# changelog

author: Jan Stancek <jstancek@redhat.com> [5.14.0-590.el9]
changelog:
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87940] {CVE-2025-21963}
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-80165]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86504]
  - redhat: Add packing_test to mod-internal.list (Petr Oros) [RHEL-92666]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92666]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (Petr Oros) [RHEL-92666]
  - lib: packing: document recently added APIs (Petr Oros) [RHEL-92666]
  - lib: packing: add pack_fields() and unpack_fields() (Petr Oros) [RHEL-92666]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (Petr Oros) [RHEL-92666]
  - lib: packing: create __pack() and __unpack() variants without error checking (Petr Oros) [RHEL-92666]
  - lib: packing: use GENMASK() for box_mask (Petr Oros) [RHEL-92666]
  - lib: packing: use BITS_PER_BYTE instead of 8 (Petr Oros) [RHEL-92666]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (Petr Oros) [RHEL-92666]
  - lib: packing: add additional KUnit tests (Petr Oros) [RHEL-92666]
  - lib: packing: add KUnit tests adapted from selftests (Petr Oros) [RHEL-92666]
  - lib: packing: duplicate pack() and unpack() implementations (Petr Oros) [RHEL-92666]
  - lib: packing: add pack() and unpack() wrappers over packing() (Petr Oros) [RHEL-92666]
  - lib: packing: remove kernel-doc from header file (Petr Oros) [RHEL-92666]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (Petr Oros) [RHEL-92666]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (Petr Oros) [RHEL-92666]
  - lib: packing: remove MODULE_LICENSE in non-modules (Petr Oros) [RHEL-92666]
  - Documentation: core-api: packing: correct spelling (Petr Oros) [RHEL-92666]
  - lib: packing: replace bit_reverse() with bitrev8() (Petr Oros) [RHEL-92666]
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-92060]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use devres for remove as well (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Jaroslav Kysela) [RHEL-80682]
  - tools headers: Update the linux/unaligned.h copy with the kernel sources (Jaroslav Kysela) [RHEL-80682]
  - soundwire: take in count the bandwidth of a prepared stream (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Jaroslav Kysela) [RHEL-80682] {CVE-2025-39930}
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: separate DJM-A9 cap lvl options (Jaroslav Kysela) [RHEL-80682]
  - PCI: pci_ids: add INTEL_HDA_PTL_H (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: convert to SYSTEM_SLEEP_PM_OPS (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt722-sdca: add missing readable registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Fix maximum ADC Volume (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ops: Consistently treat platform_max as control value (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt1320: set wake_capable = 0 explicitly (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: update ALC222 depop optimize (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Add jack delay debounce after suspend (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usx2y: validate nrpacks module parameter on probe (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Avoid module auto-load handling at event delivery (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Remove (revert) duplicate Ally X config (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Prevent races when soft-resetting using SPI control (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Remove async regmap writes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: warn both sdw and pch dmic are used (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl: Rename stream name of SAI DAI driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: es8328: fix route from DAC to output (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Set the SDOUT polarity correctly (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Fix power control mask (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Drop UMP events when no UMP-conversion is set (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2770: Fix volume scale (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Reduce codec resume time (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Correct the full scale volume set logic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l41: Fix acpi_device_hid() not found (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add branch prediction hint in ACP IRQ handler (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Drop unused includes from Vangogh driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt713_vb_l2_rt1320_l13 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: hda-intel: add Panther Lake-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: pci-ptl: Add support for PTL-H (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel-dsp-config: Add PTL-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: drop a redundant code (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Jaroslav Kysela) [RHEL-80682] {CVE-2025-21870}
  - ASoC: cs35l41: Fallback to using HID for system_name if no SUB is available (Jaroslav Kysela) [RHEL-80682]
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils.c: add missing dlc->of_node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-tgl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add support for Fatcat board with BT offload enabled in PTL platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix headset detection failure due to unstable sort (Jaroslav Kysela) [RHEL-80682]
  - ALSA: pcm: use new array-copying-wrapper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codec: es8316: "DAC Soft Ramp Rate" is just a 2 bit control (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: acp: Fix possible deadlock (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: SND_SIU_MIGOR should depend on DMADEVICES (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Jaroslav Kysela) [RHEL-80682]
  - ASoC: da7213: Initialize the mutex (Jaroslav Kysela) [RHEL-80682]
  - ASoC: use to_platform_device() instead of container_of() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: acp: Support microphone from Lenovo Go S (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: Add entry for new 8M Plus revision (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8: Add entries for new 8QM and 8QXP revisions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx: Add mach entry to select cs42888 topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: select CONFIG_DMA_SHARED_BUFFER (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: add SAI2,5,6,7 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix return code from poll ops (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix incorrect resp->opcode retrieval (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix meter_levels type to __le32 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: ES8326: Improved PSRR (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: return error value in asrc_m2m_device_run() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: only handle pairs for m2m in the suspend (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix hwdep read ops types (Jaroslav Kysela) [RHEL-80682]
  - ALSA: scarlett2: Add device_setup option to use FCP driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: FCP: Add Focusrite Control Protocol driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Support for Ideapad hotkey mute LEDs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dapm: add support for preparing streams (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dai: add snd_soc_dai_prepare() and use it internally (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Transfer firmware in two chunks (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Make tied_device=0 as default / unknown (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dapm: remove !card check from snd_soc_dapm_set_bias_level() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,micfil: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Use ARRAY_SIZE() to calculate PEB2466_TLV_SIZE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() to improve bdw_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: return 0 if np was NULL on snd_soc_daifmt_parse_clock_provider_raw() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: audio-graph-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: nau8824: fix max volume for Speaker output (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,mqs: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_mqs: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: line6: convert timeouts to secs_to_jiffies() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify UMP EP and FB changes (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Allow system notification in atomic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Update rawmidi name per EP name update (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy safe string name to rawmidi (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy FB name string more safely (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Bump protocol version to 2.0.5 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Show substream activity in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Expose the tied device number in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: Drop unnecessary "dai-tdm-slot-width-map" property presence check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sb: Use str_enabled_disabled() helper in info_read() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Use str_yes_no() helper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Use of_property_present() for non-boolean properties (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: Add ACPI dependency to fix build error (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rme9652: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add missing includes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust IPC traces (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust DSP status register names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update ASRC definition (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Improve logging of firmware loading (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Clearly state assumptions of hw_params() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add MODULE_FIRMWARE to inform about FW (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Print IPC error messages in lower layer (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update hda component teardown sequences (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix init-config parsing (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix theoretical infinite loop (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix the minimum firmware version numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Do not readq() u32 registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-card: remove card check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: firewire: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for SDCA deferred controls (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for further MBQ register sizes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Update list of entity_0 controls (Jaroslav Kysela) [RHEL-80682]
  - soundwire: SDCA: Add additional SDCA address macros (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Simplify with str_enable_disable() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: Simplify with str_enabled_disabled() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdspm: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Simplify with str_off_on() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: trident: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt5682: Support the ALC5682I-VE codec (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ens137x: Use str_on_off() helper in snd_ensoniq_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: madera: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() helper in atom_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Add aw88083 amplifier driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: Add schema for "awinic,aw88083" (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Show if link is unidirectional (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Improve debugging messages (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Make dependency on UMP clearer (Jaroslav Kysela) [RHEL-80682]
  - ALSA: Align the syntax of iov_iter helpers with standard ones (Jaroslav Kysela) [RHEL-80682]
  - ALSA: AC97: Use str_on_off() helper in snd_ac97_proc_read_main() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add a comment for alc_fixup_inv_dmic() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Split function type patching and function naming (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing function type names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add bounds check for function address (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Clean up error messages (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing header includes (Jaroslav Kysela) [RHEL-80682]
  - soundwire: amd: clear wake enable register for power off mode (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: count the bandwidth of active streams only (Jaroslav Kysela) [RHEL-80682]
  - SoundWire: pass stream to compute_params() (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: add lane in sdw_group_params (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: select data lane (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: check required freq accurately (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: correct clk_freq check in sdw_select_row_col (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: generic_bandwidth_allocation: set frame shape on fly (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: stream: program BUSCLOCK_SCALE (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: add sdw_slave_get_scale_index helper (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: skip DEPREPARED streams (Jaroslav Kysela) [RHEL-80682]
  - soundwire: stream: set DEPREPARED state earlier (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane_used_bandwidth in struct sdw_bus (Jaroslav Kysela) [RHEL-80682]
  - soundwire: mipi_disco: read lane mapping properties from ACPI (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane field in sdw_port_runtime (Jaroslav Kysela) [RHEL-80682]
  - soundwire: bus: Move irq mapping cleanup into devres (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ad1889: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdsp: Use str_on_off() and str_yes_no() helper functions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: force cast for snd_pcm_format_t type (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: don't include '<linux/find.h>' directly (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Increase the SoundWire attach timeout (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use gpiod_set_raw for GPIO operations (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Prepare support for updated bios patch (Jaroslav Kysela) [RHEL-80682]
  - ASoC: qcom: sdm845: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt715: Remove unused hda_to_sdw (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Unify clock direction by clk_direction (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: tidyup ret handling for card->disable_route_checks (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C 8x CS35L56 without CS42L43 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C with aggregated speakers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: tgl-match: Add entries for CS35L56 on CDB35L56-EIGHT-C (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: sof-priv: Remove unused SOF_DAI_STREAM() and SOF_FORMATS (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Use macro to set the EXT_PARAM_SIZE in widget setup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda-pcm: Follow the pause_supported flag to drop PAUSE support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Add support for pause supported tokens from topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: Add memory to memory function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ALSA: compress: Add output rate and output format support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Use str_on_off() helper in snd_sonicvibes_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: convert rt5682.txt to dt-schema (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8985: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8904: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tpa6130a2: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic3x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic31xx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320adc3xxx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas5720: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2562: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ssm2602: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: pcm186x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98095: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98090: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98088: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5632: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5623: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1977: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1761: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ad193x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: qcom,wcd9335: Drop number of DAIs from the header (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wcd9335: Add define for number of DAIs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add a dev_dbg message for the SOC_SDW_CODEC_MIC quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: improve the log of DAI link numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: reduce log level for not using internal dmic (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: correct mach_params->dmic_num (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use for_each_of_graph_port() on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: check port reg first on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_sai: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Switch to common sample rate constraint function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_utils: Add function to constrain rates (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: fix typo in seq_oss_init.c (Jaroslav Kysela) [RHEL-80682]
  - ALSA: cmipci: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: lola: Fix typo in lola_clock.c (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: add ZSC control register programming sequence (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: update mach params subsystem_rev variable (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Always check capability at opening a hwdep (Jaroslav Kysela) [RHEL-80682]
  - ASoC: sdw_utils: cs_amp: Assign non-overlapping TDM masks for each codec on a bus (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Split SoundWire DAI into separate playback and capture (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix typo in hda_sysfs.h (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ac97: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Skip notifications unless subscribed to announce port (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify client and port info changes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l51: Constify struct i2c_device_id (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Fix redundant logical jump (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add suspend and resume support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Use regmap for PHY and PLL registers (Jaroslav Kysela) [RHEL-80682]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-591.el9]
changelog:
  - uki_addons: add 'fedora' SBAT suffix for UKI addons (Li Tian) [RHEL-93399]
  - Subject: net/smc: check return value of sock_recvmsg when draining clc data (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check smcd_v2_ext_offset when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check v2_ext_offset/eid_cnt/ism_gid_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check iparea_offset and ipv6_prefixes_cnt when receiving proposal msg (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: check sndbuf_space again after NOSPACE flag is set in smc_poll (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: protect link down work from execute after lgr freed (Mete Durlu) [RHEL-73484] {CVE-2024-57791}
  - net/smc: Introduce IPPROTO_SMC (Mete Durlu) [RHEL-73484]
  - net/smc: expose smc proto operations (Mete Durlu) [RHEL-73484]
  - net/smc: refactoring initialization of smc sock (Mete Durlu) [RHEL-73484]
  - net/smc: change SMCR_RMBE_SIZES from 5 to 15 (Mete Durlu) [RHEL-73484]
  - net/smc: set rmb's SG_MAX_SINGLE_ALLOC limitation only when CONFIG_ARCH_NO_SG_CHAIN is defined (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-merged operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: adapt cursor update when sndbuf and peer DMB are merged (Mete Durlu) [RHEL-73484]
  - net/smc: add operations to merge sndbuf with peer DMB (Mete Durlu) [RHEL-73484]
  - net/smc: register loopback-ism into SMC-D device list (Mete Durlu) [RHEL-73484]
  - net/smc: ignore loopback-ism when dumping SMC-D devices (Mete Durlu) [RHEL-73484]
  - net/smc: mark optional smcd_ops and check for support when called (Mete Durlu) [RHEL-73484]
  - net/smc: implement DMB-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - net/smc: implement ID-related operations of loopback-ism (Mete Durlu) [RHEL-73484]
  - redhat/configs: Add SMC_LO config option (Mete Durlu) [RHEL-73484]
  - net/smc: introduce loopback-ism for SMC intra-OS shortcut (Mete Durlu) [RHEL-73484]
  - net/smc: decouple ism_client from SMC-D DMB registration (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid -Wflex-array-member-not-at-end warnings (Mete Durlu) [RHEL-73484]
  - net/smc: make smc_hash_sk/smc_unhash_sk static (Mete Durlu) [RHEL-73484]
  - net/smc: change the term virtual ISM to Emulated-ISM (Mete Durlu) [RHEL-73484]
  - net/smc: fix incorrect SMC-D link group matching logic (Mete Durlu) [RHEL-73484]
  - net/smc: fix invalid link access in dumping SMC-R connections (Mete Durlu) [RHEL-73484]
  - net/smc: manage system EID in SMC stack instead of ISM driver (Mete Durlu) [RHEL-73484]
  - net/smc: disable SEID on non-s390 archs where virtual ISM may be used (Mete Durlu) [RHEL-73484]
  - net/smc: support extended GID in SMC-D lgr netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: compatible with 128-bits extended GID of virtual ISM device (Mete Durlu) [RHEL-73484]
  - net/smc: define a reserved CHID range for virtual ISM devices (Mete Durlu) [RHEL-73484]
  - net/smc: introduce virtual ISM device support feature (Mete Durlu) [RHEL-73484]
  - net/smc: support SMCv2.x supplemental features negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: unify the structs of accept or confirm message for v1 and v2 (Mete Durlu) [RHEL-73484]
  - net/smc: introduce sub-functions for smc_clc_send_confirm_accept() (Mete Durlu) [RHEL-73484]
  - net/smc: rename some 'fce' to 'fce_v2x' for clarity (Mete Durlu) [RHEL-73484]
  - net/smc: fix missing byte order conversion in CLC handshake (Mete Durlu) [RHEL-73484]
  - net/smc: remove unneeded atomic operations in smc_tx_sndbuf_nonempty (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max conns per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: add sysctl for max links per lgr for SMC-R v2.1 (Mete Durlu) [RHEL-73484]
  - net/smc: put sk reference if close work was canceled (Mete Durlu) [RHEL-73484]
  - net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc (Mete Durlu) [RHEL-73484]
  - net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT (Mete Durlu) [RHEL-73484]
  - net/smc: return the right falback reason when prefix checks fail (Mete Durlu) [RHEL-73484]
  - net/smc: fix smc clc failed issue when netdevice not in init_net (Mete Durlu) [RHEL-73484]
  - net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add (Mete Durlu) [RHEL-73484]
  - net/smc: bugfix for smcr v2 server connect success statistic (Mete Durlu) [RHEL-73484]
  - net/smc: Extend SMCR v2 linkgroup netlink attribute (Mete Durlu) [RHEL-73484]
  - net/smc: support max links per lgr negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support max connections per lgr negotiation (Mete Durlu) [RHEL-73484]
  - net/smc: support smc v2.x features validate (Mete Durlu) [RHEL-73484]
  - net/smc: add vendor unique experimental options area in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: support smc release version negotiation in clc handshake (Mete Durlu) [RHEL-73484]
  - net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT (Mete Durlu) [RHEL-73484]
  - net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK (Mete Durlu) [RHEL-73484]
  - net/smc: Scan from current RMB list when no position specified (Mete Durlu) [RHEL-73484]
  - net/smc: Reset connection when trying to use SMCRv2 fails. (Mete Durlu) [RHEL-73484]
  - smc: Fix use-after-free in tcp_write_timer_handler(). (Mete Durlu) [RHEL-73484]
  - smc: preserve const qualifier in smc_sk() (Mete Durlu) [RHEL-73484]
  - net/smc: Use percpu ref for wr tx reference (Mete Durlu) [RHEL-73484]
  - net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (Mete Durlu) [RHEL-73484]
  - vlan: enforce underlying device type (Guillaume Nault) [RHEL-87883] {CVE-2025-21920}
  - dm: fix copying after src array boundaries (Benjamin Marzinski) [RHEL-92761]
  - dm: add missing unlock on in dm_keyslot_evict() (Benjamin Marzinski) [RHEL-92761]
  - dm: always update the array size in realloc_argv on success (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix a warning on invalid table line (Benjamin Marzinski) [RHEL-92761]
  - dm-bufio: don't schedule in atomic context (Benjamin Marzinski) [RHEL-92761]
  - dm-ebs: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-verity: fix prefetch-vs-suspend race (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: fix non-constant-time tag verification (Benjamin Marzinski) [RHEL-92761]
  - dm cache: support shrinking the origin device (Benjamin Marzinski) [RHEL-56106]
  - dm cache: prevent BUG_ON by blocking retries on failed device resumes (Benjamin Marzinski) [RHEL-56106]
  - dm: fix unconditional IO throttle caused by REQ_PREFLUSH (Benjamin Marzinski) [RHEL-92761]
  - dm-integrity: set ti->error on memory allocation failure (Benjamin Marzinski) [RHEL-92761]
  - NFSv4: Don't check for OPEN feature support in v4.1 (Scott Mayhew) [RHEL-83435]
  - MAINTAINERS: Update maintainers for crypto/marvell (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - suppress auth failure screaming due to negative tests (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove unused otx2_cpt_print_uc_dbg_info (Vladis Dronov) [RHEL-74335]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: marvell - replace deprecated PCI functions (Vladis Dronov) [RHEL-74335]
  - PCI: Make pcim_request_all_regions() a public function (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx* - Select CRYPTO_AUTHENC [partial] (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - select CONFIG_NET_DEVLINK (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Fix authenc setkey (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - Remove custom swap functions in favor of built-in sort swap (Vladis Dronov) [RHEL-74335]
  - crypto: octeontx2 - update CPT inbound inline IPsec mailbox (Vladis Dronov) [RHEL-74335]
  - selftests: net: fdb_notify: Add a test for FDB notifications (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Add kill_process (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move checks from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move tests_run from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Move logging from forwarding/lib.sh here (Ivan Vecera) [RHEL-78780]
  - selftests: net: include lib/sh/*.sh with lib.sh (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include net_helper.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: mptcp: include lib.sh file (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: lib: Allow passing PID to stop_traffic() (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Add a fallback cleanup() (Ivan Vecera) [RHEL-78780]
  - selftests: net: lib: Introduce deferred commands (Ivan Vecera) [RHEL-78780]
  - selftests: forwarding: Convert log_test() to recognize RET values (Ivan Vecera) [RHEL-78780]
  - ndo_fdb_del: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - ndo_fdb_add: Add a parameter to report whether notification was sent (Izabela Bakollari) [RHEL-78780]
  - bonding: assign random address if device address is same as bond (Hangbin Liu) [RHEL-93062]
  - ice: Fix deinitializing VF in error path (Petr Oros) [RHEL-87626] {CVE-2025-21883}
  - ice: add E830 HW VF mailbox message limit support (Petr Oros) [RHEL-87626]
  - perf test stat_all_pmu.sh: Correctly check 'perf stat' result (Michael Petlan) [RHEL-81954]
  - perf test: Extra verbosity and hypervisor skip for tpebs test (Michael Petlan) [RHEL-81954]
  - perf test: Tag parallel failing shell tests with "(exclusive)" (Michael Petlan) [RHEL-81954]
  - perf test: Ignore security failures in all PMU test (Michael Petlan) [RHEL-81954]


