# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-1
changelog:
  - Bump version to 2.0.8-1
  - Resolves: Bug 1992609 - EntryUUID syntax plugin breaks replication with older versions


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-2
changelog:
  - Bump version to 2.0.8-2
  - Resolves: Bug 1998464 - LDAP server crashes when dnaInterval attribute is set to 0


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-5
changelog:
  - Bump version to 2.0.8-5
  - Resolves: Bug 2000420 - Not able to preserve users using "ipa user-del --preserve"


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-6
changelog:
  - Bump version to 2.0.8-6
  - Resolves: Bug 2000420 - Not able to preserve users using "ipa user-del --preserve"


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.11-1
changelog:
  - Bump version to 2.0.11-1
  - Resolves: Bug 2024693 - Rebase RHEL 9.0 with 389-ds-base
  - Resolves: Bug 2015996 - Log the Auto Member invalid regex rules in the LDAP errors log
  - Resolves: Bug 2020554 - ipa user-add fails with "gecos: value invalid per syntax: Invalid syntax"
  - Resolves: Bug 1779685 - PBKDF2 hashing does not work in FIPS mode


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.13-1
changelog:
  - Bump version to 2.0.13-1
  - Resolves: Bug 2034880 - ipa-restore command is failing when restore after uninstalling the server
  - Resolves: Bug 2045098 - Demoting a supplier to a consumer crashes the server


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.14-1
changelog:
  - Bump version to 2.0.14-1
  - Resolves: Bug 2034880 - ipa-restore command is failing when restore after uninstalling the server (part2)


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983735)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.90 release (release candidate)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.10
changelog:
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.37.2-1
changelog:
  - Upgrade to 1.37.2 release (development)
  - core: preserve external ports during checkpoint rollback (rh #2061711)
  - core: fix ovs bridge deletion (rh #2061709)
  - core: shorten hostname when too long (rh #2033643)
  - nm-online: bump the timeout upper limit to 2073600 seconds (rh #2025617)
  - cloud-setup: fix crash when handling sigterm (rh #2027674)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.37.3-1
changelog:
  - Upgrade to 1.37.3 release (development)
  - core: allow reapply on autoconnect-slaves property change (rh #2065049)
  - wifi: do not advertise channels outside regulatory domain (rh #2062785)
  - wifi: warn about WEP being phased out (rh #2030997)
  - bond: reject reapply when fail_over_mac was changed (rh #2003214)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.0-1
changelog:
  - Upgrade to 1.39.0 release (development)
  - Include a migration tool for ifcfg configuration to NM keyfiles
    (rh #2059608)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.2-1
changelog:
  - Update to 1.39.2 release (development)
  - dhcp: set "src" attribute for DHCP routes (rh #1995372)
  - dhcp: drop internal DHCPv4 client based on systemd code (rh #2073067)
  - core: delay startup complete for DNS update (rh #2049421)
  - nmcli: support offline mode to create and edit keyfiles (rh #1361145)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972101]
  - Resolves: bz#1972101
    ([Azure][RHEL-9]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wala-Require-iptables-package.patch [bz#1978572]
  - Resolves: bz#1978572
    ([Azure][WALA][RHEL-9] WALA needs iptables package)


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-25
changelog:
  - build netavark only for podman's arches
  - i686 can't find go-md2man which causes the build to fail otherwise
  - Related: #2000051


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-27
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1-32
changelog:
  - build rust packages with RUSTFLAGS set to make ExecShield happy (Lokesh Mandvekar)
  - Related: #2000051


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Sohan Kunkerkar <skunkerk@redhat.com> - 4.6.0-2
changelog:
  - Rebuild because of Fedora infra issues last week to see if a new build fixes some 
    problems we are seeing.


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.0.20-1
changelog:
  - Fix application of network --mtu kickstart option in Anaconda (rvykydal)
    Resolves: rhbz#2019813
  - Print progress dots on one line in TUI (honza.stodola)
    Resolves: rhbz#1998668
  - Roll back Satellite provisioning if subscription attempt fails with error
    (mkolman)
    Resolves: rhbz#2010865


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.0.21-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#2017428
  - Check the support for the Subscription module on startup (vponcova)
    Resolves: rhbz#1957063
  - Activate DBus modules based on the new configuration options (vponcova)
    Related: rhbz#1957063
  - Add new configuration options for the DBus module activation (vponcova)
    Related: rhbz#1957063
  - Add product config for Rocky Linux (tucklesepk)
    Resolves: rhbz#2019995


author: Martin Kolman <mkolman@redhat.com> - 34.25.0.22-1
changelog:
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1955331
  - The OPAL compatibility with XFS features is mandatory (vponcova)
    Resolves: rhbz#2008792


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.24-1
changelog:
  - Create the LVM devices file (vslavik)
    Resolves: rhbz#2011329
  - Update outdated system purpose related strings (mkolman)
    Related: rhbz#2015059
  - Always set system purpose from GUI (mkolman)
    Resolves: rhbz#2015059


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.25-1
changelog:
  - Hide the help button on the progress spoke (vponcova)
    Related: rhbz#1995945
  - Enable the built-in help content (vponcova)
    Resolves: rhbz#1995945
  - Remove the provides_web_browser property (vponcova)
    Related: rhbz#1995945
  - Cache the parsed content of the help mapping files (vponcova)
    Related: rhbz#1995945
  - Remove the default_help_pages configuration option (vponcova)
    Related: rhbz#1995945
  - Remove the helpFile attribute (vponcova)
    Related: rhbz#1995945
  - Implement the unified help support (vponcova)
    Related: rhbz#1995945
  - Define a unique id in the main spokes and hubs (vponcova)
    Related: rhbz#1995945
  - Add the Screen class (vponcova)
    Related: rhbz#1995945
  - Enable Closest mirror on CentOS Stream 9 (jkonecny)
    Related: rhbz#1955331
  - Do not modify boot order on UEFI if asked (vslavik)
    Resolves: rhbz#2025953


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.26-1
changelog:
  - Write all PVs to LVM devices file (vslavik)
    Resolves: rhbz#2040302
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#2026916
  - Fix the condition for entering the root configuration (vponcova)
    Resolves: rhbz#2026916
  - Move tests for pyanaconda.ui.lib.users to a new file (vponcova)
    Related: rhbz#2026916


author: Vendula Poncova <vponcova@redhat.com> - 34.25.0.27-1
changelog:
  - Use cache when fetching organization data from the GUI (mkolman)
    Resolves: rhbz#2044258
  - Bump subscription-manager version (mkolman)
    Related: rhbz#2048449
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#2048449
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#2048449
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#2048449


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.1.1-1
changelog:
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#2065171
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#2065171
  - Skip /etc/machine-info during live installs (awilliam)
    Resolves: rhbz#2065170


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 10.47-1
changelog:
  - Annocheck: Improve detection of kernel modules.
  - GCC Plugin: Only default to link-once when using gcc-12 or later.  (#2039297)


author: Nick Clifton <nickc@redhat.com> - 10.50-1
changelog:
  - Annocheck: Skip property note test for GO binaries.  (#204300)
  - Annocheck: Add another glibc static library symbol.  (#2043047)
  - Spec File: Use gcc --print-file-name=rpmver for the gcc version info.


author: Nick Clifton <nickc@redhat.com> - 10.51-1
changelog:
  - Annocheck: Add an option to disable the use of debuginfod (if available).
  - Annocheck: Add more glibc special file names.
  - Annocheck: Skip some tests for BPF binaries.  (#2044897)


author: Nick Clifton <nickc@redhat.com> - 10.53-1
changelog:
  - gcc-plugin: Fix libtool so that extraneous runpaths are not added to the plugin.  (#2047356)
  - gcc-plugin: Use canonical_option field of save_decoded_options array. (#2047148)


author: Nick Clifton <nickc@redhat.com> - 10.57-1
changelog:
  - Rebuild to work with LLVM14.  (#2061050)
  - Annocheck: Update documentation and fix typo in annocheck.  (#2061291)
  - Annocheck: Add option to enable/disable following symbolic links.
  - Always identify Rust binaries, even if built on a host that does not know about Rust.  (#2057737)


author: Sergei Petrosian <spetrosi@redhat.com> - 0.0.1-3
changelog:
  - Copy changes made to linux-system-roles in this PR:
    https://src.fedoraproject.org/rpms/linux-system-roles/pull-request/13#
  - Make spec file available for older versions of OSes.
  - Drop python3-six dependency which was used by lsr_role2collection.py.
  - Drop html files from rpm if the version has no markdown parser.
  - Drop unnecessary python scripts which include python3 only code, e.g.,
    f-strings.
    Resolves rhbz#1970165


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.11-1
changelog:
  - Update the version to be consistent with the Galaxy collection at
    https://galaxy.ansible.com/microsoft/sql


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.11-2
changelog:
  - Make the ansible_collection_files macro defined in Fedora automatically and
    in RHEL manually consistent - having slash at the end to clean double-slashes


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-1
changelog:
  - Add the meta-runtime option from the latest auto-maintenance
  - Use the latest mssql that ships fixes for issues #24,#25,#26,#27,#28,35


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-2
changelog:
  - Copy fix for RHEL 7 builds from rhel-system-roles
    Link to the original fix:
    https://src.fedoraproject.org/rpms/linux-system-roles/c/093981119f99ac51a6e06a2714b587e4e2fe287c


author: Christian Adams <chadams@redhat.com> - 2.11.6-1
changelog:
  - ansible-core 2.11.6-1, fix CVE-2021-3620, ansible-connection module
    no long discloses sensitive info.


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-1
changelog:
  - Update to version 0.3.6
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.6
    Resolves: RHBZ#1972178
  - ansible-freeipa-tests not in the compose
    Resolves: RHBZ#1940014
  - Remove unsupported parameter for (ipapermission) module: perm_rights from
    permission-present.yml
    Resolves: RHBZ#1973167
  - Sample playbook included for selfservice module is incorrect
    Resolves: RHBZ#1973166
  - ipa-client-install failing with error code 7(keytab: /usr/sbin/ipa-rmkeytab
    returned 7)
    Resolves: RHBZ#1973169
  - New management module ipaserver
    Resolves: RHBZ#1973171
  - New management module ipaautomember
    Resolves: RHBZ#1973172


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Resolves: RRBZ#1973173


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.7 and 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1972178
  - automember: Verify condition keys
    Resolves: RHBZ#1981713
  - automember: Fix result["failed"] issues with conditions
    Resolves: RHBZ#1981713
  - automember: Fix action to be automember or member, not service
    Resolves: RHBZ#1981711


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-3
changelog:
  - Add requirement for ansible-core
    Resolves: RHBZ#1993857
  - Remove python3, pip and ansible installation from sanity test
    Related: RHBZ#1993857
  - Replace json_query in tests/user/test_users_absent.yml
    Resolves: RHBZ#1992997


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010622
  - Add ability to run modules remotely
    Resolves: RHBZ#2010633
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010643


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010622
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#2021947
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021952
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#2021954
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#2021955
  - Not able to update existing automember rule description
    Resolves: RHBZ#1976922


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010622
  - Add module to manage automount maps
    Resolves: RHBZ#2040701
  - Add module to manage automount keys
    Resolves: RHBZ#2040702


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010622


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010622


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-4
changelog:
  - Don't require bcc-tools by default (#1967550)
  - Add explicit bcc requirement to bcc-tools
  - Build bcc from standard sources


author: Jerome Marchand <jmarchan@redhat.com> - 0.20.0-7
changelog:
  - Sync with latest libbpf (fixes BPF_F_BROADCAST breakages of rhbz#1992430)
  - Fix cpudist, mdflush, readahead and threadsnoop (rhbz#1992430)
  - Handle the renaming of task_struct_>state field
  - Drop tools that relies on features disabled on RHEL


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-6
changelog:
  - Remove "Revert Terminology cleanups" patch
    Resolves: rhbz#1990982
  - Fix running tests in gating
    Resolves: rhbz#1990237
  - Opt out from using LVM devices file in 9 Beta
    Resolves: rhbz#1984851


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-8
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#2012121
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1971516


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-12
changelog:
  - Fix log message for the LVM devices filter
    Resolves: rhbz#2034277
  - Exclude unusable disks from PartitionFactory
    Resolves: rhbz#2017432


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.49
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/da00c99)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.50
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/4b3aaee)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.51
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/2189882)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.0-0.52
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/main
    (https://github.com/containers/buildah/commit/718f2b4)
  - Related: #2000051


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2000051


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-11
changelog:
  - ci-cc_ssh.py-fix-private-key-group-owner-and-permission.patch [bz#2015974]
  - Resolves: bz#2015974
    (cloud-init fails to set host key permissions correctly)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-12
changelog:
  - ci-remove-unnecessary-EOF-string-in-disable-sshd-keygen.patch [bz#2016305]
  - Resolves: bz#2016305
    (disable-sshd-keygen-if-cloud-init-active.conf:8: Missing '=', ignoring line)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-13
changelog:
  - ci-fix-error-on-upgrade-caused-by-new-vendordata2-attri.patch [bz#2028381]
  - Resolves: bz#2028381
    (cloud-init.service fails to start after package update)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-14
changelog:
  - ci-cloudinit-net-handle-two-different-routes-for-the-sa.patch [bz#2028031]
  - Resolves: bz#2028031
    ([RHEL-9] Above 19.2 of cloud-init fails to configure routes when configuring static and default routes to the same destination IP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-15
changelog:
  - ci-Add-gdisk-and-openssl-as-deps-to-fix-UEFI-Azure-init.patch [bz#2032524]
  - Resolves: bz#2032524
    ([RHEL9] [Azure] cloud-init fails to configure the system)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-16
changelog:
  - ci-Datasource-for-VMware-953.patch [bz#2040090]
  - ci-Change-netifaces-dependency-to-0.10.4-965.patch [bz#2040090]
  - ci-Update-dscheck_VMware-s-rpctool-check-970.patch [bz#2040090]
  - ci-Revert-unnecesary-lcase-in-ds-identify-978.patch [bz#2040090]
  - ci-Add-netifaces-package-as-a-Requires-in-cloud-init.sp.patch [bz#2040090]
  - Resolves: bz#2040090
    ([cloud-init][RHEL9] Support for cloud-init datasource 'cloud-init-vmware-guestinfo')


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-17
changelog:
  - ci-Add-flexibility-to-IMDS-api-version-793.patch [bz#2042351]
  - ci-Azure-helper-Ensure-Azure-http-handler-sleeps-betwee.patch [bz#2042351]
  - ci-azure-Removing-ability-to-invoke-walinuxagent-799.patch [bz#2042351]
  - ci-Azure-eject-the-provisioning-iso-before-reporting-re.patch [bz#2042351]
  - ci-Azure-Retrieve-username-and-hostname-from-IMDS-865.patch [bz#2042351]
  - ci-Azure-Retry-net-metadata-during-nic-attach-for-non-t.patch [bz#2042351]
  - ci-Azure-adding-support-for-consuming-userdata-from-IMD.patch [bz#2042351]
  - Resolves: bz#2042351
    ([RHEL-9] Support for provisioning Azure VM with userdata)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-18
changelog:
  - ci-Add-_netdev-option-to-mount-Azure-ephemeral-disk-121.patch [bz#1998445]
  - Resolves: bz#1998445
    ([Azure][RHEL-9] ordering cycle exists after reboot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 21.1-19
changelog:
  - ci-Fix-IPv6-netmask-format-for-sysconfig-1215.patch [bz#2053546]
  - ci-Adding-_netdev-to-the-default-mount-configuration.patch [bz#1998445]
  - ci-Setting-highest-autoconnect-priority-for-network-scr.patch [bz#2036060]
  - Resolves: bz#2053546
    (cloud-init writes route6-$DEVICE config with a HEX netmask. ip route does not like : Error: inet6 prefix is expected rather than "fd00:fd00:fd00::/ffff:ffff:ffff:ffff::".)
  - Resolves: bz#1998445
    ([Azure][RHEL-9] ordering cycle exists after reboot)
  - Resolves: bz#2036060
    ([cloud-init][ESXi][RHEL-9] Failed to config static IP according to VMware Customization Config File)


author: Jacob Kozol <jacobdkozol@gmail.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: Katerina Koukiou <kkoukiou@redhat.com> - 256-1
changelog:
  - Now officially supported on Arch Linux (https://archlinux.org/)
  - Support selecting between consoles of the same type


author: Marius Vollmer <mvollmer@redhat.com> - 258-1
changelog:
  - Move storage pool actions outside of the expanded row
  - Move the 'Overview' tab content from the network rows to the expanded row directly


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 3:2.180.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.180.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.181.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.181.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.183.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.183.0
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Sohan Kunkerkar <skunkerk@redhat.com> - 0.11.0-1
changelog:
  - New release
  - Fix inadvertent inclusion of coreos-installer-dracut in -bootinfra on RHEL
  - Have -dracut own 51coreos-installer directory on RHEL


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-9
changelog:
  - 2018948 - Unauthenticated users can't move print jobs in Web UI
  - 1999955 - Printing of banner before PCL file only prints banner
  - 2006713 - Trying to restart and hold a job doesn't work


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-1
changelog:
  - 1.28.7, urftopdf nor pdftoopvp aren't compiled anymore
  - 1904405 - HP M281fdw: čžš characters printed as squares with "driverless" driver


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.14-1
changelog:
  - dovecot updated to 2.3.14, pigeonhole to 0.5.14
  - use OpenSSL's implementation of HMAC
  - Remove autocreate, expire, snarf and mail-filter plugins.
  - Remove cydir storage driver.
  - Remove XZ/LZMA write support. Read support will be removed in future release.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Mark Wielaard <mjw@fedoraproject.org> - 0.183-1
changelog:
  - Upgrade to upstream 0.183
    - debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
    - debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h can
      be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and DEBUGINFOD_VERBOSE
      environment variable.
    - config: profile.sh and profile.csh won't export DEBUGINFOD_URLS
      unless configured --enable-debuginfod-urls[=URLS]
    - elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target type.


author: Mark Wielaard <mjw@redhat.com> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Radovan Sroka <rsroka@redhat.com> - 1.0.1-1
changelog:
  - rebase to 1.0.1
  - introduced uthash dependency
  - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket
  Resolves: rhbz#1874491
  - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory
  Resolves: rhbz#1876538


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Jan Horak <jhorak@redhat.com> - 91.2.0-4
changelog:
  - Disable webrender on the s390x due to wrong colors: rhbz#2009503
  - Update to 91.2: rhbz#2009145
  - Modern algorithms in PKCS#12: rhbz#1764205


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Antonio Torres <antorres@redhat.com> - 3.0.21-25
changelog:
  - Revert "Allow to connect to partially open LDAP handle"
  - Use infinite timeout (openldap default) when using LDAP+start-TLS
  - Update openssl dependency to not check epoch (was causing detection issues)
    Related: rhbz#1992551


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-4
changelog:
  - Resolves: #1958155 - Upgrading frr unconditionally creates /etc/frr/frr.conf, breaking existing configuration


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.1-14
changelog:
  - Backport "Save/restore file offset while reading notes in core file"
    (Keith Seitz, RHBZ 1931344)


author: Kevin Buettner <kevinb@redhat.com> - 10.2-1
changelog:
  - Rebase to FSF GDB 10.2.
  - Drop gdb-6.3-test-pie-20050107.patch.
  - Drop gdb-6.3-test-self-20050110.patch.
  - Drop gdb-6.5-bz218379-ppc-solib-trampoline-test.patch.
  - Drop gdb-6.6-buildid-locate-core-as-arg.patch.
  - Drop gdb-6.8-quit-never-aborts.patch.
  - Drop gdb-archer-pie-addons-keep-disabled.patch.
  - Drop gdb-archer-pie-addons.patch.
  - Drop gdb-archer-vla-tests.patch.
  - Drop gdb-archer.patch.
  - Drop gdb-attach-fail-reasons-5of5.patch.
  - Drop gdb-btrobust.patch.
  - Drop gdb-bz1219747-attach-kills.patch.
  - Drop gdb-bz533176-fortran-omp-step.patch.
  - Drop gdb-dts-rhel6-python-compat.patch.
  - Drop gdb-gnat-dwarf-crash-3of3.patch.
  - Drop gdb-jit-reader-multilib.patch.
  - Drop gdb-moribund-utrace-workaround.patch.
  - Drop gdb-rhbz1930528-fix-gnulib-build-error.patch.
  - Drop gdb-rhbz1932645-aarch64-ptrace-header-order.patch.
  - Drop gdb-vla-intel-fix-print-char-array.patch.
  - Drop gdb-vla-intel-fortran-strides.patch.
  - Drop gdb-vla-intel-stringbt-fix.patch.
  - Drop gdb-vla-intel-tests.patch.
  - Drop process_psymtab_comp_unit-type-unit.patch.
  - Drop gdb-testsuite-readline63-sigint-revert.patch.
  - Drop gdb-config.patch.
  - Add following upstream patches for Fortran stride / slice support:
    gdb-rhbz1964167-convert-enum-range_type.patch
    gdb-rhbz1964167-fortran-array-slices-at-prompt.patch
    gdb-rhbz1964167-fortran-array-strides-in-expressions.patch
    gdb-rhbz1964167-fortran-clean-up-array-expression-evaluation.patch
    gdb-rhbz1964167-fortran-range_type-to-range_flag.patch
    gdb-rhbz1964167-fortran-whitespace_array.patch
    gdb-rhbz1964167-move-fortran-expr-handling.patch


author: Keith Seitz <keiths@redhat.com> - 10.2-2
changelog:
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnaz, RH BZ 1903375)
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Fix crash when expanding partial symtab..."
    (Tom Tromey. gdb/27743)


author: Keith Seitz <keiths@redhat.com> - 10.2-3.el8
changelog:
  - Backport "Exclude debuginfo files from 'outside ELF segments' warning".
    (Keith Seitz, RH BZ 1898252)
  - Backport "Correct recording of 'store on condition' insns"
    (Andreas Arnez, RH BZ 1903375)


author: Keith Seitz <keiths@redhat.com> - 10.2-4.el8
changelog:
  - Backport "Fix gdb.fortran/array-slices.exp with -m32"
    (Tom de Vries, testsuite/269970)
  - Backport "adjust gdb.python/flexible-array-member.exp expected pattern"
    (Simon Marchi)


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Ray Strode <rstrode@redhat.com> - 40.1-7
changelog:
  - Don't use gdm-disable-wayland binary in udev rules.
    It doesn't exist anymore.
    Related: #1985099


author: Ray Strode <rstrode@redhat.com> - 40.1-9
changelog:
  - Synchronize permission and group ownership for log dir between
    rpm file manifest and daemon expectations.
    Resolves: #1999586


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Elliott Sales de Andrade <quantum.analyst@gmail.com> - 2.12.0-1
changelog:
  - Update to latest version (#1874604)
  - Remove duplicate docs/man directory (#1852765)
  - Add an option to disable modifying the git filter config (#1768060)


author: Florian Weimer <fweimer@redhat.com> - 2.34-21
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 3438bbca90895d32825a52e31a77dc44d273c1c1:
  - Linux: Detect user namespace support in io/tst-getcwd-smallbuff
  - realpath: Avoid overwriting preexisting error
  - CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1
  - tst-realpath-toolong: Fix hurd build
  - CVE-2021-3998: realpath: ENAMETOOLONG for result larger than PATH_MAX
  - stdlib: Fix formatting of tests list in Makefile
  - stdlib: Sort tests in Makefile
  - support: Add helpers to create paths longer than PATH_MAX
  - powerpc: Fix unrecognized instruction errors with recent binutils
  - x86: use default cache size if it cannot be determined [BZ #28784]
  - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
  - sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)
  - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)
  - socket: Add the __sockaddr_un_set function
  - Disable debuginfod in printer tests [BZ #28757]
  - Update syscall lists for Linux 5.16


author: Florian Weimer <fweimer@redhat.com> - 2.34-22
changelog:
  - Sync with upstream branch release/2.34/master,
    commit aa601d024424c40ae9a69b0c4e394a70ea0570c8:
  - x86: Use CHECK_FEATURE_PRESENT to check HLE [BZ #27398]
  - x86: Filter out more Intel CPUs for TSX [BZ #27398]
  - Fix glibc 2.34 ABI omission (missing GLIBC_2.34 in dynamic loader)
  - x86: Fix __wcsncmp_evex in strcmp-evex.S [BZ# 28755]
  - x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755]


author: Florian Weimer <fweimer@redhat.com> - 2.34-24
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 008003dc6e83439c5e04a744b7fd8197df19096e:
  - tst-socket-timestamp-compat.c: Check __TIMESIZE [BZ #28837]
  - Linux: Only generate 64 bit timestamps for 64 bit time_t recvmsg/recvmmsg
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ#28350)
  - support: Add support_socket_so_timestamp_time64


author: Florian Weimer <fweimer@redhat.com> - 2.34-25
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6eaf10cbb78d22eae7999d9de55f6b93999e0860:
  - socket: Do not use AF_NETLINK in __opensock
  - hurd if_index: Explicitly use AF_INET for if index discovery
  - Linux: Simplify __opensock and fix race condition [BZ #28353]
  - linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage [BZ #28850]


author: Arjun Shankar <arjun@redhat.com> - 2.34-28
changelog:
  - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054789)
  - Fix localedef so it can handle symbolic links when generating locale-archive.
  - Drop glibc-fedora-localedef.patch and adjust locale installation
    accordingly so that installed content remains unchanged.


author: Florian Weimer <fweimer@redhat.com> - 2.34-29
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 224d8c1890b6c57c7e4e8ddbb792dd9552086704:
  - debug: Synchronize feature guards in fortified functions [BZ #28746]
  - debug: Autogenerate _FORTIFY_SOURCE tests
  - Enable _FORTIFY_SOURCE=3 for gcc 12 and above
  - fortify: Fix spurious warning with realpath
  - __glibc_unsafe_len: Fix comment
  - debug: Add tests for _FORTIFY_SOURCE=3
  - Make sure that the fortified function conditionals are constant
  - Don't add access size hints to fortifiable functions
  - nss: Protect against errno changes in function lookup (bug 28953)
  - nss: Do not mention NSS test modules in <gnu/lib-names.h>
  - io: Add fsync call in tst-stat
  - hppa: Fix warnings from _dl_lookup_address
  - nptl: Fix cleanups for stack grows up [BZ# 28899]
  - hppa: Revise gettext trampoline design
  - hppa: Fix swapcontext
  - Fix elf/tst-audit2 on hppa
  - localedef: Handle symbolic links when generating locale-archive
  - NEWS: Add a bug fix entry for BZ #28896
  - x86: Fix TEST_NAME to make it a string in tst-strncmp-rtm.c
  - x86: Test wcscmp RTM in the wcsncmp overflow case [BZ #28896]
  - x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #28896]
  - string: Add a testcase for wcsncmp with SIZE_MAX [BZ #28755]
  - linux: fix accuracy of get_nprocs and get_nprocs_conf [BZ #28865]
  - Add reference to BZ#28860 on NEWS
  - linux: Fix missing __convert_scm_timestamps (BZ #28860)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.0-1
changelog:
  - Update to 3.40.0
  - Disable the Facebook, Flickr and Foursquare providers
  - Remove Photos support from the Google provider
  Resolves: #1913641


author: Ray Strode <rstrode@redhat.com> - 40.8-3
changelog:
  - Backport latest, working, version of ChoiceList extension
  - Regenerate stylesheet patch
    Related: #1993954


author: Florian Müllner <fmuellner@redhat.com> - 40.9-3
changelog:
  - Fix markup handling in highlighter
    Resolves: #2049194
  - Fix warning on restacking
    Resolves: #2053638


