# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-113.el10]
changelog:
  - nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103236] {CVE-2025-38264}
  - usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-102858]
  - usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-102858]
  - usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-102858]
  - perf test probe_vfs_getname: Skip if no suitable line detected (Jakub Brnak) [RHEL-74228]
  - net: e1000e: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Corinna Vinschen) [RHEL-99400]
  - treewide: Switch/rename to timer_delete[_sync]() (Corinna Vinschen) [RHEL-99400]
  - e1000e: change k1 configuration on MTP and later platforms (Corinna Vinschen) [RHEL-99400]
  - e1000e: Fix real-time violations on link up (Corinna Vinschen) [RHEL-99400]
  - e1000e: Link NAPI instances to queues and IRQs (Corinna Vinschen) [RHEL-99400]
  - e1000e: Remove duplicated writel() in e1000_configure_tx/rx() (Corinna Vinschen) [RHEL-99400]
  - smb: client: fix perf regression with deferred closes (Paulo Alcantara) [RHEL-96872]
  - smb: client: disable path remapping with POSIX extensions (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - cifs: add documentation for smbdirect setup (Paulo Alcantara) [RHEL-96872]
  - cifs: do not disable interface polling on failure (Paulo Alcantara) [RHEL-96872]
  - cifs: serialize other channels when query server interfaces is pending (Paulo Alcantara) [RHEL-96872]
  - cifs: deal with the channel loading lag while picking channels (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-96872]
  - smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-96872]
  - smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-96872]
  - cifs: update the lock ordering comments with new mutex (Paulo Alcantara) [RHEL-96872]
  - cifs: dns resolution is needed only for primary channel (Paulo Alcantara) [RHEL-96872]
  - cifs: update dstaddr whenever channel iface is updated (Paulo Alcantara) [RHEL-96872]
  - cifs: reset connections for all channels when reconnect requested (Paulo Alcantara) [RHEL-96872]
  - smb: client: use ParentLeaseKey in cifs_do_create (Paulo Alcantara) [RHEL-96872]
  - smb: client: use ParentLeaseKey in open_cached_dir (Paulo Alcantara) [RHEL-96872]
  - smb: client: add ParentLeaseKey support (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix cifs_query_path_info() for Windows NT servers (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix validation of SMB1 query reparse point response (Paulo Alcantara) [RHEL-96872]
  - cifs: Correctly set SMB1 SessionKey field in Session Setup Request (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode (Paulo Alcantara) [RHEL-96872]
  - smb: client: add NULL check in automount_fullpath (Paulo Alcantara) [RHEL-96872]
  - smb: client: Remove an unused function and variable (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix undifferentiation of DIO reads from unbuffered reads (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix wait/wake to be consistent about the waitqueue used (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix the request's work item to not require a ref (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix setting of transferred bytes with short DIO reads (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix oops in write-retry from mis-resetting the subreq iterator (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_RREQ_BLOCKED (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_RREQ_DONT_UNLOCK_FOLIOS (Paulo Alcantara) [RHEL-96872]
  - folio_queue: remove unused field `marks3` (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: declare field `proc_link` only if CONFIG_PROC_FS=y (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove `netfs_io_request.ractl` (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: reorder struct fields to eliminate holes (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused enum choice NETFS_READ_HOLE_CLEAR (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_ICTX_WRITETHROUGH (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused source NETFS_INVALID_WRITE (Paulo Alcantara) [RHEL-96872]
  - fs/netfs: remove unused flag NETFS_SREQ_SEEK_DATA_READ (Paulo Alcantara) [RHEL-96872]
  - lib/oid_registry.c: remove unused sprint_OID (Paulo Alcantara) [RHEL-96872]
  - netfs: Update main API document (Paulo Alcantara) [RHEL-96872]
  - smb: client: Reset all search buffer pointers when releasing buffer (Paulo Alcantara) [RHEL-96872]
  - smb: client: Fix use-after-free in cifs_fill_dirent (Paulo Alcantara) [RHEL-96872]
  - smb: client: fix zero rsize error messages (Paulo Alcantara) [RHEL-96872]
  - smb: client: fix memory leak during error handling for POSIX mkdir (Paulo Alcantara) [RHEL-96872]
  - smb: client: Avoid race in open_cached_dir with lease breaks (Paulo Alcantara) [RHEL-96872]
  - smb3 client: warn when parse contexts returns error on compounded operation (Paulo Alcantara) [RHEL-96872]
  - smb: client: ensure aligned IO sizes (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info() (Paulo Alcantara) [RHEL-96872]
  - smb: client: fix zero length for mkdir POSIX create context (Paulo Alcantara) [RHEL-96872]
  - Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-96872]
  - Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-96872]
  - smb3 client: fix open hardlink on deferred close file error (Paulo Alcantara) [RHEL-96872]
  - netfs: Only create /proc/fs/netfs with CONFIG_PROC_FS (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_dynroot_readdir() to not use the RCU read lock (Paulo Alcantara) [RHEL-96872]
  - smb3: Add defines for two new FileSystemAttributes (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix querying of WSL CHR and BLK reparse points over SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Split parse_reparse_point callback to functions: get buffer and parse buffer (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve handling of name surrogate reparse points in reparse.c (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove explicit handling of IO_REPARSE_TAG_MOUNT_POINT in inode.c (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix encoding of SMB1 Session Setup Kerberos Request in non-UNICODE mode (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix support for WSL-style symlinks (Paulo Alcantara) [RHEL-96872]
  - smb311 client: fix missing tcon check when mounting with linux/posix extensions (Paulo Alcantara) [RHEL-96872]
  - cifs: Ensure that all non-client-specific reparse points are processed by the server (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - cifs: Implement is_network_name_deleted for SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove cifs_truncate_page() as it should be superfluous (Paulo Alcantara) [RHEL-96872]
  - cifs: Do not add FILE_READ_ATTRIBUTES when using GENERIC_READ/EXECUTE/ALL (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve SMB2+ stat() to work also without FILE_READ_ATTRIBUTES (Paulo Alcantara) [RHEL-96872]
  - cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix querying and creating MF symlinks over SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix access_flags_to_smbopen_mode (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix negotiate retry functionality (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve handling of NetBIOS packets (Paulo Alcantara) [RHEL-96872]
  - cifs: Allow to disable or force initialization of NetBIOS session (Paulo Alcantara) [RHEL-96872]
  - cifs: Add a new xattr system.smb3_ntsd_owner for getting or setting owner (Paulo Alcantara) [RHEL-96872]
  - cifs: Add a new xattr system.smb3_ntsd_sacl for getting or setting SACLs (Paulo Alcantara) [RHEL-96872]
  - smb: client: Update IO sizes after reconnection (Paulo Alcantara) [RHEL-96872]
  - smb: client: Store original IO parameters and prevent zero IO sizes (Paulo Alcantara) [RHEL-96872]
  - smb:client: smb: client: Add reverse mapping from tcon to superblocks (Paulo Alcantara) [RHEL-96872]
  - cifs: remove unreachable code in cifs_get_tcp_session() (Paulo Alcantara) [RHEL-96872]
  - cifs: fix integer overflow in match_server() (Paulo Alcantara) [RHEL-96872]
  - cifs: Add new mount option -o nounicode to disable SMB1 UNICODE mode (Paulo Alcantara) [RHEL-96872]
  - cifs: Set default Netbios RFC1001 server name to hostname in UNC (Paulo Alcantara) [RHEL-96872]
  - smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-96872]
  - cifs: add validation check for the fields in smb_aces (Paulo Alcantara) [RHEL-96872]
  - CIFS: Propagate min offload along with other parameters from primary to secondary channels. (Paulo Alcantara) [RHEL-96872]
  - cifs: Improve establishing SMB connection with NetBIOS session (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix establishing NetBIOS session for SMB2+ connection (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix getting DACL-only xattr system.cifs_acl and system.smb3_acl (Paulo Alcantara) [RHEL-96872]
  - cifs: Check if server supports reparse points before using them (Paulo Alcantara) [RHEL-96872]
  - cifs: avoid NULL pointer dereference in dbg call (Paulo Alcantara) [RHEL-96872]
  - smb: client: Remove redundant check in smb2_is_path_accessible() (Paulo Alcantara) [RHEL-96872]
  - smb: client: Remove redundant check in cifs_oplock_break() (Paulo Alcantara) [RHEL-96872]
  - smb: mark the new channel addition log as informational log with cifs_info (Paulo Alcantara) [RHEL-96872]
  - smb: minor cleanup to remove unused function declaration (Paulo Alcantara) [RHEL-96872]
  - mm/folio_queue: delete __folio_order and use folio_order directly (Paulo Alcantara) [RHEL-96872]
  - afs: Simplify cell record handling (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_server ref accounting (Paulo Alcantara) [RHEL-96872]
  - afs: Use the per-peer app data provided by rxrpc (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Allow the app to store private data on peer structs (Paulo Alcantara) [RHEL-96872]
  - afs: Drop the net parameter from afs_unuse_cell() (Paulo Alcantara) [RHEL-96872]
  - afs: Make afs_lookup_cell() take a trace note (Paulo Alcantara) [RHEL-96872]
  - afs: Improve server refcount/active count tracing (Paulo Alcantara) [RHEL-96872]
  - afs: Improve afs_volume tracing to display a debug ID (Paulo Alcantara) [RHEL-96872]
  - afs: Change dynroot to create contents on demand (Paulo Alcantara) [RHEL-96872]