author: Jan Stancek <jstancek@redhat.com> [5.14.0-592.el9]
changelog:
  - drm: remove driver date from struct drm_driver and all drivers (Robert Foss) [RHEL-75950]
  - overflow: Introduce overflows_type() and castable_to_type() (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: move no_capture_mute to struct hdmi_codec_pdata (Robert Foss) [RHEL-75950]
  - ASoC: hdmi-codec: pass data to get_dai_id too (Robert Foss) [RHEL-75950]
  - kfifo: fix typos in kernel-doc (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_dma_out_prepare_mapped() (Robert Foss) [RHEL-75950]
  - kfifo: pass offset to setup_sgl_buf() instead of a pointer (Robert Foss) [RHEL-75950]
  - kfifo: rename l to len_to_end in setup_sgl() (Robert Foss) [RHEL-75950]
  - kfifo: remove support for physically non-contiguous memory (Robert Foss) [RHEL-75950]
  - kfifo: add kfifo_out_linear{,_ptr}() (Robert Foss) [RHEL-75950]
  - kfifo: introduce and use kfifo_skip_count() (Robert Foss) [RHEL-75950]
  - kfifo: drop __kfifo_dma_out_finish_r() (Robert Foss) [RHEL-75950]
  - arm64/efistub: Clean up KASLR logic (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: Cast away type warning in use of max() (Lenny Szubowicz) [RHEL-33066]
  - efi/libstub: fix efi_random_alloc() to allocate memory at alloc_min or higher address (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Remap kernel text read-only before dropping NX attribute (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Avoid placing the kernel below LOAD_PHYSICAL_ADDR (Lenny Szubowicz) [RHEL-33066]
  - x86/efistub: Give up if memory attribute protocol returns an error (Lenny Szubowicz) [RHEL-33066]
  - libstub: Fix compilation warning for rv32 (Lenny Szubowicz) [RHEL-33066]
  - arm64: libstub: Move KASLR handling functions to kaslr.c (Lenny Szubowicz) [RHEL-33066]
  - crypto: tegra - Fix IV usage for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix format specifier in (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use HMAC fallback when keyslots are full (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Reserve keyslots to allocate dynamically (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Set IV to NULL explicitly for AES ECB (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix CMAC intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Fix HASH intermediate result handling (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Transfer HASH init function to crypto engine (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - check return value for hash do_one_req (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - finalize crypto req on error (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Do not use fixed size buffers (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - Use separate buffer for setkey (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove unneeded crypto_engine_stop() call (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: tegra - remove redundant error check on ret (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: engine - Remove prepare/unprepare request (Marcin Juszkiewicz) [RHEL-83268]
  - crypto: iaa - Do not clobber req->base.data (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Move compression CRC into request object (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Test the correct request flag (Vladis Dronov) [RHEL-87768]
  - MAINTAINERS: Add Vinicius Gomes to MAINTAINERS for IAA Crypto (Vladis Dronov) [RHEL-87768]
  - crypto: iaa - Fix IAA disabling that occurs when sync_mode is set to 'async' (Vladis Dronov) [RHEL-87768]
  - scsi: target: iscsi: Fix timeout on deleted connection (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcm_loop: Fix wrong abort tag (Maurizio Lombardi) [RHEL-93481]
  - scsi: tcm_loop: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Replace deprecated strncpy() with strscpy() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: iscsi: Fix typos (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr() (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: spc: Fix RSOC parameter data header size (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: core: Add line break to status show (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: tcmu: Constify some structures (Maurizio Lombardi) [RHEL-93481]
  - scsi: target: Fix incorrect function name in pscsi_create_type_disk() (Maurizio Lombardi) [RHEL-93481]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-593.el9]
changelog:
  - selftests/mm: virtual_address_range: avoid reading from VM_IO mappings (Li Wang) [RHEL-88165]
  - selftests/mm: vm_util: split up /proc/self/smaps parsing (Li Wang) [RHEL-88165]
  - mm: selftest to verify zero-filled pages are mapped to zeropage (Li Wang) [RHEL-88165]
  - selftests/mm: virtual_address_range: unmap chunks after validation (Li Wang) [RHEL-88165]
  - selftests/mm: virtual_address_range: mmap() without PROT_WRITE (Li Wang) [RHEL-88165]
  - selftest/mm: fix typo in virtual_address_range (Li Wang) [RHEL-88165]
  - selftests: add ksft_exit_fail_perror() (Li Wang) [RHEL-88165]
  - thermal: intel: int340x: Fix Panther Lake DLVR support (David Arcari) [RHEL-88234]
  - iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids (Steve Dunnagan) [RHEL-89787]
  - cxl/core/regs: Refactor out functions to count regblocks of given type (John W. Linville) [RHEL-88727]
  - cxl/test: Update test code for event records to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update Memory Module Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update DRAM Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update General Media Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Add Component Identifier formatting for CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/events: Update Common Event Record to CXL spec rev 3.1 (John W. Linville) [RHEL-88727]
  - cxl/pci: Add CXL Type 1/2 support to cxl_dvsec_rr_decode() (John W. Linville) [RHEL-88727]
  - cxl/region: Fix region creation for greater than x2 switches (John W. Linville) [RHEL-88727]
  - cxl/pci: Check dport->regs.rcd_pcie_cap availability before accessing (John W. Linville) [RHEL-88727]
  - cxl/pci: Fix potential bogus return value upon successful probing (John W. Linville) [RHEL-88727]
  - cxl/region: Refactor common create region code (John W. Linville) [RHEL-88727]
  - cxl/hdm: Use guard() in cxl_dpa_set_mode() (John W. Linville) [RHEL-88727]
  - cxl/pci: Delay event buffer allocation (John W. Linville) [RHEL-88727]
  - cxl/cdat: Use %pra for dpa range outputs (John W. Linville) [RHEL-88727]
  - cxl: downgrade a warning message to debug level in cxl_probe_component_regs() (John W. Linville) [RHEL-88727]
  - cxl/pci: Add sysfs attribute for CXL 1.1 device link status (John W. Linville) [RHEL-88727]
  - cxl/core/regs: Add rcd_pcie_cap initialization (John W. Linville) [RHEL-88727]
  - cxl/test: Improve init-order fidelity relative to real-world systems (John W. Linville) [RHEL-88727]
  - cxl/acpi: Ensure ports ready at cxl_acpi_probe() return (John W. Linville) [RHEL-88727]
  - cxl/port: Fix CXL port initialization order when the subsystem is built-in (John W. Linville) [RHEL-88727]
  - cxl: Fix comment regarding cxl_query_cmd() return data (John W. Linville) [RHEL-88727]
  - cxl: Convert cxl_internal_send_cmd() to use 'struct cxl_mailbox' as input (John W. Linville) [RHEL-88727]
  - cxl: Move mailbox related bits to the same context (John W. Linville) [RHEL-88727]
  - cxl: move cxl headers to new include/cxl/ directory (John W. Linville) [RHEL-88727]
  - cxl/region: Remove lock from memory notifier callback (John W. Linville) [RHEL-88727]
  - cxl/pci: simplify the check of mem_enabled in cxl_hdm_decode_init() (John W. Linville) [RHEL-88727]
  - cxl/pci: Check Mem_info_valid bit for each applicable DVSEC (John W. Linville) [RHEL-88727]
  - cxl/pci: Remove duplicated implementation of waiting for memory_info_valid (John W. Linville) [RHEL-88727]
  - cxl/pci: Remove duplicate host_bridge->native_aer checking (John W. Linville) [RHEL-88727]
  - cxl/pci: cxl_dport_map_rch_aer() cleanup (John W. Linville) [RHEL-88727]
  - cxl/pci: Rename cxl_setup_parent_dport() and cxl_dport_map_regs() (John W. Linville) [RHEL-88727]
  - cxl/port: Refactor __devm_cxl_add_port() to drop goto pattern (John W. Linville) [RHEL-88727]
  - cxl/port: Use scoped_guard()/guard() to drop device_lock() for cxl_port (John W. Linville) [RHEL-88727]
  - cxl/port: Use __free() to drop put_device() for cxl_port (John W. Linville) [RHEL-88727]
  - cxl: Remove duplicate included header file core.h (John W. Linville) [RHEL-88727]
  - tools/testing/cxl: Use dev_is_platform() (John W. Linville) [RHEL-88727]
  - cxl/port: Convert to use ERR_CAST() (John W. Linville) [RHEL-88727]
  - cxl/core/pci: Move reading of control register to immediately before usage (John W. Linville) [RHEL-88727]
  - cxl: Remove defunct code calculating host bridge target positions (John W. Linville) [RHEL-88727]
  - cxl/core: Fold cxl_trace_hpa() into cxl_dpa_to_hpa() (John W. Linville) [RHEL-88727]
  - cxl/test: Replace ENXIO with EBUSY for inject poison limit reached (John W. Linville) [RHEL-88727]
  - cxl/memdev: Replace ENXIO with EBUSY for inject poison limit reached (John W. Linville) [RHEL-88727]
  - cxl/acpi: Warn on mixed CXL VH and RCH/RCD Hierarchy (John W. Linville) [RHEL-88727]
  - cxl/region: Simplify cxl_region_nid() (John W. Linville) [RHEL-88727]
  - cxl/region: Support to calculate memory tier abstract distance (John W. Linville) [RHEL-88727]
  - cxl: add missing MODULE_DESCRIPTION() macros (John W. Linville) [RHEL-88727]
  - cxl/events: Use a common struct for DRAM and General Media events (John W. Linville) [RHEL-88727]
  - unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-92670]
  - debugfs: Fix the missing initializations in __debugfs_file_get() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - saner replacement for debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: take debugfs_short_fops definition out of ifdef (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: allow to store an additional opaque pointer at file creation (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: don't mess with bits in ->d_fsdata (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: get rid of dynamically allocation proxy_ops (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: move ->automount into debugfs_inode_info (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: separate cache for debugfs inodes (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: drop inline constant formatting for ERR_PTR(-ERROR) (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - debugfs: update comment of debugfs_rename() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - OPP: fix error checking in opp_migrate_dentry() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: fix oops during rmmod (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: use IS_ERR instead of NULL check in bond_create_debugfs (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: remove redundant NULL check in debugfs function (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - bonding: fix error checking in bond_debug_reregister() (Jose Ignacio Tornos Martinez) [RHEL-87378]
  - iommu/amd: Enable support for up to 2K interrupts per function (Eder Zulian) [RHEL-22785]
  - iommu/amd: Rename DTE_INTTABLEN* and MAX_IRQS_PER_TABLE macro (Eder Zulian) [RHEL-22785]
  - iommu/amd: Replace slab cache allocator with page allocator (Eder Zulian) [RHEL-22785]
  - iommu/amd: Introduce generic function to set multibit feature value (Eder Zulian) [RHEL-22785]
  - qed: remove cast to pointers passed to kfree (John Meneghini) [RHEL-72637]
  - net: qed: make 'qed_ll2_ops_pass' as __maybe_unused (John Meneghini) [RHEL-72637]
  - net: qed: fix typos (John Meneghini) [RHEL-72637]
  - scsi: Constify struct pci_device_id (John Meneghini) [RHEL-72637]
  - qed: fix possible uninit pointer read in qed_mcp_nvm_info_populate() (John Meneghini) [RHEL-72637]
  - net/qed: allow old cards not supporting "num_images" to work (John Meneghini) [RHEL-72637]
  - scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb() (John Meneghini) [RHEL-72637]
