# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Resolves: RHEL-5151 - [RFE] defer memberof nested updates
  - Resolves: RHEL-54148 - leaked_storage: Variable "childelems" going out of scope leaks the storage it points to.
  - Resolves: RHEL-60135 - deadlock during cleanAllRuv
  - Resolves: RHEL-61341 - After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-61349 - Remove deprecated setting for HR time stamps in logs
  - Resolves: RHEL-62875 - Passwords are not being updated to use the configured storage scheme ( nsslapd-enable-upgrade-hash is enabled ).
  - Resolves: RHEL-64438 - VLV errors with RSNv3 and pruning enabled [rhel-9]
  - Resolves: RHEL-64854 - cleanallruv consums CPU and is slow
  - Resolves: RHEL-65506 - AddressSanitizer: double-free
  - Resolves: RHEL-65512 - AddressSanitizer: heap-use-after-free in import_abort_all
  - Resolves: RHEL-65561 - LeakSanitizer: detected memory leaks in dbmdb_public_db_op
  - Resolves: RHEL-65662 - Replication issue between masters using cert based authentication
  - Resolves: RHEL-65664 - LDAP unprotected search query during certificate based authentication
  - Resolves: RHEL-65665 - Ambiguous warning about SELinux in dscreate for non-root user
  - Resolves: RHEL-65741 - LeakSanitizer: memory leak in ldbm_entryrdn.c
  - Resolves: RHEL-65776 - Wrong set of entries returned for some search filters [rhel-9]
  - Resolves: RHEL-67004 - "dsconf config replace" should handle multivalued attributes.
  - Resolves: RHEL-67005 - Online backup hangs sporadically.
  - Resolves: RHEL-67008 - Some replication status data are reset upon a restart.
  - Resolves: RHEL-67020 - 389DirectoryServer Process Stops When Setting up Sorted VLV Index
  - Resolves: RHEL-67024 - Some nsslapd-haproxy-trusted-ip values are discarded upon a restart.
  - Resolves: RHEL-69806 - ipahealthcheck.ds.replication displays WARNING '1 conflict entries found under the replication suffix'
  - Resolves: RHEL-69826 - "Duplicated DN detected" errors when creating indexes or importing entries. [rhel-9]
  - Resolves: RHEL-70127 - Crash in attrlist_find() when the Account Policy plugin is enabled. [rhel-9]
  - Resolves: RHEL-70252 - Freelist ordering causes high wtime
  - Resolves: RHEL-71218 - Sub suffix causes "id2entry - Could not open id2entry err 0" error when the Directory Server starts [rhel-9]
  - Resolves: RHEL-74153 - backup/restore broken [rhel-9]
  - Resolves: RHEL-74158 - If an entry RDN is identical to the suffix, then Entryrdn gets broken during a reindex [rhel-9]
  - Resolves: RHEL-74163 - Crash during bind when acct policy plugin does not have "alwaysrecordlogin" set [rhel-9]
  - Resolves: RHEL-74168 - On replica consumer, account policy plugin fails to manage the last login history [rhel-9]
  - Resolves: RHEL-74174 - Replication broken after backup restore with freeipa configuration [rhel-9]
  - Resolves: RHEL-74353 - nsslapd-haproxy-trusted-ip is not in schema [rhel-9]
  - Resolves: RHEL-76019 - IPA LDAP error code T3 when no exceeded time limit from a paged search result [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-3
changelog:
  - Resolves: RHEL-18333 Can't rename users member of automember rule
  - Resolves: RHEL-61341 After an initial failure, subsequent online backups will not work.
  - Resolves: RHEL-63887 nsslapd-mdb-max-dbs autotuning doesn't work properly
  - Resolves: RHEL-63891 dbscan crashes when showing statistics for MDB
  - Resolves: RHEL-63998 dsconf should check for number of available named databases
  - Resolves: RHEL-78344 During import of entries without nsUniqueId, a supplier generates duplicate nsUniqueId (LMDB only) [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.6.1-4
changelog:
  - Resolves: RHEL-78722 - Failed to set sslversionmax to TLS1.3 in FIPS mode with dsconf $INSTANCE security set --tls-protocol-max TLS1.3


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-3
changelog:
  - Resolves: RHEL-77983 - Defects found by OpenScanHub
  - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy
  - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9]
  - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9]
  - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9]
  - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9]
  - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9]
  - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9]
  - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9]
  - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9]
  - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-4
changelog:
  - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-5
changelog:
  - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9]
  - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry
  - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9]
  - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore.
  - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9]
  - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9]
  - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9]
  - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9]
  - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9]
  - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9]


author: Viktor Ashirov <vashirov@redhat.com> - 2.7.0-7
changelog:
  - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9]
  - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9]
  - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9]
  - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9]
  - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9]
  - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy.  [rhel-9]
  - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9]
  - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9]


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.7-2
changelog:
  - Remove the build argument -flto-partition to avoid compilation crashes due
    to high memory usage.


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.52.0-1
changelog:
  - Update to 1.52.0
  - Add support for creating VLANs for secondary VNICs in nm-cloud-setup (RHEL-36423)
  - Always reset retries when unblocking children or ports (RHEL-78122)
  - Prevent the activation of unavailable OVS interfaces (RHEL-79997)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.53.1-1
changelog:
  - Update to 1.53.1 (dev)
  - Update MPTCP endpoints creation order (RHEL-78752)
  - Print all warnings from nmcli to stderr (RHEL-74255)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.2-1
changelog:
  - Update to 1.53.2 (dev)
  - Fix invalid memory access on Dnsconfd DBUS error (RHEL-83175)
  - Avoid getting transient hostname when "localhost" set in /etc/hostname (RHEL-55730)


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-85765)
  - Fix order of parsing port/controller properties in nmcli (RHEL-85767)
  - Improve interface activation logic (RHEL-85766)
  - Fix WireGuard IPv6 firewall rules (RHEL-85763)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83061)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-85770)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168)

  Resolves: RHEL-83061
  Resolves: RHEL-59083
  Resolves: RHEL-87596
  Resolves: RHEL-85770
  Resolves: RHEL-85764
  Resolves: RHEL-85778
  Resolves: RHEL-87168


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-93108)
  - Crash on _l3cfg_notify_cb (RHEL-92314)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728)
  - Fix a race condition in ovs tun interface (RHEL-98551)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102772)
  - Allow setting IP method to disabled in port connection (RHEL-102768)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102743)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787)


author: Vladimír Beneš <vbenes@redhat.com>- 1:1.54.1-1
changelog:
  - Update to 1.54.1
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-114200)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-115973)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.54.2-1
changelog:
  - Update to 1.54.2
  - Support setting protocol version of HSR/PRP (RHEL-122172)
  - Support interlink for HSR/PRP (RHEL-122175)
  - Improve logging of networking off (RHEL-122173 )
  - Don't delete unrelated OVS ports (RHEL-121104)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-1
changelog:
  - Update to later upstream release to address regressions (RHEL-56551)
  - Support rightca in ipsec section (RHEL-118819)


author: Vladimír Beneš <vbenes@redhat.com> - 1.2.27-2
changelog:
  - Symetric import/export with nm-auto-default (RHEL-122306)
  - Esp param properly exported (RHEL-122626)
  - Correct leftid export when it contains @


author: Gris Ge <fge@redhat.com> - 1.2.29-1
changelog:
  - Upgrade to 1.2.29
  - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789)
  - Support leftprotoport and rightprotoport options. (RHEL-130907)
  - Fix error on duplicate key 'phase2alg'. (RHEL-131233)
  - Fix import connection with RSA key. (RHEL-127863)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Jon Maloy <jmaloy@redhat.com> - 2.7.0.6-12
changelog:
  - wla-redhat-Include-10-azure-unmanaged-sriov.rules-into-i.patch [RHEL-40957]
  - Resolves: RHEL-40957
    ([Azure][ARM][RHEL-9] Kdump cannot save vmcore via ssh or nfs)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-2
changelog:
  - wla-docs-add-waagent-manpage-3401.patch [RHEL-109496]
  - Resolves: RHEL-109496
    ([Azure][WALA][RHEL-9] Missing man page)


author: Jon Maloy <jmaloy@redhat.com> - 2.13.1.1-3
changelog:
  - wla-Use-systemctl-instead-of-service-to-manager-services.patch [RHEL-97572]
  - Resolves: RHEL-97572
    ([Azure][RHEL-9][WALA][Image mode] Cannot find 'service' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.14.0.1-2
changelog:
  - wla-Remove-10-azure-unmanaged-sriov.rules.patch [RHEL-124218]
  - Resolves: RHEL-124218
    ([Azure][WALA][RHEL-9] Remove 10-azure-unmanaged-sriov.rules)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Attila Lakatos <alakatos@redhat.com> - 0.16-105
changelog:
  RHEL 9.7 ERRATUM
  - CVE-2025-54389 aide: improper output neutralization enables bypassing
  Resolves: RHEL-109912


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-1
changelog:
  RHEL 9.8.0 ERRATUM
  - rebase to 0.19.2
  Resolves: RHEL-110573
  - Switch to libnettle for hashing
  - prevent aide from crashing if database is a HTTPS URL
  Resolves: RHEL-76014
  - prevent aide from exiting if a file is truncated during check
  Resolves: RHEL-1569


author: Attila Lakatos <alakatos@redhat.com> - 0.19.2-4
changelog:
  - /boot/grub2/grubenv is excluded from check due to boot_success implementation
  Resolves: RHEL-83776


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.1-1
changelog:
  - network: disable NM autoconnections also when BOOTIF is used (rvykydal)
    Resolves: RHEL-78272
  - network: support inst.net.noautodefault option (rvykydal)
    Related: RHEL-78272
  - security: fix dnsconfd backend option check in initramfs (rvykydal)
    Resolves: RHEL-83214
  - Support leavebootorder for bootupd (jkonecny)
    Resolves: RHEL-40897
  - bootupd: call bootupctl with --update-firmware (awilliam)
    Resolves: RHEL-40897


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.2-1
changelog:
  - Fix typo in systemd service (jstodola)
    Resolves: RHEL-78272
  - s390x - enable raid1 as a stage2 device (dan)
    Resolves: INSTALLER-4148
    Resolves: RHEL-21691
  - edns: restart dnsconfd only after the first kickstart parsing (rvykydal)
    Resolves: RHEL-82694
  - edns: allow dnsconfd name resolution for kickstart fetching (rvykydal)
    Resolves: RHEL-82694


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.3-1
changelog:
  - Sort RPM versions via rpm.labelCompare() and not via
    packaging.version.LegacyVersion() (miro)
    Resolves: RHEL-87358
  - rpm_ostree/installation.py: fix image deployment on s390x (rvykydal)
    Resolves: RHEL-63237
  - Add additional config_get Dracut function tests (jkonecny)
    Related: RHEL-48837
  - Update the tests/README.rst file (jkonecny)
    Related: RHEL-48837
  - Move shell testing to a separated directory (jkonecny)
    Related: RHEL-48837
  - Enable dynamic bash commands disable for tests (jkonecny)
    Related: RHEL-48837
  - Add test for config_get dracut function (jkonecny)
    Related: RHEL-48837
  - Fix trailing `/` when downloading stage2 image (jkonecny)
    Resolves: RHEL-48837
  - Fix whitespace chars broke Dracut config parsing (jkonecny)
    Related: RHEL-48837


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.4-1
changelog:
  - Revert "s390x - enable raid1 as a stage2 device" (jkonecny)
    Reverts: RHEL-21691
  - test_module_part_blivet: fix pylint disable (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module.common.task fix cyclic import (jkonecny)
    Related: RHEL-85416
  - pyanaconda: module_manager: fix ciclic import (k.koukiou)
    Related: RHEL-85416
  - pyanaconda: bootloader: fix ImportError (k.koukiou)
    Related: RHEL-85416
  - ruff: enable isort rules and autofix all isort warnings Autofixed with: ruff
    check --exclude pyanaconda/core/kickstart/commands.py --fix --select I .
    (jkonecny)
    Resolves: RHEL-85416
  - Add ruff, a very fast linter (vslavik)
    Related: RHEL-85416
  - Relabel /var/log/ and /root/original-ks.cfg (champetier.etienne)
    Resolves: RHEL-85298


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.7.5-1
changelog:
  - bootloader: drop write_config_console, just preserve console= (awilliam)
    Resolves: RHEL-98670
  - payload/rpm-ostree: Include program output in exception (walters)
    Resolves: RHEL-45184


author: Martin Kolman <mkolman@redhat.com> - 34.25.7.6-1
changelog:
  - Fix vconsole layout doesn't work for ostree (jkonecny)
    Resolves: RHEL-101057
  - test: make dnf substitutions test check only relevant values (rvykydal)
  - test: add new substitution members in dnf tests (rvykydal)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.7-1
changelog:
  - pyanaconda: payload: return exception details for payload failures
    (k.koukiou)
  - ui: tui: installation_source: show error message in the TUI screen
    (k.koukiou)
    Resolves: RHEL-4705
  - storage: fix mount point assignment of non-formatted swap partitions
    (rvykydal)
    Related: RHEL-16355
  - storage: include only fstab devices in fsset swap devices property (rvykydal)
    Resolves: RHEL-16355


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.8-1
changelog:
  - Fix: UnboundLocalError: local variable 'e' referenced before assignment
    (k.koukiou)
    Related to: RHEL-4705
  - Emit authselect in KS when fingerprint is enabled (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.9-1
changelog:
  - Set Authselect agruments after run in Security module (adamkankovsky)
    Resolves: RHEL-85175
  - Authselect code simplification (adamkankovsky)
    Resolves: RHEL-85175
  - custom: Reallocate partitions when removing a partition (vtrefny)
    Resolves: RHEL-114169


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.10-1
changelog:
  - Fixing authselect logical differences not resolved during backporting
    (adamkankovsky)
    Resolves: RHEL-85175


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.7.11-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-36187


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.15-1
changelog:
  - security: add a development note for certificates import in initramfs
    (rvykydal)
    Related: RHEL-77155
  - security: do not issue warning on existing certificate file during dump
    (rvykydal)
    Resolves: RHEL-77155
  - network: pass NM global dns configuration to the installed system (rvykydal)
    Resolves: RHEL-71824
  - network: pass global dns initrd option to the installed system (rvykydal)
    Resolves: RHEL-71824


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.16-1
changelog:
  - network: add dnsconfd to selected packages if used in installer (rvykydal)
    Resolves: RHEL-79803
  - network: add dnsconfd to installer environment (rvykydal)
    Resolves: RHEL-79804


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.17-1
changelog:
  - network: start dnsconfd in initramfs (rvykydal)
    Resolves: RHEL-80303
  - network: enable dnsconfd service on installed system if required (rvykydal)
    Resolves: RHEL-80023
  - network: pass 16-dns-backend.conf to target system (rvykydal)
    Resolves: RHEL-80233
  - netowrk: enable dnsconfd service in installer environment (rvykydal)
    Resolves: RHEL-80023


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifron <nickc@redhat.com> - 12.64-1
changelog:
  - Rebase to 12.64, allowing build with LLVM 18.  (RHEL-49953)
  - Retire: annobin-strings-no-attach.patch
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
  - GCC Plugin: Add support for -fhardended.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - Spec File: Add LTO option to clang and llvm plugin builds.  (RHEL-50796)


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Nick Clifton <nickc@redhat.com> - 12.91-1
changelog:
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)


author: Nick Clifton <nickc@redhat.com> - 12.93-1
changelog:
  - Rebuild against LLVM v20.  (RHEL-82001)
  - Rebase to 12.93.
  - Annocheck: Fix test for GO revision.  (RHEL-56031)


author: Nick Clifton <nickc@redhat.com> - 12.96-1
changelog:
  - Annocheck: Fix bugs in debug rpm location code.  Add more glibc exceptions.  (RHEL-95216)
  - Annocheck: Improve performance with multiple debug info files and multiple files to scan.  (#2366180)
  - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15.  (#2365824)


author: Nick Clifton <nickc@redhat.com> - 12.98-1
changelog:
  - Rebase to 12.98.  (RHEL-105574)
  - Improve configure and meson files for consistent builds.
  - Annocheck: Delete the temporary debug info directory after the tests have finished.


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066337
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2098212
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
changelog:
  - Update mssql commit
    Resolves: rhbz#2066337
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120709
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066337

  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120712
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2066337
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2120712
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles and simplify
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2151281
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2151282
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2151283
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2151284
  - Support SQL Server version 2022
    Resolves: rhbz#2153428
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2151281
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.1-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712
  - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list
    Resolves: RHEL-92718


author: Sergei Petrosian <spetrosi@redhat.com> - 2.6.2-1
changelog:
  - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database
    Resolves: RHEL-92712


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Thomas Woerner <twoerner@redhat.com> - 1.14.3-1
changelog:
  - Update to version 1.14.3
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.4-1
changelog:
  - Update to version 1.14.4
    Resolves: RHEL-67566
  - Fix management of AD objects for ipagroup
    Resolves: RHEL-25009


author: Thomas Woerner <twoerner@redhat.com> - 1.14.5-1
changelog:
  - Update to version 1.14.5
    Resolves: RHEL-67566
  - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343)
    Resolves: RHEL-78230


author: Thomas Woerner <twoerner@redhat.com> - 1.15.0-1
changelog:
  - Update to version 1.15.0
    Resolves: RHEL-104652
  - ipaclient: Fix AttributeError by defaulting dns_over_tls to False
    Resolves: RHEL-92844
  - Provide compatibility for AAH naming
    Resolves: RHEL-94769
  - Ensure ipaidrange required parameters are correct on recent versions of IPA
    Resolves: RHEL-79820
  - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles
    Resolves: RHEL-78636


author: Thomas Woerner <twoerner@redhat.com> - 1.15.1-1
changelog:
  - Update to version 1.15.1
    Resolves: RHEL-104652
  - ipaclient: client_dns has new statestore arg with IPA change e6445b8
    Resolves: RHEL-106558


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Omair Majid <omajid@redhat.com> - 10.0.100~rc.2.25502.107-0.10
changelog:
  - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107
  - Resolves: RHEL-121559


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to version 0.34.0 (RHEL-78920)
  - Rebuild with LLVM 20 (RHEL-81773)
  - Fix biosnoop pattern option (RHEL-90848)
  - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166)
  - Remove unsupported slaratetop tool (RHEL-78162)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-35
changelog:
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)
  - Replace downstream fixes with upstream changes
  - Address various spoofing attacks (CVE-2025-40778)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-2
changelog:
  - Backport nsupdate TLS support into 9.18 (RHEL-76331)
  - Update nsupdate manual about new TLS options
  - Test nsupdate TLS support


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-3
changelog:
  - Limit additional section records CPU processing (CVE-2024-11187)
  - Read HTTPS requests in limited chunks and prevent overload (CVE-2024-12705)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-6
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.29-7
changelog:
  - Fix upstream reported regression in recent CVE fix (CVE-2025-8677)
  - Add upstream created test to this regression


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-25
changelog:
  - Get the actual PV format size for LVMPV format
    Resolves: RHEL-74078
  - Include additional information in PartitioningError
    Resolves: RHEL-8005


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-26
changelog:
  - Make ActionDestroyFormat optional when the device is also scheduled to be removed
    Resolves: RHEL-8008
    Resolves: RHEL-8012


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-18
changelog:
  - Backport patch to autoselect best cipher suite when working over lanplus backend
  - Fixed 'ipmitool pef status/info' not printing final newline
  - Expanded column for sensor name in 'ipmi sdr/sensor' output so longer names are aligned


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-19
changelog:
  - Backport fix for CVE-2020-5208 (#1798722); for details see
    https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-26
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Patrick Palka <ppalka@redhat.com> - 1.75.0-9
changelog:
  - Apply upstream Boost.Asio patch to resolve RHEL-67973
  - Fix %patch directive compatibility with RPM 4.20


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 0.2.11-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.11
    Resolves: https://issues.redhat.com/browse/RHEL-5273


author: Colin Walters <walters@verbum.org> - 0.2.15-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.15
    Related: https://issues.redhat.com/browse/RHEL-14388


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/f31d99d)
  - Resolves: RHEL-61148


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ray Strode <rstrode@redhat.com> - 80.8-1
changelog:
  - Fix black spot in one of the backgrounds
    Resolves: #1684106
  - Add missing 2560x1600 8-abstract-light background
    Resolves: #1692309
  - letter box instead of crop backgrounds when there's no
    good aspect ratio
    Related: #1720610


author: Ray Strode <rstrode@redhat.com> - 81.0-1
changelog:
  - Add wallpapers for wider screen monitors
    Related: #1720610
  - Move logo to corner in wallpapers that have it in center
    Resolves: #1706793


author: Andreas Schneider <asn@redhat.com> - 0.3.12-1
changelog:
  - Update to version 0.3.12
  - resolves: RHEL-121734
  - Added channel binding support
  - resolves: RHEL-103417


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Jerry James <loganjerry@gmail.com> - 0.15.0-1
changelog:
  - Version 0.15.0
  - Add -formatspec and -attribute-format patches
  - Build with both cmake and autotools


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Tom Stellard <tstellar@redhat.com> - 20.1.8-2
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-17
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49736]
  - ci-Support-setting-mirrorlist-in-yum-repository-config-.patch [RHEL-49674]
  - Resolves: RHEL-49736
    ([Cloud-init] [RHEL-9] Password reset feature broken with CloudstackDataSource)
  - Resolves: RHEL-49674
    (Support setting mirrorlist in yum repository config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-18
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54373]
  - Resolves: RHEL-54373
    ([RHEL9]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-3
changelog:
  - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122]
  - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122]
  - Resolves: RHEL-71122
    (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] )


author: Jon Maloy <jmaloy@redhat.com> - 24.4-4
changelog:
  - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361]
  - Resolves: RHEL-76361
    ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-5
changelog:
  - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703]
  - Resolves: RHEL-81703
    (DataSourceNoCloudNet network configuration is ineffective - c9s)


author: Jon Maloy <jmaloy@redhat.com> - 24.4-6
changelog:
  - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658]
  - Resolves: RHEL-88658
    (Cloud-Init Backport Optimization Features on Alibaba Cloud)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-7
changelog:
  - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615]
  - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615]
  - Fix missing patch [RHEL-101692]
  - Resolves: RHEL-100615
    (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7])
  - Resolves: RHEL-101692
    (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors")


author: Jon Maloy <jmaloy@redhat.com> - 24.4-8
changelog:
  - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876]
  - Resolves: RHEL-128876
    ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf)


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 332-1
changelog:
  - The "shareable" attribute of disks is no longer modified by Cockpit
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336-1
changelog:
  - Graphical VNC and serial consoles improvements
  - Control VNC console resizing and scaling
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Serial consoles now keep their content and stay alive
  - No longer copies qemu.conf values into VM definitions


author: Packit <hello@packit.dev> - 345-1
changelog:
  - New virtual machines don't get SPICE graphics anymore
  - Support for network port forwarding
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 336.2-1
changelog:
  - storage: Revert "Use mdraid metadata version 1.0 when in Anaconda mode" (rhbz#2352953)
  - Translation updates (rhbz#2354986)


author: Packit <hello@packit.dev> - 339-1
changelog:
  - Add cockpit/ws arm64 container
  - Storage: Disk Self-Test error warnings on the overview page
  - Bug fixes and translation updates