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: David Benoit <dbenoit@redhat.com> 3.0.9-5
changelog:
  - Remove fedora-specific Go dependency automation macros
  - Remove dependency on golist
  - Temporarily remove incompatible template spec files
  - Update gobuild flags
  - Resolves: rhbz#1982298


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: Derek Parker <deparker@redhat.com> - 1.16.6-1
changelog:
  - Rebase to 1.16.6
  - Resolves: rhbz#1984124
  - Replace symbols no longer present in OpenSSL 3.0 ABI
  - Resolves: rhbz#1984110
  - Fix TestBoringServerCurves failing when ran by itself
  - Resolves: rhbz#1977914


author: Alejandro Sáez <asm@redhat.com> - 1.17.2-1
changelog:
  - Rebase to Go 1.17.2
  - Related: rhbz#2014087
  - Remove favicon.ico and robots.txt references
  - Exclude TestEd25519Vectors test
  - Update patch rhbz1952381
  - Remove rhbz1904567 patch
  - Remove rhbz1939923 patch


author: Alejandro Sáez <asm@redhat.com> - 1.17.5-1
changelog:
  - Rebase to Go 1.17.5
  - Add remove_waitgroup_misuse_tests patch
  - Add remove_ed25519vectors_test.patch
  - Remove FIPS checks to avoid issues in the CI
  - Related: rhbz#2031116
  - Resolves: rhbz#2022829
  - Resolves: rhbz#2024687
  - Resolves: rhbz#2030851
  - Resolves: rhbz#2031253


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.8-1
changelog:
  - update to 7.5.8 tagged upstream community sources, see CHANGELOG
  - remove unused dependencies selfsigned, http-signature and gofpdf


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-2
changelog:
  - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
  - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.11-3
changelog:
  - use HMAC-SHA-256 instead of SHA-1 to generate password reset tokens
  - update FIPS tests in check phase


author: Andreas Gerstmayr <agerstmayr@redhat.com> 7.5.15-1
changelog:
  - update to 7.5.15 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
  - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
  - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
  - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
  - resolve CVE-2021-23648 sanitize-url: XSS
  - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
  - declare Node.js dependencies of subpackages
  - make vendor and webpack tarballs reproducible


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Neal Gompa <ngompa@centosproject.org> - 2.4.51-4
changelog:
  - Use NAME from os-release(5) for vendor string
    Resolves: #2029071 - httpd on CentOS identifies as RHEL


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.51-5
changelog:
  - Resolves: #2035064 - CVE-2021-44790 httpd: mod_lua: possible buffer overflow
    when parsing multipart content


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.9.0-4
changelog:
  - Drop Git commit hash from Release
  - Correctly enable IMDS patch
  - Switch to %autosetup
  - Set ExclusiveArch from %go_arches
  - Drop mention of networkd in package description


author: Sohan Kunkerkar <skunkerk@redhat.com> - 2.12.0-1
changelog:
  - Suppress hardcoded library path warning
  - Fix go-mods-to-bundled-provides script to parse correct rpm version
  - Import specfile from Fedora


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-8
changelog:
  - Resolves: rhbz#2005864 ipa cert-request replaces user certificate instead of adding
   - Don't store entries with a usercertificate in the LDAP cache
   - ipatests: Test that a user can be issued multiple certificates


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.6-9
changelog:
  - Resolves: rhbz#2010701 ipa-server-install fails while 'configuring certificate server instance'
    - Parse getStatus as JSON not XML
    - Parse cert chain as JSON not XML
    - Specify PKI installation log paths
    - Make Dogtag return XML for ipa cert-find


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-1
changelog:
  - Resolves: rhbz#2015608 - [Rebase] Rebase ipa to latest 4.9.x release RHEL9
  - Resolves: rhbz#1825010 - Concerns regarding 'ipa pwpolicy-mod --minlife 24 --maxlife 1'
  - Resolves: rhbz#1966289 - Info about searchrecordslimit set search limit to 10,000 after upgrade
  - Resolves: rhbz#1980356 - reinstalling samba client causes winbindd coredump
  - Resolves: rhbz#1986054 - fix automountlocation-tofiles output
  - Resolves: rhbz#2020205 - Missing bind-pkcs11-utils causing failures in OpenDNSSec
  - Resolves: rhbz#2021445 - CVE-2020-25719 ipa: samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets
    - ipa-kdb: issue PAC_REQUESTER_SID only for TGTs
    - ipa-kdb: fix requester SID check according to MS-KILE and MS-SFU updates


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-2
changelog:
  - Resolves: rhbz#2040619 - Changing default pac type to 'nfs:NONE and MS-PAC' doesnot display error 'ipa: ERROR: no modifications to be performed'
    - Config plugin: return EmptyModlist when no change is applied
    - config plugin: add a test ensuring EmptyModlist is returned
  - Resolves: rhbz#2048510 - [rhel-9.0] Backport latest test fixes in python3-ipatests
    - ipatests: webui: Tests for subordinate ids.
    - ipatests: webui: Use safe-loader for loading YAML configuration file
    - ipatests: Fix test_ipa_cert_fix.py::TestCertFixReplica teardown
    - Test cases for ipa-replica-conncheck command
    - PEP8 Fixes
    - ipatests: Test empty cert request doesn't force certmonger to segfault
    - ipatests: Test default value of nsslapd-sizelimit.
    - Extend test to see if replica is not shown when running `ipa-replica-manage list -v <FQDN>`
    - Added test automation for SHA384withRSA CSR support
  - Resolves: rhbz#2049104 - User can't log in after ipa-user-mod --user-auth-type=hardened
    - ipa-kdb: do not remove keys for hardened auth-enabled users
    - ipatests: add case for hardened-only ticket policy
  - Resolves: rhbz#2049174 - KRA GetStatus service blocked by IPA proxy
    - ipa-pki-proxy.conf: provide access to /kra/admin/kra/getStatus


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-3
changelog:
  - Resolves: rhbz#2050540 Unable to join RHEL 8.5 Replica to RHEL 7.9 Master for migration purposes
    - Don't always override the port in import_included_profiles
  - Resolves: rhbz#2051582 Enable ipa-ccache-sweep.timer during server installation
    - Test ipa-ccache-sweep.timer enabled by default during installation
    - Enable the ccache sweep timer during installation
  - Resolves: rhbz#2051844 ipa-join tests are failing due to changes in expected output
    - Remove ipa-join errors from behind the debug option


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.9.8-4
changelog:
  - Resolves: rhbz#2053586 IPA LDAP plugin ipa-cldap memory leak
    - fix memory leak in CLDAP responder


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-6
changelog:
  - Resolves: rhbz#2057467 Backport latest test fixes in python3-ipatests
    - ipatests: Tests for Autoprivate group.
    - mark xfail for test_idoverride_with_auto_private_group[hybrid]
    - Mark xfail test_gidnumber_not_corresponding_existing_group[true,hybrid]


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-7
changelog:
  - Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9
    - KRB instance: make provision to work with crypto policy without SHA-1 HMAC types
    - tests: ensure AD-SUPPORT subpolicy is active
    - ipatests: extend AES keyset to SHA2-based ones
    - freeipa.spec: bump crypto-policies dependency for CentOS 9 Stream
    - Kerberos instance: default to AES256-SHA2 for master key encryption
    - test_otp: do not use paramiko unless it is really needed
    - test_krbtpolicy: skip SPAKE-related tests in FIPS mode
    - Support AES for KRA archival wrapping
    - Set AES as default for KRA archival wrapping


author: Florence Blanc-Renaud <frenaud@redhat.com> - 4.9.8-8
changelog:
  - Resolves: rhbz#2067971 Consequences of FIPS crypto policy tightening in RHEL 9
    - tests: ensure AD-SUPPORT subpolicy is active in more cases
    - ipatests: fix check for AD topology being present


author: Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
changelog:
  - Switch from tox to pytest as the test runner. tox is being deprecated
    in some distros. (#1942157)


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b05 (EA)
  - Update release notes for 8u322-b05.
  - Switch to EA mode.
  - Require tzdata 2021c as of JDK-8274407.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2022823


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (GA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039398


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Introduce architecture restriction logic for the gdb test. (RH2041970)
  - Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
  - Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2022823


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-3
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023387


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052821


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Storing and restoring alternatives during update manually
  - Family extracted to globals
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-7
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052833


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-9
changelog:
  - Remove 'java --version' test as this is not supported on java-1.8.0-openjdk
  - Resolves: rhbz#2058487


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.3.ea
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023530


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-2
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052820


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1
changelog:
  - Update to jdk-11.0.14.1+1
  - Update release notes to 11.0.14.1+1
  - Require tzdata 2021e as of JDK-8275766.
  - Resolves: rhbz#2052834


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.1.1-4
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008205


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052831


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.1-0.1.ea
changelog:
  - Update to jdk-11.0.15.0+1
  - Update release notes to 11.0.15.0+1
  - Switch to EA mode for 11.0.15 pre-release builds.
  - Related: rhbz#2050458


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-6
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052819


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-8
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052829


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-10
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008206


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-12
changelog:
  - Add rpminspect.yaml to turn off Java bytecode inspections
  - java-17-openjdk deliberately produces Java 17 bytecode, not the default Java 11 bytecode
  - Resolves: rhbz#2023540


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-13
changelog:
  - Enable AlgorithmParameters and AlgorithmParameterGenerator services in FIPS mode
  - Resolves: rhbz#2055383


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-17.0.3.0+1
  - Update release notes to 17.0.3.0+1
  - Switch to EA mode for 17.0.3 pre-release builds.
  - Add JDK-8283911 to fix bad DEFAULT_PROMOTED_VERSION_PRE value
  - Related: rhbz#2050460