  - scsi: qedf: Remove dead code (John Meneghini) [RHEL-72637]
  - net: qlogic: use ethtool string helpers (John Meneghini) [RHEL-72637]
  - scsi: qedf: Remove trailing space after \n newline (John Meneghini) [RHEL-72637]
  - scsi: qedf: Call scsi_done() directly (John Meneghini) [RHEL-72637]
  - scsi: qedf: Use scsi_cmd_to_rq() instead of scsi_cmnd.request (John Meneghini) [RHEL-72637]
  - message deprecated state in ahci_xgene, ahci_seattle and hisi_sas_main (Tomas Henzl) [RHEL-95986]
  - s390/cpumf: Update CPU Measurement facility extended counter set support (Mete Durlu) [RHEL-90738]
  - selftests/mm: restore default nr_hugepages value during cleanup in hugetlb_reparenting_test.sh (Li Wang) [RHEL-86180]
  - selftest/mm: make hugetlb_reparenting_test tolerant to async reparenting (Li Wang) [RHEL-86180]
  - selftests/mm: generate a temporary mountpoint for cgroup filesystem (Li Wang) [RHEL-86180]
  - perf: arm_cspmu: nvidia: monitor all ports by default (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: enable NVLINK-C2C port filtering (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: fix sysfs path in the kernel doc (Michael Petlan) [RHEL-89488]
  - perf: arm_cspmu: nvidia: remove unsupported SCF events (Michael Petlan) [RHEL-89488]
  - lazy tlb: fix hotplug exit race with MMU_LAZY_TLB_SHOOTDOWN (Herton R. Krzesinski) [RHEL-82922]
  - dim: pass dim_sample to net_dim() by reference (Ivan Vecera) [RHEL-94962]
  - dim: make dim_calc_stats() inputs const pointers (Ivan Vecera) [RHEL-94962]
  - linux/dim: Do nothing if no time delta between samples (Ivan Vecera) [RHEL-94962]
  - powerpc/pseries/iommu: Fix kmemleak in TCE table userspace view (Mamatha Inamdar) [RHEL-94838]
  - octeon_ep_vf: Resolve netdevice usage count issue (Kamal Heib) [RHEL-83999]
  - rtla: Define _GNU_SOURCE in timerlat_bpf.c (Tomas Glozar) [RHEL-88653]
  - nfp: bpf: Add check for nfp_app_ctrl_msg_alloc() (CKI Backport Bot) [RHEL-83195] {CVE-2025-21848}
  - scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer (Ewan D. Milne) [RHEL-94042]
  - scsi: Improve CDL control (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Clear flags for scsi_cmnd that did not complete (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_transport_srp: Replace min/max nesting with clamp() (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Tighten the page format heuristics with MODE SELECT (Ewan D. Milne) [RHEL-94042]
  - scsi: st: ERASE does not change tape location (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Fix array overflow in st_setup() (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Use a switch statement when attaching VPD pages (Ewan D. Milne) [RHEL-94042]
  - scsi: logging: Fix scsi_logging_level bounds (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_error: Add comments to scsi_check_sense() (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Fix uninitialized variable use (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Fix missing lock protection (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Do not sleep in atomic sections (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Simplify command handling (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Remove a reference to in_use_bm (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Remove sdebug_device_access_info (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add support for partitioning the tape (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Reset tape setting at device reset (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add compression mode page for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add read support and update locate for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add write support with block lengths and 4 bytes of data (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: Add READ BLOCK LIMITS and modify LOAD for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: scsi_debug: First fixes for tapes (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Add sysfs file position_lost_in_reset (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Modify st.c to use the new scsi_error counters (Ewan D. Milne) [RHEL-94042]
  - scsi: core: Add counters for New Media and Power On/Reset UNIT ATTENTIONs (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Restore some drive settings after reset (Ewan D. Milne) [RHEL-94042]
  - scsi: sg: Enable runtime power management (Ewan D. Milne) [RHEL-94042]
  - scsi: st: Fix input/output error on empty drive reset (Ewan D. Milne) [RHEL-94042]
  - scsi: mpi3mr: Fix ATA NCQ priority support (Ewan D. Milne) [RHEL-94042]
  - scsi: block: pm: Always set request queue runtime active in blk_post_runtime_resume() (Ewan D. Milne) [RHEL-94042]
  - PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type (Luis Claudio R. Goncalves) [RHEL-79183]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-594.el9]
changelog:
  - tools: ynl: add all headers to makefile deps (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - selftests: drv-net: add missing trailing backslash (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement cap validation in the core (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net: shaper: implement introspection support (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - netlink: spec: add shaper introspection support (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement shaper cleanup on queue deletion (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement delete support for NODE scope shaper (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL group operation (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL set and delete operations (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - net-shapers: implement NL get operation (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - netlink: spec: add shaper YAML spec (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - testing: net-drv: add basic shaper test (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - genetlink: extend info user-storage to match NL cb ctx (Jose Ignacio Tornos Martinez) [RHEL-89973]
  - smb: client: fix UAF in decryption with multichannel (CKI Backport Bot) [RHEL-94457] {CVE-2025-37750}
  - RDMA/irdma: Remove deliver net device event (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: Remove unused irdma_cqp_*_fpm_val_cmd functions (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: Fix misspelling of "accept*" (Kamal Heib) [RHEL-87576]
  - RDMA/irdma: fix error message in irdma_modify_qp_roce() (Kamal Heib) [RHEL-87576]
  - x86/tsc: Use topology_max_packages() to get package number (David Arcari) [RHEL-92573]
  - perf/x86/intel/uncore: Add Clearwater Forest support (Michael Petlan) [RHEL-45095]
  - ext4: ignore xattrs past end (CKI Backport Bot) [RHEL-94247] {CVE-2025-37738}
  - net: rename netns_local to netns_immutable (Ivan Vecera) [RHEL-91110]
  - ynl: devlink: add missing board-serial-number (Petr Oros) [RHEL-75600]
  - devlink: fix xa_alloc_cyclic() error handling (Petr Oros) [RHEL-75600]
  - devlink: add devl guard (Petr Oros) [RHEL-75600]
  - pldmfw: enable selected component update (Petr Oros) [RHEL-75600]
  - devlink: Improve the port attributes description (Petr Oros) [RHEL-75600]
  - devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-75600]
  - devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-75600]
  - devlink: remove unused devlink_resource_register() (Petr Oros) [RHEL-75600]
  - devlink: remove unused devlink_resource_occ_get_register() and _unregister() (Petr Oros) [RHEL-75600]
  - devlink: region: snapshot IDs: consolidate error values (Petr Oros) [RHEL-75600]
  - devlink: devl_resource_register(): differentiate error codes (Petr Oros) [RHEL-75600]
  - devlink: use devlink_nl_put_u64() helper (Petr Oros) [RHEL-75600]
  - devlink: introduce devlink_nl_put_u64() (Petr Oros) [RHEL-75600]
  - tools: ynl-gen: use names of constants in generated limits (Petr Oros) [RHEL-75600]
  - tools: ynl-gen: refactor check validation for TypeBinary (Petr Oros) [RHEL-75600]
  - scsi: bnx2fc: Use kthread_create_on_cpu() (John Meneghini) [RHEL-94578]
  - net: bnx2x: use ethtool string helpers (John Meneghini) [RHEL-94578]
  - scsi: libfcoe: Include <linux/prandom.h> instead of <linux/random.h> (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Remove some unused fields in struct bnx2fc_rport (John Meneghini) [RHEL-94578]
  - net: cnic: Convert tasklet API to new bottom half workqueue mechanism (John Meneghini) [RHEL-94578]
  - scsi: libfc: Add some kernel-doc comments (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Remove redundant assignment to variable 'i' (John Meneghini) [RHEL-94578]
  - scsi: libfc: replace deprecated strncpy() with memcpy() (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Make fcoe_bus_type const (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix unsigned comparison with zero in store_ctlr_mode() (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use sysfs_match_string() over fcoe_parse_mode() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Map FC_TIMED_OUT to DID_TIME_OUT (John Meneghini) [RHEL-94578]
  - scsi: libfc: Fix up timeout error in fc_fcp_rec_error() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Don't schedule abort twice (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Replace deprecated strncpy() with strscpy() (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Do not rely on a SCSI command for LUN or target reset (John Meneghini) [RHEL-94578]
  - scsi: libfcoe: Replace all non-returning strlcpy() with strscpy() (John Meneghini) [RHEL-94578]
  - bnx2: remove deadcode in bnx2_init_cpus() (John Meneghini) [RHEL-94578]
  - scsi: libfc: Include the correct header (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Fix possible name leak when device_register() fails (John Meneghini) [RHEL-94578]
  - scsi: libfc: Remove redundant variable ev_qual (John Meneghini) [RHEL-94578]
  - bnx2: Use kmalloc_size_roundup() to match ksize() usage (John Meneghini) [RHEL-94578]
  - bnx2: Fix spelling mistake "bufferred" -> "buffered" (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Remove redundant assignment to variable 'wlen' (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use per-CPU API to update per-CPU statistics (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Add a local_lock to fcoe_percpu (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Simplify if-if to if-else (John Meneghini) [RHEL-94578]
  - scsi: libfc: Replace one-element arrays with flexible-array members (John Meneghini) [RHEL-93390]
  - scsi: bnx2fc: Stop using the SCSI pointer (John Meneghini) [RHEL-94578]
  - scsi: libfc: Stop using the SCSI pointer (John Meneghini) [RHEL-94578]
  - bnx2: Fix an error message (John Meneghini) [RHEL-94578]
  - scsi: fcoe: Use netif_is_bond_master() instead of open code (John Meneghini) [RHEL-94578]
  - scsi: libfc: Call scsi_done() directly (John Meneghini) [RHEL-94578]
  - scsi: bnx2fc: Call scsi_done() directly (John Meneghini) [RHEL-94578]
  - ext4: fix off-by-one error in do_split (CKI Backport Bot) [RHEL-93631] {CVE-2025-23150}
  - net: ibmveth: make veth_pool_store stop hanging (Mamatha Inamdar) [RHEL-93830]
  - ibmveth: Always stop tx queues during close (Mamatha Inamdar) [RHEL-93830]
  - perf/x86/rapl: Add support for Intel Arrow Lake U (Michael Petlan) [RHEL-53585]
  - perf/x86/intel: Add PMU support for ArrowLake-H (Michael Petlan) [RHEL-20094]
  - perf/x86/intel: Support hybrid PMU with multiple atom uarchs (Michael Petlan) [RHEL-20094]
  - x86/cpu/intel: Define helper to get CPU core native ID (Michael Petlan) [RHEL-20094]
  - perf/x86: Refine hybrid_pmu_type defination (Michael Petlan) [RHEL-20094]
  - fs/file.c: add fast path in find_next_fd() (Ian Kent) [RHEL-38570]
  - fs/file.c: conditionally clear full_fds (Ian Kent) [RHEL-38570]
  - fs/file.c: remove sanity_check and add likely/unlikely in alloc_fd() (Ian Kent) [RHEL-38570]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-595.el9]
changelog:
  - Squashfs: fix handling and sanity checking of xattr_ids count (CKI Backport Bot) [RHEL-93466] {CVE-2023-52933}