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.238.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.239.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.240.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 4:2.241.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0
  - Resolves: RHEL-112187


author: Jindrich Novy <jnovy@redhat.com> - 4:2.242.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 4:2.244.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0
  - Resolves: RHEL-112187


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.7.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1
  - Resolves: RHEL-89428


author: Jindrich Novy <jnovy@redhat.com> - 1:1.8.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0
  - Related: RHEL-111919


author: Jindrich Novy <jnovy@redhat.com> - 2:1-12
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2000051


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-131
changelog:
  - fetch TMT podman revdep tests from podman dist-git
  - needs at least podman 5.4.0-8.el9
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:1-16
changelog:
  - do not hardcode log_driver = "journald" and events_logger = "journald"
    for RHEL9 and leave the rootful/rootless behaviour change based on
    internal logic
  - Related: #2000051


author: Aashish Radhakrishnan <aaradhak@redhat.com> - 0.24.0-2
changelog:
  - Restore single-decimal precision to stream output
    Backport https://github.com/coreos/coreos-installer/pull/1654


author: Joel Capitao <jcapitao@redhat.com> - 0.24.0-3
changelog:
  - Use the full path for the 'root=' kernel arg when rootfs on mpath
    Backport https://github.com/coreos/coreos-installer/pull/1677


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-2
changelog:
  - vmware_guestdump: Version 7 support
  - Fix incorrect task state during exit
  - Add multi-threads support in crash target
  - Call cmd_bt silently after "set pid"
  - x86_64: Add gdb multi-stack unwind support
  - arm64: Add gdb multi-stack unwind support
  - ppc64: Add gdb multi-stack unwind support
  - Fix the issue of "page excluded" messages flooding
  - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 9.0.0-3
changelog:
  - x86_64: filter unwanted warning message for "bt -T" cmd
  - doc: Update requirements for building on Fedora
  - gdb: Fix a regression for eppic extension on gdb-16.2
  - Fix crash initialization failure on LoongArch with recent GDB versions
  - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.2.3.3op2-34
changelog:
  - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling
  - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-35
changelog:
  - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@redhat.com> - 5.0-8
changelog:
  - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch
  - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch


author: Mark Wielaard <mjw@redhat.com> - 5.0-11
changelog:
  - Add 0001-Add-basic-find-debuginfo-script-tests.patch
  - Add debugedit-5.0-find-debuginfo-tests-fixups.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-16
changelog:
  - More specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Petr Pisar <ppisar@redhat.com> - 4.14.0-17
changelog:
  - Revert more specific error message on a locked OSTree system or a bootc system
    without a usr-overlay (RHEL-49670)


author: Marek Blaha <mblaha@redhat.com> - 4.14.0-19
changelog:
  - Catch more specific OSError instead of SMTPException in dnf-automatic email
    emitter (RHEL-49743)


author: Evan Goode <egoode@redhat.com> - 4.14.0-30
changelog:
  - Mark transient transactions in DNF history (RHEL-84512)
  - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499)


author: Evan Goode <egoode@redhat.com> - 4.14.0-31
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-65817)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Pavel Valena <pvalena@redhat.com> - 057-86.git20250217
changelog:
  - fix(35network-manager): remove duplicate installkernel
  - feat(fips): include fips module unconditionally
  - fix(dracut.sh): make omit-drivers option do exact match for
  - feat: add openssl module


author: Pavel Valena <pvalena@redhat.com> - 057-101.git20250808
changelog:
  - fix(systemd): add missing modprobe@.service
  - fix: let check_vol_slaves_all return 1 when checks on all
  - improvement(74nvmf): lookup required NIC kernel modules for
  - fix(74nvmf): set root=nvmf
  - chore(multipath): remove `rd_NO_MULTIPATH` kernel command
  - refactor(multipath): remove custom multipathd.service
  - fix(systemd): systemd.volatile needs overlayfs kernel module
  - refactor(dracut): introduce clamp_mtimes helper function
  - fix(dracut): ensure hardlink deduplication is reproducible


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Gregory Bell <grbell@redhat.com> - 1.30-1
changelog:
  - New release: 1.30
  - Better detection of abort during DWARF loader thread processing
  - pahole now detects presence of libbpf APIs and BTF features using weak function
    declarations when built using a shared library libbpf
  - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
  - New release: 1.29
  - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
  - The BTF encoding now is always reproducible, and as fast/faster than before.
  - The memory consumption is reduced.
  - Support for multiple BTF_DECL_TAGs pointing to same tag.
  - Verify that pfunct prints btf_decl_tags read from BTF.
  - Don't print functions twice when using 'pfunct -f function_name'.
  - New release: 1.28
  - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
  - Show flexible arrays statistics
  - Add '--padding N' and '--padding_ge N' to show structs with paddings
  - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
  - Don't stop pfunct output at the first function that matches a filter, show all of them
  - Allow encoding data about all global variables, not just per CPU ones
  - Handle .BTF_ids section endianness, fully supporting cross builds
  - Generate decl tags for bpf_fastcall for eligible kfuncs
  - Add "distilled_base" BTF feature to split BTF generation.
  - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
  - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
  - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
  - Serialize access to elfutils dwarf_getlocation().
  - Honour --lang_exclude when merging LTO built CUs.
  - Add the debuginfod client cache directory to the vmlinux search path.
  - Print the CU's language when a tag isn't supported.
  - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
  - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
  - Introduce a tests/ directory with regression tests


author: Gregory Bell <grbell@redhat.com> - 1.31-1
changelog:
  - Rework the selection of functions to represent in BTF, for instance:
  - Skip functions that passes values thru the stack when those structs don't
  have expected alignment due to some attribute usage that then causes
  problems with BTF trampolines due to lack of expressiveness in BTF to
  signal such special cases.
  - Skip objects (compile units) without DWARF: don't stop a multi object
  encoding session just because one doesn't have any DWARF in it.
  - Fix BTF dedup by updating libbpf. 
  - Fix the inference of the explicit alignment attribute of zero length arrays,
  like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no
  explicit alignment attribute encoding.
  - Fix the inference of alignments after bitfields, such as in struct
  nft_rule_dp->data[] after ->handle:42, also in the Linux kernel.    
  - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
  - Add comparision of functions encoded in BTF between baseline 'master' branch
  and current branch, i.e. 'next'.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-4
changelog:
  - edk2-AmdSevDxe-Fix-the-shim-fallback-reboot-workaround-fo.patch [RHEL-56081]
  - Resolves: RHEL-56081
    ([EDK2] Shim fallback reboot workaround might not work on SNP)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-5
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-skip-PatchInstructionX86-c.patch [RHEL-45847]
  - Resolves: RHEL-45847
    ([RHEL9.5] Hotplug vcpu to a guest cause guest kernel panic)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-6
changelog:
  - edk2-OvmfPkg-CpuHotplugSmm-delay-SMM-exit.patch [RHEL-56974]
  - edk2-Bumped-openssl-submodule-version-to-0205b5898872.patch [RHEL-55336]
  - Resolves: RHEL-56974
    (qemu-kvm: warning: Blocked re-entrant IO on MemoryRegion: acpi-cpu-hotplug at addr: 0x0 [rhel-9])
  - Resolves: RHEL-55336
    (CVE-2024-6119 edk2/openssl: Possible denial of service in X.509 name checks [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-7
changelog:
  - edk2-OvmfPkg-VirtioGpuDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-OvmfPkg-QemuVideoDxe-ignore-display-resolutions-smal.patch [RHEL-56248]
  - edk2-MdePkg-Fix-overflow-issue-in-BasePeCoffLib.patch [RHEL-60833]
  - Resolves: RHEL-56248
    (507x510 display resolution should not crash the firmware [edk2,rhel-9.6])
  - Resolves: RHEL-60833
    (CVE-2024-38796 edk2: Integer overflows in PeCoffLoaderRelocateImage [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-8
changelog:
  - edk2-OvmfPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-65725]
  - Resolves: RHEL-65725
    ([Regression] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-9
changelog:
  - edk2-OvmfPkg-ArmVirtPkg-Add-a-Fallback-RNG-RH-only.patch [RHEL-66230]
  - Resolves: RHEL-66230
    ([Regression] [aarch64] HTTP Boot not working on old vCPU without virtio-rng device present [rhel-9.6])


author: Jon Maloy <jmaloy@redhat.com> - 20240524-10
changelog:
  - edk2-OvmfPkg-Rerun-dispatcher-after-initializing-virtio-r.patch [RHEL-58631]
  - Resolves: RHEL-58631
    ([Regression] HTTP Boot fails to work with edk2-ovmf-20231122-6.el9_4.2 and greater)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-2
changelog:
  - edk2-Fix-amd-sev-firmware-file-for-amd-snp.patch [RHEL-72447]
  - Resolves: RHEL-72447
    ( QEMU should creating new json file that will correctly describe firmware for amd-sev-snp [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-3
changelog:
  - edk2-OvmfPkg-Use-the-OvmfPkg-version-of-CcProbeLib.patch [RHEL-70865]
  - edk2-Update-dbx-revocation-list-to-2025-02-24-version.patch [RHEL-83019]
  - Resolves: RHEL-70865
    (SNP guest failed to boot with SVSM using OVMF.amdsev.fd [rhel-9.7])
  - Resolves: RHEL-83019
    (The newer revocation file and Server 2025 required to update it [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20241117-4
changelog:
  - edk2-update-dbx-to-20250610.patch [RHEL-96869]
  - Resolves: RHEL-96869
    ([edk2,rhel-9] dbx update 20250610)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-5
changelog:
  - edk2-MdePkg-Acpi66.h-Add-ACPI-6.6-header.patch [RHEL-109010]
  - edk2-OvmfPkg-WorkArea.h-Add-MAILBOX_GDT.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-Test-command-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-Add-the-ResetVector-in-TDX-MailBox.patch [RHEL-109010]
  - edk2-OvmfPkg-TdxDxe-Support-5-level-paging-for-ResetVecto.patch [RHEL-109010]
  - edk2-OvmfPkg-IoMmuDxe-Fix-1M-and-2M-buffer-handling.patch [RHEL-69780]
  - Resolves: RHEL-109010
    (TD guest dmesg reports ACPI BIOS Warning (bug): Incorrect checksum in table [APIC] - 0x29)
  - Resolves: RHEL-69780
    (Fail to create AMD SEV SLES 15 SP4 guest via virt-install --cdrom [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 20241117-6
changelog:
  - edk2-OvmfPkg-MemEncryptSevLib-Evict-cache-lines-during-SN.patch [RHEL-121983]
  - edk2-MdePkg-Add-the-COHERENCY_SFW_NO-CPUID-bit-field.patch [RHEL-121983]
  - edk2-OvmfPkg-ResetVector-Make-ReceivedVc-a-flag-in-SEV-ES.patch [RHEL-121983]
  - edk2-OvmfPkg-MemEncryptSevLib-Check-if-SEV-SNP-coherency-.patch [RHEL-121983]
  - Resolves: RHEL-121983
    ([edk2] VM panic on booting SNP guest with large memory on Genoa)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-7
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126100]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126100]
  - Resolves: RHEL-126100
    ([edk2,rhel-9] dbx update to 20251016 / v1.6.1)


author: Jon Maloy <jmaloy@redhat.com> - 20241117-8
changelog:
  - edk2-openssl-flatten-contents-of-openssl-tarball.patch [RHEL-115922]
  - edk2-Bumped-openssl-submodule-to-version-3.0.7-29.1.patch [RHEL-115922]
  - Resolves: RHEL-115922
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-9.8])


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Aaron Merey <amerey@redhat.com> - 0.193-1
changelog:
  - Upgrade to upstream elfutils 0.193
  - Drop upstreamed patches
    elfutils-0.192-fix-free.patch
    elfutils-0.192-libelf-static.patch
    elfutils-0.192-stacktrace-lto.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-18
changelog:
  - Fix nsm-should-check for "google.com" failure (RHEL-94297)
  - Fix package tests for tetris no longer existing as a package (RHEL-94297)
  - Introduce untrusted-content variable (RHEL-94297)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Radovan Sroka <rsroka@redhat.com> - 1.3.3-105
changelog:
  RHEL 9.7.0 ERRATUM
  - RPMDB crashes with SIGBUS when updating the RPMDB repeatedly
  Resolves: RHEL-63090
  - File /run/fapolicyd differs from RPM expectations
  Resolves: RHEL-59626
  - fapolicyd.service badly instructs how to start after nss-user-lookup.target
  Resolves: RHEL-21871
  - fapolicy rule containing 'pattern=normal' produces error
  Resolves: RHEL-30020
  - "fapolicyd-cli --file add" crashes when processing sockets
  Resolves: RHEL-69136


author: Petr Lautrbach <lautrbach@redhat.com> - 1.4-1
changelog:
  - fapolicyd-1.4 and fapolicyd-selinux-1.0
    https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4


author: Radovan Sroka <rsroka@redhat.com> - 1.0-3
changelog:
  - backported few cosmetic small patches from upstream master
  - rebase selinux tarbal to v0.3
  - file context pattern for /run/fapolicyd.pid is missing
  Resolves: rhbz#1834674


author: Radovan Sroka <rsroka@redhat.com> - 1.0.1-1
changelog:
  - rebase to 1.0.1
  - introduced uthash dependency
  - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket
  Resolves: rhbz#1874491
  - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory
  Resolves: rhbz#1876538


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Antonio Murdaca <amurdaca@redhat.com> - 0.5.1-1
changelog:
  * chore: update patch for new release by @nullr0ute in https://github.com/fdo-rs/fido-device-onboard-rs/pull/625
   * chore: fix require error with commitlint by @miabbott in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * fix(license): replace space with - in Apache 2.0 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/632
   * fix(data-formats): use serde_tuple serializer for error messages by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/629
   * fix: cargo test for non-root users by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/635
   * fix(get_current_user_name): remove trailing whitespaces. by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/638
   * chore: bump mio from 0.8.10 to 0.8.11 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/640
   * fix: vendored tarfile creation by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/634
   * fix: static-mut-refs warning by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/651
   * Enable CentOS 9 builds and add Testing Farm e2e tests by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/650
   * Add an OV re-registration window option when using DB storage by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/643
   * chore: bump pem from 2.0.1 to 3.0.3 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/639
   * chore: bump h2 from 0.3.25 to 0.3.26 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/659
   * feat: verify trusted manufacturers by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/656
   * database enhancements by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/666
   * chore: bump openssl to 0.10.66 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/664
   * chore(store): make the store OVs agnostic by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/671
   * feat(manufacturing-server): implement an export OVs endpoint  by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/673
   * fix(systemd-units): run before powering off the system by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/676
   * fix(dracut): use isolate on error in the manufacturing-client service by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/678
   * fix(systemd-generator): write configuration to '/run' by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/677
   * fix(owner-tool): use the new API to export ovs by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/675
   * chore: update diesel to 2.2.3 by @7flying in https://github.com/fdo-rs/fido-device-onboard-rs/pull/669
   * chore: bump reqwest from 0.11.27 to 0.12.7 by @dependabot in https://github.com/fdo-rs/fido-device-onboard-rs/pull/683
   * fix: use centos-stream-9 target instead of epel-9 by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/687
   * enhance onboarding testing by @mmartinv in https://github.com/fdo-rs/fido-device-onboard-rs/pull/681
   * ci: add konflux test cases by @yih-redhat in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688
   * fix(make-vendored-tarfile.sh): exclude idna tests with unicode points by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/692
   * chore: bump for 0.5.1 by @runcom in https://github.com/fdo-rs/fido-device-onboard-rs/pull/693

   * @miabbott made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/636
   * @yih-redhat made their first contribution in https://github.com/fdo-rs/fido-device-onboard-rs/pull/688

   **Full Changelog**: https://github.com/fdo-rs/fido-device-onboard-rs/compare/v0.5.0...v0.5.1


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-81
changelog:
  - fence_ibm_powervs: add private endpoint and token file support
    Resolves: RHEL-62206
  - ha-cloud-support: bundle libs for the powervs-subnet resource agent
    Resolves: RHEL-64023


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-85
changelog:
  - fence_azure_arm: use azure-identity instead of msrestazure, which has
    been deprecated
    Resolves: RHEL-76493


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-87
changelog:
  - fence_ibm_vpc: refresh bearer-token if token data is corrupt, and
    avoid edge-case of writing empty token file
    Resolves: RHEL-83255


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-88
changelog:
  - fence_compute/fence_evacuate: dont use deprecated inspect.getargspec()
    Resolves: RHEL-84448
  - fence_sbd: get devices from SBD_DEVICE env variable if devices
    parameter isnt set
    Resolves: RHEL-79798


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-95
changelog:
  - fence_kubevirt: use hard poweroff
    Resolves: RHEL-82193
  - bundled setuptools: fix CVE-2025-47273
    Resolves: RHEL-95901


author: W. Michael Petullo <mike@flyn.org> - 2.5.0-8
changelog:
  - Remove empty lib subpackage
  - Fix make command line (add missing '\')
  - Use -p with install
  - Do not create /etc/festival
  - Do not create /usr/share/info
  - Simplify %files
  - Note BSD license for hts_engine module
  - Split data into noarch package
  - The festival-devel package now provides festival-static
  - Markup additional files as licenses


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Richard W.M. Jones <rjones@redhat.com> 3.23-5
changelog:
  - Disable automatic provides for fio engines (RHBZ#1884954).
  - Apply patch to change SONAME of fio engines (see comment 8 of above bug).


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83109


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-9
changelog:
  - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions
  - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.9.26-1
changelog:
  - Rebase to get hardware support for CERTPX-13842
  - Resolves: #RHEL-16637
  - Resolves: #RHEL-35373
  - Resolves: #RHEL-61930


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 12.92-1
changelog:
  - Rebase to bring in improvements for locating string notes.  (RHEL-79807)
  - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
  - Annocheck: Fix resource leak.  (RHEL-79253)
  - Annocheck: Fix double free. Add special handling for COMBOOT modules.
  - Annocheck: Improve diagnostics when a separate debug info file cannot be found.
  - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-14-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51056)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 15.1.1-1
changelog:
  - update from releases/gcc-15 branch
    - GCC 15.1 release
    - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407


author: Marek Polacek <polacek@redhat.com> 15.1.1-2
changelog:
  - update from releases/gcc-15 branch
    - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
     c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
     c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
     fortran/102900, fortran/119928, fortran/119986, fortran/120049,
     fortran/120107, fortran/120139, fortran/120163, fortran/120179,
     fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
     libfortran/120152, libfortran/120153, libfortran/120158,
     libfortran/120196, libstdc++/118260, libstdc++/119427,
     libstdc++/119714, libstdc++/120029, libstdc++/120114,
     libstdc++/120159, libstdc++/120187, libstdc++/120190,
     libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
     modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
     preprocessor/120061, target/119610, testsuite/119909,
     tree-optimization/111873, tree-optimization/119712,
     tree-optimization/120043, tree-optimization/120048,
     tree-optimization/120074, tree-optimization/120089,
     tree-optimization/120143, tree-optimization/120211


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Guinevere Larsen <blarsen@redhat.com> - 10.2-12.el9
changelog:
  - Backport "libiberty: Fix infinite recursion in rust demangler."
    (Nick Clifton)
  - Backport Add a recursion limit to the demangle_const function in the Rust demangler.
    (Nick Clifton, RHEL-4234)
  - Backport Fix typo in recent code to add stack recursion limit to the Rust demangler.
    (Nick Clifton)


author: Keith Seitz - 10.2-13.el9
changelog:
  - Backport patches for "Fix undefined behaviour dereferencing empty string"
    (Magne Hov et al, RHEL-17631)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Andrew Burgess <aburgess@redhat.com>
changelog:
  - Remove gdb-rhbz1261564-aarch64-hw-watchpoint-test.patch.  This test
    should be covered by gdb.base/watchpoint-unaligned.exp which was
    added upstream in commit a3b60e4588606354b93508a0008a5.


author: Guinevere Larsen <guinevere@redhat.com>
changelog:
  - remove gdb-test-bt-cfi-without-die.patch.  This test has been
    accepted upstream and will make its way back to testing with
    the GDB 17 release.


author: Alexandra Hájková <ahajkova@redhat.com> - 16.2-1
changelog:
  - Rebase to FSF GDB 16.2.
    Dropped:  gdb-backport-buildid-related-changes.patch
              gdb-catchpoint-re-set.patch
              gdb-remove-qnx-neutrino-support.patch
    Modified: gdb-add-rpm-suggestion-script.patch


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Joan Torres <joantolo@redhat.com> - 40.1-31
changelog:
  - Fix legacy-xorg session switching
    The fix that intended to fix the issue wasn't complete and also,
    introduced a bug on user switching for non legacy-xorg servers.
    This fix addresses both issues.
  - Avoid waiting 10s when starting GDM in legacy-xorg mode
    Resolves: RHEL-72694


author: Joan Torres <joantolo@redhat.com> - 40.1-32
changelog:
  - Leave session-opened signature the same as before and use a new
    session-opened-with-session-id signal to keep ABI compatibility
    Related: RHEL-46383


author: Joan Torres <joantolo@redhat.com> - 40.1-35
changelog:
  - Instead of allowing adding custom parameters to Xorg,
    only allow adding -nocursor. Allowing adding custom parameters
    is a potential security issue.
    Related: RHEL-81194


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-18
changelog:
  - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
  - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Josef Ridky <jridky@redhat.com> - 2:3.0.4-2
changelog:
  - fix CVE-2025-10920
  - fix CVE-2025-10921
  - fix CVE-2025-10922
  - fix CVE-2025-10923
  - fix CVE-2025-10924
  - fix CVE-2025-10925
  - fix CVE-2025-10934


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-17
changelog:
  - Add patches for CVE-2024-52533 and CVE-2025-4373
  - Update GDateTime test for new tzdata
  - Resolves: RHEL-94483
  - Resolves: RHEL-102844


author: Frédéric Bérat <fberat@redhat.com> - 2.34-244
changelog:
  - x86-64: Add GLIBC_ABI_DT_X86_64_PLT version to enable DT_X86_64_PLT	
    compatibility. (RHEL-109622)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Kalev Lember <klember@redhat.com> - 40.0-1
changelog:
  - Update to 40.0
  - Require hicolor-icon-theme for icon directories rather than adwaita
  - Use https source URL
  - Validate appdata file
  - Filter private libraries
  - Don't install various development files


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Olivier Fourdan <ofourdan@redhat.com> - 40.0-8
changelog:
  - Add Xwayland and dbus-daemon as weak dependencies
    Resolves: https://issues.redhat.com/browse/RHEL-66572


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Joan Torres <joantolo@redhat.com> - 40.1.1-11
changelog:
  - Add race fixes needed when terminating a conflicting session
    on GDM greeter.
    Resolves: RHEL-92341


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Joan Torres <joantolo@redhat.com> - 40.10-27
changelog:
  - session-opened signature is reverted to keep ABI compatibility,
    use session-opened-with-session-id instead
    Related: RHEL-92307


author: Joan Torres <joantolo@redhat.com> - 40.10-30
changelog:
  - Fix regression on multiple remote sessions and same user
    Also, add missing fix to keep API/ABI compatibility on GDM greeter proxy.
    Resolves: RHEL-109190