  - afs: Remove the "autocell" mount option (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix rolling_buffer_load_from_ra() to not clear mark bits (Paulo Alcantara) [RHEL-96872]
  - netfs: Call `invalidate_cache` only if implemented (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix collection of results during pause when collection offloaded (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_atcell_get_link() to check if ws_cell is unset first (Paulo Alcantara) [RHEL-96872]
  - smb: client: Fix match_session bug preventing session reuse (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix integer overflow while processing actimeo mount option (Paulo Alcantara) [RHEL-96872]
  - afs: Fix afs_atcell_get_link() to handle RCU pathwalk (Paulo Alcantara) [RHEL-96872]
  - cifs: fix incorrect validation for num_aces field of smb_acl (Paulo Alcantara) [RHEL-96872]
  - smb: common: change the data type of num_aces to le16 (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix the smb1 readv callback to correctly call netfs (Paulo Alcantara) [RHEL-96872]
  - afs: Give an afs_server object a ref on the afs_cell object it points to (Paulo Alcantara) [RHEL-96872]
  - afs: Fix the server_list to unuse a displaced server rather than putting it (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix locking issues with the peer record hash (Paulo Alcantara) [RHEL-96872]
  - rxrpc: peer->mtu_lock is redundant (Paulo Alcantara) [RHEL-96872]
  - rxrpc: rxperf: Fix missing decoding of terminal magic cookie (Paulo Alcantara) [RHEL-96872]
  - cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes (Paulo Alcantara) [RHEL-96872]
  - cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point() (Paulo Alcantara) [RHEL-96872]
  - smb311: failure to open files of length 1040 when mounting with SMB3.1.1 POSIX extensions (Paulo Alcantara) [RHEL-96872]
  - smb: client, common: Avoid multiple -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix ipv6 path MTU discovery (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix setting NETFS_RREQ_ALL_QUEUED to be after all subreqs queued (Paulo Alcantara) [RHEL-96872]
  - netfs: Add retry stat counters (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix a number of read-retry hangs (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix alteration of headers whilst zerocopy pending (Paulo Alcantara) [RHEL-96872]
  - cifs: pick channels for individual subrequests (Paulo Alcantara) [RHEL-96872]
  - smb: client: change lease epoch type from unsigned int to __u16 (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix race in call state changing vs recvmsg() (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix call state set to not include the SERVER_SECURING state (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix the rxrpc_connection attend queue handling (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix parsing native symlinks directory/file type (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - cifs: Add support for creating WSL-style symlinks (Paulo Alcantara) [RHEL-96872]
  - smb3: add support for IAKerb (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix struct FILE_ALL_INFO (Paulo Alcantara) [RHEL-96872]
  - cifs: Add support for creating NFS-style symlinks (Paulo Alcantara) [RHEL-96872]
  - cifs: Add support for creating native Windows sockets (Paulo Alcantara) [RHEL-96872]
  - cifs: Add mount option -o reparse=none (Paulo Alcantara) [RHEL-96872]
  - cifs: Add mount option -o symlink= for choosing symlink create type (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix creating and resolving absolute NT-style symlinks (Paulo Alcantara) [RHEL-96872]
  - cifs: Simplify reparse point check in cifs_query_path_info() function (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove symlink member from cifs_open_info_data union (Paulo Alcantara) [RHEL-96872]
  - cifs: Update description about ACL permissions (Paulo Alcantara) [RHEL-96872]
  - cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove struct reparse_posix_data from struct cifs_open_info_data (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove unicode parameter from parse_reparse_point() function (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix getting and setting SACLs over SMB1 (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove intermediate object of failed create SFU call (Paulo Alcantara) [RHEL-96872]
  - cifs: Validate EAs for WSL reparse points (Paulo Alcantara) [RHEL-96872]
  - cifs: Change translation of STATUS_PRIVILEGE_NOT_HELD to -EPERM (Paulo Alcantara) [RHEL-96872]
  - cifs: Change translation of STATUS_NOT_A_REPARSE_POINT to -ENODATA (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE (Paulo Alcantara) [RHEL-96872]
  - cifs: Do not attempt to call CIFSGetSrvInodeNumber() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-96872]
  - cifs: Do not attempt to call CIFSSMBRenameOpenFile() without CAP_INFOLEVEL_PASSTHRU (Paulo Alcantara) [RHEL-96872]
  - cifs: Remove declaration of dead CIFSSMBQuerySymLink function (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix printing Status code into dmesg (Paulo Alcantara) [RHEL-96872]
  - cifs: Add missing NT_STATUS_* codes from nterr.h to nterr.c (Paulo Alcantara) [RHEL-96872]
  - cifs: Fix endian types in struct rfc1002_session_packet (Paulo Alcantara) [RHEL-96872]
  - afs: Make /afs/@cell and /afs/.@cell symlinks (Paulo Alcantara) [RHEL-96872]
  - afs: Add rootcell checks (Paulo Alcantara) [RHEL-96872]
  - afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints (Paulo Alcantara) [RHEL-96872]
  - netfs: Report on NULL folioq in netfs_writeback_unlock_folios() (Paulo Alcantara) [RHEL-96872]
  - afs: Add a tracepoint for afs_read_receive() (Paulo Alcantara) [RHEL-96872]
  - afs: Locally initialise the contents of a new symlink on creation (Paulo Alcantara) [RHEL-96872]
  - afs: Use the contained hashtable to search a directory (Paulo Alcantara) [RHEL-96872]
  - afs: Make afs_mkdir() locally initialise a new directory's content (Paulo Alcantara) [RHEL-96872]
  - netfs: Change the read result collector to only use one work item (Paulo Alcantara) [RHEL-96872]
  - afs: Make {Y,}FS.FetchData an asynchronous operation (Paulo Alcantara) [RHEL-96872]
  - afs: Eliminate afs_read (Paulo Alcantara) [RHEL-96872]
  - afs: Use netfslib for symlinks, allowing them to be cached (Paulo Alcantara) [RHEL-96872]
  - afs: Use netfslib for directories (Paulo Alcantara) [RHEL-96872]
  - afs: Make afs_init_request() get a key if not given a file (Paulo Alcantara) [RHEL-96872]
  - netfs: Add support for caching single monolithic objects such as AFS dirs (Paulo Alcantara) [RHEL-96872]
  - netfs: Add functions to build/clean a buffer in a folio_queue (Paulo Alcantara) [RHEL-96872]
  - afs: Add more tracepoints to do with tracking validity (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Add auxiliary data trace (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Add some subrequest tracepoints (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove some extraneous directory invalidations (Paulo Alcantara) [RHEL-96872]
  - afs: Don't use mutex for I/O operation lock (Paulo Alcantara) [RHEL-96872]
  - netfs: Don't use bh spinlock (Paulo Alcantara) [RHEL-96872]
  - netfs: Drop the was_async arg from netfs_read_subreq_terminated() (Paulo Alcantara) [RHEL-96872]
  - netfs: Drop the error arg from netfs_read_subreq_terminated() (Paulo Alcantara) [RHEL-96872]
  - netfs: Split retry code out of fs/netfs/write_collect.c (Paulo Alcantara) [RHEL-96872]
  - netfs: Make netfs_advance_write() return size_t (Paulo Alcantara) [RHEL-96872]
  - netfs: Abstract out a rolling folio buffer implementation (Paulo Alcantara) [RHEL-96872]
  - netfs: Add a tracepoint to log the lifespan of folio_queue structs (Paulo Alcantara) [RHEL-96872]
  - netfs: Use a folio_queue allocation and free functions (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Clean up some whitespace in trace header (Paulo Alcantara) [RHEL-96872]
  - netfs: Clean up some whitespace in trace header (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix ability to add more data to a call once MSG_MORE deasserted (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Implement RACK/TLP to deal with transmission stalls [RFC8985] (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix request for an ACK when cwnd is minimum (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Manage RTT per-call rather than per-peer (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a reason indicator to the tx_ack tracepoint (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a reason indicator to the tx_data tracepoint (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Tidy up the ACK parsing a bit (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use irq-disabling spinlocks between app and I/O thread (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't allocate a txbuf for an ACK transmission (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Send jumbo DATA packets (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix initial resend timeout (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix the calculation and use of RTO (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Display userStatus in rxrpc_rx_ack trace (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Adjust the rxrpc_rtt_rx tracepoint (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Generate rtt_min (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't use received skbuff timestamps (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Store the DATA serial in the txqueue and use this in RTT calc (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use the new rxrpc_tx_queue struct to more efficiently process ACKs (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Adjust names and types of congestion-related fields (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Display stats about jumbo packets transmitted and received (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Replace call->acks_first_seq with tracking of the hard ACK point (Paulo Alcantara) [RHEL-96872]
