# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-713.el9]
changelog:
  - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-180190]
  - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-166727]
  - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-166727]
  - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-166727]
  - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-166727]
  - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-166727]
  - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-166727]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-714.el9]
changelog:
  - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181932] {CVE-2026-46244}
  - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179443]
  - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179443]
  - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179443]
  - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179443] {CVE-2026-46054}
  - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178945] {CVE-2026-46243}
  - x86/mce, EDAC/mce_amd: Add new SMCA bank types (David Arcari) [RHEL-100952]
  - x86/mce, EDAC/mce_amd: Update CS bank type naming (David Arcari) [RHEL-100952]
  - x86/mce, EDAC/mce_amd: Reorder SMCA bank type enums (David Arcari) [RHEL-100952]
  - x86/mce/amd: Filter bogus hardware errors on Zen3 clients (David Arcari) [RHEL-100952]
  - tracing: Make trace_define_field_ext() static (Gregory Bell) [RHEL-180602]
  - tracing: Have type enum modifications copy the strings (Gregory Bell) [RHEL-180602]
  - tracing: Fix TASK_COMM_LEN in trace event format file (Gregory Bell) [RHEL-180602]
  - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (Gregory Bell) [RHEL-180602]
  - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177522]
  - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173996] {CVE-2026-43125}
  - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173996] {CVE-2026-43125}
  - i2c: tegra: Add support for Tegra410 (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add logic to support different register offsets (Mark Salter) [RHEL-143332]
  - i2c: tegra: Introduce tegra_i2c_variant to identify DVC and VI (Mark Salter) [RHEL-143332]
  - i2c: tegra: Don't mark devices with pins as IRQ safe (Mark Salter) [RHEL-143332]
  - i2c: tegra: remove unused rst (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add Tegra264 support (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add support for SW mutex register (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add HS mode support (Mark Salter) [RHEL-143332]
  - i2c: tegra: Update Tegra256 timing parameters (Mark Salter) [RHEL-143332]
  - i2c: tegra: Use separate variables for fast and fastplus (Mark Salter) [RHEL-143332]
  - i2c: tegra: Do not configure DMA if not supported (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add Tegra256 support (Mark Salter) [RHEL-143332]
  - i2c: tegra: Remove dma_sync_*() calls (Mark Salter) [RHEL-143332]
  - i2c: tegra: Add missing kernel-doc for dma_dev member (Mark Salter) [RHEL-143332]
  - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-144630]
  - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-144630]
  - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-144630]
  - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-144630]
  - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-144630]
  - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172970] {CVE-2026-31581}
  - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172769] {CVE-2026-43056}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-715.el9]
changelog:
  - Updates for IBMVFC_MAX_REQUESTS_DEFAULT (Mamatha Inamdar) [RHEL-174571]
  - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180008] {CVE-2026-46173}
  - net: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-175788]
  - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170760] {CVE-2026-31532}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-716.el9]
changelog:
  - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-183463]
  - tools/power turbostat: Fix unrecognized option '-P' (Dennis Chen) [RHEL-140922]
  - mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs (David Arcari) [RHEL-117326]
  - crypto: krb5 - filter out async aead implementations at alloc (Ilya Dryomov) [RHEL-182254]
  - crypto: krb5enc - fix async decrypt skipping hash verification (Ilya Dryomov) [RHEL-182254]
  - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (Ilya Dryomov) [RHEL-182254]
  - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (Ilya Dryomov) [RHEL-182254]
  - mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function (Desnes Nunes) [RHEL-147793]
  - xhci: sideband: don't dereference freed ring when removing sideband endpoint (Desnes Nunes) [RHEL-147793] {CVE-2026-23009}
  - phy: freescale: imx8m-pcie: assert phy reset during power on (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: add support for PICAXE AXE027 cable (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: add Telit LE910 MBIM composition (Desnes Nunes) [RHEL-147793]
  - usb: core: add USB_QUIRK_NO_BOS for devices that hang on BOS descriptor (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: Check for USB4 IP_NAME (Desnes Nunes) [RHEL-147793]
  - phy: tegra: xusb: Explicitly configure HS_DISCON_LEVEL to 0x7 (Desnes Nunes) [RHEL-147793]
  - phy: fsl-imx8mq-usb: Clear the PCS_TX_SWING_FULL field before using it (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Update UCSI structure to have message in and message out fields" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Add support for message out data structure" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Enable debugfs for message_out data structure" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Add support for SET_PDOS command" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common" (Desnes Nunes) [RHEL-147793]
  - Revert "usb: typec: ucsi: Get connector status after enable notifications" (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Get connector status after enable notifications (Desnes Nunes) [RHEL-147793]
  - usb: usb-storage: Maintain minimal modifications to the bcdDevice range. (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Fix null pointer dereference in ucsi_sync_control_common (Desnes Nunes) [RHEL-147793]
  - usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: keep susphy enabled during exit to avoid controller faults (Desnes Nunes) [RHEL-147793]
  - usb: gadget: tegra-xudc: Always reinitialize data toggle when clear halt (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: move Telit 0x10c7 composition in the right place (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: add Telit Cinterion FE910C04 new compositions (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: core: Remove redundant comment in core init (Desnes Nunes) [RHEL-147793]
  - usb: phy: Initialize struct usb_phy list_head (Desnes Nunes) [RHEL-147793]
  - USB: serial: option: add Foxconn T99W760 (Desnes Nunes) [RHEL-147793]
  - usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. (Desnes Nunes) [RHEL-147793]
  - USB: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147793]
  - USB: mon: make mon_bin_class a static const structure (Desnes Nunes) [RHEL-147793]
  - USB: gadget: f_hid: Fix memory leak in hidg_bind error path (Desnes Nunes) [RHEL-147793]
  - USB: gadget: f_hid: Add GET_REPORT via userspace IOCTL (Desnes Nunes) [RHEL-147793]
  - usb: gadget: f_hid: fix report descriptor allocation (Desnes Nunes) [RHEL-147793]
  - USB: gadget: f_hid: make hidg_class a static const structure (Desnes Nunes) [RHEL-147793]
  - usb: gadget: f_hid: tidy error handling in hidg_alloc (Desnes Nunes) [RHEL-147793]
  - usb: gadget: f_hid: fix refcount leak on error path (Desnes Nunes) [RHEL-147793] {CVE-2022-50514}
  - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (Desnes Nunes) [RHEL-147793] {CVE-2022-50568}
  - drivers/usb/storage: use min() instead of min_t() (Desnes Nunes) [RHEL-147793]
  - usb: uas: reduce time under spinlock (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: Fix EIC7700 USB reset's issue (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: eic7700: Add EIC7700 USB driver (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: Add ESWIN EIC7700 USB controller (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add support for SET_PDOS command (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Enable debugfs for message_out data structure (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add support for message out data structure (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Update UCSI structure to have message in and message out fields (Desnes Nunes) [RHEL-147793]
  - uapi: cdc.h: cleanly provide for more interfaces and countries (Desnes Nunes) [RHEL-147793]
  - usb: Remove redundant pm_runtime_mark_last_busy() calls (Desnes Nunes) [RHEL-147793]
  - usb: cdns3: gadget: Use-after-free during failed initialization and exit of cdnsp gadget (Desnes Nunes) [RHEL-147793] {CVE-2025-40314}
  - scsi: pm: Drop unneeded call to pm_runtime_mark_last_busy() (Desnes Nunes) [RHEL-147793]
  - redhat/configs: Adding CONFIG_PM_RUNTIME_KUNIT_TEST (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Update kerneldoc return codes (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Make put{,_sync}() return 1 when already suspended (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Add basic kunit tests for API contracts (Desnes Nunes) [RHEL-147793]
  - Documentation: PM: *_autosuspend() functions update last busy time (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_request_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147793]
  - Documentation: PM: runtime: Fix a reference to pm_runtime_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_sync_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Mark last busy stamp in pm_runtime_put_autosuspend() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Document return values of suspend-related API functions (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Add pm_runtime_put_autosuspend() replacement (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Remove unsued extern declaration of pm_runtime_update_max_time_suspended() (Desnes Nunes) [RHEL-147793]
  - PM: runtime: Fix pm_runtime_active() kerneldoc comment (Desnes Nunes) [RHEL-147793]
  - usb: host: ehci-platform: Call reset assert/deassert on suspend/resume (Desnes Nunes) [RHEL-147793]
  - usb: host: Do not check priv->clks[clk] (Desnes Nunes) [RHEL-147793]
  - usb: typec: tipd: mark as orientation aware (Desnes Nunes) [RHEL-147793]
  - usb: uas: add WQ_PERCPU to alloc_workqueue users (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Set orientation_aware if UCSI version is 2.x and above (Desnes Nunes) [RHEL-147793]
  - usb: chaoskey: fix locking for O_NONBLOCK (Desnes Nunes) [RHEL-147793]
  - xhci: Fix NULL pointer dereference when reading portli debugfs files (Desnes Nunes) [RHEL-147793] {CVE-2026-43431}
  - usb: xhci: Add debugfs support for xHCI Port Link Info (PORTLI) register. (Desnes Nunes) [RHEL-147793]
  - usb: xhci: standardize single bit-field macros (Desnes Nunes) [RHEL-147793]
  - usb: xhci: drop xhci-caps.h dependence on xhci-ext-caps.h (Desnes Nunes) [RHEL-147793]
  - usb: xhci: simplify Max Scratchpad buffer macros (Desnes Nunes) [RHEL-147793]
  - usb: xhci: simplify Isochronous Scheduling Threshold handling (Desnes Nunes) [RHEL-147793]
  - usb: xhci: improve xhci-caps.h comments (Desnes Nunes) [RHEL-147793]
  - usb: xhci: limit number of interrupts to 128 (Desnes Nunes) [RHEL-147793]
  - usb: xhci: limit number of ports to 127 (Desnes Nunes) [RHEL-147793]
  - usb: xhci: simplify handling of Structural Parameters 1 values (Desnes Nunes) [RHEL-147793]
  - usb: xhci: use cached HCSPARAMS1 value (Desnes Nunes) [RHEL-147793]
  - usb: xhci: remove unused trace operation and argument (Desnes Nunes) [RHEL-147793]
  - usb: xhci: remove deprecated TODO comment (Desnes Nunes) [RHEL-147793]
  - usb: xhci: replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147793]
  - usb: xhci: Don't unchain link TRBs on quirky HCs (Desnes Nunes) [RHEL-147793]
  - usb: xhci: Assume that endpoints halt as specified (Desnes Nunes) [RHEL-147793]
  - usb: xhci: implement USB Port Register Set struct (Desnes Nunes) [RHEL-147793]
  - usb: xhci: add USB Port Register Set struct (Desnes Nunes) [RHEL-147793]
  - usb: xhci: add helper to read PORTSC register (Desnes Nunes) [RHEL-147793]
  - usb: xhci: add tracing for PORTSC register writes (Desnes Nunes) [RHEL-147793]
  - usb: xhci: rework xhci_decode_portsc() (Desnes Nunes) [RHEL-147793]
  - xhci: simplify and rework trb_in_td() (Desnes Nunes) [RHEL-147793]
  - xhci: Add helper to find trb from its dma address (Desnes Nunes) [RHEL-147793]
  - usb: xhci: limit run_graceperiod for only usb 3.0 devices (Desnes Nunes) [RHEL-147793]
  - phy: fsl-imx8mq-usb: support alternate reference clock (Desnes Nunes) [RHEL-147793]
  - dt-bindings: phy: imx8mq-usb: add alternate reference clock (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: imx8mp: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147793]
  - usb: chipidea: ci_hdrc_imx: Set out of band wakeup for i.MX95 (Desnes Nunes) [RHEL-147793]
  - usb: chipidea: core: detach power domain for ci_hdrc platform device (Desnes Nunes) [RHEL-147793]
  - phy: core: Remove extra space after '=' (Desnes Nunes) [RHEL-147793]
  - phy: add new phy_notify_state() api (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: drop NDI quirk module parameter (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: clean up NDI speed hack (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: enable NDI speed hack consistently (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: rename quirk symbols (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: clean up quirk comments (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: rewrite 8u2232c quirk (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: silence jtag probe (Desnes Nunes) [RHEL-147793]
  - USB: serial: ftdi_sio: match on interface number for jtag (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in xdomain.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in usb4.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tunnel.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tmu.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tb_regs.h (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tb.h (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in tb.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in switch.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in retimer.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in nhi.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in lc.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in icm.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in domain.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in debugfs.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typos in ctl.c (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: Add wake-up support for Tegra234 XUSB host controller (Desnes Nunes) [RHEL-147793]
  - usbnet: fix crash due to missing BQL accounting after resume (Desnes Nunes) [RHEL-147793]
  - usbnet: avoid a possible crash in dql_completed() (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: adhere to style (Desnes Nunes) [RHEL-147793]
  - usbnet: Add support for Byte Queue Limits (BQL) (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: coding style for functions (Desnes Nunes) [RHEL-147793]
  - usbnet: Prevents free active kevent (Desnes Nunes) [RHEL-147793] {CVE-2025-68312}
  - usbnet: Fix memory leak in usbnet_disconnect() (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: restore usb%d name exception for local mac addresses (Desnes Nunes) [RHEL-147793]
  - net: usb: usbnet: fix name regression (Desnes Nunes) [RHEL-147793]
  - usbnet: modern method to get random MAC (Desnes Nunes) [RHEL-147793]
  - drivers/net/usb: Remove all strcpy() uses (Desnes Nunes) [RHEL-147793]
  - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (Desnes Nunes) [RHEL-147793] {CVE-2023-53548}
  - thunderbolt: Replace use of system_wq with system_percpu_wq (Desnes Nunes) [RHEL-147793]
  - Documentation: treewide: Replace marc.info links with lore (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Update deprecated firmware update site in icm.c (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Update NVM firmware upgrade documentation (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add support for orientation (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Add SET_POWER_LEVEL UCSI command to debugfs (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: drop unnecessary initialisations (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: clean up set_termios() (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: add control request helpers (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: clean up device type checks (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: clean up tiocmset() (Desnes Nunes) [RHEL-147793]
  - USB: serial: belkin_sa: clean up tiocmset() (Desnes Nunes) [RHEL-147793]
  - USB: serial: kobil_sct: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147793]
  - USB: serial: belkin_sa: fix TIOCMBIS and TIOCMBIC (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: Allow usb role swich control from userspace (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,dwc3: Correct MSM8994 interrupts (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,dwc3: Correct IPQ5018 interrupts (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add the SM8750 compatible (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add Glymur compatible (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add Kaanapali compatible (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: qcom,snps-dwc3: Add Milos compatible (Desnes Nunes) [RHEL-147793]
  - usb: uhci: Work around bogus clang shift overflow warning from DMA_BIT_MASK(64) (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Fix missing mutex_unlock() (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Add USB4 mode and TBT3 altmode support (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Rework ps883x_set() (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: Cache register settings, not Type-C mode (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix configuration error handling (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix missing accessibility check (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix registration race (Desnes Nunes) [RHEL-147793]
  - usb: typec: ps883x: fix probe error handling (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Report power supply change on sink path change (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Report power supply changes on power opmode changes (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: psy: Add power supply status (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: glue: Allow more fine grained control over mode switches (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: glue: Add documentation (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: dwc3_power_off_all_roothub_ports: Use ioremap_np when required (Desnes Nunes) [RHEL-147793]
  - usb: typec: pd: Register SPR AVS caps with usb_power_delivery class (Desnes Nunes) [RHEL-147793]
  - tcpm: Parse and log AVS APDO (Desnes Nunes) [RHEL-147793]
  - usbip: Use min to simplify stub_send_ret_submit (Desnes Nunes) [RHEL-147793]
  - usb: core: Add tracepoints for device allocation and state changes (Desnes Nunes) [RHEL-147793]
  - usb: core: Centralize device state update logic (Desnes Nunes) [RHEL-147793]
  - thunderbolt: Fix typo in tb_eeprom_ctl_read documentation (Desnes Nunes) [RHEL-147793]
  - usb: vhci-hcd: Replace pr_*() with dev_*() logging (Desnes Nunes) [RHEL-147793]
  - usb: vhci-hcd: Switch to dev_err_probe() in probe path (Desnes Nunes) [RHEL-147793]
  - usb: typec: ucsi: Handle incorrect num_connectors capability (Desnes Nunes) [RHEL-147793] {CVE-2025-71108}
  - USB: Fix descriptor count when handling invalid MBIM extended descriptor (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: dwc3-generic-plat: Add layerscape dwc3 support (Desnes Nunes) [RHEL-147793]
  - usb: dwc3: Add software-managed properties for flattened model (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: add missed compatible string for arm64 layerscape (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: add layerscape super speed usb support (Desnes Nunes) [RHEL-147793]
  - usb: typec: altmodes/displayport: do not enter mode if port is the UFP (Desnes Nunes) [RHEL-147793]
  - usb: typec: class: add typec_get_data_role symbol (Desnes Nunes) [RHEL-147793]
  - usb: chipidea: imx: add USB support for i.MX94 (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: usbmisc-imx: add fsl,imx94-usbmisc compatible (Desnes Nunes) [RHEL-147793]
  - usb: typec: tipd: Fix error handling in cd321x_read_data_status (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: xhci: Add "generic-xhci" compatible for Marvell Armada 37xx/8k (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: xhci: Allow "iommus" and "dr_mode" properties (Desnes Nunes) [RHEL-147793]
  - usb: hub: Use max() to improve usb_set_lpm_pel() (Desnes Nunes) [RHEL-147793]
  - usbip: Fix locking bug in RT-enabled kernels (Desnes Nunes) [RHEL-147793]
  - usb: usbtmc: Remove unnecessary local variable from usbtmc_ioctl_request (Desnes Nunes) [RHEL-147793]
  - usb: ehci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: ehci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147793]
  - usb: uhci: Add Aspeed AST2700 support (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: uhci: Add Aspeed AST2700 compatible (Desnes Nunes) [RHEL-147793]
  - usb: uhci: Add reset control support (Desnes Nunes) [RHEL-147793]
  - dt-bindings: usb: uhci: Add reset property (Desnes Nunes) [RHEL-147793]
  - usb: core: Drop spaces after function names (Desnes Nunes) [RHEL-147793]
  - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180305] {CVE-2026-43260}
  - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179595] {CVE-2026-45984}
  - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179595] {CVE-2026-45984}
  - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179711] {CVE-2026-45852}
  - livepatch: Match old_sympos 0 and 1 in klp_find_func() (Rado Vrbovsky) [RHEL-152191]
  - selftests: livepatch: use canonical ftrace path (Rado Vrbovsky) [RHEL-152191]
  - objtool/x86: Reorder ORC register numbering (Rado Vrbovsky) [RHEL-152187]
  - objtool: Support Clang RAX DRAP sequence (Rado Vrbovsky) [RHEL-152187]
  - objtool: Fix Clang jump table detection (Rado Vrbovsky) [RHEL-152187]
  - objtool: Handle Clang RSP musical chairs (Rado Vrbovsky) [RHEL-152187]
  - objtool: Fix ERROR_INSN() error message (Rado Vrbovsky) [RHEL-152187]
  - kbuild: Leave objtool binary around with 'make clean' (Rado Vrbovsky) [RHEL-152187]
  - kbuild: Add objtool to top-level clean target (Rado Vrbovsky) [RHEL-152187]
  - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175822]
  - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175822]
  - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175819]
  - dpll: add pin operational state (Ivan Vecera) [RHEL-175819]
  - nfsd: fix file change detection in CB_GETATTR (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfsd: don't set the ctime on delegated atime updates" (Olga Kornievskaia) [RHEL-171546]
  - NFS: Fix RCU dereference of cl_xprt in nfs_compare_super_address (Olga Kornievskaia) [RHEL-171546]
  - NFSv4.2: fix CLONE/COPY attrs in presence of delegated attributes (Olga Kornievskaia) [RHEL-171546]
  - pnfs/flexfiles: validate ds_versions_cnt is non-zero (Olga Kornievskaia) [RHEL-171546]
  - xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot (Olga Kornievskaia) [RHEL-171546]
  - xprtrdma: Avoid 250 ms delay on backlog wakeup (Olga Kornievskaia) [RHEL-171546]
  - xprtrdma: Close sendctx get/put race that can block a transport (Olga Kornievskaia) [RHEL-171546]
  - nfs: update inode ctime after removexattr operation (Olga Kornievskaia) [RHEL-171546]
  - nfs: fix utimensat() for atime with delegated timestamps (Olga Kornievskaia) [RHEL-171546]
  - NFS: Fix LTP test failures when timestamps are delegated (Olga Kornievskaia) [RHEL-171546] {CVE-2025-68242}
  - NFSv4.2: fix setattr caching of TIME_[MODIFY|ACCESS]_SET when timestamps are delegated (Olga Kornievskaia) [RHEL-171546]
  - NFS: improve "Server wrote zero bytes" error (Olga Kornievskaia) [RHEL-171546]
  - nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() (Olga Kornievskaia) [RHEL-171546]
  - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31402}
  - sunrpc: fix cache_request leak in cache_release (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31400}
  - NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31403}
  - NFSD: Defer sub-object cleanup in export put callbacks (Olga Kornievskaia) [RHEL-171546] {CVE-2026-31404}
  - NFSD: fix race between nfsd registration and exports_proc (Olga Kornievskaia) [RHEL-171546] {CVE-2025-38232}
  - xprtrdma: Decrement re_receiving on the early exit paths (Olga Kornievskaia) [RHEL-171546] {CVE-2026-43469}
  - nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). (Olga Kornievskaia) [RHEL-171546] {CVE-2026-43394}
  - nfsd: Fix cred ref leak in nfsd_nl_threads_set_doit(). (Olga Kornievskaia) [RHEL-171546] {CVE-2026-23297}
  - SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path (Olga Kornievskaia) [RHEL-171546]
  - fs/nfs: Fix readdir slow-start regression (Olga Kornievskaia) [RHEL-171546]
  - SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths (Olga Kornievskaia) [RHEL-171546]