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Alexander Sosedkin <asosedkin@redhat.com> - 3.8.10-1
changelog:
  - rebase to 3.8.10
  - revert defaulting to PBMAC1 in FIPS mode
  - revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: David Benoit <dbenoit@redhat.com> - 1.22.5-2
changelog:
  - Rebuild race detector archives from LLVM sources
  - Add golang-race subpackage
  - Resolves: RHEL-33421
  - Remove unused crypto/internal/boring/syso package
  - Resolves: RHEL-54335


author: Archana <aravinda@redhat.com> - 1.23.2-1
changelog:
  - Rebase to Go1.23.2
  - Remove fix standard crypto panic patch as the source already has changes
  - Resolves: RHEL-62392


author: David Benoit <dbenoit@redhat.com> - 1.24.3-1
changelog:
  - Update to Go 1.24.3 (fips-1)
  - Exclude TestEd25519Vectors, TestACVP which require network
  - Resolves: RHEL-83439
  - Resolves: RHEL-85268
  - Resolves: RHEL-87632
  - Resolves: RHEL-91312
  - Resolves: RHEL-92023


author: David Benoit <dbenoit@redhat.com> - 1.24.3-3
changelog:
  - Update to Go 1.24.3 (fips-3)
  - Fix linkage issue in bin/go
  - Fix loading issue in non-fips mode
  - Related: RHEL-83439
  - Related: RHEL-87632


author: Alejandro Sáez <asm@redhat.com> - 1.25.0-1
changelog:
  - Update to Go 1.25.0
  - Set GOAMD64 to v2 to align with new architecture baselines
  - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2
  - Resolves: RHEL-109557


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-2
changelog:
  - Fixes patch 1002 for update to golang-fips
  - Remove unused code under apsl-1.1 and apsl-1.2 licenses
  - Resolves RHEL-33655


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-15
changelog:
  - Resolves RHEL-97518: Rework grafana-selinux spec file sections
  - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-18
changelog:
  - Resolves RHEL-125696: CVE-2025-58183
  - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Resolves RHEL-19296
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: saypaul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Antonio Murdaca <antoniomurdaca@gmail.com> - 0.15.8-1
changelog:
  * ci: add ci test for pull request by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/164
   * ci: add more wait time for fallback by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/167
   * ci: fix ansible check failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/169
   * ci: add test case of bootc anaconda iso by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/171
   * test github token by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/174
   * update github action by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/177
   * Update greenboot-ci.yaml by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/179
   * ci: fix iso case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/173
   * ci: add support for fedora rawhide by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/181
   * ci: fix rahide failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/183
   * ci: fix podman retry issue by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/185
   * ci: add centos-stream-9 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/187
   * ci: add rhel 9.6 support by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/190
   * ci: fix rhel 9.6 anaconda case failure by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/193
   * ci: fix secret error by @yih-redhat in https://github.com/fedora-iot/greenboot/pull/195
   * specfile: Stop building on ix86 by @travier in https://github.com/fedora-iot/greenboot/pull/197
   * rollback: if no bootc, fallback to rpm-ostree by @runcom in https://github.com/fedora-iot/greenboot/pull/199
   * fix:fail early for any required script failure by @say-paul in https://github.com/fedora-iot/greenboot/pull/198
   * Release 0.15.8 by @runcom in https://github.com/fedora-iot/greenboot/pull/202

   * @travier made their first contribution in https://github.com/fedora-iot/greenboot/pull/197

   **Full Changelog**: https://github.com/fedora-iot/greenboot/compare/v0.15.7...v0.15.8
  - Resolves: RHEL-78244


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.16.0-2
changelog:
  - Update src to greenboot-rs, binaries remain greenboot
  - Obsoletes/Conflicts for bash greenboot, Provides greenboot


author: Sayan Paul <saypaul@redhat.com> - 0.16.1
changelog:
  - Ensure rollback trigger runs before systemd-update-done and only on updates
  - Log the correct system type when reporting rollback decisions
  - Fix CI/tests (Ansible callback config, GI deps) to keep gating green
  - Refresh Packit release config for Fedora delivery


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
    image tag handling
  - Resolves: RHEL-19471


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.33-3
changelog:
  - Drop imsettings dependency on Fedora as well
  - Recommend libcanberra-gtk2 for sound theme events in gtk2 apps


author: Kalev Lember <klember@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - Disable gtk-doc support as we don't have gi-docgen in Fedora yet
  - Remove old obsoletes


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-8
changelog:
  - Support Rocky Linux in virt-customize
    resolves: rhbz#2133443
  - Disable OpenSUSE repo in virt-builder
    resolves: rhbz#2145160


author: Richard W.M. Jones <rjones@redhat.com> - 1.50.1-1
changelog:
  - Rebase to guestfs-tools 1.50.1
    resolves: rhbz#2168626
  - Fix virt-drivers inspection of RHEL 9.2 guests
    resolves: rhbz#2184963


author: Laszlo Ersek <lersek@redhat.com> - 1.50.1-3
changelog:
  - let virt-inspector recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable "make check"; we now use "-cpu max" (libguestfs 30f74f38bd6e)
    resolves: rhbz#2209280


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-2
changelog:
  - Rebase to guestfs-tools 1.51.6
  - Implement --key all:...
    resolves: RHEL-19030
  - Fix crash because of off-by-one error
    resolves: RHEL-19062
  - Fix virt-customize --chown invalid format
    resolves: RHEL-21899


author: Richard W.M. Jones <rjones@redhat.com> - 1.51.6-4
changelog:
  - Add support for nbd+unix:// URIs
    resolves: RHEL-33956
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-36634


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56811
  - Replace Jansson with json-c
    resolves: RHEL-65294


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.3-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4
  - Resolves: RHEL-83036


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.6-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.7-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7
  - Resolves: RHEL-112184


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.8.14-2
changelog:
  - Add tmpfiles.d file to make systemd-tmpfiles create/set correct
    ownership/permissions of /var/lib/haproxy
    Resolves: RHEL-120178


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Joe Orton <jorton@redhat.com> - 2.4.57-8
changelog:
  - mod_xml2enc: fix media type handling
    Resolves: RHEL-17686
  - mod_dav: add DavBasePath
    Resolves: RHEL-6600


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.59-1
changelog:
  - new version 2.4.59
  - Resolves: RHEL-14668 - RFE: httpd rebase to 2.4.59
  - Resolves: RHEL-31856 - httpd: HTTP response splitting
    (CVE-2023-38709)
  - Resolves: RHEL-31859 - httpd: HTTP Response Splitting in multiple
    modules (CVE-2024-24795)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-7
changelog:
  - Resolves: RHEL-99815 - stickysession field does not work when specifying
    it in the query parameter after upgrade to 9.5
  - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS
    upgrade (CVE-2025-49812)
  - Resolves: RHEL-99968 - httpd: access control bypass by trusted
    clients is possible using TLS 1.3 session resumption (CVE-2025-23048)
  - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied
    data in mod_ssl (CVE-2024-47252)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-8
changelog:
  - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when
    updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-9
changelog:
  - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child
    process is reclaimed


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-10
changelog:
  - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check
    to avoid unnecessary 421 errors after CVE-2025-23048 fix
  - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.36.20190303git
changelog:
  - Synchronize RHEL 8 changes [rhbz#1957651]
  - Resolves: rhbz#1957651
    ([Hyper-V][RHEL-9] Update build to rhel format and syncup RHEL 8 content for hyperv-daemons.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.43.20190303git
changelog:
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-9902]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-9902]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-9902]
  - Resolves: RHEL-9902
    ([Hyper-V][RHEL-9] hyperv-daemons write incompatible IPv6 prefix (IPV6NETMASK) in ifcfg)


author: Jon Maloy <jmaloy@redhat.com> - 0-0.44.20190303git
changelog:
  - hpvd-tools-hv-Enable-debug-logs-for-hv_kvp_daemon.patch [RHEL-95812]
  - Resolves: RHEL-95812
    ([Hyper-V][RHEL-9]Backport tools: hv: Enable debug logs for hv_kvp_daemon for RHEL 9)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Yasmin Valim <ydesouza@redhat.com> - 2.21.0-1
changelog:
  - Re-sync with upstream changes adding ignition-grub subpackage
    and a few minor changes
  - New release


author: Packit <hello@packit.dev> - 23-1
changelog:
  Changes with 23
  ----------------
    * cmd/describe: ensure that all image types can be described (HMS-7044) (#231)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2025-06-25


author: Packit <hello@packit.dev> - 24-1
changelog:
  Changes with 24
  ----------------
    * Always set rhsm.Facts when generating manifests (#239)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * doc/01-usage.md: avoid multiple h1 in one document (#235)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * doc/10-faq.md: add image types documentation (#236)
      * Author: Florian Schüller, Reviewers: Michael Vogt, Simon de Vlieger
    * docs: subscription basic info (#205)
      * Author: Lukáš Zapletal, Reviewers: Brian C. Lane, Michael Vogt
    * readme: mention mount for container (#232)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane, Jelle van der Waa, Michael Vogt

  — Somewhere on the Internet, 2025-07-09


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.2-1
changelog:
  - fix: add missed optional deps for ls datasources (#4495)
    (xiangceliu@redhat.com)
  - feat: Add error_lines to LSlHFiles parser (#4494) (jiazhang@redhat.com)
  - fix: discard distutils (LooseVersion) in version comparison (#4490)
    (xiangceliu@redhat.com)
  - fix: endless loop caused by Mount.get_dir()  (#4489) (jiazhang@redhat.com)
  - chore: Add ceph new versions 2025_0701 (#4488) (jiazhang@redhat.com)
  - feat(client): Get list of reports for system in more efficient way (#4459)
    (pkoprda@redhat.com)
  - feat(tests): create 8 empty __init__.py files (#4492) (pschrimp@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.3-1
changelog:
  - feat(client): Exclude vendor libs from coverage stats (#4520)
    (pschrimp@redhat.com)
  - fix: handle error from relied spec for container_nginx_conf (#4514)
    (xiaoxwan@redhat.com)
  - fix: enhance RpmVPackage handles the rpm error message (#4521)
    (39508521+shlao@users.noreply.github.com)
  - fix: Enhance "IpLinkInfo" to keep the bond or slave options (#4522)
    (44796653+huali027@users.noreply.github.com)
  - chore: do not collect ls_dev anymore in core collection (#4453)
    (xiangceliu@redhat.com)
  - Replace pkg_resources with importlib.metadata (Python 3.8+) (#4500)
    (miro@hroncok.cz)
  - fix(client): remove unused format_config() function (#4519)
    (pkoprda@redhat.com)
  - fix: compatibility of version_compare (#4518) (xiangceliu@redhat.com)
  - fix: arguments passed to rpm.labelCompare (#4516) (xiangceliu@redhat.com)
  - fix: rpm_vercmp can't compare pkgs with different version length (#4515)
    (xiangceliu@redhat.com)
  - fix(spec): limit to last 10 files for eap_json_reports (#4509)
    (xiaoxwan@redhat.com)
  - chore(rpmcmp): use rpm.labelCompare first (#4501) (xiangceliu@redhat.com)
  - fix: ComplianceClient support general data collection (#4503)
    (xiangceliu@redhat.com)
  - fix: use tempfile.gettempdir as default tmpdir for obfuscation reports
    (#4496) (xiangceliu@redhat.com)
  - chore: enhance YAMLParser to parse yaml files containing = as value (#4508)
    (30404410+qinpingli@users.noreply.github.com)
  - fix: subman.identity supports multiple languages (#4505)
    (xiangceliu@redhat.com)
  - perf(client): add check before retrieving report (#4502)
    (pschrimp@redhat.com)
  - chore(ci/cd): update the codecov actions to v5 (#4504)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.4-1
changelog:
  - chore: print warning when 'subscription_manager_id' is skipped for redaction
    (#4527) (xiangceliu@redhat.com)
  - chore: update MANIFEST.in accordingly (#4531) (xiangceliu@redhat.com)
  - fix: container spec exec with env and cmd precheck (#4513)
    (xiaoxwan@redhat.com)
  - fix: console messsags for --compliance-unassign (#4530)
    (xiangceliu@redhat.com)
  - feat: Add parser and spec for compliance_policies_enabled (#4498)
    (jiazhang@redhat.com)
  - chore: Move parser "WatchDogLog" to "watchdog.py" file (#4529)
    (44796653+huali027@users.noreply.github.com)
  - fix: reduce the size of CalledProcessError exception (#4528)
    (xiangceliu@redhat.com)
  - chore(spec): remove unused *_config_perms from collection (#4526)
    (xiangceliu@redhat.com)
  - feat: New spec "/etc/watchdog.conf" and the parser (#4523)
    (44796653+huali027@users.noreply.github.com)
  - feat(client): suppress link message after upload (#4517)
    (pschrimp@redhat.com)
  - fix: hostname obfuscation issue in particular specs (#4511)
    (xiangceliu@redhat.com)
  - fix: override LANG to 'C.UTF-8' for subscription-manager (#4506)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.5-1
changelog:
  - Revert "feat: Add parser and spec for compliance_policies_enabled (#4498)"
    (#4534) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.6-1
changelog:
  - fix: revert the cmd&args key for CommandOutputProvider in meta_data (#4539)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.7.1-1
changelog:
  - fix(parser/sshd_config): keep inline comments when parsing config lines
    (#4546) (tayushi1610@gmail.com)
  - feat: New parser MdatpManaged and the spec (#4562)
    (39508521+shlao@users.noreply.github.com)
  - fix(doc): add required configuration for readthedocs (#4565)
    (xiangceliu@redhat.com)
  - chore(doc): update the guide steps for PR to 3.0_egg (#4566)
    (xiangceliu@redhat.com)
  - fix: handle error lines of spec grubby_default_index (#4538)
    (xiaoxwan@redhat.com)
  - fix: Skip RpmVPackage only when no error and no installed (#4550)
    (39508521+shlao@users.noreply.github.com)
  - feat: Add spec and parser for compliance_policies_enabled (#4536)
    (jiazhang@redhat.com)
  - chore(script): update RPM script to use Python virtual env (#4561)
    (xiangceliu@redhat.com)
  - fix: revert the ls specs removed by mistake (#4554) (xiangceliu@redhat.com)
  - fix: exclude irrelevant logrotate configuration files (#4551)
    (xiangceliu@redhat.com)
  - doc: add RPM delivery notes to contributing (#4545) (xiangceliu@redhat.com)
  - fix: don't immediately exit collection when inventory_id is unavailable
    (#4537) (xiangceliu@redhat.com)
  - chore: sync the tito required file to master (#4547) (xiangceliu@redhat.com)
  - feat: onboard packit for build RPM on master branch (#4542)
    (xiangceliu@redhat.com)
  - fix(client): Suppress link message after upload (#4544) (mhorky@redhat.com)
  - chore: sync the changelog with the 3.0 branch (#4540) (xiangceliu@redhat.com)
  - chore: update RPM building scripts and spec file (#4533)
    (xiangceliu@redhat.com)
  - feat: New spec and parser for '/var/log/foreman-installer/foreman.log'
    (#4535) (143097963+atewari-rh@users.noreply.github.com)
  - chore: merge the two RPM build scripts (#4532) (xiangceliu@redhat.com)
  - feat: new script to build insights-core RPM (#4507) (xiangceliu@redhat.com)
  - chore: Introduce Client phase v2 (#4512) (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.8.1-1
changelog:
  - chore(spec): Add back spec vmware_tools_conf (#4595) (jiazhang@redhat.com)
  - fix: use try_auto_configuration method for compliance (#4591)
    (xiangceliu@redhat.com)
  - fix(client): do not retry upload on successful upload (#4586)
    (pschrimp@redhat.com)
  - chore(script): update the file name typo in last operation (#4588)
    (xiangceliu@redhat.com)
  - chore: place the build target in spec instead of passing macro (#4587)
    (xiangceliu@redhat.com)
  - chore: refine the pull request template (#4585) (xiangceliu@redhat.com)
  - fix: Enhance spec 'filefrag' to check initramfs/vmlinuz files (#4574)
    (39508521+shlao@users.noreply.github.com)
  - fix: add dep ds containers_with_shell for container specs (#4581)
    (xiaoxwan@redhat.com)
  - chore: remove the unused build scripts (#4577) (xiangceliu@redhat.com)
  - fix: do not collect egg_release file in RPM delivery (#4573)
    (xiangceliu@redhat.com)
  - chore(ci/cd): do not build Egg for PRs to matser (#4578)
    (xiangceliu@redhat.com)
  - New parser for sos_commands/crio/crictl_ps (#4497) (aghodake@redhat.com)
  - fix(test): regression issue of yaml.SafeLoader in testing (#4557)
    (xiangceliu@redhat.com)
  - fix: no valid conf found issue in combiner GrubConf (#4437)
    (xiaoxwan@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.1-1
changelog:
  - chore(spec): change ip_route_show_table_all to filterable=True (#4597)
    (xiangceliu@redhat.com)
  - Alter malware code to use locally stored yara rules for the 3rd party feature
    (#4571) (63891960+mtclinton@users.noreply.github.com)
  - fix: collect yum_updates on all supported RHEL (#4607)
    (xiangceliu@redhat.com)
  - fix(MANIFEST): add the 'public.gpg' required by playbook_verifier (#4602)
    (xiangceliu@redhat.com)
  - chore(spec): do not collect ansible_telemetry before it's GA (#4601)
    (xiangceliu@redhat.com)
  - fix: remove the deps from insights_ausearch spec (#4603)
    (xiangceliu@redhat.com)
  - fix(doc): fix homepage example in README (#4599) (xiangceliu@redhat.com)
  - fix(rpm-spec): fix "Requires:" of selinux-policy (#4580)
    (xiangceliu@redhat.com)
  - feat: add parser for spec.nvidia_smi_query_gpu (#4600) (xiaoxwan@redhat.com)
  - feat(spec/parser): new spec and parser for AnsibleTelemetry (#4589)
    (xiangceliu@redhat.com)
  - fix: FileProvider.validate() leaked files outside root (#4474)
    (71874510+jholecek-rh@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.9.3-1
changelog:
  - spec: new spec and parser for krb5_localauth_plugin (#4632)
    (xiangceliu@redhat.com)
  - chore(uname): Support RHEL 9.7 in Uname (#4631) (jiazhang@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.10.1-1
changelog:
  - fix(spec): ignore errors when collecting bootloader data (#4636)
    (xiangceliu@redhat.com)
  - fix(spec): keyctl_show should be a simple_command (#4635)
    (xiangceliu@redhat.com)
  - Add new parser & datasource for ls -ldZ (#4622) (986222045@qq.com)
  - fix: enhance IlabModuleList parser on content change (#4624)
    (xiaoxwan@redhat.com)
  - chore(spec): don't need strictly version match (#4634)
    (xiangceliu@redhat.com)
  - chore: Update the base of SsTUPNA (#4619) (xiangceliu@redhat.com)
  - Add spec rear_default_conf (#4625) (jiazhang@redhat.com)
  - chore: Uname supports RHEL 10.1 (#4643) (xiangceliu@redhat.com)
  - spec: new datasource & parser for ls -ldH (#4620) (986222045@qq.com)
  - fix(script): revert to update setup.py (#4623) (xiangceliu@redhat.com)
  - fix(script): tarbal cannot be found when building for testing (#4621)
    (xiangceliu@redhat.com)
  - chore(script): change release to 'dev' for PR testing builds (#4618)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec bootctl_status for analytics (#4613)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec mokutil_list_enrolled for analytics (#4612)
    (xiangceliu@redhat.com)
  - chore(spec): add new spec keyctl_show for analytics (#4611)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.11.1-1
changelog:
  - chore: print version.release in 'insights.version' module (#4670)
    (xiangceliu@redhat.com)
  - fix(test): filters.yaml for building RPM in packit for test (#4665)
    (xiangceliu@redhat.com)
  - chore(rpmbuild): refine the RPM spec file (#4669) (xiangceliu@redhat.com)
  - fix(parser): Deprecate the SsTUPLN parser (#4662) (xiangceliu@redhat.com)
  - feat: add filter "Name:" to InstalledProductIDs spec (#4660)
    (xiaoxwan@redhat.com)
  - chore(test): replace mock with unittest.mock (#4659) (xiangceliu@redhat.com)
  - spec: do hostname obfuscation for bootctl_status (#4657)
    (xiangceliu@redhat.com)
  - spec: remove localectl_status from RPM collection (#4655)
    (xiangceliu@redhat.com)
  - chore: print current version for tmt testing convenience (#4650)
    (xiangceliu@redhat.com)
  - fix: don't import FileListing in insights (#4647) (xiangceliu@redhat.com)
  - chore(ci/cd): remove py27 pipeline tests for master  (#4654)
    (xiangceliu@redhat.com)
  - feat(test): unit test for successful upload (#4641) (pschrimp@redhat.com)
  - fix(test): update the check of obfuscation warnings (#4648)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.5.11-1
changelog:
  - fix(test): no filter required for ls_lan_filtered when using GrubConf
    combiner (#4407) (xiangceliu@redhat.com)
  - fix: ls_lan_filters as another input for uefi_boot checking (#4404)
    (xiangceliu@redhat.com)
  - feat(client): --unregister should not delete inventory host (#4393)
    (pkoprda@redhat.com)
  - fix(test): revert test_malware_detection which was removed by mistake (#4405)
    (xiangceliu@redhat.com)
  - chore: mark AnsibleTowerLicenseType as deprecated (#4398)
    (xiangceliu@redhat.com)
  - chore: new 'data/insights_datasources' for datasource specs (#4400)
    (xiangceliu@redhat.com)
  - Add spec and parser for ilab_config_show (#4399) (jiazhang@redhat.com)
  - feat: add new parser openshift-kube logs (#4402)
    (87797511+mohitkumarrh@users.noreply.github.com)
  - fix(RHINENG-15343): Limit compliance policies to 100 (#4403)
    (33912805+LightOfHeaven1994@users.noreply.github.com)
  - chore(client): Drop support for RHN/Satellite 5 (#4374) (mhorky@redhat.com)
  - fix: no exception for FilesDirsNumberOfDir (#4401) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.5.12-1
changelog:
  - chore: FileListing should be a CommandParser (#4413) (xiangceliu@redhat.com)
  - fix: duplicate stream entries in parser DnfModuleList (#4412)
    (xiaoxwan@redhat.com)
  - Add spec tomcat_web_xml (#4410) (jiazhang@redhat.com)
  - chore: stop collecting ls_boot/ls_sys_firmware (#4406)
    (xiangceliu@redhat.com)
  - fix(flake8): avoid a false positive F824 in test (#4411)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.5.13-1
changelog:
  - Add new Parser SnmpdConf (#4434) (986222045@qq.com)
  - fix: remove useless code from client collection (#4438)
    (xiangceliu@redhat.com)
  - feat: Add spec smartctl_health (#4422) (jiazhang@redhat.com)
  - fix: support filters that start with minus sign (#4436) (71874510+jholecek-
    rh@users.noreply.github.com)
  - fix(ci/cd): revert to use 'license' in pyproject.toml (#4435)
    (xiangceliu@redhat.com)
  - fix: no attribute 'type' error in CloudInstance combiner (#4432)
    (xiaoxwan@redhat.com)
  - fix: Enhance parser IlabConfigShow (#4426) (jiazhang@redhat.com)
  - fix(pyproject.toml): fix errors reported from '-m build' (#4431)
    (xiangceliu@redhat.com)
  - fix: rhsm syspurpose sepc deps on IsGtOrRhel84 (#4433) (xiaoxwan@redhat.com)
  - enhance: YAMLParser can skip specified lines (#4429) (xiangceliu@redhat.com)
  - chore: change to build with pyproject.toml (#4420) (xiangceliu@redhat.com)
  - feat: add spec subscription_manager_syspurpose (#4427) (xiaoxwan@redhat.com)
  - chore: update notebooks based on python3 (#4430) (xiangceliu@redhat.com)
  - fix(spec): cloud_init_query should be a simple_command (#4423)
    (xiangceliu@redhat.com)
  - fix: Ensure tailoring file is not created when content is empty (#4424)
    (32950636+Mishrasubha@users.noreply.github.com)
  - fix(ci/cd): update to use Ubuntu 22.04 for code-test (#4425)
    (xiangceliu@redhat.com)
  - chore: use a new manifest module (#4418) (xiangceliu@redhat.com)
  - feat(client): Disable API registration check (#4388) (pkoprda@redhat.com)
  - fix(setup): change to license_files (#4419) (xiangceliu@redhat.com)
  - fix(spec): inherit HOME env when collecting ilab commands (#4416)
    (xiangceliu@redhat.com)
  - chore: reomve the duplicated definion of SAFE_ENV in collect (#4417)
    (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.5.14-1
changelog:
  - chore: Improve load tests (#4443) (71874510+jholecek-
    rh@users.noreply.github.com)
  - chore: improve listdir and listglob tests (#4442) (71874510+jholecek-
    rh@users.noreply.github.com)
  - feat: Add files into datasource list_files_with_lH (#4456)
    (jiazhang@redhat.com)
  - fix: Update files_permissions function for T permission (#4452)
    (jiazhang@redhat.com)
  - chore: uname supports RHEL 10.0 (#4455) (xiangceliu@redhat.com)
  - chore: deprecate *ConfigPerms parsers (#4450) (xiangceliu@redhat.com)
  - chore: deprecate LsRsyslogErrorfile parser (#4449) (xiangceliu@redhat.com)
  - fix(client): Update log messages when unregistered (#4421)
    (pkoprda@redhat.com)
  - fix: add spec deps component IsGtOrRhel84 to manifests (#4451)
    (xiaoxwan@redhat.com)
  - fix: add more candidates to CloudProvider combiner (#4428)
    (xiangceliu@redhat.com)
  - fix: Enhance parser "NamedCheckconf" to support new filtered option (#4448)
    (44796653+huali027@users.noreply.github.com)
  - chore: deprecate NetworkNamespace parser (#4445) (xiangceliu@redhat.com)
  - feat: new LSlHFiles parser for ls -lH <files> spec (#4444)
    (xiangceliu@redhat.com)
  - chore: deprecate unused docker parsers (#4446) (xiangceliu@redhat.com)
  - chore: deprecate LazyLogFileOutput (#4439) (71874510+jholecek-
    rh@users.noreply.github.com)
  - fix: remove extra quotation marks in FileProvider.__repr__ (#4441)
    (71874510+jholecek-rh@users.noreply.github.com)
  - feat: introduce a unique obfuscation configure entry: obfuscation_list
    (#4409) (xiangceliu@redhat.com)
  - chore(client): Simplify automatic configuration logic (#4376)
    (mhorky@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.5.15-1
changelog:
  - Revert "chore(client): Simplify automatic configuration logic (#4376)"
    (#4465) (xiangceliu@redhat.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.5.16-1
changelog:
  - fix(setup): remove CONTRIBUTING.md from dynamic readme in pyproject.toml
    (#4473) (xiangceliu@redhat.com)
  - add dnf_module_list spec file path for sos_archive (#4472)
    (tayushi1610@gmail.com)
  - fix(test): use yaml.SafeLoader only in test (#4466) (xiangceliu@redhat.com)
  - test: add unit tests for dnf_module RHEL9 spec input (#4461)
    (xiaoxwan@redhat.com)
  - feat: Update FilePermissions cover device_ls (#4457) (jiazhang@redhat.com)
  - Enhance OSRelease to support Miracle Linux and AlmaLinux (#4471)
    (44796653+huali027@users.noreply.github.com)
  - fix: Compatible with old obfuscation switches (#4470) (xiangceliu@redhat.com)
  - fix: update the hostname obfuscation logic per manual (#4454)
    (xiangceliu@redhat.com)
  - fix: Skip extraction of all device files in archive (#4469)
    (sauravchandra123@gmail.com)
  - Feat: Add support for RHEL 10 (#4467)
    (20520336+bfahr@users.noreply.github.com)
  - fix: Improve error message for too long rule responses (#4463)
    (71874510+jholecek-rh@users.noreply.github.com)
  - chore: add tests for FileProvider.validate() (#4458) (71874510+jholecek-
    rh@users.noreply.github.com)
  - fix: hostname should be obfuscated for lvs and grubby (#4464)
    (xiangceliu@redhat.com)
  - fix: improve wording for unassignable Policy (#4414)
    (1187051+romanblanco@users.noreply.github.com)


