0-670
changelog:
  - Replace sbat with Rocky Linux sbat (label)
  - Change bug tracker URL (label)
  - Ensure appended release in sbat is removed


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Tao Liu <ltao@redhat.com> - 2.0.29-12
changelog:
  - Allow "sudo kdumpctl" for LUKS dump target
  - Restore SELinux label of crypttab file
  - Allow kdump.service to access LUKS volume keys
  - Wait for LUKS configfs API to be ready
  - Change LUKS volume key prefix to kdump-cryptsetup:vk-
  - Remove unused LUKS volume keys from keyring
  - Limit LUKS support to x86_64
  - Add kdumpctl setup-crypttab subcommand
  - Return LUKS devices in the form of UUIDs directly
  - Fix SC2181 issues in kdump-udev-throttler
  - LUKS: make /usr writable
  - Address CPU/memory hot plugging for kdump LUKS support
  - shfmt kdump-udev-throttler
  - Use cryptsetup --link-vk-to-keyring to save volume keys
  - Support dumping to a LUKS-encrypted target
  - Add a helper function to get uuid by MAJ:MIN


author: Pingfan Liu <piliu@redhat.com> - 2.0.29-14
changelog:
  - powerpc: Set nr_cpus=16 for kdump kernel
  - powerpc: consider CPU count while calculating crashkernel value
  - Use all available CPUs to collect dump


author: Lichen Liu <lichliu@redhat.com> - 2.0.29-15
changelog:
  - sysconfig: use initramfs_options to reduce memory usage
  - kdump-lib-initramfs: rewrite kdump_get_conf_val
  - kdump-lib-initramfs: Fix performance regression in kdump_get_conf_val


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Dodji Seketeli <dodji@redhat.com> - 2.7-1
changelog:
  - Update to upstream 2.7 tarball
  - Add binutils-devel as buildrequire to potentially enable the CTF
    backend.  This will allow the enabling of the CTF backend for
    binutils-devel > 2.35.2
  - Update to changing SONAME (libabigail.so.6.0.0)
  - Add --enable-ctf to the configure command line


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Update to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify the %check section
  - Resolves: RHEL-121666


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-34564


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.48-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
  - fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.49-1
changelog:
  - RHEL-126157: Update GCP to Google Cloud in log messages (crag@redhat.com)
  - fix: Update user-facing GCP refrences to Google Cloud (crag@redhat.com)
  - feat: check if --set arg is empty when the environments module is called
    (manuelcanorojo@gmail.com)
  - feat: Added more debug prints to cloud-what (jhnidek@redhat.com)
  - fix(test): Fix unit test of aws (jhnidek@redhat.com)
  - fix: Fix getting AWS IMDSv2 signature (jhnidek@redhat.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Added translation using Weblate (Finnish) (noreply-addon-
    languages@weblate.org)
  - fix: TypeError in _get_tls_handshake_info type hinting (macano@redhat.com)
  - feat: added signature type log in TLS handshake (macano@redhat.com)
  - feat: added internal method to get tls handshake info
    (manuelcanorojo@gmail.com)
  - ci: bump actions/upload-artifact from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Fix profile upload because of missing self.cp (suttner@atix.de)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - ci: bump actions/checkout from 5 to 6
    (49699333+dependabot[bot]@users.noreply.github.com)


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-13
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131594)
  - CVE-2025-65018: heap buffer overflow (RHEL-131603)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-11
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85909
    Resolves: RHEL-85915
    Resolves: RHEL-85920
    Resolves: RHEL-87058
    Resolves: RHEL-87068
    Resolves: RHEL-87101
    Resolves: RHEL-87119
    Resolves: RHEL-88360
    Resolves: RHEL-88363


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-12
changelog:
  - Backport patches for various CVEs
    Resolves: RHEL-84797
    Resolves: RHEL-85888
    Resolves: RHEL-87080
    Resolves: RHEL-92284


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-16
changelog:
  - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
  - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-126090, RHEL-128107
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-118197)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-108915)
  - tests: Test virFileIsSharedFSOverride (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-135287)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-135287)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-2
changelog:
  - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-18
changelog:
  - fix inverted usage of -n in snmptrapd (RHEL-101078)
  - fix use after free issue (RHEL-121091)
  - fix help and manpage for net-snmp-create-v3-user 
    script(RHEL-101614 and RHEL-103557)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-5
changelog:
  - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9
    Resolves: RHEL-101161


author: Peter Oliver <git@mavit.org.uk> - 16p-4
changelog:
  - Update build options
  - Drop obsolete options.
  - Specify the correct build flags for ARM and zSeries.