  - nfsd: fix return error code for nfsd_map_name_to_[ug]id (Olga Kornievskaia) [RHEL-171546]
  - nfsd: never defer requests during idmap lookup (Olga Kornievskaia) [RHEL-171546]
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Olga Kornievskaia) [RHEL-171546]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Olga Kornievskaia) [RHEL-171546] {CVE-2026-23038}
  - pNFS: Fix a deadlock when returning a delegation during open() (Olga Kornievskaia) [RHEL-171546] {CVE-2026-23050}
  - nfsd: provide locking for v4_end_grace (Olga Kornievskaia) [RHEL-171546] {CVE-2026-22980}
  - NFSD: Remove NFSERR_EAGAIN (Olga Kornievskaia) [RHEL-171546]
  - NFS: trace: show TIMEDOUT instead of 0x6e (Olga Kornievskaia) [RHEL-171546]
  - nfsd: Drop the client reference in client_states_open() (Olga Kornievskaia) [RHEL-171546]
  - lockd: fix vfs_test_lock() calls (Olga Kornievskaia) [RHEL-171546]
  - NFSD: NFSv4 file creation neglects setting ACL (Olga Kornievskaia) [RHEL-171546] {CVE-2025-68803}
  - NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-171546]
  - net/handshake: restore destructor on submit failure (Olga Kornievskaia) [RHEL-171546] {CVE-2025-71148}
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Olga Kornievskaia) [RHEL-171546]
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Olga Kornievskaia) [RHEL-171546]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Olga Kornievskaia) [RHEL-171546] {CVE-2025-71120}
  - NFS: Fix up the automount fs_context to use the correct cred (Olga Kornievskaia) [RHEL-171546]
  - NFS: Fix inheritance of the block sizes when automounting (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Olga Kornievskaia) [RHEL-171546]
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Olga Kornievskaia) [RHEL-171546]
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Olga Kornievskaia) [RHEL-171546] {CVE-2025-68764}
  - fs_context: drop the unused lsm_flags member (Olga Kornievskaia) [RHEL-171546]
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Olga Kornievskaia) [RHEL-171546]
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Olga Kornievskaia) [RHEL-171546]
  - nfs/vfs: discard d_exact_alias() (Olga Kornievskaia) [RHEL-171546]
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Olga Kornievskaia) [RHEL-171546]
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Olga Kornievskaia) [RHEL-171546]
  - NFS: Avoid changing nlink when file removes and attribute updates race (Olga Kornievskaia) [RHEL-171546]
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Olga Kornievskaia) [RHEL-171546]
  - ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174333]
  - ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174333]
  - dmaengine: idxd: Add Max SGL Size Support for DSA3.0 (Eder Zulian) [RHEL-154486]
  - dmaengine: idxd: Expose DSA3.0 capabilities through sysfs (Eder Zulian) [RHEL-154486]
  - dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: rz-dmac: Protect the driver specific lists (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() (Eder Zulian) [RHEL-172444]
  - dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() (Eder Zulian) [RHEL-172444]
  - dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix leaking event log memory (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix freeing the allocated ida too late (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix memory leak when a wq is reset (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix not releasing workqueue on .release() (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Wait for submitted operations on .device_synchronize() (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Flush all pending descriptors (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Flush kernel workqueues on Function Level Reset (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix possible invalid memory access after FLR (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Fix crash when the event log is disabled (Eder Zulian) [RHEL-172444]
  - dmaengine: omap-dma: fix dma_pool resource leak in error paths (Eder Zulian) [RHEL-172444]
  - dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: rz-dmac: Fix rz_dmac_terminate_all() (Eder Zulian) [RHEL-172444]
  - dmaengine: tegra-adma: Fix use-after-free (Eder Zulian) [RHEL-172444]
  - dmaengine: ti: k3-udma: fix device leak on udma lookup (Eder Zulian) [RHEL-172444]
  - dmaengine: ti: dma-crossbar: fix device leak on am335x route allocation (Eder Zulian) [RHEL-172444]
  - dmaengine: ti: dma-crossbar: fix device leak on dra7x route allocation (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: rz-dmac: fix device leak on probe failure (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: fix device leaks on compat bind and unbind (Eder Zulian) [RHEL-172444]
  - dmaengine: tegra210-adma: drop unused module alias (Eder Zulian) [RHEL-172444]
  - dmaengine: dw: drop unused module alias (Eder Zulian) [RHEL-172444]
  - dmaengine: bcm2835: drop unused module alias (Eder Zulian) [RHEL-172444]
  - dmaengine: qcom: gpi: Add GPI Block event interrupt support (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: drain ATS translations when disabling WQ (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: Kconfig: Drop ARCH_R7S72100/ARCH_RZG2L dependency (Eder Zulian) [RHEL-172444]
  - dmaengine: rcar-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172444]
  - dmaengine: rcar-dmac: Remove dummy Runtime PM callback (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: usb-dmac: Convert to NOIRQ_SYSTEM_SLEEP/RUNTIME_PM_OPS() (Eder Zulian) [RHEL-172444]
  - dmaengine: dw-edma: Set status for callback_result (Eder Zulian) [RHEL-172444]
  - dmaengine: Fix dma_async_tx_descriptor->tx_submit documentation (Eder Zulian) [RHEL-172444]
  - dmaengine: sh: setup_xref error handling (Eder Zulian) [RHEL-172444]
  - dmaengine: Replace zero-length array with flexible-array (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Replace memset(0) + strscpy() with strscpy_pad() (Eder Zulian) [RHEL-172444]
  - dmaengine: idxd: Allow registers.h to be included from tools/ (Eder Zulian) [RHEL-172444]
  - dmaengine: ioat: Move system_has_dca_enabled() to dma.h (Eder Zulian) [RHEL-172444]
  - ACPICA: Provide #defines for EINJV2 error types (Mark Langsdorf) [RHEL-169029]
  - ACPICA: actbl1: Add EINJv2 get error type action (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix less than zero comparison on a size_t variable (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Clean up on error in einj_probe() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix EINJV2 memory error injection (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix EINJV2 initialization and injection (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: fix potential NULL dereference in __einj_error_inject() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Check if user asked for EINJV2 injection (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix trigger actions (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix check and iounmap of uninitialized pointer p (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: prevent memory corruption in error_type_set() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Update the documentation for EINJv2 support (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Enable EINJv2 error injections (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Create debugfs files to enter device id and syndrome (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Discover EINJv2 parameters (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Add einjv2 extension struct (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Enable the discovery of EINJv2 capabilities (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Remove redundant calls to einj_get_available_error_type() (Mark Langsdorf) [RHEL-169029]
  - ACPI: APEI: EINJ: Fix kernel test sparse warnings (Mark Langsdorf) [RHEL-169029]
  - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-151897]
  - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-151897]
  - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-151897]
  - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-159916]
  - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-151898]
  - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-152411]
  - rtmutex: Use waiter::task instead of current in remove_waiter() (Waiman Long) [RHEL-171802]
  - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170540] {CVE-2026-31508}
  - ACPI: arm64: cpuidle: Tolerate platforms with no deep PSCI idle states (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix related_cpus inconsistency during CPU hotplug (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Clear driver_data pointer on remove (Mark Langsdorf) [RHEL-156421]
  - drm/amdgpu: Fix ISP segfault issue in kernel v7.0 (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Update the format of Arg3 of _DSM (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Update the _CPC definition to match ACPI 6.6 (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSI: Add DMI quirk for Acer Aspire One D255 (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Save NVS memory on Lenovo G70-35 (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Add unused power resource quirk for THUNDEROBOT ZERO (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Tweak acpi_button_remove() (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Tweak system wakeup handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Drop redundant checks from acpi_battery_remove() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix remaining for_each_possible_cpu() to use online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: x86: Force enabling of PWM2 on the Yogabook YB1-X90 (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Call device_init_wakeup() earlier during probe (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Drop redundant check from acpi_battery_notify() (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: fix incorrect charging status when current is zero (Mark Langsdorf) [RHEL-156421]
  - hwmon: (acpi_power_meter) Replace deprecated strcpy() with strscpy() (Mark Langsdorf) [RHEL-156421]
  - hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify() (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Use async schedule function in acpi_scan_clear_dep_fn() (Mark Langsdorf) [RHEL-156421]
  - ACPI: x86: s2idle: Invoke Microsoft _DSM Function 9 (Turn On Display) (Mark Langsdorf) [RHEL-156421]
  - ACPI: sysfs: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Rename EPP constants for clarity (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Rework the handling of acpi_processor_ffh_lpi_probe() (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_dev() to void (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Convert acpi_processor_setup_cpuidle_states() to void (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Factor out and export per-cpu cppc_perf_ctrs_in_pcc_cpu() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Clean up cppc_perf_caps and cppc_perf_ctrls structs (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCI: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: simplify code with acpi_get_local_u64_address() (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Adjust messages regarding postponed ACPI PM (Mark Langsdorf) [RHEL-156421]
  - ACPI: x86: s2idle: Remove dead code in lps0_device_attach() (Mark Langsdorf) [RHEL-156421]
  - x86/acpi: Add acpi=spcr to use SPCR-provided default console (Mark Langsdorf) [RHEL-156421]
  - ACPICA: actbl3.h: ACPI 6.6: SRAT: New flag in Memory Affinity Structure (Mark Langsdorf) [RHEL-156421]
  - ACPICA: ACPI 6.6: Add _VDM (Voltage Domain) object (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Fix asltests using the Fatal() opcode (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Add support for the Microsoft display mux _OSI string (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Fix NULL pointer dereference in acpi_ev_address_space_dispatch() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: ACPICA: replace ACPI_FREE() with acpi_ut_delete_object_desc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Clean up after recent changes (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Adjust event notification routine (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Register platform devices for backlight device objects (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Add debug log for states with invalid entry methods (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Fix previous acpi_processor_errata_piix4() fix (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Fix NULL-pointer dereference in acpi_processor_errata_piix4() (Mark Langsdorf) [RHEL-156421]
  - ACPI: resource: Add JWIPC JVC9100 to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Align acpi_device_get_match_data() with driver match order (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: GHES: Improve ghes_notify_sea() status check (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: GHES: Extract helper functions for error status handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: GHES: Improve ghes_notify_nmi() status check (Mark Langsdorf) [RHEL-156421]
  - APEI/GHES: ensure that won't go past CPER allocated record (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Add module parameter for LPS0 constraints checking (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Add missing checks to acpi_s2idle_begin_lps0() (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Remove unused empty stubs of some functions (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Do not expose global variable acpi_idle_driver (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Redefine two functions as void (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: Update cpuidle driver check in __acpi_processor_start() (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Optimize ACPI idle driver registration (Mark Langsdorf) [RHEL-156421]
  - ACPI: AGDI: Add interrupt signaling mode support (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: EINJ: make read-only array non_mmio_desc static const (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCI: IRQ: Fix INTx GSIs signedness (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Drop outdated comment regarding removed function (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Use resource_type() for resource type checking (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Fix typo under sizeof() in acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Adjust acpi_osc_handshake() parameter list (Mark Langsdorf) [RHEL-156421]
  - ACPI: driver: Drop driver_data pointer clearing from two drivers (Mark Langsdorf) [RHEL-156421]
  - ACPI: sysfs: Add device cid attribute for exposing _CID lists (Mark Langsdorf) [RHEL-156421]
  - ACPI: SBS: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: SMBUS HC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: EC: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: EC: Register a platform device for ECDT EC (Mark Langsdorf) [RHEL-156421]
  - ACPI: HED: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Reduce code duplication related to cleanup (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Adjust event notification routine (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Rework system suspend and resume handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Adjust event notification routine (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Register platform devices for thermal zones (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Do not mark button ACPI devices as wakeup-capable (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Do not bind ACPI drivers to fixed event buttons (Mark Langsdorf) [RHEL-156421]
  - ACPI: tiny-power-button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Adjust event notification routines (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Reduce code duplication related to fixed event devices (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Register platform devices for fixed event buttons (Mark Langsdorf) [RHEL-156421]
  - ACPI: NFIT: core: Convert the driver to a platform one (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rework the handling of \_SB._OSC USB4 features (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Adjust feature mask creation for \_SB._OSC (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rework the handling of \_SB._OSC platform features (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rename label and use ACPI_FREE() in acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Split _OSC error processing out of acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Split _OSC evaluation out of acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Rework printing debug messages on _OSC errors (Mark Langsdorf) [RHEL-156421]
  - ACPI: bus: Fix handling of _OSC errors in acpi_run_osc() (Mark Langsdorf) [RHEL-156421]
  - compiler_types: introduce at_least parameter decoration pseudo keyword (Mark Langsdorf) [RHEL-156421]
  - wifi: iwlwifi: trans: rename at_least variable to min_mode (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Register wakeup sources under physical devices (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCI: PM: Rework root bus notification setup (Mark Langsdorf) [RHEL-156421]
  - ACPI: PNP: Drop acpi_nonpnp_device_ids[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: PNP: Drop PNP0C01 and PNP0C02 from acpi_pnp_device_ids[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: PCC: Fix race condition by removing static qualifier (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix missing PCC check for guaranteed_perf (Mark Langsdorf) [RHEL-156421]
  - x86/acpi/boot: Correct acpi_is_processor_usable() check again (Mark Langsdorf) [RHEL-156421]
  - acpi: platform_profile - Add max-power profile option (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Fix a spelling mistake (Mark Langsdorf) [RHEL-156421]
  - ACPI: LPSS: Fix a spelling mistake (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor_core: fix map_x2apic_id for amd-pstate on am4 (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Avoid walking the Namespace if start_node is NULL (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: use min() instead of min_t() (Mark Langsdorf) [RHEL-156421]
  - ACPI: GTDT: Correctly number platform devices for MMIO timers (Mark Langsdorf) [RHEL-156421]
  - acpi/hmat: Fix lockdep warning for hmem_register_resource() (Mark Langsdorf) [RHEL-156421]
  - acpi/hmat: Return when generic target is updated (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Fix fwnode refcount leak in acpi_fwnode_graph_parse_endpoint() (Mark Langsdorf) [RHEL-156421]
  - ACPI: MRRM: Fix memory leaks and improve error handling (Mark Langsdorf) [RHEL-156421]
  - ACPI: DPTF: Use ACPI_FREE() for ACPI buffer deallocation (Mark Langsdorf) [RHEL-156421]
  - ACPI: DPTF: Remove int340x thermal scan handler (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Drop redundant C-state count checks (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Detect preferred core availability on online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Limit perf ctrs in PCC check only to online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Check _CPC validity for only the online CPUs (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSL: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156421]
  - ACPI: EC: Add WQ_PERCPU to alloc_workqueue() users (Mark Langsdorf) [RHEL-156421]
  - ACPI: OSL: replace use of system_wq with system_percpu_wq (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: replace use of system_unbound_wq with system_dfl_wq (Mark Langsdorf) [RHEL-156421]
  - ACPI: SBS: Fix present test in acpi_battery_read() (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Fix typo in a comment (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Add support for Microsoft fan extensions (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Add hwmon notification support (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Add basic notification support (Mark Langsdorf) [RHEL-156421]
  - ACPI: SPCR: Check for table version when using precise baudrate (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Drop redundant locking (Mark Langsdorf) [RHEL-156421]
  - ACPI: PRM: Add acpi_prm_handler_available() (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Workaround for 64-bit firmware bug (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Use ACPI handle when retrieving _FST (Mark Langsdorf) [RHEL-156421]
  - ACPI: video: Fix use-after-free in acpi_video_switch_brightness() (Mark Langsdorf) [RHEL-156421]
  - ACPI: button: Call input_free_device() on failing input device registration (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Rework acpi_graph_get_next_endpoint() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Make acpi_get_next_subnode() static (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Relocate state flags initialization (Mark Langsdorf) [RHEL-156421]
  - acpi,srat: Fix incorrect device handle check for Generic Initiator (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Work around bogus -Wstringop-overread warning since GCC 11 (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Fix argument order in __acpi_node_get_property_reference() (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Only retrieve constraints when needed (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Staticise LPS0 callback functions (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: s2idle: Drop acpi_get_lps0_constraint() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Return present device nodes only on fwnode interface (Mark Langsdorf) [RHEL-156421]
  - cpufreq: Drop unused symbol CPUFREQ_ETERNAL (Mark Langsdorf) [RHEL-156421]
  - ACPI: CPPC: Do not use CPUFREQ_ETERNAL as an error value (Mark Langsdorf) [RHEL-156421]
  - cpufreq: CPPC: Avoid using CPUFREQ_ETERNAL as transition delay (Mark Langsdorf) [RHEL-156421]
  - cpufreq: Make drivers using CPUFREQ_ETERNAL specify transition latency (Mark Langsdorf) [RHEL-156421]
  - cpufreq: Honour transition_latency over transition_delay_us (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: Remove redundant rcu_read_lock/unlock() under spinlock (Mark Langsdorf) [RHEL-156421]
  - ACPI: battery: Add synchronization between interface updates (Mark Langsdorf) [RHEL-156421]
  - ACPI: Add support for nargs_prop in acpi_fwnode_get_reference_args() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Refactor acpi_fwnode_get_reference_args() to support nargs_prop (Mark Langsdorf) [RHEL-156421]
  - ACPI: debug: fix signedness issues in read/write helpers (Mark Langsdorf) [RHEL-156421]
  - ACPI: GTDT: Generate platform devices for MMIO timers (Mark Langsdorf) [RHEL-156421]
  - x86/acpi/cstate: Remove open coded check for cpu_feature_enabled() (Mark Langsdorf) [RHEL-156421]
  - ACPI: SPCR: Support Precise Baud Rate field (Mark Langsdorf) [RHEL-156421]
  - ACPICA: SPCR: Update the SPCR table to version 4 (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Adjust failure handling in acpi_nondev_subnode_extract() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Do not pass NULL handles to acpi_attach_data() (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Add code comments explaining what is going on (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Disregard references in data-only subnode lists (Mark Langsdorf) [RHEL-156421]
  - ACPI: property: Fix buffer properties extraction for subnodes (Mark Langsdorf) [RHEL-156421]
  - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: EINJ: Allow more types of addresses except MMIO (Mark Langsdorf) [RHEL-156421]
  - ACPI: APEI: Remove redundant assignments in erst_dbg_{ioctl|write}() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Update dsmethod.c to get rid of unused variable warning (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Fix largest possible resource descriptor index (Mark Langsdorf) [RHEL-156421]
  - ACPICA: dispatcher: Use acpi_ds_clear_operands() in acpi_ds_call_control_method() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: ACPI_TYPE_ANY does not include the package type (Mark Langsdorf) [RHEL-156421]
  - ACPICA: acpidump: fix return values in ap_is_valid_checksum() (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Print error messages for too few or too many arguments (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Modify variable definition position (Mark Langsdorf) [RHEL-156421]
  - ACPICA: Allow to skip Global Lock initialization (Mark Langsdorf) [RHEL-156421]
  - ACPICA: iASL: Fix printing CDAT table header (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: thermal: Release policy references using __free() (Mark Langsdorf) [RHEL-156421]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook Pro N6506CU (Mark Langsdorf) [RHEL-156421]
  - ACPI: scan: Add Intel CVS ACPI HIDs to acpi_ignore_dep_ids[] (Mark Langsdorf) [RHEL-156421]
  - ACPI: fan: Fold two simple functions into their only caller (Mark Langsdorf) [RHEL-156421]
  - ACPI: thermal: Get rid of a dummy local variable (Mark Langsdorf) [RHEL-156421]
  - ACPI: TAD: Add missing sysfs_remove_group() for ACPI_TAD_RT (Mark Langsdorf) [RHEL-156421]
  - ACPI: PRM: Skip handlers with NULL handler_address or NULL VA (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Eliminate static variable flat_state_cnt (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Add module import namespace (Mark Langsdorf) [RHEL-156421]