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-71.el9]
changelog:
  - CI: Build coverage RPMs on c9s environment (Veronika Kabatova)
  - md: use default_groups in kobj_type (Nigel Croxon) [2042797]
  - md: Move alloc/free acct bioset in to personality (Nigel Croxon) [2042797]
  - md: fix spelling of "its" (Nigel Croxon) [2042797]
  - md: raid456 add nowait support (Nigel Croxon) [2042797]
  - md: raid10 add nowait support (Nigel Croxon) [2042797]
  - md: raid1 add nowait support (Nigel Croxon) [2042797]
  - md: add support for REQ_NOWAIT (Nigel Croxon) [2042797]
  - md: drop queue limitation for RAID1 and RAID10 (Nigel Croxon) [2042797]
  - md/raid5: play nice with PREEMPT_RT (Nigel Croxon) [2042797]
  - md/raid1: fix missing bitmap update w/o WriteMostly devices (Nigel Croxon) [2042797]
  - md: fix double free of mddev->private in autorun_array() (Nigel Croxon) [2042797]
  - md: fix update super 1.0 on rdev size change (Nigel Croxon) [2042797]
  - raid5-ppl: use swap() to make code cleaner (Nigel Croxon) [2042797]
  - md/bitmap: don't set max_write_behind if there is no write mostly device (Nigel Croxon) [2042797]
  - md: update superblock after changing rdev flags in state_store (Nigel Croxon) [2042797]
  - md: remove unused argument from md_new_event (Nigel Croxon) [2042797]
  - md/raid5: call roundup_pow_of_two in raid5_run (Nigel Croxon) [2042797]
  - md/raid1: use rdev in raid1_write_request directly (Nigel Croxon) [2042797]
  - md/raid1: only allocate write behind bio fof WriteMostly device (Nigel Croxon) [2042797]
  - md: properly unwind when failing to add the kobject in md_alloc (Nigel Croxon) [2042797]
  - md: extend disks_mutex coverage (Nigel Croxon) [2042797]
  - md: add the bitmap group to the default groups for the md kobject (Nigel Croxon) [2042797]
  - md: add error handling support for add_disk() (Nigel Croxon) [2042797]
  - redhat: Bump RHEL_MINOR for 9.1 (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-72.el9]
changelog:
  - spec: Fix separate tools build (Jiri Olsa) [2054579]
  - redhat: use centos x509.genkey file if building under centos (Herton R. Krzesinski) [2029952]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-73.el9]
changelog:
  - CI: Use 9.0-rt branch for rhel-9 realtime_check (Juri Lelli)
  - redhat: enable zstream release numbering for rhel 9.0 (Herton R. Krzesinski)
  - redhat: change kabi tarballs to use the package release (Herton R. Krzesinski)
  - redhat: generate distgit changelog in genspec.sh as well (Herton R. Krzesinski)
  - redhat: make genspec prefer metadata from git notes (Herton R. Krzesinski)
  - redhat: use tags from git notes for zstream to generate changelog (Herton R. Krzesinski)
  - CI: Add disttag setting (Veronika Kabatova)
  - CI: Drop c9s config (Veronika Kabatova)
  - virtio-net: fix pages leaking when building skb in big mode (Laurent Vivier) [2042559]
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Carlos Maiolino) [2060869] {CVE-2022-0847}
  - redhat/configs: Make CRYPTO_ECDH algos built-in (Simo Sorce) [2062199]
  - crypto: api - Move cryptomgr soft dependency into algapi (Vladis Dronov) [2062199]
  - crypto: api - Fix boot-up crash when crypto manager is disabled (Vladis Dronov) [2062199]
  - crypto: api - Do not create test larvals if manager is disabled (Vladis Dronov) [2062199]
  - crypto: api - Export crypto_boot_test_finished (Vladis Dronov) [2062199]
  - crypto: api - Fix built-in testing dependency failures (Vladis Dronov) [2062199]
  - redhat/configs: Add CRYPTO_AES_ARM64 config explicitly (Vladis Dronov) [2062199]
  - crypto: arm64/aes-ce - stop using SIMD helper for skciphers (Vladis Dronov) [2062199]
  - crypto: arm64/aes-neonbs - stop using SIMD helper for skciphers (Vladis Dronov) [2062199]
  - redhat: change default dist suffix for RHEL 9.0 (Herton R. Krzesinski)
  - selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050813]
  - KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050813]
  - block: kabi: reserve space for block layer public structure (Ming Lei) [2057238]
  - block: kabi: reserve space for blk-mq related structure (Ming Lei) [2057238]
  - block: kabi: reserve space for bsg related structure (Ming Lei) [2057238]
  - block: kabi: reserve space for integrity related structure (Ming Lei) [2057238]
  - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (Dick Kennedy) [2054866]
  - x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Aristeu Rozanski) [1898165 2047430 2047446]
  - x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1898165 2047430 2047446]
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Aristeu Rozanski) [1898165 2047430 2047446]
  - EDAC: Add RDDR5 and LRDDR5 memory types (Aristeu Rozanski) [1898165 2047430 2047446]
  - drm/amdgpu: Register MCE notifier for Aldebaran RAS (Aristeu Rozanski) [1898165 2047430 2047446]
  - x86/MCE/AMD: Export smca_get_bank_type symbol (Aristeu Rozanski) [1898165 2047430 2047446]
  - PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049635]
  - PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049635]
  - PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049635]
  - PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049635]
  - PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049635]
  - nvmet-tcp: fix missing unmainted messages (Chris Leech) [2054441]
  - dm stats: fix too short end duration_ns when using precise_timestamps (Benjamin Marzinski) [2051798]
  - dm: fix double accounting of flush with data (Benjamin Marzinski) [2051798]
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Benjamin Marzinski) [2051798]
  - dm: properly fix redundant bio-based IO accounting (Benjamin Marzinski) [2051798]
  - dm: revert partial fix for redundant bio-based IO accounting (Benjamin Marzinski) [2051798]
  - block: add bio_start_io_acct_time() to control start_time (Benjamin Marzinski) [2051798]
  - scsi: mpt3sas: Fix incorrect system timestamp (Tomas Henzl) [2049631]
  - scsi: mpt3sas: Fix system going into read-only mode (Tomas Henzl) [2049631]
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test (Tomas Henzl) [2049631]
  - redhat/configs: enable mellanox platform drivers to support LED, fan & watchdog devices (Ivan Vecera) [2057491]
  - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (David Arcari) [2040022]
  - x86/cpu: Add Raptor Lake to Intel family (David Arcari) [2040022]
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2055566]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2055566]
  - selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2060814]
  - KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2060814]
  - igb: refactor XDP registration (Corinna Vinschen) [2054379]
  - igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) [2054379]
  - redhat/configs: Enable CONFIG_ACER_WIRELESS (Peter Georg) [2025985]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-74.el9]
changelog:
  - redhat: rpminspect: disable 'patches' check for known empty patch files (Patrick Talbert)
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding (Nico Pache) [2055725]
  - ibmvnic: don't release napi in __ibmvnic_open() (Diego Domingos) [2055981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-75.el9]
changelog:
  - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (Hangbin Liu) [2059308] {CVE-2022-0742}
  - redhat/configs: aarch64: Fix PAC/BTI config settings (Mark Salter) [2063215]
  - RHEL9.0: arch_hw Update CONFIG_MOUSE_VSXXXAA=m (Tony Camuso) [2062909]
  - redhat/configs: Disable KVM on POWER (Laurent Vivier) [2052898]
  - drm/ast: Create threshold values for AST2600 (Jocelyn Falempe) [2062560]
  - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2062797]
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy (David Airlie) [2047613] {CVE-2022-22942}
  - netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2060092]
  - netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2060092]
  - selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2060092]
  - netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2060092]
  - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix memory leaks (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix reporting of actual data transfer size (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix hibernation issue (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix printing of pending I/O count (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix deadlock while canceling the fw event (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fixes around reply request queues (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Use TM response codes from MPI3 headers (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Do access status validation before adding devices (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Update MPI3 headers - part2 (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Update MPI3 headers - part1 (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Add debug APIs based on logging_level bits (Tomas Henzl) [2056626]
  - x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Leonardo Bras) [2043545]
  - x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Leonardo Bras) [2043545]
  - KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Leonardo Bras) [2043545]
  - KVM: x86: Do runtime CPUID update before updating vcpu->arch.cpuid_entries (Leonardo Bras) [2043545]
  - x86/fpu: Fix inline prefix warnings (Leonardo Bras) [2043545]
  - kvm: x86: Emulate IA32_XFD_ERR for guest (Leonardo Bras) [2043545]
  - x86/fpu: Prepare xfd_err in struct fpu_guest (Leonardo Bras) [2043545]
  - kvm: x86: Add emulation for IA32_XFD (Leonardo Bras) [2043545]
  - x86/fpu: Provide fpu_update_guest_xfd() for IA32_XFD emulation (Leonardo Bras) [2043545]
  - kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 (Leonardo Bras) [2043545]
  - x86/fpu: Provide fpu_enable_guest_xfd_features() for KVM (Leonardo Bras) [2043545]
  - x86/fpu: Add guest support to xfd_enable_feature() (Leonardo Bras) [2043545]
  - x86/fpu: Prepare guest FPU for dynamically enabled FPU features (Leonardo Bras) [2043545]
  - x86/fpu: Extend fpu_xstate_prctl() with guest permissions (Leonardo Bras) [2043545]
  - cpuid: kvm_find_kvm_cpuid_features() should be declared 'static' (Leonardo Bras) [2043545]
  - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES (Leonardo Bras) [2043545]
  - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows (Leonardo Bras) [2043545]
  - redhat/configs: Disable watchdog components (Prarit Bhargava) [2060117]
  - sched: Fix yet more sched_fork() races (Phil Auld) [2062836]
  - sched/fair: Fix fault in reweight_entity (Phil Auld) [2062836]
  - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN (David Arcari) [2043225]
  - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2056057]
  - drivers/char: permit access to the RTAS user buffer under lockdown (Desnes A. Nunes do Rosario) [2046472]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-76.el9]
changelog:
  - vdpa/mlx5: Fix tracking of current number of VQs (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix is_index_valid() to refer to features (Cindy Lu) [2055451]
  - vdpa: Protect vdpa reset with cf_mutex (Cindy Lu) [2055451]
  - vdpa: Avoid taking cf_mutex lock on get status (Cindy Lu) [2055451]
  - vdpa/vdpa_sim_net: Report max device capabilities (Cindy Lu) [2055451]
  - vdpa: Use BIT_ULL for bit operations (Cindy Lu) [2055451]
  - vdpa/vdpa_sim: Configure max supported virtqueues (Cindy Lu) [2055451]
  - vdpa/mlx5: Report max device capabilities (Cindy Lu) [2055451]
  - vdpa: Support reporting max device capabilities (Cindy Lu) [2055451]
  - vdpa/mlx5: Restore cur_num_vqs in case of failure in change_num_qps() (Cindy Lu) [2055451]
  - vdpa: Add support for returning device configuration information (Cindy Lu) [2055451]
  - vdpa/mlx5: Support configuring max data virtqueue (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix config_attr_mask assignment (Cindy Lu) [2055451]
  - vdpa: Allow to configure max data virtqueues (Cindy Lu) [2055451]
  - vdpa: Read device configuration only if FEATURES_OK (Cindy Lu) [2055451]
  - vdpa: Sync calls set/get config/status with cf_mutex (Cindy Lu) [2055451]
  - vdpa/mlx5: Distribute RX virtqueues in RQT object (Cindy Lu) [2055451]
  - vdpa: Provide interface to read driver features (Cindy Lu) [2055451]
  - vdpa: clean up get_config_size ret value handling (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (Cindy Lu) [2055451]
  - vdpa: Mark vdpa_config_ops.get_vq_notification as optional (Cindy Lu) [2055451]
  - vdpa: Avoid duplicate call to vp_vdpa get_status (Cindy Lu) [2055451]
  - net/mlx5_vdpa: Offer VIRTIO_NET_F_MTU when setting MTU (Cindy Lu) [2055451]
  - vdpa: add driver_override support (Cindy Lu) [2055451]
  - docs: document sysfs ABI for vDPA bus (Cindy Lu) [2055451]
  - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (Cindy Lu) [2055451]
  - vdpa: Consider device id larger than 31 (Cindy Lu) [2055451]
  - virtio: always enter drivers/virtio/ (Cindy Lu) [2055451]
  - vdpa: check that offsets are within bounds (Cindy Lu) [2055451]
  - vdpa_sim: avoid putting an uninitialized iova_domain (Cindy Lu) [2055451]
  - vhost-vdpa: clean irqs before reseting vdpa device (Cindy Lu) [2055451]
  - vdpa/mlx5: Forward only packets with allowed MAC address (Cindy Lu) [2055451]
  - vdpa/mlx5: Support configuration of MAC (Cindy Lu) [2055451]
  - vdpa/mlx5: Fix clearing of VIRTIO_NET_F_MAC feature bit (Cindy Lu) [2055451]
  - vdpa_sim_net: Enable user to set mac address and mtu (Cindy Lu) [2055451]
  - vdpa: Enable user to set mac and mtu of vdpa device (Cindy Lu) [2055451]
  - vdpa: Use kernel coding style for structure comments (Cindy Lu) [2055451]
  - vdpa: Introduce query of device config layout (Cindy Lu) [2055451]
  - vdpa: Introduce and use vdpa device get, set config helpers (Cindy Lu) [2055451]
  - vdpa/mlx5: Propagate link status from device to vdpa driver (Cindy Lu) [2055451]
  - vdpa/mlx5: Rename control VQ workqueue to vdpa wq (Cindy Lu) [2055451]
  - vdpa/mlx5: Remove mtu field from vdpa net device (Cindy Lu) [2055451]
  - vdpa: add new attribute VDPA_ATTR_DEV_MIN_VQ_SIZE (Cindy Lu) [2055451]
  - virtio_vdpa: setup correct vq size with callbacks get_vq_num_{max,min} (Cindy Lu) [2055451]
  - vdpa: min vq num of vdpa device cannot be greater than max vq num (Cindy Lu) [2055451]
  - vdpa: add new callback get_vq_num_min in vdpa_config_ops (Cindy Lu) [2055451]
  - vp_vdpa: add vq irq offloading support (Cindy Lu) [2055451]
  - vdpa: fix typo (Cindy Lu) [2055451]
  - vhost-vdpa: Fix the wrong input in config_cb (Cindy Lu) [2055451]
  - vhost_vdpa: unset vq irq before freeing irq (Cindy Lu) [2055451]
  - vdpa: potential uninitialized return in vhost_vdpa_va_map() (Cindy Lu) [2055451]
  - vdpa/mlx5: Avoid executing set_vq_ready() if device is reset (Cindy Lu) [2055451]
  - vdpa/mlx5: Clear ready indication for control VQ (Cindy Lu) [2055451]
  - vdpa: Support transferring virtual addressing during DMA mapping (Cindy Lu) [2055451]
  - vdpa: factor out vhost_vdpa_pa_map() and vhost_vdpa_pa_unmap() (Cindy Lu) [2055451]
  - vdpa: Add an opaque pointer for vdpa_config_ops.dma_map() (Cindy Lu) [2055451]
  - vhost-iotlb: Add an opaque pointer for vhost IOTLB (Cindy Lu) [2055451]
  - vhost-vdpa: Handle the failure of vdpa_reset() (Cindy Lu) [2055451]
  - vdpa: Add reset callback in vdpa_config_ops (Cindy Lu) [2055451]
  - vdpa: Fix some coding style issues (Cindy Lu) [2055451]
  - vdpa: Make use of PFN_PHYS/PFN_UP/PFN_DOWN helper macro (Cindy Lu) [2055451]
  - vdpa/mlx5: Add multiqueue support (Cindy Lu) [2055451]
  - vdpa/mlx5: Add support for control VQ and MAC setting (Cindy Lu) [2055451]
  - vdpa/mlx5: Ensure valid indices are provided (Cindy Lu) [2055451]
  - vdpa/mlx5: Decouple virtqueue callback from struct mlx5_vdpa_virtqueue (Cindy Lu) [2055451]
  - vdpa/mlx5: function prototype modifications in preparation to control VQ (Cindy Lu) [2055451]
  - vdpa/mlx5: Remove redundant header file inclusion (Cindy Lu) [2055451]
  - vDPA/ifcvf: enable multiqueue and control vq (Cindy Lu) [2055451]
  - vDPA/ifcvf: detect and use the onboard number of queues directly (Cindy Lu) [2055451]
  - vDPA/ifcvf: implement management netlink framework for ifcvf (Cindy Lu) [2055451]
  - vDPA/ifcvf: introduce get_dev_type() which returns virtio dev id (Cindy Lu) [2055451]
  - x86/hyperv: Output host build info as normal Windows version number (Vitaly Kuznetsov) [2060708]
  - lib/irq_poll: Declare IRQ_POLL softirq vector as ksoftirqd-parking safe (Desnes A. Nunes do Rosario) [2059555]
  - tick/rcu: Stop allowing RCU_SOFTIRQ in idle (Desnes A. Nunes do Rosario) [2059555]
  - tick/rcu: Remove obsolete rcu_needs_cpu() parameters (Desnes A. Nunes do Rosario) [2059555]
  - tick: Detect and fix jiffies update stall (Desnes A. Nunes do Rosario) [2059555]
  - rcu: Move rcu_needs_cpu() to tree.c (Desnes A. Nunes do Rosario) [2059555]
  - rcu: Remove the RCU_FAST_NO_HZ Kconfig option (Desnes A. Nunes do Rosario) [2059555]
  - torture: Remove RCU_FAST_NO_HZ from rcu scenarios (Desnes A. Nunes do Rosario) [2059555]
  - torture: Remove RCU_FAST_NO_HZ from rcuscale and refscale scenarios (Desnes A. Nunes do Rosario) [2059555]
  - copy_process(): Move fd_install() out of sighand->siglock critical section (Waiman Long) [2051855]
  - redhat/configs: enable CONFIG_INTEL_VSEC for x86 (David Arcari) [2058806]
  - platform/x86/intel: Move intel_pmt from MFD to Auxiliary Bus (David Arcari) [2058806]
  - platform/x86: intel_pmt_telemetry: Ignore zero sized entries (David Arcari) [2058806]
  - platform/x86/intel: Move Intel PMT drivers to new subfolder (David Arcari) [2058806]
  - driver core: auxiliary bus: Add driver data helpers (David Arcari) [2058806]
  - PCI: Add #defines for accessing PCIe DVSEC fields (David Arcari) [2058806]
  - tools headers UAPI: Sync powerpc syscall table file changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - tools headers UAPI: Sync s390 syscall table file changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - futex: Wireup futex_waitv syscall (Joel Savitz) [2038794]
  - tools headers UAPI: Sync MIPS syscall table file changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - parisc: Wire up futex_waitv (Joel Savitz) [2038794]
  - s390: wire up sys_futex_waitv system call (Joel Savitz) [2038794]
  - MIPS: syscalls: Wire up futex_waitv syscall (Joel Savitz) [2038794]
  - tools headers UAPI: Sync files changed by new futex_waitv syscall (Joel Savitz) [2038794]
  - futex2: Documentation: Document sys_futex_waitv() uAPI (Joel Savitz) [2038794]
  - selftests: futex: Test sys_futex_waitv() wouldblock (Joel Savitz) [2038794]
  - selftests: futex: Test sys_futex_waitv() timeout (Joel Savitz) [2038794]
  - selftests: futex: Add sys_futex_waitv() test (Joel Savitz) [2038794]
  - futex,arm: Wire up sys_futex_waitv() (Joel Savitz) [2038794]
  - futex,x86: Wire up sys_futex_waitv() (Joel Savitz) [2038794]
  - futex: Implement sys_futex_waitv() (Joel Savitz) [2038794]
  - futex: Simplify double_lock_hb() (Joel Savitz) [2038794]
  - futex: Split out wait/wake (Joel Savitz) [2038794]
  - futex: Split out requeue (Joel Savitz) [2038794]
  - futex: Rename mark_wake_futex() (Joel Savitz) [2038794]
  - futex: Rename: match_futex() (Joel Savitz) [2038794]
  - futex: Rename: hb_waiter_{inc,dec,pending}() (Joel Savitz) [2038794]
  - futex: Split out PI futex (Joel Savitz) [2038794]
  - futex: Rename: {get,cmpxchg}_futex_value_locked() (Joel Savitz) [2038794]
  - futex: Rename hash_futex() (Joel Savitz) [2038794]
  - futex: Rename __unqueue_futex() (Joel Savitz) [2038794]
  - futex: Rename: queue_{,un}lock() (Joel Savitz) [2038794]
  - futex: Rename futex_wait_queue_me() (Joel Savitz) [2038794]
  - futex: Rename {,__}{,un}queue_me() (Joel Savitz) [2038794]
  - futex: Split out syscalls (Joel Savitz) [2038794]
  - futex: Move to kernel/futex/ (Joel Savitz) [2038794]
  - cifs: fix double free race when mount fails in cifs_get_root() (Ronnie Sahlberg) [1979175]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-77.el9]
changelog:
  - NFSD: Fix offset type in I/O trace points (Benjamin Coddington) [2063045]
  - NFSD: COMMIT operations must not return NFS?ERR_INVAL (Benjamin Coddington) [2063045]
  - NFSD: Clamp WRITE offsets (Benjamin Coddington) [2063045]
  - NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes (Benjamin Coddington) [2063045]
  - NFSD: Fix ia_size underflow (Benjamin Coddington) [2063045]
  - NFSD: Fix the behavior of READ near OFFSET_MAX (Benjamin Coddington) [2063045]
  - perf/x86/intel/uncore: Fix Intel SPR CHA event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Fix Intel SPR IIO event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add alias PMU name (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Michael Petlan) [2054100]
  - perf/x86/intel/uncore: Add Sapphire Rapids server framework (Michael Petlan) [2054100]
  - Revert "include/linux/ioport.h: Pad resource struct for KABI" (Prarit Bhargava) [2055736]
  - powerpc/pseries: Fix use after free in remove_phb_dynamic() (Prarit Bhargava) [2055736]
  - lib/sbitmap: kill 'depth' from sbitmap_word (Ming Lei) [2064695]
  - KVM: use __vcalloc for very large allocations (David Hildenbrand) [2057367]
  - mm: use vmalloc_array and vcalloc for array allocations (David Hildenbrand) [2057367]
  - mm: vmalloc: introduce array allocation functions (David Hildenbrand) [2057367]
  - tpm: fix potential NULL pointer access in tpm_del_char_device (Desnes A. Nunes do Rosario) [2032117]
  - x86/speculation: Warn about eIBRS + LFENCE + Unprivileged eBPF + SMT (Waiman Long) [2062158 2062168] {CVE-2021-26401 CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Warn about Spectre v2 LFENCE mitigation (Waiman Long) [2062158 2062168] {CVE-2021-26401 CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Update link to AMD speculation whitepaper (Waiman Long) [2062168] {CVE-2021-26401}
  - x86/speculation: Use generic retpoline by default on AMD (Waiman Long) [2062168] {CVE-2021-26401}
  - x86/speculation: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - Documentation/hw-vuln: Update spectre doc (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Add eIBRS + Retpoline options (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86/speculation: Rename RETPOLINE_AMD to RETPOLINE_LFENCE (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86,bugs: Unconditionally allow spectre_v2=retpoline,amd (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - x86: deduplicate the spectre_v2_user documentation (Waiman Long) [2062158] {CVE-2022-0001 CVE-2022-0002}
  - redhat/configs: aarch64: Enable ARM_SPE_PMU (Mark Salter) [2063234]
  - drm/i915/audio: Use BIOS provided value for RKL HDA link (Mika Penttilä) [2046691]
  - redhat: configs: Disable TPM 1.2 device drivers (Jerry Snitselaar) [2060516]
  - redhat: configs: Change aarch64 default dma domain to lazy (Jerry Snitselaar) [2050415]
  - powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2062762]
  - CI: Remove deprecated option (Veronika Kabatova)
  - redhat/configs: make SHA512_arch algos and CRYPTO_USER built-ins (Vladis Dronov) [2070624]
  - futex: Fix PREEMPT_RT build (Fernando Pacheco) [2070369]
  - crypto: ccp - ccp_dmaengine_unregister release dma channels (Vladis Dronov) [2047836]
  - crypto: ccp - remove redundant ret variable (Vladis Dronov) [2047836]
  - crypto: ccp - Ensure psp_ret is always init'd in __sev_platform_init_locked() (Vladis Dronov) [2047836]
  - crypto: ccp - remove unneeded semicolon (Vladis Dronov) [2047836]
  - crypto: ccp - Add SEV_INIT_EX support (Vladis Dronov) [2047836]
  - crypto: ccp - Add psp_init_on_probe module parameter (Vladis Dronov) [2047836]
  - crypto: ccp - Refactor out sev_fw_alloc() (Vladis Dronov) [2047836]
  - crypto: ccp - Move SEV_INIT retry for corrupted data (Vladis Dronov) [2047836]
  - crypto: ccp - Add SEV_INIT rc error logging on init (Vladis Dronov) [2047836]
  - crypto: ccp - no need to initialise statics to 0 (Vladis Dronov) [2047836]
  - perf tests attr: Add missing topdown metrics events (Michael Petlan) [2062513]
  - powerpc/papr_scm: Implement initial support for injecting smart errors (Steve Best) [1873827]
  - redhat/koji/Makefile: Decouple koji Makefile from Makefile.common (Andrea Claudi) [2037486]
  - redhat: fix make {distg-brew,distg-koji} (Andrea Claudi) [2037486]
  - mm: memcg: synchronize objcg lists with a dedicated spinlock (Waiman Long) [2046537]
  - mm: memcontrol: remove the kmem states (Waiman Long) [2046537]
  - mm: memcontrol: remove kmemcg_id reparenting (Waiman Long) [2046537]
  - mm/memcg: remove obsolete memcg_free_kmem() (Waiman Long) [2046537]
  - PCI: rcar: Check if device is runtime suspended instead of __clk_is_enabled() (Myron Stowe) [2045254]
  - PCI: aardvark: Fix checking for MEM resource type (Myron Stowe) [2045254]
  - PCI/MSI: Move non-mask check back into low level accessors (Myron Stowe) [2045254]
  - PCI: aardvark: Implement re-issuing config requests on CRS response (Myron Stowe) [2045254]
  - PCI: aardvark: Deduplicate code in advk_pcie_rd_conf() (Myron Stowe) [2045254]
  - PCI: aardvark: Fix preserving PCI_EXP_RTCTL_CRSSVE flag on emulated bridge (Myron Stowe) [2045254]
  - PCI: ACPI: Drop acpi_pci_bus (Myron Stowe) [2045254]
  - ACPI: glue: Eliminate acpi_platform_notify() (Myron Stowe) [2045254]
  - ACPI: bus: Rename functions to avoid name collision (Myron Stowe) [2045254]
  - ACPI: glue: Change return type of two functions to void (Myron Stowe) [2045254]
  - ACPI: glue: Rearrange acpi_device_notify() (Myron Stowe) [2045254]
  - PCI/MSI: Handle msi_populate_sysfs() errors correctly (Myron Stowe) [2045254]
  - MAINTAINERS: Add Nirmal Patel as VMD maintainer (Myron Stowe) [2045254]
  - PCI: Add AMD GPU multi-function power dependencies (Myron Stowe) [2045254]
  - tools: PCI: Zero-initialize param (Myron Stowe) [2045254]
  - PCI: controller: PCI_IXP4XX should depend on ARCH_IXP4XX (Myron Stowe) [2045254]
  - Documentation: PCI: endpoint/pci-endpoint-cfs: Guide to use SR-IOV (Myron Stowe) [2045254]
  - misc: pci_endpoint_test: Populate sriov_configure ops to configure SR-IOV device (Myron Stowe) [2045254]
  - PCI: cadence: Add support to configure virtual functions (Myron Stowe) [2045254]
  - PCI: cadence: Simplify code to get register base address for configuring BAR (Myron Stowe) [2045254]
  - PCI: endpoint: Add virtual function number in pci_epc ops (Myron Stowe) [2045254]
  - PCI: endpoint: Add support to link a physical function to a virtual function (Myron Stowe) [2045254]
  - PCI: endpoint: Add support to add virtual function in endpoint core (Myron Stowe) [2045254]
  - dt-bindings: PCI: pci-ep: Add binding to specify virtual function (Myron Stowe) [2045254]
  - PCI: xilinx-nwl: Enable the clock through CCF (Myron Stowe) [2045254]
  - dt-bindings: pci: xilinx-nwl: Document optional clock property (Myron Stowe) [2045254]
  - PCI: xgene-msi: Remove redundant dev_err() call in xgene_msi_probe() (Myron Stowe) [2045254]
  - PCI: tegra194: Cleanup unused code (Myron Stowe) [2045254]
  - PCI: tegra194: Don't allow suspend when Tegra PCIe is in EP mode (Myron Stowe) [2045254]
  - PCI: tegra194: Disable interrupts before entering L2 (Myron Stowe) [2045254]
  - PCI: tegra194: Fix MSI-X programming (Myron Stowe) [2045254]
  - PCI: tegra194: Fix handling BME_CHGED event (Myron Stowe) [2045254]
  - PCI: tegra: make const array err_msg static (Myron Stowe) [2045254]
  - PCI: tegra: Use 'seq_puts' instead of 'seq_printf' (Myron Stowe) [2045254]
  - PCI: tegra: Fix OF node reference leak (Myron Stowe) [2045254]
  - PCI: tegra: Remove unused struct tegra_pcie_bus (Myron Stowe) [2045254]
  - PCI: rcar: Add L1 link state fix into data abort hook (Myron Stowe) [2045254]
  - PCI: rcar: Fix runtime PM imbalance in rcar_pcie_ep_probe() (Myron Stowe) [2045254]
  - PCI: mediatek: Use PCI domain to handle ports detection (Myron Stowe) [2045254]
  - PCI: mediatek: Add new method to get irq number (Myron Stowe) [2045254]
  - PCI: mediatek: Add new method to get shared pcie-cfg base address (Myron Stowe) [2045254]
  - dt-bindings: PCI: mediatek: Update the Device tree bindings (Myron Stowe) [2045254]
  - PCI: keembay: Add support for Intel Keem Bay (Myron Stowe) [2045254]
  - dt-bindings: PCI: Add Intel Keem Bay PCIe controller (Myron Stowe) [2045254]
  - PCI: iproc: Fix BCMA probe resource handling (Myron Stowe) [2045254]
  - PCI: of: Don't fail devm_pci_alloc_host_bridge() on missing 'ranges' (Myron Stowe) [2045254]