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support IPSec `leftsendcert` option. RHEL-110634
  - Support interface alternative names. RHEL-110778


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121110
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121991


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Use global DNS even for static IP with static DNS. (RHEL-126730)
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-130911


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-85582


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Leo Sandoval <lsandova@redhat.com> - 1.77-11
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Resolves: #RHEL-44705


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-27
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Lauren Chilton <lchilton@redhat.com> - 6.3.7-6
changelog:
  - Backport fix for pmdaopenmetrics metric removal (RHEL-101745)
  - Backport fix for pcp2openmetrics metric hanging (RHEL-106772)
  - Backport fix for atop cpu utilization bug (RHEL-79767)


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.0.30-4
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections


author: Remi Collet <rcollet@redhat.com> - 8.0.30-5
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Miro Hrončok <mhroncok@redhat.com> - 1.1.10-13
changelog:
  - Subpackage python2-setproctitle has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Dan Horák <dhorak@redhat.com> - 2.5.0-1
changelog:
  - updated to 2.5.0 (RHEL-23692)
  - add runtime dependency for EBCDIC to ASCII conversion (RHEL-24407)
  - Resolves: RHEL-23692 RHEL-24407


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-3
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-73009]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-73009]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-122919]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-122919]
  - kvm-x86-create-new-pc-q35-machine-type-for-rhel-9.8.patch [RHEL-105902]
  - Resolves: RHEL-73009
    ([IBM 9.8 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-122919
    ([RHEL 9.8] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105902
    (Add new -rhel9.8.0 machine type to qemu-kvm [x86_64])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-4
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120127]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120127]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126593]
  - Resolves: RHEL-120127
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-9.8])
  - Resolves: RHEL-126593
    ([RHEL 9.8] VFIO migration using multifd should be disabled by default)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-5
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126693]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126693]
  - Resolves: RHEL-126693
    ([RHEL 9]snp guest fail to boot with hugepage)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-6
changelog:
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-129949]
  - Resolves: RHEL-129949
    ([rhel9] Fix the typo under vfio-pci device's enable-migration option )


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-7
changelog:
  - kvm-block-backend-Fix-race-when-resuming-queued-requests.patch [RHEL-133008]
  - Resolves: RHEL-133008
    (Assertion failure on drain with iothread and I/O load [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-8
changelog:
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-133303]
  - Resolves: RHEL-133303
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-9
changelog:
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
  - Resolves: RHEL-131144
    (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-10
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-11
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
  - Resolves: RHEL-138240
    (QEMU crashes when stopping source VM during live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-12
changelog:
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
  - Resolves: RHEL-132989
    (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
  - Resolves: RHEL-140187
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
  - Resolves: RHEL-139057
    ([qemu, rhel-9] increase default TSEG size)


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-104999
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105004


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-99
changelog:
  - podman-etcd: prevent last active member from leaving the etcd member
    list

    Resolves: RHEL-130580


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-103
changelog:
  - podman-etcd: align environment variable names with Etcd v3.6 Pod
    manifest

    Resolves: RHEL-133937


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-104
changelog:
  - podman-etcd: verify that no static pod containers are running or
    being deleted before starting

    Resolves: RHEL-139519


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Jeremy Crafts <jcrafts@redhat.com> - 0.1.13-5
changelog:
  - Update rhc-worker-playbook to 0.1.13 (RHEL-137408)
  - Reduce size of rhc-worker-playbook messages (RHEL-142699)
  - Invoke rhc-playbook-verifier for playbook verification (RHEL-142700)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196626


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Attila Lakatos <alakatos@redhat.com> - 8.2310.0-3
changelog:
  - Rebase to 8.2310.0
    Resolves: RHEL-5196
  - Allow setting certificates for separate connections
    Resolves: RHEL-937
  - Capability dropping feature can be turned off
    Resolves: RHEL-943
  - imjournal: new module parameter filecreatemode
    Resolves: RHEL-949


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-65177
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-38222
    Resolves: RHEL-70099
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-70100
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-70109
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-70111


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-66274
  - man page version update
    Resolves: RHEL-78220
  - omfwd: do not hang forever in case of broken TLS handshake
    Resolves: RHEL-67639


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-2
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-86031
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-42508
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-105782


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-164
changelog:
  - Undefine GC compaction methods on ppc64le.
    Resolves: RHEL-83135
  - Fix printing warnings when using IRB from a script.
    Resolves: RHEL-83137