  - ACPI: Use str_low_high() helper in two places (Mark Langsdorf) [RHEL-156421]
  - ACPI: sysfs: Use ACPI_FREE() for freeing an ACPI object (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Add HP EliteBook 855 G7 WWAN modem power resource quirk (Mark Langsdorf) [RHEL-156421]
  - ACPI: PM: Add power resource init function (Mark Langsdorf) [RHEL-156421]
  - ACPI: processor: idle: Fix memory leak when register cpuidle device failed (Mark Langsdorf) [RHEL-156421]
  - drm/xe: Add missing <linux/sizes.h> include to xe_lrc.h (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/i915: Disable tracing points on PREEMPT_RT" (Anusha Srivatsa) [RHEL-151751]
  - redhat: Add new DRM modules to mod-internal.list (Anusha Srivatsa) [RHEL-151751]
  - redhat/configs: Add new configs from DRM 6.19 backport (Anusha Srivatsa) [RHEL-151751]
  - redhat: Add drm/tests to module filter list (Anusha Srivatsa) [RHEL-151751]
  - drm/tegra: nvjpg: Use .remove_new for void remove callback (Anusha Srivatsa) [RHEL-151751]
  - drm: Revert 4-arg pci_resize_resource() calls from upstream (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/client: Support emergency restore via sysrq for all clients" (Anusha Srivatsa) [RHEL-151751]
  - drm/xe/pm: Partially revert scope-based cleanup helper for runtime PM (Anusha Srivatsa) [RHEL-151751]
  - drm/amd/display: Do not use CC_FLAGS_FPU/CC_FLAGS_NO_FPU in dml2_0 (Anusha Srivatsa) [RHEL-151751]
  - drm/xe/pf: Set VF LMEM BAR size (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/i915: Remove driver side BAR release before resize" (Anusha Srivatsa) [RHEL-151751]
  - drm: Remove partial backport artifacts from mm/zone_device folio_free rename (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe: Limit number of jobs per exec queue" (Anusha Srivatsa) [RHEL-151751]
  - drm: Remove partial backport artifacts from mm/zone_device folio reinit (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/amdgpu: Use pci_rebar_get_max_size()" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe: Remove driver side BAR release before resize" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe/vram: Use PCI rebar helpers in resize_vram_bar()" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/xe/vram: Use pci_rebar_get_max_size()" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/i915/gt: Use pci_rebar_size_supported()" (Anusha Srivatsa) [RHEL-151751]
  - fix missing vmalloc.h includes (Anusha Srivatsa) [RHEL-151751]
  - Revert "accel/ivpu: Enable MCA ECC signalling based on MSR" (Anusha Srivatsa) [RHEL-151751]
  - drm/dma-buf: Remove partial backport of phys_vec scatter-gather mapping (Anusha Srivatsa) [RHEL-151751]
  - drm/dma-buf: Remove partial backport of FD_ADD() conversion (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/vblank: Add vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/hypervdrm: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/virtgpu: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/vkms: Convert to DRM's vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/qxl: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/cirrus-qemu: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Revert "drm/bochs: Use vblank timer" (Anusha Srivatsa) [RHEL-151751]
  - Merge DRM changes from upstream v6.18..v6.19 (Anusha Srivatsa) [RHEL-151751]
  - rxrpc: Fix recvmsg() unconditional requeue (Marc Dionne) [RHEL-147231] {CVE-2026-23066}
  - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-150472] {CVE-2026-23136}
  - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-143898] {CVE-2026-22984}
  - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-143880] {CVE-2026-22990}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-717.el9]
changelog:
  - s390/entry: Scrub r12 register on kernel entry (Jan Polensky) [RHEL-174818]
  - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185118]
  - platform/x86/intel-uncore-freq: Increase minor version (David Arcari) [RHEL-184964]
  - platform/x86/intel-uncore-freq: Handle autonomous UFS status bit (David Arcari) [RHEL-184964]
  - s390: Revert support for DCACHE_WORD_ACCESS (Charles Haithcock) [RHEL-184094]
  - nvme: make nvme_add_ns{_head}_cdev return void (Maurizio Lombardi) [RHEL-154109]
  - nvme: fix crash and memory leak during invalid cdev teardown (Maurizio Lombardi) [RHEL-154109]
  - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179756] {CVE-2026-43414}
  - watchdog: only run driver set_pretimeout op if device supports it (David Arcari) [RHEL-182246]
  - watchdog: Switch to use hrtimer_setup() (David Arcari) [RHEL-182246]
  - redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Convert comma to semicolon (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Report firmware_version (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: No need to stop the timer in probe (David Arcari) [RHEL-182246]
  - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (David Arcari) [RHEL-182246]
  - watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182246]
  - watchdog: wdat_wdt: Add timeout value as a param in ping method (David Arcari) [RHEL-182246]
  - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179986] {CVE-2026-46181}
  - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180105] {CVE-2026-46135}
  - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179997] {CVE-2026-46176}
  - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179312] {CVE-2026-46090}
  - Revert "media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935" (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix bug in error path of uvc_alloc_urb_buffers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add support for P010 pixel format (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add D436 and D555 cameras metadata support (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Change comment to 'Intel RealSense' (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add a stream backpointer in uvc_video_queue (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Allow userspace to increase the meta buffersize (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_queue_to_stream(): Support meta queues (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Enable VB2_DMABUF for metadata stream (Kate Hsuan) [RHEL-162130]
  - media: subdev: Split v4l2_subdev_get_frame_desc_passthrough() into locked and unlocked (Kate Hsuan) [RHEL-162130]
  - media: subdev: Improve v4l2_subdev_get_frame_desc_passthrough() kdoc (Kate Hsuan) [RHEL-162130]
  - media: subdev: Minor v4l2_subdev_get_frame_desc_passthrough() cleanups (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Fix error check in v4l2_subdev_get_frame_desc_passthrough() (Kate Hsuan) [RHEL-162130]
  - media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex (Kate Hsuan) [RHEL-162130] {CVE-2026-31473}
  - media: cx231xx: Fix AGC levels for NTSC-M (Kate Hsuan) [RHEL-162130]
  - media: cx25840: Fix NTSC-J, PAL-N, and SECAM standards (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: add USB ID 2040:8360 for Hauppauge WinTV-HVR-935 (Kate Hsuan) [RHEL-162130]
  - media: pulse8-cec: Handle partial deinit (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: drop redundant device reference (Kate Hsuan) [RHEL-162130]
  - media: remove unnecessary module_init/exit functions (Kate Hsuan) [RHEL-162130]
  - media: subdev: Add v4l2_subdev_get_frame_desc_passthrough helper (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Pass allocation size directly to uvc_alloc_urb_buffer (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix allocation for small frame sizes (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Return queued buffers on start_streaming() failure (Kate Hsuan) [RHEL-162130] {CVE-2026-43290}
  - media: uvcvideo: Create an ID namespace for streaming output terminals (Kate Hsuan) [RHEL-162130]
  - media: v4l: ctrls: add a control for enabling strobe output (Kate Hsuan) [RHEL-162130]
  - media: v4l: ctrls: add a control for flash/strobe duration (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Extend VIDIOC_SUBDEV_S_ROUTING error codes (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Set error v4l2_ctrl_new_fwnode_properties consistently (Kate Hsuan) [RHEL-162130]
  - Revert "media: uvcvideo: Remove nodrop parameter" (Kate Hsuan) [RHEL-162130]
  - media: mc: add debugfs node to keep track of requests (Kate Hsuan) [RHEL-162130]
  - media: mc: add manual request completion (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Document how to format GUIDs (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove nodrop parameter (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: UVC minimum relative pan/tilt/zoom speed fix. (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix support for V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Replace dev_dbg() with uvc_dbg() (Kate Hsuan) [RHEL-162130]
  - media: vb2: drop wait_prepare/finish callbacks (Kate Hsuan) [RHEL-162130]
  - media: vb2: remove vb2_ops_wait_prepare/finish helpers (Kate Hsuan) [RHEL-162130]
  - media: v4l: Add helper to get number of active lanes via a pad (Kate Hsuan) [RHEL-162130]
  - media: videobuf2: forbid remove_bufs when legacy fileio is active (Kate Hsuan) [RHEL-162130] {CVE-2025-40302}
  - media: uvcvideo: Use heuristic to find stream entity (Kate Hsuan) [RHEL-162130]
  - media: cec: Fix debugfs leak on bus_register() failure (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID (Kate Hsuan) [RHEL-162130] {CVE-2025-40016}
  - media: uvcvideo: Support UVC_CROSXU_CONTROL_IQ_PROFILE (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Run uvc_ctrl_init_ctrl for all controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Shorten the transfer size non compliance message (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not re-reference dev->udev (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use intf instead of udev for printks (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Move video_device under video_queue (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop stream->mutex (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Move MSXU_CONTROL_METADATA definition to header (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add missing curly braces (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop unneeded memset() in meta device ioctl handlers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix assignment in if condition (Kate Hsuan) [RHEL-162130]
  - media: mc: Clear minor number before put device (Kate Hsuan) [RHEL-162130] {CVE-2025-40197}
  - media: v4l2-common: Add legacy camera sensor clock helper (Kate Hsuan) [RHEL-162130]
  - media: mc: Clear minor number reservation at unregistration time (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: v4l2-dv-timings: support DRM IFs (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: eUSB2 double isochronous bandwidth support (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l2-controls: Cleanup codec definitions (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Constify media_pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: uapi: Cleanup tab after define in headers (Kate Hsuan) [RHEL-162130]
  - media: uapi: Move colorimetry controls at the end of the file (Kate Hsuan) [RHEL-162130]
  - media: mc: Improve unconnected pads debugging message in link exploration (Kate Hsuan) [RHEL-162130]
  - media: mc: Fix MUST_CONNECT handling for pads with no links (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Drop the workaround from v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Make struct v4l2_subdev_stream_config private (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add a helper for obtaining the clock producer (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Rename second ioctl handlers argument to 'void *priv' (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Push NULL fh argument down to ioctl wrappers (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Stop passing fh pointer to ioctl handlers (Kate Hsuan) [RHEL-162130]
  - media: usb: uvc: Access v4l2_fh from file (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ioctl: Access v4l2_fh from private_data (Kate Hsuan) [RHEL-162130]
  - media: Drop V4L2_FL_USES_V4L2_FH checks (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dev: Make open and release file operations mandatory (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Move v4l2_fh retrieval after V4L2_FL_USES_V4L2_FH check (Kate Hsuan) [RHEL-162130]
  - media: Reset file->private_data to NULL in v4l2_fh_del() (Kate Hsuan) [RHEL-162130]
  - media: Set file->private_data in v4l2_fh_add() (Kate Hsuan) [RHEL-162130]
  - media: Replace file->private_data access with file_to_v4l2_fh() (Kate Hsuan) [RHEL-162130]
  - media: Wrap file->private_data access with a helper function (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add mem2mem helpers for REMOVE_BUFS ioctl (Kate Hsuan) [RHEL-162130]
  - media: usb: uvcvideo: Store v4l2_fh pointer in file->private_data (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce dev->meta_formats (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-162130]
  - media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove stream->is_streaming field (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-162130]
  - media: uapi: videodev2: Fix comment for 12-bit packed Bayer formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-162130]
  - media: cec: core: add rx-no-low-drive setting (Kate Hsuan) [RHEL-162130]
  - media: cec: core: add glitch error injection (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-162130]
  - media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt() (Kate Hsuan) [RHEL-162130] {CVE-2025-39713}
  - media: gspca: Add bounds checking to firmware parser (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-162130] {CVE-2025-38680}
  - media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-162130]
  - media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-162130]
  - media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-162130]
  - media: gspca: Add error handling for stv06xx_read_sensor() (Kate Hsuan) [RHEL-162130]
  - media: videobuf2: check constants during build time (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-162130]
  - media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l: Fix V4L2_TYPE_IS_OUTPUT condition (Kate Hsuan) [RHEL-162130]
  - media: uapi: v4l: Change V4L2_TYPE_IS_CAPTURE condition (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-162130]
  - media: cec: use us_to_ktime() where appropriate (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-162130]
  - media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Remove vidioc_queryctrl (Kate Hsuan) [RHEL-162130]
  - media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: set device_caps for 417 (Kate Hsuan) [RHEL-162130] {CVE-2025-38044}
  - media: cec: core: allow raw msg transmit while configuring (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Drop the uvc_driver structure (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add quirk for Actions UVC05 (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: implement UVC v1.5 ROI (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Introduce uvc_mapping_v4l2_size (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: let v4l2_query_v4l2_ctrl() work with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: support V4L2_CTRL_WHICH_MIN/MAX_VAL (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Factor out query_boundaries from query_ctrl (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: add support for compound controls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Factor out clamping from uvc_ctrl_set (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Support any size for mapping get/set (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: uvc_ioctl_(g|s)_ext_ctrls: handle NoP case (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: refactor uvc_ioctl_g_ext_ctrls (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle uvc menu translation inside uvc_set_le_value (Kate Hsuan) [RHEL-162130]
  - media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value (Kate Hsuan) [RHEL-162130]
  - media: v4l2-ctrls: add support for V4L2_CTRL_WHICH_MIN/MAX_VAL (Kate Hsuan) [RHEL-162130]
  - media: v4l2_ctrl: Add V4L2_CTRL_TYPE_RECT (Kate Hsuan) [RHEL-162130]
  - media: pwc: remove useless header files (Kate Hsuan) [RHEL-162130]
  - media: Switch to use hrtimer_setup() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-162130]
  - media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-162130]
  - media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-162130]
  - media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-162130]
  - media: cx231xx: remove redundant assignment to variable value (Kate Hsuan) [RHEL-162130]
  - media: mc: Rename pad as origin in __media_pipeline_start() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-subdev: Refactor events (Kate Hsuan) [RHEL-162130]
  - media: vb2: fix confusing log message (Kate Hsuan) [RHEL-162130]
  - media: vb2: Fix comment (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: constify the class struct (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: v4l2-dv-timings: check cvt/gtf result (Kate Hsuan) [RHEL-162130]
  - media: video-i2c: drop vb2_ops_wait_prepare/finish (Kate Hsuan) [RHEL-162130]
  - media: videobuf2-core: update vb2_thread if wait_finish/prepare are NULL (Kate Hsuan) [RHEL-162130]
  - v4l2-subdev: Return -EOPNOTSUPP for unsupported pad type in call_get_frame_desc() (Kate Hsuan) [RHEL-162130]
  - media: videodev2: Add flag to unconditionally enumerate pixel formats (Kate Hsuan) [RHEL-162130]
  - media: vb2: use lock if wait_prepare/finish are NULL (Kate Hsuan) [RHEL-162130]
  - media: vb2: vb2_core_queue_init(): sanity check lock and wait_prepare/finish (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: add v4l2_debugfs_if_alloc/free() (Kate Hsuan) [RHEL-162130]
  - media: v4l2-core: add v4l2_debugfs_root() (Kate Hsuan) [RHEL-162130]
  - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175528] {CVE-2026-31474}
  - serial: ce4100: fix build after serial_in/out() changes (Mark Salter) [RHEL-111649]
  - serial: port: Always update ->iotype in __uart_read_properties() (Mark Salter) [RHEL-111649]
  - serial: port: Assign ->iotype correctly when ->iobase is set (Mark Salter) [RHEL-111649]
  - device property: Implement device_is_big_endian() (Mark Salter) [RHEL-111649]
  - serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling (Mark Salter) [RHEL-111649]
  - serial: 8250: Add serial8250_handle_irq_locked() (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Avoid unnecessary LCR writes (Mark Salter) [RHEL-111649]
  - serial: 8250: Protect LCR write in shutdown (Mark Salter) [RHEL-111649]
  - serial: 8250_pci: add support for the AX99100 (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Drop unneeded NULL checks in dw8250_quirks() (Mark Salter) [RHEL-111649]
  - serial: 8250: Fix TX deadlock when using DMA (Mark Salter) [RHEL-111649]
  - serial: 8250: sanitize uart_port::serial_{in,out}() types (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Comment possible corner cases in serial_out() implementation (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Call dw8250_quirks() conditionally (Mark Salter) [RHEL-111649]
  - serial: 8250: use serial_port_in/out() helpers (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Use reset array API to get resets (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Revert "Move definitions to the shared header" (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Hide a cast in dw8250_serial_inq() (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Deduplicate LCR checks (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Replace ACPI device check by a quirk (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Switch to use uart_read_port_properties() (Mark Salter) [RHEL-111649]
  - serial: port: Introduce a common helper to read properties (Mark Salter) [RHEL-111649]
  - serial: core: Add UPIO_UNKNOWN constant for unknown port type (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Emit an error message if getting the baudclk failed (Mark Salter) [RHEL-111649]
  - serial: 8250: Use serial8250_do_set_termios for uartclk updating (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Do not bailout on UCV read returning zero (Mark Salter) [RHEL-111649]
  - serial: 8250_dw: Decouple DLF register check from UCV (Mark Salter) [RHEL-111649]
  - ice: use ice_update_eth_stats() for representor stats (CKI Backport Bot) [RHEL-73628]
  - ice: fix inverted ready check for VF representors (CKI Backport Bot) [RHEL-73628]
  - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (CKI Backport Bot) [RHEL-170799] {CVE-2026-23401}
  - dm-verity-fec: fix corrected block count stat (Benjamin Marzinski) [RHEL-154976]
  - dm-mpath: don't stop probing paths at presuspend (Benjamin Marzinski) [RHEL-138608]
  - dm mpath: make pg_init_delay_msecs settable (Benjamin Marzinski) [RHEL-154976]
  - dm: use bio_clone_blkg_association (Benjamin Marzinski) [RHEL-154976]
  - dm-unstripe: fix mapping bug when there are multiple targets in a table (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: fix recalculation in bitmap mode (Benjamin Marzinski) [RHEL-144459]
  - dm: clear cloned request bio pointer when last clone bio completes (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: fix a typo in the code for write/discard race (Benjamin Marzinski) [RHEL-154976]
  - dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-154976]
  - dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-154976]
  - dm: replace -EEXIST with -EBUSY (Benjamin Marzinski) [RHEL-154976]
  - dm: remove fake timeout to avoid leak request (Benjamin Marzinski) [RHEL-154976]
  - dm pcache: fix segment info indexing (Benjamin Marzinski) [RHEL-154976]
  - dm pcache: fix cache info indexing (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: advance slot index before writing slot (Benjamin Marzinski) [RHEL-154976]
  - dm raid: add documentation for takeover/reshape raid1 -> raid5 table line examples (Benjamin Marzinski) [RHEL-154976]
  - dm: ignore discard return value (Benjamin Marzinski) [RHEL-154976]
  - MAINTAINERS: add Benjamin Marzinski as a device mapper maintainer (Benjamin Marzinski) [RHEL-154976]
  - dm-mpath: Simplify the setup_scsi_dh code (Benjamin Marzinski) [RHEL-154976]
  - dm-bufio: align write boundary on physical block size (Benjamin Marzinski) [RHEL-154976]
  - dm-crypt: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-136803]
  - dm: test for REQ_ATOMIC in dm_accept_partial_bio() (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: remove useless mempool (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: disable recursive forward error correction (Benjamin Marzinski) [RHEL-154976] {CVE-2025-71161}
  - dm-ebs: Mark full buffer dirty even on partial write (Benjamin Marzinski) [RHEL-154976]
  - dm mpath: enable DM_TARGET_ATOMIC_WRITES (Benjamin Marzinski) [RHEL-154976]
  - dm verity fec: Expose corrected block count via status (Benjamin Marzinski) [RHEL-154976]
  - dm: Don't warn if IMA_DISABLE_HTABLE is not enabled (Benjamin Marzinski) [RHEL-154976]
  - dm-verity: remove log message with shash driver name (Benjamin Marzinski) [RHEL-154976]
  - dm: sysfs: use sysfs_emit() in dm-sysfs.c (Benjamin Marzinski) [RHEL-154976]
  - dm: remove useless md->nr_zones variable (Benjamin Marzinski) [RHEL-154976]
  - dm-crypt: use folio_nr_pages() instead of shift operation (Benjamin Marzinski) [RHEL-136803]
  - dm: fix failure when empty flush's bi_sector points beyond the device end (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: zero cache_info before default init (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: reuse meta_addr in pcache_meta_find_latest (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: allow built-in build and rename flush helper (Benjamin Marzinski) [RHEL-154976]
  - dm raid: use proper md_ro_state enumerators (Benjamin Marzinski) [RHEL-154976]
  - dm-integrity: prefer synchronous hash interface (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: enable asynchronous hash interface (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: rename internal_hash (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: add the "offset" argument (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: allocate the recalculate buffer with kmalloc (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: introduce integrity_kmap and integrity_kunmap (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: replace bvec_kmap_local with kmap_local_page (Benjamin Marzinski) [RHEL-136803]
  - dm-integrity: use internal variable for digestsize (Benjamin Marzinski) [RHEL-136803]
  - dm: optimize REQ_PREFLUSH with data when using the linear target (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: use int type to store negative error codes (Benjamin Marzinski) [RHEL-154976]
  - dm: fix "writen"->"written" (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: cleanup: fix coding style report by checkpatch.pl (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: remove ctrl_lock for pcache_cache_segment (Benjamin Marzinski) [RHEL-154976]
  - redhat/configs: Add CONFIG_DM_PCACHE (Benjamin Marzinski) [RHEL-154976]
  - dm-pcache: add persistent cache target in device-mapper (Benjamin Marzinski) [RHEL-154976]
  - dm error: mark as DM_TARGET_PASSES_INTEGRITY (Benjamin Marzinski) [RHEL-154976]
  - docs: device-mapper: fixed spelling mistakes in documentation (Benjamin Marzinski) [RHEL-154976]
  - dm bufio: remove redundant __GFP_NOWARN (Benjamin Marzinski) [RHEL-154976]
  - dm-ima: drop a useless argument (Benjamin Marzinski) [RHEL-154976]