  - rxrpc: call->acks_hard_ack is now the same call->tx_bottom, so remove it (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Implement progressive transmission queue struct (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Timestamp DATA packets before transmitting them (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Only set DF=1 on initial DATA transmission (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix injection of packet loss (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix CPU time starvation in I/O thread (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a tracepoint to show variables pertinent to jumbo packet size (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Prepare to be able to send jumbo DATA packets (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Separate the packet length from the data length in rxrpc_txbuf (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Implement path-MTU probing using padded PING ACKs (RFC8899) (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use a large kvec[] in rxrpc_local rather than every rxrpc_txbuf (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Request an ACK on impending Tx stall (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Show stats counter for received reason-0 ACKs (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Don't set the MORE-PACKETS rxrpc wire header flag (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Clean up Tx header flags generation handling (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Use umin() and umax() rather than min_t()/max_t() where possible (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Fix handling of received connection abort (Paulo Alcantara) [RHEL-96872]
  - ktime: Add us_to_ktime() (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix read-retry for fs with no ->prepare_read() (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix kernel async DIO (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix is-caching check in read-retry (Paulo Alcantara) [RHEL-96872]
  - netfs: Work around recursion by abandoning retry if nothing read (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix missing barriers by using clear_and_wake_up_bit() (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove redundant use of smp_rmb() (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Parse the "secctx" immediately (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix enomem handling in buffered reads (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix non-contiguous donation between completed reads (Paulo Alcantara) [RHEL-96872]
  - cifs: update internal version number (Paulo Alcantara) [RHEL-96872]
  - fscache: Remove duplicate included header (Paulo Alcantara) [RHEL-96872]
  - rxrpc: Add a tracepoint for aborts being proposed (Paulo Alcantara) [RHEL-96872]
  - netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Fix NULL pointer dereference in object->file (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Clean up in cachefiles_commit_tmpfile() (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Fix missing pos updates in cachefiles_ondemand_fd_write_iter() (Paulo Alcantara) [RHEL-96872]
  - cachefiles: Fix incorrect length return value in cachefiles_ondemand_fd_write_iter() (Paulo Alcantara) [RHEL-96872]
  - convert cifs_ioctl_copychunk() (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove unnecessary references to pages (Paulo Alcantara) [RHEL-96872]
  - netfs: Fix a few minor bugs in netfs_page_mkwrite() (Paulo Alcantara) [RHEL-96872]
  - netfs: Remove call to folio_index() (Paulo Alcantara) [RHEL-96872]
  - mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_acl_bloom_filter: Workaround for some LLVM versions (Ivan Vecera) [RHEL-94570]
  - selftests: vxlan_bridge: Test flood with unresolved FDB entry (Ivan Vecera) [RHEL-94570]
  - mlxsw: Add VXLAN bridge ports to same hardware domain as physical bridge ports (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_switchdev: Move mlxsw_sp_bridge_vxlan_join() (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_switchdev: Add an internal API for VXLAN leave (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum: Call mlxsw_sp_bridge_vxlan_{join, leave}() for VLAN-aware bridge (Ivan Vecera) [RHEL-94570]
  - mlxsw: Trap ARP packets at layer 2 instead of layer 3 (Ivan Vecera) [RHEL-94570]
  - mlxsw: Add return value check for mlxsw_sp_port_get_stats_raw() (Ivan Vecera) [RHEL-94570]
  - mlxsw: Enable Tx checksum offload (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_router: Remove unused functions (Ivan Vecera) [RHEL-94570]
  - mlxsw: Do not store Tx header length as driver parameter (Ivan Vecera) [RHEL-94570]
  - mlxsw: Move Tx header handling to PCI driver (Ivan Vecera) [RHEL-94570]
  - mlxsw: Define Tx header fields in txheader.h (Ivan Vecera) [RHEL-94570]
  - mlxsw: Initialize txhdr_info according to PTP operations (Ivan Vecera) [RHEL-94570]
  - mlxsw: Add mlxsw_txhdr_info structure (Ivan Vecera) [RHEL-94570]
  - net/mlxfw: Drop hard coded max FW flash image size (Ivan Vecera) [RHEL-94570]
  - mlxsw: Switch to napi_gro_receive() (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_flower: Do not allow mixing sample and mirror actions (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sharedbuffer: Ensure no extra packets are counted (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sharedbuffer: Remove duplicate test cases (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sharedbuffer: Remove h1 ingress test case (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_acl_flex_keys: Use correct key block on Spectrum-4 (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: devlink_trap_police: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: qos_max_descriptors: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: qos_ets_strict: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: qos_mc_aware: Use defer for test cleanup (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Lower TBF rate (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Send more packets for drop tests (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Sleep before querying queue depth (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_core: Increase backlog size tolerance (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: sch_red_ets: Increase required backlog (Ivan Vecera) [RHEL-94570]
  - mlxsw: spectrum_acl_flex_keys: Constify struct mlxsw_afk_element_inst (Ivan Vecera) [RHEL-94570]
  - selftests: mlxsw: rtnetlink: Use devlink_reload() API (Ivan Vecera) [RHEL-94570]
  - x86/its: Fix an ifdef typo in its_alloc() (Waiman Long) [RHEL-91960]
  - Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-91960]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-91960]
  - x86/its: explicitly manage permissions for ITS pages (Waiman Long) [RHEL-91960]
  - x86/its: move its_pages array to struct mod_arch_specific (Waiman Long) [RHEL-91960]
  - x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-91960]
  - x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-91960]
  - tools headers x86 cpufeatures: Sync with the kernel sources to pick ZEN6 and Indirect Target Selection (ITS) bits (Waiman Long) [RHEL-91960]
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-91960]
  - x86/its: Fix build errors when CONFIG_MODULES=n (Waiman Long) [RHEL-91960]
  - arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-91960]
  - arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-91960] {CVE-2025-37963}
  - arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-91960] {CVE-2025-37948}
  - arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-91960]
  - arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-91960]
  - arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-91960]
  - redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-91960]
  - selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Use dynamic thunks for indirect branches (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-91960 RHEL-92176] {CVE-2024-28956}
  - x86/bhi: Do not set BHI_DIS_S in 32-bit mode (Waiman Long) [RHEL-91960]
  - x86/bpf: Add IBHF call at end of classic BPF (Waiman Long) [RHEL-91960]
  - x86/bpf: Call branch history clearing sequence on exit (Waiman Long) [RHEL-91960]
  - x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-91960]
  - x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-91960]
  - x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-91960]
  - x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-91960]
  - x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-91960]
  - x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-91960]
  - x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-91960]
  - x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-91960]
  - x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-91960]
  - x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-91960]
  - x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-91960]
  - x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-91960]
  - x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-91960]
  - x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-91960]
  - arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-91960]
  - arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-91960]
  - x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-91960]
  - x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-91960]
  - x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-91960]
  - x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-91960]
  - x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-91960]
  - module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-91960]
  - x86: re-enable EXECMEM_ROX support (Waiman Long) [RHEL-91960]
  - module: drop unused module_writable_address() (Waiman Long) [RHEL-91960]
  - Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-91960]
  - module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-91960]
  - execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-91960]
  - execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-91960]
  - x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-91960]
  - x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-91960]
  - x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-91960]
  - Enable the gs_usb CAN bus driver in RHEL (Radu Rendec) [RHEL-90131]
  - iommu/vt-d: Assign devtlb cache tag on ATS enablement (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Restore context entry setup order for aliased devices (Jerry Snitselaar) [RHEL-89891]
  - iommu: remove duplicate selection of DMAR_TABLE (Jerry Snitselaar) [RHEL-89891]
  - iommu/io-pgtable-arm: dynamically allocate selftest device struct (Jerry Snitselaar) [RHEL-89891]