author: Xiangce Liu <xiangceliu@redhat.com> 3.6.0-1
changelog:
  - fix: remove planned deprecations before version bumping to 3.6.0 (#4480)
    (xiangceliu@redhat.com)
  - fix: handle invalid cmd output of aws curl (#4484) (xiaoxwan@redhat.com)
  - feat: add configurable allow_remote_resource_access to RemoteResource (#4486)
    (lichen@redhat.com)
  - chore: update corosync datasource to use RedHatRelease only (#4485)
    (xiangceliu@redhat.com)
  - feat: Collect "corosync-cmapctl" on RHEL10 (#4483)
    (44796653+huali027@users.noreply.github.com)
  - fix(specs opt): do hostname obfuscation for possible specs (#4478)
    (xiangceliu@redhat.com)
  - feat: Add a new parser LruGenEnabled (#4481)
    (30404410+qinpingli@users.noreply.github.com)
  - fix: Simplify error message for too long rule responses (#4477)
    (71874510+jholecek-rh@users.noreply.github.com)
  - fix: output abnormal raw line of ls entries (#4479) (xiangceliu@redhat.com)
  - feat: Add_rhel_9.6_uname (#4475) (jiazhang@redhat.com)


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-11
changelog:
  - Resolves: RHEL-67913 Add DNS over TLS Support, Require bind9.18 32:9.18.29-2 and new bind-dyndb-ldap 11.11-1


author: Thomas Woerner <twoerner@redhat.com> - 4.12.2-14
changelog:
  - Resolves: RHEL-80345 Use new bind9.18-dyndb-ldap and bind9.18 only for DNS over TLS with the ipa-server-encrypted-dns package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-15
changelog:
  - Resolves: RHEL-84481 Protect all IPA service principals
  - Resolves: RHEL-84277 [RFE] IDM support UIDs up to 4,294,967,293
  - Resolves: RHEL-84276 Ipa client --raw --structured throws internal error
  - Resolves: RHEL-82707 Search size limit tooltip has Search time limit tooltip text
  - Resolves: RHEL-82089 IPU 9 -> 10: ipa-server breaks the in-place upgrade due to failed scriptlet
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'
  - Resolves: RHEL-30658 ipa-cacert-manage install fails with CAs having the same subject DN (subject key mismatch info)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-16
changelog:
  - Resolves: RHEL-88900 [RFE] Add check on CA cert expiry for ipa-cert-fix
  - Resolves: RHEL-88037 Server installation: dot-forwarder not added as a forwarder
  - Resolves: RHEL-86483 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-41178 ipa-sidgen: fix memory leak in ipa_sidgen_add_post_op()


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-17
changelog:
  - Resolves: RHEL-95010 [RFE] Give warning when adding user with UID out of any ID range
  - Resolves: RHEL-93890 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-93887 ipa idrange-add --help should be more clear about required options
  - Resolves: RHEL-93483 Unable to modify IPA config; --ipaconfigstring="" causes internal error
  - Resolves: RHEL-88834 kdb: ipadb_get_connection() succeeds but returns null LDAP context
  - Resolves: RHEL-68800 ipa-migrate with LDIF file from backup of remote server, fails with error 'change collided with another change'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-19
changelog:
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89907 Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99315 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-98565 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96920 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-31907 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-20
changelog:
  - Resolves: RHEL-106285 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-106026 Include fixes in python3-ipatests package
  - Resolves: RHEL-105512 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101707 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-101544 ipa-client-encrypted-dns does not ensure bind-utils >= 9.18 for DoT-compatible nsupdate
  - Resolves: RHEL-100450 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-24
changelog:
  - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-25
changelog:
  - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
  - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
  - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
  - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
  - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
  - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
  - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
changelog:
  - Switch from tox to pytest as the test runner. tox is being deprecated
    in some distros. (#1942157)


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Jan Macku <jamacku@redhat.com> - 20210202-12
changelog:
  - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.3.ea
changelog:
  - Add zero_arches to the portable_build_arches now that the portable build bundles libffi
  - Temporarily workaround libffi.so not being in lib/%{archinstall} by copying it
  - Exclude libffi.so from the debugedit run
  - Add a simple -version check on both the JDK and JRE bin/java
  - Add libffi.so to the filelist, including expanding the lib/%{archinstall} contents as with jre/lib
  - Sync the copy of the portable specfile and new patches with the latest update
  - Resolves: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-2
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib
  - Sync the copy of the portable specfile with the latest update
  - Remove libffi.so copying workaround now the portable build installs it in lib
  - Add bundled libffi.so to _privatelibs
  - Remove libffi.so copy if we are building on the same platform as the portable
  - Resolves: RHEL-73554
  - Related: RHEL-74302


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-3
changelog:
  - Bump rpmrelease for CentOS build
  - Related: RHEL-73554
  - Related: RHEL-74302
  - Related: RHEL-73990


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-2
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86967
  - Resolves: RHEL-86620


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-3
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Require tzdata 2025b due to upstream inclusion of JDK-8352716
  - Add early backport of JDK-8339414
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-101648
  - Resolves: RHEL-102312
  - Resolves: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-4
changelog:
  - Bump rpmrelease for CentOS build
  - Remove obsolete hack to hardcode newer portable version on RHEL
  - Related: RHEL-101648
  - Related: RHEL-102312
  - Related: RHEL-97496


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-5
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-119329


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118767
  - Resolves: RHEL-119455


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118767
  - Related: RHEL-119455
  - Related: RHEL-118775


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-3
changelog:
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set rpmrelease to 3
  - Set portablesuffix to el9


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.13+1 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+1-ea.tar.xz
  - Synchronize java-17-openjdk-portable.specfile
  - Set updatever to 13
  - Set buildver to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.13+1-ea.tar.xz
  - Related: RHEL-58785
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch
  - Remove unicode section from rpminspect.yml, fixed instead by
    https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/merge_requests/180
    (OPENJDK-2904)
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.14+1 (EA)
  - Add to .gitignore openjdk-17.0.14+1-ea.tar.xz
  - Set updatever to 14
  - Set buildver to 1
  - Set rpmrelease to 2
  - Set is_ga to 0
  - Update sources to openjdk-17.0.14+1-ea.tar.xz
  - Double percent signs consistently throughout comments
  - Set bundled giflib provide version to 5.2.2
  - Set bundled libpng provide version to 1.6.43
  - Warn about bundled provide version bumps and backouts in openjdk_news.sh
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch file
  - Revert: Use component in EPEL and Fedora bug URLs


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.14.0.7-2
changelog:
  - Update to jdk-17.0.14+7 (GA)
  - Add to .gitignore openjdk-17.0.14+7.tar.xz
  - Set buildver to 7
  - Set is_ga to 1
  - Update sources to openjdk-17.0.14+7.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Resolves: RHEL-73981
  - Resolves: RHEL-73559
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.15.0.6-2
changelog:
  - Update to jdk-17.0.15+6 (GA)
  - Add to .gitignore openjdk-17.0.15+6.tar.xz
  - Set updatever to 15
  - Set buildver to 6
  - Update sources to openjdk-17.0.15+6.tar.xz
  - Set bundled freetype provide version to 2.13.2
  - Set bundled harfbuzz provide version to 8.2.2
  - Require tzdata-java 2025a at runtime and for build
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update FIPS patch
  - Resolves: RHEL-86627
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-2
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set updatever to 16
  - Set buildver to 8
  - Set rpmrelease to 2
  - Update sources to openjdk-17.0.16+8.tar.xz
  - Resolves: RHEL-101788
  - Resolves: RHEL-101795
  - Resolves: RHEL-101796
  - Resolves: RHEL-101797
  - Resolves: RHEL-102283
  - Resolves: RHEL-102286
  - Resolves: RHEL-102285
  - Resolves: RHEL-102284
  - Require tzdata-java 2025b at runtime and for build
  - Set bundled freetype provide version to 2.13.3
  - Set bundled harfbuzz provide version to 10.4.0
  - Set bundled lcms2 provide version to 2.17.0
  - Set bundled libpng provide version to 1.6.47
  - Recommend pipewire
  - Related: RHEL-102667
  - Resolves: RHEL-102669
  - Resolves: RHEL-102670
  - Resolves: RHEL-102672
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set updatever to 17
  - Set buildver to 10
  - Set rpmrelease to 1, remove 'must start at 2' comment
  - Set bundled harfbuzz version to 11.2.0
  - Update sources to openjdk-17.0.17+10.tar.xz
  - Resolves: RHEL-119458
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45355
  - Resolves: RHEL-46029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-3
changelog:
  - Transition to the devkit build by not defining pkgos
  - Exempt x86_64 from the static libs debuginfo test until portable uses an older DWARF version
  - Sync the copy of the portable specfile with the devkit version
  - Include the devkit specfile and patches
  - Document the devkit in README.md
  - Resolves: RHEL-74403


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.6.0.7-1
changelog:
  - Update to jdk-21.0.6+7 (GA)
  - Update release notes to 21.0.6+7
  - Sync the copy of the portable & devkit specfiles with the latest update
  - Include the latest devkit patches
  - Update README.md to list an easier way of disabling the devkit
  - ** This tarball is embargoed until 2025-01-21 @ 1pm PT. **
  - Resolves: RHEL-73562


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-1
changelog:
  - Update to jdk-21.0.7+6 (GA)
  - Update release notes to 21.0.7+6
  - Rebase FIPS support against 21.0.7+5
  - Require tzdata 2025a due to upstream inclusion of JDK-8347965
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **
  - Resolves: RHEL-86984
  - Resolves: RHEL-86635


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.7.0.6-2
changelog:
  - Add local version of JDK-8351500 for early interim release before 21.0.8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-90309


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-101798


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Sync the copy of the portable specfile with the latest update
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: RHEL-101798
  - Resolves: RHEL-103209


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.8-0.1.ea
changelog:
  - Update to jdk-21.0.8+8 (EA)
  - Update release notes to 21.0.8+8
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-101798


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.7.0.6-3
changelog:
  - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland
  - Resolves: RHEL-102677


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1.1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: RHEL-102289


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: RHEL-118774
  - Resolves: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-2
changelog:
  - Bump rpmrelease for CentOS build
  - Add scripts to handle tagging of portable-based RPMs
  - Related: RHEL-118774
  - Related: RHEL-119466


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Create java-25-openjdk package based on java-21-openjdk
  - Update to jdk-25.0.1+8 (GA)
  - Update release notes with features of JDK 22, 23, 24 & 25
  - Mention finalisation JEP for features finalised in JDK 22, 23 & 24
  - Update release notes to 25.0.1+8
  - Update README file for java-25-openjdk
  - Make sure this is not the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Remove 21u FIPS patch and disable use until we are ready for the 25 version
  - Adjust CLDR expectations in TestTranslations.java after JDK-8317979 started using tzdata values
  - Adjust TestTranslations.java to expect the same short name throughout for fr_FR and de_DE (bug?)
  - Remove references to libsystemconf.so and nss.fips.cfg from the 21u FIPS patch
  - Include static libraries in the vm_variant subdirectory after JDK-8307858 (libjvm.a)
  - Flip equals test in TestSecurityProperties.java to handle null values from Security.getProperty
  - Introduce crypto_policy_active to designate whether we should expect policy adherence in testing
  - Flip crypto_policy_active to false while the crypto policy & FIPS patch is not present
  - Handle new libsimdsort.so introduced on x86_64 only by JDK-8309130
  - Remove lible.so handling following its removal in JDK-8327476: "Upgrade JLine to 3.26.1"
  - Install jaxp-strict.properties.template added by JDK-8330542: "Template for Creating Strict JAXP Configuration File"
  - alt-java man page installation is now handled by the OpenJDK build
  - Adjust TestTranslations.java with updated German translations from CLDR 46 (JDK-8333582) (Mountain->Mountains)
  - Run javap with the disassembled code (-c) option now required for -l by JDK-8345145
  - Remove default.policy and java.policy following JDK-8338411: "Permanently Disable the Security Manager"
  - Make man page handling dependent on pandoc being available during the portable build
  - Handle new CDS archive variants (*_coh*) added by Compact Object Headers (JDK-8305895)
  - Add missing man page alternatives for jdeprscan, jfr, jhsdb, jimage, jlink & jmod and fix alphabetical ordering
  - Support jnativescan added by JDK-8317611: "Add a tool like jdeprscan to find usage of restricted methods"
  - Add recent native libraries to _privatelibs (libjsvml.so, libsimdsort.so, libsyslookup.so)
  - Support libsleef on AArch64 & RISC-V added by JDK-8329816, JDK-8320500 (RISC-V) & JDK-8312425 (AArch64)
  - Remove superfluous backslashes that cause two alternative commands to be combined
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-126022


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Add libnssadapter.so
  - Add FIPS crypto-policies configuration
  - Remove obsolete security.useSystemPropertiesFile setup
  - Update TestSecurityProperties.java test and calling convention
  - Resolves: RHEL-128414
  - Resolves: RHEL-128412


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:25.0.1.0.8-1
changelog:
  - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS
  - Patch the nssadapter build to recognise LDFLAGS
  - Resolves: RHEL-131898


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Christine Caulfield <ccaulfie@redhat.com> - 2.2.8-6
changelog:
  - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked"
    Resolves: RHEL-40520