  - misc: pci_endpoint_test: Add deviceID for AM64 and J7200 (Myron Stowe) [2045254]
  - PCI: j721e: Add PCIe support for AM64 (Myron Stowe) [2045254]
  - PCI: j721e: Add PCIe support for J7200 (Myron Stowe) [2045254]
  - PCI: cadence: Add quirk flag to set minimum delay in LTSSM Detect.Quiet state (Myron Stowe) [2045254]
  - PCI: cadence: Use bitfield for *quirk_retrain_flag* instead of bool (Myron Stowe) [2045254]
  - PCI: aardvark: Fix masking and unmasking legacy INTx interrupts (Myron Stowe) [2045254]
  - PCI: aardvark: Configure PCIe resources from 'ranges' DT property (Myron Stowe) [2045254]
  - PCI: aardvark: Fix reporting CRS value (Myron Stowe) [2045254]
  - PCI: pci-bridge-emul: Add PCIe Root Capabilities Register (Myron Stowe) [2045254]
  - PCI: aardvark: Increase polling delay to 1.5s while waiting for PIO response (Myron Stowe) [2045254]
  - PCI: aardvark: Fix checking for PIO status (Myron Stowe) [2045254]
  - MAINTAINERS: Add entries for Toshiba Visconti PCIe controller (Myron Stowe) [2045254]
  - PCI: visconti: Add Toshiba Visconti PCIe host controller driver (Myron Stowe) [2045254]
  - PCI: rockchip-dwc: Add Rockchip RK356X host controller driver (Myron Stowe) [2045254]
  - PCI: dwc: Remove surplus break statement after return (Myron Stowe) [2045254]
  - PCI: artpec6: Remove local code block from switch statement (Myron Stowe) [2045254]
  - PCI: artpec6: Remove surplus break statement after return (Myron Stowe) [2045254]
  - x86/PCI: sta2x11: switch from 'pci_' to 'dma_' API (Myron Stowe) [2045254]
  - PCI: Sync __pci_register_driver() stub for CONFIG_PCI=n (Myron Stowe) [2045254]
  - PCI: Add schedule point in proc_bus_pci_read() (Myron Stowe) [2045254]
  - PCI: Correct the pci_iomap.h header guard #endif comment (Myron Stowe) [2045254]
  - PCI/PTM: Remove error message at boot (Myron Stowe) [2045254]
  - PCI: Fix pci_dev_str_match_path() alloc while atomic bug (Myron Stowe) [2045254]
  - x86/PCI: Add pci_numachip_init() declaration (Myron Stowe) [2045254]
  - PCI/ACS: Enforce pci=noats with Transaction Blocking (Myron Stowe) [2045254]
  - PCI: Add ACS quirks for Cavium multi-function devices (Myron Stowe) [2045254]
  - PCI: Add ACS quirks for NXP LX2xx0 and LX2xx2 platforms (Myron Stowe) [2045254]
  - PCI: Optimize pci_resource_len() to reduce kernel size (Myron Stowe) [2045254]
  - PCI: Refactor pci_ioremap_bar() and pci_ioremap_wc_bar() (Myron Stowe) [2045254]
  - PCI/portdrv: Enable Bandwidth Notification only if port supports it (Myron Stowe) [2045254]
  - PCI: Bulk conversion to generic_handle_domain_irq() (Myron Stowe) [2045254]
  - PCI: Set dma-can-stall for HiSilicon chips (Myron Stowe) [2045254]
  - PCI: ibmphp: Fix double unmap of io_mem (Myron Stowe) [2045254]
  - PCI: Return int from pciconfig_read() syscall (Myron Stowe) [2045254]
  - PCI: Return ~0 data on pciconfig_read() CAP_SYS_ADMIN failure (Myron Stowe) [2045254]
  - PCI: Restrict ASMedia ASM1062 SATA Max Payload Size Supported (Myron Stowe) [2045254]
  - PCI: Call Max Payload Size-related fixup quirks early (Myron Stowe) [2045254]
  - platform-msi: Add ABI to show msi_irqs of platform devices (Myron Stowe) [2045254]
  - genirq/msi: Move MSI sysfs handling from PCI to MSI core (Myron Stowe) [2045254]
  - genirq/timings: Fix error return code in irq_timings_test_irqs() (Myron Stowe) [2045254]
  - PCI/MSI: Use new mask/unmask functions (Myron Stowe) [2045254]
  - PCI/MSI: Provide a new set of mask and unmask functions (Myron Stowe) [2045254]
  - PCI/MSI: Cleanup msi_mask() (Myron Stowe) [2045254]
  - PCI/MSI: Deobfuscate virtual MSI-X (Myron Stowe) [2045254]
  - PCI/MSI: Consolidate error handling in msi_capability_init() (Myron Stowe) [2045254]
  - PCI/MSI: Rename msi_desc::masked (Myron Stowe) [2045254]
  - PCI/MSI: Simplify msi_verify_entries() (Myron Stowe) [2045254]
  - s390/pci: Do not mask MSI[-X] entries on teardown (Myron Stowe) [2045254]
  - genirq: Improve "hwirq" output in /proc and /sys/ (Myron Stowe) [2045254]
  - perf/x86/intel/uncore: Fix Intel SPR CHA event constraints (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Fix Intel SPR IIO event constraints (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Support IMC free-running counters on Sapphire Rapids server (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Support IIO free-running counters on Sapphire Rapids server (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Factor out snr_uncore_mmio_map() (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add alias PMU name (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server MDF support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M3UPI support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server UPI support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M2M support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IMC support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server PCU support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server M2PCIe support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IRP support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server IIO support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server CHA support (Michael Petlan) [2066225]
  - perf/x86/intel/uncore: Add Sapphire Rapids server framework (Michael Petlan) [2066225]
  - ibmvnic: Allow queueing resets during probe (Diego Domingos) [2058835]
  - ibmvnic: clear fop when retrying probe (Diego Domingos) [2058835]
  - ibmvnic: init init_done_rc earlier (Diego Domingos) [2058835]
  - ibmvnic: register netdev after init of adapter (Diego Domingos) [2058835]
  - ibmvnic: complete init_done on transport events (Diego Domingos) [2058835]
  - ibmvnic: define flush_reset_queue helper (Diego Domingos) [2058835]
  - ibmvnic: initialize rc before completing wait (Diego Domingos) [2058835]
  - ibmvnic: free reset-work-item when flushing (Diego Domingos) [2058835]
  - powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2063682]
  - nvmet: revert "nvmet: make discovery NQN configurable" (Gopal Tiwari) [2066146]
  - nvme-tcp: send H2CData PDUs based on MAXH2CDATA (Gopal Tiwari) [2066146]
  - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2066146]
  - nvme: don't return an error from nvme_configure_metadata (Gopal Tiwari) [2066146]
  - block: fix surprise removal for drivers calling blk_set_queue_dying (Gopal Tiwari) [2066146]
  - nvme-tcp: fix bogus request completion when failing to send AER (Gopal Tiwari) [2066146]
  - nvme: add nvme_complete_req tracepoint for batched completion (Gopal Tiwari) [2066146]
  - nvme-fabrics: remove the unneeded ret variable in nvmf_dev_show (Gopal Tiwari) [2066146]
  - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (Gopal Tiwari) [2066146]
  - block: introduce rq_list_for_each_safe macro (Gopal Tiwari) [2066146]
  - block: move rq_list macros to blk-mq.h (Gopal Tiwari) [2066146]
  - nvme: add 'iopolicy' module parameter (Gopal Tiwari) [2066146]
  - nvme-fabrics: print out valid arguments when reading from /dev/nvme-fabrics (Gopal Tiwari) [2066146]
  - nvme: separate command prep and issue (Gopal Tiwari) [2066146]
  - nvme: split command copy into a helper (Gopal Tiwari) [2066146]
  - nvmet-tcp: fix possible list corruption for unexpected command failure (Gopal Tiwari) [2066146]
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2066146]
  - nvme-multipath: set ana_log_size to 0 after free ana_log_buf (Gopal Tiwari) [2066146]
  - nvme: disable namespace access for unsupported metadata (Gopal Tiwari) [2066146]
  - nvme: report write pointer for a full zone as zone start + zone len (Gopal Tiwari) [2066146]
  - nvme: show subsys nqn for duplicate cntlids (Gopal Tiwari) [2066146]
  - nvme-pci: add NO APST quirk for Kioxia device (Gopal Tiwari) [2066146]
  - nvme: fix write zeroes pi (Gopal Tiwari) [2066146]
  - nvmet: use flex_array_size and struct_size (Gopal Tiwari) [2066146]
  - nvmet: use struct_size over open coded arithmetic (Gopal Tiwari) [2066146]
  - nvme-pci: clear shadow doorbell memory on resets (Gopal Tiwari) [2066146]
  - nvmet: use macro definitions for setting cmic value (Gopal Tiwari) [2066146]
  - nvme-multipath: add error handling support for add_disk() (Gopal Tiwari) [2066146]
  - nvme-rdma: fix error code in nvme_rdma_setup_ctrl (Gopal Tiwari) [2066146]
  - nvmet: use macro definition for setting nmic value (Gopal Tiwari) [2066146]
  - nvmet-rdma: implement get_max_queue_size controller op (Gopal Tiwari) [2066146]
  - nvmet: add get_max_queue_size op for controllers (Gopal Tiwari) [2066146]
  - nvme-rdma: limit the maximal queue size for RDMA controllers (Gopal Tiwari) [2066146]
  - nvme: generate uevent once a multipath namespace is operational again (Gopal Tiwari) [2066146]
  - nvme-fc: add support for ->map_queues (Gopal Tiwari) [2066146]
  - nvme: loop: clear NVME_CTRL_ADMIN_Q_STOPPED after admin queue is reallocated (Gopal Tiwari) [2066146]
  - nvme: don't memset() the normal read/write command (Gopal Tiwari) [2066146]
  - nvme: move command clear into the various setup helpers (Gopal Tiwari) [2066146]
  - nvme: wire up completion batching for the IRQ path (Gopal Tiwari) [2066146]
  - nvme: add support for batched completion of polled IO (Gopal Tiwari) [2066146]
  - nvme-multipath: enable polled I/O (Gopal Tiwari) [2066146]
  - nvme: remove the call to nvme_update_disk_info in nvme_ns_remove (Gopal Tiwari) [2066146]
  - nvme-rdma: destroy cm id before destroy qp to avoid use after free (Gopal Tiwari) [2066146]
  - nvme: add error handling support for add_disk() (Gopal Tiwari) [2066146]
  - nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2066146]
  - nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2066146]
  - nvme-multipath: set QUEUE_FLAG_NOWAIT (Gopal Tiwari) [2066146]
  - nvme: remove the unused NVME_NS_* enum (Gopal Tiwari) [2066146]
  - nvme: remove nvm_ndev from ns (Gopal Tiwari) [2066146]
  - nvme: Have NVME_FABRICS select NVME_CORE instead of transport drivers (Gopal Tiwari) [2066146]
  - nvme-pci: disable hmb on idle suspend (Gopal Tiwari) [2066146]
  - nvme: allow user toggling hmb usage (Gopal Tiwari) [2066146]
  - nvme-fabrics: remove superfluous nvmf_host_put in nvmf_parse_options (Gopal Tiwari) [2066146]
  - nvme: add set feature tracing support (Gopal Tiwari) [2066146]
  - nvmet: add set feature tracing support (Gopal Tiwari) [2066146]
  - nvme-pci: cmb sysfs: one file, one value (Gopal Tiwari) [2066146]
  - nvme-pci: use attribute group for cmb sysfs (Gopal Tiwari) [2066146]
  - remove the lightnvm subsystem (Gopal Tiwari) [2066146]
  - compiler.h: Introduce absolute_pointer macro (Gopal Tiwari) [2066146]
  - mm/usercopy: return 1 from hardened_usercopy __setup() handler (Rafael Aquini) [2064990]
  - mm: madvise: return correct bytes advised with process_madvise (Rafael Aquini) [2064990]
  - mm/thp: refix __split_huge_pmd_locked() for migration PMD (Rafael Aquini) [2064990]
  - mm/mlock: fix potential imbalanced rlimit ucounts adjustment (Rafael Aquini) [2064990]
  - mm/hwpoison: fix error page recovered but reported "not recovered" (Rafael Aquini) [2064990]
  - mm/page_alloc: check high-order pages for corruption during PCP operations (Rafael Aquini) [2064990]
  - mm/page_alloc: do not prefetch buddies during bulk free (Rafael Aquini) [2064990]
  - mm/page_alloc: limit number of high-order pages on PCP during bulk free (Rafael Aquini) [2064990]
  - mm/page_alloc: free pages in a single pass during bulk free (Rafael Aquini) [2064990]
  - mm/page_alloc: drain the requested list first during bulk free (Rafael Aquini) [2064990]
  - mm/page_alloc: simplify how many pages are selected per pcp list during bulk free (Rafael Aquini) [2064990]
  - mm/page_alloc: track range of active PCP lists during bulk free (Rafael Aquini) [2064990]
  - mm/page_alloc: fetch the correct pcp buddy during bulk free (Rafael Aquini) [2064990]
  - mm/pages_alloc.c: don't create ZONE_MOVABLE beyond the end of a node (Rafael Aquini) [2064990]
  - mm/page_alloc: mark pagesets as __maybe_unused (Rafael Aquini) [2064990]
  - mm: Consider __GFP_NOWARN flag for oversized kvmalloc() calls (Rafael Aquini) [2064990]
  - kasan: test: prevent cache merging in kmem_cache_double_destroy (Rafael Aquini) [2064990]
  - mm: don't try to NUMA-migrate COW pages that have other uses (Rafael Aquini) [2064990]
  - mm/debug_vm_pgtable: remove pte entry from the page table (Rafael Aquini) [2064990]
  - Revert "mm/gup: small refactoring: simplify try_grab_page()" (Rafael Aquini) [2064990]
  - kasan: fix quarantine conflicting with init_on_free (Rafael Aquini) [2064990]
  - kasan: test: add test case for double-kmem_cache_destroy() (Rafael Aquini) [2064990]
  - kasan: add ability to detect double-kmem_cache_destroy() (Rafael Aquini) [2064990]
  - kasan: test: add globals left-out-of-bounds test (Rafael Aquini) [2064990]
  - mm/slab_common: use WARN() if cache still has objects on destroy (Rafael Aquini) [2064990]
  - mm: mempolicy: fix THP allocations escaping mempolicy restrictions (Rafael Aquini) [2064990]
  - kfence: fix memory leak when cat kfence objects (Rafael Aquini) [2064990]
  - mm/memcg: relocate mod_objcg_mlstate(), get_obj_stock() and put_obj_stock() (Rafael Aquini) [2064990]
  - mm/slub: fix endianness bug for alloc/free_traces attributes (Rafael Aquini) [2064990]
  - hugetlb, userfaultfd: fix reservation restore on userfaultfd error (Rafael Aquini) [2064990]
  - mm/zsmalloc.c: close race window between zs_pool_dec_isolated() and zs_unregister_migration() (Rafael Aquini) [2064990]
  - hugetlb: remove unnecessary set_page_count in prep_compound_gigantic_page (Rafael Aquini) [2064990]
  - mm: move fold_vm_numa_events() to fix NUMA without SMP (Rafael Aquini) [2064990]
  - mm/page_alloc.c: fix obsolete comment in free_pcppages_bulk() (Rafael Aquini) [2064990]
  - mm/large system hash: avoid possible NULL deref in alloc_large_system_hash (Rafael Aquini) [2064990]
  - lib/test_vmalloc.c: use swap() to make code cleaner (Rafael Aquini) [2064990]
  - mm/vmalloc: be more explicit about supported gfp flags (Rafael Aquini) [2064990]
  - vmalloc: choose a better start address in vm_area_register_early() (Rafael Aquini) [2064990]
  - vmalloc: back off when the current task is OOM-killed (Rafael Aquini) [2064990]
  - mm/vmalloc: check various alignments when debugging (Rafael Aquini) [2064990]
  - mm/vmalloc: make sure to dump unpurged areas in /proc/vmallocinfo (Rafael Aquini) [2064990]
  - mm/vmalloc: make show_numa_info() aware of hugepage mappings (Rafael Aquini) [2064990]
  - mm/vmalloc: don't allow VM_NO_GUARD on vmap() (Rafael Aquini) [2064990]
  - mm/vmalloc: repair warn_alloc()s in __vmalloc_area_node() (Rafael Aquini) [2064990]
  - mm/mremap: don't account pages in vma_to_resize() (Rafael Aquini) [2064990]
  - mm/filemap.c: remove bogus VM_BUG_ON (Rafael Aquini) [2064990]
  - kasan: fix tag for large allocations when using CONFIG_SLAB (Rafael Aquini) [2064990]
  - mm: don't include <linux/dax.h> in <linux/mempolicy.h> (Rafael Aquini) [2064990]
  - mm: disable NUMA_BALANCING_DEFAULT_ENABLED and TRANSPARENT_HUGEPAGE on PREEMPT_RT (Rafael Aquini) [2064990]
  - mm, slub: use prefetchw instead of prefetch (Rafael Aquini) [2064990]
  - mm/slub: increase default cpu partial list sizes (Rafael Aquini) [2064990]
  - mm, slub: change percpu partial accounting from objects to pages (Rafael Aquini) [2064990]
  - slub: add back check for free nonslab objects (Rafael Aquini) [2064990]
  - mm/slab.c: remove useless lines in enable_cpucache() (Rafael Aquini) [2064990]
  - mm: move kvmalloc-related functions to slab.h (Rafael Aquini) [2064990]
  - selftests: kvm: add amx_test to .gitignore (Paul Lai) [1924149]
  - kvm: Move KVM_GET_XSAVE2 IOCTL definition at the end of kvm.h (Paul Lai) [1924149]
  - kvm: selftests: sync uapi/linux/kvm.h with Linux header (Paul Lai) [1924149]
  - kvm: selftests: conditionally build vm_xsave_req_perm() (Paul Lai) [1924149]
  - KVM: x86/cpuid: Exclude unpermitted xfeatures sizes at KVM_GET_SUPPORTED_CPUID (Paul Lai) [1924149]
  - KVM: x86/cpuid: Clear XFD for component i if the base feature is missing (Paul Lai) [1924149]
  - selftest: kvm: Add amx selftest (Paul Lai) [1924149]
  - selftest: kvm: Move struct kvm_x86_state to header (Paul Lai) [1924149]
  - selftest: kvm: Reorder vcpu_load_state steps for AMX (Paul Lai) [1924149]
  - kvm: x86: Disable interception for IA32_XFD on demand (Paul Lai) [1924149]
  - x86/fpu: Provide fpu_sync_guest_vmexit_xfd_state() (Paul Lai) [1924149]
  - kvm: selftests: Add support for KVM_CAP_XSAVE2 (Paul Lai) [1924149]
  - kvm: x86: Add support for getting/setting expanded xstate buffer (Paul Lai) [1924149]
  - x86/fpu: Add uabi_size to guest_fpu (Paul Lai) [1924149]
  - kvm: x86: Add CPUID support for Intel AMX (Paul Lai) [1924149]
  - kvm: x86: Add XCR0 support for Intel AMX (Paul Lai) [1924149]
  - kvm: x86: Disable RDMSR interception of IA32_XFD_ERR (Paul Lai) [1924149]
  - kvm: x86: Intercept #NM for saving IA32_XFD_ERR (Paul Lai) [1924149]
  - x86/fpu: Make XFD initialization in __fpstate_reset() a function argument (Paul Lai) [1924149]
  - kvm: x86: Exclude unpermitted xfeatures at KVM_GET_SUPPORTED_CPUID (Paul Lai) [1924149]
  - kvm: x86: Fix xstate_required_size() to follow XSTATE alignment rule (Paul Lai) [1924149]
  - kvm: selftests: move ucall declarations into ucall_common.h (Paul Lai) [1924149]
  - kvm: selftests: move base kvm_util.h declarations to kvm_util_base.h (Paul Lai) [1924149]
  - rename c9s pipeline from centos-stream-9 to c9s (Bruno Goncalves)
  - genirq: Provide new interfaces for affinity hints (Phil Auld) [2055300]
  - um: vector: adjust to coalesce API changes (Ivan Vecera) [2047636]
  - igb: fix deadlock caused by taking RTNL in RPM resume path (Ivan Vecera) [2047636]
  - ethtool: Fix link extended state for big endian (Ivan Vecera) [2047636]
  - ethtool: use phydev variable (Ivan Vecera) [2047636]
  - ethtool: Remove redundant ret assignments (Ivan Vecera) [2047636]
  - ethtool: do not perform operations on net devices being unregistered (Ivan Vecera) [2047636]
  - ethtool: netlink: Slightly simplify 'ethnl_features_to_bitmap()' (Ivan Vecera) [2047636]
  - ethtool: ioctl: fix potential NULL deref in ethtool_set_coalesce() (Ivan Vecera) [2047636]
  - net: ethtool: set a default driver name (Ivan Vecera) [2047636]
  - ethtool: extend ringparam setting/getting API with rx_buf_len (Ivan Vecera) [2047636]
  - ethtool: add support to set/get rx buf len via ethtool (Ivan Vecera) [2047636]
  - ethtool: add support to set/get tx copybreak buf size via ethtool (Ivan Vecera) [2047636]
  - ethtool: fix ethtool msg len calculation for pause stats (Ivan Vecera) [2047636]
  - ethtool: don't drop the rtnl_lock half way thru the ioctl (Ivan Vecera) [2047636]
  - devlink: expose get/put functions (Ivan Vecera) [2047636]
  - ethtool: handle info/flash data copying outside rtnl_lock (Ivan Vecera) [2047636]
  - ethtool: push the rtnl_lock into dev_ethtool() (Ivan Vecera) [2047636]
  - ethtool: Add transceiver module extended state (Ivan Vecera) [2047636]
  - ethtool: Add ability to control transceiver modules' power mode (Ivan Vecera) [2047636]
  - ethtool: ioctl: Use array_size() helper in copy_{from,to}_user() (Ivan Vecera) [2047636]
  - ethtool: prevent endless loop if eeprom size is smaller than announced (Ivan Vecera) [2047636]
  - ethtool: extend coalesce setting uAPI with CQE mode (Ivan Vecera) [2047636]
  - ethtool: add two coalesce attributes for CQE mode (Ivan Vecera) [2047636]
  - ethtool: add two link extended substates of bad signal integrity (Ivan Vecera) [2047636]
  - docs: ethtool: Add two link extended substates of bad signal integrity (Ivan Vecera) [2047636]
  - ethtool: return error from ethnl_ops_begin if dev is NULL (Ivan Vecera) [2047636]
  - ethtool: runtime-resume netdev parent in ethnl_ops_begin (Ivan Vecera) [2047636]
  - ethtool: move netif_device_present check from ethnl_parse_header_dev_get to ethnl_ops_begin (Ivan Vecera) [2047636]
  - ethtool: move implementation of ethnl_ops_begin/complete to netlink.c (Ivan Vecera) [2047636]
  - ethtool: runtime-resume netdev parent before ethtool ioctl ops (Ivan Vecera) [2047636]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-78.el9]
changelog:
  - CI: Remove deprecated option (Veronika Kabatova)
  - scsi: iscsi: Fix nop handling during conn recovery (Chris Leech) [2069973]
  - scsi: iscsi: Merge suspend fields (Chris Leech) [2069973]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2069973]
  - scsi: iscsi: Move iscsi_ep_disconnect (Chris Leech) [2069973]
  - NFS: Don't loop forever in nfs_do_recoalesce() (Steve Dickson) [2069274]
  - perf/x86/intel/uncore: Make uncore_discovery clean for 64 bit addresses (Michael Petlan) [2069686]
  - KVM: SVM: Allow AVIC support on system w/ physical APIC ID > 255 (Bandan Das) [2033070]
  - iommu/amd: Fix I/O page table memory leak (Jerry Snitselaar) [2053219]
  - iommu/amd: Recover from event log overflow (Jerry Snitselaar) [2053219]
  - redhat/configs: drop some config options for rhel 9. (David Airlie) [2067027]
  - arm64: proton-pack: Include unprivileged eBPF status in Spectre v2 mitigation reporting (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Use the clearbhb instruction in mitigations (Waiman Long) [2062288] {CVE-2022-23960}
  - KVM: arm64: Allow SMCCC_ARCH_WORKAROUND_3 to be discovered and migrated (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Mitigate spectre style branch history side channels (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: proton-pack: Report Spectre-BHB vulnerabilities as part of Spectre-v2 (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add percpu vectors for EL1 (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Add macro for reading symbol addresses from the trampoline (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Add vectors that have the bhb mitigation sequences (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Add non-kpti __bp_harden_el1_vectors for mitigations (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Allow the trampoline text to occupy multiple pages (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Make the kpti trampoline's kpti sequence optional (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Move trampoline macros out of ifdef'd section (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Don't assume tramp_vectors is the start of the vectors (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Allow tramp_alias to access symbols after the 4K boundary (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Move the trampoline data page before the text page (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Free up another register on kpti's tramp_exit path (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry: Make the trampoline cleanup optional (Waiman Long) [2062288] {CVE-2022-23960}
  - KVM: arm64: Allow indirect vectors to be used without SPECTRE_V3A (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: spectre: Rename spectre_v4_patch_fw_mitigation_conduit (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: entry.S: Add ventry overflow sanity checks (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add Cortex-A510 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add Cortex-X2 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: cpufeature: add HWCAP for FEAT_RPRES (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: add ID_AA64ISAR2_EL1 sys register (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: cpufeature: add HWCAP for FEAT_AFP (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add Neoverse-N2, Cortex-A710 CPU part definition (Waiman Long) [2062288] {CVE-2022-23960}
  - arm64: Add HWCAP for self-synchronising virtual counter (Waiman Long) [2062288] {CVE-2022-23960}
  - iommu/vt-d: Fix double list_add when enabling VMD in scalable mode (Jerry Snitselaar) [2061621]
  - redhat/configs: remove unnecessary GPIO options for aarch64 (Brian Masney) [2060951]
  - redhat/configs: remove viperboard related Kconfig options (Brian Masney) [2060951]
  - configs: enable CONFIG_RMI4_F3A (Benjamin Tissoires) [2067243]
  - block: release rq qos structures for queue without disk (Ming Lei) [2065610]
  - fuse: fix pipe buffer lifetime for direct_io (Miklos Szeredi) [2064862] {CVE-2022-1011}
  - crypto: hmac - disallow keys < 112 bits in FIPS mode (Herbert Xu) [2033512]
  - crypto: hmac - add fips_skip support (Herbert Xu) [2033512]
  - crypto: des - disallow des3 in FIPS mode (Herbert Xu) [2033512]
  - crypto: dh - limit key size to 2048 in FIPS mode (Herbert Xu) [2033512]
  - crypto: rsa - limit key size to 2048 in FIPS mode (Herbert Xu) [2033512]
  - watch_queue: Make comment about setting ->defunct more accurate (David Howells) [2063758]
  - watch_queue: Fix lack of barrier/sync/lock between post and read (David Howells) [2063758]
  - watch_queue: Free the alloc bitmap when the watch_queue is torn down (David Howells) [2063758]
  - watch_queue: Fix the alloc bitmap size to reflect notes allocated (David Howells) [2063758]
  - watch_queue: Use the bitmap API when applicable (David Howells) [2063758]
  - watch_queue: Fix to always request a pow-of-2 pipe ring size (David Howells) [2063758]
  - watch_queue: Fix to release page in ->release() (David Howells) [2063758]
  - watch_queue, pipe: Free watchqueue state after clearing pipe ring (David Howells) [2063758]
  - watch_queue: Fix filter limit check (David Howells) [2063758] {CVE-2022-0995}
  - s390/mm: check 2KB-fragment page on release (Rafael Aquini) [2069978]
  - s390/mm: better annotate 2KB pagetable fragments handling (Rafael Aquini) [2069978]
  - s390/mm: fix 2KB pgtable release race (Rafael Aquini) [2069978]
  - ima: fix deadlock when traversing "ima_default_rules". (Bruno Meneguele) [2063913]
  - IMA: prevent SETXATTR_CHECK policy rules with unavailable algorithms (Bruno Meneguele) [2063913]
  - IMA: introduce a new policy option func=SETXATTR_CHECK (Bruno Meneguele) [2063913]
  - IMA: add a policy option to restrict xattr hash algorithms on appraisal (Bruno Meneguele) [2063913]
  - IMA: add support to restrict the hash algorithms used for file appraisal (Bruno Meneguele) [2063913]
  - IMA: block writes of the security.ima xattr with unsupported algorithms (Bruno Meneguele) [2063913]
  - IMA: remove the dependency on CRYPTO_MD5 (Bruno Meneguele) [2063913]
  - perf symbols: Fix symbol size calculation condition (Michael Petlan) [2049222]
  - redhat/Makefile: Fix dist-dump-variables target (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Avoid race with find (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Remove CONTINUEONERROR (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Fix race with tools generation (Prarit Bhargava)
  - redhat/Makefile: Silence dist-clean-configs output (Prarit Bhargava)
  - Print arch with process_configs errors (Prarit Bhargava)
  - Pass RHJOBS to process_configs for dist-configs-check as well (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Fix issue with old error files (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Parallelize execution (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Provide better messages (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Create unique output files (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Add local variables (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Parallelize execution (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Provide better messages (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Create unique output files (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Add processing config function (Prarit Bhargava)
  - cifs: modefromsids must add an ACE for authenticated users (Ronnie Sahlberg) [1988278]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-79.el9]
changelog:
  - redhat/configs: Enable WDT devices used by qemu VMs (Prarit Bhargava) [2074160]
  - redhat/configs: disable CONFIG_CAN_SOFTING (Brian Masney) [2073521]
  - myri10ge: mark as unmaintained (Michal Schmidt) [2054208]
  - benet: mark device 0xe220 (Lancer) as unmaintained (Michal Schmidt) [2054208]
  - bnx2: mark as unmaintained (Michal Schmidt) [2054208]
  - ice: Fix race condition during interface enslave (Petr Oros) [1988953]
  - ice: Fix error with handling of bonding MTU (Petr Oros) [1988953]
  - ice: Avoid RTNL lock when re-creating auxiliary device (Petr Oros) [1988953]
  - ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler (Petr Oros) [1988953]
  - userfaultfd/selftests: fix calculation of expected ioctls (Desnes A. Nunes do Rosario) [2036152]