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-83573]
  - i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-83573]
  - i40e: use generic unrolled_count() macro (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_dcb_hw_get_num_tc (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_asq_send_command_v2 (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_commit_partition_bw_setting (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_del_filter (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_get_cur_guaranteed_fd_count (Dennis Chen) [RHEL-83573]
  - i40e: Deadcode profile code (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_(read|write)_phy_register (Dennis Chen) [RHEL-83573]
  - i40e: Remove unused i40e_blink_phy_link_led (Dennis Chen) [RHEL-83573]
  - i40e: Deadcode i40e_aq_* (Dennis Chen) [RHEL-83573]
  - acpi: nfit: vmalloc-out-of-bounds Read in acpi_nfit_ctl (Jeff Moyer) [RHEL-75893] {CVE-2024-56662}
  - io_uring/sqpoll: zero sqd->thread on tctx errors (Jeff Moyer) [RHEL-74645] {CVE-2025-21633}
  - i2c: tegra: check msg length in SMBUS block read (Steve Dunnagan) [RHEL-89167]
  - x86/CPU/AMD: Print the reason for the last reset (David Arcari) [RHEL-89441]
  - Documentation: Add AMD Zen debugging document (David Arcari) [RHEL-89441]
  - platform/x86/amd/pmc: Use FCH_PM_BASE definition (David Arcari) [RHEL-89441]
  - i2c: piix4, x86/platform: Move the SB800 PIIX4 FCH definitions to <asm/amd/fch.h> (David Arcari) [RHEL-89441]
  - i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on CONFIG_X86 (David Arcari) [RHEL-89441]
  - i2c: piix4: Export i2c_piix4 driver functions as library (David Arcari) [RHEL-89441]
  - i2c: piix4: Move i2c_piix4 macros and structures to common header (David Arcari) [RHEL-89441]
  - i2c: piix4: Change the parameter list of piix4_transaction function (David Arcari) [RHEL-89441]
  - i2c: don't use ',' after delimiters [partial] (David Arcari) [RHEL-89441]
  - i2c: piix4: Register SPDs (David Arcari) [RHEL-89441]
  - i2c: piix4: reword according to newest specification (David Arcari) [RHEL-89441]
  - i2c: piix4: Fix adapter not be removed in piix4_remove() (David Arcari) [RHEL-89441]
  - net: geneve: Leverage core stats allocator (Paolo Abeni) [RHEL-93467]
  - redhat/configs: remove automotive directory (Eric Chanudet) [RHEL-96355]
  - net: hsr: fix fill_frame_info() regression vs VLAN packets (Felix Maurer) [RHEL-84580]
  - net: hsr: avoid potential out-of-bound access in fill_frame_info() (Felix Maurer) [RHEL-84580]
  - net: hsr: fix hsr_init_sk() vs network/transport headers. (Felix Maurer) [RHEL-84580]
  - KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (CKI Backport Bot) [RHEL-82650] {CVE-2024-58083}
  - bus: mhi: host: Fix race between unprepare and queue_buf (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: Add support for SA8775P endpoint (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Remove unused functions (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Avoid possible uninitialized fw_load_type (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Add a policy to enable image transfer via BHIe in PBL (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: Refactor BHI/BHIe based firmware loading (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: fix MHI BAR mapping (Mattijs Korpershoek) [RHEL-93889]
  - bus: mhi: host: pci_generic: Use pcim_iomap_region() to request and map MHI BAR (Mattijs Korpershoek) [RHEL-93889]
  - docs: ABI: sysfs-bus-mhi: Update contact info (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Update device ID for SA8775P (Mattijs Korpershoek) [RHEL-93889]
  - PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio' (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Fix the DMA data direction of dma_unmap_single() (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Enable MHI async read/write support (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Add support for DMA async read/write operation (Mattijs Korpershoek) [RHEL-93889]
  - PCI: epf-mhi: Simulate async read/write using iATU (Mattijs Korpershoek) [RHEL-93889]
  - md/raid1: Add check for missing source disk in process_checks() (Nigel Croxon) [RHEL-96672]
  - s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (Thomas Huth) [RHEL-86670]
  - KVM: s390: vsie: fix some corner-cases when grabbing vsie pages (Thomas Huth) [RHEL-85183]
  - KVM: s390: Reject KVM_SET_GSI_ROUTING on ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: Reject setting flic pfault attributes on ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: vsie: fix virtual/physical address in unpin_scb() (Thomas Huth) [RHEL-85183]
  - KVM: s390: Increase size of union sca_utility to four bytes (Thomas Huth) [RHEL-85183]
  - KVM: s390: Remove one byte cmpxchg() usage (Thomas Huth) [RHEL-85183]
  - KVM: s390: Use try_cmpxchg() instead of cmpxchg() loops (Thomas Huth) [RHEL-85183]
  - s390/mm/gmap: Fix __gmap_fault() return code (Thomas Huth) [RHEL-85183]
  - s390/mm/gmap: Refactor gmap_fault() and add support for pfault (Thomas Huth) [RHEL-85183]
  - s390/kvm: Remove kvm_arch_fault_in_page() (Thomas Huth) [RHEL-85183]
  - KVM: s390: Use kvm_release_page_dirty() to unpin "struct page" memory (Thomas Huth) [RHEL-85183]
  - s390/kvm: Move bitfields for dat tables (Thomas Huth) [RHEL-85183]
  - s390/entry: Pass the asce as parameter to sie64a() (Thomas Huth) [RHEL-85183]
  - kvm: s390: Reject memory region operations for ucontrol VMs (Thomas Huth) [RHEL-85183]
  - KVM: s390: vsie: retry SIE instruction on host intercepts (Thomas Huth) [RHEL-85183]
  - KVM: s390: Don't re-setup dummy routing when KVM_CREATE_IRQCHIP (Thomas Huth) [RHEL-85183]
  - procfs: fix a locking bug in a vmcore_add_device_dump() error path (Thomas Huth) [RHEL-72974]
  - redhat: Enable CONFIG_VIRTIO_MEM on s390x (Thomas Huth) [RHEL-72974]
  - s390/kdump: virtio-mem kdump support (CONFIG_PROC_VMCORE_DEVICE_RAM) (Thomas Huth) [RHEL-72974]
  - virtio-mem: support CONFIG_PROC_VMCORE_DEVICE_RAM (Thomas Huth) [RHEL-72974]
  - virtio-mem: remember usable region size (Thomas Huth) [RHEL-72974]
  - virtio-mem: mark device ready before registering callbacks in kdump mode (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: introduce PROC_VMCORE_DEVICE_RAM to detect device RAM ranges in 2nd kernel (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: factor out freeing a list of vmcore ranges (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: factor out allocating a vmcore range and adding it to a list (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: move vmcore definitions out of kcore.h (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: prefix all pr_* with "vmcore:" (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: disallow vmcore modifications while the vmcore is open (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: replace vmcoredd_mutex by vmcore_mutex (Thomas Huth) [RHEL-72974]
  - fs/proc/vmcore: convert vmcore_cb_lock into vmcore_mutex (Thomas Huth) [RHEL-72974]
  - s390/sparsemem: Provide memory_add_physaddr_to_nid() with CONFIG_NUMA (Thomas Huth) [RHEL-72974]
  - s390/sparsemem: Reduce section size to 128 MiB (Thomas Huth) [RHEL-72974]
  - lib/Kconfig.debug: Default STRICT_DEVMEM to "y" on s390 (Thomas Huth) [RHEL-72974]
  - virtio-mem: s390 support (Thomas Huth) [RHEL-72974]
  - s390/physmem_info: Query diag500(STORAGE LIMIT) to support QEMU/KVM memory devices (Thomas Huth) [RHEL-72974]
  - Documentation: s390-diag.rst: Document diag500(STORAGE LIMIT) subfunction (Thomas Huth) [RHEL-72974]
  - Documentation: s390-diag.rst: Make diag500 a generic KVM hypercall (Thomas Huth) [RHEL-72974]
  - s390/boot: Replace S390_lowcore by get_lowcore() (Thomas Huth) [RHEL-72974]
  - s390: Add get_lowcore() function (Thomas Huth) [RHEL-72974]
  - s390: Sort mcount locations at build time (Thomas Huth) [RHEL-86670]
  - s390/build: Avoid relocation information in final vmlinux (Thomas Huth) [RHEL-86670]
  - s390/boot: Fix KASLR base offset off by __START_KERNEL bytes (Thomas Huth) [RHEL-86670]
  - s390/mm: Allow large pages for KASAN shadow mapping (Thomas Huth) [RHEL-86670]
  - s390/boot: Avoid possible physmem_info segment corruption (Thomas Huth) [RHEL-86670] {CVE-2024-45014}
  - s390: Fix linker error when -no-pie option is unavailable (Thomas Huth) [RHEL-86670]
  - s390: Always enable EXPOLINE_EXTERN if supported (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix DirectMap accounting (Thomas Huth) [RHEL-86670]
  - s390/mm/ptdump: Fix handling of identity mapping area (Thomas Huth) [RHEL-86670]
  - s390/setup: Fix __pa/__va for modules under non-GPL licenses (Thomas Huth) [RHEL-86670]
  - pgtable: fix s390 ptdesc field comments (Thomas Huth) [RHEL-86670]
  - s390/kfence: Split kfence pool into 4k mappings in arch_kfence_init_pool() (Thomas Huth) [RHEL-86670]
  - s390: mm: accelerate pagefault when badaccess (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: move VM_FAULT_ERROR handling to do_exception() (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove VM_FAULT_BADMAP and VM_FAULT_BADACCESS (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove VM_FAULT_SIGNAL (Thomas Huth) [RHEL-86670]
  - s390/mm: remove __GFP_HIGHMEM masking (Thomas Huth) [RHEL-86670]
  - s390/dasd: Fix invalid dereferencing of indirect CCW data pointer (Thomas Huth) [RHEL-86670]
  - s390/vfio_ccw: Fix target addresses of TIC CCWs (Thomas Huth) [RHEL-86670]
  - s390: Update defconfigs (Thomas Huth) [RHEL-86670]
  - s390: remove native mmap2() syscall (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not adjust GOT entries for undef weak sym (Thomas Huth) [RHEL-86670]
  - s390/sclp: Fix sclp_init() cleanup on failure (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: Fix config change notifications (Thomas Huth) [RHEL-86670]
  - s390/mm: Restore mapping of kernel image using large pages (Thomas Huth) [RHEL-86670]
  - s390/mm: Allow large pages only for aligned physical addresses (Thomas Huth) [RHEL-86670]
  - s390: Update defconfigs (Thomas Huth) [RHEL-86670]
  - s390/crash: Do not use VM info if os_info does not have it (Thomas Huth) [RHEL-86670]
  - s390/zcrypt: Use kvcalloc() instead of kvmalloc_array() (Thomas Huth) [RHEL-86670]
  - s390/kprobes: Remove custom insn slot allocator (Thomas Huth) [RHEL-86670]
  - s390/boot: Remove alt_stfle_fac_list from decompressor (Thomas Huth) [RHEL-86670]
  - s390/ap: Fix bind complete udev event sent after each AP bus scan (Thomas Huth) [RHEL-86670]
  - s390/ap: Fix crash in AP internal function modify_bitmap() (Thomas Huth) [RHEL-86670]
  - s390/ipl: Introduce sysfs attribute 'scp_data' for dump ipl (Thomas Huth) [RHEL-86670]
  - s390/ipl: Introduce macros for (re)ipl sysfs attribute 'scp_data' (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix incorrect initialization of nvme dump block (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix incorrect initialization of len fields in nvme reipl block (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix never less than zero warning (Thomas Huth) [RHEL-86670]
  - s390/ipl: Do not accept z/VM CP diag X'008' cmds longer than max length (Thomas Huth) [RHEL-86670]
  - s390/ipl: Fix size of vmcmd buffers for sending z/VM CP diag X'008' cmds (Thomas Huth) [RHEL-86670]
  - s390/alternatives: Convert runtime sanity check into compile time check (Thomas Huth) [RHEL-86670]
  - s390/iucv: Unexport iucv_root (Thomas Huth) [RHEL-86670]
  - tty: hvc-iucv: Make use of iucv_alloc_device() (Thomas Huth) [RHEL-86670]
  - tty: hvc-iucv: fix function pointer casts (Thomas Huth) [RHEL-86670]
  - tty: hvc: convert to u8 and size_t (Thomas Huth) [RHEL-86670]
  - s390/vmlogrdr: Make use of iucv_alloc_device() (Thomas Huth) [RHEL-86670]
  - s390/irq: Set CIF_NOHZ_DELAY in do_io_irq() (Thomas Huth) [RHEL-86670]
  - s390: Mark psw in __load_psw_mask() as __unitialized (Thomas Huth) [RHEL-86670]
  - s390/vtime: Use get_cpu_timer() (Thomas Huth) [RHEL-86670]
  - s390/idle: Rewrite psw_idle() in C (Thomas Huth) [RHEL-86670]
  - s390/ftrace: Avoid calling unwinder in ftrace_return_address() (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Use break instead of return statement (Thomas Huth) [RHEL-86670]