  - iommu: Allow attaching static domains in iommu_attach_device_pasid() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Protect against overflow in iommu_pgsize() (Jerry Snitselaar) [RHEL-89891]
  - dma-mapping: fix missing clear bdr in check_ram_in_range_map() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Skip PASID validation for devices without PASID capability (Jerry Snitselaar) [RHEL-95265]
  - iommu: ipmmu-vmsa: avoid Wformat-security warning (Jerry Snitselaar) [RHEL-89891]
  - iommu: Handle yet another race around registration (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fix incorrect return in arm_smmu_attach_dev (Jerry Snitselaar) [RHEL-89891]
  - platform: Fix race condition during DMA configure at IOMMU probe time (Jerry Snitselaar) [RHEL-89891]
  - software node: Prevent link creation failure from causing kobj reference count imbalance (Jerry Snitselaar) [RHEL-73600]
  - PCI: Run quirk_huawei_pcie_sva() before arm_smmu_probe_device() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Revert ATS timing change to fix boot failure (Jerry Snitselaar) [RHEL-89891]
  - iommu: Fix two issues in iommu_copy_struct_from_user() (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fail aliasing StreamIDs more gracefully (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Jerry Snitselaar) [RHEL-89891]
  - iommu/arm-smmu-v3: Fix pgsize_bit for sva domains (Jerry Snitselaar) [RHEL-89891 RHEL-92494]
  - iommu/arm-smmu-v3: Add missing S2FWB feature detection (Jerry Snitselaar) [RHEL-89891]
  - dma-coherent: Warn if OF reserved memory is beyond current coherent DMA mask (Jerry Snitselaar) [RHEL-89891]
  - dma-mapping: Fix warning reported for missing prototype (Jerry Snitselaar) [RHEL-89891]
  - dma-mapping: avoid potential unused data compilation warning (Jerry Snitselaar) [RHEL-89891]
  - dma/mapping.c: dev_dbg support for dma_addressing_limited (Jerry Snitselaar) [RHEL-89891]
  - dma/contiguous: avoid warning about unused size_bytes (Jerry Snitselaar) [RHEL-89891]
  - iommu/tegra241-cmdqv: Fix warnings due to dmam_free_coherent() (Jerry Snitselaar) [RHEL-89891]
  - iommu: remove unneeded semicolon (Jerry Snitselaar) [RHEL-89891]
  - iommu/ipmmu-vmsa: Register in a sensible order (Jerry Snitselaar) [RHEL-89891]
  - iommu: Clear iommu-dma ops on cleanup (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Remove an unnecessary call set_dma_ops() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Wire up irq_ack() to irq_move_irq() for posted MSIs (Jerry Snitselaar) [RHEL-89891]
  - iommu: Fix crash in report_iommu_fault() (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Test attach before detaching pasid (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Fix iommu_vevent_header tables markup (Jerry Snitselaar) [RHEL-89891]
  - iommu: Convert unreachable() to BUG() (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Balance veventq->num_events inc/dec (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Initialize the flags of vevent in iommufd_viommu_report_event() (Jerry Snitselaar) [RHEL-73596]
  - vfio: VFIO_DEVICE_[AT|DE]TACH_IOMMUFD_PT support pasid (Jerry Snitselaar) [RHEL-73603]
  - vfio-iommufd: Support pasid [at|de]tach for physical VFIO devices (Jerry Snitselaar) [RHEL-73603]
  - ida: Add ida_find_first_range() (Jerry Snitselaar) [RHEL-73603]
  - iommufd/selftest: Add coverage for reporting max_pasid_log2 via IOMMU_HW_INFO (Jerry Snitselaar) [RHEL-73603]
  - iommufd: Extend IOMMU_GET_HW_INFO to report PASID capability (Jerry Snitselaar) [RHEL-73603]
  - iommufd/selftest: Add coverage for iommufd pasid attach/detach (Jerry Snitselaar) [RHEL-73600]
  - iommufd/selftest: Add test ops to test pasid attach/detach (Jerry Snitselaar) [RHEL-73600]
  - iommufd/selftest: Add a helper to get test device (Jerry Snitselaar) [RHEL-73600]
  - iommufd/selftest: Add set_dev_pasid in mock iommu (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Allow allocating PASID-compatible domain (Jerry Snitselaar) [RHEL-73600]
  - iommu/vt-d: Add IOMMU_HWPT_ALLOC_PASID support (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Enforce PASID-compatible domain for RID (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Support pasid attach/replace (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Enforce PASID-compatible domain in PASID path (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Add pasid_attach array to track per-PASID attach (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Replace device_list with device_array (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Wrap igroup->hwpt and igroup->device_list into attach struct (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Add helper to detect the first attach of a group (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Replace idev->igroup with local variable (Jerry Snitselaar) [RHEL-73600]
  - iommufd/device: Only add reserved_iova in non-pasid path (Jerry Snitselaar) [RHEL-73600]
  - iommufd: Pass @pasid through the device attach/replace path (Jerry Snitselaar) [RHEL-73600]
  - iommu: Introduce a replace API for device pasid (Jerry Snitselaar) [RHEL-73600]
  - iommu: Require passing new handles to APIs supporting handle (Jerry Snitselaar) [RHEL-73600]
  - iommu: Drop sw_msi from iommu_domain (Jerry Snitselaar) [RHEL-88960]
  - iommufd: Move iommufd_sw_msi and related functions to driver.c (Jerry Snitselaar) [RHEL-88960]
  - iommu/dma: Remove redundant locking (Jerry Snitselaar) [RHEL-89891]
  - iommu: Sort out domain user data (Jerry Snitselaar) [RHEL-88960]
  - iommu/arm-smmu-v3: Set MEV bit in nested STE for DoS mitigations (Jerry Snitselaar) [RHEL-73596]
  - iommu/arm-smmu-v3: Report events that belong to devices attached to vIOMMU (Jerry Snitselaar) [RHEL-73596]
  - iommu/arm-smmu-v3: Introduce struct arm_smmu_vmaster (Jerry Snitselaar) [RHEL-73596]
  - Documentation: userspace-api: iommufd: Update FAULT and VEVENTQ (Jerry Snitselaar) [RHEL-73596]
  - iommufd/selftest: Add IOMMU_VEVENTQ_ALLOC test coverage (Jerry Snitselaar) [RHEL-73596]
  - iommufd/selftest: Add IOMMU_TEST_OP_TRIGGER_VEVENT for vEVENTQ coverage (Jerry Snitselaar) [RHEL-73596]
  - iommufd/selftest: Require vdev_id when attaching to a nested domain (Jerry Snitselaar) [RHEL-73596]
  - iommufd/viommu: Add iommufd_viommu_report_event helper (Jerry Snitselaar) [RHEL-73596]
  - iommufd/viommu: Add iommufd_viommu_get_vdev_id helper (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Add IOMMUFD_OBJ_VEVENTQ and IOMMUFD_CMD_VEVENTQ_ALLOC (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Rename fault.c to eventq.c (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Abstract an iommufd_eventq from iommufd_fault (Jerry Snitselaar) [RHEL-73596]
  - iommufd/fault: Add an iommufd_fault_init() helper (Jerry Snitselaar) [RHEL-73596]
  - iommufd/fault: Move two fault functions out of the header (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Fail replace if device has not been attached (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Set domain->iommufd_hwpt in all hwpt->domain allocators (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Fix uninitialized rc in iommufd_access_rw() (Jerry Snitselaar) [RHEL-73596]
  - iommufd: Disallow allocating nested parent domain with fault ID (Jerry Snitselaar) [RHEL-73596]
  - iommu/amd: Consolidate protection domain free code (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Remove unused forward declaration (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Remove outdated comment (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd/pgtbl_v2: Improve error handling (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Remove unused variable (Jerry Snitselaar) [RHEL-89891]
  - iommu/amd: Log IOMMU control register in event log path (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Don't clobber posted vCPU IRTE when host IRQ affinity changes (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Put IRTE back into posted MSI mode if vCPU posting is disabled (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Cleanup intel_context_flush_present() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Move PRI enablement in probe path (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Move scalable mode ATS enablement to probe path (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Check if SVA is supported when attaching the SVA domain (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Use virt_to_phys() (Jerry Snitselaar) [RHEL-89891]
  - iommu/vt-d: Fix system hang on reboot -f (Jerry Snitselaar) [RHEL-89891]
  - iommu: Don't warn prematurely about dodgy probes (Jerry Snitselaar) [RHEL-89891]
  - iommu: Get DT/ACPI parsing into the proper probe path (Jerry Snitselaar) [RHEL-89891]
  - iommu: Keep dev->iommu state consistent (Jerry Snitselaar) [RHEL-89891]
  - iommu: Resolve ops in iommu_init_device() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Handle race with default domain setup (Jerry Snitselaar) [RHEL-89891]
  - iommu: Unexport iommu_fwspec_free() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Swap the order of setting group->pasid_array and calling attach op of iommu drivers (Jerry Snitselaar) [RHEL-89891]
  - iommu: Store either domain or handle in group->pasid_array (Jerry Snitselaar) [RHEL-89891]
  - iommu: Drop iommu_group_replace_domain() (Jerry Snitselaar) [RHEL-89891]
  - iommu: Make @handle mandatory in iommu_{attach|replace}_group_handle() (Jerry Snitselaar) [RHEL-89891]
  - iommufd: Implement sw_msi support natively (Jerry Snitselaar) [RHEL-73588]
  - iommu: Turn fault_data to iommufd private pointer (Jerry Snitselaar) [RHEL-73588]
  - irqchip: Have CONFIG_IRQ_MSI_IOMMU be selected by irqchips that need it (Jerry Snitselaar) [RHEL-73588]
  - iommu: Make iommu_dma_prepare_msi() into a generic operation (Jerry Snitselaar) [RHEL-73588]
  - genirq/msi: Refactor iommu_dma_compose_msi_msg() (Jerry Snitselaar) [RHEL-73588]
  - genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie (Jerry Snitselaar) [RHEL-73588]
  - iommufd/fault: Remove iommufd_fault_domain_attach/detach/replace_dev() (Jerry Snitselaar) [RHEL-88959]
  - iommufd: Make attach_handle generic than fault specific (Jerry Snitselaar) [RHEL-88959]
  - iommu/arm-smmu: Set rpm auto_suspend once during probe (Jerry Snitselaar) [RHEL-89891]
  - redhat/configs: Enable early lockdown for Arm (Mark Salter) [RHEL-82437]
  - arm64: add early lockdown for secure boot (Mark Salter) [RHEL-82437]
  - efi: pass secure boot mode to kernel proper (Mark Salter) [RHEL-82437]