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-633.el9]
changelog:
  - nbd: override creds to kernel when calling sock_{send,recv}msg() (Ming Lei) [RHEL-113752]
  - vrf: Drop existing dst reference in vrf_ip6_input_dst (Antoine Tenart) [RHEL-115636]
  - fanotify: add watchdog for permission events (Miklos Szeredi) [RHEL-123216]
  - page_pool: Fix use-after-free in page_pool_recycle_in_ring (Paolo Abeni) [RHEL-115645]
  - Documentation: Fix description format for powerpc RTAS ioctls (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Include linux/types.h in papr-platform-dump.h (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add a char driver for physical-attestation RTAS (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add papr-platform-dump character driver for dump retrieval (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add ibm,get-dynamic-sensor-state RTAS call support (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add ibm,set-dynamic-indicator RTAS call support (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Add papr-indices char driver for ibm,get-indices (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Define papr_indices_io_block for papr-indices ioctls (Mamatha Inamdar) [RHEL-101838]
  - powerpc/pseries: Define common functions for RTAS sequence calls (Mamatha Inamdar) [RHEL-101838]
  - powerpc: Find mutex struct based on RTAS tokens (Mamatha Inamdar) [RHEL-101838]
  - vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects (Guillaume Nault) [RHEL-115639]
  - vxlan: Fix NPD when refreshing an FDB entry with a nexthop object (Guillaume Nault) [RHEL-115639]
  - vxlan: vnifilter: Fix unlocked deletion of default FDB entry (Guillaume Nault) [RHEL-115639]
  - vxlan: Add RCU read-side critical sections in the Tx path (Guillaume Nault) [RHEL-115639]
  - geneve: Suppress list corruption splat in geneve_destroy_tunnels(). (Guillaume Nault) [RHEL-115639]
  - geneve: Fix use-after-free in geneve_find_dev(). (Guillaume Nault) [RHEL-115639]
  - mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-16340]
  - fs: writeback: fix use-after-free in __mark_inode_dirty() (CKI Backport Bot) [RHEL-117209] {CVE-2025-39866}
  - crypto: ccp - Use int type to store negative error codes (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix incorrect payload size calculation in psp_poulate_hsti() (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix typo in psp_populate_hsti function name (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Remove redundant __GFP_ZERO (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix checks for SNP_VLEK_LOAD input buffer length (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add support to enable CipherTextHiding on SNP_INIT_EX (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Introduce new API interface to indicate SEV-SNP Ciphertext hiding feature (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add support for SNP_FEATURE_INFO command (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Cache SEV platform status and platform state (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - New bit-field definitions for SNP_PLATFORM_STATUS command (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - reduce stack usage in ccp_run_aes_gcm_cmd (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix crash when rebind ccp device for ccp.ko (Vladis Dronov) [RHEL-106910] {CVE-2025-38581}
  - crypto: ccp - Fix locking on alloc failure handling (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix SNP panic notifier unregistration (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix dereferencing uninitialized error pointer (Vladis Dronov) [RHEL-106910] {CVE-2025-39729}
  - crypto: ccp - Add missing bootloader info reg for pspv6 (Vladis Dronov) [RHEL-106910]
  - KVM: SVM: Add missing member in SNP_LAUNCH_START command structure (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add missing tee info reg for teev2 (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add missing bootloader info reg for pspv5 (Vladis Dronov) [RHEL-106910]
  - dt-bindings: crypto: Convert amd,ccp-seattle-v1a to DT schema (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add support for PCI device 0x17D8 (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Include crypto/utils.h for crypto_memneq (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Fix __sev_snp_shutdown_locked (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add missing header inclusions (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Silence may-be-uninitialized warning in sev_ioctl_do_pdh_export (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Move SEV/SNP Platform initialization to KVM (Vladis Dronov) [RHEL-106910]
  - KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Add new SEV/SNP platform shutdown API (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Register SNP panic notifier only if SNP is enabled (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Reset TMR size at SNP Shutdown (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Vladis Dronov) [RHEL-106910]
  - crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Vladis Dronov) [RHEL-106910]
  - sanitize handling of long-term internal mounts (José Expósito) [RHEL-113576]
  - PM: hibernate: Add stub for pm_hibernate_is_recovering() (José Expósito) [RHEL-113576]
  - PM: hibernate: add new api pm_hibernate_is_recovering() (José Expósito) [RHEL-113576]
  - mm/kmap: Add kmap_local_page_try_from_panic() (José Expósito) [RHEL-113576]
  - firmware: sysfb: Move bpp-depth calculation into screen_info helper (José Expósito) [RHEL-113576]
  - platform/x86: apple-gmux: Add apple_gmux_detect() helper (José Expósito) [RHEL-113576]
  - platform/x86: apple-gmux: Move port defines to apple-gmux.h (José Expósito) [RHEL-113576]
  - PCI: Add pci_is_display() to check if device is a display controller (José Expósito) [RHEL-113576]
  - io_uring: fix incorrect unlikely() usage in io_waitid_prep() (Jeff Moyer) [RHEL-105612]
  - io_uring: protect mem region deregistration (Jeff Moyer) [RHEL-105612]
  - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jeff Moyer) [RHEL-105612]
  - io_uring: rename the data cmd cache (Jeff Moyer) [RHEL-105612]
  - io_uring: deduplicate caches deallocation (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: always use READ_ONCE() to read ring provided buffer lengths (Jeff Moyer) [RHEL-105612]
  - fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability (Jeff Moyer) [RHEL-105612]
  - io_uring/net: always use current transfer count for buffer put (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: cast nr_pages to size_t before shifting (Jeff Moyer) [RHEL-105612]
  - io_uring: fix breakage in EXPERT menu (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: fix POLLERR handling (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jeff Moyer) [RHEL-105612]
  - io_uring: don't use int for ABI (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: flag partial buffer mappings (Jeff Moyer) [RHEL-105612]
  - io_uring/net: mark iov as dynamically allocated even for single segments (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: don't rely on user vaddr alignment (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: fix folio unpinning (Jeff Moyer) [RHEL-105612]
  - io_uring: fix potential page leak in io_sqe_buffer_register() (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-105612]
  - io_uring: fix task leak issue in io_wq_create() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: validate buffer count with offset for cloning (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: don't truncate end buffer for multiple buffer peeks (Jeff Moyer) [RHEL-105612]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-105612]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-105612]
  - io_uring/net: only consider msg_inq if larger than 1 (Jeff Moyer) [RHEL-105612]
  - io_uring/net: only retry recv bundle for a full transfer (Jeff Moyer) [RHEL-105612]
  - io_uring: fix overflow resched cqe reordering (Jeff Moyer) [RHEL-105612]
  - io_uring/fdinfo: grab ctx->uring_lock around io_uring_show_fdinfo() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: account ring io_buffer_list memory (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: don't use page_address() on a highmem page (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: fix hybrid polling initialization issue (Jeff Moyer) [RHEL-105612]
  - io_uring: account drain memory to cgroup (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: Increase task_work submission batch size (Jeff Moyer) [RHEL-105612]
  - io_uring: always arm linked timeouts prior to issue (Jeff Moyer) [RHEL-105612]
  - io_uring: fix 'sync' handling of io_fallback_tw() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: reject zero sized provided buffers (Jeff Moyer) [RHEL-105612]
  - io_uring: don't post tag CQEs on file/buffer registration failure (Jeff Moyer) [RHEL-105612]
  - io_uring/net: account memory for zc sendmsg (Jeff Moyer) [RHEL-105612]
  - io_uring/net: fix io_req_post_cqe abuse by send bundle (Jeff Moyer) [RHEL-105612]
  - io_uring: fix retry handling off iowq (Jeff Moyer) [RHEL-105612]
  - io_uring/net: only import send_zc buffer once (Jeff Moyer) [RHEL-105612]
  - io_uring: Remove unused declaration io_alloc_async_data() (Jeff Moyer) [RHEL-105612]
  - io_uring: make io_poll_issue() sturdier (Jeff Moyer) [RHEL-105612]
  - io_uring/net: fix accept multishot handling (Jeff Moyer) [RHEL-105612]
  - io_uring: use lockless_cq flag in io_req_complete_post() (Jeff Moyer) [RHEL-105612]
  - io_uring: introduce type alias for io_tw_state (Jeff Moyer) [RHEL-105612]
  - io_uring/net: improve recv bundles (Jeff Moyer) [RHEL-105612]
  - io_uring: check for iowq alloc_workqueue failure (Jeff Moyer) [RHEL-105612]
  - io_uring/io-wq: do not use bogus hash value (Jeff Moyer) [RHEL-105612]
  - fs/aio: Check IOCB_AIO_RW before the struct aio_kiocb conversion (Jeff Moyer) [RHEL-105612]
  - io_uring/net: fix sendzc double notif flush (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't clear REQ_F_NEED_CLEANUP unconditionally (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: ensure reissue path is correctly handled for IOPOLL (Jeff Moyer) [RHEL-105612]
  - io_uring/net: save msg_control for compat (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: clean up mshot forced sync mode (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: move ki_complete init into prep (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: don't directly use ki_complete (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: forbid multishot async reads (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove unused constants (Jeff Moyer) [RHEL-105612]
  - io_uring: fix spelling error in uapi io_uring.h (Jeff Moyer) [RHEL-105612]
  - io-wq: backoff when retrying worker creation (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: unconditionally copy SQEs at prep time (Jeff Moyer) [RHEL-105612]
  - io_uring/waitid: setup async data in the prep handler (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: remove dead req_has_async_data() check (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: switch sqe to async_data on EAGAIN (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: don't assume io_uring_cmd_data layout (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: reallocate buf lists on upgrade (Jeff Moyer) [RHEL-105612]
  - io_uring/waitid: don't abuse io_tw_state (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't retry connect operation on EPOLLERR (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: simplify io_rw_recycle() (Jeff Moyer) [RHEL-105612]
  - io_uring: remove !KASAN guards from cache free (Jeff Moyer) [RHEL-105612]
  - io_uring/net: extract io_send_select_buffer() (Jeff Moyer) [RHEL-105612]
  - io_uring/net: clean io_msg_copy_hdr() (Jeff Moyer) [RHEL-105612]
  - io_uring/net: make io_net_vec_assign() return void (Jeff Moyer) [RHEL-105612]
  - io_uring: add alloc_cache.c (Jeff Moyer) [RHEL-105612]
  - io_uring: dont ifdef io_alloc_cache_kasan() (Jeff Moyer) [RHEL-105612]
  - io_uring: include all deps for alloc_cache.h (Jeff Moyer) [RHEL-105612]
  - io_uring: fix multishots with selected buffers (Jeff Moyer) [RHEL-105612]
  - io_uring/register: use atomic_read/write for sq_flags migration (Jeff Moyer) [RHEL-105612]
  - futex: Pass in task to futex_queue() (Jeff Moyer) [RHEL-105612]
  - io_uring/alloc_cache: get rid of _nocache() helper (Jeff Moyer) [RHEL-105612]
  - io_uring: get rid of alloc cache init_once handling (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: cleanup struct io_uring_cmd_data layout (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: use cached cmd_op in io_uring_cmd_sock() (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: don't leave potentially dangling ->tctx pointer (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: Move lockdep assert from io_free_rsrc_node() to caller (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove unused parameter ctx for io_rsrc_node_alloc() (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up io_uring_register_get_file() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: Simplify buffer cloning by locking both rings (Jeff Moyer) [RHEL-105612]
  - io_uring/fdinfo: fix io_uring_show_fdinfo() misuse of ->d_iname (Jeff Moyer) [RHEL-105612]
  - io_uring: reuse io_should_terminate_tw() for cmds (Jeff Moyer) [RHEL-105612]
  - io_uring: Factor out a function to parse restrictions (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: require cloned buffers to share accounting contexts (Jeff Moyer) [RHEL-105612]
  - io_uring: simplify the SQPOLL thread check when cancelling requests (Jeff Moyer) [RHEL-105612]
  - io_uring: expose read/write attribute capability (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: don't gate retry on completion context (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: handle -EAGAIN retry at IO completion time (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: use io_rw_recycle() from cleanup path (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: simplify the bvec iter count calculation (Jeff Moyer) [RHEL-105612]
  - io_uring: ensure io_queue_deferred() is out-of-line (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: always clear ->bytes_done on io_async_rw setup (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: use NULL for rw->free_iovec assigment (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: don't mask in f_iocb_flags (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: Drop custom destructor (Jeff Moyer) [RHEL-105612]
  - io_uring: Move old async data allocation helper to header (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: Allocate async data through helper (Jeff Moyer) [RHEL-105612]
  - io_uring/net: Allocate msghdr async data through helper (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: Allocate async data through generic helper (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: Allocate apoll with generic alloc_cache helper (Jeff Moyer) [RHEL-105612]
  - io_uring/futex: Allocate ifd with generic alloc_cache helper (Jeff Moyer) [RHEL-105612]
  - io_uring: Add generic helper to allocate async data (Jeff Moyer) [RHEL-105612]
  - io_uring: Fold allocation into alloc_cache helper (Jeff Moyer) [RHEL-105612]
  - io_uring: prevent reg-wait speculations (Jeff Moyer) [RHEL-105612]
  - io_uring: don't vmap single page regions (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up io_prep_rw_setup() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: fix unintentional sign extension on shift of reg.bgid (Jeff Moyer) [RHEL-105612]
  - io_uring: introduce attributes for read/write and PI support (Jeff Moyer) [RHEL-105612]
  - fs/aio: Restrict kiocb_set_cancel_fn() to I/O submitted via libaio (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: unify io_uring mmap'ing code (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use region api for pbuf rings (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: remove pbuf ring refcounting (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use mmap_lock to sync with mmap (Jeff Moyer) [RHEL-105612]
  - io_uring: use region api for CQ (Jeff Moyer) [RHEL-105612]
  - io_uring: use region api for SQ (Jeff Moyer) [RHEL-105612]
  - io_uring: pass ctx to io_register_free_rings (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: implement mmap for regions (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: implement kernel allocated regions (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: add IO_REGION_F_SINGLE_REF (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: helper for pinning region pages (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: optimise single folio regions (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: reuse io_free_region for failure path (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: account memory before pinning (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: flag regions with user pages (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: flag vmap'ed regions (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: export io_check_coalesce_buffer (Jeff Moyer) [RHEL-105612]
  - io_uring: rename ->resize_lock (Jeff Moyer) [RHEL-105612]
  - Reapply "io_uring/uring_cmd: defer SQE copying until it's needed" (Jeff Moyer) [RHEL-105612]
  - io_uring/register: cache old SQ/CQ head reading for copies (Jeff Moyer) [RHEL-105612]
  - io_uring/register: document io_register_resize_rings() shared mem usage (Jeff Moyer) [RHEL-105612]
  - io_uring/register: use stable SQ/CQ ring data during resize (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: fixup io_clone_buffers() error handling (Jeff Moyer) [RHEL-105612]
  - io_uring: don't touch sqd->thread off tw add (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: ensure io_eventfd_signal() defers another RCU period (Jeff Moyer) [RHEL-105612]
  - io_uring: silence false positive warnings (Jeff Moyer) [RHEL-105612]
  - io_uring: add io_uring_cmd_get_async_data helper (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: add per-op data to struct io_uring_cmd_data (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: rename struct uring_cache to io_uring_cmd_data (Jeff Moyer) [RHEL-105612]
  - io_uring/timeout: fix multishot updates (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use pre-committed buffer address for non-pollable file (Jeff Moyer) [RHEL-105612]
  - io_uring/net: always initialize kmsg->msg.msg_inq upfront (Jeff Moyer) [RHEL-105612]
  - io_uring/timeout: flush timeouts outside of the timeout lock (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: fix downgraded mshot read (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-105612]
  - io_uring/register: limit ring resizing to DEFER_TASKRUN (Jeff Moyer) [RHEL-105612]
  - io_uring: Fix registered ring file refcount leak (Jeff Moyer) [RHEL-105612]
  - io_uring: make ctx->timeout_lock a raw spinlock (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: don't put/free empty buffers (Jeff Moyer) [RHEL-105612]
  - io_uring: Change res2 parameter type in io_uring_cmd_done (Jeff Moyer) [RHEL-105612]
  - io_uring/tctx: work around xa_store() allocation error issue (Jeff Moyer) [RHEL-105612]
  - io_uring: fix task_work cap overshooting (Jeff Moyer) [RHEL-105612]
  - io_uring: check for overflows in io_pin_pages (Jeff Moyer) [RHEL-105612]
  - io_uring/nop: ensure nop->fd is always initialized (Jeff Moyer) [RHEL-105612]
  - io_uring: limit local tw done (Jeff Moyer) [RHEL-105612]
  - io_uring: add io_local_work_pending() (Jeff Moyer) [RHEL-105612]
  - io_uring/region: return negative -E2BIG in io_create_region() (Jeff Moyer) [RHEL-105612]
  - io_uring: protect register tracing (Jeff Moyer) [RHEL-105612]
  - io_uring: remove io_uring_cqwait_reg_arg (Jeff Moyer) [RHEL-105612]
  - io_uring/region: fix error codes after failed vmap (Jeff Moyer) [RHEL-105612]
  - io_uring: restore back registered wait arguments (Jeff Moyer) [RHEL-105612]
  - io_uring: add memory region registration (Jeff Moyer) [RHEL-105612]
  - io_uring: introduce concept of memory regions (Jeff Moyer) [RHEL-105612]
  - io_uring: temporarily disable registered waits (Jeff Moyer) [RHEL-105612]
  - io_uring: disable ENTER_EXT_ARG_REG for IOPOLL (Jeff Moyer) [RHEL-105612]
  - io_uring: fortify io_pin_pages with a warning (Jeff Moyer) [RHEL-105612]
  - io_uring: fix invalid hybrid polling ctx leaks (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: fix buffer index retrieval (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: let cmds to know about dying task (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add & apply io_req_assign_buf_node() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove '->ctx_ptr' of 'struct io_rsrc_node' (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: pass 'struct io_ring_ctx' reference to rsrc helpers (Jeff Moyer) [RHEL-105612]
  - io_uring: Remove redundant hrtimer's callback function setup (Jeff Moyer) [RHEL-105612]
  - io_uring: avoid normal tw intermediate fallback (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: add static napi tracking strategy (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: clean up __io_napi_do_busy_loop (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: Use lock guards (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: improve __io_napi_add (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: fix io_napi_entry RCU accesses (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: protect concurrent io_napi_entry timeout accesses (Jeff Moyer) [RHEL-105612]
  - io_uring: prevent speculating sq_array indexing (Jeff Moyer) [RHEL-105612]
  - io_uring: move struct io_kiocb from task_struct to io_uring_task (Jeff Moyer) [RHEL-105612]
  - io_uring: remove task ref helpers (Jeff Moyer) [RHEL-105612]
  - io_uring: move cancelations to be io_uring_task based (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: split io_kiocb node type assignments (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: encode node type and ctx together (Jeff Moyer) [RHEL-105612]
  - io_uring: add support for hybrid IOPOLL (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: allow cloning with node replacements (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: allow cloning at an offset (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of the empty node and dummy_ubuf (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add io_reset_rsrc_node() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/filetable: kill io_reset_alloc_hint() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/filetable: remove io_file_from_index() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add io_rsrc_node_lookup() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: unify file and buffer resource tables (Jeff Moyer) [RHEL-105612]
  - io_uring: only initialize io_kiocb rsrc_nodes when needed (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add an empty io_rsrc_node for sparse buffer entries (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of io_rsrc_node allocation cache (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of per-ring io_rsrc_node list (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: kill io_charge_rsrc_node() (Jeff Moyer) [RHEL-105612]
  - io_uring/splice: open code 2nd direct file assignment (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: move struct io_fixed_file to rsrc.h header (Jeff Moyer) [RHEL-105612]
  - io_uring/nop: add support for testing registered files and buffers (Jeff Moyer) [RHEL-105612]
  - io_uring: add support for fixed wait regions (Jeff Moyer) [RHEL-105612]
  - io_uring: change io_get_ext_arg() to use uaccess begin + end (Jeff Moyer) [RHEL-105612]
  - io_uring: switch struct ext_arg from __kernel_timespec to timespec64 (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: wait on sqd->wait for thread parking (Jeff Moyer) [RHEL-105612]
  - io_uring/register: add IORING_REGISTER_RESIZE_RINGS (Jeff Moyer) [RHEL-105612]
  - io_uring/memmap: explicitly return -EFAULT for mmap on NULL rings (Jeff Moyer) [RHEL-105612]
  - io_uring: abstract out a bit of the ring filling logic (Jeff Moyer) [RHEL-105612]
  - io_uring: move max entry definition and ring sizing into header (Jeff Moyer) [RHEL-105612]
  - io_uring/net: clean up io_msg_copy_hdr (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't alias send user pointer reads (Jeff Moyer) [RHEL-105612]
  - io_uring/net: don't store send address ptr (Jeff Moyer) [RHEL-105612]
  - io_uring/net: split send and sendmsg prep helpers (Jeff Moyer) [RHEL-105612]
  - io_uring: kill 'imu' from struct io_kiocb (Jeff Moyer) [RHEL-105612]
  - io_uring/net: move send zc fixed buffer import to issue path (Jeff Moyer) [RHEL-105612]
  - io_uring: remove 'issue_flags' argument for io_req_set_rsrc_node() (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: get rid of using req->imu (Jeff Moyer) [RHEL-105612]
  - io_uring/uring_cmd: get rid of using req->imu (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: don't assign bvec twice in io_import_fixed() (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up cqe trace points (Jeff Moyer) [RHEL-105612]
  - io_uring: static_key for !IORING_SETUP_NO_SQARRAY (Jeff Moyer) [RHEL-105612]
  - io_uring: kill io_llist_xchg (Jeff Moyer) [RHEL-105612]
  - io_uring: move cancel hash tables to kvmalloc/kvfree (Jeff Moyer) [RHEL-105612]
  - io_uring/cancel: get rid of init_hash_table() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: get rid of per-hashtable bucket locks (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: get rid of io_poll_tw_hash_eject() (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: get rid of unlocked cancel hash (Jeff Moyer) [RHEL-105612]
  - io_uring/poll: remove 'ctx' argument from io_poll_req_delete() (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: add support for sending a sync message (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: refactor a few helper functions (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move ctx->evfd_last_cq_tail into io_ev_fd (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: abstract out ev_fd grab + release helpers (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move trigger check into a helper (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move actual signaling part into separate helper (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: check for the need to async notifier earlier (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: abstract out ev_fd put helper (Jeff Moyer) [RHEL-105612]
  - io_uring: IORING_OP_F[GS]ETXATTR is fine with REQ_F_FIXED_FILE (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: fix wrong NOWAIT check in io_rw_init_file() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: ignore dummy_ubuf for buffer cloning (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT (Jeff Moyer) [RHEL-105612]
  - io_uring: fix casts to io_req_flags_t (Jeff Moyer) [RHEL-105612]
  - io_uring: improve request linking trace (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: do the napi busy poll outside the submission block (Jeff Moyer) [RHEL-105612]
  - io_uring: clean up a type in io_uring_register_get_file() (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: change ubuf->ubuf_end to length tracking (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: get rid of io_mapped_ubuf->folio_mask (Jeff Moyer) [RHEL-105612]
  - io_uring: rename "copy buffers" to "clone buffers" (Jeff Moyer) [RHEL-105612]
  - io_uring: add IORING_REGISTER_COPY_BUFFERS method (Jeff Moyer) [RHEL-105612]
  - io_uring/register: provide helper to get io_ring_ctx from 'fd' (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: add reference count to struct io_mapped_ubuf (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: clear 'slot' entry upfront (Jeff Moyer) [RHEL-105612]
  - block: implement async io_uring discard cmd (Jeff Moyer) [RHEL-105612]
  - block: introduce blk_validate_byte_range() (Jeff Moyer) [RHEL-105612]
  - filemap: introduce filemap_invalidate_pages (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: give inline space in request to cmds (Jeff Moyer) [RHEL-105612]
  - io_uring/cmd: expose iowq to cmds (Jeff Moyer) [RHEL-105612]
  - io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common() (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move refs to refcount_t (Jeff Moyer) [RHEL-105612]
  - io_uring: remove unused rsrc_put_fn (Jeff Moyer) [RHEL-105612]
  - io_uring: add new line after variable declaration (Jeff Moyer) [RHEL-105612]
  - RHEL-only: Add CONFIG_GCOV_PROFILE_URING files (Jeff Moyer) [RHEL-105612]
  - io_uring: add GCOV_PROFILE_URING Kconfig option (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: add support for incremental buffer consumption (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: pass in 'len' argument for buffer commit (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: move io_ring_head_to_buf() to kbuf.h (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: add io_kbuf_commit() helper (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: shrink nr_iovs/mode in struct buf_sel_arg (Jeff Moyer) [RHEL-105612]
  - io_uring: wire up min batch wake timeout (Jeff Moyer) [RHEL-105612]
  - io_uring: add support for batch wait timeout (Jeff Moyer) [RHEL-105612]
  - io_uring: implement our own schedule timeout handling (Jeff Moyer) [RHEL-105612]
  - io_uring: move schedule wait logic into helper (Jeff Moyer) [RHEL-105612]
  - io_uring: encapsulate extraneous wait flags into a separate struct (Jeff Moyer) [RHEL-105612]
  - io_uring: user registered clockid for wait timeouts (Jeff Moyer) [RHEL-105612]
  - io_uring: add absolute mode wait timeouts (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: postpone napi timeout adjustment (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: refactor __io_napi_busy_loop() (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: turn io_buffer_list booleans into flags (Jeff Moyer) [RHEL-105612]
  - io_uring/net: use ITER_UBUF for single segment send maps (Jeff Moyer) [RHEL-105612]
  - io_uring/kbuf: use 'bl' directly rather than req->buf_list (Jeff Moyer) [RHEL-105612]
  - io_uring: micro optimization of __io_sq_thread() condition (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: enable multi-hugepage buffer coalescing (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: store folio shift and mask into imu (Jeff Moyer) [RHEL-105612]
  - io_uring: add napi busy settings to the fdinfo output (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: ensure compat iovecs are copied correctly (Jeff Moyer) [RHEL-105612]
  - io_uring: fix user_data field name in comment (Jeff Moyer) [RHEL-105612]
  - io_uring/sqpoll: annotate debug task == current with data_race() (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: remove duplicate io_napi_entry timeout assignation (Jeff Moyer) [RHEL-105612]