  - s390/stackstrace: Detect vdso stack frames (Thomas Huth) [RHEL-86670]
  - s390/vdso: Introduce and use struct stack_frame_vdso_wrapper (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Improve detection of invalid instruction pointers (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Skip first user stack frame (Thomas Huth) [RHEL-86670]
  - s390/stacktrace: Merge perf_callchain_user() and arch_stack_walk_user() (Thomas Huth) [RHEL-86670]
  - s390/ftrace: Use unwinder instead of __builtin_return_address() (Thomas Huth) [RHEL-86670]
  - s390: add USER_STACKTRACE support (Thomas Huth) [RHEL-86670]
  - s390/perf: implement perf_callchain_user() (Thomas Huth) [RHEL-86670]
  - s390/fpu: Remove comment about TIF_FPU (Thomas Huth) [RHEL-86670]
  - s390/pci: Add missing virt_to_phys() for directed DIBV (Thomas Huth) [RHEL-86670]
  - s390/vdso: Use standard stack frame layout (Thomas Huth) [RHEL-86670]
  - s390/vdso: Generate unwind information for C modules (Thomas Huth) [RHEL-86670]
  - s390/pgtable: Add missing hardware bits for puds, pmds (Thomas Huth) [RHEL-86670]
  - s390: Compile kernel with -fPIC and link with -no-pie (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: Drop .hash and .gnu.hash for !CONFIG_PIE_BUILD (Thomas Huth) [RHEL-86670]
  - s390/os_info: Fix array size in struct os_info (Thomas Huth) [RHEL-86670]
  - s390/os_info: Initialize old os_info in standalone dump kernel (Thomas Huth) [RHEL-86670]
  - s390/vfio-ap: Driver feature advertisement (Thomas Huth) [RHEL-73321]
  - docs: Update s390 vfio-ap doc for ap_config sysfs attribute (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Add write support to sysfs attr ap_config (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Ignore duplicate link requests in vfio_ap_mdev_link_queue (Thomas Huth) [RHEL-73321]
  - s390/vfio-ap: Add sysfs attr, ap_config, to export mdev state (Thomas Huth) [RHEL-73321]
  - s390/ap: Externalize AP bus specific bitmap reading function (Thomas Huth) [RHEL-73321]
  - s390/ap: make ap_bus_type const (Thomas Huth) [RHEL-73321]
  - s390/expoline: Make modules use kernel expolines (Thomas Huth) [RHEL-86670]
  - s390/nospec: Correct modules thunk offset calculation (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not rescue .vmlinux.relocs section (Thomas Huth) [RHEL-86670]
  - s390/boot: Rework deployment of the kernel image (Thomas Huth) [RHEL-86670]
  - redhat: Set the CONFIG_KERNEL_IMAGE_BASE option (Thomas Huth) [RHEL-86670]
  - s390: Map kernel at fixed location when KASLR is disabled (Thomas Huth) [RHEL-86670]
  - s390/mm: Uncouple physical vs virtual address spaces (Thomas Huth) [RHEL-86670]
  - s390/crash: Use old os_info to create PT_LOAD headers (Thomas Huth) [RHEL-86670]
  - s390/vmcoreinfo: Store virtual memory layout (Thomas Huth) [RHEL-86670]
  - s390/os_info: Store virtual memory layout (Thomas Huth) [RHEL-86670]
  - s390/os_info: Introduce value entries (Thomas Huth) [RHEL-86670]
  - s390/boot: Make .amode31 section address range explicit (Thomas Huth) [RHEL-86670]
  - s390/boot: Make identity mapping base address explicit (Thomas Huth) [RHEL-86670]
  - s390/boot: Uncouple virtual and physical kernel offsets (Thomas Huth) [RHEL-86670]
  - s390/mm: Create virtual memory layout structure (Thomas Huth) [RHEL-86670]
  - s390/mm: Move KASLR related to <asm/page.h> (Thomas Huth) [RHEL-86670]
  - s390/boot: Swap vmalloc and Lowcore/Real Memory Copy areas (Thomas Huth) [RHEL-86670]
  - s390/boot: Reduce size of identity mapping on overlap (Thomas Huth) [RHEL-86670]
  - s390/boot: Consider DCSS segments on memory layout setup (Thomas Huth) [RHEL-86670]
  - s390/boot: Do not force vmemmap to start at MAX_PHYSMEM_BITS (Thomas Huth) [RHEL-86670]
  - s390/irq,nmi: Include <asm/vtime.h> header directly (Thomas Huth) [RHEL-86670]
  - s390/cio: fix tracepoint subchannel type field (Thomas Huth) [RHEL-86670]
  - s390/mm: Convert gmap_make_secure to use a folio (Thomas Huth) [RHEL-86670]
  - s390/mm: Convert make_page_secure to use a folio (Thomas Huth) [RHEL-86670]
  - s390: adjust indentation of RELOCS command build step out (Thomas Huth) [RHEL-86670]
  - s390/cio: convert sprintf()/snprintf() to sysfs_emit() (Thomas Huth) [RHEL-86670]
  - redhat: Rename CONFIG_ZCRYPT_DEBUG to CONFIG_AP_DEBUG (Thomas Huth) [RHEL-86670]
  - s390/ap: rename ap debug configuration option (Thomas Huth) [RHEL-86670]
  - redhat: Enable new CONFIG_AP option (Thomas Huth) [RHEL-86670]
  - s390/ap: modularize ap bus (Thomas Huth) [RHEL-86670]
  - s390/chsc: use notifier for AP configuration changes (Thomas Huth) [RHEL-86670]
  - s390/ap: swap IRQ and bus/device registration (Thomas Huth) [RHEL-86670]
  - s390/ap: rework ap initialization (Thomas Huth) [RHEL-86670]
  - s390/ap: use static qci information (Thomas Huth) [RHEL-86670]
  - s390/cio: Ensure the copied buf is NUL terminated (Thomas Huth) [RHEL-86670]
  - s390/vdso: Add CFI for RA register to asm macro vdso_func (Thomas Huth) [RHEL-86670]
  - s390/3270: Fix buffer assignment (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix clearing storage keys for huge pages (Thomas Huth) [RHEL-86670]
  - s390/mm: Fix NULL pointer dereference (Thomas Huth) [RHEL-86670]
  - s390/entry: align system call table on 8 bytes (Thomas Huth) [RHEL-86670]
  - s390/pai: fix sampling event removal for PMU device driver (Thomas Huth) [RHEL-86670]
  - s390/preempt: mark all functions __always_inline (Thomas Huth) [RHEL-86670]
  - s390/atomic: mark all functions __always_inline (Thomas Huth) [RHEL-86670]
  - s390/mm: fix NULL pointer dereference (Thomas Huth) [RHEL-86670]
  - s390/entry: compare gmap asce to determine guest/host fault (Thomas Huth) [RHEL-86670]
  - s390/entry: remove OUTSIDE macro (Thomas Huth) [RHEL-86670]
  - s390/entry: add CIF_SIE flag and remove sie64a() address check (Thomas Huth) [RHEL-86670]
  - s390/cio: use while (i--) pattern to clean up (Thomas Huth) [RHEL-86670]
  - s390/raw3270: improve raw3270_init() readability (Thomas Huth) [RHEL-86670]
  - s390/tape: make tape_class constant (Thomas Huth) [RHEL-86670]
  - s390/vmlogrdr: make vmlogrdr_class constant (Thomas Huth) [RHEL-86670]
  - s390/vmur: make vmur_class constant (Thomas Huth) [RHEL-86670]
  - s390/zcrypt: make zcrypt_class constant (Thomas Huth) [RHEL-86670]
  - s390/vfio-ap: make matrix_bus const (Thomas Huth) [RHEL-86670]
  - s390/mm: provide simple ARCH_HAS_DEBUG_VIRTUAL support (Thomas Huth) [RHEL-86670]
  - s390/vfio_ccw_cp: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/tape: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/3270: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/raw3270: fix indentation/whitespace errors (Thomas Huth) [RHEL-86670]
  - s390/3215: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - tty: con3215: convert to u8 and size_t (Thomas Huth) [RHEL-86670]
  - s390/vmur: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/scm: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: remove superfluous virt_to_phys() conversion (Thomas Huth) [RHEL-86670]
  - s390/cio,idal: code cleanup (Thomas Huth) [RHEL-86670]
  - s390/dasd: use new address translation helpers (Thomas Huth) [RHEL-86670]
  - s390/dasd: remove superfluous virt_to_phys() conversion (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: avoid converting dma addresses / handles (Thomas Huth) [RHEL-86670]
  - s390/virtio_ccw: use DMA handle from DMA API (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: allow response buffer in normal memory (Thomas Huth) [RHEL-86670]
  - s390/tools: handle rela R_390_GOTPCDBL/R_390_GOTOFF64 (Thomas Huth) [RHEL-86670]
  - s390/cache: prevent rebuild of shared_cpu_list (Thomas Huth) [RHEL-86670]
  - s390/configs: increase number of LOCKDEP_BITS (Thomas Huth) [RHEL-86670]
  - s390/pai: change sampling event assignment for PMU device driver (Thomas Huth) [RHEL-86670]
  - s390/dasd_eckd: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/dcssblk: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/boot: fix minor comment style damages (Thomas Huth) [RHEL-86670]
  - s390/boot: do not check for zero-termination relocation entry (Thomas Huth) [RHEL-86670]
  - s390/boot: make type of __vmlinux_relocs_64_start|end consistent (Thomas Huth) [RHEL-86670]
  - s390/boot: sanitize kaslr_adjust_relocs() function prototype (Thomas Huth) [RHEL-86670]
  - s390/boot: simplify GOT handling (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: fix .got.plt assertion (Thomas Huth) [RHEL-86670]
  - dcssblk: handle alloc_dax() -EOPNOTSUPP failure (Thomas Huth) [RHEL-86670]
  - s390/pgtable: define PFN_PTE_SHIFT (Thomas Huth) [RHEL-86670]
  - s390/boot: workaround current 'llvm-objdump -t -j ...' behavior (Thomas Huth) [RHEL-86670]
  - s390: enable MHP_MEMMAP_ON_MEMORY (Thomas Huth) [RHEL-86670]
  - s390/mm: implement MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers (Thomas Huth) [RHEL-86670]
  - s390/sclp: remove unhandled memory notifier type (Thomas Huth) [RHEL-86670]
  - s390/mm: allocate vmemmap pages from self-contained memory range (Thomas Huth) [RHEL-86670]
  - mm/memory_hotplug: introduce MEM_PREPARE_ONLINE/MEM_FINISH_OFFLINE notifiers (Thomas Huth) [RHEL-86670]
  - s390/vdso/data: Drop unnecessary header include (Thomas Huth) [RHEL-86670]
  - s390: compile relocatable kernel without -fPIE (Thomas Huth) [RHEL-86670]
  - s390: add relocs tool (Thomas Huth) [RHEL-86670]
  - s390/vdso64: filter out munaligned-symbols flag for vdso (Thomas Huth) [RHEL-86670]
  - s390/boot: add 'alloc' to info.bin .vmlinux.info section flags (Thomas Huth) [RHEL-86670]
  - s390/pci: Fix potential double remove of hotplug slot (Thomas Huth) [RHEL-86670]
  - s390/pci: remove hotplug slot when releasing the device (Thomas Huth) [RHEL-86670]
  - s390/pci: introduce lock to synchronize state of zpci_dev's (Thomas Huth) [RHEL-86670]
  - s390/pci: rename lock member in struct zpci_dev (Thomas Huth) [RHEL-86670]
  - s390/pai: adjust whitespace indentation (Thomas Huth) [RHEL-86670]
  - s390/pai: simplify event start function for perf stat (Thomas Huth) [RHEL-86670]
  - s390/pai: save PAI counter value page in event structure (Thomas Huth) [RHEL-86670]
  - s390/crc32le: convert to C (Thomas Huth) [RHEL-86670]
  - s390/crc32be: convert to C (Thomas Huth) [RHEL-86670]
  - s390/fpu: add vector instruction inline assemblies for crc32 (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: convert bogomips calculation to C (Thomas Huth) [RHEL-86670]
  - s390/raid6: convert to use standard fpu_*() inline assemblies (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide csum_partial_copy_nocheck() (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide vector register variant of csum_partial() (Thomas Huth) [RHEL-86670]
  - s390/checksum: provide and use cksm() inline assembly (Thomas Huth) [RHEL-86670]
  - s390/checksum: call instrument_read() instead of kasan_check_read() (Thomas Huth) [RHEL-86670]
  - s390/nmi: remove register validation code (Thomas Huth) [RHEL-86670]
  - s390/setup: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390: don't allow CONFIG_COMPAT with LD=ld.lld (Thomas Huth) [RHEL-86670]
  - s390/vdso: remove unused ENTRY in linker scripts (Thomas Huth) [RHEL-86670]
  - s390/bug: remove entry size from __bug_table section (Thomas Huth) [RHEL-86670]
  - s390: link vmlinux with '-z notext' (Thomas Huth) [RHEL-86670]
  - s390: select CONFIG_ARCH_WANT_LD_ORPHAN_WARN (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle commonly discarded sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle ELF required sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle DWARF debug sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle '.rela' sections (Thomas Huth) [RHEL-86670]
  - s390/boot: vmlinux.lds.S: handle '.init.text' (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: explicitly keep various sections (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: explicitly handle '.got' and '.plt' sections (Thomas Huth) [RHEL-86670]
  - s390: vmlinux.lds.S: handle '.data.rel' sections explicitly (Thomas Huth) [RHEL-86670]
  - s390/boot: add support for CONFIG_LD_ORPHAN_WARN (Thomas Huth) [RHEL-86670]
  - s390/dasd: fix double module refcount decrement (Thomas Huth) [RHEL-86670]