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4 tarball
  - Drop patches
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch and
    0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
  - Enable build with support for BTF
  - Added BuildRequires: libbpf-devel
  - Support soname bumped to libabigail.so.3.0.0


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Fix sourceware.org/PR31045
    "Don't try setting translation unit for unique types"
    Apply patch
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch.
    That patch is applied in upstream mainline and will be available in
    libabigail 2.5.
  - Use %autosetup instead of the previous %setup and %patch macros.
  - Add git as a build requirement


author: Dodji Seketeli <dodji@redhat.com> - 2.4-3
changelog:
  - Fix sourceware.org/PR31017
    "Support Flex array conversion suppression"
    Apply patch 0002-suppression-Add-has_strict_flexible_array_data_membe.patch


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.11-1
changelog:
  - Rebase to libguestfs 1.55.11
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.12-1
changelog:
  - Rebase to libguestfs 1.55.12
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.13-2
changelog:
  - Rebase to libguestfs 1.55.12
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.55.8-1
changelog:
  - Rebase to libguestfs 1.55.8
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.0-1.el10.1
changelog:
  - Rebase to libguestfs 1.56.0
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.25-1
changelog:
  - New upstream release
  - Fix PMTUd issues
  - Update docs and upstream URLs
  - Fix spec file for test suite build conditional
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-1
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Phil Sutter <psutter@redhat.com> - 1.2.6-1
changelog:
  - Drop outdated libnftables provides, it might clash with the new
    nftables-provided libnftables at some point in future
  - Backport one late fix from upstream
  - new version 1.2.6