  - io_uring: remove unused local list heads in NAPI functions (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: pass ktime to io_napi_adjust_timeout (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: use ktime in busy polling (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: fix uninitialized use of target_req->flags (Jeff Moyer) [RHEL-105612]
  - io_uring: align iowq and task request error handling (Jeff Moyer) [RHEL-105612]
  - io_uring: kill REQ_F_CANCEL_SEQ (Jeff Moyer) [RHEL-105612]
  - io_uring: simplify io_uring_cmd return (Jeff Moyer) [RHEL-105612]
  - io_uring/net: check socket is valid in io_bind()/io_listen() (Jeff Moyer) [RHEL-105612]
  - io_uring/napi: Remove unnecessary s64 cast (Jeff Moyer) [RHEL-105612]
  - io_uring/net: cleanup io_recv_finish() bundle handling (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: fix overflow posting (Jeff Moyer) [RHEL-105612]
  - net: limit scope of a skb_zerocopy_iter_stream var (Jeff Moyer) [RHEL-105612]
  - io_uring/net: move charging socket out of zc io_uring (Jeff Moyer) [RHEL-105612]
  - net: batch zerocopy_fill_skb_from_iter accounting (Jeff Moyer) [RHEL-105612]
  - net: split __zerocopy_sg_from_iter() (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: use kmem_cache_free() to free request (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: check for dead submitter task (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: add an alloc cache for io_kiocb entries (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: improve handling of target CQE posting (Jeff Moyer) [RHEL-105612]
  - io_uring: add io_add_aux_cqe() helper (Jeff Moyer) [RHEL-105612]
  - io_uring: add remote task_work execution helper (Jeff Moyer) [RHEL-105612]
  - io_uring/msg_ring: tighten requirement for remote posting (Jeff Moyer) [RHEL-105612]
  - io_uring: Allocate only necessary memory in io_probe (Jeff Moyer) [RHEL-105612]
  - io_uring: Introduce IORING_OP_LISTEN (Jeff Moyer) [RHEL-105612]
  - io_uring: Introduce IORING_OP_BIND (Jeff Moyer) [RHEL-105612]
  - net: Split a __sys_listen helper for io_uring (Jeff Moyer) [RHEL-105612]
  - net: Split a __sys_bind helper for io_uring (Jeff Moyer) [RHEL-105612]
  - io_uring/advise: support 64-bit lengths (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: remove redundant __set_current_state() post schedule() (Jeff Moyer) [RHEL-105612]
  - io_uring/io-wq: make io_wq_work flags atomic (Jeff Moyer) [RHEL-105612]
  - io_uring: use 'state' consistently (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move eventfd handling to separate file (Jeff Moyer) [RHEL-105612]
  - io_uring/eventfd: move to more idiomatic RCU free usage (Jeff Moyer) [RHEL-105612]
  - io_uring/rsrc: Drop io_copy_iov in favor of iovec API (Jeff Moyer) [RHEL-105612]
  - io_uring: Drop per-ctx dummy_ubuf (Jeff Moyer) [RHEL-105612]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-634.el9]
changelog:
  - powerpc/crash: remove unnecessary NULL check before kvfree() (Mamatha Inamdar) [RHEL-101851]
  - powerpc/crash: add crash memory hotplug support (Mamatha Inamdar) [RHEL-101851]
  - powerpc/crash: add crash CPU hotplug support (Mamatha Inamdar) [RHEL-101851]
  - powerpc/kexec: make the update_cpus_node() function public (Mamatha Inamdar) [RHEL-101851]
  - powerpc/kexec: move *_memory_ranges functions to ranges.c (Mamatha Inamdar) [RHEL-101851]
  - platform/x86: oaktrail: Use backlight power constants (David Arcari) [RHEL-120895]
  - platform/x86: intel: oaktrail: Drop empty platform remove function (David Arcari) [RHEL-120895]
  - platform/x86: use PLATFORM_DEVID_NONE instead of -1 [partial] (David Arcari) [RHEL-120895]
  - platform/x86/intel/rst: drop owner assignment (David Arcari) [RHEL-120895]
  - platform/x86: intel_turbo_max_3: Switch to new Intel CPU model defines (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Protect ACPI notify handler against recursion (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Update tablet mode switch at end of probe (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Use acpi_has_method to check for switch (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Log event code on unexpected button events (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Stop calling "VBDL" from notify_handler (David Arcari) [RHEL-120895]
  - platform/x86: intel-vbtn: Fix missing tablet-mode-switch events (David Arcari) [RHEL-120895]
  - platform/x86: intel: vbtn: Convert to platform remove callback returning void (David Arcari) [RHEL-120895]
  - platform/x86: Replace acpi_bus_get_device() [partial] (David Arcari) [RHEL-120895]
  - platform/x86: intel: telemetry: pltdrv: Convert to platform remove callback returning void (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Switch to new Intel CPU model defines (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmc: Add Bartlett Lake support to intel_pmc_core (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Check write blocked for ELC (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: support BMG crashlog (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: use a version struct (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: refactor base parameter (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: add register access helpers (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: decouple sysfs and namespace (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: correct types (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: re-order trigger logic (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: use guard(mutex) (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: mutex clean up (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: white space cleanup (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: fix build dependency for kunit test (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/discovery: fix format string warning (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit (David Arcari) [RHEL-120895]
  - redhat/configs: disable CONFIG_INTEL_PMT_KUNIT_TEST (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt/discovery: Get telemetry attributes (David Arcari) [RHEL-120895]
  - platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Set OOBMSM to CPU mapping (David Arcari) [RHEL-120895]
  - platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmt: Add PMT Discovery driver (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Add new Discovery feature (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Skip driverless features (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Skip absent features during initialization (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Add device links to enforce dependencies (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Create wrapper to walk PCI config space (David Arcari) [RHEL-120895]
  - platform/x86/intel/vsec: Add private data for per-device data (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add Wildcat Lake support (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: avoid non-literal format string (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmc: Add Panther Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-120895]
  - platform/x86/intel/pmc: Add Lunar Lake support to Intel PMC SSRAM Telemetry (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Remove unused telemetry_raw_read_events() (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Remove unused telemetry_[gs]et_sampling_period() (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Remove unused telemetry_*_events() (David Arcari) [RHEL-120895]
  - platform/x86: intel_telemetry: Fix kernel doc descriptions (David Arcari) [RHEL-120895]
  - platform/x86/intel: power-domains: Fix error code in tpmi_init() (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Add attributes to show die_id (David Arcari) [RHEL-120895]
  - platform/x86/intel: power-domains: Add interface to get Linux die ID (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Add attributes to show agent types (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Do Not Restore SST MSRs on CPU Online Operation (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Update minor version (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Support SST-PP revision 2 (David Arcari) [RHEL-120895]
  - platform/x86: ISST: Support SST-TF revision 2 (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Improve pmc_core_get_lpm_req() (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Move error handling to init function (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Use devm for mutex_init (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Create Intel PMC SSRAM Telemetry driver (David Arcari) [RHEL-120895]
  - platform/x86:intel/vsec: Change return type of intel_vsec_register (David Arcari) [RHEL-120895]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: Add Pantherlake support (David Arcari) [RHEL-120895]
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (David Arcari) [RHEL-120895]
  - intel-hid: fix volume buttons on Thinkpad X12 Detachable Tablet Gen 1 (David Arcari) [RHEL-120895]
  - platform/x86: intel-hid: Use string_choices API instead of ternary operator (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add Lunar Lake and Arrow Lake support (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Don't wake on 5-button releases (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks (David Arcari) [RHEL-120895]
  - platform/x86: intel: hid: Always call BTNL ACPI method (David Arcari) [RHEL-120895]
  - platform/x86: intel: hid: Convert to platform remove callback returning void (David Arcari) [RHEL-120895]
  - platform/x86/intel/hid: Add module-params for 5 button array + SW_TABLET_MODE reporting (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: Add Surface Go to VGBS allow list (David Arcari) [RHEL-120895]
  - platform/x86: intel-hid: fix _DSM function index handling (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: add quirk to support Surface Go 3 (David Arcari) [RHEL-120895]
  - platform/x86/intel: hid: Add DMI switches allow list (David Arcari) [RHEL-120895]
  - platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Remove unneeded io operations (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Remove unneeded header file inclusion (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Convert index variables to be unsigned (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Move PMC devid to core.h (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Rename core_ssram to ssram_telemetry (David Arcari) [RHEL-120895]
  - platform/x86:intel/pmc: Move PMC Core related functions (David Arcari) [RHEL-120895]
  - hwmon: (k10temp) Add device ID for Strix Halo (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Add thermal support for AMD Family 1Ah-based models (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Add support for Zen5 Ryzen Desktop (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) add support for cyan skillfish (David Arcari) [RHEL-104300]
  - hwmon: (k10temp): Use cpu_feature_enabled() for detecting zen (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Rename _data variable (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Remove unused HAVE_TDIE() macro (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Reduce k10temp_get_ccd_support() parameters (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Define a helper function to read CCD temperature (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Add support for AMD Family 19h Model 8h (David Arcari) [RHEL-104300]
  - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (David Arcari) [RHEL-104300]
  - dmaengine: ti: edma: Fix memory allocation size for queue_priority_map (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix double free in idxd_setup_wqs() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix refcount underflow on module unload (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Remove improper idxd_free (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Remove __packed from structures (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: Do not enable by default during compile testing (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: sh: Do not enable SH_DMAE_BASE by default during compile testing (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix warning for deadcode.deadstore (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: qcom: gpi: Drop unused gpi_write_reg_field() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: dw-edma: Drop unused dchan2dev() and chan2dev() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Add devm_dma_request_chan() (Jerry Snitselaar) [RHEL-114133]
  - dma: dw-edma: Fix build warning in dw_edma_pcie_probe() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Remove unused pointer and macro (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: sh: rz-dmac: Add RZ/V2H(P) support (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: sh: rz-dmac: Allow for multiple DMACs (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Narrow the restriction on BATCH to ver. 1 only (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: Add NULL check in udma_probe() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: dw-edma: Add HDMA NATIVE map check (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ptdma: Remove dead code from pt_dmaengine_register() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ptdma: Remove unused pointer dma_cmd_cache (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix ->poll() return value (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Refactor remove call with idxd_cleanup() helper (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_alloc (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Add missing cleanups in cleanup internals (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Fix allowing write() from different address spaces (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: k3-udma: Add missing locking (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Remove device_prep_dma_imm_data from struct dma_device (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: edma: support sw triggered chans in of_edma_xlate() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: ti: k3-udma: Enable second resource range for BCDMA and PKTDMA (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Fix typo in comment (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: bcm2835-dma: fix warning when CONFIG_PM=n (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: idxd: Delete unnecessary NULL check (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Use str_enable_disable-like helpers (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: dw: Switch to LATE_SIMPLE_DEV_PM_OPS() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Unify checks in dma_request_chan() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Add a comment on why it's okay when kasprintf() fails (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Use dma_request_channel() instead of __dma_request_channel() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: Replace dma_request_slave_channel() by dma_request_chan() (Jerry Snitselaar) [RHEL-114133]
  - dmaengine: amd: qdma: make read-only arrays h2c_types and c2h_types static const (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Make all all CPUID leaf names consistent (Jerry Snitselaar) [RHEL-114133]
  - x86/fpu: Remove unnecessary CPUID level check (Jerry Snitselaar) [RHEL-114133]
  - x86/fpu: Move CPUID leaf definitions to common code (Jerry Snitselaar) [RHEL-114133]
  - x86/tsc: Remove CPUID "frequency" leaf magic numbers. (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Refresh DCA leaf reading code (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Use MWAIT leaf definition (Jerry Snitselaar) [RHEL-114133]
  - x86/cpu: Move MWAIT leaf definition to common header (Jerry Snitselaar) [RHEL-114133]
  - redhat/configs: Enable CONFIG_CRASH_DM_CRYPT on RHEL (Coiby Xu) [RHEL-104939]
  - s390: kexec: initialize kexec_buf struct (Coiby Xu) [RHEL-104939]
  - arm64: kexec: initialize kexec_buf struct in load_other_segments() (Coiby Xu) [RHEL-104939]
  - crashdump: add CONFIG_KEYS dependency (Coiby Xu) [RHEL-104939]
  - crash_dump, nvme: select CONFIGFS_FS as built-in (Coiby Xu) [RHEL-104939]
  - x86/crash: make the page that stores the dm crypt keys inaccessible (Coiby Xu) [RHEL-104939]
  - x86/crash: pass dm crypt keys to kdump kernel (Coiby Xu) [RHEL-104939]
  - crash_dump: retrieve dm crypt keys in kdump kernel (Coiby Xu) [RHEL-104939]
  - crash_dump: reuse saved dm crypt keys for CPU/memory hot-plugging (Coiby Xu) [RHEL-104939]
  - crash_dump: store dm crypt keys in kdump reserved memory (Coiby Xu) [RHEL-104939]
  - crash_dump: make dm crypt keys persist for the kdump kernel (Coiby Xu) [RHEL-104939]
  - kexec_file: allow to place kexec_buf randomly (Coiby Xu) [RHEL-104939]
  - docs: core-api: document the IOVA-based API (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: add a dma_need_unmap helper (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: Implement link/unlink ranges API (Jerry Snitselaar) [RHEL-113839]
  - iommu/dma: Factor out a iommu_dma_map_swiotlb helper (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: Provide an interface to allow allocate IOVA (Jerry Snitselaar) [RHEL-113839]
  - iommu: add kernel-doc for iommu_unmap_fast (Jerry Snitselaar) [RHEL-113839]
  - iommu: generalize the batched sync after map interface (Jerry Snitselaar) [RHEL-113839]
  - dma-mapping: move the PCI P2PDMA mapping helpers to pci-p2pdma.h (Jerry Snitselaar) [RHEL-113839]
  - PCI/P2PDMA: Refactor the p2pdma mapping helpers (Jerry Snitselaar) [RHEL-113839]
  - ALSA: update RHEL kconfigs for 6.16 upstream code (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Allow Focusrite devices to use low samplerates (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: tas2781: reorder tas2563 calibration variables (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: tas2781: fix tas2563 EFI data endianness (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: WCL: Add the sdw_process_wakeen op (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rsnd: tidyup direction name on rsnd_dai_connect() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix EFI name for calibration beginning with 1 instead of 0 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-core: tidyup snd_soc_lookup_component_nolocked() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-core: care NULL dirver name on snd_soc_lookup_component_nolocked() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Remove SoundWire Clock Divider workaround for CS35L63 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Handle new algorithms IDs for CS35L63 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Update Firmware Addresses for CS35L63 for production silicon (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: tas2781: Fix wrong reference of tasdevice_priv (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Adjust mutex unlock order (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SDCA: correct the calculation of the maximum init table size (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt5650: Eliminate the high frequency glitch (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: PTL: Add the sdw_process_wakeen op (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek - Add mute LED support for HP Victus 15-fa0xxx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi: add support for HP Omen14 ARL (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cs35l56: Workaround bad dev-index on Lenovo Yoga Book 9i GenX (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Support mute LED for Yoga with ALC287 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: fix SND_SOC_SOF dependencies (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt5660: Fix the dmic data source from GPIO2 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix NULL ptr deref on rmmod (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: add DMI quirk for ASUS M6501RM (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Enable headset Mic on Positivo K116J (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix calibration data parser issue (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Add quirk for ASUS ExpertBook B9403CVAR (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Improve filtering of sample rates on Focusrite devices (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: qcom: fix NULL pointer dereference in qmi_stop_session (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: Fix missing error code in prepare_qmi_response() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: sm8250: Fix possibly undefined reference (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Enable headset Mic on Positivo P15X (Jaroslav Kysela) [RHEL-112755]
  - ASoC: doc: cs35l56: Add CS35L63 to the list of supported devices (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/realtek: Add quirk for Asus GA605K (Jaroslav Kysela) [RHEL-112755]
  - ASoC: apple: mca: Drop default ARCH_APPLE in Kconfig (Jaroslav Kysela) [RHEL-112755]
  - ASoC: doc: cs35l56: Update to add new SoundWire firmware filename suffix (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Use SoundWire address as alternate firmware suffix on L56 B0 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Use SoundWire address as firmware name suffix for new silicon (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sdw_utils: Fix potential NULL pointer deref in is_sdca_endpoint_present() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ctxfi: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: ES8326: Modify initialization configuration (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Fix a signedness bug in cs48l32_hw_params() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Fix rt5663 front end name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Simplify verification of parse_int_array() result (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: cs35l41: Constify regmap_irq_chip (Jaroslav Kysela) [RHEL-112755]
  - ASoC: pcm: Do not open FEs with no BEs connected (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Include missing string.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Verify kcalloc() status when setting constraints (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: yc: Add support for Lenovo Yoga 7 16ARP8 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas571x: fix tas5733 num_controls (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas571x: add separate tas5733 controls (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: fix USB_XHCI dependency (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qdsp6: fix compile-testing without CONFIG_OF (Jaroslav Kysela) [RHEL-112755]
  - ALSA: atmel: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Make cirrus_dir const (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: Tegra264 support in isomgr_bw (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: AHUB: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: AMX: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: ADX: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: I2S: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: Update PLL rate for Tegra264 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: ASRC: Update ARAM address (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: ADMAIF: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tegra: CIF: Add Tegra264 support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: ASoC: Document Tegra264 APE support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: ASoC: admaif: Add missing properties (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Move and unified the calibrated-data getting function for SPI and I2C into the tas2781_hda lib (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: try to reduce address space confusion (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tegra: Switch to two-argument strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: avoid leaking xfer_buf allocation (Jaroslav Kysela) [RHEL-112755]
  - ALSA: qc_audio_offload: rename dma/iova/va/cpu/phys variables (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Fix an error handling path in qc_usb_audio_probe() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cs35l41_hda: select FW_CS_DSP (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: sof_sdw: Add support for wclrvp & ocelot in WCL platform (Jaroslav Kysela) [RHEL-112755]
  - ALSA: amd7930: replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-mtl-match: Add match for CDB35L63-CB2 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: sof_sdw: Add support for CS35L63 into machine driver (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: add HDMI codec ID for Intel WCL (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: add initial support for WCL (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: intel-dsp-config: Add WCL support (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: hda-intel: add Wildcat Lake support (Jaroslav Kysela) [RHEL-112755]
  - PCI: Add Intel Wildcat Lake audio Device ID (Jaroslav Kysela) [RHEL-112755]
  - ALSA: dbri: replace strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: n64: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: sc8280xp: Add sound card support for QCS9100 and QCS9075 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: qcom,sm8250: Add QCS9100 and QCS9075 sound card (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781: Header file cleanup and Move the macro definitions to fwlib (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt722: make regmap cache-only in probe (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_xcvr: update platform driver name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-utils: Check string pointer validity in snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: fcp: Use USB API functions rather than constants (Jaroslav Kysela) [RHEL-112755]
  - ALSA: scarlett2: Use USB API functions rather than constants (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Rename Pioneer mixer channel controls (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: Document Tegra264 HDA Support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: Update Tegra194 and Tegra234 HDA bindings (Jaroslav Kysela) [RHEL-112755]
  - ASoC: mediatek: mt8183-afe-pcm: Shorten irq_data table using macros (Jaroslav Kysela) [RHEL-112755]
  - ASoC: mediatek: mt8183-afe-pcm: shorten mt8183_is_volatile_reg() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: mediatek: mt8183-afe-pcm: Shorten memif_data table using macros (Jaroslav Kysela) [RHEL-112755]
  - ASoC: q6apm-lpass-dais: Print APM port id in decimal on enable error (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: use new ACP dev names for DAI links (Jaroslav Kysela) [RHEL-112755]
  - soundwire: intel: Add awareness of ACE3+ microphone privacy (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: Intel: hda: Set the mic_privacy flag for soundwire with ACE3+ (Jaroslav Kysela) [RHEL-112755]
  - soundwire: bus: Simplify sdw_assign_device_num() (Jaroslav Kysela) [RHEL-112755]
  - soundwire: bus: Add internal slave ID and use for IRQs (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: cs35l56: Log tuning unique identifiers during firmware load (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Log tuning unique identifiers during firmware load (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tlv320aic3x: Use dev_err_probe (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix the ld issue reported by kernel test robot (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Fix the symbol was not declare warning reported by kernel test robot (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sb: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-core: merge snd_soc_unregister_component() and snd_soc_unregister_component_by_driver() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: msnd: Remove midi code (Jaroslav Kysela) [RHEL-112755]
  - ALSA: intel-hdmi-audio: Replace deprecated strcpy() with strscpy() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: wavefront: remove snd_wavefront_xxx() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: isa/gus: remove snd_gf1_lfo_xxx() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: intel-nhlt: Print errors in intel_nhlt_ssp_device_type() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc.h: remove snd_soc_disconnect_sync() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc.h: remove unnecessary definitions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: atom: Remove unused functions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt712-sdca: remove redundant else path of if statement (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: rt9123: Fix sparse cast warning (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: au88x0: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: asihpi: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: ali5451: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: mixer_quirks: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: mixer_us16x08: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sh: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: i2c: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: core: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: virtio: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pci: hda: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: midi: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb: mixer: use snd_kcontrol_chip() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: gus: Remove deadcode (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Create an independent lib to save the shared parts for both SPI and I2C driver (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: Remove unused snd_hdac_stream_get_spbmaxfifo (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: Remove unused snd_hda_add_nid (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt712-sdca: remove redundant else path of if statement (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Add rt713_vb_l3_rt1320_l3 support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-lnl/ptl-match: Simplify variable name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781: Add a debugfs node for acoustic tuning (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: sof_amd_sdw: add logic to get cpu_pin_id for ACP7.0/ACP7.1 platforms (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-ptl-match: Sort ACPI link/machine tables (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l52: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l52: Drop cs42l52.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l52: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l73: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l73: Drop cs42l73.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l73: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l56: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l56: Drop cs42l56.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: cs42l56: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: add disable_function_topology module parameter (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: set disable_function_topology if override_tplg_filename is set (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: add disable_function_topology flag (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add initial support for CS35L63 for I2C and SoundWire (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Read Silicon ID from DIE_STS registers for CS35L63 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add Mute, Volume and Posture registers to firmware register list (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add struct to index firmware registers (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs35l56: Add Index based on ACPI HID or SDW ID to select regmap config (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: sof_sdw: Avoid NULL check fail when re-probing (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sdw_utils: Remove num_platforms from simple DAI helper (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: select CONFIG_CRC8 for SND_HDA_SCODEC_TAS2781_I2C (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pcm: Remove unused snd_pcm_rate_range_to_bits (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pcm: Remove unused snd_dmaengine_pcm_open_request_chan (Jaroslav Kysela) [RHEL-112755]