  - s390/dasd: Improve ERP error messages (Thomas Huth) [RHEL-86670]
  - s390/extmem: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cio: make scm_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/cio: make ccw_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/cio: make css_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/ccwgroup: make ccwgroup_bus_type const (Thomas Huth) [RHEL-86670]
  - s390/time: make stp_subsys const (Thomas Huth) [RHEL-86670]
  - s390/vdso: drop '-fPIC' from LDFLAGS (Thomas Huth) [RHEL-86670]
  - s390/cmf: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/cmf: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/cio: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/mmap: disable mmap alignment when randomize_va_space = 0 (Thomas Huth) [RHEL-86670]
  - s390/hypfs_sprp: remove unneeded DMA zone allocation (Thomas Huth) [RHEL-86670]
  - s390/diag: add missing virt_to_phys() translation to diag14() (Thomas Huth) [RHEL-86670]
  - s390/vmur: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/time: improve steering precision (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: return proper error code in paicrypt_init (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: emit error on too many counters (Thomas Huth) [RHEL-86670]
  - s390/hypfs_diag0c: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/hypfs_sprp: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/appldata: fix virtual vs physical address confusion (Thomas Huth) [RHEL-86670]
  - s390/diag: fix diag26c() physical vs virtual address confusion (Thomas Huth) [RHEL-86670]
  - s390/configs: update default configurations (Thomas Huth) [RHEL-86670]
  - s390/configs: enable INIT_STACK_ALL_ZERO in all configurations (Thomas Huth) [RHEL-86670]
  - s390/configs: provide compat topic configuration target (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use dev_*() for device log messages (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove PRINTK_HEADER and KMSG_COMPONENT definitions (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove %p format specifier from error messages (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use dev_err() over printk() (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove unused message logging macros (Thomas Huth) [RHEL-86670]
  - s390/dasd: Move allocation error message to DBF (Thomas Huth) [RHEL-86670]
  - s390/dasd: Remove unnecessary errorstring generation (Thomas Huth) [RHEL-86670]
  - s390/dasd: Use sysfs_emit() over sprintf() (Thomas Huth) [RHEL-86670]
  - s390/dasd: Simplify uid string generation (Thomas Huth) [RHEL-86670]
  - s390/pai_ext: split function paiext_push_sample (Thomas Huth) [RHEL-86670]
  - s390/pai_ext: rework function paiext_copy argments (Thomas Huth) [RHEL-86670]
  - s390/pai: rework paiXXX_start and paiXXX_stop functions (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: split function paicrypt_push_sample (Thomas Huth) [RHEL-86670]
  - s390/pai: rework paixxxx_getctr interface (Thomas Huth) [RHEL-86670]
  - s390/mm,fault: remove not needed tsk variable (Thomas Huth) [RHEL-86670]
  - s390/pci: fix max size calculation in zpci_memcpy_toio() (Thomas Huth) [RHEL-86670]
  - s390/compat: change default for CONFIG_COMPAT to "n" (Thomas Huth) [RHEL-86670]
  - s390/cio: make sch->lock spinlock pointer a member (Thomas Huth) [RHEL-86670]
  - s390/nmi: implement and use local_mcck_save() / local_mcck_restore() (Thomas Huth) [RHEL-86670]
  - s390/nmi: consistently enable machine checks in trap_init() (Thomas Huth) [RHEL-86670]
  - s390/ctlreg: return old register contents when changing bits (Thomas Huth) [RHEL-86670]
  - s390/traps: only define is_valid_bugaddr() under CONFIG_GENERIC_BUG (Thomas Huth) [RHEL-86670]
  - s390/dasd: remove dasd_stats_generic_show() (Thomas Huth) [RHEL-86670]
  - tty: con3215: drop raw3215_info::ubuffer (Thomas Huth) [RHEL-86670]
  - s390/uvdevice: Report additional-data length for attestation (Thomas Huth) [RHEL-86670]
  - s390/boot: always align vmalloc area on segment boundary (Thomas Huth) [RHEL-86670]
  - s390/sysinfo: add variable capacity information (Thomas Huth) [RHEL-86670]
  - s390/mm: make pte_free_tlb() similar to pXd_free_tlb() (Thomas Huth) [RHEL-86670]
  - s390/mm: use compound page order to distinguish page tables (Thomas Huth) [RHEL-86670]
  - s390/mm: use full 4KB page for 2KB PTE (Thomas Huth) [RHEL-86670]
  - s390/mm: add missing conversion to use ptdescs (Thomas Huth) [RHEL-86670]
  - s390/cmma: rework no-dat handling (Thomas Huth) [RHEL-86670]
  - s390/cmma: move arch_set_page_dat() to header file (Thomas Huth) [RHEL-86670]
  - s390/pai: cleanup event initialization (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: remove per-cpu variable assignement in event initialization (Thomas Huth) [RHEL-86670]
  - s390/pai: initialize event count once at initialization (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: use PERF_ATTACH_TASK define for per task detection (Thomas Huth) [RHEL-86670]
  - s390/pai_crypto: dynamically allocate percpu pai crypto map data structure (Thomas Huth) [RHEL-86670]
  - dm mpath: replace spin_lock_irqsave with spin_lock_irq (Benjamin Marzinski) [RHEL-89480]
  - dm-mpath: Don't grab work_mutex while probing paths (Benjamin Marzinski) [RHEL-89480]
  - dm mpath: Interface for explicit probing of active paths (Benjamin Marzinski) [RHEL-89480]
  - dm: Allow .prepare_ioctl to handle ioctls directly (Benjamin Marzinski) [RHEL-89480]
  - rv: Update RHEL kconfigs for 6.15 upstream code (Gabriele Monaco) [RHEL-92623]
  - rv: Fix out-of-bound memory access in rv_is_container_monitor() (Gabriele Monaco) [RHEL-92623]
  - rv: Fix missing unlock on double nested monitors return path (Gabriele Monaco) [RHEL-92623]
  - handle man-page for rv-mon-sched in redhat/kernel.spec.template (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Add sched pages to the indices (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Allow rv list to filter for container (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Add docs for the sched monitors (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Add support for nested monitors (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Add support for nested monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add scpd, snep and sncid per-cpu monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add snroc per-task monitor (Gabriele Monaco) [RHEL-92623]
  - rv: Add sco and tss per-cpu monitors (Gabriele Monaco) [RHEL-92623]
  - rv: Add option for nested monitors and include sched (Gabriele Monaco) [RHEL-92623]
  - sched: Add sched tracepoints for RV task model (Gabriele Monaco) [RHEL-92623]
  - rv: Add license identifiers to monitor files (Gabriele Monaco) [RHEL-92623]
  - tracing: Fix DECLARE_TRACE_CONDITION (Gabriele Monaco) [RHEL-92623]
  - rv: Reset per-task monitors also for idle tasks (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Implement event type detection (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Auto patch current kernel source (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92623]
  - rv: Simplify manual steps in monitor creation (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Add support for name and description options (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: More robust template variables (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Unify main.c templates (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Fix template directory detection (Gabriele Monaco) [RHEL-92623]
  - Documentation/rv: Fix typos (Gabriele Monaco) [RHEL-92623]
  - verification/dot2: Improve dot parser robustness (Gabriele Monaco) [RHEL-92623]
  - rv: Fix a typo (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92623]
  - tools/rv: Correct the grammatical errors in the comments (Gabriele Monaco) [RHEL-92623]
  - Documentation/tools/rv: fix document header (Gabriele Monaco) [RHEL-92623]
  - rv: Update rv_en(dis)able_monitor doc to match kernel-doc (Gabriele Monaco) [RHEL-92623]
  - verification/dot2k: Delete duplicate imports (Gabriele Monaco) [RHEL-92623]
  - rv: Set variable 'da_mon_##name' to static (Gabriele Monaco) [RHEL-92623]
  - tmpfs,xattr: enable limited user extended attributes (Ian Kent) [RHEL-65718]
  - KVM: VMX: Use separate subclasses for PI wakeup lock to squash false positive (Maxim Levitsky) [RHEL-86152]
  - KVM: VMX: Assert that IRQs are disabled when putting vCPU on PI wakeup list (Maxim Levitsky) [RHEL-86152]
  - tracing/osnoise: Allow arbitrarily long CPU string (Tomas Glozar) [RHEL-94317]
  - selftests/bpf: Fix freplace_link segfault in tailcalls prog test (Viktor Malik) [RHEL-85485]
  - bpf: Add tracepoints with null-able arguments (Viktor Malik) [RHEL-85485]
  - bpf: Fix bpf_get_smp_processor_id() on !CONFIG_SMP (Viktor Malik) [RHEL-85485]
  - bpf: Avoid deadlock caused by nested kprobe and fentry bpf programs (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for raw_tp NULL args (Viktor Malik) [RHEL-85485]
  - bpf: Augment raw_tp arguments with PTR_MAYBE_NULL (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add test for narrow ctx load for pointer args (Viktor Malik) [RHEL-85485]
  - bpf: Check size for BTF-based ctx access of pointer members (Viktor Malik) [RHEL-85485]
  - bpf: Fix theoretical prog_array UAF in __uprobe_perf_func() (Viktor Malik) [RHEL-85485]
  - bpf: fix potential error return (Viktor Malik) [RHEL-85485]
  - bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors (Viktor Malik) [RHEL-75889 RHEL-85485] {CVE-2024-56675}
  - selftests/bpf: Add more test cases for LPM trie (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Move test_lpm_map.c to map_tests (Viktor Malik) [RHEL-85485]
  - bpf: Use raw_spinlock_t for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Switch to bpf mem allocator for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Fix exact match conditions in trie_get_next_key() (Viktor Malik) [RHEL-85485]
  - bpf: Handle in-place update for full LPM trie correctly (Viktor Malik) [RHEL-85485]
  - bpf: Handle BPF_EXIST and BPF_NOEXIST for LPM trie (Viktor Malik) [RHEL-85485]
  - bpf: Remove unnecessary kfree(im_node) in lpm_trie_update_elem (Viktor Malik) [RHEL-85485]
  - bpf: Fix narrow scalar spill onto 64-bit spilled scalar slots (Viktor Malik) [RHEL-85485]
  - bpf: Don't mark STACK_INVALID as STACK_MISC in mark_stack_slot_misc (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for iter arg check (Viktor Malik) [RHEL-85485]
  - bpf: Ensure reg is PTR_TO_STACK in process_iter_arg (Viktor Malik) [RHEL-85485]
  - bpftool: fix potential NULL pointer dereferencing in prog_dump() (Viktor Malik) [RHEL-85485]
  - bpf: Add kernel symbol for struct_ops trampoline (Viktor Malik) [RHEL-85485]
  - bpf: Use function pointers count as struct_ops links count (Viktor Malik) [RHEL-85485]
  - bpf: Call free_htab_elem() after htab_unlock_bucket() (Viktor Malik) [RHEL-85485 RHEL-89790]
  - bpf: Force uprobe bpf program to always return 0 (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add tests for raw_tp null handling (Viktor Malik) [RHEL-85485]
  - bpf, bpftool: Fix incorrect disasm pc (Viktor Malik) [RHEL-85485]
  - bpf: put bpf_link's program when link is safe to be deallocated (Viktor Malik) [RHEL-78741 RHEL-85485] {CVE-2024-56786}
  - bpf, arm64: Remove garbage frame for struct_ops trampoline (Viktor Malik) [RHEL-85485]
  - selftests/bpf: validate generic bpf_object and subskel APIs work together (Viktor Malik) [RHEL-85485]
  - libbpf: move global data mmap()'ing into bpf_object__load() (Viktor Malik) [RHEL-85485]
  - selftests/bpf: fix test_spin_lock_fail.c's global vars usage (Viktor Malik) [RHEL-85485]
  - selftests/bpf: Add test to verify tailcall and freplace restrictions (Viktor Malik) [RHEL-85485]
  - bpf: Prevent tailcall infinite loop caused by freplace (Viktor Malik) [RHEL-85485]
  - libbpf: never interpret subprogs in .text as entry programs (Viktor Malik) [RHEL-85485]
  - libbpf: fix sym_is_subprog() logic for weak global subprogs (Viktor Malik) [RHEL-85485]
  - libbpf: Fix output .symtab byte-order during linking (Viktor Malik) [RHEL-85485]
  - libbpf: Fix expected_attach_type set handling in program load callback (Viktor Malik) [RHEL-85485]