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61752)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61752)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61752)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61752)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61752)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68065)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-70627)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-70627)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74040)
  - storage_file: de-modularize the local file backend (RHEL-73506)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73506)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75589)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-74492)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-76802)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-76802)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-76802)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-76802)
  - qemuProcessHandleIOError: Rename local variables (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-76802)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-76802)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-76802)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-76802)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-76802)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-76802)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-76802)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-76802)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-76802)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-76802)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-78186)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-78186)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-78186)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-78353)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-78353)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-78353)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-1071)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-1071)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-78398)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-78398)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-78398)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-78398)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-78398)
  - conf: change virDomainHostdevInsert() to return void (RHEL-77086)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-77086)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-77086)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-77086)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-77086)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-77086)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-77086)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-77086)
  - qemu: complete vhostuser + passt support (RHEL-77086)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-77086)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-77086)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-77086)
  - utils: Canonicalize paths before comparing them (RHEL-79165)


author: Jiri Denemark <jdenemar@redhat.com> - 11.1.0-1
changelog:
  - Rebased to libvirt-11.1.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7041, RHEL-7042, RHEL-7104, RHEL-7342, RHEL-20294
      RHEL-41264, RHEL-52493, RHEL-58933, RHEL-70656, RHEL-71042
      RHEL-71810, RHEL-72021, RHEL-72052, RHEL-72192, RHEL-72994
      RHEL-79088, RHEL-79460, RHEL-79465, RHEL-79953


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-3
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-4
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.2-8
changelog:
  - Rebase to nbdkit 1.42.2
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
    resolves: RHEL-78830
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819


author: Richard W.M. Jones <rjones@redhat.com> - 1.42.5-1
changelog:
  - Rebase to nbdkit 1.42.5
    resolves: RHEL-78830
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-time-limit-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-58996, update to 3.24.0
  - Resolves: RHEL-39004, provide opencryptoki CCA Token also on x86_64 and ppc64le
  - Resolves: RHEL-43675, openCryptoki cca token RSA OAEP v2.1 support
  - Resolves: RHEL-43674, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-43676, openCryptoki cca token SHA3 support
  - Resolves: RHEL-24036, support protected keys for extractable keys