  - ALSA: seq: Remove unused snd_seq_queue_client_leave_cells (Jaroslav Kysela) [RHEL-112755]
  - ALSA: core: Remove unused snd_device_get_state (Jaroslav Kysela) [RHEL-112755]
  - ALSA: core: Remove unused snd_jack_set_parent (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: atom: Return -ENOMEM if pcim_iomap() fails (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: avs: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: intel: atom: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sof: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: add build support for soundwire (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: add soundwire wake irq handling (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: enable soundwire host wake irq mask (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: refactor acp reset sequence (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: enable ACP_PME_EN register for ACP7.0 & ACP7.1 platforms (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: update soundwire specific acp descriptor fields (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: add ACP7.1 platform support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: amd: remove else condition in resume sequence (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_rpmsg: Allocate a smaller buffer size for capture stream (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_rpmsg: Configure CPU DAI for card that sits on rpmsg-micfil-channel (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: tas2764: Fix Wvoid-pointer-to-enum-cast warning (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wsa88xx/wcd938x: Drop kerneldoc marker from inner comment (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc-utils: add snd_soc_dlc_is_dummy() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix kcalloc() sizes (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: sma1307: Remove including of_gpio.h (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: twl4030: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: twl4030: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Remove tas2781_spi_fwlib.c and leverage SND_SOC_TAS2781_FMWLIB (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cs35l56: Remove dependency on COMPILE_TEST (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Don't use no_free_ptr() when passing to PTR_ERR() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Use min() to simplify aw_dev_dsp_update_container() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: Fix null pointer dereference (Jaroslav Kysela) [RHEL-112755]
  - ASoC: amd: acp: Drop superfluous assignment in acp_sof_probe() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: korg1212: Replace the pending stop check code with sync_stop PCM ops (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/hda_cs_dsp_ctl: Delete hda_cs_dsp_ctl module (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl: don't set link->platform if not needed (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix NULL pointer dereference (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd938x: drop unnecessary mux flag assignment (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd938x: fix mux error handling (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: tpa6130a2: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: tpa6130a2: Remove tpa6130a2_platform_data (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: tpa6130a2: Sort headers alphabetically (Jaroslav Kysela) [RHEL-112755]
  - ALSA: riptide: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: nm256: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ice: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: emu10k1: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: echoaudio: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs5535: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs46xx: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ca0106: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ali5451: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: maestro3: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: intel8x: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: fm801: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: es19x8: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: azt3328: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: als: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: oxygen: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: lx6464es: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: vx222: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: trident: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: rme9652: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ymfpci: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sonicvibes: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: rme96: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: rme32: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ens1370: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cmipci: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: via82: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: sis7019: Use pure devres PCI (Jaroslav Kysela) [RHEL-112755]
  - ALSA: HDA: Add Zhaoxin HDMI Controller and Codec support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: adau7118: Allow dsp_a mode (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: fsl,mqs: Document audio graph port (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Add Pioneer DJ DJM-V10 support (Jaroslav Kysela) [RHEL-112755]
  - ALSA: pcm: Make snd_pcm_lib_malloc_pages() debug message say "allocate" (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm8998: Add Kconfig prompt (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Remove unused rt566[58]_sel_asrc_clk_src (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Use modern PM_OPS (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt722: fix pop noise at the beginning of DMIC recording (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Fix spelling mistake "exceeeds" -> "exceeds" (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_rpmsg: Remove useless return variable (Jaroslav Kysela) [RHEL-112755]
  - ASoC: ak4458: Remove useless return variable (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rt722: fix pop noise at the beginning of headphone playback (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib-test: Use faux bus instead of creating a dummy platform device (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/tas2781: Create a common header for both spi and i2c tas2781 hda driver (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Set error code in q6usb_hw_params() (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: delete a stray tab (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda/cirrus_scodec_test: Modernize creation of dummy devices (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib-test: Use flex_array_size() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs48l32: Add driver for Cirrus Logic CS48L32 audio DSP (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add Cirrus Logic CS48L32 audio DSP (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib: Annotate struct cirrus_amp_efi_data with __counted_by() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: cs-amp-lib: Replace offsetof() with struct_size() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: rsnd: use snd_pcm_direction_name() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc_sdw_utils: skip the endpoint that doesn't present (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sdw_utils: split asoc_sdw_get_codec_name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-mtl-match: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: soc-acpi-intel-lnl-match: set get_function_tplg_files ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: load multiple topologies (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: don't convert error code (Jaroslav Kysela) [RHEL-112755]
  - ASoC: SOF: topology: allocate string for tuples (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Add support for Richtek rt9123p (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add bindings for Richtek rt9123p (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: Add support for Richtek rt9123 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add bindings for Richtek rt9123 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2770: expose die temp to hwmon (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2764: expose die temp to hwmon (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2764: Apply Apple quirks (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2764: Raise regmap range maximum (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2770: Support setting the PDM TX slot (Jaroslav Kysela) [RHEL-112755]
  - ASoC: ac97: Add DT support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Add Realtek ALC203 Codec (Jaroslav Kysela) [RHEL-112755]
  - ASoC: test-component: add set_tdm_slot stub implementation (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Add USB offload route kcontrol (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Notify USB audio devices on USB offload probing (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: Update example for enabling USB offload on SM8250 (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Introduce USB AFE port to q6dsp (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: q6afe: Increase APR timeout (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Add headphone jack for offload connection status (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Fetch USB offload mapped card and PCM device (Jaroslav Kysela) [RHEL-112755]
  - ASoC: qcom: qdsp6: Add USB backend ASoC driver for Q6 (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Add USB QMI definitions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Don't allow USB offload path if PCM device is in use (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: qcom: Introduce QC USB SND offloading support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Fetch ASoC card and pcm device information (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Allow for rediscovery of connected USB SND devices (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Add PCM format check API for USB backend (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Create SOC USB SND jack kcontrol (Jaroslav Kysela) [RHEL-112755]
  - ASoC: usb: Rediscover USB SND devices on USB port add (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Add SoC USB APIs for adding an USB backend (Jaroslav Kysela) [RHEL-112755]
  - ASoC: doc: Add documentation for SOC USB (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: qcom,q6dsp-lpass-ports: Add USB_RX port (Jaroslav Kysela) [RHEL-112755]
  - ALSA: Add USB audio device jack type (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Export USB SND APIs for modules (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Introduce USB SND platform op callbacks (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Check for support for requested audio format (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Save UAC sample size information (Jaroslav Kysela) [RHEL-112755]
  - ALSA: usb-audio: Prevent starting of audio stream if in use (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Use vmemdup_user() instead of open-coding (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs46xx: Remove commented out code (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Constrain path based on BE capabilities (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781-i2c: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: wm_adsp: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: tas2781-fmwlib: Remove unnecessary NULL check before release_firmware() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: ak5386: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Support 16 TDMs in dynamic assignment (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Iterate over correct number of TDMs (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Assign unique ID to platform devices (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Allow to specify custom configurations with i2s_test (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Allow for 16 channels configuration (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Rename AVS_CHANNELS_MAX define (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda: Allow for 16 channels configuration (Jaroslav Kysela) [RHEL-112755]
  - lib/string_helpers: Introduce parse_int_array() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt5682 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change ssm4567 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt5663 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt5514 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt298 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt286 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change rt274 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change probe card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change pcm3168a card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change nau8825 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change max98373 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change max98927 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change max98357a card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change sspX-loopback card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change hdaudio card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change es8336 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change DMIC card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Use topology information for endpoint numbers (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Change da7219 card name (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: boards: Add Kconfig option for obsolete card names (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add boards definitions for FCL platform (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Conditionally add DMA config when creating Copier (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Dynamically assign ops for non-HDAudio DAIs (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: PTL-based platforms support (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hdspm: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: atiixp: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: au88x0: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: aw2: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: bt87x: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs4281: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: hda_intel: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: cs5530: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: lola: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ALSA: ad1889: Replace deprecated PCI functions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sta32x: Remove unnecessary NULL check before clk_disable_unprepare() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: hdmi-codec: wire up the .prepare callback also for SPDIF DAI ops (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: rt5677: Use secs_to_jiffies() instead of msecs_to_jiffies() (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: fsl,mqs: Reference common DAI properties (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: maxim,max98925: Fix include placement in DTS example (Jaroslav Kysela) [RHEL-112755]
  - ASoC: sun8i-codec: Remove unnecessary NULL check before clk_prepare_enable/clk_disable_unprepare (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Permit deferred card registration (Jaroslav Kysela) [RHEL-112755]
  - ASoC: core: Complete support for card rebinding (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd938x: add mux control support for hp audio mux (Jaroslav Kysela) [RHEL-112755]
  - ASoC: dt-bindings: wcd93xx: add bindings for audio mux controlling hp (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codecs: wcd-mbhc: cleanup swap_gnd_mic api (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: separate set_tdm_slot() for tx and rx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: separate 'is_dsp_mode' for tx and rx (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: add xlate_tdm_slot_mask() callback (Jaroslav Kysela) [RHEL-112755]
  - ASoC: fsl_sai: allow to set mclk rate with zero clk_id (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: wcd938x: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - ASoC: codec: wcd939x: Convert to GPIO descriptors (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: Document Tegra114 HDA support (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: display: tegra: Document Tegra124 MIPI (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Support multi-channel PEAKVOL instantiation (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Honor the invert flag for mixer controls (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add support for mute for PEAKVOL and GAIN (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Move to the new control operations (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Update VOLUME and add MUTE IPCs (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: New volume control operations (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Make PEAKVOL configurable from topology (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add WHM module support (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Remove unused gateway configuration code (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: New gateway configuration mechanism (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Move DSP-boot steps into individual functions (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: pcm3168a board selection (Jaroslav Kysela) [RHEL-112755]
  - ASoC: Intel: avs: Add pcm3168a machine board (Jaroslav Kysela) [RHEL-112755]
  - ASoC: soc.h: Don't use "proxy" headers (Jaroslav Kysela) [RHEL-112755]
  - dt-bindings: sound: tegra: Add minItems for resets (Jaroslav Kysela) [RHEL-112755]
  - iavf: iavf_suspend(): take RTNL before netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: mediatek: Fix potential NULL pointer dereference in dummy net_device handling (Mohammad Heib) [RHEL-87382]
  - iavf: fix circular lock dependency with netdev_lock (Mohammad Heib) [RHEL-87382]
  - iavf: Fix a locking bug in an error path (Mohammad Heib) [RHEL-87382]
  - wifi: mt76: move napi_enable() from under BH (Mohammad Heib) [RHEL-87382]
  - eth: via-rhine: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: niu: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: 8139too: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: forcedeth: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - eth: forcedeth: remove local wrappers for napi enable/disable (Mohammad Heib) [RHEL-87382]
  - eth: tg3: fix calling napi_enable() in atomic context (Mohammad Heib) [RHEL-87382]
  - net: mvneta: fix locking in mvneta_cpu_online() (Mohammad Heib) [RHEL-87382]
  - net: introduce netdev_napi_exit() (Mohammad Heib) [RHEL-87382]
  - net: destroy dev->lock later in free_netdev() (Mohammad Heib) [RHEL-87382]
  - netdev-genl: remove rtnl_lock protection from NAPI ops (Mohammad Heib) [RHEL-87382]
  - net: protect NAPI config fields with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect napi->irq with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect threaded status of NAPI with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: make netdev netlink ops hold netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect NAPI enablement with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: protect netdev->napi_list with netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: add netdev->up protected by netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: add helpers for lookup and walking netdevs under netdev_lock() (Mohammad Heib) [RHEL-87382]
  - net: make netdev_lock() protect netdev->reg_state (Mohammad Heib) [RHEL-87382]
  - net: add netdev_lock() / netdev_unlock() helpers (Mohammad Heib) [RHEL-87382]
  - eth: iavf: extend the netdev_lock usage (Mohammad Heib) [RHEL-87382]
  - net: cleanup init_dummy_netdev_core() (Mohammad Heib) [RHEL-87382]
  - net: remove init_dummy_netdev() (Mohammad Heib) [RHEL-87382]
  - selftests: drv-net: test empty queue and NAPI responses in netlink (Mohammad Heib) [RHEL-87382]
  - netdev-genl: avoid empty messages in napi get (Mohammad Heib) [RHEL-87382]
  - netdev-genl: avoid empty messages in queue dump (Mohammad Heib) [RHEL-87382]
  - IB/hfi1: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - wifi: qtnfmac: Use netdev dummy allocator helper (Mohammad Heib) [RHEL-87382]
  - wifi: qtnfmac: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - net: ibm/emac: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - net: ipa: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - net: mediatek: mtk_eth_sock: allocate dummy net_device dynamically (Mohammad Heib) [RHEL-87382]
  - drm: Use page->pgmap instead of page_pgmap() (José Expósito) [RHEL-110619]
  - drm/vkms: Fix KUnit tests (José Expósito) [RHEL-110619]
  - drm/amdgpu/mes: Remove unused function (José Expósito) [RHEL-110619]
  - drm: Use previous includes (José Expósito) [RHEL-110619]
  - Revert "drm/i915: Convert REG_GENMASK*() to fixed-width GENMASK_U*()" (José Expósito) [RHEL-110619]
  - Revert "drm/i915: Avoid open-coded use of ratelimit_state structure's ->missed field" (José Expósito) [RHEL-110619]
  - Revert "drm/amd/pm: Avoid open-coded use of ratelimit_state structure's internals" (José Expósito) [RHEL-110619]
  - Revert "i915: Use writeback_iter()" (José Expósito) [RHEL-110619]
  - Revert "ttm: Call shmem_writeout() from ttm_backup_backup_page()" (José Expósito) [RHEL-110619]
  - Revert "treewide, timers: Rename destroy_timer_on_stack() as timer_destroy_on_stack()" (José Expósito) [RHEL-110619]
  - Revert "treewide, timers: Rename from_timer() to timer_container_of()" (José Expósito) [RHEL-110619]
  - Revert "bpf: Add dmabuf iterator" (José Expósito) [RHEL-110619]
  - redhat: Add new DRM modules to mod-internal.list (José Expósito) [RHEL-110619]
  - redhat/configs: Add new configs from DRM 6.16 backport (José Expósito) [RHEL-110619]
  - Merge DRM changes from upstream v6.15..v6.16 (José Expósito) [RHEL-110619]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-635.el9]
changelog:
  - dm: fix NULL pointer dereference in __dm_suspend() (Benjamin Marzinski) [RHEL-119009]
  - dm: fix queue start/stop imbalance under suspend/load/resume races (Benjamin Marzinski) [RHEL-119009]
  - dm-raid: don't set io_min and io_opt for raid1 (Benjamin Marzinski) [RHEL-119009]
  - dm-integrity: limit MAX_TAG_SIZE to 255 (Benjamin Marzinski) [RHEL-119009]
  - dm-stripe: fix a possible integer overflow (Benjamin Marzinski) [RHEL-119009]
  - dm-stripe: limit chunk_sectors to the stripe size (Benjamin Marzinski) [RHEL-119009]
  - dm: set DM_TARGET_PASSES_CRYPTO feature for dm-thin (Benjamin Marzinski) [RHEL-119009]
  - dm-thin: update the documentation (Benjamin Marzinski) [RHEL-119009]
  - dm-raid: do not include dm-core.h (Benjamin Marzinski) [RHEL-119009]
  - md: dm-zoned-target: Initialize return variable r to avoid uninitialized use (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: remove support for asynchronous hashes (Benjamin Marzinski) [RHEL-119009]
  - dm-mpath: don't print the "loaded" message if registering fails (Benjamin Marzinski) [RHEL-119009]
  - dm-mpath: make dm_unregister_path_selector return void (Benjamin Marzinski) [RHEL-119009]
  - dm: ima: avoid extra calls to strlen() (Benjamin Marzinski) [RHEL-119009]
  - dm: Simplify dm_io_complete() (Benjamin Marzinski) [RHEL-119009]
  - dm: Remove unnecessary return in dm_zone_endio() (Benjamin Marzinski) [RHEL-119009]
  - dm raid: add support for resync w/o metadata devices (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: Fix corrupt_bio_byte setup checks (Benjamin Marzinski) [RHEL-119009]
  - dm-table: fix checking for rq stackable devices (Benjamin Marzinski) [RHEL-119009]
  - dm-bufio: fix sched in atomic context (Benjamin Marzinski) [RHEL-119009]
  - dm-raid: fix variable in journal device check (Benjamin Marzinski) [RHEL-119009]
  - dm-stripe: small code cleanup (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: fix a memory leak if some arguments are specified multiple times (Benjamin Marzinski) [RHEL-119009]
  - dm-mirror: fix a tiny race condition (Benjamin Marzinski) [RHEL-119009]
  - dm-table: check BLK_FEAT_ATOMIC_WRITES inside limits_lock (Benjamin Marzinski) [RHEL-119009]
  - dm-zone: Use bdev_*() helper functions where applicable (Benjamin Marzinski) [RHEL-119009]
  - dm-table: Set BLK_FEAT_ATOMIC_WRITES for target queue limits (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: make corrupting read bios work (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: remove useless ERROR_READS check in flakey_end_io (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: error all IOs when num_features is absent (Benjamin Marzinski) [RHEL-119009]
  - dm-flakey: Clean up parsing messages (Benjamin Marzinski) [RHEL-119009]
  - dm: remove unneeded kvfree from alloc_targets (Benjamin Marzinski) [RHEL-119009]
  - dm-bufio: remove maximum age based eviction (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: use softirq context only when !need_resched() (Benjamin Marzinski) [RHEL-119009]
  - dm: lock limits when reading them (Benjamin Marzinski) [RHEL-119009]
  - dm: use generic functions instead of disable_discard and disable_write_zeroes (Benjamin Marzinski) [RHEL-119009]
  - dm-delay: don't busy-wait in kthread (Benjamin Marzinski) [RHEL-119009]
  - dm: fix native zone append devices on top of emulated ones (Benjamin Marzinski) [RHEL-119009]
  - dm: limit swapping tables for devices with zone write plugs (Benjamin Marzinski) [RHEL-119009]
  - dm: fix dm_blk_report_zones (Benjamin Marzinski) [RHEL-119009]
  - dm: handle failures in dm_table_set_restrictions (Benjamin Marzinski) [RHEL-119009]
  - dm: free table mempools if not used in __bind (Benjamin Marzinski) [RHEL-119009]
  - dm: don't change md if dm_table_set_restrictions() fails (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: support block number limits for different ioprio classes (Benjamin Marzinski) [RHEL-119009]
  - dm-delay: support zoned devices (Benjamin Marzinski) [RHEL-119009]
  - dm: restrict dm device size to 2^63-512 bytes (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: do forward error correction on metadata I/O errors (Benjamin Marzinski) [RHEL-119009]
  - dm-bufio: remove unused return value (Benjamin Marzinski) [RHEL-119009]
  - dm: Enable inline crypto passthrough for striped target (Benjamin Marzinski) [RHEL-119009]
  - dm-integrity: Document Inline mode for storing integrity data (Benjamin Marzinski) [RHEL-119009]
  - dm-verity: Document restart_on_error and panic_on_error options (Benjamin Marzinski) [RHEL-119009]
  - dm-crypt: switch to using the crc32 library (Benjamin Marzinski) [RHEL-119009]
  - thermal: Constify struct thermal_zone_device_ops (David Arcari) [RHEL-85463]
  - thermal: int340x: processor_thermal: Add Wildcat Lake PCI ID (David Arcari) [RHEL-85463]
  - ACPI: DPTF: Support for Wildcat Lake (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Allow temperature override (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Add throttling control interface to PTC (David Arcari) [RHEL-85463]
  - thermal: int340x: processor_thermal: Platform temperature control documentation (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Enable platform temperature control (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Add platform temperature control interface (David Arcari) [RHEL-85463]
  - x86/msr: Add explicit includes of <asm/msr.h> [partial] (David Arcari) [RHEL-85463]
  - thermal: intel: int340x: Add missing DVFS support flags (David Arcari) [RHEL-85463]
  - thermal: intel: Clean up zone_trips[] initialization in int340x_thermal_zone_add() (David Arcari) [RHEL-85463]
  - thermal: int340x: Use kcalloc() instead of kzalloc() with multiplication (David Arcari) [RHEL-85463]
  - thermal: int340x: Add NULL check for adev (David Arcari) [RHEL-85463]
  - selftests: tls: test skb copy under mem pressure and OOB (Sabrina Dubroca) [RHEL-115640]
  - tls: make sure to abort the stream if headers are bogus (Sabrina Dubroca) [RHEL-115640]
  - selftests: tls: make the new data_steal test less flaky (Sabrina Dubroca) [RHEL-115640]
  - selftests: tls: test TCP stealing data from under the TLS socket (Sabrina Dubroca) [RHEL-115640]
  - tls: handle data disappearing from under the TLS ULP (Sabrina Dubroca) [RHEL-115640]
  - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls (Sabrina Dubroca) [RHEL-115640]
  - net/tls: fix kernel panic when alloc_page failed (Sabrina Dubroca) [RHEL-115640]
  - bpf: fix ktls panic with sockmap (Sabrina Dubroca) [RHEL-115640]
  - selftests: tls: check that disconnect does nothing (Sabrina Dubroca) [RHEL-115640]
  - net: tls: explicitly disallow disconnect (Sabrina Dubroca) [RHEL-115640]
  - Revert "drm/vkms: convert to use faux_device" (José Expósito) [RHEL-113577]
  - Revert "drm/xe/pf: Set VF LMEM BAR size" (José Expósito) [RHEL-113577]
  - Revert "drm/xe/nvm: add on-die non-volatile memory device" (José Expósito) [RHEL-113577]