author: Augusto Caringi <acaringi@redhat.com> [5.14.0-596.el9]
changelog:
  - x86/entry: Add __init to ia32_emulation_override_cmdline() (Michael Petlan) [RHEL-52969]
  - selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size (Felix Maurer) [RHEL-83553]
  - selftests/bpf: Add launch time request to xdp_hw_metadata (Felix Maurer) [RHEL-83553]
  - selftests/bpf: xdp_hw_metadata reduce sleep interval (Felix Maurer) [RHEL-83553]
  - xsk: Add launch time hardware offload support to XDP Tx metadata (Felix Maurer) [RHEL-83553]
  - ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-83543]
  - ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-83543]
  - ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-83543]
  - ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-83543]
  - ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-83543]
  - ice: fix vf->num_mac count with port representors (Petr Oros) [RHEL-83543]
  - ice: use DSN instead of PCI BDF for ice_adapter index (Petr Oros) [RHEL-83543]
  - ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-83543]
  - ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-83543]
  - ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-83543]
  - ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-83543]
  - ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-83543]
  - ice: stop truncating queue ids when checking (Petr Oros) [RHEL-83543]
  - virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-83543]
  - ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-83543]
  - ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-83543]
  - ice: E825C PHY register cleanup (Petr Oros) [RHEL-83543]
  - ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-83543]
  - ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-83543]
  - ice: Add E830 checksum offload support (Petr Oros) [RHEL-83543]
  - ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-83543]
  - ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-83543]
  - ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-83543]
  - ice: do not configure destination override for switchdev (Petr Oros) [RHEL-83543]
  - ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-83543]
  - ice: Avoid setting default Rx VSI twice in switchdev setup (Petr Oros) [RHEL-83543]
  - virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-83543]
  - ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-83543]
  - virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-83543]
  - ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-83543]
  - ice: use generic unrolled_count() macro (Petr Oros) [RHEL-83543]
  - ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-83543]
  - ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-83543]
  - ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-83543]
  - ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-83543]
  - ice: support FW Recovery Mode (Petr Oros) [RHEL-83543]
  - ice: use string choice helpers (Petr Oros) [RHEL-83543]
  - ice: add fw and port health reporters (Petr Oros) [RHEL-83543]
  - ice: add recipe priority check in search (Petr Oros) [RHEL-83543]
  - ice: Add MDD logging via devlink health (Petr Oros) [RHEL-83543]
  - ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-83543]
  - ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-83543]
  - ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-83543]
  - ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-83543]
  - ice: reduce size of queue context fields (Petr Oros) [RHEL-83543]
  - ice: use <linux/packing.h> for Tx and Rx queue context data (Petr Oros) [RHEL-83543]
  - ice: use structures to keep track of queue context size (Petr Oros) [RHEL-83543]
  - ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-83543]
  - ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-83543]
  - ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-83543]
  - ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-83543]
  - ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-83543]
  - ice: Unbind the workqueue (Petr Oros) [RHEL-83543]
  - ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-83543]
  - ice: initialize pf->supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-83543]
  - ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-83543]
  - ice: Add support for persistent NAPI config (Petr Oros) [RHEL-83543]
  - ice: support optional flags in signature segment header (Petr Oros) [RHEL-83543]
  - ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-83543]
  - ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
  - ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-83543]
  - ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
  - virtchnl: fix m68k build. (Petr Oros) [RHEL-83543]
  - virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-83543]
  - ice: Cleanup unused declarations (Petr Oros) [RHEL-83543]
  - ice: Use common error handling code in two functions (Petr Oros) [RHEL-83543]
  - ice: Make use of assign_bit() API (Petr Oros) [RHEL-83543]
  - ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-83543]
  - ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-83543]
  - ice: Implement ethtool reset support (Petr Oros) [RHEL-83543]
  - crypto: qat - switch to standard pattern for PCI IDs (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove BITS_IN_DWORD() (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove initialization in device class (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_c3xxx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant prototypes in qat_c3xxx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_c62x (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant prototypes in qat_c62x (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_dh895xcc (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant prototypes in qat_dh895xcc (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_420xx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add shutdown handler to qat_4xxx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove access to parity register for QAT GEN4 (Vladis Dronov) [RHEL-72769]
  - crypto: qat - set parity error mask for qat_420xx (Vladis Dronov) [RHEL-72769]
  - crypto: qat - optimize allocations for fw authentication (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove redundant FW image size check (Vladis Dronov) [RHEL-72769]
  - crypto: qat - remove unused members in suof structure (Vladis Dronov) [RHEL-72769]
  - crypto: qat - introduce fuse array (Vladis Dronov) [RHEL-72769]
  - crypto: qat - add macro to write 64-bit values to registers (Vladis Dronov) [RHEL-72769]
  - crypto: qat - refactor service parsing logic (Vladis Dronov) [RHEL-72769]
  - crypto: qat - do not export adf_cfg_services (Vladis Dronov) [RHEL-72769]
  - crypto: qat - reorder objects in qat_common Makefile (Vladis Dronov) [RHEL-72769]
  - crypto: qat - fix object goals in Makefiles (Vladis Dronov) [RHEL-72769]
  - crypto: qat - set command ids as reserved (Vladis Dronov) [RHEL-72769]
  - crypto: drivers - Use str_enable_disable-like helpers [partial] (Vladis Dronov) [RHEL-72769]
  - crypto: qat - replace deprecated PCI functions (Vladis Dronov) [RHEL-72769]
  - lib/string_choices: Rearrange functions in sorted order (Vladis Dronov) [RHEL-72769]
  - net: atm: fix use after free in lec_send() (CKI Backport Bot) [RHEL-93133] {CVE-2025-22004}
  - PCI/MSI: Remove over-zealous hardware size check in pci_msix_validate_entries() (John W. Linville) [RHEL-89170]
  - scsi: smartpqi: Delete a stray tab in pqi_is_parity_write_stream() (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Update driver version to 2.1.34-035 (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Fix smp_processor_id() call trace for preemptible kernels (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Enhance WWID logging logic (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Add new PCI IDs (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Take drives offline when controller is offline (Don Brace) [RHEL-96280]
  - scsi: smartpqi: Use is_kdump_kernel() to check for kdump (Don Brace) [RHEL-96280]
  - redhat/configs: Enable CONFIG_PCIE_TPH (Ivan Vecera) [RHEL-94976]
  - PCI/TPH: Restore TPH Requester Enable correctly (Ivan Vecera) [RHEL-94976]
  - PCI/TPH: Add TPH documentation (Ivan Vecera) [RHEL-94976]
  - PCI/TPH: Add Steering Tag support (Ivan Vecera) [RHEL-94976]
  - PCI: Add TLP Processing Hints (TPH) support (Ivan Vecera) [RHEL-94976]
  - net: ena: Support persistent per-NAPI config. (Dennis Chen) [RHEL-94832]
  - treewide: Switch/rename to timer_delete[_sync]() (Dennis Chen) [RHEL-94832]
  - net: ena: Fix incorrect indentation (Dennis Chen) [RHEL-94832]
  - net: ena: remove devm from ethtool (Dennis Chen) [RHEL-94832]
  - net: ena: Remove deadcode (Dennis Chen) [RHEL-94832]
  - net: ena: Remove autopolling mode (Dennis Chen) [RHEL-94832]
  - ena: Link queues to NAPIs (Dennis Chen) [RHEL-94832]
  - ena: Link IRQs to NAPI instances (Dennis Chen) [RHEL-94832]
  - locking/semaphore: Use wake_q to wake up processes outside lock critical section (Waiman Long) [RHEL-87008]
  - ovl: remove unused forward declaration (Miklos Szeredi) [RHEL-83562]
  - ovl: don't allow datadir only (Miklos Szeredi) [RHEL-83562]
  - ovl: fail if trusted xattrs are needed but caller lacks permission (Miklos Szeredi) [RHEL-83562]
  - ovl: properly handle large files in ovl_security_fileattr (Miklos Szeredi) [RHEL-83562]
  - ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up (Miklos Szeredi) [RHEL-83562]
  - ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err (Miklos Szeredi) [RHEL-83562]
  - ima: detect changes to the backing overlay file (Miklos Szeredi) [RHEL-83562]
  - ovl: support encoding fid from inode with no alias (Miklos Szeredi) [RHEL-83562] {CVE-2025-21654}
  - ovl: pass realinode to ovl_encode_real_fh() instead of realdentry (Miklos Szeredi) [RHEL-83562]
  - ovl: fix encoding fid for lower only root (Miklos Szeredi) [RHEL-83562]
  - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir (Miklos Szeredi) [RHEL-83562]
  - ovl: pass string to ovl_parse_layer() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix dentry reference leak after changes to underlying layers (Miklos Szeredi) [RHEL-83562]
  - ovl: fix memory leak in ovl_parse_param() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix misformatted comment (Miklos Szeredi) [RHEL-83562]
  - ovl: add support for appending lowerdirs one by one (Miklos Szeredi) [RHEL-83562]
  - ovl: refactor layer parsing helpers (Miklos Szeredi) [RHEL-83562]
  - ovl: store and show the user provided lowerdir mount option (Miklos Szeredi) [RHEL-83562]
  - ovl: remove unused code in lowerdir param parsing (Miklos Szeredi) [RHEL-83562]
  - ovl: do not encode lower fh with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
  - ovl: do not open/llseek lower file with upper sb_writers held (Miklos Szeredi) [RHEL-83562]
  - ovl: reorder ovl_want_write() after ovl_inode_lock() (Miklos Szeredi) [RHEL-83562]
  - ovl: split ovl_want_write() into two helpers (Miklos Szeredi) [RHEL-83562]
  - fs: export mnt_{get,put}_write_access() to modules (Miklos Szeredi) [RHEL-83562]
  - ovl: add helper ovl_file_modified() (Miklos Szeredi) [RHEL-83562]
  - ovl: protect copying of realinode attributes to ovl inode (Miklos Szeredi) [RHEL-83562]
  - ovl: punt write aio completion to workqueue (Miklos Szeredi) [RHEL-83562]
  - ovl: propagate IOCB_APPEND flag on writes to realfile (Miklos Szeredi) [RHEL-83562]
  - ovl: use simpler function to convert iocb to rw flags (Miklos Szeredi) [RHEL-83562]
  - ovl: rely on SB_I_NOUMASK (Miklos Szeredi) [RHEL-83562]
  - ovl: temporarily disable appending lowedirs (Miklos Szeredi) [RHEL-83562]
  - ovl: fix regression in showing lowerdir mount option (Miklos Szeredi) [RHEL-83562]
  - ovl: fix regression in parsing of mount options with escaped comma (Miklos Szeredi) [RHEL-83562]
  - fs: factor out vfs_parse_monolithic_sep() helper (Miklos Szeredi) [RHEL-83562]
  - overlayfs: move xattr tables to .rodata (Miklos Szeredi) [RHEL-83562]
  - ovl: fix NULL pointer defer when encoding non-decodable lower fid (Miklos Szeredi) [RHEL-83562]
  - ovl: make use of ->layers safe in rcu pathwalk (Miklos Szeredi) [RHEL-83562]
  - ovl: fix file reference leak when submitting aio (Miklos Szeredi) [RHEL-83562]
  - overlayfs: set ctime when setting mtime and atime (Miklos Szeredi) [RHEL-83562]
  - ovl: fix incorrect fdput() on aio completion (Miklos Szeredi) [RHEL-83562]
  - ovl: use kiocb_{start,end}_write() helpers (Miklos Szeredi) [RHEL-83562]
  - ovl: make consistent use of OVL_FS() (Miklos Szeredi) [RHEL-83562]
  - ovl: auto generate uuid for new overlay filesystems (Miklos Szeredi) [RHEL-83562]
  - ovl: store persistent uuid/fsid with uuid=on (Miklos Szeredi) [RHEL-83562]
  - ovl: Handle verity during copy-up (Miklos Szeredi) [RHEL-83562]
  - ovl: Validate verity xattr when resolving lowerdata (Miklos Szeredi) [RHEL-83562]
  - ovl: Add framework for verity support (Miklos Szeredi) [RHEL-83562]
  - ovl: add support for unique fsid per instance (Miklos Szeredi) [RHEL-83562]
  - ovl: support encoding non-decodable file handles (Miklos Szeredi) [RHEL-83562]
  - ovl: Always reevaluate the file signature for IMA (Miklos Szeredi) [RHEL-83562]
  - overlayfs: convert to ctime accessor functions (Miklos Szeredi) [RHEL-83562]
  - ovl: move all parameter handling into params.{c,h} (Miklos Szeredi) [RHEL-83562]
  - ovl: reserve ability to reconfigure mount options with new mount api (Miklos Szeredi) [RHEL-83562]
  - ovl: modify layer parameter parsing (Miklos Szeredi) [RHEL-83562]
  - ovl: port to new mount api (Miklos Szeredi) [RHEL-83562]
  - ovl: factor out ovl_parse_options() helper (Miklos Szeredi) [RHEL-83562]
  - ovl: store enum redirect_mode in config instead of a string (Miklos Szeredi) [RHEL-83562]
  - ovl: pass ovl_fs to xino helpers (Miklos Szeredi) [RHEL-83562]
  - ovl: clarify ovl_get_root() semantics (Miklos Szeredi) [RHEL-83562]
  - ovl: negate the ofs->share_whiteout boolean (Miklos Szeredi) [RHEL-83562]
  - ovl: check type and offset of struct vfsmount in ovl_entry (Miklos Szeredi) [RHEL-83562]
  - overlayfs: Implement splice-read (Miklos Szeredi) [RHEL-83562]
  - ovl: check for ->listxattr() support (Miklos Szeredi) [RHEL-83562]
  - ovl: Kconfig: Fix spelling mistake "undelying" -> "underlying" (Miklos Szeredi) [RHEL-83562]
  - ovl: use inode instead of dentry where possible (Miklos Szeredi) [RHEL-83562]
  - ovl: Add comment on upperredirect reassignment (Miklos Szeredi) [RHEL-83562]
  - ovl: use plain list filler in indexdir and workdir cleanup (Miklos Szeredi) [RHEL-83562]
  - ovl: do not reconnect upper index records in ovl_indexdir_cleanup() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix comment typos (Miklos Szeredi) [RHEL-83562]
  - ovl: Use ovl mounter's fsuid and fsgid in ovl_link() (Miklos Szeredi) [RHEL-83562]
  - ovl: Use "buf" flexible array for memcpy() destination (Miklos Szeredi) [RHEL-83562]
  - ovl: fix spelling mistakes (Miklos Szeredi) [RHEL-83562]
  - ovl: drop WARN_ON() dentry is NULL in ovl_encode_fh() (Miklos Szeredi) [RHEL-83562]
  - ovl: fix some kernel-doc comments (Miklos Szeredi) [RHEL-83562]
  - ovl: warn if trusted xattr creation fails (Miklos Szeredi) [RHEL-83562]
  - ovl: use kvalloc in xattr copy-up (Miklos Szeredi) [RHEL-83562]
  - ovl: skip checking lower file's i_writecount on truncate (Miklos Szeredi) [RHEL-83562]
  - ovl: relax lookup error on mismatch origin ftype (Miklos Szeredi) [RHEL-83562]
  - Revert "ovl: Add framework for verity support" (Miklos Szeredi) [RHEL-83562]
  - Revert "ovl: Validate verity xattr when resolving lowerdata" (Miklos Szeredi) [RHEL-83562]
  - Revert "ovl: Handle verity during copy-up" (Miklos Szeredi) [RHEL-83562]
  - emulex/benet: correct command version selection in be_cmd_get_stats() (Dennis Chen) [RHEL-72658]
  - emulex/benet: Annotate flash_cookie as nonstring (Dennis Chen) [RHEL-72658]
  - be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink (Dennis Chen) [RHEL-72658]
  - be2net: fix potential memory leak in be_xmit() (Dennis Chen) [RHEL-72658]
  - be2net: Remove unused declarations (Dennis Chen) [RHEL-72658]
  - benet: fix return value check in be_lancer_xmit_workarounds() (Dennis Chen) [RHEL-72658]
  - be2net: Extend xmit workaround to BE3 chip (Dennis Chen) [RHEL-72658]
  - emulex/benet: clean up some inconsistent indenting (Dennis Chen) [RHEL-72658]
  - ethernet/emulex:fix repeated words in comments (Dennis Chen) [RHEL-72658]
  - scsi: storvsc: Explicitly set max_segment_size to UINT_MAX (Ewan D. Milne) [RHEL-96744]
  - Revert "PCI: Wait for device readiness with Configuration RRS" (John W. Linville) [RHEL-90580]
  - Revert "PCI: Rename CRS Completion Status to RRS" (John W. Linville) [RHEL-90580]
  - xen/events: replace evtchn_rwlock with RCU (Frank Liang) [RHEL-91670]
  - platform/x86: ISST: Correct command storage data length (David Arcari) [RHEL-88232]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Dodji Seketeli <dodji@redhat.com> - 2.6.1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel
  - Disable abidb as its dependencies are not present in RHEL 9.6
  - Resolves https://issues.redhat.com/browse/RHEL-64069