  - dm: use vmalloc_array() to simplify code (Benjamin Marzinski) [RHEL-154976]
  - dm-ima: more strlen() drops (Benjamin Marzinski) [RHEL-154976]
  - cgroup/cpuset: Fix incorrect use of cpuset_update_tasks_cpumask() in update_cpumasks_hier() (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Consistently compute effective_xcpus in update_cpumasks_hier() (Waiman Long) [RHEL-154974]
  - cpuset: Treat cpusets in attaching as populated (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Don't track # of local child partitions (Waiman Long) [RHEL-154974]
  - cpuset: remove is_prs_invalid helper (Waiman Long) [RHEL-154974]
  - cpuset: remove impossible warning in update_parent_effective_cpumask (Waiman Long) [RHEL-154974]
  - cpuset: remove redundant special case for null input in node mask update (Waiman Long) [RHEL-154974]
  - cpuset: fix missing error return in update_cpumask (Waiman Long) [RHEL-154974]
  - cpuset: Use new excpus for nocpu error check when enabling root partition (Waiman Long) [RHEL-154974]
  - cpuset: fix failure to enable isolated partition when containing isolcpus (Waiman Long) [RHEL-154974]
  - cpuset: use partition_cpus_change for setting exclusive cpus (Waiman Long) [RHEL-154974]
  - cpuset: use parse_cpulist for setting cpus.exclusive (Waiman Long) [RHEL-154974]
  - cpuset: introduce partition_cpus_change (Waiman Long) [RHEL-154974]
  - cpuset: refactor cpus_allowed_validate_change (Waiman Long) [RHEL-154974]
  - cpuset: refactor out validate_partition (Waiman Long) [RHEL-154974]
  - cpuset: introduce cpus_excl_conflict and mems_excl_conflict helpers (Waiman Long) [RHEL-154974]
  - cpuset: refactor CPU mask buffer parsing logic (Waiman Long) [RHEL-154974]
  - cpuset: Refactor exclusive CPU mask computation logic (Waiman Long) [RHEL-154974]
  - cpuset: change return type of is_partition_[in]valid to bool (Waiman Long) [RHEL-154974]
  - cpuset: remove unused assignment to trialcs->partition_root_state (Waiman Long) [RHEL-154974]
  - cpuset: move the root cpuset write check earlier (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Remove redundant rcu_read_lock/unlock() in spin_lock (Waiman Long) [RHEL-154974]
  - cpuset: Defer flushing of the cpuset_migrate_mm_wq to task_work (Waiman Long) [RHEL-154974]
  - cpuset: Don't always flush cpuset_migrate_mm_wq in cpuset_write_resmask (Waiman Long) [RHEL-154974]
  - cgroup/cpuset: Prevent NULL pointer access in free_tmpmasks() (Waiman Long) [RHEL-154974]
  - cpuset: add helpers for cpus read and cpuset_mutex locks (Waiman Long) [RHEL-154974]
  - cpuset: separate tmpmasks and cpuset allocation logic (Waiman Long) [RHEL-154974]
  - cpuset: decouple tmpmasks and cpumasks freeing in cgroup (Waiman Long) [RHEL-154974]
  - cpuset: remove redundant CS_ONLINE flag (Waiman Long) [RHEL-154974]
  - cgroup: split cgroup_destroy_wq into 3 workqueues (Waiman Long) [RHEL-154974] {CVE-2025-39953}
  - cgroup: compare css to cgroup::self in helper for distingushing css (Waiman Long) [RHEL-154974]
  - memcg: always call cond_resched() after fn() (Waiman Long) [RHEL-154974]
  - cgroup: fix race between fork and cgroup.kill (Waiman Long) [RHEL-154974]
  - memcg: fix soft lockup in the OOM process (Waiman Long) [RHEL-154974] {CVE-2024-57977}
  - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-142099] {CVE-2025-71116}
  - Disable TPM as hwrng source on aarch64 (Štěpán Horáček) [RHEL-66934]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-718.el9]
changelog:
  - udf: fix partition descriptor append bookkeeping (Ravi Singh) [RHEL-179583] {CVE-2026-45991}
  - KVM: s390: Increase permitted SE header size to 1 MiB (Ramesh Chhetri) [RHEL-185660]
  - ice: fix PTP timestamping broken by SyncE code on E825C (CKI Backport Bot) [RHEL-152500]
  - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170635]
  - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170635]
  - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170635]
  - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170635]
  - tcp: secure_seq: add back ports to TS offset (Paolo Abeni) [RHEL-152683]
  - net/tcp-md5: Fix MAC comparison to be constant-time (Paolo Abeni) [RHEL-152683]
  - tcp: tcp_tx_timestamp() must look at the rtx queue (Paolo Abeni) [RHEL-152683]
  - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-161661]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-719.el9]
changelog:
  - redhat: sign centos kernel and UKIs with 800 certs (Jan Stancek) [RHEL-186905]
  - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182565] {CVE-2026-31739}
  - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182565]
  - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182565]
  - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180692] {CVE-2026-31530}
  - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181904] {CVE-2026-46259}
  - dm-raid: only requeue bios when dm is suspending (Nigel Croxon) [RHEL-179131]
  - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172671] {CVE-2026-43038}
  - iommu/vt-d: Remove LPIG from page group response descriptor (CKI Backport Bot) [RHEL-169025]
  - rtla: Fix parsing of multi-character short options (Tomas Glozar) [RHEL-151361]
  - tracing: Fix potential deadlock in cpu hotplug with osnoise (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Convert links to RST format (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Document SIGINT behavior (Tomas Glozar) [RHEL-151361]
  - rtla: Fix segfault on multiple SIGINTs (Tomas Glozar) [RHEL-151361 RHEL-169238]
  - rtla/utils: Fix loop condition in PID validation (Tomas Glozar) [RHEL-151361]
  - rtla/utils: Fix resource leak in set_comm_sched_attr() (Tomas Glozar) [RHEL-151361]
  - rtla/trace: Fix I/O handling in save_trace_to_file() (Tomas Glozar) [RHEL-151361]
  - rtla/trace: Fix write loop in trace_event_save_hist() (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Simplify RTLA_NO_BPF environment variable check (Tomas Glozar) [RHEL-151361]
  - rtla: Use str_has_prefix() for option prefix check (Tomas Glozar) [RHEL-151361]
  - rtla: Enforce exact match for time unit suffixes (Tomas Glozar) [RHEL-151361]
  - rtla: Use str_has_prefix() for prefix checks (Tomas Glozar) [RHEL-151361]
  - rtla: Add str_has_prefix() helper function (Tomas Glozar) [RHEL-151361]
  - rtla: Handle pthread_create() failure properly (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Add bounds check for softirq vector (Tomas Glozar) [RHEL-151361]
  - rtla: Simplify code by caching string lengths (Tomas Glozar) [RHEL-151361]
  - rtla: Replace magic number with MAX_PATH (Tomas Glozar) [RHEL-151361]
  - rtla: Introduce common_threshold_handler() helper (Tomas Glozar) [RHEL-151361]
  - rtla/actions: Simplify argument parsing (Tomas Glozar) [RHEL-151361]
  - rtla: Use strdup() to simplify code (Tomas Glozar) [RHEL-151361]
  - rtla: Exit on memory allocation failures during initialization (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus from for_each_monitored_cpu (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus members (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unneeded nr_cpus arguments (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate nr_cpus usage across all tools (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Document --stack-format option (Tomas Glozar) [RHEL-151361 RHEL-155232]
  - rtla/timerlat: Add --stack-format option (Tomas Glozar) [RHEL-151361 RHEL-155232]
  - tools/rtla: Add unit tests for utils.c (Tomas Glozar) [RHEL-151361]
  - tools/build: Add feature test for libcheck (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Generate optstring from long options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Add hwnoise to main page (Tomas Glozar) [RHEL-151361]
  - rtla: Fix build without libbpf header (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Include defaults for tracer options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Mention default cgroup state (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Mention default priority (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Correct tracer name for common options (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in rtla-timerlat-top.rst (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_timerlat_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: Fix typo in common_options.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/rtla: rename common_xxx.rst files to common_xxx.txt (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Add osnoise/options documentation (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Escape underscore of NO_ prefix (Tomas Glozar) [RHEL-151361]
  - Documentation/osnoise: Add osnoise/options documentation (Tomas Glozar) [RHEL-151361]
  - rtla: Fix parse_cpu_set() bug introduced by strtoi() (Tomas Glozar) [RHEL-151361]
  - rtla: Make stop_tracing variable volatile (Tomas Glozar) [RHEL-151361]
  - rtla: Add generated output files to gitignore (Tomas Glozar) [RHEL-151361]
  - rtla: Fix NULL pointer dereference in actions_parse (Tomas Glozar) [RHEL-151361]
  - rtla: Remove unused headers (Tomas Glozar) [RHEL-151361]
  - rtla: Remove redundant memset after calloc (Tomas Glozar) [RHEL-151361]
  - rtla: Use standard exit codes for result enum (Tomas Glozar) [RHEL-151361]
  - rtla: Replace atoi() with a robust strtoi() (Tomas Glozar) [RHEL-151361]
  - rtla: Introduce for_each_action() helper (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Deduplicate cgroup path opening code (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -H/--house-keeping option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -P/--priority option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -e/--event option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -d/--duration option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -D/--debug option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -C/--cgroup option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Consolidate -c/--cpus option parsing (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add common_parse_options() (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add common_usage() (Tomas Glozar) [RHEL-151361]
  - rtla: Set stop threshold after all instances are enabled (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unused function declarations (Tomas Glozar) [RHEL-151361]
  - tracing: Fix multiple typos in trace_osnoise.c (Tomas Glozar) [RHEL-151361]
  - rtla/timerlat: Exit top main loop on any non-zero wait_retval (Tomas Glozar) [RHEL-151361 RHEL-155124]
  - rtla/tests: Don't rely on matching ^1ALL (Tomas Glozar) [RHEL-151361]
  - rtla: Fix -a overriding -t argument (Tomas Glozar) [RHEL-151361]
  - rtla: Fix -C/--cgroup interface (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace osnoise_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace osnoise_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace timerlat_hist_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Replace timerlat_top_usage("...") with fatal("...") (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add fatal() and replace error handling pattern (Tomas Glozar) [RHEL-151361]
  - rtla/tests: Fix osnoise test calling timerlat (Tomas Glozar) [RHEL-151361]
  - rtla/tests: Extend action tests to 5s (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Fix --on-threshold always triggering (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Fix unassigned nr_cpus (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Remove unused optional option_index (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add for_each_monitored_cpu() helper (Tomas Glozar) [RHEL-151361]
  - tools/rtla: Add remaining support for osnoise actions (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Add test engine support for unexpected output (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Fix -A option name in test comment (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Consolidate code between osnoise/timerlat and hist/top (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Create common_apply_config() (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Move top/hist params into common struct (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - tools/rtla: Consolidate common parameters into shared structure (Tomas Glozar) [RHEL-116574 RHEL-151361]
  - rtla: Ensure null termination after read operations in utils.c (Tomas Glozar) [RHEL-151361]
  - rtla: Fix parse_cpu_set() return value documentation (Tomas Glozar) [RHEL-151361]
  - tracing: Fix false sharing in hwlat get_sample() (Tomas Glozar) [RHEL-151361]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-720.el9]
changelog:
  - KVM: s390: Add capability that forwards operation exceptions (Christoph Schlameuss) [RHEL-136478]
  - KVM: s390: Add KVM capability for ESA mode guests (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Allow non-zarch guests (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Accommodate ESA prefix pages (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Disable some bits when in ESA mode (Mircea Dragan) [RHEL-136478]
  - KVM: s390: only deliver service interrupt with payload (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: retry SIE when unable to get vsie_page (Mircea Dragan) [RHEL-136478]
  - KVM: s390: vsie: Check alignment of BSCA header (Mircea Dragan) [RHEL-136478]
  - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177395] {CVE-2026-46331}
  - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183964] {CVE-2026-46316}
  - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179859] {CVE-2026-46227}
  - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-164306]
  - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-164306]
  - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167748] {CVE-2026-31411}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-721.el9]
changelog:
  - watchdog: Fix NULL pointer dereference when releasing cdev (David Arcari) [RHEL-189449]
  - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189496] {CVE-2026-43112}
  - arch_topology: Provide a stub topology_core_has_smt() for !CONFIG_GENERIC_ARCH_TOPOLOGY (Mark Salter) [RHEL-143322]
  - perf: arm_pmuv3: Don't use PMCCNTR_EL0 on SMT cores (Mark Salter) [RHEL-143322]
  - perf: arm_pmu: Move PMUv3-specific data (Mark Salter) [RHEL-143322]
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Mark Salter) [RHEL-143322]
  - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-118669]
  - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172647] {CVE-2026-43037}
  - blk-mq: fix stale tag depth for shared sched tags in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - block: use trylock to avoid lockdep circular dependency in sysfs (Ming Lei) [RHEL-165529]
  - block: define alloc_sched_data and free_sched_data methods for kyber (Ming Lei) [RHEL-165529]
  - block: use {alloc|free}_sched data methods (Ming Lei) [RHEL-165529]
  - block: introduce alloc_sched_data and free_sched_data elevator methods (Ming Lei) [RHEL-165529]
  - block: move elevator tags into struct elevator_resources (Ming Lei) [RHEL-165529]
  - block: unify elevator tags and type xarrays into struct elv_change_ctx (Ming Lei) [RHEL-165529]
  - blk-mq: remove blk_mq_tag_update_depth() (Ming Lei) [RHEL-165529]
  - blk-mq: fix potential deadlock while nr_requests grown (Ming Lei) [RHEL-165529]
  - blk-mq-sched: add new parameter nr_requests in blk_mq_alloc_sched_tags() (Ming Lei) [RHEL-165529]
  - blk-mq: split bitmap grow and resize case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: cleanup shared tags case in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: convert to serialize updating nr_requests with update_nr_hwq_lock (Ming Lei) [RHEL-165529]
  - blk-mq: check invalid nr_requests in queue_requests_store() (Ming Lei) [RHEL-165529]
  - blk-mq: remove useless checkings in blk_mq_update_nr_requests() (Ming Lei) [RHEL-165529]
  - blk-mq: remove useless checking in queue_requests_store() (Ming Lei) [RHEL-165529]
  - tick/nohz: Expose housekeeping CPUs in sysfs (Waiman Long) [RHEL-143910]
  - kernel/rcu/tree_stall: add /sys/kernel/rcu_stall_count (Waiman Long) [RHEL-143910]
  - kernel/watchdog: add /sys/kernel/{hard,soft}lockup_count (Waiman Long) [RHEL-143910]
  - watchdog: move softlockup_panic back to early_param (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: avoid large stack frames in watchdog_hardlockup_check() (Waiman Long) [RHEL-143910]
  - nmi_backtrace: allow excluding an arbitrary CPU (Waiman Long) [RHEL-143910]
  - powerpc: move arch_trigger_cpumask_backtrace from nmi.h to irq.h (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: in watchdog_hardlockup_check() use cpumask_copy() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: keep kernel.nmi_watchdog sysctl as 0444 if probe fails (Waiman Long) [RHEL-143910]
  - watchdog/perf: adapt the watchdog_perf interface for async model (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: have the perf hardlockup use __weak functions more cleanly (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: rename some "NMI watchdog" constants/function (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: move perf hardlockup watchdog petting to watchdog.c (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: add a "cpu" param to watchdog_hardlockup_check() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: style changes to watchdog_hardlockup_check() / is_hardlockup() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: move perf hardlockup checking/panic to common watchdog.c (Waiman Long) [RHEL-143910]
  - watchdog/perf: rename watchdog_hld.c to watchdog_perf.c (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: add comments to touch_nmi_watchdog() (Waiman Long) [RHEL-143910]
  - watchdog/hardlockup: change watchdog_nmi_enable() to void (Waiman Long) [RHEL-143910]
  - watchdog: remove WATCHDOG_DEFAULT (Waiman Long) [RHEL-143910]
  - watchdog/perf: more properly prevent false positives with turbo modes (Waiman Long) [RHEL-143910]
  - lib/Kconfig.debug: remove more CONFIG_..._VALUE indirections (Waiman Long) [RHEL-143910]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-722.el9]
changelog:
  - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180044] {CVE-2026-46155}
  - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180044]
  - thermal: intel: int340x: Read DDR data rate for Nova Lake (David Arcari) [RHEL-117278]
  - enable CONFIG_GPIO_NOVALAKE for RHEL (David Arcari) [RHEL-117350]
  - gpio: Add Intel Nova Lake ACPI GPIO events driver (David Arcari) [RHEL-117350]
  - platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (David Arcari) [RHEL-184322]
  - sched: idle: Make skipping governor callbacks more consistent (Mark Langsdorf) [RHEL-176384]
  - cpuidle: menu: Remove single state handling (Mark Langsdorf) [RHEL-176384]
  - cpuidle: haltpoll: Remove single state handling (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Skip governor when only one idle state is available (Mark Langsdorf) [RHEL-176384]
  - cpuidle: governors: menu: Always check timers with tick stopped (Mark Langsdorf) [RHEL-176384]
  - cpuidle: menu: Remove incorrect unlikely() annotation (Mark Langsdorf) [RHEL-176384]
  - cpuidle: big_little: Simplify with of_machine_device_match() (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Warn instead of bailing out if target residency check fails (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Update header inclusion (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Respect the CPU system wakeup QoS limit for cpuidle (Mark Langsdorf) [RHEL-176384]
  - sched: idle: Respect the CPU system wakeup QoS limit for s2idle (Mark Langsdorf) [RHEL-176384]
  - PM: QoS: Introduce a CPU system wakeup QoS limit (Mark Langsdorf) [RHEL-176384]
  - redhat/configs: enable CONFIG_PM_QOS_CPU_SYSTEM_WAKEUP (Mark Langsdorf) [RHEL-176384]
  - cpuidle: psci: Replace deprecated strcpy in psci_idle_init_cpu (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Add sanity check for exit latency and target residency (Mark Langsdorf) [RHEL-176384]
  - cpuidle: Fail cpuidle device registration if there is one already (Mark Langsdorf) [RHEL-176384]
  - cpuidle: sysfs: Use sysfs_emit()/sysfs_emit_at() instead of sprintf()/scnprintf() (Mark Langsdorf) [RHEL-176384]
  - cpuidle: qcom-spm: drop unnecessary initialisations (Mark Langsdorf) [RHEL-176384]
  - cpuidle: qcom-spm: fix device and OF node leaks at probe (Mark Langsdorf) [RHEL-176384]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-176384]
  - arm64: topology: Fix false warning in counters_read_on_cpu() for same-CPU reads (Mark Langsdorf) [RHEL-176382]
  - cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (Mark Langsdorf) [RHEL-176382]
  - cpufreq: conservative: Reset requested_freq on limits change (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: Simplify with scoped for each OF child loop (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ondemand: Simplify idle cputime granularity test (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Add generic helpers for sysfs show/store (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Add ti,am62l3 to blocklist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: scmi: Fix device_node reference leak in scmi_cpu_domain_id() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: scmi: correct SCMI explanation (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Block the driver from probing on more QC platforms (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Update FIE arch_freq_scale in ticks for non-PCC regs (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Factor out cppc_fie_kworker_init() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: add sentinel to qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Add Tegra186 and Tegra194 to cpufreq-dt-platdev blocklist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Fix creating device on OPPv1 platforms (Mark Langsdorf) [RHEL-176382]
  - cpufreq: cpufreq_boost_trigger_state() optimization (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Return -EOPNOTSUPP if no policy supports boost (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Simplify with of_machine_get_match_data() (Mark Langsdorf) [RHEL-176382]
  - of: Add of_machine_get_match() helper (Mark Langsdorf) [RHEL-176382]
  - of: Add wrappers to match root node with OF device ID tables (Mark Langsdorf) [RHEL-176382]
  - of: Add of_machine_compatible_match() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: fix compilation warning for qcom_cpufreq_ipq806x_match_list (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ACPI: Replace udelay() with usleep_range() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra194: add WQ_PERCPU to alloc_workqueue users (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: add compatible fallback for ipq806x for no SMEM (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Don't warn if FIE init fails to read counters (Mark Langsdorf) [RHEL-176382]
  - cpufreq: nforce2: fix reference count leak in nforce2 (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: add OPP support and set bandwidth (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Add JH7110S SOC to the allowlist (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: fix refcount leak (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Replace deprecated strcpy() in cpufreq_unregister_governor() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: preserve freq_table_sorted across suspend/hibernate (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Initialize all cores to max frequencies (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Set target frequency for all cpus in policy (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Replace pointer subtraction with iteration macro (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Add defensive check during driver registration (Mark Langsdorf) [RHEL-176382]
  - cpufreq: ACPI: Use on_each_cpu_mask() in drv_write() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: conservative: Replace sscanf() with kstrtouint() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: core: Rearrange variable declarations involving __free() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Use int type to store negative error codes (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Drop redundant freq_table parameter (Mark Langsdorf) [RHEL-176382]
  - cpufreq: tegra186: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: s5pv210: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: CPPC: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: brcmstb-avs: Use scope-based cleanup helper (Mark Langsdorf) [RHEL-176382]
  - cpufreq: use strlen() for governor name comparison (Mark Langsdorf) [RHEL-176382]
  - cpufreq: simplify setpolicy/target check in driver verification (Mark Langsdorf) [RHEL-176382]
  - cpufreq: dt-platdev: Blacklist ti,am62d2 SoC (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Avoid calling get_governor() for first policy (Mark Langsdorf) [RHEL-176382]
  - cpufreq: qcom-nvmem: Enable cpufreq for ipq5424 (Mark Langsdorf) [RHEL-176382]
  - cpufreq: Remove unused parameter in cppc_perf_from_fbctrs() (Mark Langsdorf) [RHEL-176382]
  - cpufreq: armada-37xx: use max() to calculate target_vm (Mark Langsdorf) [RHEL-176382]
  - bus: mhi: ep: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171418]
  - bus: mhi: host: Use bus callbacks for .probe() and .remove() (Jose Ignacio Tornos Martinez) [RHEL-171418]
  - mhi: host: Add support for loading dual ELF image format (Jose Ignacio Tornos Martinez) [RHEL-171418]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Denys Vlasenko <dvlasenk@redhat.com> - 1.0-15
changelog:
  - find-requires.ksyms: remove /tmp/{find-requires.ksyms,mod_req}.* temporary files
  Resolves: RHEL-87719