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20220807.0-1
changelog:
  - Update to 20220807.0
    - If your applications rely on portability to Windows, see new documentation
      sections "argument-passing rules are program-specific" and "batch files"
      - This release fixes bugs in runs of Windows programs that use standard
        command line parsing rules
      - Runs of non-standard programs may require changes; notable non-standard
        programs include cmd.exe, cscript.exe, and Cygwin programs
    - Skip t/pty.t test on NetBSD too (GH#140)
    - Add strict/warnings
    - Follow Windows argument quoting rules (GH#142)
    - Allow win32_newlines.t to actually run (GH#146)
    - Make t/pty.t test pass on OpenBSD (GH#150)
    - Support Win32 commands having non-standard command line parsing rules
      (GH#148)
    - Support executing Win32 batch files
    - Add IPC::Run::Win32Process, for delivering non-standard command lines
    - Fix reporting of Win32::Process::Create() errors
    - On Windows, avoid hang when closing read end of pipe (GH#156)
    - Ignore known test failure on msys - t/windows_search_path.t (GH#155)
    - Avoid warning with IPCRUNDEBUG, in Windows spawned children
    - Use $^X, not 'perl', in tests
    - Thanks to the new active developer: Noah Misch!


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.128-1
changelog:
  - Update to 0.128
    - Added 'mkdir' to replace 'mkpath', but returning the path object for
      chaining
    - The 'mkpath' method is deprecated in favor of 'mkdir'
    - Added 'has_same_bytes' to efficiently compare the contents of two files
    - Edited SYNOPSIS in the POD


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Paul Howarth <paul@city-fan.org> - 0.010-1
changelog:
  - Update to 0.010 (rhbz#2138013)
    - Re-release with updated ppport.h for 5.8.5 compatibility
  - Use SPDX-format license tag


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-4.el10.noarch macro
  - Update license to SPDX format


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.noarch macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.37-1
changelog:
  - Update to 0.37 (#2118006)
    - Allow duplicate warnings when using warnings_exist (GH#8)
  - Use author-independent source URL
  - Use SPDX license expression


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/5e3accd)
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - fixes "CVE-2025-27144 podman: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80610


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <mhroncok@redhat.com> - 1:7.2.6-2
changelog:
  - Weaken the runtime dependency on:
    - python3-sphinxcontrib-applehelp
    - python3-sphinxcontrib-devhelp
    - python3-sphinxcontrib-jsmath
    - python3-sphinxcontrib-htmlhelp
    - python3-sphinxcontrib-serializinghtml
    - python3-sphinxcontrib-qthelp
  - Packages that want to use them during build need to BuildRequire them explicitly


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0-3
changelog:
  - Fork python-flit-core from the python-flit package
  - Adjust the License tag to include flit_core/versionno.py's regex (BSD-2-Clause)


author: Karolina Surma <ksurma@redhat.com> - 1.4.1-5
changelog:
  - License verified according to the SPDX specification
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-66599 vault-add fails in FIPS mode
  - Resolves: RHEL-66598 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-66597 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66595 Sentences truncated in man pages
  - Resolves: RHEL-66592 IDP configuration in the IdM WebUI shows Organization is required
  - Resolves: RHEL-65650 ipa-server-install with setup-dns fails 'job for ipa.service failed because the control process exited with error code'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-69300 Support GSSAPI in Cockpit on IPA servers
  - Resolves: RHEL-68447 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-57674 Use RSNv3 and enable cert pruning by default in RHEL 10.0


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-70759 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70477 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-70253 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
  - Resolves: RHEL-69926 add support for python cryptography 44.0.0
  - Resolves: RHEL-69635 All user groups are not being included during HSM token validation


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking
  - Resolves: RHEL-71964 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file
  - Resolves: RHEL-71262 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67190 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-75658 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-74466 kinit with external idp user is failing


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-12
changelog:
  - Resolves: RHEL-72580 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-13
changelog:
  - Resolves: RHEL-67912 Add DNS over TLS Support, Require bind 32:9.18.33-2 and new bind-dyndb-ldap 11.11-1


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-78766 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-77965 ipa-server-install failing on slow hsm


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-84648 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)
  - Resolves: RHEL-84279 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-84275 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-81200 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-67686 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-67633 ipa-healthcheck has tests which call fips-mode-setup
  - Resolves: RHEL-4845 Protect *all* IPA service principals


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-88043 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86481 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-85788 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()
  - Resolves: RHEL-88899 [RFE] Add check on CA cert expiry for ipa-cert-fix


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-18
changelog:
  - Resolves: RHEL-89979 Support OpenSSL provider API
  - Resolves: RHEL-25007 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93484 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-89834 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-88833 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-79072 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-68803 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30825 IDM - When creating an ID range, should require a RID


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.1-1
changelog:
  - Update to 7.4.1
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-1-2023-09-02
  - Fixes: rhbz#2236995


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.2-1
changelog:
  - Update to 7.4.2
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-2-2023-09-07
  - Fixes: rhbz#2237942


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Christian Heimes <cheimes@redhat.com> - 1.7.0-1
changelog:
  - Update to 1.7.0, fixes rhbz#2233656
  - modernize packaging, upstream has remove setup.py
  - remove setup.cfg hacks for RHEL


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.25-1
changelog:
  - Update ktlshd policy to read /proc/keys and domain keyrings
  Resolves: RHEL-42672
  - Allow pcmsensor read nmi_watchdog state information
  Resolves: RHEL-52838
  - Support peer-to-peer migration of vms using ssh
  Resolves: RHEL-77351
  - Allow virt_domain read hardware state information unconditionally
  Resolves: RHEL-71270
  - Allow timemaster write to sysfs files
  Resolves: RHEL-44637
  - Allow virtqemud map svirt_image_t plain files
  Resolves: RHEL-40080
  - Allow virtqemud unmount a filesystem with extended attributes
  Resolves: RHEL-40080
  - Allow virtqemud work with nvdimm devices
  Resolves: RHEL-71656
  - Update virtqemud policy regarding the svirt_tcg_t domain
  Resolves: RHEL-71270
  - Allow virtqemud use hostdev usb devices conditionally
  Resolves: RHEL-74230
  - Support saving and restoring a VM to/from a block device
  Resolves: RHEL-76138
  - Allow virtnwfilterd dbus chat with firewalld
  Resolves: RHEL-76138
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-62763
  - Allow virtstoraged write to sysfs files
  Resolves: RHEL-44637
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-54019
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77114
  - Allow init mounton crypto sysctl files
  Resolves: RHEL-56250