author: Dodji Seketeli <dodji@redhat.com> - 2.7.1
changelog:
  - Update to upstream 2.7 tarball
  - Add binutils-devel as buildrequire to potentially enable the CTF
    backend.  This will allow the enabling of the CTF backend for
    binutils-devel > 2.35.2
  - Update to changing SONAME (libabigail.so.6.0.0)
  - Add --enable-ctf to the configure command line


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-3
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935
  - Replace Jansson with json-c
    resolves: RHEL-65292


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "i686-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "x86_64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j40  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 2.78.0-1
changelog:
  - Bump glib2 version 2.78.0
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2023-32636, CVE-2023-29499, CVE-2023-32611, CVE-2023-32665, DoS
  - Resolves: RHEL-5019
  - Resolves: RHEL-5020
  - Resolves: RHEL-5092
  - Resolves: RHEL-5093
  - Resolves: RHEL-5094


author: Konstantin Kostiuk <kkostiuk@redhat.com> - 0.42.2-3
changelog:
  - Bump pixman version 0.42.2
  - Drop DesktopQE gating 
  - Fix CVEs: CVE-2022-44638
  - Resolves: RHEL-5013


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-1
changelog:
  - new version 1.20.1
  - Resolves: #1964814 - CVE-2021-23017 nginx: Off-by-one in ngx_resolver_copy()
    when labels are followed by a pointer to a root domain name


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.2-6
changelog:
  - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel
  - Resolves: RHEL-38108


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-1
changelog:
  - %pyproject_buildrequires: Add provisional -w flag for build backends without
    prepare_metadata_for_build_wheel hook
    When used, the wheel is built in %pyproject_buildrequires
    and information about runtime requires and extras is read from that wheel.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-5
changelog:
  - Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-6
changelog:
  - Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-69927 add support for python cryptography 44.0.0
  - Resolves: RHEL-69908 All user groups are not being included during HSM token validation
  - Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
  - Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
  - Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-74465 kinit with external idp user is failing
  - Resolves: RHEL-75656 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-67913 Add DNS over TLS Support, Require bind9.18 32:9.18.29-2 and new bind-dyndb-ldap 11.11-1


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-5
changelog:
  - Rebuilt needed for moving buildroot package to CRB
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed
  - Resolves: RHEL-67341 move python3-setuptools-rust to CRB [rhel-9]


author: Francisco Triviño <ftrivino@redhat.com> - 0.12.1-6
changelog:
  - Rebuilt needed to trigger signing of the package
  - Resolves: RHEL-70463 python3-setuptools-rust is not signed


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20174)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40255)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladis Dronov <vdronov@redhat.com> - 1.0.7-1
changelog:
  - Rebuild for qatzip v1.0.7
  - Fix snprintf truncation check (bz 2046925)
  - Add -fstack-protector-strong build option (bz 2044889)


author: Vladis Dronov <vdronov@redhat.com> - 1.0.9-1
changelog:
  - Rebuild for qatzip v1.0.9 (bz 2047744)
  - Update to require qatlib-devel >= 22.07.0 due to soversion bump


author: Vladis Dronov <vdronov@redhat.com> - 1.1.2-1
changelog:
  - Update to qatzip 1.1.2 (bz 2082438)
  - Update README, update driver configure files
  - Fix some bugs
  - Add support for pkgconfig


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-160
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096347
  - OpenSSL test suite fixes due to disabled SHA1.
    Resolves: rbhz#2107696
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-164
changelog:
  - Undefine GC compaction methods on ppc64le.
    Resolves: RHEL-83136
  - Fix printing warnings when using IRB from a script.
    Resolves: RHEL-83044


author: Jarek Prokop <jprokop@redhat.com> - 3.0.7-165
changelog:
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86104
  - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220)
    Resolves: RHEL-86130


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-13
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Peter Jones <pjones@redhat.com> - 15.3-0~1
changelog:
  - Update to shim 15.3
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-1
changelog:
  - Update to shim 15.4
    - Support for revocations via the ".sbat" section and SBAT EFI variable
    - A new unit test framework and a bunch of unit tests
    - No external gnu-efi dependency
    - Better CI
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-2
changelog:
  - Fix the ia32 build.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-3
changelog:
  - Build with the correct certificate trust list for this OS.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Peter Jones <pjones@redhat.com> - 15.4-4
changelog:
  - Fix the sbat data to actually match /this/ product.
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-65
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-81721
  - Remove deprecated path from systemd service file
    Resolves: RHEL-81716


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Tomas Korbar <tkorbar@redhat.com> - 6.6.2-5
changelog:
  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - Resolves: RHEL-12818


author: Luboš Uhliarik <luhliari@redhat.com> - 6.6.2-6
changelog:
  - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result
    in denial of service (CVE-2024-30156)


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.6-1
changelog:
  - Further fixes for QEMU Guest Agent
    resolves: RHEL-49761
  - Place Windows firstboot files under C:\Program Files\Guestfs\Firstboot
  - Improve debugging output


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.6-3
changelog:
  - Further fixes for QEMU Guest Agent install & VMware Tools removal
    resolves: RHEL-49761, RHEL-51169


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.9-1
changelog:
  - Rebase to upstream development version 2.5.9
  - Fix display of incorrect Windows 11 version
    resolves: RHEL-56784
  - Add customization options for post-conversion modification
    resolves: RHEL-55761
  - convert: windows: Ignore sriov drivers on virtio-win disk
    resolves: RHEL-56383


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-5
changelog:
  - Rebase to upstream development version 2.7.1
    resolves: RHEL-56813
  - Replace Jansson with json-c
    resolves: RHEL-65296
  - Find drivers for win2025 guests
    resolves: RHEL-65010
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-58032
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-77989
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-71522
  - Fix failure if the kernel-source package is installed in the source VM
    resolves: RHEL-80080


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-12
changelog:
  - mlcustomize: Remove dnf --verbose option
    resolves: RHEL-83289
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85512
  - Print nbdcopy command in debug output
    resolves: RHEL-86022
  - Turn live domain error into a warning
    resolves: RHEL-88543
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88857
  - Print better mountpoint stats in debug output
    resolves: RHEL-88861
  - Add virt-v2v -io vddk-noextents=true so we can test noextents
    resolves: RHEL-88863
  - Remove several ancient, deprecated options
    resolves: RHEL-88866
  - New tool: virt-v2v-open
    resolves: RHEL-88985


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-2
changelog:
  - Package virt-v2v-in-place in libexec as unsupported tool
  - Add warning about virt-v2v-in-place not being supported
    resolves: RHEL-40903
  - Add more fields to virt-inspector output
    related: MTV-1079
  - Revert "docs: Remove paragraph about -ip passwords and ssh/scp"
    resolves: RHEL-45527


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to upstream development version 2.7.1
    resolves: RHEL-56813
  - Replace Jansson with json-c
    resolves: RHEL-65296
  - Find drivers for win2025 guests
    resolves: RHEL-65010
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-58032
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-77989
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-71522


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-9
changelog:
  - mlcustomize: Remove dnf --verbose option
    resolves: RHEL-83289
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85512
  - Print nbdcopy command in debug output
    resolves: RHEL-86022
  - Turn live domain error into a warning
    resolves: RHEL-88543


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Mat Booth <mat.booth@redhat.com> - 4.15-5
changelog:
  - Remove springframework conditionals, the deps are a long time removed from
    Fedora and this simplifies the spec a bit
  - Disable unused modules that can't build on JDK 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-3
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187),
                 CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193),
                 CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202),
                 CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.7-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334),
                 CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393),
                 CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244)


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-28
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186),
                 CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191),
                 CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199),
                 CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200)


author: Michel Dänzer <mdaenzer@redhat.com> - 1.20.11-30
changelog:
  - xfree86: Fix potentially NULL reference to platform device's PCI device
    Resolves: https://issues.redhat.com/browse/RHEL-84253


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-31
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308),
                 CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409),
                 CVE-2025-49180 (RHEL-97253)


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