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Sergio Correia <scorreia@redhat.com> - 7.12.1-13
changelog:
  - Keylime: Registrar allows identity takeover via duplicate UUID registration
    Resolves: RHEL-130761


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Set supplementary groups when dropping privileges
  - Show more descriptive error messages on missing files errors
  - Create /usr/libexec/keylime directory


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 0.1.0~20220603gitaed51c7-2
changelog:
  - Use classic release instead of autorelease macro
  - Use classic changelog instead of autochangelog macro


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - krad: packet ID fetched from uninitialized variable
    Resolves: RHEL-145355
  - Create sub-package for xrealmauthz KDC plugin
    Resolves: RHEL-67468
  - Improving kerberos ulog resize efficiency
    Resolves: RHEL-145359


author: Julien Rische <jrische@redhat.com> - 1.21.1-10
changelog:
  - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
    Resolves: RHEL-171591 RHEL-171593


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Vincent Mihalkovic <vmihalko@redhat.com> - 3:1.0.6-1
changelog:
  - Rebase to non-beta version, because upstream says it should to be used
    https://github.com/ksh93/ksh/issues/667#issuecomment-1653665697
  - fix acl test case regression
    Resolves: #2034188


author: Mike FABIAN <mfabian@redhat.com> - 0.0.51-1
changelog:
  - Parse stuff in glibc locale names after @ which is not a script as a variant
  - Add ckb_IQ.UTF-8 locale


author: Mike FABIAN <mfabian@redhat.com> - 0.0.52-1
changelog:
  - Update to 0.0.52
  - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com>


author: Mike FABIAN <mfabian@redhat.com> - 0.0.53-1
changelog:
  - Update to 0.0.53
  - Capitalize the return values of language_name() and territory_name()
    (See: https://github.com/rhinstaller/anaconda/pull/2837).
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Mike FABIAN <mfabian@redhat.com> - 0.0.54-1
changelog:
  - Update to 0.0.54
  - add list_common_languages derived from gnome-control-center
    by Sundeep ANAND <suanand@redhat.com>


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Tomas Halman <thalman@redhat.com> - 2.7.0-12
changelog:
  - Fixing CVE-2025-47151
    Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Matej Matuska <mmatuska@redhat.com> - 0.18.0-4
changelog:
  - Bump leapp-framework to 6.0
  - Bump leapp-framework-dependencies to 6
  - Require python3-PyYAML
  - [Technical preview] Introduce configurability for leapp actors
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-1
changelog:
  - Rebase to new upstream version 0.19.0
  - Add possibility to use a specified execution context for snactor run in an existing leapp.db
  - Increase limits on the number of opened file descriptors and maximum size
    of manipulated files when running leapp
  - Resolves: RHEL-57042


author: Petr Stodulka <pstodulk@redhat.com> - 0.19.0-2
changelog:
  - Bump leapp-framework to 6.1
  - Create the /var/lib/leapp directory automatically if missing
  - Recognize configuration files with the .yaml suffix only
  - Fix CLI: allow to set falsy values as default for leapp's command options
  - Resolves: RHEL-86225


author: Petr Stodulka <pstodulk@redhat.com> - 0.20.0-2
changelog:
  - Bump leapp-framework to 6.2
  - Add possibility to specify aliases for CLI option
  - Resolves: RHEL-128269


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-2
changelog:
  - Bump leapp-framework to 6.5
  - Change how commands are converted for text based report from the list representation
  - Introduce the format_list function for unified presentation of lists in reports and logs
  - Resolves: RHEL-156521


author: Matej Matuska <mmatuska@redhat.com> - 0.21.0-4
changelog:
  - Require leapp-framework 6.0+
  - Update leapp-deps package to satisfy leapp-framework-dependencies 6
  - Add dependency on libdb-utils
  - Enable upgrade for systems with LUKS bound to Clevis with TPM 2.0 token
  - Adjust resource limitations for leapp to be able to perform the upgrade
  - Cap max size of the sparse files to 1TiB for storage with large amount of free space
  - Check that detected Intel CPU microarchitecture is supported on target system
  - Fix the report when handling broken parsing of kernel cmdline
  - Generate proper error message instead of ModelViolationError when parsing invalid repository definition
  - Handle default kernel cmdline when multiple boot entries for the default kernel are defined
  - Migrate Ruby IRB during the upgrade
  - Migrate pam_userdb backend during the upgrade
  - Skip checking of (PKI) `directory-hash` dir to speedup the upgrade process and clean logs
  - Update leapp upgrade data files
  - Resolves: RHEL-57043


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-5
changelog:
  - Obsolete RHEL9 GPG key signed with SHA1
  - Activate LVM VGs with `--sysinit` option to correct the use in the upgrade initramfs
  - Fix output of commands executed inside systemd-nspawn containers
  - Fix pes events scanner crashing when there are duplicate packages in the received instructions
  - Fix pes events scanner not respecting user’s transaction configuration
  - Fix remediation instructions for deprecated NM configuration
  - Fix storage scanner crashing when command outputs contain colon character
  - Minor improvements in preupgrade reports
  - Resolves: RHEL-57043, RHEL-31428, RHEL-33373, RHEL-69829, RHEL-71517


author: Petr Stodulka <pstodulk@redhat.com> - 0.21.0-6
changelog:
  - Detect XFS file systems with problematic parameters
  - Raise an inhibitor if unsupported target version supplied instead of error
  - Prevent a possible crash with LiveMode when adding the upgrade boot entry on systems with LVM
  - Resolves: RHEL-57043, RHEL-52309, RHEL-60034