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.26-1
changelog:
  - Rename winbind_rpcd_* types to samba_dcerpcd_*
  Resolves: RHEL-14759
  - Allow samba-dcerpcd work with ctdb cluster
  Resolves: RHEL-14759
  - Revert "Remove socket from unconfined_domain_type allow rule"
  Resolves: RHEL-77327
  - Dontaudit access of virt-related permissive domains
  Resolves: RHEL-77808
  - Add selinux_requires_min macro
  Resolves: RHEL-54715
  - Filter out EPEL related modules
  Resolves: RHEL-73505


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.27-1
changelog:
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-82120
  - Update afterburn file transition policy
  Resolves: RHEL-82120
  - Label /run/metadata with afterburn_runtime_t
  Resolves: RHEL-82120
  - Allow afterburn list ssh home directory
  Resolves: RHEL-82120
  - Confine tuned-ppd
  Resolves: RHEL-69450
  - Update ktls policy
  Resolves: RHEL-74424
  - Add the switcheroo module
  Resolves: RHEL-83267
  - Update switcheroo policy
  Resolves: RHEL-83267
  - Confine the switcheroo-control service
  Resolves: RHEL-83267


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.28-1
changelog:
  - Change path of tuned and tuned-ppd to /usr/sbin
  Resolves: RHEL-69450
  - Update the pcmsensor policy
  Resolves: RHEL-80452
  - Allow dovecot-deliver read mail aliases
  Resolves: RHEL-80153
  - Allow boothd connect to systemd-machined over a unix socket
  Resolves: RHEL-75471
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82299
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82299
  - Allow cifs.idmap helper to set attributes on kernel keys
  Resolves: RHEL-83921
  - Remove ktls from modules-filtered.lst
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.29-1
changelog:
  - Revert "Dontaudit access of virt-related permissive domains"
  Resolves: RHEL-79833
  - Remove permissive domains
  Resolves: RHEL-82672


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.30-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-87418
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-87372
  - Allow systemd-user-runtime-dir get/set tmpfs quotas
  Resolves: RHEL-86789
  - Allow systemd-user-runtime-dir delete gnome homedir content
  Resolves: RHEL-86789
  - Confine /usr/lib/systemd/systemd-user-runtime-dir
  Resolves: RHEL-86789
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-86528
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-86258
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-85849
  - Allow virt_domain write to virt_image_t files
  Resolves: RHEL-85319
  - Allow rhsmcertd connect to systemd-machined
  Resolves: RHEL-83925
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77779
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-77087
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-62185
  - Allow tlshd read network sysctls
  Resolves: RHEL-74424


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.31-1
changelog:
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-89804
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-87727
  - Allow syslogd watch syslog_conf_t directories
  Resolves: RHEL-87648
  - Allow networkmanager send a general signal to iptables
  Resolves: RHEL-86780
  - Define file equivalency for /var/etc
  Resolves: RHEL-86678
  - Update bootupd policy when ESP is not mounted
  Resolves: RHEL-86588
  - dontaudit execmem for modemmanager
  Resolves: RHEL-86176
  - Allow systemd create journal pid files
  Resolves: RHEL-72692
  - Allow virtqemud read/write/setattr input event devices
  Resolves: RHEL-46385


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.32-1
changelog:
  - Backport policy for additional systemd generators from rawhide
  Resolves: RHEL-36740
  - Allow login_userdomain create /run/tlog directory with user_tmp_t
  Resolves: RHEL-56344
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-86588


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.33-1
changelog:
  - Allow systemd_generator read files in /proc and /sys
  Resolves: RHEL-36740
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-54019
  - Allow utempter use terminal multiplexor
  Resolves: RHEL-56344
  - Allow virtqemud execute ovs-vsctl with a domain transition
  Resolves: RHEL-65322
  - Allow mptcpd the net_admin capability
  Resolves: RHEL-70730
  - Allow tomcat execute cracklib-check with a domain transition
  Resolves: RHEL-82090
  - Update the files_search_mnt() interface
  Resolves: RHEL-85178
  - Allow key.dns_resolve set attributes on the kernel key ring
  Resolves: RHEL-91602
  - Allow switcheroo-control dbus chat with xdm
  Resolves: RHEL-93535
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.34-1
changelog:
  - Allow systemd-coredump the sys_admin capability
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-97586
  - Allow systemd-coredumpd sys_admin and sys_resource capabilities
  Resolves: RHEL-97586
  - Allow systemd-coredump read nsfs files
  Resolves: RHEL-97586
  - Dontaudit systemd-coredump sys_admin capability
  Resolves: RHEL-97586
  - Allow svirt-tcg read init state
  Resolves: RHEL-95725
  - Allow virtqemud create and unlink files in /etc/libvirt/
  Resolves: RHEL-95725
  - Allow virtqemud send a generic signal to passt
  Resolves: RHEL-44994
  - Allow openvswitch ioctl vduse devices
  Resolves: RHEL-93041
  - Label /dev/vduse/control and /dev/vduse/NAME devices
  Resolves: RHEL-93041
  - Allow virtstoraged the sys_rawio capability
  Resolves: RHEL-44639
  - Allow virtstoraged fsetid capability
  Resolves: RHEL-44639
  - Allow virtqemud additional permissions on scsi generic chr files
  Resolves: RHEL-44628
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - Fix files_dontaudit_delete_all_files()
  Resolves: RHEL-86789
  - Allow virtnodedev create mdevctl config dirs
  Resolves: RHEL-98559
  - Allow cryptsetup-generator manage systemd unit files
  Resolves: RHEL-98656


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.35-1
changelog:
  - Remove duplicate summary header
  Related: RHEL-87742
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-54019
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87742
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87742
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87742


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.3-1
changelog:
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-104069
  - Allow virtqemud handle virt_content_t chr files
  Resolves: RHEL-76104
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-77047
  - All sblim-sfcbd the dac_read_search capability
  Resolves: RHEL-98287
  - Allow sblim domain read systemd session files
  Resolves: RHEL-98287
  - Allow sblim-sfcbd execute dnsdomainname
  Resolves: RHEL-98287
  - Allow systemd-importd create and unlink init pid socket
  Resolves: RHEL-98490


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Andreas Schneider <asn@redhat.com> - 1.3.4-1
changelog:
  - Update to version 1.3.4
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.3.4/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.3.0-2
changelog:
  - Switched from bcond to bcond_with for compatibility with el8 and el9
  - haproxy builddep on systems with haproxy2
  - Disable pcre2-jit only for fedora <= 37 on 32bit x86


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: José Expósito <jexposit@redhat.com> - 1.20.0-6
changelog:
  - Rebuilt to include the package in CRB. See:
    https://bugzilla.redhat.com/show_bug.cgi?id=2309121
    https://issues.redhat.com/browse/RHEL-57593
    https://issues.redhat.com/browse/ENGCMP-4434