  - userfaultfd/selftests: fix feature support detection (Desnes A. Nunes do Rosario) [2036152]
  - userfaultfd/selftests: don't rely on GNU extensions for random numbers (Desnes A. Nunes do Rosario) [2036152]
  - CI: Drop baseline runs (Veronika Kabatova)
  - PCI: hv: Propagate coherence from VMbus device to PCI device (Vitaly Kuznetsov) [2068432]
  - Drivers: hv: vmbus: Propagate VMbus coherence to each VMbus device (Vitaly Kuznetsov) [2068432]
  - ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2061556]
  - mlxsw: spectrum_router: Increase parsing depth for multipath hash (Ivan Vecera) [2020113]
  - mlxsw: Remove old parsing depth infrastructure (Ivan Vecera) [2020113]
  - mlxsw: Convert existing consumers to use new API for parsing configuration (Ivan Vecera) [2020113]
  - mlxsw: spectrum: Add infrastructure for parsing configuration (Ivan Vecera) [2020113]
  - ipv6: separate ndisc_ns_create() from ndisc_send_ns() (Ivan Vecera) [2073506]
  - powerpc/mce: Modify the real address error logging messages (Desnes A. Nunes do Rosario) [2068688]
  - selftests/powerpc: Add test for real address error handling (Desnes A. Nunes do Rosario) [2068688]
  - powerpc/pseries: Parse control memory access error (Desnes A. Nunes do Rosario) [2068688]
  - tools headers UAPI: Sync linux/perf_event.h with the kernel sources (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Fix power_pmu_disable to call clear_pmi_irq_pending only if PMI is pending (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Only define power_pmu_wants_prompt_pmi() for CONFIG_PPC64 (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Add data source encodings for power10 platform (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Add encodings to represent data based on newer composite PERF_MEM_LVLNUM* fields (Desnes A. Nunes do Rosario) [2048779]
  - perf: Add new macros for mem_hops field (Desnes A. Nunes do Rosario) [2048779]
  - tools headers UAPI: Add new macros for mem_hops field to perf_event.h (Desnes A. Nunes do Rosario) [2048779]
  - bpf: Remove config check to enable bpf support for branch records (Desnes A. Nunes do Rosario) [2048779]
  - perf powerpc: Update global/local variants for p_stage_cyc (Desnes A. Nunes do Rosario) [2048779]
  - perf sort: Include global and local variants for p_stage_cyc sort key (Desnes A. Nunes do Rosario) [2048779]
  - perf sort: Fix the 'p_stage_cyc' sort key behavior (Desnes A. Nunes do Rosario) [2048779]
  - perf sort: Fix the 'ins_lat' sort key behavior (Desnes A. Nunes do Rosario) [2048779]
  - perf sort: Fix the 'weight' sort key behavior (Desnes A. Nunes do Rosario) [2048779]
  - perf vendor events power10: Add metric events JSON file for power10 platform (Desnes A. Nunes do Rosario) [2048779]
  - perf powerpc: Add support to expose instruction and data address registers as part of extended regs (Desnes A. Nunes do Rosario) [2048779]
  - perf powerpc: Refactor the code definition of perf reg extended mask in tools side header file (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Fix cycles/instructions as PM_CYC/PM_INST_CMPL in power10 (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Expose instruction and data address registers as part of extended regs (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Refactor the code definition of perf reg extended mask (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Fix data source encodings for L2.1 and L3.1 accesses (Desnes A. Nunes do Rosario) [2048779]
  - tools/perf: Add mem_hops field in perf_mem_data_src structure (Desnes A. Nunes do Rosario) [2048779]
  - perf: Add mem_hops field in perf_mem_data_src structure (Desnes A. Nunes do Rosario) [2048779]
  - perf: Add comment about current state of PERF_MEM_LVL_* namespace and remove an extra line (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Fix the check for SIAR value (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Drop the case of returning 0 as instruction pointer (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Use stack siar instead of mfspr (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf/hv-gpci: Fix counter value parsing (Desnes A. Nunes do Rosario) [2048779]
  - powerpc/perf: Fix PMU callbacks to clear pending PMI before resetting an overflown PMC (Desnes A. Nunes do Rosario) [2048779]
  - EVM: fix the evm= __setup handler return value (Bruno Meneguele) [2063906]
  - ima: Do not print policy rule with inactive LSM labels (Bruno Meneguele) [2063906]
  - ima: Allow template selection with ima_template[_fmt]= after ima_hash= (Bruno Meneguele) [2063906]
  - ima: Remove ima_policy file before directory (Bruno Meneguele) [2063906]
  - integrity: check the return value of audit_log_start() (Bruno Meneguele) [2063906]
  - ima: fix reference leak in asymmetric_verify() (Bruno Meneguele) [2063906]
  - ipv4: avoid using shared IP generator for connected sockets (Paolo Abeni) [2062428] {CVE-2020-36516}
  - bpf/selftests: Fix namespace mount setup in tc_redirect (Yauheni Kaliuta) [2063067]
  - memcg: do not tweak node in alloc_mem_cgroup_per_node_info (Nico Pache) [2024054]
  - mm: make free_area_init_node aware of memory less nodes (Nico Pache) [2024054]
  - mm, memory_hotplug: reorganize new pgdat initialization (Nico Pache) [2024054]
  - mm, memory_hotplug: drop arch_free_nodedata (Nico Pache) [2024054]
  - mm: handle uninitialized numa nodes gracefully (Nico Pache) [2024054]
  - mm, memory_hotplug: make arch_alloc_nodedata independent on CONFIG_MEMORY_HOTPLUG (Nico Pache) [2024054]
  - block: restore the old set_task_ioprio() behaviour wrt PF_EXITING (Ming Lei) [2066297]
  - scsi: core: scsi_logging: Fix a BUG (Ming Lei) [2066297]
  - scsi: sr: Fix typo in CDROM(CLOSETRAY|EJECT) handling (Ming Lei) [2066297]
  - block: add __must_check for *add_disk*() callers (Ming Lei) [2066297]
  - scsi: bsg: Fix errno when scsi_bsg_register_queue() fails (Ming Lei) [2066297]
  - scsi: st: Add missing break in switch statement in st_ioctl() (Ming Lei) [2066297]
  - scsi: core: scsi_ioctl: Fix error code propagation in SG_IO (Ming Lei) [2066297]
  - scsi: bsg: Fix device unregistration (Ming Lei) [2066297]
  - scsi: bsg-lib: Fix commands without data transfer in bsg_transport_sg_io_fn() (Ming Lei) [2066297]
  - scsi: bsg: Fix commands without data transfer in scsi_bsg_sg_io_fn() (Ming Lei) [2066297]
  - block: limit request dispatch loop duration (Ming Lei) [2066297]
  - block: fix rq-qos breakage from skipping rq_qos_done_bio() (Ming Lei) [2066297]
  - block: flush plug based on hardware and software queue order (Ming Lei) [2066297]
  - block: ensure plug merging checks the correct queue at least once (Ming Lei) [2066297]
  - block: update io_ticks when io hang (Ming Lei) [2066297]
  - block: release rq qos structures for queue without disk (Ming Lei) [2066297]
  - block: fix blk_mq_attempt_bio_merge and rq_qos_throttle protection (Ming Lei) [2066297]
  - blktrace: fix use after free for struct blk_trace (Ming Lei) [2066297]
  - block: clear iocb->private in blkdev_bio_end_io_async() (Ming Lei) [2066297]
  - block/wbt: fix negative inflight counter when remove scsi device (Ming Lei) [2066297]
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2066297]
  - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (Ming Lei) [2066297]
  - block: Add handling for zone append command in blk_complete_request (Ming Lei) [2066297]
  - loop: revert "make autoclear operation asynchronous" (Ming Lei) [2066297]
  - block: fix DIO handling regressions in blkdev_read_iter() (Ming Lei) [2066297]
  - blk-mq: fix missing blk_account_io_done() in error path (Ming Lei) [2066297]
  - block: cleanup q->srcu (Ming Lei) [2066297]
  - block: Remove unnecessary variable assignment (Ming Lei) [2066297]
  - brd: remove brd_devices_mutex mutex (Ming Lei) [2066297]
  - aoe: remove redundant assignment on variable n (Ming Lei) [2066297]
  - loop: remove redundant initialization of pointer node (Ming Lei) [2066297]
  - block/rnbd-clt-sysfs: use default_groups in kobj_type (Ming Lei) [2066297]
  - pktcdvd: convert to use attribute groups (Ming Lei) [2066297]
  - rsxx: Drop PCI legacy power management (Ming Lei) [2066297]
  - mtip32xx: convert to generic power management (Ming Lei) [2066297]
  - mtip32xx: remove pointless drvdata lookups (Ming Lei) [2066297]
  - mtip32xx: remove pointless drvdata checking (Ming Lei) [2066297]
  - drbd: Use struct_group() to zero algs (Ming Lei) [2066297]
  - loop: make autoclear operation asynchronous (Ming Lei) [2066297]
  - null_blk: cast command status to integer (Ming Lei) [2066297]
  - pktdvd: stop using bdi congestion framework. (Ming Lei) [2066297]
  - block: null_blk: batched complete poll requests (Ming Lei) [2066297]
  - floppy: Add max size check for user space request (Ming Lei) [2066297]
  - floppy: Fix hang in watchdog when disk is ejected (Ming Lei) [2066297]
  - loop: don't hold lo_mutex during __loop_clr_fd() (Ming Lei) [2066297]
  - MAINTAINERS: add entries for block layer documentation (Ming Lei) [2066297]
  - docs: sysfs-block: add contact for nomerges (Ming Lei) [2066297]
  - docs: sysfs-block: sort alphabetically (Ming Lei) [2066297]
  - docs: sysfs-block: move to stable directory (Ming Lei) [2066297]
  - block: fix old-style declaration (Ming Lei) [2066297]
  - nvme-pci: fix queue_rqs list splitting (Ming Lei) [2066297]
  - block: introduce rq_list_move (Ming Lei) [2066297]
  - block: drop needless assignment in set_task_ioprio() (Ming Lei) [2066297]
  - bio.h: fix kernel-doc warnings (Ming Lei) [2066297]
  - block: check minor range in device_add_disk() (Ming Lei) [2066297]
  - block: use "unsigned long" for blk_validate_block_size(). (Ming Lei) [2066297]
  - block: fix error unwinding in device_add_disk (Ming Lei) [2066297]
  - block: call blk_exit_queue() before freeing q->stats (Ming Lei) [2066297]
  - block: fix error in handling dead task for ioprio setting (Ming Lei) [2066297]
  - blk-mq: blk-mq: check quiesce state before queue_rqs (Ming Lei) [2066297]
  - block: only build the icq tracking code when needed (Ming Lei) [2066297]
  - block: fold create_task_io_context into ioc_find_get_icq (Ming Lei) [2066297]
  - block: open code create_task_io_context in set_task_ioprio (Ming Lei) [2066297]
  - block: fold get_task_io_context into set_task_ioprio (Ming Lei) [2066297]
  - block: move set_task_ioprio to blk-ioc.c (Ming Lei) [2066297]
  - block: cleanup ioc_clear_queue (Ming Lei) [2066297]
  - block: refactor put_io_context (Ming Lei) [2066297]
  - block: remove the NULL ioc check in put_io_context (Ming Lei) [2066297]
  - block: refactor put_iocontext_active (Ming Lei) [2066297]
  - block: simplify struct io_context refcounting (Ming Lei) [2066297]
  - block: remove the nr_task field from struct io_context (Ming Lei) [2066297]
  - nvme: add support for mq_ops->queue_rqs() (Ming Lei) [2066297]
  - block: add mq_ops->queue_rqs hook (Ming Lei) [2066297]
  - block: use singly linked list for bio cache (Ming Lei) [2066297]
  - block: add completion handler for fast path (Ming Lei) [2066297]
  - block: make queue stat accounting a reference (Ming Lei) [2066297]
  - bdev: Improve lookup_bdev documentation (Ming Lei) [2066297]
  - mtd_blkdevs: don't scan partitions for plain mtdblock (Ming Lei) [2066297]
  - blk-mq: Optimise blk_mq_queue_tag_busy_iter() for shared tags (Ming Lei) [2066297]
  - blk-mq: Delete busy_iter_fn (Ming Lei) [2066297]
  - blk-mq: Drop busy_iter_fn blk_mq_hw_ctx argument (Ming Lei) [2066297]
  - blk-mq: don't use plug->mq_list->q directly in blk_mq_run_dispatch_ops() (Ming Lei) [2066297]
  - blk-mq: don't run might_sleep() if the operation needn't blocking (Ming Lei) [2066297]
  - blk-mq: run dispatch lock once in case of issuing from list (Ming Lei) [2066297]
  - blk-mq: pass request queue to blk_mq_run_dispatch_ops (Ming Lei) [2066297]
  - blk-mq: move srcu from blk_mq_hw_ctx to request_queue (Ming Lei) [2066297]
  - blk-mq: remove hctx_lock and hctx_unlock (Ming Lei) [2066297]
  - block: switch to atomic_t for request references (Ming Lei) [2066297]
  - block: move direct_IO into our own read_iter handler (Ming Lei) [2066297]
  - mm: move filemap_range_needs_writeback() into header (Ming Lei) [2066297]
  - mm: move more expensive part of XA setup out of mapping check (Ming Lei) [2066297]
  - block: get rid of useless goto and label in blk_mq_get_new_requests() (Ming Lei) [2066297]
  - blk-mq: check q->poll_stat in queue_poll_stat_show (Ming Lei) [2066297]
  - scsi: remove the gendisk argument to scsi_ioctl (Ming Lei) [2066297]
  - block: remove the gendisk argument to blk_execute_rq (Ming Lei) [2066297]
  - block: remove the ->rq_disk field in struct request (Ming Lei) [2066297]
  - block: don't check ->rq_disk in merges (Ming Lei) [2066297]
  - mtd_blkdevs: remove the sector out of range check in do_blktrans_request (Ming Lei) [2066297]
  - block: Remove redundant initialization of variable ret (Ming Lei) [2066297]
  - block: simplify ioc_lookup_icq (Ming Lei) [2066297]
  - block: simplify ioc_create_icq (Ming Lei) [2066297]
  - block: return the io_context from create_task_io_context (Ming Lei) [2066297]
  - block: use alloc_io_context in __copy_io (Ming Lei) [2066297]
  - block: factor out a alloc_io_context helper (Ming Lei) [2066297]
  - block: remove get_io_context_active (Ming Lei) [2066297]
  - block: move the remaining elv.icq handling to the I/O scheduler (Ming Lei) [2066297]
  - block: move blk_mq_sched_assign_ioc to blk-ioc.c (Ming Lei) [2066297]
  - block: mark put_io_context_active static (Ming Lei) [2066297]
  - Revert "block: Provide blk_mq_sched_get_icq()" (Ming Lei) [2066297]
  - bfq: use bfq_bic_lookup in bfq_limit_depth (Ming Lei) [2066297]
  - bfq: simplify bfq_bic_lookup (Ming Lei) [2066297]
  - fork: move copy_io to block/blk-ioc.c (Ming Lei) [2066297]
  - bfq: Do not let waker requests skip proper accounting (Ming Lei) [2066297]
  - bfq: Log waker detections (Ming Lei) [2066297]
  - bfq: Provide helper to generate bfqq name (Ming Lei) [2066297]
  - bfq: Limit waker detection in time (Ming Lei) [2066297]
  - bfq: Limit number of requests consumed by each cgroup (Ming Lei) [2066297]
  - bfq: Store full bitmap depth in bfq_data (Ming Lei) [2066297]
  - bfq: Track number of allocated requests in bfq_entity (Ming Lei) [2066297]
  - block: Provide blk_mq_sched_get_icq() (Ming Lei) [2066297]
  - mmc: core: Use blk_mq_complete_request_direct(). (Ming Lei) [2066297]
  - blk-mq: Add blk_mq_complete_request_direct() (Ming Lei) [2066297]
  - blk-crypto: remove blk_crypto_unregister() (Ming Lei) [2066297]
  - block: don't include <linux/part_stat.h> in blk.h (Ming Lei) [2066297]
  - block: don't include <linux/idr.h> in blk.h (Ming Lei) [2066297]
  - block: don't include <linux/blk-mq.h> in blk.h (Ming Lei) [2066297]
  - block: don't include blk-mq.h in blk.h (Ming Lei) [2066297]
  - block: don't include blk-mq-sched.h in blk.h (Ming Lei) [2066297]
  - block: remove the e argument to elevator_exit (Ming Lei) [2066297]
  - block: remove elevator_exit (Ming Lei) [2066297]
  - block: move blk_get_flush_queue to blk-flush.c (Ming Lei) [2066297]
  - blk_mq: remove repeated includes (Ming Lei) [2066297]
  - block: move io_context creation into where it's needed (Ming Lei) [2066297]
  - block: only allocate poll_stats if there's a user of them (Ming Lei) [2066297]
  - blk-ioprio: don't set bio priority if not needed (Ming Lei) [2066297]
  - blk-mq: move more plug handling from blk_mq_submit_bio into blk_add_rq_to_plug (Ming Lei) [2066297]
  - sr: set GENHD_FL_REMOVABLE earlier (Ming Lei) [2066297]
  - block: cleanup the GENHD_FL_* definitions (Ming Lei) [2066297]
  - block: don't set GENHD_FL_NO_PART for hidden gendisks (Ming Lei) [2066297]
  - block: remove GENHD_FL_EXT_DEVT (Ming Lei) [2066297]
  - block: remove GENHD_FL_SUPPRESS_PARTITION_INFO (Ming Lei) [2066297]
  - mmc: don't set GENHD_FL_SUPPRESS_PARTITION_INFO (Ming Lei) [2066297]
  - null_blk: don't suppress partitioning information (Ming Lei) [2066297]
  - block: remove the GENHD_FL_HIDDEN check in blkdev_get_no_open (Ming Lei) [2066297]
  - block: rename GENHD_FL_NO_PART_SCAN to GENHD_FL_NO_PART (Ming Lei) [2066297]
  - block: merge disk_scan_partitions and blkdev_reread_part (Ming Lei) [2066297]
  - block: remove a dead check in show_partition (Ming Lei) [2066297]
  - block: remove GENHD_FL_CD (Ming Lei) [2066297]
  - block: move GENHD_FL_BLOCK_EVENTS_ON_EXCL_WRITE to disk->event_flags (Ming Lei) [2066297]
  - block: move GENHD_FL_NATIVE_CAPACITY to disk->state (Ming Lei) [2066297]
  - block: don't include blk-mq headers in blk-core.c (Ming Lei) [2066297]
  - block: move blk_print_req_error to blk-mq.c (Ming Lei) [2066297]
  - block: move blk_dump_rq_flags to blk-mq.c (Ming Lei) [2066297]
  - block: move blk_account_io_{start,done} to blk-mq.c (Ming Lei) [2066297]
  - block: move blk_steal_bios to blk-mq.c (Ming Lei) [2066297]
  - block: move blk_rq_init to blk-mq.c (Ming Lei) [2066297]
  - block: move request based cloning helpers to blk-mq.c (Ming Lei) [2066297]
  - blk-mq: move blk_mq_flush_plug_list (Ming Lei) [2066297]
  - block: remove blk-exec.c (Ming Lei) [2066297]
  - block: remove rq_flush_dcache_pages (Ming Lei) [2066297]
  - block: move blk_rq_err_bytes to scsi (Ming Lei) [2066297]
  - block: remove blk_{get,put}_request (Ming Lei) [2066297]
  - block: remove QUEUE_FLAG_SCSI_PASSTHROUGH (Ming Lei) [2066297]
  - block: remove the initialize_rq_fn blk_mq_ops method (Ming Lei) [2066297]
  - scsi: add a scsi_alloc_request helper (Ming Lei) [2066297]
  - bsg-lib: initialize the bsg_job in bsg_transport_sg_io_fn (Ming Lei) [2066297]
  - nfsd/blocklayout: use ->get_unique_id instead of sending SCSI commands (Ming Lei) [2066297]
  - sd: implement ->get_unique_id (Ming Lei) [2066297]
  - block: add a ->get_unique_id method (Ming Lei) [2066297]
  - scsi: bsg: Move the whole request execution into the SCSI/transport handlers (Ming Lei) [2066297]
  - scsi: block: Remove the remaining SG_IO-related fields from struct request_queue (Ming Lei) [2066297]
  - scsi: block: Remove BLK_SCSI_MAX_CMDS (Ming Lei) [2066297]
  - scsi: bsg: Simplify device registration (Ming Lei) [2066297]
  - scsi: sr: cdrom: Move cdrom_read_cdda_bpc() into the sr driver (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Unexport sg_scsi_ioctl() (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Factor SG_IO handling into a helper (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Factor SCSI_IOCTL_GET_IDLUN handling into a helper (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Consolidate the START STOP UNIT handling (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Remove a very misleading comment (Ming Lei) [2066297]
  - scsi: core: Rename CONFIG_BLK_SCSI_REQUEST to CONFIG_SCSI_COMMON (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Move the "block layer" SCSI ioctl handling to drivers/scsi (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Simplify SCSI passthrough permission checking (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Move scsi_command_size_tbl to scsi_common.c (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Remove scsi_req_init() (Ming Lei) [2066297]
  - scsi: bsg: Move bsg_scsi_ops to drivers/scsi/ (Ming Lei) [2066297]
  - scsi: bsg: Decouple from scsi_cmd_ioctl() (Ming Lei) [2066297]
  - scsi: block: Add a queue_max_bytes() helper (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Call scsi_cmd_ioctl() from scsi_ioctl() (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Remove scsi_verify_blk_ioctl() (Ming Lei) [2066297]
  - scsi: scsi_ioctl: Remove scsi_cmd_blk_ioctl() (Ming Lei) [2066297]
  - scsi: cdrom: Remove the call to scsi_cmd_blk_ioctl() from cdrom_ioctl() (Ming Lei) [2066297]
  - scsi: st: Simplify ioctl handling (Ming Lei) [2066297]
  - scsi: core: Remove scsi_compat_ioctl() (Ming Lei) [2066297]
  - scsi: sg: Consolidate compat ioctl handling (Ming Lei) [2066297]
  - scsi: ch: Consolidate compat ioctl handling (Ming Lei) [2066297]
  - scsi: sd: Consolidate compat ioctl handling (Ming Lei) [2066297]
  - scsi: sr: Consolidate compat ioctl handling (Ming Lei) [2066297]
  - scsi: bsg: Remove support for SCSI_IOCTL_SEND_COMMAND (Ming Lei) [2066297]
  - block: fix argument type of bio_trim() (Ming Lei) [2066297]
  - powerpc/xive: Export XIVE IPI information for online-only processors. (Steve Best) [2038242]
  - RDMA/cma: Do not change route.addr.src_addr outside state checks (Kamal Heib) [2056771]
  - RDMA/ib_srp: Fix a deadlock (Kamal Heib) [2056771]
  - RDMA/siw: Fix broken RDMA Read Fence/Resume logic. (Kamal Heib) [2056771]
  - IB/cm: Release previously acquired reference counter in the cm_id_priv (Kamal Heib) [2056771]
  - RDMA/siw: Fix refcounting leak in siw_create_qp() (Kamal Heib) [2056771]
  - RDMA/ucma: Protect mc during concurrent multicast leaves (Kamal Heib) [2056771]
  - RDMA/cma: Use correct address when leaving multicast group (Kamal Heib) [2056771]
  - IB/hfi1: Fix tstats alloc and dealloc (Kamal Heib) [2049164 2056771]
  - IB/hfi1: Fix AIP early init panic (Kamal Heib) [2049164 2056771]
  - IB/hfi1: Fix alloc failure with larger txqueuelen (Kamal Heib) [2049164 2056771]
  - IB/hfi1: Fix panic with larger ipoib send_queue_size (Kamal Heib) [2049164 2056771]
  - all: replace find_next{,_zero}_bit with find_first{,_zero}_bit where appropriate (Kamal Heib) [2056771]
  - RDMA/irdma: Remove the redundant return (Kamal Heib) [2037988 2056771]
  - RDMA/irdma: Make the source udp port vary (Kamal Heib) [2037988 2056771]
  - RDMA/core: Calculate UDP source port based on flow label or lqpn/rqpn (Kamal Heib) [2056771]
  - IB/iser: Align coding style across driver (Kamal Heib) [2056771]
  - IB/iser: Remove un-needed casting to/from void pointer (Kamal Heib) [2056771]
  - IB/iser: Don't suppress send completions (Kamal Heib) [2056771]
  - IB/iser: Rename ib_ret local variable (Kamal Heib) [2056771]
  - IB/iser: Fix RNR errors (Kamal Heib) [2056771]
  - IB/iser: Remove deprecated pi_guard module param (Kamal Heib) [2056771]
  - IB/mlx5: Expose NDR speed through MAD (Kamal Heib) [2056771]
  - RDMA/mad: Delete duplicated init_query_mad functions (Kamal Heib) [2056771]
  - RDMA: Use default_groups in kobj_type (Kamal Heib) [2056771]
  - RDMA/irdma: Use auxiliary_device driver data helpers (Kamal Heib) [2037988 2056771]
  - driver core: auxiliary bus: Add driver data helpers (Kamal Heib) [2056771]
  - RDMA/cma: Let cma_resolve_ib_dev() continue search even after empty entry (Kamal Heib) [2056771]
  - RDMA/core: Let ib_find_gid() continue search even after empty entry (Kamal Heib) [2056771]
  - RDMA/core: Modify rdma_query_gid() to return accurate error codes (Kamal Heib) [2056771]
  - RDMA/irdma: Fix the type used to declare a bitmap (Kamal Heib) [2037988 2056771]
  - IB/core: Remove redundant pointer mm (Kamal Heib) [2056771]
  - RDMA/uverbs: Remove the unnecessary assignment (Kamal Heib) [2056771]
  - RDMA/siw: Use max() instead of doing it manually (Kamal Heib) [2056771]
  - RDMA/pvrdma: Use non-atomic bitmap functions when possible (Kamal Heib) [2056771]
  - RDMA/pvrdma: Use bitmap_zalloc() when applicable (Kamal Heib) [2056771]
  - IB/hfi1: Use bitmap_zalloc() when applicable (Kamal Heib) [2049164 2056771]
  - RDMA/siw: Use helper function to set sys_image_guid (Kamal Heib) [2056771]
  - RDMA/cma: Remove open coding of overflow checking for private_data_len (Kamal Heib) [2056771]
  - RDMA/usnic: Clean up usnic_ib_alloc_pd() (Kamal Heib) [2056771]
  - RDMA/irdma: Use helper function to set GUIDs (Kamal Heib) [2037988 2056771]
  - IB/hfi1: Fix leak of rcvhdrtail_dummy_kvaddr (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Fix early init panic (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Insure use of smp_processor_id() is preempt disabled (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Correct guard on eager buffer deallocation (Kamal Heib) [2049164 2056770]
  - RDMA/nldev: Check stat attribute before accessing it (Kamal Heib) [2056770]
  - IB/hfi1: Properly allocate rdma counter desc memory (Kamal Heib) [2049164 2056770]
  - RDMA/core: Set send and receive CQ before forwarding to the driver (Kamal Heib) [2056770]
  - RDMA/netlink: Add __maybe_unused to static inline in C file (Kamal Heib) [2056770]
  - RDMA/core: Require the driver to set the IOVA correctly during rereg_mr (Kamal Heib) [2056770]
  - RDMA/irdma: optimize rx path by removing unnecessary copy (Kamal Heib) [2037988 2056770]
  - IB/opa_vnic: Rebranding of OPA VNIC driver to Cornelis Networks (Kamal Heib) [2056770]
  - IB/hfi1: Rebranding of hfi1 driver to Cornelis Networks (Kamal Heib) [2049164 2056770]
  - RDMA/irdma: Remove the unused variable local_qp (Kamal Heib) [2037988 2056770]
  - RDMA/core: Fix missed initialization of rdma_hw_stats::lock (Kamal Heib) [2056770]
  - RDMA/efa: Add support for dmabuf memory regions (Kamal Heib) [2056770]
  - RDMA/umem: Allow pinned dmabuf umem usage (Kamal Heib) [2056770]
  - RDMA/irdma: Remove the unused spin lock in struct irdma_qp_uk (Kamal Heib) [2037988 2056770]
  - RDMA: Constify netdev->dev_addr accesses (Kamal Heib) [2056770]
  - RDMA/ipoib: Use dev_addr_mod() (Kamal Heib) [2056770]
  - RDMA/core: Use kvzalloc when allocating the struct ib_port (Kamal Heib) [2056770]
  - RDMA/irdma: Make irdma_uk_cq_init() return a void (Kamal Heib) [2037988 2056770]
  - RDMA/core: Set sgtable nents when using ib_dma_virt_map_sg() (Kamal Heib) [2056770]
  - RDMA/irdma: Remove irdma_cqp_up_map_cmd() (Kamal Heib) [2037988 2056770]
  - RDMA/irdma: Remove irdma_get_hw_addr() (Kamal Heib) [2037988 2056770]
  - RDMA/irdma: Remove irdma_sc_send_lsmm_nostag() (Kamal Heib) [2037988 2056770]
  - RDMA/irdma: Remove irdma_uk_mw_bind() (Kamal Heib) [2037988 2056770]
  - RDMA: Remove redundant 'flush_workqueue()' calls (Kamal Heib) [2056770]
  - RDMA/iwpm: Remove redundant initialization of pointer err_str (Kamal Heib) [2056770]
  - RDMA/nldev: Allow optional-counter status configuration through RDMA netlink (Kamal Heib) [2056770]
  - RDMA/nldev: Split nldev_stat_set_mode_doit out of nldev_stat_set_doit (Kamal Heib) [2056770]
  - RDMA/nldev: Add support to get status of all counters (Kamal Heib) [2056770]
  - RDMA/counter: Add optional counter support (Kamal Heib) [2056770]
  - RDMA/counter: Add an is_disabled field in struct rdma_hw_stats (Kamal Heib) [2056770]
  - RDMA/core: Add a helper API rdma_free_hw_stats_struct (Kamal Heib) [2056770]
  - RDMA/bnxt_re: Fix kernel panic when trying to access bnxt_re_stat_descs (Kamal Heib) [2056770]
  - RDMA/counter: Add a descriptor in struct rdma_hw_stats (Kamal Heib) [2056770]
  - RDMA/bnxt_re: Update statistics counter name (Kamal Heib) [2056770]
  - RDMA/bnxt_re: Add extended statistics counters (Kamal Heib) [2056770]
  - RDMA/efa: CQ notifications (Kamal Heib) [2056770]
  - RDMA/irdma: Delete unused struct irdma_bth (Kamal Heib) [2037988 2056770]
  - IB/hf1: Use string_upper() instead of an open coded variant (Kamal Heib) [2056770]
  - RDMA/rw: switch to dma_map_sgtable() (Kamal Heib) [2056770]
  - RDMA/cma: Split apart the multiple uses of the same list heads (Kamal Heib) [2056770]
  - RDMA/hfi1: Use struct_size() and flex_array_size() helpers (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Add ring consumer and producers traces (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Remove atomic completion count (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Tune netdev xmit cachelines (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Get rid of tx priv backpointer (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Get rid of hot path divide (Kamal Heib) [2049164 2056770]
  - IB/hfi1: Remove cache and embed txreq in ring (Kamal Heib) [2049164 2056770]
  - RDMA/rdmavt: Fix error code in rvt_create_qp() (Kamal Heib) [2049164 2056769]
  - IB/hfi1: Fix abba locking issue with sc_disable() (Kamal Heib) [2049164 2056769]
  - RDMA/hfi1: Fix kernel pointer leak (Kamal Heib) [2049164 2056769]
  - RDMA/usnic: Lock VF with mutex instead of spinlock (Kamal Heib) [2056769]
  - IB/hfi1: make hist static (Kamal Heib) [2049164 2056769]
  - RDMA/hfi1: Convert to SPDX identifier (Kamal Heib) [2049164 2056769]
  - IB/rdmavt: Convert to SPDX identifier (Kamal Heib) [2049164 2056769]
  - RDMA/irdma: Remove the repeated declaration (Kamal Heib) [2037988 2056769]
  - RDMA/core/sa_query: Retry SA queries (Kamal Heib) [2056769]
  - RDMA: Use the sg_table directly and remove the opencoded version from umem (Kamal Heib) [2056769]
  - RDMA: switch from 'pci_' to 'dma_' API (Kamal Heib) [2056769]
  - RDMA/efa: Rename vector field in efa_irq struct to irqn (Kamal Heib) [2056769]