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-1
changelog:
  - Rebase to new upstream 0.22.0
  - Minor updates in generated reports
  - Cover upgrades for MySQL and PostgreSQL databases
  - Detect OpenSSL engines configured in /etc/pki/tls/openssl.cnf
  - Detect deprecated network-scripts (ifcfg) files
  - Detect whether subscribed systems are using SCA
  - Inform user about Libdb removal if present
  - Check and handle upgrades with custom crypto policies
  - Update checks for SAP HANA
  - Resolves: RHEL-57043, RHEL-35618, RHEL-36661, RHEL-62689, RHEL-68309, RHEL-69831, RHEL-77169, RHEL-78396


author: Petr Stodulka <pstodulk@redhat.com> - 0.22.0-2
changelog:
  - Require leapp-framework >= 6.1
  - Simplified use of the LiveMode experimental feature with additional enhancements
  - Ensure the leapp-upgrade-el9toel10 RPM is not touched during the upgrade transaction
  - Create proper error message when swap of RHUI clients fails
  - Fix the check of deprecated PCI devices and drivers
  - Add RHEL 10.1 product certificates
  - Gracefully handle CentOS OS versioning style
  - Introduced the --enable-experimental-feature to simplify use of experimental features
  - Manage RPM GPG keys during the upgrade respecting used linux distributions
  - Prevent a crach during post-upgrade phases when no custom SELinux modules needs to be migrated
  - Update leapp upgrade data files
  - Minor fixes in reports
  - Resolves: RHEL-49402, RHEL-72544, RHEL-77175, RHEL-80334, RHEL-80335, RHEL-80336, RHEL-80550, RHEL-86689


author: Karolina Kula <kkula@redhat.com> - 0.22.0-3
changelog:
  - Fix parsing of the kernel cmdline
  - Require leapp data with provided_data_streams 4.0+
  - Respect the release_id of the OS when processing DNF repositories to apply correct mapping for CentOS Stream
  - Resolves: RHEL-80336


author: Karolina Kula <kkula@redhat.com> - 0.22.0-4
changelog:
  - Load DNF configuration correctly when using DNF libraries
  - Disable localpkg_gpgcheck during the upgrade if set to allow installation of bundled leapp and leapp-repository deps packages
  - Enable upgrades on systems using RHUI on AWS and Azure
  - Inhibit the upgrade if cgroups v1 are enabled on the system
  - The HybridImage model has been replaced by ConvertGrubenvTask
  - Check the input format of the target version properly
  - Resolves: RHEL-64910, RHEL-64911, RHEL-81212


author: Karolina Kula <kkula@redhat.com> - 0.23.0-1
changelog:
  - Rebase to new upstream 0.23.0
  - Enable in-place upgrades on CentOS Stream systems
  - Inhibit the upgrade on systems using deprecated network-legacy dracut module to prevent kernel panic
  - Introduce leapp-upgrade-el9toel10-fapolicyd subpackage with fapolicyd rules for in-place upgrades
  - Ignore Red Hat subscription-manager actions on non-RHEL distros
  - Add actors to migrate SSSD configuration
  - Update leapp upgrade data files
  - Resolves: RHEL-50847, RHEL-80333, RHEL-86226, RHEL-95975, RHEL-95982, RHEL-102591, RHEL-104389


author: Petr Stodulka <pstodulk@redhat.com> - 0.23.0-2
changelog:
  - Requires leapp-framework 6.2+
  - Modernize the storage initialization when booting to the upgrade environment
  - Fix the upgrade on s390x LPAR when rootfs is on LVM
  - Fix the detection of encrypted Ceph OSD containers
  - Fix unlocking of LUKS devices when applied on non-rootfs file systems
  - Detect potentially harmful third party python modules for the target python version
  - Handle correctly live kernel patching during IPU
  - Inhibit the upgrade if pluginpath is configured explicitly in DNF
  - Introduce `--target-os` option to specify target distribution for possible conversion during the upgrade
  - Introduce the `--target-version` alias for the `--target` option
  - Minor changes in logs and reports
  - Prevent sssdupdate actor from rising errors that could stop the upgrade
  - Respect repomapping on CentOS-like distributions
  - Respect repomapping when converting the system to different Linux distribution
  - Skip empty lines when parsing dumped DNF config to prevent confusing warning log
  - Update the leapp data files
  - Resolves: RHEL-76159, RHEL-95983, RHEL-108025, RHEL-108992, RHEL-110563, RHEL-119546


author: Karolina Kula <kkula@redhat.com> - 0.23.0-3
changelog:
  - Fix handling of LVM during the upgrade
  - Deliver initial improvements for Multipath during the upgrade
  - Fix remediation command to make symlimk in root directory relative
  - Remove RPM GPG keys of the source distribution when converting system
  - Replace distro specific packages during conversion
  - Improve error message when scanning invalid SSHD configuration
  - Update the leapp data files
  - Minor changes in logs and reports
  - Resolves: RHEL-110190, RHEL-110568


author: Karolina Kula <kkula@redhat.com> - 0.24.0-1
changelog:
  - Rebase to new upstream 0.24.0
  - Introduce new IPU path 9.8 -> 10.2
  - Remove obsoleted IPU paths
  - Handle the upgrade on systems with NVMe-FC storage
  - Added scan and checks for NVMe devices, inhibitingblocking upgrades on known problematic setups
  - Check installed Xorg RPMs for removed content
  - Detect installed Motif packages when upgrading to RHEL
  - Drop inhibitor for use of LiveMode on aarch64, s390x, ppcle64 architectures
  - Fix the leapp rerun command when upgrading using LiveMode
  - Ignore trailing slashes when checking that required mountpoints are persistent
  - Improve the error message when a problematic DNF repository definition is detected
  - Inhibit the upgrade when converting system to a different linux distribution with enabled Secure Boot
  - LiveMode: Do not install RPMs that are not essential in the initramfs by default
  - Migrate the UEFI configuration when converting to RHEL
  - Process enabled DNF module-streams correctly during the upgrade
  - Setup net.naming-scheme to handle NIC names correctly when upgrading to RHEL 10.2+ (not applied for Centos 10 yet)
  - Update CA bundle path in kerberos configuration
  - Wait until filesystems defined in FSTAB are initialized and mounted when booting into the upgrade environment
  - Resolves: RHEL-65265, RHEL-74265, RHEL-108106, RHEL-128266, RHEL-133549, RHEL-135847, RHEL-141861


author: Petr Stodulka <pstodulk@redhat.com> - 0.24.0-2
changelog:
  - Introduce new upgrade path 9.9 -> 10.3
  - Requires leapp-framework 6.5+
  - Configure the net.naming-scheme when upgrading CS 9 to 10
  - Fix scan of physical network interfaces and ethX detection
  - Fix quoting in list representation of remediation commands
  - Check PulseAudio configuration incompatible with PipeWire
  - Consider RHUI source clients as signed by distribution vendor
  - Ensure that greenboot packages are removed during the upgrade
  - Fix AVC SELinux warnings caused by leapp execution
  - Fix detection of network interfaces with biosdevname naming on Dell machines
  - Fix failing upgrades with hugetlbfs file systems specified in FSTAB
  - Fix the upgrade with LiveMode on systems with FIPS
  - Introduce DISTRO_REPORT_NAMES in the distro library to provide unified names for linux distributions for the use in leapp reports
  - Livemode: Fix the upgrade on systems where the generated live image is not in rootfs
  - Modify keys for several reports that have been inconsistent between major releases. The keys are now independent of the used upgrade path
  - Respect names of distributions used for the IPU in preupgrade reports
  - Minor updates in reports
  - Update leapp data files
  - Resolves: RHEL-1771, RHEL-72140, RHEL-148291, RHEL-150278, RHEL-156902


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-8
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: RHEL Packaging Agent <jotnar@redhat.com> - 1.8.12-1
changelog:
  - Rebase to version 1.8.12
  - Update license to MIT AND X11 (SPDX migration)
  - Change source format from .tar.bz2 to .tar.xz
  - Add libtool as BuildRequires
  - Remove CVE patches (now included upstream)
  - Add patch to lower autoconf requirement to 2.69
  - Update dont-forward-keycode-0.patch for new codebase
  - Remove NEWS from %doc (file not present in 1.8.12)
  - Resolves: RHEL-111537


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.6.0-2
changelog:
  - rebase to 2.6.0 to fix the following CVEs:
    - CVE-2026-54371 - Symlink Traversal Privilege Escalation via getfattr


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.1.3-32
changelog:
  - Update javac source/target from 1.6 to 1.8 for java-17-openjdk
    compatibility
  - Resolves: RHEL-192541


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Karel Zak <kzak@redhat.com> 2.37.4-22
changelog:
  - fix RHEL-113638 - lscpu: update ARM identifiers
  - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification


author: Karel Zak <kzak@redhat.com> 2.37.4-23
changelog:
  - fix RHEL-123527 - mount: improve --all documentation
  - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf()
  - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-32
changelog:
  - make up incomplete patch for host name wildcard checking (RHEL-5675)
  - eliminate use of obsolete patch syntax (RHEL-65791)
  - http2: make sure pause is done on HTTP (RHEL-85847)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: José Expósito <jexposit@redhat.com> - 2.4.123-2
changelog:
  - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
    libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
    Resolves: https://issues.redhat.com/browse/RHEL-53869


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Vishal Vijayraghavan <vvijayra AT redhat DOT com> - 1:2.1.3-1
changelog:
  - New release of liberation-fonts 2.1.3
  - Resolves:rh#1464310 : Tilded G not works with Liberation Sans and Serif


author: Jan Grulich <jgrulich@redhat.com> - 0.6.22-7
changelog:
  - Fix integer underflow in MakerNote decoding (CVE-2026-40386)
  - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
    Resolves: RHEL-170254, RHEL-170235


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.1.3-36
changelog:
  - Bump javac source/target from 1.6 to 1.8 for Java 17 compatibility
  - Migrate License to SPDX format (LGPL-2.1-only AND Unicode-DFS-2016)
  - Use repacked source tarball with updated unicode encoding data files
  - Resolves: RHEL-183541


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Resolves: rhbz#1963838 restore missing functions
    Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libformula
    didn't use its built-in loaders so libreoffice's database
    report generator didn't show all categories in formula wizard


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.19.3-6
changelog:
  - Add support for the Wacom Intuos Pro (RHEL-105483)
  - Rename existing patches for better order clarity


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Mohan Boddu <mboddu@redhat.com> - 0.2.10-24
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951286 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951284 replace apache-commons-logging with java.util.logging


author: Caolán McNamara <caolanm@redhat.com> - 1.1.3-31
changelog:
  - Remove ant-contrib support dropped compile.res_copy target so
    .properties files didn't get included in the jar so libloader
    didn't use its built-in loaders so libreoffice's database
    report generator didn't work


author: RHEL Packaging Agent <redhat-ymir-agent@redhat.com> - 1.1.3-33
changelog:
  - Update javac source/target from 1.6 to 1.8 for java-17-openjdk
    compatibility
  - Resolves: RHEL-183614


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: Michel Normand <normand@linux.vnet.ibm.com> 1.1.0-5
changelog:
  - Add remove_2_backslashes_in_shell_call.patch
    Add remove_eng_inc_in_version_pl.patch
    to avoid f33 build failure


author: Adam Borowski <kilobyte@angband.pl> - 1.11-1
changelog:
  - Update to version 1.11.
  - Disable enumerable_thread_specific_access_0_drd
  - Fix internal find in radix_tree


author: Bryan Gurney <bgurney@redhat.com> - 1.12-8
changelog:
  - Apply patch to fix undefined behavior on realloc
  - Also add and apply patch to fix referencing empty array
  - Related: rhbz#2034641


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-13
changelog:
  - CVE-2025-64720: buffer overflow (RHEL-131594)
  - CVE-2025-65018: heap buffer overflow (RHEL-131603)
  - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-14
changelog:
  - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
  - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)


author: Michal Hlavinka <mhlavink@redhat.com> - 2:1.6.37-17
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161456)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.5.30-16
changelog:
  - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161457)


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-30
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951282 replace apache-commons-logging with java.util.logging


author: Sahana Prasad <sahana@redhat.com> - 4.9-3
changelog:
  - Fix CVE-2023-30570:Malicious IKEv1 Aggressive Mode packets can crash
    libreswan
  - Resolves: rhbz#2187171


author: Sahana Prasad <sahana@redhat.com> - 4.9-5
changelog:
  - Just bumping up the version to include bugs for CVE-2023-2295. There is no
    code fix for it. Fix for it is including the code fix for CVE-2023-30570.
  - Fix CVE-2023-2295 Regression of CVE-2023-30570 fixes in the
    Red Hat Enterprise Linux
  - Resolves: rhbz#2189777, rhbz#2190148


author: Daiki Ueno <dueno@redhat.com> - 4.15-2
changelog:
  - Fix auto=ondemand connection initialization with TCP (RHEL-51879)
  - Make use of Netlink extack for additional error reporting (RHEL-51881)


author: Daiki Ueno <dueno@redhat.com> - 4.15-4
changelog:
  - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461)
  - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461)


author: Daiki Ueno <dueno@redhat.com> - 4.15-9
changelog:
  - Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155)


author: Zdenek Dohnal <zdohnal@redhat.com> - 0.99.20-1
changelog:
  - 1900160 - sane-airscan-0.99.20 is available
  - 1897935 - Crash on libsane-airscan when trying to activate scanner


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Vit Mojzis <vmojzis@redhat.com> - 3.6-4
changelog:
  - Ignore files removed during relabeling (RHEL-123884)
  - Ignore directories removed during relabeling (RHEL-123884)


author: Mohan Boddu <mboddu@redhat.com> - 1.1.2-29
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951281 replace apache-commons-logging with java.util.logging


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-9
changelog:
  - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
    Resolves: RHEL-67069
    Resolves: RHEL-67081


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-11
changelog:
  - Backport patches for various CVEs, plus test improvements
    Resolves: RHEL-85909
    Resolves: RHEL-85915
    Resolves: RHEL-85920
    Resolves: RHEL-87058
    Resolves: RHEL-87068
    Resolves: RHEL-87101
    Resolves: RHEL-87119
    Resolves: RHEL-88360
    Resolves: RHEL-88363


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.72.0-12
changelog:
  - Backport patches for various CVEs
    Resolves: RHEL-84797
    Resolves: RHEL-85888
    Resolves: RHEL-87080
    Resolves: RHEL-92284


author: Kalev Lember <klember@redhat.com> - 2.72.0-2
changelog:
  - Tighten soname globs
  - Avoid automatic requires on sysprof-devel package
  - Update required glib2 version


author: Kalev Lember <klember@redhat.com> - 2.72.0-5
changelog:
  - Don't try to avoid sysprof dep any more now that sysprof-capture-devel is
    split out to a separate subpackage


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-18
changelog:
  - Resolves: RHEL-150661
  - Resolves: CVE-2025-4877
  - Resolves: CVE-2025-4878
  - Resolves: CVE-2025-5351
  - Resolves: CVE-2025-8114
  - Resolves: CVE-2025-8277
  - Resolves: CVE-2026-0964
  - Resolves: CVE-2026-0965
  - Resolves: CVE-2026-0966
  - Resolves: CVE-2026-0967
  - Resolves: CVE-2026-0968


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-14
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.4.0-16
changelog:
  - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
  - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Jeff Moyer <jmoyer@redhat.com> - 2.12-1.el9
changelog:
  - Rebase to version 2.12.  Follow fedora and get rid of explicit %
    attr for library files
  - Resolves: RHEL-114115


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Kate Hsuan <hpa@redhat.com> - 1.0.30-1
changelog:
  - Update to upstream version 1.0.30 to include the major bug fixes
  - Include the necessary API for fwupd backporting to RHEL9.
    Resolves: RHEL-182598


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135128)
  - virjsontest: Add test for nesting depth (RHEL-135128)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_SYNIC dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - qemu_validate: Drop VIR_DOMAIN_HYPERV_STIMER dependency on VIR_DOMAIN_HYPERV_VPINDEX (RHEL-138689)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-134127)
  - esx: URI encode inventory objects twice (RHEL-134127)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
  - qemu: Introduce privateData for hostdevs (RHEL-126345)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126345)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126345)
  - qemu: open iommufd FD from libvirt backend (RHEL-126345)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
  - qemu: Implement support for persistent reservation migration control (RHEL-140614)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866)
  - Introduce support for disk operation latency histogram collection (RHEL-147866)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
  - util: Move openning IOMMU device to viriommufd (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
  - util: Move openning VFIO device to virpci (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150353)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
  - qemu: Save IOMMUFD state into status XML (RHEL-150353)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
  - conf: Introduce iommufd enum for domaincaps (RHEL-138544)
  - qemu: Fill iommufd domain capability (RHEL-138544)
  - tests: properly mock VFIO and IOMMU checks (RHEL-138544)
  - iommufd: fix FD leak in case of error (RHEL-150353)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-11
changelog:
  - domain_conf: initialize network hostdev private data (RHEL-151953)
  - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-13
changelog:
  - conf: Parse hyperv features even for host-model (RHEL-151688)
  - qemu: Wire up new hyperv host-model mode behavior (RHEL-151688)
  - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-153653)
  - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-153653)
  - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-153653)
  - docs: Clarify host-model description in domain capabilities (RHEL-153653)
  - qemu: Fix job handling when domain dies in post-copy migration (RHEL-145179)
  - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159902)
  - security: Cleanup hostdev label error logic (RHEL-159902)
  - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159902)
  - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-156803)
  - conf: Move and rename virStorageSourceFDTuple object (RHEL-156803)
  - conf: Refactor virHostdevIsPCIDevice (RHEL-156803)
  - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-156803)
  - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-156803)
  - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-156803)
  - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-156803)
  - conf: Introduce domain iommufd element (RHEL-156803)
  - qemu: Implement iommufd (RHEL-156803)
  - conf: Add iommufd fdgroup support (RHEL-156803)
  - qemu: Implement iommufd fdgroup (RHEL-156803)
  - tests: Add iommufd fdgroup test (RHEL-156803)
  - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-156803)
  - qemuMigrationSrcBeginXML: Don't call 'qemuMigrationSrcBeginPhaseBlockDirtyBitmaps' with offline VM (RHEL-173433)
  - qemuMigrationSrcBeginPhase: Don't call 'qemuBlockNodesEnsureActive' with offline VM (RHEL-173433)
  - util: virGetSubIDs: do not limit file size (RHEL-174491)
  - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-177364)
  - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-177364)
  - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-177364)
  - qemu_capabilities: Always sort features in host-model CPU (RHEL-177364)
  - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-177364)
  - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-177364)
  - qemu_capabilities: Cache expanded CPU (RHEL-177364)
  - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-177364)
  - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-177364)
  - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-177364)
  - cpu: Introduce virCPUUpdateFeatures (RHEL-177364)
  - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-177364)
  - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-177364)
  - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-177364)
  - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-177364)
  - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-177364)
  - distro: Replace old gating with tmt


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-14
changelog:
  - distro: Update URL in plans.fmf
  - qemu: Ensure proper shutdown ordering of virtlockd/virtlogd daemons (RHEL-180876)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-12
changelog:
  - qemuMonitorJSONGetCPUModelExpansion: refactor parsing functions (RHEL-89415)
  - qemu: parse deprecated-props from query-cpu-model-expansion response (RHEL-89415)
  - qemu_capabilities: query deprecated features for host-model (RHEL-89415)
  - libvirt-domain: introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_DISABLE_DEPRECATED_FEATURES (RHEL-89415)
  - qemu_capabilities: filter deprecated features if requested (RHEL-89415)
  - virsh: add --disable-deprecated-features flag to domcapabilities (RHEL-89415)
  - conf: add deprecated_features attribute (RHEL-89415)
  - redhat: Restore hunks in tests/qemucapabilitiesdata/caps_10.0.0_s390x.* (RHEL-89415)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-14
changelog:
  - qemu: introduce QEMU_CAPS_AMD_IOMMU (RHEL-50560)
  - qemu: introduce QEMU_CAPS_PCI_ID (RHEL-50560)
  - docs: formatdomain: document intel-only IOMMU attributes (RHEL-50560)
  - qemu: add IOMMU model amd (RHEL-50560)
  - conf: add passthrough and xtsup attributes for IOMMU (RHEL-50560)
  - esx: Allow specifying different CA bundle for remote connections (RHEL-97440)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-15
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-106276)
  - qemu: sanitize blank lines in config file (RHEL-106276)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-106276)