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-165
changelog:
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-87183
  - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220)
    Resolves: RHEL-87184


author: Neil Hanlon <neil@rockylinux.org> - 3.0.7-165
changelog:
  - Temporarily disable O_TMPFILE tests which break in peridot build env
  - Temporarily disable socket permission tests erroring in build env


author: Jindrich Novy <jnovy@redhat.com> - 4:1.3.0-2
changelog:
  - fix CVE-2025-31133 CVE-2025-52565 CVE-2025-52881
  - Resolves: RHEL-122400
  - Resolves: RHEL-122403
  - Resolves: RHEL-122414


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100439)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745)
  - zipl: makedumpfile is required for ngdump support (RHEL-114663)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109215)
  - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100439)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent
  - Secure Execution: Add tool to verify host-key documents (RHEL-136796)
  - Resolves: RHEL-100439 RHEL-136796


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - properly conflict with pacemaker not providing sync-default we need
    Resolves: rhbz#1979961
    Resolves: rhbz#1979573


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.1-2
changelog:
  - obviously autoconf is defining runstatedir - but with a
    wrong default - directly hand it over to configure
    and skip --with-runstatedir implemented in configure.ac
    for older versions of autoconf

    Resolves: rhbz#2011707


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168579


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-26
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-118293
  - Eliminate use of obsolete %patchN syntax
    Related: RHEL-91101
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-91101
  - Add support for Image Mode
    Resolves: RHEL-91101


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.32-1
changelog:
  - Always reset pending alarms when alarm(0) (rhbz#2112573)
  - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393)
  - Fix build with pip 23.1.2+
  - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy
  - Rename session bus name to org.fedoraproject.sealert
  - seapplet: wrap SEApplet() to try except
  - util.py: Add doctext test for build_module_type_cache()
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-1
changelog:
  - Update tmpfiles.d config (bz#2346971)
  - Do not hardcode /var/lib/selinux as store_root
  - data: update app icon
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations
  - Ship with contemporary app icon
  - Check that SELinux is enabled before running (rhbz#2178950)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-15
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Jindrich Novy <jnovy@redhat.com> - 2:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-9.7]"
  - Resolves: RHEL-80616


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-1
changelog:
  - upstream release 0.60.0
  - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing
  - Fix ID views integration
  - Fix base scope lookups
  - Bump NIS max dgram size to 8KB by default instead of 1KB
  - Resolves: rhbz#2117299
    Allow to rebuild the compat tree


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-5
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog
  - Resolves: RHEL-11983


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94765


author: Jan Friesse <jfriesse@redhat.com> - 20210520-1
changelog:
  - Resolves: rhbz#1962501

  - New upstream release
  - Support for cgroup v2
  - Document cgroup v2 problems


author: Jan Friesse <jfriesse@redhat.com> - 20210719-1
changelog:
  - Related: rhbz#1962501

  - New upstream release
  - Add mode option for moving to root cgroup functionality


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-15
changelog:
  - Resolves: RHEL-62324 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-17
changelog:
  - Disable ESI support
  - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing
    ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-20
changelog:
  - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL9


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-23
changelog:
  - Resolves: RHEL-122493 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.5-24
changelog:
  - Resolves: RHEL-119047 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Chris White <chwhite@redhat.com> - 1.19.5-1
changelog:
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-33662


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-33662


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109088


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-108827


author: Wander Lairson Costa <wander@redhat.com> - 1.26.3-1
changelog:
  - Rebase to stalld-1.26.3
  - Build System Improvements and added riscv64 arch
  - Remove LTO build flags
  - Make queue_track the default backend
  - Remove the -m64 build option
  Resolves: RHEL-111528 RHEL-111526 RHEL-96207 RHEL-96205 RHEL-111803


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Bryan Gurney <bgurney@redhat.com> - 3.6.1-1
changelog:
  - Update to version 3.6.1
  - Resolves: RHEL-2278
  - Add filesystem growth limits
  - Resolves: RHEL-12898


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Alejandro López <allopez@redhat.com> - 1.9.17p2-2
changelog:
  - Request to backport support for regex in sudo [rhel-9]
  Resolves: RHEL-1376
  - Rebase of sudo to 1.9.17p2 [rhel-9]
  Resolves: RHEL-128623
  - sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
  Resolves: RHEL-127359


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.5.4-8
changelog:
  - fix allocation errors with malformed sa files (RHEL-35684)
  - reorder patches to prevent errors during their application