  - RDMA/efa: Remove unused cpu field from irq struct (Kamal Heib) [2056769]
  - RDMA/core/sa_query: Remove unused function (Kamal Heib) [2056769]
  - RDMA/hfi1: Stop using seq_get_buf in _driver_stats_seq_show (Kamal Heib) [2049164 2056769]
  - RDMA/core: Create clean QP creations interface for uverbs (Kamal Heib) [2056769]
  - RDMA/core: Properly increment and decrement QP usecnts (Kamal Heib) [2056769]
  - RDMA/core: Configure selinux QP during creation (Kamal Heib) [2056769]
  - RDMA/core: Reorganize create QP low-level functions (Kamal Heib) [2056769]
  - RDMA/core: Remove protection from wrong in-kernel API usage (Kamal Heib) [2056769]
  - RDMA/core: Delete duplicated and unreachable code (Kamal Heib) [2056769]
  - rdma/qedr: Fix crash due to redundant release of device's qp memory (Kamal Heib) [2056769]
  - RDMA: Globally allocate and release QP memory (Kamal Heib) [2056769]
  - RDMA/mlx5: Rework custom driver QP type creation (Kamal Heib) [2056769]
  - RDMA/rdmavt: Decouple QP and SGE lists allocations (Kamal Heib) [2049164 2056769]
  - RDMA/efa: Remove double QP type assignment (Kamal Heib) [2056769]
  - RDMA/hfi1: Fix typo in comments (Kamal Heib) [2049164 2056769]
  - RDMA/iwpm: Rely on the rdma_nl_[un]register() to ensure that requests are valid (Kamal Heib) [2056769]
  - RDMA/iwpm: Remove not-needed reference counting (Kamal Heib) [2056769]
  - RDMA/hfi1: Convert from atomic_t to refcount_t on hfi1_devdata->user_refcount (Kamal Heib) [2049164 2056769]
  - IB/hfi1: Adjust pkey entry in index 0 (Kamal Heib) [2049164 2056769]
  - IB/hfi1: Indicate DMA wait when txq is queued for wakeup (Kamal Heib) [2049164 2056769]
  - IB/core: Read subnet_prefix in ib_query_port via cache. (Kamal Heib) [2056769]
  - IB/core: Shifting initialization of device->cache_lock (Kamal Heib) [2056769]
  - IB/core: Updating cache for subnet_prefix in config_non_roce_gid_cache() (Kamal Heib) [2056769]
  - RDMA/efa: Split hardware stats to device and port stats (Kamal Heib) [2056769]
  - RDMA/siw: Convert siw_tx_hdt() to kmap_local_page() (Kamal Heib) [2056769]
  - RDMA/siw: Remove kmap() (Kamal Heib) [2056769]
  - lib/scatterlist: Fix wrong update of orig_nents (Kamal Heib) [2056769]
  - lib/scatterlist: Provide a dedicated function to support table append (Kamal Heib) [2056769]
  - PCI: mt7621: Remove unused function pcie_rmw() (Myron Stowe) [2052155]
  - PCI: mt7621: Drop of_match_ptr() to avoid unused variable (Myron Stowe) [2052155]
  - PCI: qcom: Fix an error handling path in 'qcom_pcie_probe()' (Myron Stowe) [2052155]
  - PCI: mt7621: Rename mt7621_pci_ to mt7621_pcie_ (Myron Stowe) [2052155]
  - PCI: mt7621: Add missing MODULE_LICENSE() (Myron Stowe) [2052155]
  - PCI: mt7621: Move MIPS setup to pcibios_root_bridge_prepare() (Myron Stowe) [2052155]
  - PCI: mt7621: Declare mt7621_pci_ops static (Myron Stowe) [2052155]
  - PCI: mt7621: Convert driver into 'bool' (Myron Stowe) [2052155]
  - PCI: xgene: Use PCI_VENDOR_ID_AMCC macro (Myron Stowe) [2052155]
  - PCI: rcar-host: Remove unneeded includes (Myron Stowe) [2052155]
  - PCI: rcar-ep: Remove unneeded includes (Myron Stowe) [2052155]
  - PCI: qcom: Add sc8180x compatible (Myron Stowe) [2052155]
  - PCI: qcom: Switch pcie_1_pipe_clk_src after PHY init in SC7280 (Myron Stowe) [2052155]
  - PCI: qcom: Replace ops with struct pcie_cfg in pcie match data (Myron Stowe) [2052155]
  - MAINTAINERS: Add entry for Qualcomm PCIe Endpoint driver and binding (Myron Stowe) [2052155]
  - PCI: qcom-ep: Add Qualcomm PCIe Endpoint controller driver (Myron Stowe) [2052155]
  - dt-bindings: PCI: Add Qualcomm PCIe Endpoint controller (Myron Stowe) [2052155]
  - MAINTAINERS: Add Sergio Paracuellos as MT7621 PCIe maintainer (Myron Stowe) [2052155]
  - PCI: mt7621: Add MediaTek MT7621 PCIe host controller driver (Myron Stowe) [2052155]
  - dt-bindings: PCI: Add MT7621 SoC PCIe host controller (Myron Stowe) [2052155]
  - staging: mt7621-pci: fix hang when nothing is connected to pcie ports (Myron Stowe) [2052155]
  - PCI: kirin: Allow removing the driver (Myron Stowe) [2052155]
  - PCI: kirin: De-init the dwc driver (Myron Stowe) [2052155]
  - PCI: kirin: Disable clkreq during poweroff sequence (Myron Stowe) [2052155]
  - PCI: kirin: Move the power-off code to a common routine (Myron Stowe) [2052155]
  - PCI: kirin: Add power_off support for Kirin 960 PHY (Myron Stowe) [2052155]
  - PCI: kirin: Allow building it as a module (Myron Stowe) [2052155]
  - PCI: kirin: Add MODULE_* macros (Myron Stowe) [2052155]
  - PCI: kirin: Add Kirin 970 compatible (Myron Stowe) [2052155]
  - PCI: kirin: Support PERST# GPIOs for HiKey970 external PEX 8606 bridge (Myron Stowe) [2052155]
  - PCI: kirin: Use regmap for APB registers (Myron Stowe) [2052155]
  - PCI: kirin: Add support for a PHY layer (Myron Stowe) [2052155]
  - PCI: kirin: Reorganize the PHY logic inside the driver (Myron Stowe) [2052155]
  - PCI: imx6: Remove unused assignment to variable ret (Myron Stowe) [2052155]
  - PCI: endpoint: Use sysfs_emit() in "show" functions (Myron Stowe) [2052155]
  - PCI: uniphier: Serialize INTx masking/unmasking and fix the bit operation (Myron Stowe) [2052155]
  - PCI: dwc: Perform host_init() before registering msi (Myron Stowe) [2052155]
  - PCI: visconti: Remove surplus dev_err() when using platform_get_irq_byname() (Myron Stowe) [2052155]
  - PCI: dwc: Clean up Kconfig dependencies (PCIE_DW_EP) (Myron Stowe) [2052155]
  - PCI: dwc: Clean up Kconfig dependencies (PCIE_DW_HOST) (Myron Stowe) [2052155]
  - PCI: dra7xx: Get an optional clock (Myron Stowe) [2052155]
  - PCI: dra7xx: Remove unused include (Myron Stowe) [2052155]
  - PCI: dra7xx: Make it a kernel module (Myron Stowe) [2052155]
  - PCI: dwc: Export more symbols to allow modular drivers (Myron Stowe) [2052155]
  - dt-bindings: rockchip: Add DesignWare based PCIe controller (Myron Stowe) [2052155]
  - PCI: cadence: Add cdns_plat_pcie_probe() missing return (Myron Stowe) [2052155]
  - PCI: j721e: Fix j721e_pcie_probe() error path (Myron Stowe) [2052155]
  - PCI: aardvark: Fix support for PCI_BRIDGE_CTL_BUS_RESET on emulated bridge (Myron Stowe) [2052155]
  - PCI: aardvark: Set PCI Bridge Class Code to PCI Bridge (Myron Stowe) [2052155]
  - PCI: aardvark: Fix support for bus mastering and PCI_COMMAND on emulated bridge (Myron Stowe) [2052155]
  - PCI: aardvark: Read all 16-bits from PCIE_MSI_PAYLOAD_REG (Myron Stowe) [2052155]
  - PCI: aardvark: Fix return value of MSI domain .alloc() method (Myron Stowe) [2052155]
  - PCI: pci-bridge-emul: Fix emulation of W1C bits (Myron Stowe) [2052155]
  - PCI: aardvark: Fix reporting Data Link Layer Link Active (Myron Stowe) [2052155]
  - PCI: aardvark: Fix checking for link up via LTSSM state (Myron Stowe) [2052155]
  - PCI: aardvark: Fix link training (Myron Stowe) [2052155]
  - PCI: aardvark: Simplify initialization of rootcap on virtual bridge (Myron Stowe) [2052155]
  - PCI: aardvark: Do not unmask unused interrupts (Myron Stowe) [2052155]
  - PCI: aardvark: Do not clear status bits of masked interrupts (Myron Stowe) [2052155]
  - PCI: aardvark: Fix configuring Reference clock (Myron Stowe) [2052155]
  - PCI: aardvark: Don't spam about PIO Response Status (Myron Stowe) [2052155]
  - PCI: aardvark: Fix PCIe Max Payload Size setting (Myron Stowe) [2052155]
  - PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros (Myron Stowe) [2052155]
  - PCI: vmd: Drop redundant includes of <asm/device.h>, <asm/msi.h> (Myron Stowe) [2052155]
  - PCI: cpqphp: Use <linux/io.h> instead of <asm/io.h> (Myron Stowe) [2052155]
  - MAINTAINERS: Update PCI subsystem information (Myron Stowe) [2052155]
  - PCI: Prefer 'unsigned int' over bare 'unsigned' (Myron Stowe) [2052155]
  - PCI: Remove redundant 'rc' initialization (Myron Stowe) [2052155]
  - PCI: Remove unused pci_pool wrappers (Myron Stowe) [2052155]
  - PCI: cpqphp: Format if-statement code block correctly (Myron Stowe) [2052155]
  - PCI: Use unsigned to match sscanf("%x") in pci_dev_str_match_path() (Myron Stowe) [2052155]
  - PCI: Correct misspelled and remove duplicated words (Myron Stowe) [2052155]
  - PCI: Tidy comments (Myron Stowe) [2052155]
  - cxgb3: Remove seeprom_write and use VPD API (Myron Stowe) [2052155]
  - cxgb3: Use VPD API in t3_seeprom_wp() (Myron Stowe) [2052155]
  - cxgb3: Remove t3_seeprom_read and use VPD API (Myron Stowe) [2052155]
  - PCI/VPD: Use pci_read_vpd_any() in pci_vpd_size() (Myron Stowe) [2052155]
  - PCI/VPD: Add pci_read/write_vpd_any() (Myron Stowe) [2052155]
  - PCI: Add ACS quirk for Pericom PI7C9X2G switches (Myron Stowe) [2052155]
  - PCI: Mark Atheros QCA6174 to avoid bus reset (Myron Stowe) [2052155]
  - PCI: Use kstrtobool() directly, sans strtobool() wrapper (Myron Stowe) [2052155]
  - PCI/sysfs: Return -EINVAL consistently from "store" functions (Myron Stowe) [2052155]
  - PCI/sysfs: Check CAP_SYS_ADMIN before parsing user input (Myron Stowe) [2052155]
  - PCI/switchtec: Add check of event support (Myron Stowe) [2052155]
  - PCI/switchtec: Replace ENOTSUPP with EOPNOTSUPP (Myron Stowe) [2052155]
  - PCI/switchtec: Update the way of getting management VEP instance ID (Myron Stowe) [2052155]
  - PCI/switchtec: Fix a MRPC error status handling issue (Myron Stowe) [2052155]
  - PCI/switchtec: Error out MRPC execution when MMIO reads fail (Myron Stowe) [2052155]
  - PCI: Coalesce host bridge contiguous apertures (Myron Stowe) [2052155]
  - PCI/P2PDMA: Apply bus offset correctly in DMA address calculation (Myron Stowe) [2052155]
  - PCI/sysfs: Explicitly show first MSI IRQ for 'irq' (Myron Stowe) [2052155]
  - PCI: Document /sys/bus/pci/devices/.../irq (Myron Stowe) [2052155]
  - PCI/ERR: Reduce compile time for CONFIG_PCIEAER=n (Myron Stowe) [2052155]
  - PCI/portdrv: Remove unused pcie_port_bus_{,un}register() declarations (Myron Stowe) [2052155]
  - PCI/portdrv: Remove unused resume err_handler (Myron Stowe) [2052155]
  - PCI: pciehp: Ignore Link Down/Up caused by error-induced Hot Reset (Myron Stowe) [2052155]
  - PCI/portdrv: Rename pm_iter() to pcie_port_device_iter() (Myron Stowe) [2052155]
  - x86/pci/probe_roms: Use to_pci_driver() instead of pci_dev->driver (Myron Stowe) [2052155]
  - perf/x86/intel/uncore: Use to_pci_driver() instead of pci_dev->driver (Myron Stowe) [2052155]
  - powerpc/eeh: Use to_pci_driver() instead of pci_dev->driver (Myron Stowe) [2052155]
  - usb: xhci: Use to_pci_driver() instead of pci_dev->driver (Myron Stowe) [2052155]
  - cxl: Use to_pci_driver() instead of pci_dev->driver (Myron Stowe) [2052155]
  - cxl: Factor out common dev->driver expressions (Myron Stowe) [2052155]
  - xen/pcifront: Use to_pci_driver() instead of pci_dev->driver (Myron Stowe) [2052155]
  - xen/pcifront: Drop pcifront_common_process() tests of pcidev, pdrv (Myron Stowe) [2052155]
  - nfp: use dev_driver_string() instead of pci_dev->driver->name (Myron Stowe) [2052155]
  - mlxsw: pci: Use dev_driver_string() instead of pci_dev->driver->name (Myron Stowe) [2052155]
  - net: marvell: prestera: use dev_driver_string() instead of pci_dev->driver->name (Myron Stowe) [2052155]
  - net: hns3: use dev_driver_string() instead of pci_dev->driver->name (Myron Stowe) [2052155]
  - crypto: hisilicon - use dev_driver_string() instead of pci_dev->driver->name (Myron Stowe) [2052155]
  - powerpc/eeh: Use dev_driver_string() instead of struct pci_dev->driver->name (Myron Stowe) [2052155]
  - ssb: Use dev_driver_string() instead of pci_dev->driver->name (Myron Stowe) [2052155]
  - bcma: simplify reference to driver name (Myron Stowe) [2052155]
  - scsi: message: fusion: Remove unused mpt_pci driver .probe() 'id' parameter (Myron Stowe) [2052155]
  - PCI/ERR: Factor out common dev->driver expressions (Myron Stowe) [2052155]
  - PCI: Drop pci_device_probe() test of !pci_dev->driver (Myron Stowe) [2052155]
  - PCI: Drop pci_device_remove() test of pci_dev->driver (Myron Stowe) [2052155]
  - PCI: Return NULL for to_pci_driver(NULL) (Myron Stowe) [2052155]
  - PCI: Do not enable AtomicOps on VFs (Myron Stowe) [2052155]
  - PCI: Rename pcibios_add_device() to pcibios_device_add() (Myron Stowe) [2052155]
  - PCI: Re-enable Downstream Port LTR after reset or hotplug (Myron Stowe) [2052155]
  - rcu-tasks: Fix computation of CPU-to-list shift counts (Waiman Long) [2065994]
  - torture: Properly redirect kvm-remote.sh "echo" commands (Waiman Long) [2065994]
  - torture: Fix incorrectly redirected "exit" in kvm-remote.sh (Waiman Long) [2065994]
  - rcu/exp: Mark current CPU as exp-QS in IPI loop second pass (Waiman Long) [2065994]
  - rcu-tasks: Use fewer callbacks queues if callback flood ends (Waiman Long) [2065994]
  - rcu-tasks: Use separate ->percpu_dequeue_lim for callback dequeueing (Waiman Long) [2065994]
  - rcutorture: Test RCU Tasks lock-contention detection (Waiman Long) [2065994]
  - rcu-tasks: Use more callback queues if contention encountered (Waiman Long) [2065994]
  - rcu-tasks: Avoid raw-spinlocked wakeups from call_rcu_tasks_generic() (Waiman Long) [2065994]
  - rcutorture: Combine n_max_cbs from all kthreads in a callback flood (Waiman Long) [2065994]
  - rcutorture: Add ability to limit callback-flood intensity (Waiman Long) [2065994]
  - rcutorture: Cause TREE02 and TREE10 scenarios to do more callback flooding (Waiman Long) [2065994]
  - rcutorture: Enable multiple concurrent callback-flood kthreads (Waiman Long) [2065994]
  - rcu/nocb: Merge rcu_spawn_cpu_nocb_kthread() and rcu_spawn_one_nocb_kthread() (Waiman Long) [2065994]
  - rcu/nocb: Allow empty "rcu_nocbs" kernel parameter (Waiman Long) [2065994]
  - rcu/nocb: Create kthreads on all CPUs if "rcu_nocbs=" or "nohz_full=" are passed (Waiman Long) [2065994]
  - rcu/nocb: Optimize kthreads and rdp initialization (Waiman Long) [2065994]
  - rcu/nocb: Prepare nocb_cb_wait() to start with a non-offloaded rdp (Waiman Long) [2065994]
  - rcu/nocb: Remove rcu_node structure from nocb list when de-offloaded (Waiman Long) [2065994]
  - rcu-tasks: Count trylocks to estimate call_rcu_tasks() contention (Waiman Long) [2065994]
  - torture: Retry download once before giving up (Waiman Long) [2065994]
  - rcutorture: Add CONFIG_PREEMPT_DYNAMIC=n to tiny scenarios (Waiman Long) [2065994]
  - rcu: Avoid alloc_pages() when recording stack (Waiman Long) [2065994]
  - rcu: Avoid running boost kthreads on isolated CPUs (Waiman Long) [2065994]
  - rcutorture: Test RCU-tasks multiqueue callback queueing (Waiman Long) [2065994]
  - rcu-tasks: Add rcupdate.rcu_task_enqueue_lim to set initial queueing (Waiman Long) [2065994]
  - rcu-tasks: Make rcu_barrier_tasks*() handle multiple callback queues (Waiman Long) [2065994]
  - rcu-tasks: Use workqueues for multiple rcu_tasks_invoke_cbs() invocations (Waiman Long) [2065994]
  - torture: Make kvm-find-errors.sh report link-time undefined symbols (Waiman Long) [2065994]
  - rcutorture: Avoid soft lockup during cpu stall (Waiman Long) [2065994]
  - rcu-tasks: Abstract invocations of callbacks (Waiman Long) [2065994]
  - rcu-tasks: Abstract checking of callback lists (Waiman Long) [2065994]
  - rcu-tasks: Add a ->percpu_enqueue_lim to the rcu_tasks structure (Waiman Long) [2065994]
  - rcu-tasks: Inspect stalled task's trc state in locked state (Waiman Long) [2065994]
  - rcu-tasks: Use spin_lock_rcu_node() and friends (Waiman Long) [2065994]
  - rcu_tasks: Convert bespoke callback list to rcu_segcblist structure (Waiman Long) [2065994]
  - rcu-tasks: Convert grace-period counter to grace-period sequence number (Waiman Long) [2065994]
  - rcu-tasks: Introduce ->percpu_enqueue_shift for dynamic queue selection (Waiman Long) [2065994]
  - rcu-tasks: Create per-CPU callback lists (Waiman Long) [2065994]
  - locktorture,rcutorture,torture: Always log error message (Waiman Long) [2065994]
  - scftorture: Always log error message (Waiman Long) [2065994]
  - doc: RCU: Avoid 'Symbol' font-family in SVG figures (Waiman Long) [2065994]
  - rcuscale: Always log error message (Waiman Long) [2065994]
  - scftorture: Account for weight_resched when checking for all zeroes (Waiman Long) [2065994]
  - scftorture: Remove unused SCFTORTOUT (Waiman Long) [2065994]
  - scftorture: Add missing '\n' to flush message (Waiman Long) [2065994]
  - refscale: Add missing '\n' to flush message (Waiman Long) [2065994]
  - doc: Add refcount analogy to What is RCU (Waiman Long) [2065994]
  - refscale: Always log the error message (Waiman Long) [2065994]
  - refscale: Prevent buffer to pr_alert() being too long (Waiman Long) [2065994]
  - refscale: Simplify the errexit checkpoint (Waiman Long) [2065994]
  - rcu: Improve tree_plugin.h comments and add code cleanups (Waiman Long) [2065994]
  - rcu/nocb: Don't invoke local rcu core on callback overload from nocb kthread (Waiman Long) [2065994]
  - rcu: Apply callbacks processing time limit only on softirq (Waiman Long) [2065994]
  - rcu: Fix callbacks processing time limit retaining cond_resched() (Waiman Long) [2065994]
  - rcu/nocb: Limit number of softirq callbacks only on softirq (Waiman Long) [2065994]
  - rcu/nocb: Use appropriate rcu_nocb_lock_irqsave() (Waiman Long) [2065994]
  - rcu/nocb: Check a stable offloaded state to manipulate qlen_last_fqs_check (Waiman Long) [2065994]
  - rcu/nocb: Make rcu_core() callbacks acceleration (de-)offloading safe (Waiman Long) [2065994]
  - rcu/nocb: Make rcu_core() callbacks acceleration preempt-safe (Waiman Long) [2065994]
  - rcu/nocb: Invoke rcu_core() at the start of deoffloading (Waiman Long) [2065994]
  - rcu/nocb: Prepare state machine for a new step (Waiman Long) [2065994]
  - rcu/nocb: Make local rcu_nocb_lock_irqsave() safe against concurrent deoffloading (Waiman Long) [2065994]
  - rcu: Make idle entry report expedited quiescent states (Waiman Long) [2065994]
  - rcu: Prevent expedited GP from enabling tick on offline CPU (Waiman Long) [2065994]
  - rcu: Mark sync_sched_exp_online_cleanup() ->cpu_no_qs.b.exp load (Waiman Long) [2065994]
  - rcu: Always inline rcu_dynticks_task*_{enter,exit}() (Waiman Long) [2065994]
  - rcu: in_irq() cleanup (Waiman Long) [2065994]
  - doc: Remove obsolete kernel-per-CPU-kthreads RCU_FAST_NO_HZ advice (Waiman Long) [2065994]
  - rcutorture: Suppress pi-lock-across read-unlock testing for Tiny SRCU (Waiman Long) [2065994]
  - srcu: Prevent redundant __srcu_read_unlock() wakeup (Waiman Long) [2065994]
  - rcutorture: More thoroughly test nested readers (Waiman Long) [2065994]
  - rcutorture: Sanitize RCUTORTURE_RDR_MASK (Waiman Long) [2065994]
  - torture: Catch kvm.sh help text up with actual options (Waiman Long) [2065994]
  - rcu-tasks: Don't remove tasks with pending IPIs from holdout list (Waiman Long) [2065994]
  - rcu: Remove rcu_data.exp_deferred_qs and convert to rcu_data.cpu no_qs.b.exp (Waiman Long) [2065994]
  - rcu: Move rcu_data.cpu_no_qs.b.exp reset to rcu_export_exp_rdp() (Waiman Long) [2065994]
  - rcu: Ignore rdp.cpu_no_qs.b.exp on preemptible RCU's rcu_qs() (Waiman Long) [2065994]
  - rcu-tasks: Update comments to cond_resched_tasks_rcu_qs() (Waiman Long) [2065994]
  - rcu: Replace ________p1 and _________p1 with __UNIQUE_ID(rcu) (Waiman Long) [2065994]
  - rcu-tasks: Fix IPI failure handling in trc_wait_for_one_reader (Waiman Long) [2065994]
  - rcu-tasks: Fix read-side primitives comment for call_rcu_tasks_trace (Waiman Long) [2065994]
  - rcutorture: Avoid problematic critical section nesting on PREEMPT_RT (Waiman Long) [2065994]
  - rcu: Fix existing exp request check in sync_sched_exp_online_cleanup() (Waiman Long) [2065994]
  - rcu-tasks: Clarify read side section info for rcu_tasks_rude GP primitives (Waiman Long) [2065994]
  - rcu-tasks: Correct comparisons for CPU numbers in show_stalled_task_trace (Waiman Long) [2065994]
  - rcu-tasks: Correct firstreport usage in check_all_holdout_tasks_trace (Waiman Long) [2065994]
  - rcu-tasks: Fix s/rcu_add_holdout/trc_add_holdout/ typo in comment (Waiman Long) [2065994]
  - rcu-tasks: Move RTGS_WAIT_CBS to beginning of rcu_tasks_kthread() loop (Waiman Long) [2065994]
  - rcu: Make rcu update module parameters world-readable (Waiman Long) [2065994]
  - rcu: Make rcu_normal_after_boot writable again (Waiman Long) [2065994]
  - rcutorture: Don't cpuhp_remove_state() if cpuhp_setup_state() failed (Waiman Long) [2065994]
  - rcuscale: Warn on individual rcu_scale_init() error conditions (Waiman Long) [2065994]
  - locktorture: Warn on individual lock_torture_init() error conditions (Waiman Long) [2065994]
  - rcutorture: Warn on individual rcu_torture_init() error conditions (Waiman Long) [2065994]
  - rcu-tasks: Fix s/instruction/instructions/ typo in comment (Waiman Long) [2065994]
  - rcutorture: Suppressing read-exit testing is not an error (Waiman Long) [2065994]
  - rcu-tasks: Wait for trc_read_check_handler() IPIs (Waiman Long) [2065994]
  - rcu: Make rcutree_dying_cpu() use its "cpu" parameter (Waiman Long) [2065994]
  - rcu: Simplify rcu_report_dead() call to rcu_report_exp_rdp() (Waiman Long) [2065994]
  - rcu: Move rcu_dynticks_eqs_online() to rcu_cpu_starting() (Waiman Long) [2065994]
  - rcu-tasks: Remove second argument of rcu_read_unlock_trace_special() (Waiman Long) [2065994]
  - rcu-tasks: Add trc_inspect_reader() checks for exiting critical section (Waiman Long) [2065994]
  - rcu-tasks: Simplify trc_read_check_handler() atomic operations (Waiman Long) [2065994]
  - rcu: Comment rcu_gp_init() code waiting for CPU-hotplug operations (Waiman Long) [2065994]
  - rcu: Fix undefined Kconfig macros (Waiman Long) [2065994]
  - doc: Add another stall-warning root cause in stallwarn.rst (Waiman Long) [2065994]
  - rcu: Eliminate rcu_implicit_dynticks_qs() local variable ruqp (Waiman Long) [2065994]
  - rcu: Eliminate rcu_implicit_dynticks_qs() local variable rnhqp (Waiman Long) [2065994]
  - rcu-nocb: Fix a couple of tree_nocb code-style nits (Waiman Long) [2065994]
  - torture: Make torture.sh print the number of files to be compressed (Waiman Long) [2065994]
  - torture: Apply CONFIG_KCSAN_STRICT to kvm.sh --kcsan argument (Waiman Long) [2065994]
  - x86/tsc: Disable clocksource watchdog for TSC on qualified platorms (David Arcari) [2057923]
  - x86/tsc: Add a timer to make sure TSC_adjust is always checked (David Arcari) [2057923]
  - Revert "xfs: actually bump warning counts when we send warnings" (Carlos Maiolino) [2060081]
  - vfs: check dentry is still valid in get_link() (Ian Kent) [2048567]
  - xfs: don't expose internal symlink metadata buffers to the vfs (Ian Kent) [2048567]
  - audit: log AUDIT_TIME_* records only from rules (Richard Guy Briggs) [2035124]
  - audit: don't deref the syscall args when checking the openat2 open_how::flags (Richard Guy Briggs) [2035124]
  - audit: improve audit queue handling when "audit=1" on cmdline (Richard Guy Briggs) [2035124]
  - audit: replace zero-length array with flexible-array member (Richard Guy Briggs) [2035124]
  - audit: use struct_size() helper in audit_[send|make]_reply() (Richard Guy Briggs) [2035124]
  - audit: ensure userspace is penalized the same as the kernel when under pressure (Richard Guy Briggs) [2035124]
  - audit: use struct_size() helper in kmalloc() (Richard Guy Briggs) [2035124]
  - audit: improve robustness of the audit queue handling (Richard Guy Briggs) [2035124]
  - fsnotify: clarify contract for create event hooks (Richard Guy Briggs) [2035124]
  - fsnotify: pass dentry instead of inode data (Richard Guy Briggs) [2035124]
  - fsnotify: pass data_type to fsnotify_name() (Richard Guy Briggs) [2035124]
  - fsnotify: fix sb_connectors leak (Richard Guy Briggs) [2035124]
  - fsnotify: optimize the case of no marks of any type (Richard Guy Briggs) [2035124]
  - fsnotify: count all objects with attached connectors (Richard Guy Briggs) [2035124]
  - fsnotify: count s_fsnotify_inode_refs for attached connectors (Richard Guy Briggs) [2035124]
  - fsnotify: replace igrab() with ihold() on attach connector (Richard Guy Briggs) [2035124]
  - audit: return early if the filter rule has a lower priority (Richard Guy Briggs) [2035124]
  - audit: add OPENAT2 record to list "how" info (Richard Guy Briggs) [2035124]
  - audit: add support for the openat2 syscall (Richard Guy Briggs) [2035124]
  - audit: replace magic audit syscall class numbers with macros (Richard Guy Briggs) [2035124]
  - lsm_audit: avoid overloading the "key" audit field (Richard Guy Briggs) [2035124]
  - audit: Convert to SPDX identifier (Richard Guy Briggs) [2035124]
  - audit: rename struct node to struct audit_node to prevent future name collisions (Richard Guy Briggs) [2035124]
  - audit: add filtering for io_uring records (Richard Guy Briggs) [2035124]
  - audit,io_uring,io-wq: add some basic audit support to io_uring (Richard Guy Briggs) [2035124]
  - audit: prepare audit_context for use in calling contexts beyond syscalls (Richard Guy Briggs) [2035124]
  - audit: fix possible null-pointer dereference in audit_filter_rules (Richard Guy Briggs) [2035124]
  - audit: add header protection to kernel/audit.h (Richard Guy Briggs) [2035124]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-80.el9]
changelog:
  - redhat: disable uncommon media device infrastructure (Jarod Wilson) [2074598]
  - netfilter: nf_tables: unregister flowtable hooks on netns exit (Florian Westphal) [2056869]
  - netfilter: nf_tables_offload: incorrect flow offload action array size (Florian Westphal) [2056869] {CVE-2022-25636}
  - netfilter: nf_tables: validate registers coming from userspace. (Phil Sutter) [2065350] {CVE-2022-1015}
  - scsi: qedi: Fix failed disconnect handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix unbound endpoint error handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix conn cleanup and stop race during iscsid restart (Chris Leech) [2071524]
  - scsi: iscsi: Fix endpoint reuse regression (Chris Leech) [2071524]
  - scsi: iscsi: Release endpoint ID when its freed (Chris Leech) [2071524]
  - scsi: iscsi: Fix offload conn cleanup when iscsid restarts (Chris Leech) [2071524]
  - Revert "scsi: iscsi: Fix offload conn cleanup when iscsid restarts" (Chris Leech) [2071524]
  - scsi: iscsi: Speed up session unblocking and removal (Chris Leech) [2071524]
  - scsi: iscsi: Fix recovery and unblocking race (Chris Leech) [2071524]
  - scsi: qedi: Fix cmd_cleanup_cmpl counter mismatch issue (Chris Leech) [2071524]
  - scsi: iscsi: Unblock session then wake up error handler (Chris Leech) [2071524]
  - scsi: iscsi: Fix set_param() handling (Chris Leech) [2071524]
  - scsi: iscsi: Fix iscsi_task use after free (Chris Leech) [2071524]
  - scsi: iscsi: Adjust iface sysfs attr detection (Chris Leech) [2071524]
  - scsi: qedi: Add support for fastpath doorbell recovery (Chris Leech) [2071524]
  - redhat: Enable KASAN on all ELN debug kernels (Nico Pache) [1995251]
  - sched/topology: Remove redundant variable and fix incorrect type in build_sched_domains (Phil Auld) [2065198]
  - sched/fair: Adjust the allowed NUMA imbalance when SD_NUMA spans multiple LLCs (Phil Auld) [2065198]
  - sched/fair: Improve consistency of allowed NUMA balance calculations (Phil Auld) [2065198]
  - redhat/configs: Enable CONFIG_RCU_SCALE_TEST & CONFIG_RCU_REF_SCALE_TEST (Waiman Long) [2070740]
  - thermal: int340x: Fix VCoRefLow MMIO bit offset for TGL (David Arcari) [2039995]
  - thermal: int340x: Use struct_group() for memcpy() region (David Arcari) [2039995]
  - thermal: int340x: Limit Kconfig to 64-bit (David Arcari) [2039995]
  - thermal: int340x: fix build on 32-bit targets (David Arcari) [2039995 2040066]
  - thermal/drivers/int340x: processor_thermal: Suppot 64 bit RFIM responses (David Arcari) [2039995 2040066]
  - thermal/drivers/int340x: Improve the tcc offset saving for suspend/resume (David Arcari) [2039995]
  - thermal: int340x: delete bogus length check (David Arcari) [2039995]
  - thermal/drivers/int340x: Do not set a wrong tcc offset on resume (David Arcari) [2039995]
  - thermal/drivers/int340x: Use IMOK independently (David Arcari) [2039995]
  - stddef: Introduce struct_group() helper macro (David Arcari) [2039995]
  - gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2031240]
  - gfs2: Make use of list_is_first (Andreas Gruenbacher) [2031240]
  - gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2031240]
  - gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2031240]
  - gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2031240]
  - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2031240]
  - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2031240]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.0~BETA-1
changelog:
  - new upstream release
  - remove upstreamed patches
  - update CCFLAGS (https://github.com/ksh93/ksh/commit/98f989afcc7)
    Resolves: #1986897