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-15693, RHEL-95397, RHEL-111609, RHEL-116847, RHEL-117774


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-114003


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-1
changelog:
  - Rebased to libvirt-11.10.0 (RHEL-118197)
  - The rebase also fixes the following bugs:
      RHEL-126090, RHEL-128107
  - spec: Fix RPM build when %{fedora} is undefined (RHEL-118197)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-108915)
  - tests: Test virFileIsSharedFSOverride (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-135287)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-135287)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-135287)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-4
changelog:
  - Add support for the Cintiq Pro 27 (RHEL-101886)
  - Add support for the Intuos Pro 3rd Gen series (RHEL-101881)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-5
changelog:
  - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881)
  - Use separate Ring/Ring2 assignments


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-6
changelog:
  - Add stylus definitions for the propen group (RHEL-122207)
  - Add tablet definitions for the latest Cintiqs (RHEL-122206)
  - Fix the overlap for button assignments in the SVG (RHEL-126355)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-1
changelog:
  - Update to openwsman-2.8.1
    Resolves: RHEL-97643
  - Add libwsman-client.so.4 for backward compatibility
    Related: RHEL-97643


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.8.1-2
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-127516
  - Fix bogus 'sscg' arguments
    Related: RHEL-118292


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "ppc64le-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j20  
    cd -


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Miroslav Lichvar <mlichvar@redhat.com> 3.1.1-6
changelog:
  - add support for VLAN over bond (#2120521)
  - handle EINTR when waiting for transmit timestamp (#2128786)
  - check for unexpected changes in frequency offset (#2150815)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929)
  - fix ts2phc to handle large NMEA delay (RHEL-23208)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-3
changelog:
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387)
  - fix ts2phc to correctly handle leap seconds (RHEL-40216)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947)
  - add options to configure multicast IP addresses (RHEL-31178)
  - add holdover support to ts2phc (RHEL-50216)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58213 RHEL-57040)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027)
  - support static sink clocks in phc2sys automatic mode (RHEL-62864)
  - don't require -O option without -a and -w in phc2sys (RHEL-69138)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-2
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-72468)
  - add command to set external grandmaster properties (RHEL-90585)
  - refresh link status on faults (RHEL-56168)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-5
changelog:
  - fix high CPU usage by ptp4l when link is down (RHEL-178071)
  - fix phc2sys to not get stuck in static mode (RHEL-187950)


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Artem Egorenkov <aegorenk@redhat.com> - 3.6.0-7
changelog:
  - New flag for no sensors added. This flag is used in VM environment
    to make sensors binaries not fail if no sensors was detected.


author: Sérgio Basto <sergio@serjux.com> - 2.14.1-1
changelog:
  - Update to 2.14.1
  - Disable javadoc (#1988896)
  - Build with jansi-2
  - Remove deps on slf4j-ext (no longer available in Fedora 35)


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.5.5-10
changelog:
  - add support for chronyd (RHEL-36757)
  - ignore normal "Server ready" startup message from fail2ban (RHEL-83940)


author: Brian C. Lane <bcl@redhat.com> 34.9.19-1
changelog:
  - mkksiso: Optionally support 3 arguments or --ks (bcl)
    Resolves: rhbz#2037015
  - mkksiso: Add -U to xorriso on ppc64le (bcl)
    Resolves: rhbz#2109665
  - mkksiso: Fix passing -iso-level to xorriso (bcl)
    Related: rhbz#2109665


author: Brian C. Lane <bcl@redhat.com> 34.9.20-1
changelog:
  - templates: Update runtime-* templates (bcl)
    Resolves: rhbz#2042057
  - templates: Update path to license files (bcl)
    Related: rhbz#2042057
  - templates: Update boot timeout to 5s (bcl)
    Related: rhbz#2042057


author: Brian C. Lane <bcl@redhat.com> 34.9.23-1
changelog:
  - rsyslog.conf: Set WorkDirectory to /var/lib/rsyslog (bcl)
    Resolves: rhbz#2158731
  - lorax.spec: fix changelog entry for 2132511 (bcl)
    Related: rhbz#2132511


author: Brian C. Lane <bcl@redhat.com> 34.9.26-1
changelog:
  - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl)
    Resolves: RHEL-4658
  - rsyslog.conf: Update to use current config syntax (bcl) (bcl)
    Resolves: RHEL-46857


author: Brian C. Lane <bcl@redhat.com> 34.9.27-1
changelog:
  - New lorax documentation - 34.9.27 (bcl) (bcl)
    Related: RHEL-83208
  - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl)
    Resolves: RHEL-83208
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl)
    Resolves: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.28-1
changelog:
  - templates.d: Synchronize with lorax-templates-rhel (bcl)
    Related: RHEL-54712
    Resolves: RHEL-69019
  - lorax: Change default rootfs size to 4GiB (bcl)
    Resolves: RHEL-95360


author: Brian C. Lane <bcl@redhat.com> 34.9.29-1
changelog:
  - templates: Synchronize with lorax-templates-rhel (bcl) (bcl)
    Resolves: RHEL-54712
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus)
    Resolves: RHEL-100463
  - lorax.spec: Fix a wrong issue reference (bcl) (bcl)
    Related: RHEL-83986


author: Brian C. Lane <bcl@redhat.com> 34.9.30-1
changelog:
  - rel-eng: Update the tito LoraxRHELTagger for Jira (bcl)
    Related: RHEL-121651
  - executils: Ignore utf-8 decode errors (bcl)
    Resolves: RHEL-121651
  - executils: Remove binary_output flag (bcl)
    Related: RHEL-121651
  - logging: Set encoding=UTF-8 on FileHandler (bcl)
    Related: RHEL-121651
  - executils: Set encoding to UTF-8 for _run_program (bcl)
    Related: RHEL-121651
  - executils: decoding after deserialization (oleg.sviridov)
    Related: RHEL-121651


author: Brian C. Lane <bcl@redhat.com> - 9.0-38
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-15122
  - Add setpriv as ostree containers dependency (bcl)
    Resolves: RHEL-15122


author: Brian C. Lane <bcl@redhat.com> - 9.6-1
changelog:
  - Bump release version to 9.6 (bcl)
    Related: RHEL-69011
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-69011


author: Brian C. Lane <bcl@redhat.com> - 9.7-1
changelog:
  - Bump release version to 9.7 (bcl)
    Related: RHEL-91930
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91930


author: Brian C. Lane <bcl@redhat.com> - 9.7-3
changelog:
  - live-install.tmpl: Fix broken single item tuple (bcl)
    Related: RHEL-108149
  - libvirt.tmpl: Fix use of xrange (bcl)
    Related: RHEL-108149
  - 80-rhel: Remove unused templates and config files (bcl)
    Resolves: RHEL-108149
  - Fix tzselect path in runtime-cleanup.tmpl (jikortus)
    Resolves: RHEL-101453


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Tom Callaway <spot@fedoraproject.org> - 33.3.1-17
changelog:
  - hack this ancient beastie to work with lua 5.4
  - maintainer, please update this to the current upstream release at your earliest convenience


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Miro Hrončok <mhroncok@redhat.com> - 1-3
changelog:
  - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17
  - Add explicit conflict with older lua-devel
  - Require rpm, not redhat-rpm-config


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-2
changelog:
  - Fix SPDX License identifiers.
  - Fix input units for VDO LV's minimim_io_size.
  - Fix stripe count and validation for RAID LVs.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-5
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-4
changelog:
  - Force the CMake change regarding the in-source builds also to F31 and F32
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug build changes to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers several other options which redudndant specification I removed in this commit
  - Default to %cmake commands instead of %make commands


author: Ondrej Dubaj <odubaj@redhat.com> - 3.0.1-1
changelog:
  - Rebase to new major version 3.0.1 (it's Beta version)
  - Removed documentation/ folder, as it was removed by upstream


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.0.3-1
changelog:
  - Rebase to 3.0.3
  - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn,
    which leads to build crash


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1:3.6.3-22
changelog:
  - Implement new non-conflicting Java bindings
  - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072


author: Alex Williamson <alex.williamson@redhat.com> - 0.57-1
changelog:
  - 13f1322e576c ("Remove systemd support")
  - d84a2737e79c ("Fix device udev tagging")
  - 68c92c7beaca ("Tag before generating spec file")
  - c34c4f1ade60 ("Update mdevctl.spec.in for lsmdev.8")
  - ed86d345aae0 ("Fix systemd UUID escaping")
  - d4e83f08161d ("Merge pull request #13 from cpaelzer/fix-lsmdev-man-page")
  - 3c0d285b75ab ("lsmdev - add the alternative name to the man page")


author: Alex Williamson <alex.williamson@redhat.com> - 0.61-1
changelog:
  - d7dfac5f5bfb ("Merge pull request #15 from cohuck/attr_sanity")
  - 28a9fa17b51e ("validate attribute names")


author: Cornelia Huck <cohuck@redhat.com> - 0.69-1
changelog:
  - a2621934aa37 ("Merge pull request #18 from cohuck/validate")
  - ffbcef5a1c84 ("Merge pull request #25 from etrunko/master")
  - 5ec75a83bf30 ("Remove never used 'available' option")
  - d49b0f0db6b3 ("Merge pull request #23 from eskultety/man-fix")
  - 4cfe37eb2d99 ("man: Point --verbose to the 'list' command rather than 'types'")
  - a0ae49eb7178 ("Merge pull request #17 from cohuck/install_symlinks")
  - 504beba6e8f9 ("Force symlink cretion")
  - 522c5ded00ff ("Fix attribute validation")


author: Alex Williamson <alex.williamson@redhat.com> - 0.78-1
changelog:
  - e029640033d3 ("Automatic version commit for tag 0.78")
  - e32f506656fd ("use standard bash path")
  - 70690b64401f ("avoid other tags spilling into the .spec changelog")
  - 70b89c18cf5b ("Merge pull request #31 from awilliam/20201113.0")
  - 80187bc9ba03 ("Merge pull request #30 from fiuczy/fix-error-cleanup")
  - 97ea8bbeefb7 ("mdevctl: fix cleanup on error when creating and removing mdev")
  - b45d33dfd36c ("version support")
  - 2b1c16ce6fb0 ("Fix attributes getting applied via start-parent-mdevs")
  - 25d5e8d24d57 ("mdevctl: fix cleanup on error when writing to attribute")


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.2
changelog:
  - Set version to 104.0.2
  - BZ#2084608 - Fix mismatched allocation function
  - BZ#2084613 - qga-win: race condition in build


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.1
changelog:
  - Set version to 105.0.1
  - Remove redundant package
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.2
changelog:
  - Set version to 105.0.2
  - Fix wrong requires
  - Fix missing patch0002
  - Remove extra Summary
  - BZ#2090333 - [mingw-qemu-ga-win] qga command 'guest-get-fsinfo' can't query bus-type of USB


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Konstantin Kostiuk <kkostiuk@redhat.com> 109.1.0
changelog:
  - RHEL-57013 - Rebase qemu-ga to 9.1.0
  - RHEL-57012 - guest agent public ssh injection api support for Windows
  - Set version to 109.1.0


author: Petr Menšík <pemensik@redhat.com> - 5.5.9-4
changelog:
  - Enable mkpasswd building (#2054043)
  - Remove changelog from mkpasswd, it has double size of actual tool


author: Jakub Hrozek <jhrozek@redhat.com> - 0.17.0-6
changelog:
  - Related: rhbz#1986806 - CVE-2021-3639 mod_auth_mellon: Open Redirect
                            vulnerability in logout URLs


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-2
changelog:
  - Resolves: rhbz#2153656 - CVE-2022-23527 - Open Redirect in
    oidc_validate_redirect_url() using tab character


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-3
changelog:
  - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference
    when OIDCStripCookies is set and a crafted Cookie header is supplied


author: Tomas Halman <thalman@redhat.com> - 2.4.10-1
changelog:
  Rebase to 2.4.10 version improves `state cookies piling up` problem
    Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache
    Resolves: RHEL-25422 mod_auth_openidc: DoS when using
              `OIDCSessionType client-cookie` and manipulating cookies
              (CVE-2024-24814)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.4.9.1-1
changelog:
  - Resolves: rhbz#1987223 - CVE-2021-32792 mod_auth_openidc: XSS when using
                             OIDCPreservePost On [rhel-9.0]
  - Resolves: rhbz#1987217 - CVE-2021-32791 mod_auth_openidc: hardcoded
                             static IV and AAD with a reused key in AES GCM
                             encryption [rhel-9.0]
  - Resolves: rhbz#1987204 - CVE-2021-32786 mod_auth_openidc: open redirect in
                             oidc_validate_redirect_url() [rhel-9.0]


author: Tomas Halman <thalman@redhat.com> - 2.4.9.4-1
changelog:
  - Resolves: rhbz#2001852 - CVE-2021-39191 mod_auth_openidc: open redirect
                             by supplying a crafted URL in the target_link_uri
                             parameter


author: Paul Howarth <paul@city-fan.org> - 2.3.9-24
changelog:
  - Drop EL-6 support
    - Use %license unconditionally
    - _httpd_* macros always available
    - Run directory is always /run on tmpfs
    - Assume httpd ≥ 2.4 filesystem layout
    - systemd-units always provided by systemd


author: Lubos Uhliarik <luhliari@redhat.com> - 2.3.9-26
changelog:
  - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI
    server process environment


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-3
changelog:
  - Resolves: #2066311 - CVE-2021-44224 httpd: possible NULL dereference or SSRF
    in forward proxy configurations


author: Luboš Uhliarik <luhliari@redhat.com> - 1.15.19-5
changelog:
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-5
changelog:
  - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.26-6
changelog:
  - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory
    Increase (CVE-2025-53020)


author: Coty Sutherland <csutherl@redhat.com> - 1.2.48-20
changelog:
  - Cleanup spec file and remove .redhat-N suffix from release
  - Remove ap24 subpackage since we only need to build for one version of httpd


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-1
changelog:
  - Resolves: RHEL-25075 - new version 2.4.26
  - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md
  - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set
  - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair
    key/certificate when OCSP reports a revoked status


author: Luboš Uhliarik <luhliari@redhat.com> - 1:2.4.26-2
changelog:
  - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended
    retry intervals (CVE-2025-55753)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release


author: Fedora Release Engineering <releng@fedoraproject.org> - 2.9.3-10
changelog:
  - Resolves: #1930664 - RFE: Add a feature that can set a mod_security/libcurl
    timeout for retrieving the rules
  - rename mlogc to mod_security-mlogc


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-2
changelog:
  - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS
    Vulnerability (CVE-2025-47947)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-3
changelog:
  - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service
    Vulnerability (CVE-2025-48866)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.9.6-4
changelog:
  - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe
    to rotatelogs for SecAuditLog leading to frozen state during graceful restart


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-2
changelog:
  - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade
    with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.4-3
changelog:
  - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the
    REQUEST-913-SCANNER-DETECTION.conf blocks requests  with "User-agent:
    urlgrabber/3.10 yum/3.4.3"


author: Luboš Uhliarik <luhliari@redhat.com> - 3.3.5-3
changelog:
  - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city
    in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch


author: Jakub Kadlcik <frostyx@email.cz> 0.5-1
changelog:
  - Release for epel8 as well (frostyx@email.cz)
  - Require createrepo_c for the createrepo_mod package (frostyx@email.cz)
  - modulemd-merge: improve README.md file (frostyx@email.cz)
  - repo2module: improve README.md file (frostyx@email.cz)
  - dir2module: improve README.md file (frostyx@email.cz)
  - Improve README.md file (frostyx@email.cz)
  - createrepo_mod: improve README.md file (frostyx@email.cz)
  - Loosen the python3-libmodulemd dependency to just libmodulemd
    (frostyx@email.cz)
  - createrepo_mod: use just createrepo_c if it has built-in module support
    (frostyx@email.cz)
  - Explicitly depend on python3-setuptools (frostyx@email.cz)
  - createrepo_mod: dump modules.yaml into the correct directory
    (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.6-1
changelog:
  - Generate manpages for all tools in this repository 
  - modulemd-generate-macros: add a tool for generating module-build-macros
  - modulemd_tools: add the first pieces of a python library (for internal usage only)


author: Jakub Kadlcik <frostyx@email.cz> 0.7-1
changelog:
  - Generate manpages on the fly
  - Automated test builds incl. Docker/Travis
  - Fix PEP8 in all tools
  - modulemd_tools: temporarily skip some tests on EPEL8 or Fedora
  - Drop libmodulemd dependency in favor of python3-libmodulemd


author: Jakub Kadlcik <frostyx@email.cz> 0.8-1
changelog:
  - modulemd_tools: drop python3-parameterized dependency (frostyx@email.cz)
  - Package modulemd_tools helper lib (fvalder@redhat.com)
  - Add modulemd-merge tests (fvalder@redhat.com)
  - Add createrepo_mod tests (fvalder@redhat.com)
  - Replace master in fedora releaser to rawhide (frostyx@email.cz)


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-4
changelog:
  - Generate profiles section and modulemd-defaults file
    Related: rhbz#1801747
  - Use autosetup to automatically apply patches


author: Jakub Kadlcik <jkadlcik@redhat.com> - 0.9-5
changelog:
  - Don't traceback because of a modular SRPM in the repo
    Related: rhbz#2227436
  - Replace deprecated LooseVersion
  - Fix tests for new libmodulemd version 2.15.0


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: José Expósito <jexposit@redhat.com> - 2.3.4-28
changelog:
  - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
  - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap


author: Olivier Fourdan <ofourdan@redhat.com> - 2.3.4-30
changelog:
  - Keep drop-down menus on the same monitor as the pull-down button with
    Xinerama
    Resolves: RHEL-92832


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Honggang Li <honli@redhat.com> - 5.7-3
changelog:
  - Update OSU benchmarks to upstream release 5.7.1
  - Update Intel MPI Benchmarks 2021.2
  - Resolves: rhbz#1960479


author: Honggang Li <honli@redhat.com> - 5.8-1
changelog:
  - Update OSU benchmarks to upstream release 5.8
  - Update Intel MPI Benchmarks 2021.3
  - Resolves: rhbz#2015392


author: Davide Caratti <dcaratti@redhat.com> - 0.7-2
changelog:
  - add a simple sanity test and enable gating. Related: rhbz#1962741
  - don't overwrite global build options. Related: rhbz#1967697
  - fix 'check_conflicts' on multilib. Related: rhbz#1967697


author: Davide Caratti <dcaratti@redhat.com> - 0.8-2
changelog:
  - fix mptcpize to work also when protocol number is 0 (upstream issue #159)
    and when command resides in another file system (upstream issue #161)
    Related: rhbz#2015623