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-57
changelog:
  - Revert "boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices" (RHEL-108596)
  - boot: Use correct memory type for allocations (RHEL-108555)
  - meson: /etc/systemd/network is also used by udevd (RHEL-109096)
  - sd-bus: make bus_add_match_full accept timeout (RHEL-31756)
  - core/unit: add get_timeout_start_usec in UnitVTable and define it for service (RHEL-31756)
  - core/unit: increase the NameOwnerChanged/GetNameOwner timeout to the unit's start timeout (RHEL-31756)
  - core,sd-bus: drop empty lines between function call and error check (RHEL-31756)
  - core: do not disconnect from bus when failed to install signal match (RHEL-31756)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-31756)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-31756)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-31756)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-31756)
  - core/manager: drop duplicate bus track deserialization (RHEL-31756)
  - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-31756)
  - shell completion: add kernel-identify/inspect verbs for bootctl (RHEL-108576)
  - test: add tests for format_timestamp() and parse_timestamp() with various timezone (RHEL-109488)
  - test-time-util: disable failing tests (RHEL-109488)
  - test: test parse_timestamp() in various timezone (RHEL-109488)
  - systemctl: logind: add missing asserts (RHEL-109488)
  - systemctl: logind: make logind_schedule_shutdown accept action as param (RHEL-109488)
  - systemctl: add option --when for scheduled shutdown (RHEL-109488)
  - test-time-util: add test cases to invalidate "show" and "cancel" (RHEL-109488)
  - Introduce RET_GATHER and use it in src/shared/ (RHEL-108598)
  - fd-util: don't eat up errors in fd_cloexec_many (RHEL-108598)
  - sd-bus: refuse to send messages with an invalid string (RHEL-108584)
  - test: check if we correctly handle invalid UTF-8 in mount stuff (RHEL-108584)
  - test: fix a typo in the cleanup stuff (RHEL-108584)
  - test: explicitly specify a UTF-8 locale for UTF-8 shenanigans (RHEL-108584)
  - test: use the correct file name when restoring the original fstab (RHEL-108584)
  - core: escape UTF-8 in mount unit Where field before sending to clients (RHEL-108584)
  - Revert "test-time-util: disable failing tests" (RHEL-109488)
  - test: use get_timezones() to iterate all known timezones (RHEL-109488)
  - test-time-util: do not fail on DST change (RHEL-109488)
  - test-time-util: suppress timestamp conversion failures for Africa/Khartoum timezone (RHEL-109488)
  - test-time-util: do more suppression of time zone checks (RHEL-109488)
  - test-time-util: fix truncation of usec to sec (RHEL-109488)
  - test: unset TZ before timezone-sensitive unit tests are run (RHEL-109488)
  - meson: extend timeout for test-time-util (RHEL-109488)
  - time-util: use DEFINE_STRING_TABLE_LOOKUP_TO_STRING() macro (RHEL-109488)
  - time-util: align string table (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: add assertions (RHEL-109488)
  - time-util: drop redundant else (RHEL-109488)
  - time-util: do not use strdupa() (RHEL-109488)
  - time-util: use result from startswith_no_case() (RHEL-109488)
  - time-util: use usec_add() and usec_sub_unsigned() (RHEL-109488)
  - time-util: shorten code a bit (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: drop unnecessary assignment of timezone name (RHEL-109488)
  - time-util: make parse_timestamp() use the RFC-822/ISO 8601 standard timezone spec (RHEL-109488)
  - time-util: fix typo (RHEL-109488)
  - ci: bump the tools tree to F42 (RHEL-109488)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-111065)
  - Revert "Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT"" (RHEL-50103)
  - udev-builtin-net_id: ignore firmware_node/sun == 0 (RHEL-50103)
  - fundamental: fix compile check for explicit_bzero (RHEL-108568)
  - time-util: make USEC_TIMESTAMP_FORMATTABLE_MAX for 32bit system off by one day (RHEL-109488)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-59
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118215)
  - timer: don't run service immediately after restart of a timer (RHEL-118215)
  - test: store and compare just the property value (RHEL-118215)
  - test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
  - basic: add PIDFS magic (#31709) (RHEL-114974)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-60
changelog:
  - man: fix a missing word (RHEL-115182)
  - cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
  - cryptsetup: fix typo (RHEL-97175)
  - cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
  - coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
  - coredump: restore compatibility with older patterns (RHEL-104138)
  - coredump: use %d in kernel core pattern (RHEL-104138)
  - pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
  - fd-util: introduce parse_fd() (RHEL-104138)
  - coredump: add support for new %F PIDFD specifier (RHEL-104138)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-61
changelog:
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
  - strv: introduce string_strv_hashmap_remove() (RHEL-14112)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-62
changelog:
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
  - timer: rebase last_trigger timestamp if needed (RHEL-118215)