  - Revert "Mark xe driver as BROKEN if kernel page size is not 4kB" (José Expósito) [RHEL-113577]
  - Revert "drm/tegra: gem: Don't attach dma-bufs when not needed" (José Expósito) [RHEL-113577]
  - Revert "PM: domains: Add flags to specify power on attach/detach" (José Expósito) [RHEL-113577]
  - Revert "relayfs: abolish prev_padding" (José Expósito) [RHEL-113577]
  - drm/sched: Add missing argument to __assign_str() (José Expósito) [RHEL-113577]
  - Revert "mm: rename call_mmap/mmap_prepare to vfs_mmap/mmap_prepare" (José Expósito) [RHEL-113577]
  - drm/sysfb: Add efidrm for EFI displays (José Expósito) [RHEL-113577]
  - redhat: Add new DRM modules to mod-internal.list (José Expósito) [RHEL-113577]
  - redhat/configs: Add new configs from DRM 6.17 backport (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.17-rc7..v6.17 (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.17-rc6..v6.17-rc7 (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.17-rc5..v6.17-rc6 (José Expósito) [RHEL-113577]
  - Merge DRM changes from upstream v6.16..v6.17-rc5 (José Expósito) [RHEL-113577]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-636.el9]
changelog:
  - powerpc/pseries: Define __u{8,32} types in papr_hvpipe_hdr struct (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: HVPIPE changes to support migration (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Enable hvpipe with ibm,set-system-parameter RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Enable HVPIPE event message interrupt (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Wakeup hvpipe FD when the payload is pending (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Receive payload with ibm,receive-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Send payload with ibm,send-hvpipe-msg RTAS (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Add papr-hvpipe char driver for HVPIPE interfaces (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Define HVPIPE specific macros (Mamatha Inamdar) [RHEL-101849]
  - powerpc/pseries: Define papr-hvpipe ioctl (Mamatha Inamdar) [RHEL-101849]
  - Documentation: ioctl-number: Fix linuxppc-dev mailto link (Mamatha Inamdar) [RHEL-101849]
  - tracing/osnoise: Replace kmalloc + copy_from_user with memdup_user_nul (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix slab-out-of-bounds in _parse_integer_limit() (Tomas Glozar) [RHEL-117873] {CVE-2025-39974}
  - tracing/osnoise: Use for_each_online_cpu() instead of for_each_cpu() (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix null-ptr-deref in bitmap_parselist() (Tomas Glozar) [RHEL-117873] {CVE-2025-39887}
  - tracing/osnoise: Fix crash in timerlat_dump_stack() (Tomas Glozar) [RHEL-117873] {CVE-2025-38493}
  - tracing/osnoise: Fix possible recursive locking for cpus_read_lock() (Tomas Glozar) [RHEL-117873]
  - osnoise: provide quiescent states (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Switch to use hrtimer_setup() (Tomas Glozar) [RHEL-117873]
  - tracing/osnoise: Fix resetting of tracepoints (Tomas Glozar) [RHEL-117873] {CVE-2025-21733}
  - tracing: Switch trace_osnoise.c code over to use guard() and __free() (Tomas Glozar) [RHEL-117873]
  - rtla: Check pkg-config install (Tomas Glozar) [RHEL-117873]
  - rtla: Define __NR_sched_setattr for LoongArch (Tomas Glozar) [RHEL-117873]
  - rtla: Add the ability to create ctags and etags (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Add include common_appendix.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Include BPF sample collection (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix typo in common_timerlat_description.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix typo in rtla-timerlat.rst (Tomas Glozar) [RHEL-117873]
  - Documentation/rtla: Fix duplicate text about timerlat tracer (Tomas Glozar) [RHEL-117873]
  - rtla: Documentation: Fix -t, --trace (Tomas Glozar) [RHEL-117873]
  - rtla: fix a example in rtla-timerlat-hist.rst (Tomas Glozar) [RHEL-117873]
  - net/smc: Remove validation of reserved bits in CLC Decline message (Mete Durlu) [RHEL-124197]
  - i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123809]
  - i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123809] {CVE-2025-39968}
  - i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123809] {CVE-2025-39969}
  - i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123809] {CVE-2025-39970}
  - i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123809] {CVE-2025-39971}
  - i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123809] {CVE-2025-39972}
  - i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123809] {CVE-2025-39973}
  - io_uring: enable per-io write streams (Ming Lei) [RHEL-122870]
  - nvmet-fcloop: call done callback even when remote port is gone (Maurizio Lombardi) [RHEL-114502]
  - nvmet-tcp: fix callback lock for TLS handshake (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix misaccounting of nvme-mpath inflight I/O (Maurizio Lombardi) [RHEL-114502]
  - nvme: revert the cross-controller atomic write size validation (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix atomic write size validation (Maurizio Lombardi) [RHEL-114502]
  - nvme: refactor the atomic write unit detection (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix endianness of command word prints in nvme_log_err_passthru() (Maurizio Lombardi) [RHEL-114502]
  - nvme: Fix incorrect cdw15 value in passthru error logging (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list() (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: refresh visible attrs after being checked (Maurizio Lombardi) [RHEL-114502]
  - nvmet: fix memory leak of bio integrity (Maurizio Lombardi) [RHEL-114502]
  - nvme: spelling fixes (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: fix I/O stalls on congested sockets (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: sanitize request list handling (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: remove tag set when second admin queue config fails (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix command limits status code (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: store aborted state in flags variable (Maurizio Lombardi) [RHEL-114502]
  - nvme-fc: do not reference lsrsp after failure (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: don't wait for lport cleanup (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: add missing fcloop_callback_host_done (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fc: take tgtport refs for portentry (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fc: free pending reqs on tgtport unregister (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: drop response if targetport is gone (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: allocate/free fcloop_lsreq directly (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: prevent double port deletion (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: access fcpreq only when holding reqlock (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: update refs on tfcp_req (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: refactor fcloop_delete_local_port (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: refactor fcloop_nport_alloc and track lport (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: remove nport from list on last user (Maurizio Lombardi) [RHEL-114502]
  - nvmet-fcloop: track ref counts for nports (Maurizio Lombardi) [RHEL-114502]
  - nvmet-auth: use SHASH_DESC_ON_STACK (Maurizio Lombardi) [RHEL-114502]
  - nvme-auth: use SHASH_DESC_ON_STACK (Maurizio Lombardi) [RHEL-114502]
  - nvmet: simplify the nvmet_req_init() interface (Maurizio Lombardi) [RHEL-114502]
  - nvmet: support completion queue sharing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: fabrics: add CQ init and destroy (Maurizio Lombardi) [RHEL-114502]
  - nvmet: cq: prepare for completion queue sharing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: add a helper function for cqid checking (Maurizio Lombardi) [RHEL-114502]
  - nvmet-auth: authenticate on admin queue only (Maurizio Lombardi) [RHEL-114502]
  - nvme-auth: do not re-authenticate queues with no prior authentication (Maurizio Lombardi) [RHEL-114502]
  - nvmet-tcp: switch to using the crc32c library (Maurizio Lombardi) [RHEL-114502]
  - nvmet: replace strncpy with strscpy (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: open-code nvme_tcp_queue_request() for R2T (Maurizio Lombardi) [RHEL-114502]
  - nvme-tcp: remove redundant check to ctrl->opts (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix incorrect sizeof (Maurizio Lombardi) [RHEL-114502]
  - nvme: fix write_stream_granularity initialization (Maurizio Lombardi) [RHEL-114502]
  - nvme: use fdp streams if write stream is provided (Maurizio Lombardi) [RHEL-114502]
  - nvme: register fdp parameters with the block layer (Maurizio Lombardi) [RHEL-114502]
  - nvme: add FDP definitions (Maurizio Lombardi) [RHEL-114502]
  - nvme: pass a void pointer to nvme_get/set_features for the result (Maurizio Lombardi) [RHEL-114502]
  - nvme: add a nvme_get_log_lsi helper (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro (Maurizio Lombardi) [RHEL-114502]
  - nvme: all namespaces in a subsystem must adhere to a common atomic write size (Maurizio Lombardi) [RHEL-114502]
  - nvme: multipath: enable BLK_FEAT_ATOMIC_WRITES for multipathing (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: remove NVMET_PCI_EPF_Q_IS_SQ (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: improve debug message (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: cleanup nvmet_pci_epf_raise_irq() (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: do not fall back to using INTX if not supported (Maurizio Lombardi) [RHEL-114502]
  - nvmet: pci-epf: clear completion queue IRQ flag on delete (Maurizio Lombardi) [RHEL-114502]
  - nvme-pci: add quirks for device 126f:1001 (Maurizio Lombardi) [RHEL-114502]
  - crypto: octeontx2 - Call strscpy() with correct size argument (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - get engine group number for asymmetric engine (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Rework how engine group number is obtained (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment on CN10KB and CN10KA-B0 (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment on CN10K A0/A1 and OcteonTX2 (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Fix address alignment issue on ucode loading (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - add timeout for load_fvc completion poll (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Use dynamic allocated memory region for lmtst (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Initialize cptlfs device info once (Vladis Dronov) [RHEL-122025]
  - crypto: octeontx2 - Simplify multiple return statements (Vladis Dronov) [RHEL-122025]
  - crypto: lib/Kconfig - hide library options [partial] (Vladis Dronov) [RHEL-122025]
  - RDMA/core: Free pfn_list with appropriate kvfree call (Kamal Heib) [RHEL-110100]
  - IB/core: Annotate umem_mutex acquisition under fs_reclaim for lockdep (Kamal Heib) [RHEL-110100]
  - scsi: RDMA/srp: Don't set a max_segment_size when virt_boundary_mask is set (Kamal Heib) [RHEL-110100]
  - RDMA/core: Rate limit GID cache warning messages (Kamal Heib) [RHEL-110100]
  - RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work (Kamal Heib) [RHEL-110100]
  - IB/cm: Remove dead code and adjust naming (Kamal Heib) [RHEL-110100]
  - RDMA/core: Avoid hmm_dma_map_alloc() for virtual DMA devices (Kamal Heib) [RHEL-110100]
  - RDMA/umem: Separate implicit ODP initialization from explicit ODP (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert UMEM ODP DMA mapping to caching IOVA and page linkage (Kamal Heib) [RHEL-110100]
  - RDMA/umem: Store ODP access mask information in PFN (Kamal Heib) [RHEL-110100]
  - RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Kamal Heib) [RHEL-110100]
  - IB/cm: Drop lockdep assert and WARN when freeing old msg (Kamal Heib) [RHEL-110100]
  - RDMA/core: Move ODP capability definitions to uapi (Kamal Heib) [RHEL-110100]
  - RDMA/rxe: Enable ODP in ATOMIC WRITE operation (Kamal Heib) [RHEL-110100]
  - RDMA/rxe: Enable ODP in RDMA FLUSH operation (Kamal Heib) [RHEL-110100]
  - RDMA/cma: Remove unused rdma_res_to_id (Kamal Heib) [RHEL-110100]
  - IB/cm: use rwlock for MAD agent lock (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - RDMA/uverbs: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - RDMA/core: Convert to use ERR_CAST() (Kamal Heib) [RHEL-110100]
  - mm/hmm: provide generic DMA managing logic (Kamal Heib) [RHEL-110100]
  - mm/hmm: let users to tag specific PFN with DMA mapped bit (Kamal Heib) [RHEL-110100]
  - i2c: tiny-usb: disable zero-length read messages (Desnes Nunes) [RHEL-116016]
  - i2c: Use str_read_write() helper (Desnes Nunes) [RHEL-116016]
  - memstick: core: Zero initialize id_reg in h_memstick_read_dev_id() (Desnes Nunes) [RHEL-116016]
  - usb: hub: Don't try to recover devices lost during warm reset. (Desnes Nunes) [RHEL-116016]
  - USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition (Desnes Nunes) [RHEL-116016]
  - USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI (Desnes Nunes) [RHEL-116016]
  - usb: gadget: configfs: Fix OOB read on empty string write (Desnes Nunes) [RHEL-116016] {CVE-2025-38497}
  - xhci: dbc: Flush queued requests before stopping dbc (Desnes Nunes) [RHEL-116016]
  - xhci: dbctty: disable ECHO flag by default (Desnes Nunes) [RHEL-116016]
  - xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS (Desnes Nunes) [RHEL-116016]
  - usb: xhci: quirk for data loss in ISOC transfers (Desnes Nunes) [RHEL-116016]
  - usb: typec: displayport: Fix potential deadlock (Desnes Nunes) [RHEL-116016] {CVE-2025-38404}
  - usb: typec: altmodes/displayport: do not index invalid pin_assignments (Desnes Nunes) [RHEL-116016] {CVE-2025-38391}
  - usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach (Desnes Nunes) [RHEL-116016]
  - USB: serial: option: add Foxconn T99W640 (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix bit masking in tb_dp_port_set_hops() (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-116016]
  - Revert "usb: xhci: Implement xhci_handshake_check_state() helper" (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Skip xhci_reset in xhci_resume if xhci is being removed (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Fix race condition in TTY wakeup (Desnes Nunes) [RHEL-116016] {CVE-2025-38448}
  - usb: gadget: u_serial: Fix the issue that gs_start_io crashed due to accessing null pointer (Desnes Nunes) [RHEL-116016] {CVE-2024-56670}
  - Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io" (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Add null pointer check in gs_start_io (Desnes Nunes) [RHEL-116016]
  - usb: acpi: fix device link removal (Desnes Nunes) [RHEL-116016]
  - Logitech C-270 even more broken (Desnes Nunes) [RHEL-116016]
  - phy: use per-PHY lockdep keys (Desnes Nunes) [RHEL-116016]
  - phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode (Desnes Nunes) [RHEL-116016] {CVE-2025-38535}
  - phy: tegra: xusb: Disable periodic tracking on Tegra234 (Desnes Nunes) [RHEL-116016]
  - phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: fix build warning for CONFIG_USB_ONBOARD_DEV_USB5744=n (Desnes Nunes) [RHEL-116016]
  - usb: typec: tipd: fix typo in TPS_STATUS_HIGH_VOLAGE_WARNING macro (Desnes Nunes) [RHEL-116016]
  - USB: typec: fix const issue in typec_match() (Desnes Nunes) [RHEL-116016]
  - USB: gadget: udc: fix const issue in gadget_match_driver() (Desnes Nunes) [RHEL-116016]
  - USB: gadget: fix up const issue with struct usb_function_instance (Desnes Nunes) [RHEL-116016]
  - USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB (Desnes Nunes) [RHEL-116016]
  - USB: serial: bus: fix const issue in usb_serial_device_match() (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Fix usb5744 initialization sequence (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: ti,usb8041: Add binding for TI USB8044 hub controller (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Add support for TI TUSB8044 hub (Desnes Nunes) [RHEL-116016]
  - usb: Flush altsetting 0 endpoints before reinitializating them after reset. (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Add Parade PS8833 Type-C retimer variant (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Avoid double unlock of serial_port_lock (Desnes Nunes) [RHEL-116016]
  - usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device (Desnes Nunes) [RHEL-116016]
  - usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: Use configured PD revision for negotiation (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: move tcpm_queue_vdm_unlocked to asynchronous work (Desnes Nunes) [RHEL-116016] {CVE-2025-38268}
  - xhci: Add missing parameter description to xhci_get_endpoint_index() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: fix host not responding after suspend and resume (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rename 'irq_control' to 'imod' (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rename 'irq_pending' to 'iman' (Desnes Nunes) [RHEL-116016]
  - usb: xhci: cleanup IMOD register comments (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rework Event Ring Segment Table Address mask (Desnes Nunes) [RHEL-116016]
  - usb: xhci: rework Event Ring Segment Table Size mask (Desnes Nunes) [RHEL-116016]
  - usb: xhci: remove '0' write to write-1-to-clear register (Desnes Nunes) [RHEL-116016]
  - usb: xhci: guarantee that IMAN register is flushed (Desnes Nunes) [RHEL-116016]
  - usb: xhci: improve Interrupt Management register macros (Desnes Nunes) [RHEL-116016]
  - usb: xhci: set requested IMODI to the closest supported value (Desnes Nunes) [RHEL-116016]
  - usb: xhci: cleanup xhci_mem_init() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: add individual allocation checks in xhci_mem_init() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move initialization of the primary interrupter (Desnes Nunes) [RHEL-116016]
  - usb: xhci: remove error handling from xhci_add_interrupter() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move enabling of USB 3 device notifications (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move doorbell array pointer assignment (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move DCBAA pointer write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: refactor xhci_set_cmd_ring_deq() (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move command ring pointer write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: move device slot enabling register write (Desnes Nunes) [RHEL-116016]
  - usb: xhci: relocate pre-allocation initialization (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Add debugfs support for xHCI port bandwidth (Desnes Nunes) [RHEL-116016]
  - usb: xhci: Don't log transfer ring segment list on errors (Desnes Nunes) [RHEL-116016]
  - phy: tegra: p2u: Broaden architecture dependency (Desnes Nunes) [RHEL-116016]
  - phy: fsl-imx8mq-usb: add i.MX95 tuning support (Desnes Nunes) [RHEL-116016]
  - phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property() (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: imx8mq-usb: add imx95 tuning support (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property (Desnes Nunes) [RHEL-116016]
  - phy: freescale: imx8m-pcie: Simplify with dev_err_probe() (Desnes Nunes) [RHEL-116016]
  - dt-bindings: phy: rockchip: Convert RK3399 Type-C PHY to schema (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: add rk3588 compatible to rockchip,dwc3 (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: rockchip,dwc3: Move RK3399 to its own schema (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Do not double dequeue a configuration request (Desnes Nunes) [RHEL-116016] {CVE-2025-38174}
  - usb-storage: reject probe of device one non-DMA HCDs when using highmem (Desnes Nunes) [RHEL-116016]
  - USB: serial: ti_usb_3410_5052: drop bogus read urb check (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_usb_dev: Add Parade PS5511 hub support (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: realtek,rts5411: Adapt usb-hub.yaml (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Add binding for PS5511 hub controller (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Introduce usb-hub.yaml (Desnes Nunes) [RHEL-116016]
  - misc: rtsx: Remove deadcode (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Implement remote wakeup capability (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (Desnes Nunes) [RHEL-116016]
  - usb: gadget: u_serial: Add null pointer check in gserial_suspend (Desnes Nunes) [RHEL-116016] {CVE-2023-53356}
  - usb: gadget: u_serial: Add null pointer check in gserial_resume (Desnes Nunes) [RHEL-116016] {CVE-2023-53551}
  - dt-bindings: usb: usb-switch: Allow data-lanes property in port (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: generic-ehci: Add VIA/WonderMedia compatible (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Convert Nuvoton EHCI to DT schema (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: npcm7xx: Add npcm845 compatible (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: usb-device: relax compatible pattern to a contains (Desnes Nunes) [RHEL-116016]
  - usb: typec: ucsi: fix Clang -Wsign-conversion warning (Desnes Nunes) [RHEL-116016]
  - USB: host: omap: Do not enable by default during compile testing (Desnes Nunes) [RHEL-116016]
  - usb: typec: mux: fsa4480: add regulator support (Desnes Nunes) [RHEL-116016]
  - HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() (Desnes Nunes) [RHEL-116016] {CVE-2025-38103}
  - Documentation/admin-guide: Document Thunderbolt/USB4 tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Notify userspace about firmware CM tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Notify userspace about software CM tunneling events (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Introduce domain event message handler (Desnes Nunes) [RHEL-116016]
  - usb: typec: Connect Type-C port with associated USB4 port (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Add Thunderbolt/USB4 <-> USB3 match function (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Expose usb4_port_index() to other modules (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-116016]
  - misc: rtsx: Enhance the signal handling processes in SVID/SSID 1028:0CE1 platform (Desnes Nunes) [RHEL-116016]
  - usb: misc: onboard_dev: Add Realtek RTL8188ETV WiFi (0bda:0179) (Desnes Nunes) [RHEL-116016]
  - Added usb_string function to a namespace (Desnes Nunes) [RHEL-116016]
  - USB: core: Correct API usb_(enable|disable)_autosuspend() prototypes (Desnes Nunes) [RHEL-116016]
  - USB: phy: Use str_enable_disable-like helpers (Desnes Nunes) [RHEL-116016]
  - usb: common: usb-conn-gpio: use a unique name for usb connector device (Desnes Nunes) [RHEL-116016]
  - usb: hub: Fail fast in USB3 link power management enable path (Desnes Nunes) [RHEL-116016]
  - usb: hub: reorder USB3 link power management enable requests (Desnes Nunes) [RHEL-116016]
  - usb: hub: Don't disable LPM completely if device initiated LPM fails (Desnes Nunes) [RHEL-116016]
  - usb: hub: verify device is configured in usb_device_may_initiate_lpm() (Desnes Nunes) [RHEL-116016]
  - usb: hub: Block less in USB3 link power management LPM disable path (Desnes Nunes) [RHEL-116016]
  - usb: Add checks for snprintf() calls in usb_alloc_dev() (Desnes Nunes) [RHEL-116016]
  - usb: chipidea: imx: add HSIO Block Control wakeup setting (Desnes Nunes) [RHEL-116016]
  - usb: chipidea: imx: add wakeup interrupt handling (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: usbmisc-imx: add support for i.MX95 platform (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: chipidea: Add i.MX95 compatible string 'fsl,imx95-usb' (Desnes Nunes) [RHEL-116016]
  - usb: cdc-wdm: avoid setting WDM_READ for ZLP-s (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: smsc,usb3503: Correct indentation and style in DTS example (Desnes Nunes) [RHEL-116016]
  - usb: cdns3: Remove the invalid comment (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: Use fwnode_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - device property: Split fwnode_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - device property: Fix a typo in the description of device_get_child_node_count() (Desnes Nunes) [RHEL-116016]
  - usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode (Desnes Nunes) [RHEL-116016]
  - usb: typec: tipd: Fix wakeup source leaks on device unbind (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpci: add regulator support (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow switching to mode accessory to mux properly (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow sink (ufp) to toggle into accessory mode debug (Desnes Nunes) [RHEL-116016]
  - usb: typec: tcpm: allow to use sink in accessory mode (Desnes Nunes) [RHEL-116016]
  - usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set (Desnes Nunes) [RHEL-116016]
  - usb: typec: ucsi: Add the UCSI commands in debugfs (Desnes Nunes) [RHEL-116016]
  - thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci: Notify xHCI sideband on transfer ring free (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-plat: Set XHCI max interrupters if property is present (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-mem: Allow for interrupter clients to choose specific index (Desnes Nunes) [RHEL-116016]
  - usb: host: xhci-mem: Cleanup pending secondary event ring events (Desnes Nunes) [RHEL-116016]
  - redhat/configs: Adding CONFIG_USB_XHCI_SIDEBAND (Desnes Nunes) [RHEL-116016]
  - xhci: sideband: add initial api to register a secondary interrupter entity (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bitfield definition and programming in GRSTCTL (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add hibernation updates for ULPI PHY (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bit definition in GPWRDN register (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add eUSB2 PHY disconnect flow support (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add new parameter eusb2_disc (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: New bit definition in GOTGCTL register (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: Add core new versions definition (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Don't leave BCR asserted (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: gadget: Fix TRB reclaim logic for short transfers and ZLPs (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: Abort suspend on soft disconnect failure (Desnes Nunes) [RHEL-116016]
  - usb: gadget: epautoconf: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: gadget: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: core: config: Use USB API functions rather than constants (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Use bulk clock API and devres (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Fix error handling in probe (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: use modern PM macros (Desnes Nunes) [RHEL-116016]
  - usb: dwc2: also exit clock_gating when stopping udc while suspended (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Transition to flattened model (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Don't rely on drvdata during probe (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Don't touch resets and clocks (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Expose core driver as library (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: qcom,snps-dwc3: Fix bindings for X1E80100 (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: Introduce qcom,snps-dwc3 (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: qcom: Snapshot driver for backwards compatibilty (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: dwc3: Allow connector in USB controller node (Desnes Nunes) [RHEL-116016]
  - dt-bindings: usb: qcom,dwc3: Add SM8750 compatible (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: core: Avoid redundant system suspend/resume callbacks (Desnes Nunes) [RHEL-116016]
  - i2c: Set i2c pinctrl recovery info from it's device pinctrl (Desnes Nunes) [RHEL-116016]
  - pinctrl: Add an API to get the pinctrl pins if initialized (Desnes Nunes) [RHEL-116016]
  - usb: dwc3: Specify maximum number of XHCI interrupters (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add VID/PID for the CANnectivity firmware (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add usb endpoint address detection at driver probe step (Desnes Nunes) [RHEL-116016]
  - can: gs_usb: add VID/PID for Xylanta SAINT3 product family (Desnes Nunes) [RHEL-116016]
  - ext4: fix reserved gdt blocks handling in fsmap (Brian Foster) [RHEL-109218]
  - ext4: fix fsmap end of range reporting with bigalloc (Brian Foster) [RHEL-109218]
  - ext4: fix FS_IOC_GETFSMAP handling (Brian Foster) [RHEL-109218]
  - ext4: replace the traditional ternary conditional operator with with max()/min() (Brian Foster) [RHEL-109218]
  - scsi: scsi_debug: Make read-only arrays static const (Ewan D. Milne) [RHEL-116075]
  - scsi: core: sysfs: Correct sysfs attributes access rights (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately (Ewan D. Milne) [RHEL-116075]
  - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Add comments to describe added 'rport' parameter (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Change to use per-rport devloss_work_q (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Fix kernel doc for scsi_track_queue_full() (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Use scsi_cmd_priv() instead of open-coding it (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_devinfo: Remove redundant 'found' (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Fix VPD page 0xb7 length check (Ewan D. Milne) [RHEL-116075]
  - scsi: core: Remember if a device is an ATA device (Ewan D. Milne) [RHEL-116075]
  - scsi: error: alua: I/O errors for ALUA state transitions (Ewan D. Milne) [RHEL-116075]
  - scsi: core: devinfo: Fix typo in comment (Ewan D. Milne) [RHEL-116075]
  - scsi: sd: Remove the stream_status member from scsi_stream_status_header (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Reduce DEF_ATOMIC_WR_MAX_LENGTH (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_transport_fc: Rename del_timer() in comment (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Add ERASE for tapes (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Use scsi_device->type instead os sdebug_ptype where possible (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Move some tape-specific commands to separate definitions (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Enable different command definitions for different device types (Ewan D. Milne) [RHEL-116075]
  - scsi: scsi_debug: Fix two typos in command definitions (Ewan D. Milne) [RHEL-116075]
  - KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (Jon Maloy) [RHEL-104731] {CVE-2025-38351}
  - cgroup/rstat: avoid disabling irqs for O(num_cpu) (Radostin Stoyanov) [RHEL-94298]