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Karel Zak <kzak@redhat.com> - 2.36.1-2
changelog:
  - remove unused patches
  - remove versions and seq.numbers from patch names
  - fix mount "symfollow" issue (upstream patch)


author: Karel Zak <kzak@redhat.com> - 2.36.2-1
changelog:
  - upgrade to stable upstream 2.36.2
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36.2-ReleaseNotes


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 8.2-1
changelog:
  - Rebuild for RHEL AV 8.2.
  - Include ntfs-3g-system-compression plugin.
    resolves: rhbz#1705234, rhbz#1796073


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Daiki Ueno <dueno@redhat.com> - 4.4-1
changelog:
  - Update to 4.4. Resolves: rhbz#1975812
  - Port compiler warning suppression by Paul Wouters:
    https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide


author: Daiki Ueno <dueno@redhat.com> - 4.4-3
changelog:
  - Backport removal gethostbyname2 uses from the upstream
  - Fix issues spotted by covscan (rhbz#1938784)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Stefan Berger <stefanb@linux.ibm.com> - 0.7.5-0.20210218gite271498466
changelog:
  - Addressed UBSAN and cppcheck detected issues
  - Return proper size of ECC Parameters to pass HLK tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-2
changelog:
  - Fix FAT mkfs with dosfstools >= 4.2
  - udiskslinuxdriveata: Use GTask to apply configuration in a thread
  - Limit allowed module names
  - 80-udisks2.rules: Ignore Apple boot partition from livecd-tools


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Jiri Denemark <jdenemar@redhat.com> - 7.9.0-1
changelog:
  - Rebased to libvirt-7.9.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2007659, rhbz#2014487, rhbz#1806856, rhbz#2014139, rhbz#1964223
      rhbz#2007168, rhbz#2012386, rhbz#2013573, rhbz#1897708


author: Jiri Denemark <jdenemar@redhat.com> - 7.10.0-1
changelog:
  - Rebased to libvirt-7.10.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2024098, rhbz#1964223, rhbz#2018488, rhbz#2021437, rhbz#2022589
      rhbz#2023605, rhbz#1431589, rhbz#2024435, rhbz#2016599, rhbz#1945501
      rhbz#2023674


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-0rc1.1
changelog:
  - Rebased to libvirt-8.0.0-rc1 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2034539, rhbz#2027400, rhbz#1945420, rhbz#1851249, rhbz#2032410
      rhbz#2026812, rhbz#2032365, rhbz#2035888, rhbz#2036895, rhbz#2026537


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-1
changelog:
  - Rebased to libvirt-8.0.0 (rhbz#2001507)
  - The rebase also fixes the following bugs:
      rhbz#2039246, rhbz#2039652, rhbz#2039651, rhbz#2039131


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-2
changelog:
  - build: Only install libvirt-guests when building libvirtd (rhbz#2042529)
  - docs: Add man page for libvirt-guests (rhbz#2042529)
  - remove sysconfig files (rhbz#2042529)
  - spec: Run pre/post-install stuff on 'daemon-driver-storage-core' (rhbz#2025644)
  - qemu: fix inactive snapshot revert (rhbz#2039136)
  - Revert "report error when virProcessGetStatInfo() is unable to parse data" (rhbz#2043579)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-4
changelog:
  - qemu_command: Generate memory only after controllers (rhbz#2047271)
  - qemu: Validate domain definition even on migration (rhbz#2048435)


author: Jiri Denemark <jdenemar@redhat.com> - 8.0.0-5
changelog:
  - Make systemd unit ordering more robust (rhbz#1868537)
  - util: Fix machined servicename (rhbz#1868537)


author: Jiri Denemark <jdenemar@redhat.com> - 8.1.0-1
changelog:
  - Rebased to libvirt-8.1.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1643868, rhbz#2045953, rhbz#1910856, rhbz#2051451, rhbz#1745868
      rhbz#2040548, rhbz#2041665, rhbz#1999372, rhbz#2038045, rhbz#2045959
      rhbz#2046024, rhbz#2040555, rhbz#2057067, rhbz#2037146, rhbz#2036300


author: Jiri Denemark <jdenemar@redhat.com> - 8.2.0-1
changelog:
  - Rebased to libvirt-8.2.0 (rhbz#2060313)
  - The rebase also fixes the following bugs:
      rhbz#1866400, rhbz#2065381, rhbz#2063903, rhbz#1901394, rhbz#2065399


author: Jiri Denemark <jdenemar@redhat.com> - 7.3.0-1
changelog:
  - Rebased to libvirt-python-7.3.0 (rhbz#1950951)
  - The rebase also fixes the following bugs:
      rhbz#1916800, rhbz#1950603, rhbz#1950951
  - RHEL: Add gating.yaml for RHEL9 (rhbz#1950603)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "s390x-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j16  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1-3
changelog:
  - fix handling of zero-length messages
  - minimize default configuration
  - remove obsolete build requirement


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-1
changelog:
  - update to 3.1.1 (#1979954 CVE-2021-3570 CVE-2021-3571)
  - add read-only UDS port
  - add option to set clockClass threshold
  - don't repeat some log messages in multi-port configuration
  - increase default TX timestamp timeout to 10 ms
  - limit unicast message rate per address and grant duration


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Frank Crawford <frank@crawford.emu.id.au> - 7.5.4-2
changelog:
  - Add requires for perl-diagnostics (#1893671) and perl-lib (#1893503)
  - Add other requires as nothing is now automatically supplied


author: Brian C. Lane <bcl@redhat.com> 34.9.6-1
changelog:
  - github: Run tests for rhel9-branch PRs (bcl@redhat.com)
    Related: rhbz#2000439
  - Install unicode.pf2 from new directory (bcl@redhat.com)
    Resolves: rhbz#2000439


author: Brian C. Lane <bcl@redhat.com> 34.9.7-1
changelog:
  - runtime-cleanup: Remove dropped package from template (bcl@redhat.com)
    Related: rhbz#1991006
  - sshd_config: Update sshd options (bcl@redhat.com)
    Related: rhbz#2007288
  - Install nvme-cli tool (bcl@redhat.com)
    Related: rhbz#2010254
  - When running the tests in docker/podman use the Fedora 34 image (bcl@redhat.com)
    Related: rhbz#2010542
  - Fix pylint warnings about string formatting (bcl@redhat.com)
    Related: rhbz#2010542
  - tests: Ignore new pylint warnings (bcl@redhat.com)
    Resolves: rhbz#2010542


author: Brian C. Lane <bcl@redhat.com> 34.9.8-1
changelog:
  - livemedia.ks: Drop unneeded commands (bcl@redhat.com)
    Related: rhbz#2017993
  - livemedia.ks: Install workstation-product-environment (bcl@redhat.com)
    Resolves: rhbz#2017993
  - templates: Change nomodeset / basic graphics to use inst.text (bcl@redhat.com)
    Related: rhbz#1961092
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl@redhat.com)
    Related: rhbz#1961092
  - livemedia.ks: Add isomd5sum for use with rd.live.check (bcl@redhat.com)
    Resolves: rhbz#2015908


author: Brian C. Lane <bcl@redhat.com> 34.9.9-1
changelog:
  - Change macboot default to false (bcl@redhat.com)
    Resolves: rhbz#2019512
  - livemedia-creator: Change defaults to Red Hat Enterprise Linux 9 (bcl@redhat.com)
    Resolves: rhbz#2019133


author: Brian C. Lane <bcl@redhat.com> 34.9.10-1
changelog:
  - mkksiso: Check the length of the filenames (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Check the iso's arch against the host's (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Add missing implantisomd5 tool requirements (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Raise error if no volume id is found (bcl@redhat.com)
    Related: rhbz#2028104
  - mount: Add s390x support to IsoMountopoint (bcl@redhat.com)
    Resolves: rhbz#2028104
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl@redhat.com)
  - mkksiso: Add -joliet-long (bcl@redhat.com)
    Related: rhbz#2028104
  - mkksiso: Return 1 on errors (bcl@redhat.com)
    Related: rhbz#2028104


author: Brian C. Lane <bcl@redhat.com> 34.9.11-1
changelog:
  - Enable sftp when using inst.sshd (bcl@redhat.com)
    Resolves: rhbz#2040770
  - Drop ia32 uefi package installation (bcl@redhat.com)
    Resolves: rhbz#2039035
  - Remove 32-bit UEFI packages from example kickstart (bcl@redhat.com)
    Related: rhbz#2039035


author: Brian C. Lane <bcl@redhat.com> 34.9.12-1
changelog:
  - mkksiso: Improve debug message about unsupported arch (bcl@redhat.com)
    Related: rhbz#2049192
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl@redhat.com)
    Resolves: rhbz#2049192


author: Brian C. Lane <bcl@redhat.com> 34.9.15-1
changelog:
  - tito: Add the LoraxRHELTagger from rhel8-branch (bcl)
    Related: rhbz#2070910
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2070910


author: Brian C. Lane <bcl@redhat.com> - 9.0-26
changelog:
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: rhbz#1961092
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: rhbz#1961092


author: Brian C. Lane <bcl@redhat.com> - 9.0-29
changelog:
  - Drop ia32 uefi package installation (bcl)
    Resolves: rhbz#2038397
  - Enable sftp when using inst.sshd (bcl)
    Resolves: rhbz#2035049


author: Brian C. Lane <bcl@redhat.com> - 9.0-30
changelog:
  - Add .discinfo on all arches (bcl)
    Resolves: rhbz#2030008
  - Add inst.rngd cmdline option (bcl)
    Resolves: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-31
changelog:
  - Do not install rng-tools (bcl)
    Resolves: rhbz#2028720
  - Revert "Add inst.rngd cmdline option" (bcl)
    Related: rhbz#2028720


author: Brian C. Lane <bcl@redhat.com> - 9.0-35
changelog:
  - Makefile: Making it easier to create releases (bcl)
    Related: rhbz#2071074
  - runtime-postinstall: Remove machine specific nvme files (bcl)
    Resolves: rhbz#2071074


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Christopher Tubbs <ctubbsii@fedoraproject.org> - 1:3.6.3-6
changelog:
  - Remove unneeded commons-logging from runtime class path (rhbz#1883751)
  - Also remove redundant commons-codec


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.2-2
changelog:
  - More efficient cache and cow filters.
  - Add nbdkit-cow-filter cow-on-read option.
  - Add nbdkit-cache-filter cache-on-read=/PATH.
  - Add nbdkit-cache-filter cache-min-block-size option.
  - Add nbdkit-delay-filter delay-open and delay-close options.
  - Reduce verbosity of debugging from virt-v2v.
  - Miscellaneous bugfixes
    resolves: rhbz#1950632


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-1
changelog:
  - New upstream stable version 1.26.3.
    resolves: rhbz#1950632
  - Add Python .cleanup() method.
  - Fix data corruption in zero and trim on unaligned tail.
    resolves: rhbz#1990134


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.3-3
changelog:
  - Fix parsing of delay-* options
    resolves: rhbz#1991649
  - Fix assertion failure during server shutdown
  - Fix delay-close option
    resolves: rhbz#1991652
  - tests/test-debug-flags.sh: Don't use port 10809 during test
    resolves: rhbz#1991945


author: Richard W.M. Jones <rjones@redhat.com> - 1.26.5-1
changelog:
  - Rebase along stable branch to 1.26.5
    resolves: rhbz#1995327
  - Add nbdkit-vddk-plugin -D vddk.stats=1 flag
    resolves: rhbz#1995329
  - Add nbdkit-cow-filter cow-block-size parameter
    resolves: rhbz#1995332
  - Fix CVE-2021-3716 nbdkit: NBD_OPT_STRUCTURED_REPLY injection on STARTTLS
  - Update keyring


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.1-2
changelog:
  - Rebase to new stable branch version 1.30.1
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1
changelog:
  - new version 1.20.1
  - Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
    when labels are followed by a pointer to a root domain name


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.2.0-1
changelog:
  - Resolves: RHBZ#1953491
  - Rebase to 16.2.0
  - includes https://github.com/nodejs/node/pull/38633 (FIPS for OpenSSL 3.0)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Tomas Orsava <torsava@redhat.com> - 1.20.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-8
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867
  - pkcs12 export broken in FIPS mode
  - Resolves: rhbz#2049265


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-17
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Skipping 3.0.1-16 due to version numbering confusion with the RHEL-9.0 branch
  - Resolves: rhbz#2062640


author: Matej Tyc <matyc@redhat.com> - 2.0.0-2
changelog:
  - Fix issues with locally installed content and labelling of discovered content.
  - Resolves: rhbz#1989434


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981859


author: Luca BRUNO <lucab@redhat.com> - 2021.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.6
    Resolves: rhbz#2026931


author: Luca BRUNO <lucab@redhat.com> - 2022.2-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.2
    Resolves: rhbz#2070964


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.0-1
changelog:
  - Rebase to release 1.5.0
  - Rebase to pam-redhat-1.1.4
  - Remove pam_cracklib, pam_tally and pam_tally2
  - spec file cleanup


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-1
changelog:
  - Rebase to release 1.5.1
  - fix CVE-2020-27780: authentication bypass when the user doesn't exist
    and root password is blank (#1901173)


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2030123)
  - PMDA indom cache loading performance improvements (BZ 2030122)
  - Consistent user experience for new farm services (BZ 2030138)
  - Resilience improvements for the pmproxy service (BZ 2030141)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2024982)
  - pmdabpf: support arm and powerpc architectures (BZ 2024980)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2030138)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-5
changelog:
  - Further improve pmlogger and pmie farm services (BZ 2030138)
  - Resolve a further KVM selinux issue with KVM (BZ 2006430)
  - Rebuild to use latest selinux-policy for el9 (BZ 2041503)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991764)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.30-1
changelog:
  - ksshell: Fix traceback and add tests (bcl)
  - fs: Make tmp file creation cross-platform in ksvalidator to support Windows


author: Brian C. Lane <bcl@redhat.com> - 3.31-1
changelog:
  - Add make to BuildRequires, buildroot is removing it.
  - Deprecate the autostep command (vslavik)
  - Add missing spaces into the message (yurchor)
  - ksshell: Fix indentation in _init_matches (bcl)
  - Mark the level option of the logging command as deprecated (vponcova)


author: Brian C. Lane <bcl@redhat.com> - 3.32-1
changelog:
  - Conditionally BuildRequire coverage and sphinx for runtests (bcl)
    Resolves: rhbz#1916735
  - Change the lilo command removal to use RemovedCommand (vslavik)
  - Change the lilocheck command removal to use RemovedCommand (vslavik)
  - Fix test for the removed "interactive" command (vslavik)
  - Change the langsupport command removal to use RemovedCommand (vslavik)
  - Change the monitor command removal to use RemovedCommand (vslavik)
  - Change the mouse command removal to use RemovedCommand (vslavik)
  - Change the upgrade command removal to use RemovedCommand (vslavik)
  - Fix ksverdiff detection of removed commands (vslavik)
  - Check warnings of the deprecated kickstart commands (vponcova)
  - Remove the install command (vslavik)
  - Remove the deviceprobe command (vslavik)
  - Remove the device command (vslavik)
  - Remove the dmraid command (vslavik)
  - Remove the multipath command (vslavik)
  - Fix deprecation test for removed commands (vslavik)
  - Switch interactive removal to use RemovedCommand (bcl)
  - Add RemovedCommand for removing commands and documenting them (bcl)
  - Remove support for the updates command without an URL (vponcova)
  - Document how to deprecate commands and options (bcl)
  - Remove the ignoredisk --interactive option (vslavik)
  - Remove the partition --active option (vslavik)
  - Deprecate the %traceback section (vslavik)
  - Add missing .coveragerc file (bcl)
  - Switch to using GitHub Actions instead of Travis CI (bcl)
  - Add support for running via tox (bcl)
  - Deprecate the method command (vslavik)
  - Remove the bootloader option --upgrade (vslavik)


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-4
changelog:
  - kvm-block-nvme-fix-infinite-loop-in-nvme_free_req_queue_.patch [bz#2024544]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2028623]
  - Resolves: bz#2024544
    (Fio workers hangs when running fio with 32 jobs iodepth 32 and QEMU's userspace NVMe driver)
  - Resolves: bz#2028623
    ([9.0] machine types: 6.2: Fix prefer_sockets)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-5
changelog:
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#1945666]
  - kvm-x86-Add-q35-RHEL-9.0.0-machine-type.patch [bz#1945666]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2036669]
  - Resolves: bz#1945666
    (9.0: x86 machine types)
  - Resolves: bz#2036669
    (DEVICE_DELETED event is not delivered for device frontend if -device is configured via JSON)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-6
changelog:
  - Moving feature support out of qemu-kvm-core to separate packages (can
    cause loss of functionality when using only qemu-kvm-core - qemu-kvm keeps
    same feature set).
  - kvm-spec-Rename-qemu-kvm-hw-usbredir-to-qemu-kvm-device-.patch [bz#2022847]
  - kvm-spec-Split-qemu-kvm-ui-opengl.patch [bz#2022847]
  - kvm-spec-Introduce-packages-for-virtio-gpu-modules.patch [bz#2022847]
  - kvm-spec-Introduce-device-display-virtio-vga-packages.patch [bz#2022847]
  - kvm-spec-Move-usb-host-module-to-separate-package.patch [bz#2022847]
  - kvm-spec-Move-qtest-accel-module-to-tests-package.patch [bz#2022847]
  - kvm-spec-Extend-qemu-kvm-core-description.patch [bz#2022847]
  - Resolves: bz#2022847
    (qemu-kvm: Align package split with Fedora)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-7
changelog:
  - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088]
  - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088]
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791]
  - Resolves: bz#1962088
    ([QSD] wrong help message for the fuse)
  - Resolves: bz#2046201
    (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0])
  - Resolves: bz#2034791
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-8
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708]
  - kvm-Enable-SGX-RH-Only.patch [bz#2033708]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041461]
  - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917]
  - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123]
  - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481]
  - Resolves: bz#2033708
    ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041461
    (Inconsistent block status reply in qemu-nbd)
  - Resolves: bz#1882917
    (the target image size is incorrect when converting a badly fragmented file)
  - Resolves: bz#2040123
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2042481
    ([aarch64] Launch guest with "default-bus-bypass-iommu=off,iommu=smmuv3" and "iommu_platform=on", guest hangs after system_reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-9
changelog:
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659]
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626]
  - Resolves: bz#2046659
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2033626
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-10
changelog:
  - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820]
  - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820]
  - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820]
  - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818]
  - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818]
  - Resolves: bz#2042820
    (qemu crash when try to copy and paste contents from client to VM)
  - Resolves: bz#2044818
    (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11
changelog:
  - kvm-spec-Remove-qemu-virtiofsd.patch [bz#2055284]
  - Resolves: bz#2055284
    (Remove the qemu-virtiofsd subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-12
changelog:
  - kvm-RHEL-mark-old-machine-types-as-deprecated.patch [bz#2062813]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2062828]
  - kvm-spec-Fix-obsolete-for-spice-subpackages.patch [bz#2062819 bz#2062817]
  - kvm-spec-Obsolete-old-usb-redir-subpackage.patch [bz#2062819]
  - kvm-spec-Obsolete-ssh-driver.patch [bz#2062817]
  - Resolves: bz#2062828
    ([virtual network][rhel9][vDPA] qemu crash after hot unplug vdpa device [rhel-9.1.0])
  - Resolves: bz#2062819
    (Broken upgrade path due to qemu-kvm-hw-usbredir  rename [rhel-9.1.0])
  - Resolves: bz#2062817
    (Missing qemu-kvm-block-ssh obsolete breaks upgrade path [rhel-9.1.0])
  - Resolves: bz#2062813
    (Mark all RHEL-8 and earlier machine types as deprecated [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-13
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2065589]
  - Resolves: bz#2065589
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-9.1.0])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-26
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - -gui: add mesa-dri-drivers soft dep for rhel8+ too
    Resolves: bz#1998959
  - Fix out-of-bound write in QOutlineMapper::converPath
    Resolves: bz#1996876


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Christopher Engelhard <ce@lcts.de> - 2.6-3
changelog:
  - Stop auto-creating a cronjob, but ship example cronjob/
    systemd timer units in docdir instead (upstream issue #1829)
  - Build & ship HTML user guide
  - Remove %pre scriptlet, as it was introduced only to fix a
    specific upgrade issue with v1.15 in 2014


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-7
changelog:
  - Sync spec changes and downstream patches from RHEL 8
    - Require xorriso instead of genisoimage
    - Add S/390 support and forgotten dependency on the file utility
    - Backport upstream code related to LUKS2 support
    - Modify the cron command to avoid an e-mail with error message after
      ReaR is installed but not properly configured when the cron command
      is triggered for the first time
    - Changes for NetBackup (NBU) support, upstream PR2544
  - Add dependency on dhcp-client, RHBZ #1926451


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Sync spec changes and downstream patches from RHEL 8 rear-2.6-2
    - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
      Resolves: rhbz1993296
    - On POWER add bootlist & ofpathname to the list of required programs
      conditionally (bootlist only if running under PowerVM, ofpathname
      always except on PowerNV) - upstream PR2665, add them to package
      dependencies
      Resolves: rhbz1983013
    - Backport PR2608:
      Fix setting boot path in case of UEFI partition (ESP) on MD RAID
      Resolves: rhbz1945869
    - Backport PR2625
      Prevents accidental backup removal in case of errors
      Resolves: rhbz1958247
    - Fix rsync error and option handling
      Resolves: rhbz1930662


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-11
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore


author: Nick Clifton <nickc@redhat.com> - 192-1
changelog:
  - Select between gcc-built and annobin-built versions of the annobin plugin.
  - Resolves: rhbz#2030671


author: Rich Megginson <rmeggins@redhat.com> - 1.12.0-1
changelog:
  - vpn - use custom vpn_ipaddr filter to make role work on RHEL 8.6 with ansible-core
    this is covered by "make roles work with ansible-core on all platforms" BZ
  - logging - Logging role "logging_purge_confs" option not properly working
    Resolves rhbz#2040812 (EL8)
    Resolves rhbz#2039106 (EL9)
  - kernel_settings role should use ansible_managed in its configuration file
    Resolves rhbz#2047504 (EL8)
    Resolves rhbz#2047506 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.12.0-2
changelog:
  - RHEL8.6, 9 - add "Requires: ansible-core or ansible"
    Resolves rhbz#2012316 (EL8)
    Resolves rhbz#2012298 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.12.1-1
changelog:
  - vpn - template error while templating string: no filter named 'vpn_ipaddr'
    Resolves rhbz#2052103 (EL8)
    Resolves rhbz#2050341 (EL9)
  - kdump - Unable to start service kdump: Job for kdump.service failed because the control process exited with error code.
    Resolves rhbz#2052105 (EL8)
    Resolves rhbz#2050419 (EL9)
  - remove collection dependencies on rhel because we vendor them in


author: Rich Megginson <rmeggins@redhat.com> - 1.13.0-1
changelog:
  - storage - RFE: Add support for RAID volumes (lvm-only)
    Resolves rhbz#2016514 (EL8)
    Resolves rhbz#2016518 (EL9)
  - storage - RFE: Add support for cached volumes (lvm-only)
    Resolves rhbz#2016511 (EL8)
    Resolves rhbz#2016517 (EL9)
  - metrics - metrics role can't be re-run if the Grafana admin password has been changed
    Resolves rhbz#1967321 (EL8)
    Resolves rhbz#2041632 (EL9)
  - nbde_client - NBDE client system role does not support servers with static IP addresses
    Resolves rhbz#1985022 (EL8)
    Resolves rhbz#2031555 (EL9)
  - ha_cluster - [RFE] ha_cluster - Support for creating resource constraints (Location, Ordering, etc.)
    Resolves rhbz#2041635 (EL8)
    Resolves rhbz#2041634 (EL9)
  - firewall - ensure zone exists and can be used in subsequent operations
    Resolves rhbz#2042541 (EL8)
    Resolves rhbz#2024775 (EL9)
  - network - RFE: Support Routing Tables in static routes in Network Role
    Resolves rhbz#2031521 (EL8)
    Resolves rhbz#2049798 (EL9)
  - network - Failure to activate connection: nm-manager-error-quark: No suitable device found for this connection
    Resolves rhbz#2034908 (EL8)
    Resolves rhbz#2038957 (EL9)
  - network - Set DNS search setting only for enabled IP protocols
    Resolves rhbz#2041627 (EL8)
    Resolves rhbz#2004899 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.14.0-1
changelog:
  - ha_cluster - set permissions for haclient group
    Resolves rhbz#2049747 (EL8)
    Resolves rhbz#2049754 (EL9)
  - network - Add more bonding options to rhel-system-roles.network
    Resolves rhbz#2008931 (EL8)
    Resolves rhbz#2054435 (EL9)
  - certificate - should consistently use ansible_managed in hook scripts
    Resolves rhbz#2054364 (EL8)
    Resolves rhbz#2054368 (EL9)
  - tlog - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2054363 (EL8)
    Resolves rhbz#2054367 (EL9)
  - vpn - consistently use ansible_managed in configuration files managed by role
    Resolves rhbz#2054365 (EL8)
    Resolves rhbz#2054369 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.15.0-1
changelog:
  - firewall - ensure target changes take effect immediately
    Resolves rhbz#2057172 (EL8)
    Resolves rhbz#2057164 (EL9)
  - firewall - Firewall RHEL System Role should be able to set default zone
    Resolves rhbz#2022458 (EL8)
    Resolves rhbz#2022461 (EL9)
  - network - tests_802_1x_nm, tests_802_1x_updated_nm fails because of missing hostapd in EPEL
    Resolves rhbz#2053862 (EL8)
    Resolves rhbz#2053861 (EL9)


author: Noriko Hosoi <nhosoi@redhat.com> - 1.15.0-2
changelog:
  - metrics - follow symlinks for the mssql and elasticsearch configuration paths
    Resolves rhbz#2058655 (EL8)
    Resolves rhbz#2058777 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.15.1-1
changelog:
  - kernel_settings error configobj not found on RHEL 8.6 managed hosts
    Resolves rhbz#2058772 (EL8)
    Resolves rhbz#2058756 (EL9)
  - timesync: basic-smoke test failure in timesync/tests_ntp.yml
    Resolves rhbz#2059293 (EL8)
    Resolves rhbz#2058645 (EL9)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-8
changelog:
  - Support hash v8 databases from BDB < 4.6 (#1965147)
  - Ensure ELF files get stripped when debuginfo is disabled (#1999009)
  - Actually honor libarchive bcond at configure time (#1999012)
  - Unbreak checking of installed rich dependencies (#2015407)
  - Rebuild against soname bump in ima-evm-utils (#2026079)
  - Fix IMA signature lengths assumed constant (#2018937)
  - Validate and require subkey binding sigs on PGP pubkeys (#1943724)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-10
changelog:
  - Address covscan issues in binding sigs validation patch (#1943724)
  - Bump hash for rpmdb cookie to SHA256 for FIPS (#2048455)
  - Add --path query option (#2037352)
  - Skip recorded symlinks in --setperms (#2025906)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-11
changelog:
  - Fix IMA signature lengths assumed constant, take III (#2018937)
  - Fix regression reading rpm v3 and other rare packages (#2037186)
  - Fix spurious %transfiletriggerpostun execution (#2023692)


author: Colin Walters <walters@verbum.org> - 2022.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2022.8
    Resolves: rhbz#2077062
    Resolves: rhbz#2023325


author: Michal Domonkos <mdomonko@redhat.com> - 9.3-5
changelog:
  - Drop progressbar2 dependency and bundle a tiny replacement (#1927784)
  - Drop fakeroot dependency and qa-robot scripts (#1905465)


author: Miro Hrončok <mhroncok@redhat.com> - 1.11-10
changelog:
  - Don't use the %python_sitelib macro, because it errors
  - See https://fedoraproject.org/wiki/Changes/PythonMacroError


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5
  - Modify rshim.spec accordingly
  - Switch to %autosetup to handle Patch0 and any future patches
  - Resolves: rhbz#1858577


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-7
changelog:
  - Enable openssl
    resolves: rhbz#1972058
  - Close dir when fsync=on
    resolves: rhbz#1972069
  - Do not exit when user/group can not be found
    resolves: rhbz#1990868
  - Remove abortOnIDResolution fail
  - Always use message severity when comparing with ratelimit severity
    resolves: rhbz#1990869


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add required flags for branch protection
  - Add missing tests folder
  - Resolve issues detected by covscan
    resolves: rhbz#1938863


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-103
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#2069664
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2070528
  - Fix error handling in gtlsRecordRecv, which can cause full CPU usage


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: <msekleta@redhat.com> - 0.3.2-5
changelog:
  - Adjust packaging to account for differences between Fedora and CentOS/RHEL rust packaging (#1930369)


author: Dan Horák <dan[at]danny.cz> - 2:2.17.0-3
changelog:
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding (#1870700)
  - Resolves: #1870700


author: Dan Horák <dan[at]danny.cz> - 2:2.19.0-1
changelog:
  - rebased to 2.19.0 (#2022347)
  - cmsfs-fuse Requires glibc-gconv-extra (#2022702)
  - cpictl: fix permissions (#2024102)
  - Resolves: #2022347 #2022702 #2024102


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013578 - Rebase to Samba 4.15.3
  - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2039154 - Fix CVE-2021-20316
  - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x
  - resolves: #2044239 - [smb] Segmentation fault when joining the domain
  - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
  - resolves: #2044255 - Fix CVE-2021-43566


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2046129 - Fix CVE-2021-44141
  - resolves: #2046154 - Fix CVE-2021-44142
  - resolves: #2044405 - Fix printing no longer works on Windows 7
  - resolves: #2049485 - Fix systemd notifications
  - resolves: #2049604 - Disable NTLMSSP for ldap client connections


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-101
changelog:
  - resolves: #2050111 - [RFE] Change change password change prompt phrasing
  - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.3-16
changelog:
  - Fix exit status (i. e. apply https://sourceforge.net/p/sblim/bugs/2761/)
  - Fix issues found by static analysis


author: Matej Tyc <matyc@redhat.com> - 0.1.57-3
changelog:
  - Use SSHD directory-based configuration.
    Resolves: rhbz#1962564
  - Introduce ISM kickstarts
    Resolves: rhbz#1978290
  - Deliver numerous RHEL9 fixes to rules - see related BZs for details.
    TLDR: Enable remediations by means of platform metadata,
    enable the RHEL9 GPG rule, introduce the s390x platform,
    fix the ctrl-alt-del reboot disable, fix grub2 UEFI config file location,
    address the subscription-manager package merge, and
    enable and select more rules applicable to RHEL9.
    Resolves: rhbz#1987227
    Resolves: rhbz#1987226
    Resolves: rhbz#1987231
    Resolves: rhbz#1988289


author: Matej Tyc <matyc@redhat.com> - 0.1.57-4
changelog:
  - Fix a broken HTTP link
    Add CIS profile based on RHEL8 CIS, fix its Crypto Policy usage
    Resolves: rhbz#1962564


author: Matej Tyc <matyc@redhat.com> - 0.1.58-1
changelog:
  - Rebase to a new upstream release (RHBZ#2014561)
  - Disable profiles that we disable in RHEL8
  - Add a VM wait handling to fix issues with tests.


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
changelog:
  - Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2045403)
  - Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2045403)
  - Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2045403)
  - Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2014561)
  - Update GRUB2 rule descriptions (RHBZ#2020623)
  - Make package_rear_installed not applicable on AARCH64 (RHBZ#2014561)


author: Watson Sato <wsato@redhat.com> - 0.1.60-4
changelog:
  - Fix Ansible service disabled tasks (RHBZ#2014561)
  - Update description of OSPP profile (RHBZ#2045386)
  - Add page_aloc.shuffle rules for OSPP profile (RHBZ#2055118)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2056847)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014561)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2057457)


author: Jan Černý <jcerny@redhat.com> - 1.2.1-5
changelog:
  - Remove qt5-devel from "Requires" section
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/
  - Update for new CMake out of source builds
    https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds
  - Fix Qt5 deprecated symbols
  - Fix FTBS in Rawhide/F33 (RHBZ#1865462)


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.22-1
changelog:
  - Allow sshd read filesystem sysctl files
  Resolves: rhbz#2036585
  - Revert "Allow sshd read sysctl files"
  Resolves: rhbz#2036585


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.23-1
changelog:
  - Allow systemd nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Label /var/run/user/%{USERID}/dbus with session_dbusd_tmp_t
  Resolves: rhbz#2000039
  - Change /run/user/[0-9]+ to /run/user/%{USERID} for proper labeling
  Resolves: rhbz#2000039
  - Allow scripts to enter LUKS password
  Resolves: rhbz#2048521
  - Allow system_mail_t read inherited apache system content rw files
  Resolves: rhbz#2049372
  - Add apache_read_inherited_sys_content_rw_files() interface
  Related: rhbz#2049372
  - Allow sanlock get attributes of filesystems with extended attributes
  Resolves: rhbz#2047811
  - Associate stratisd_data_t with device filesystem
  Resolves: rhbz#2039974
  - Allow init read stratis data symlinks
  Resolves: rhbz#2039974
  - Label /run/stratisd with stratisd_var_run_t
  Resolves: rhbz#2039974
  - Allow domtrans to sssd_t and role access to sssd
  Resolves: rhbz#2039757
  - Creating interface sssd_run_sssd()
  Resolves: rhbz#2039757
  - Fix badly indented used interfaces
  Resolves: rhbz#2039757
  - Allow domain transition to sssd_t
  Resolves: rhbz#2039757
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  Resolves: rhbz#2039759
  - Allow local_login_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Allow xdm_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Make cupsd_lpd_t a daemon
  Resolves: rhbz#2039449
  - Label utilities for exFAT filesystems with fsadm_exec_t
  Resolves: rhbz#1972225
  - Dontaudit sfcbd sys_ptrace cap_userns
  Resolves: rhbz#2040311


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.24-1
changelog:
  - Allow tumblerd write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain create session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gkeyringd_domain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow systemd-logind delete session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gdm-x-session write to session dbus tmp sock files
  Resolves: rhbz#2000039
  - Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
  Resolves: rhbz#2039453
  - Label exFAT utilities at /usr/sbin
  Resolves: rhbz#1972225


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.25-1
changelog:
  - Allow systemd watch unallocated ttys
  Resolves: rhbz#2054150
  - Allow alsa bind mixer controls to led triggers
  Resolves: rhbz#2049732
  - Allow alsactl set group Process ID of a process
  Resolves: rhbz#2049732
  - Allow unconfined to run virtd bpf
  Resolves: rhbz#2033504


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.26-1
changelog:
  - Remove permissive domain for insights_client_t
  Resolves: rhbz#2055823
  - New policy for insight-client
  Resolves: rhbz#2055823
  - Allow confined sysadmin to use tool vipw
  Resolves: rhbz#2053458
  - Allow chage domtrans to sssd
  Resolves: rhbz#2054657
  - Remove label for /usr/sbin/bgpd
  Resolves: rhbz#2055578
  - Dontaudit pkcsslotd sys_admin capability
  Resolves: rhbz#2055639
  - Do not change selinuxuser_execmod and selinuxuser_execstack
  Resolves: rhbz#2055822
  - Allow tuned to read rhsmcertd config files
  Resolves: rhbz#2055823


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.27-1
changelog:
  - Allow ModemManager connect to the unconfined user domain
  Resolves: rhbz#2000196
  - Label /dev/wwan.+ with modem_manager_t
  Resolves: rhbz#2000196
  - Allow systemd-coredump userns capabilities and root mounton
  Resolves: rhbz#2057435
  - Allow systemd-coredump read and write usermodehelper state
  Resolves: rhbz#2057435
  - Allow sysadm_passwd_t to relabel passwd and group files
  Resolves: rhbz#2053458
  - Allow systemd-sysctl read the security state information
  Resolves: rhbz#2056999
  - Remove unnecessary /etc file transitions for insights-client
  Resolves: rhbz#2055823
  - Label all content in /var/lib/insights with insights_client_var_lib_t
  Resolves: rhbz#2055823
  - Update insights-client policy
  Resolves: rhbz#2055823
  - Update insights-client: fc pattern, motd, writing to etc
  Resolves: rhbz#2055823
  - Update specfile to buildrequire policycoreutils-devel >= 3.3-5
  - Add modules_checksum to %files


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.28-1
changelog:
  - Allow logrotate a domain transition to cluster administrative domain
  Resolves: rhbz#2061277
  - Change the selinuxuser_execstack boolean value to true
  Resolves: rhbz#2064274


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1
changelog:
  - Allow qemu-kvm create and use netlink rdma sockets
  Resolves: rhbz#2063612
  - Label corosync-cfgtool with cluster_exec_t
  Resolves: rhbz#2061277


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.30-1
changelog:
  - Allow administrative users the bpf capability
  Resolves: RHBZ#2070982
  - Allow NetworkManager talk with unconfined user over unix domain dgram socket
  Resolves: rhbz#2064688
  - Allow hostapd talk with unconfined user over unix domain dgram socket
  Resolves: rhbz#2064688
  - Allow fprintd read and write hardware state information
  Resolves: rhbz#2062911
  - Allow fenced read kerberos key tables
  Resolves: RHBZ#2060722
  - Allow init watch and watch_reads user ttys
  Resolves: rhbz#2060289
  - Allow systemd watch and watch_reads console devices
  Resolves: rhbz#2060289
  - Allow nmap create and use rdma socket
  Resolves: RHBZ#2059603


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.25-1
changelog:
  - Use Python dasbus instead of pydbus
  - Optimize get_rpm_nvr_by_type by adding a cache
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.26-1
changelog:
  - Fix plugin exception reporting
  - Update translations
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Do not use Python slip package


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.11-1
changelog:
  - Add plugin which analyzes execmem denials
  - Add missing "If " strings
  - Update qemu_blk_image and qemu_file_image
  - Update "xen_image" plugin
  - Update "file" plugin
  - Update "missing" scripts to automake-1.15


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references
  - Update translations


author: Jindrich Novy <jnovy@redhat.com> - 2:1.5.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/01e58f8)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1.5.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/c2732cb)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1.5.1-0.9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/4acc9f0)
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1.6.1-2
changelog:
  - be sure to install BATS before gating tests are executed
    (thanks to Ed Santiago)
  - Related: #2061316


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.5-1
changelog:
  - New upstream release
  - Resolves: rhbz#1751295: (2) When sync-repl is enabled, slapi-nis can deadlock during retrochanglog trimming
  - Resolves: rhbz#1768156: ERR - schemacompat - map rdlock: old way MAP_MONITOR_DISABLED


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.56.7-2
changelog:
  - Resolves: rhbz#1979619
    IPA: High CPU utilization (over 1000% plus) by ns-slapd process
  - Resolves: rhbz#1979623
    With base object scope, ldapsearch against compat tree does not return any data on Rhel8 IPA servers.


author: Jindrich Novy <jnovy@redhat.com> - 1.1.12-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.12
  - Related: #2000051


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Lubos Uhliarik <luhliari@redhat.com> - 7:5.0.5-2
changelog:
  - new version 5.0.5
  - Resolves: #1952896 - Rebase squid to >= 5.0.5
  - Resolves: #1940412 - Remove libdb dependency from squid


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.1-1
changelog:
  - new version 5.1
  - Resolves: #1990517 - Rebase squid to 5.1
  - Resolves: #1985231 - squid: FTBFS because of OpenSSL 3.0 preprocessor macro
    changes


author: Luboš Uhliarik <luhliari@redhat.com> - 7:5.2-1
changelog:
  - new version 5.2
  - Resolves: #1934560 - squid: out-of-bounds read in WCCP protocol
  - Resolves: #2011637 - Rebase squid to 5.2


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.0-1
changelog:
  - Release 3.0.0
  - Support for OpenSSL 3.0
  - Support for outputting named Diffie-Hellman parameter groups
  - Support for CentOS Stream 9
  - Resolves: rhbz#1984468


author: Clark Williams <williams@redhat.com> - 1.10-1
changelog:
  - utils: Fix bounds check on cpu and end_cpu variables
  - stalld: Support denylisting of tasks in stalld
  - src/utils: use right argument for warning printf


author: Clark Williams <williams@redhat.com> - 1.11-1
changelog:
  - redhat/stalld.spec: pick up gating test version for changelog
  - utils.c: set daemon umask to restrict global write/execute (1934586)
  - hardening fixes from coverity scan (1934590)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.12-1
changelog:
  - stalld.8: fix diff cruft left in manpage source
  - stalld.c: clean up handling of nr_running
  - stalld.c: remove duplicate parameter to fill_waiting_task()
  - stalld: Add error handling in get_cpu_idle_time()
  - stalld.service: Run stalld as sched_fifo via systemd
  - packaging: clean up Makefiles and rpm specfile
  - stalld: Always print current function for info messages
  - stalld: Always print current function for warn messages
  - stalld: Always print current function for die messages
  - utils: change PATHMAX to 4096


author: Fernando Pacheco <fpacheco@redhat.com> - 1.13-1
changelog:
  - stalld: Fix log message on boost_cpu_starving_vector()
  - stalld: Add the overload control to the single-threaded mode
  - stalld: Add the adaptive mode option
  - stalld: Use the last mode set in the cmdline
  - stalld: Fallback to the adaptive mode if force_fifo is selected
  - stalld: Make single-threaded mode the default one
  - stalld.service: Always restart stalld on exit
  - utils.c: Fail if user is not root
  - utils.c: Make the path to sched_debug path dynamic


author: Fernando Pacheco <fpacheco@redhat.com> - 1.14.1-1
changelog:
  - stalld: Coding style cleanup
  - stalld: spaces in place of <TAB>
  - throttling: Use RT_RUNTIME_PATH in rt_throttling_is_off()
  - throttling: Check open() on turn_off_rt_throttling
  - throttling: Adjust variables in restore_rt_throttling()
  - stalld.c: utils.c: Remove complex assignments from variable declarations
  - stalld.h: Define MAX_PATH/DIR_PATH/FILE_NAME and use them
  - stalld: Adjust variables in parse_old_task_format()
  - utils.c: Use MAX_PATH for pidfile
  - stalld.c: Remove variable declaration from the middle of  the function
  - stalld: Respect -l option in single threaded mode (1983103)
  - utils: s/try_to_open_file/check_file_exists/
  - utils: use check_file_exists in setup_hr_tick()
  - utils: Check for the new sched_features path


author: Fernando Pacheco <fpacheco@redhat.com> - 1.15-1
changelog:
  - stalld: Fix incorrect open() return value checks
  - stalld: Pass errno to strerror() on sig*set() failures
  - throttling: Always null terminate sched_rt_runtime_us output
  - stalld: Remove unreachable statement in detect_task_format()
  - tests: Fix uninitialized value action.sa_mask
  - utils: Bail if malloc() returns null in parse_cpu_list()
  - stalld: Use correct format specifier for long types
    Resolves: rhbz#2016010


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068550


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1914316
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972353


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1914315
  - Add boot from root support
  - Resolves: rhbz#1869768
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Javier Martinez Canillas <javierm@redhat.com> - 6.04-0.13
changelog:
  - Fix a bunch of annocheck problems (pjones)
  - Drop x86_64 ExclusiveArch for tftpboot subpackage
  - Make tftpboot subpackage completely noarch (yselkowi)


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Michal Sekletar <msekleta@redhat.com> 12.5.4-3
changelog:
  - sysstat's buildsystem doesn't really use LDFLAGS, we have to merge CFLAGS and LDFLAGS to get binaries with full RELRO (#2044893)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: Martin Cermak <mcermak@redhat.com> - 4.6-9
changelog:
  - rhbz2027683: python tapset regression
  - rhbz2027683: systemtap.examples/io/iostat-scsi.stp PR28633


author: Sergio Correia <scorreia@redhat.com> - 7.8
changelog:
  - Move build system to meson
    Upstream commits (fed9020, 590de27)
  - Move key handling to tang itself
    Upstream commits (6090505, c71df1d, 7119454)


author: Neal Gompa <ngompa13@gmail.com> - 2.1.fb49-7
changelog:
  - Use correct Python macros to build the package
  - Fix file list and install COPYING as license file
  - Don't compress manpages in build phase, as rpm auto-compresses manpages


author: Matt Coleman <matt@datto.com> - 2.1.53-1
changelog:
  - New upstream version
  - Add the upstream project's targetclid systemd unit files
  - Add proposed upstream patch:
    + Do not install systemd files in setup.py
    + https://github.com/open-iscsi/targetcli-fb/pull/176


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-36
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066855)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066858)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-37
changelog:
  - Review and fix issues reported by static analysers (rhbz#2069613)
  - Use systemd-rpm-macros and modernise the specfile a bit
    - Based on changes made by Dominik 'Rathann' Mierzejewski in Fedora.
      Thanks a lot!


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-14
changelog:
  - SELinux improvements
    Resolves: bz#1961488

  - Fix endianness issue on s390x
    Resolves: bz#1963029


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-21
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2049506


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording
    transfer exit condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-1
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2000807


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-2
changelog:
  - Update to 3.1.0.rc, based on earlier tracker3-miners packaging
  - Obsolete separate tracker3-miners package


author: Tom Stellard <tstellar@redhat.com> - 3.0.9-59
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.17.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003838
    - cpu-partitioning: fixed no_balance_cores on newer kernels
      resolves: rhbz#1874596


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003838
    - tuned-gui: fixed creation of new profile


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d including changes from tzdata-2020c
    - Palestine will end summer time on 2020-10-24 rather than the
      predicted 2020-10-31.
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
    - Includes changes in tzdata-2021b:
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Patsy Griffin <patsy@redhat.com> - 2022a-1
changelog:
  - Rebase to tzdata-2022a
    - Palestine springs forward on 2022-03-27, not -03-26.
    - zdump -v now outputs better failure information
    - fixes for code that reads corrupted TZif data


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.5-1
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995046)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser


author: Jindrich Novy <jnovy@redhat.com> - 0.2.5-2
changelog:
  - New rebase https://github.com/containers/udica/releases/tag/v0.2.5 (#1995041)
  - Replace capability dictionary with str.lower()
  - Enable udica to generate policies with fifo class
  - Sort container inspect data before processing
  - Update templates to work properly with new cil parser
  - Related: #2000051


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-1
changelog:
  - rebase usbguard to 1.0.0
  - added support for rules covering combination of classes
  - fix usbguard being killed
  Resolves: rhbz#1916039
  Resolves: rhbz#1861330
  Resolves: rhbz#1905257


author: Radovan Sroka <rsroka@redhat.com> - 1.0.0-7
changelog:
  RHEL 9 BETA
  - starting usbguard service complains about PIDFile= references a path below legacy directory /var/run/
  Resolves: rhbz#1985627
  - file conflict when installing usbguard on rhel
  Resolves: rhbz#1986785


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.0-10
changelog:
  - fix DSP module definition in spec file
  Resolves: rhbz#2014442
  - fix IPC access control files override
  Resolves: rhbz#2009227
  - validate ACL permission existence
  Resolves: rhbz#2009229
  - decrease usbguard-notifier spam when denied connection
  Resolves: rhbz#2009226


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-8
changelog:
  - Add gdbserver_tests-update-filters-for-newer-glibc-gdb.patch
  - Add helgrind-and-drd-suppression-libc-and-libpthread.patch
  - Remove valgrind-3.9.0-helgrind-race-supp.patch
  - Enable run_full_regtest.


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 0.17.0-0.1.klarlack.20200916git
changelog:
  - Switched upstream to Nils Goroll's fork which is the defacto current upstream
  - Synced description to reality
  - This is a snapshot build that needs autotools for building
  - Rebuilt for varnish-6.5.0


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 0.17.1-1
changelog:
  - New upstream release
  - Switched back to original varnish github upstream, as it has catched up
  - Includes fix for CVE-2021-28543, VSV00006, bz#1939669


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-6
changelog:
  - installer: Prefer xorrisofs over genisoimage/mkisofs (rhbz#1973236)
  - urlfetcher: Factor out ISOReader class (rhbz#1973236)
  - urlfetcher: Add xorriso ISOReader implementation (rhbz#1973236)
  - urlfetcher: Delete the 'isoinfo' ISOReader (rhbz#1973236)
  - Add gating.yaml for RHEL-9 (rhbz#1984222)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-9
changelog:
  - virt-install: add mediated device (rhbz#1995131)
  - virt-xml: add support for mediated devices (rhbz#1995131)
  - hostdev: use method get_mdev_uuid() (rhbz#1995131)
  - tests: verify MDEV support (rhbz#1995131)
  - virt-manager: enable MDEV support (rhbz#1995131)


author: Jonathon Jongsma <jjongsma@redhat.com> - 3.2.0-13
changelog:
  - cli: --filesystem: add binary.sandbox.mode and source.socket (rhbz#2045932)
  - nodedev: Improve error with unknown address strings (rhbz#2017840)


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: William Poteat <wpoteat@redhat.com> 1.31.14-1
changelog:
  - Merge run data into report (wpoteat@redhat.com)
  - Update the man page for the status mode (wpoteat@redhat.com)
  - Status execution (wpoteat@redhat.com)
  - Record last dates of succcess for sources and destinations
    (wpoteat@redhat.com)
  - Update certs for complex tests (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.15-1
changelog:
  - 1986973: Take out AHV removal patch mechanism (wpoteat@redhat.com)
  - Update AHV patch (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.16-1
changelog:
  - 1990550: Add the description for nutanix mode in man virt-who and man virt-
    who-config (wpoteat@redhat.com)
  - 1990337: The guest state in mapping should be uniform with other hypervisors
    1990338: The guest shows wrong active value "0" in mapping when it's running
    (wpoteat@redhat.com)
  - 1989646:  Get UnboundLocalError when configured hypervisor_id=hwuuid
    (wpoteat@redhat.com)
  - 1989645: Add dmi.system.uuid to ahv facts (wpoteat@redhat.com)
  - 1974624: proxy error with https (wpoteat@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.31.17-1
changelog:
  - Bypass stylish check on suds code (wpoteat@redhat.com)
  - 2000922: Add the suds code to virt-who in place of python3-suds package
    (wpoteat@redhat.com)
  - ENT-4004: Fix flake8 issues for test files (mhorky@redhat.com)
  - ENT-4004: Use four spaces for indentation (mhorky@redhat.com)
  - ENT-4004: Fix flake8 issues (mhorky@redhat.com)
  - ENT-4004: Add stylish tests (mhorky@redhat.com)
  - Cannot use ESX where python3-suds is not available (wpoteat@redhat.com)
  - 1981249: Stop using NTLM which requires MD4 (OpenSSL 3.0)
    (csnyder@redhat.com)
  - 1989877: Status command does not reach actual credentials checking
    (wpoteat@redhat.com)
  - Make changes to follow Conscious language initiative (mhorky@redhat.com)