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Jonas Ådahl <jadahl@redhat.com> - 40.9-22
changelog:
  - Fix crash when moving window while switching workspace
    Resolves: RHEL-62997
  - Improve app discovery for workspace logic
    Resolves: RHEL-63000


author: Olivier Fourdan <ofourdan@redhat.com> - 40.9-31
changelog:
  - Backport linux-dmabuf v4 support to restore hardware acceleration
    in Xwayland 24.1 with Mesa 25.2
    Resolves: RHEL-129832


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Michal Schorm <mschorm@redhat.com> - 1.0.1-1
changelog:
  - Rebase to 1.0.1 release
    This release is just a sync-up with upstream selinux-policy
  - URL changed to a new upstream repository


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-10
changelog:
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95814


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-9
changelog:
  - fix CVE-2022-44792 and CVE-2022-44793 (#2141902) and (#2141906)
  - fix memory leak when ipv6 disable set to 1 (#2151540)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-14
changelog:
  - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
    CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)


author: Josef Ridky <jridky@redhat.com> - 1:5.9.1-18
changelog:
  - fix inverted usage of -n in snmptrapd (RHEL-101078)
  - fix use after free issue (RHEL-121091)
  - fix help and manpage for net-snmp-create-v3-user 
    script(RHEL-101614 and RHEL-103557)


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-42
changelog:
  - Replace statfs64 with statfs (RHEL-127105)
  - NFS export symlink vulnerability fix (RHEL-127105)
  - mountd: Minor refactor of get_rootfh() (RHEL-127105)
  - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
  - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
  - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
  - Add requires for selinux-policy (RHEL-127105)
    Resolves: CVE-2025-12801


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-43
changelog:
  - nfsrahead: enable event-driven mountinfo monitoring and skip non-NFS devices (RHEL-158527)
  - nfsrahead: zero-initialise device_info struct (RHEL-158527)
  - nfsrahead: quieten misleading error for non-NFS block devices (RHEL-158527)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-23
changelog:
  - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER
    at nginx with reverse-proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-24
changelog:
  - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)
  - Resolves: RHEL-85556 - nginx: Memory disclosure in the
    ngx_http_mp4_module (CVE-2022-41742)
  - Resolves: RHEL-91446 - nginx: Memory corruption in the
    ngx_http_mp4_module (CVE-2022-41741)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-25
changelog:
  - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log
    is not created when updating system in image mode


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-28
changelog:
  - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connection


author: Petr Dancak <pdancak@redhat.com> - 2:1.20.1-29
changelog:
  - Resolves: RHEL-159563 - CVE-2026-27654 nginx: NGINX: Denial of Service
    or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159542 - CVE-2026-27784 nginx: NGINX: Denial of Service
    due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159450 - CVE-2026-27651 nginx: NGINX: Denial of Service
    via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157891 - CVE-2026-32647 nginx: NGINX: Denial of Service
    or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-1
changelog:
  - Resolves: #2096174 - RFE: add nginx:1.22 module stream
  - switch to pcre2
  - add stream_geoip_module and stream_realip_module
  - enable kTLS support


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5
changelog:
  - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-6
changelog:
  - Resolves: RHEL-146529 -  CVE-2026-1642 nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections


author: Petr Dancak <pdancak@redhat.com> - 1:1.24.0-7
changelog:
  - Resolves: RHEL-159564 - CVE-2026-27654 nginx: NGINX: Denial of Service
    or file modification via buffer overflow in ngx_http_dav_module
  - Resolves: RHEL-159543 - CVE-2026-27784 nginx: NGINX: Denial of Service
    due to memory corruption via crafted MP4 file
  - Resolves: RHEL-159451 - CVE-2026-27651 nginx: NGINX: Denial of Service
    via undisclosed requests when ngx_mail_auth_http_module is enabled
  - Resolves: RHEL-157892 - CVE-2026-32647 nginx: NGINX: Denial of Service
    or Code Execution via specially crafted MP4 files


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-4
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: pdancak <pdancak@redhat.com> - 2:1.26.3-5
changelog:
  - RHEL-159565 CVE-2026-27654 nginx: NGINX: Denial of Service or file
    modification via buffer overflow in ngx_http_dav_module


author: pdancak <pdancak@redhat.com> - 2:1.26.3-6
changelog:
  - RHEL-159544 - CVE-2026-27784 nginx: NGINX: Denial of Service due to
    memory corruption via crafted MP4 file


author: pdancak <pdancak@redhat.com> - 2:1.26.3-7
changelog:
  - RHEL-159452 CVE-2026-27651 nginx: NGINX: Denial of Service via
    undisclosed requests when ngx_mail_auth_http_module is enabled


author: pdancak <pdancak@redhat.com> - 2:1.26.3-8
changelog:
  - RHEL-157893 CVE-2026-32647 nginx: NGINX: Denial of Service or Code
    Execution via specially crafted MP4 files


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-5
changelog:
  - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9
    Resolves: RHEL-101161


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf. RHEL-110369
  - Introduce state: ignore for route. RHEL-107130
  - Support PCI address matching in gen_conf. RHEL-110369
  - Support MacSec interface in gen_conf. RHEL-110369


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Automatically set HSR port MAC address. RHEL-122171
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-123541
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052
  - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731
  - Support rightca ipsec option. RHEL-123542


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-141606
  - alt-name: Remove alt-names when interface marked as absent. RHEL-141602
  - hsr: Automatically disable IP on hsr port. RHEL-141609
  - hsr: add support for configuring "interlink" property. RHEL-141608
  - Support referring interface name using its alternative name. RHEL-141601


author: Ján Václav <jvaclav@redhat.com> - 2.2.60-1
changelog:
  - Upgrade to 2.2.60
  - ipv4: Add new parameter prefix-route-metric RHEL-166365
  - Fix error when modify port list of down interfaces RHEL-166366
  - Add support for configuring ipip tunnel in nmstate RHEL-166367


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Tomas Juhasz <tjuhasz@redhat.com> - 1:20.20.2-1
changelog:
  - Update to version 20.20.2
    Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change.
    Resolves: RHEL-154020
    Fixes:  CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.22.2-1
changelog:
  - Update to version 22.22.2
  - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135
  - disabled failing tests in nghttp2 due to newer version
  - patch for npm/braces CVE-2026-25547
    Resolves: RHEL-154021
    Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Tomas Juhasz <tjuhasz@redhat.com> - 3.1.14-1
changelog:
  - Rebase to 3.1.14
  - Change 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  - Resolves: RHEL-153975 RHEL-153974


author: Tomas Juhasz <tjuhasz@redhat.com> - 3.1.14-1
changelog:
  - Rebase to 3.1.14
  - Change 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | 
  /usr/bin/patch  -s --fuzz=0 --no-backup-if-mismatch


  - Resolves: RHEL-153979 RHEL-153978


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally removed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-5
changelog:
  - fips update
  -   Fix indicators for the new post-quantum algorithms
  -   Fix the ML-KEM Self-tests
  -   Fix the ML-KEM zeroizaiton
  -   Add partial public validation before OAEP
  - bug fixes
  -   add CKA_SEED to private attributes so they are updated on password change.
  -   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
  -   fix unrefrence read in leancrypto.


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-1
changelog:
  - rebase to upstream NSS 3.124
  - backport ml-dsa support that is not upstream yet.
  - pick up in process patches upstream including eddsa


author: Bob Relyea <rrelyea@redhat.com> - 3.124.0-2
changelog:
  - rebase fixes
  - restore rhel-9 dropping of pkcs12 and smime policy
  - restore mlkem aliases
  - add mlkem key lengths to the mechanism info
  - fix crash if you try to encapsulate with an unimported
    public key
  - restore distrusted certs to certdata.txt even though we
    never reference them to make tests happy.


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-5 + 0.10.4-8
changelog:
  - CVE-2026-3497: Fix information disclosure or denial of service due
    to uninitialized variables in gssapi-keyex
    Resolves: RHEL-155825
  - Fix incorrect claim about SSH_AUTH_SOCK in pam_ssh_agent_auth manual page
    Resolves: RHEL-122302


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-8
changelog:
  - Fix static analysis issues
    Resolves: RHEL-163366
  - Ssh should refuse connection when mlkem kex is specified in FIPS
    Resolves: RHEL-155161
  - CVE-2026-35385: Fix privilege escalation via scp legacy protocol
    when not in preserving file mode
    Resolves: RHEL-164754
  - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
    multiplexing sessions
    Resolves: RHEL-166251
  - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
    and HostbasedAcceptedAlgorithms with regard to ECDSA keys
    Resolves: RHEL-166235
  - CVE-2026-35414: Fix mishandling of authorized_keys principals option
    Resolves: RHEL-166203
  - CVE-2026-35386: Add validation rules to usernames and hostnames
    set for ProxyJump/-J on the commandline
    Resolves: RHEL-166219


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2026-55653: Fix double free in openssh DH-GEX client path during
    FIPS known-group validation that leads to client-side denial of service
    Resolves: RHEL-186440
  - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
    cleanup due to missing NULL terminator
    Resolves: RHEL-185835
  - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
    pre-binding
    Resolves: RHEL-185850


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.5-1
changelog:
  - Rebase to OpenSSL 3.5.5
    Resolves: RHEL-136895
    Resolves: RHEL-142004
    Resolves: RHEL-142012
    Resolves: RHEL-142020
    Resolves: RHEL-142024
    Resolves: RHEL-142028
    Resolves: RHEL-142032
    Resolves: RHEL-142036
    Resolves: RHEL-142040
    Resolves: RHEL-142044
    Resolves: RHEL-142048
    Resolves: RHEL-142052
    Resolves: RHEL-142056


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.7-1
changelog:
  - Rebase to OpenSSL 3.5.7
    Resolves: RHEL-179700
    Resolves: RHEL-179695
    Resolves: RHEL-179692
    Resolves: RHEL-179687
    Resolves: RHEL-179677
    Resolves: RHEL-179660
    Resolves: RHEL-179634
    Resolves: RHEL-179555
    Resolves: RHEL-179551
    Resolves: RHEL-179548
    Resolves: RHEL-179543
    Resolves: RHEL-179540
    Resolves: RHEL-179284
    Resolves: RHEL-179275


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0
  - Add systemd-journal group to Requires(pre)
  - Bump go-tpm-keyfiles
    Resolves: RHEL-119812


author: Kseniia Nivnia <knivnia@redhat.com> - 0.144.0-2
changelog:
  - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3
  - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810
    Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351


author: Kseniia Nivnia <knivnia@redhat.com> - 0.152.1-1
changelog:
  - Update to v0.152.1
  - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136
    Resolves: RHEL-183842, RHEL-185027, RHEL-187332, RHEL-189294, RHEL-190006, RHEL-191128, RHEL-191580


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.7-1
changelog:
  - Rebase to 2025.7
    Backport https://github.com/ostreedev/ostree/pull/3555
    Resolves: #RHEL-129049


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2026.1-1
changelog:
  - Rebase to 2026.1
    Release https://github.com/ostreedev/ostree/releases/tag/v2026.1
    Resolves: #RHEL-167078


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Chris Lumens <clumens@redhat.com> - 2.1.11-1
changelog:
  - Fix integer overflows in remote message decompression code (CVE-2026-10649)
  - Resolves: RHEL-181156


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-29
changelog:
  - pam_access: support UID and GID in access.conf
    Resolves: RHEL-119868
  - pam_lastlog: fix file locking. Resolves: RHEL-118522


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: RHEL Packaging Agent <jotnar@redhat.com> - 7.2.0-1
changelog:
  - Rebase to papi 7.2.0
  - Update license tag to BSD-3-Clause
  - Remove old patches and add new patches for 7.2.0 compatibility
  - Update configure options and package files
  - Resolves: RHEL-121673


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Lauren Chilton <lchilton@redhat.com> - 6.3.7-6
changelog:
  - Backport fix for pmdaopenmetrics metric removal (RHEL-101745)
  - Backport fix for pcp2openmetrics metric hanging (RHEL-106772)
  - Backport fix for atop cpu utilization bug (RHEL-79767)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-1
changelog:
  - Added conditional lockdown policy access by pmdakvm (BZ 1940971)
  - Added spec file dependency on cyrus-sasl-scram (BZ 1942879)
  - Update to latest PCP sources (BZ 1957575)


author: Nathan Scott <nathans@redhat.com> - 5.3.0-2
changelog:
  - Improve pmchart duplicate archive diagnostics (BZ 1615718)
  - Save pmchart users prefered archive locations (BZ 1615742)
  - Remove libvarlink dependency from podman PMDA (BZ 1956608)
  - Correct pcp-testsuite file permissions (BZ 1922040)
  - Resolve pcp-testsuite linkage problems (BZ 1950263)


author: Nathan Scott <nathans@redhat.com> - 5.3.1-3
changelog:
  - Fix pmproxy parallel TLS requests bug (BZ 1947989)
  - Backport pmrep archive creation fix (BZ 1974266)
  - Related: rhbz#1957575


author: Mark Goodwin <mgoodwin@redhat.com> - 5.3.1-4
changelog:
  - Improve pmproxy and libpcp_web scalability (BZ 1975069)
  - Provide a pcp-ss(1) tool in pcp-system-tools (BZ 1879350)


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.0.30-4
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections


author: Remi Collet <rcollet@redhat.com> - 8.0.30-5
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Remi Collet <rcollet@redhat.com> - 8.0.30-6
changelog:
  - Fix XSS within status endpoint
    CVE-2026-6735
  - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init()
    CVE-2026-7259
  - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map
    CVE-2026-6722
  - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION
    CVE-2026-7261
  - Fix Broken Apache map value NULL check
    CVE-2026-7262
  - Fix Signed integer overflow of char array offset
    CVE-2026-7568
  - Fix Consistently pass unsigned char to ctype.h functions
    CVE-2026-7258


author: Remi Collet <rcollet@redhat.com> - 8.0.30-7
changelog:
  - Fix Memory corruption (zend_mm_heap corrupted) in openssl_encrypt with AES-WRAP-PAD
    CVE-2026-14355


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-3
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175074
  - Resolves: #2179966
  - Resolves: #2187322
  - Resolves: #2187383
  - Resolves: #2203702
  - Resolves: #2207522


author: Jindrich Novy <jnovy@redhat.com> - 2:4.5.1-5
changelog:
  - rebuild for following CVEs:
  CVE-2023-25173 CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2175071
  - Resolves: #2179950
  - Resolves: #2187318
  - Resolves: #2187366
  - Resolves: #2203681
  - Resolves: #2207512


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Petr Lautrbach <lautrbach@redhat.com> - 3.6-5
changelog:
  - sandbox/seunshare: Replace system() with execv() to prevent shell injection
  - seunshare: fix the frail tmpdir cleanup


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Fedor Vorobev <fvorobev@redhat.com> - 2:3.5.25-3
changelog:
  - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code.
    Resolves: RHEL-176544


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Than Ngo <than@redhat.com> - 1.3.10-1
changelog:
  - Resolves: #1920964, P10 Power Mode Reporting
  - Resolves: #2050893, Linux Hybrid Network Virtualizatio
  - Resolves: #2065169, bootloader fails to update boot order after OS install
  - Resolves: #2071862, Fix NM HNV setting primary slave
  - Resolves: #2089106, smtstate --save command failed


author: Than Ngo <than@redhat.com> - 1.3.10-3
changelog:
  - Resolves: #2111991, Add udev rule for the nx-gzip in to the core subpackage
  - Resolves: #2121470, Fix lsslot -c mem output when using 4GB LMB size
  - Resolves: #2110129, Add NVMf-FC boot support for Power


author: Than Ngo <than@redhat.com> - 1.3.10-4
changelog:
  - Resolves: #2150698, handle nsid of nvmf device as hexadecimal number
  - Resolves: #2150697, setup multiple device path for a nvmf boot device


author: Than Ngo <than@redhat.com> - 1.3.10-6
changelog:
  - Resolves: #2166870, lparstat: Fix display of mode for dedicated-donating partition
  - Resolves: #2169269, lparstat: Fix negative values seen while running lparstat with -E option


author: Than Ngo <than@redhat.com> - 1.3.10-7
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  Resolves: #2225371


author: Than Ngo <than@redhat.com> - 1.3.10-8
changelog:
  - Resolves: RHEL-16045, Support partial SMT level through SYS FS smt/control files
  - Resolves: RHEL-11456, LPM hooks


author: Than Ngo <than@redhat.com> - 1.3.10-9
changelog:
  - Resolves: RHEL-20350, getting larger Negative value while running rtas_dbg -l
  - Resolves: RHEL-19076, installation fails if nsid of nvme device is greater than 10
  - Resolves: RHEL-11456, add new /etc/drmgr.d/pmig hierarchy


author: Than Ngo <than@redhat.com> - 1.3.10-11
changelog:
  - Resolves: RHEL-23620, nvram help page and man page are not in sync
  - Resolves: RHEL-23619, segault when running nvram --nvram-size 268435456
  - Resolves: RHEL-23624, segault when running nvram --print-config


author: Than Ngo <than@redhat.com> - 1.3.13-1
changelog:
  - Resolves: RHEL-30880, multipath - drmgr support
  - Resolces: RHEL-61089, lparstat -E Fails to Display Correct Values for %Busy and %Idle States


author: Than Ngo <than@redhat.com> - 1.3.13-2
changelog:
  - Resolves: RHEL-80729, drmgr: return correct value
  - Resolves: RHEL-80277, lparstat: print memory mode correctly


author: Than Ngo <than@redhat.com> - 2.7.9-5
changelog:
  - man and help of diag_nvme are not in sync
  - compiler warnings
  - diag_nvme: call_home command fails on nvmf drive
  - rtas_errd: Fix core dump with large filename passed to -f option
  Resolves: RHEL-55398


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Brian C. Lane <bcl@redhat.com> - 3.32.15-1
changelog:
  - workflows: run tests using only python 3.9 (bcl)
    Related: RHEL-75659
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-75659
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-75659


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-4
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143117
  Resolves: RHEL-143174
  Resolves: RHEL-144897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-5
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143117, RHEL-143174, RHEL-144897


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.25-8
changelog:
  - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+
  Resolves: RHEL-191730


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113677
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113681


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 21.3.1-2
changelog:
  - Bump epoch for the virtual pip Provide, for this package to take precedence over python3.14-pip
  Resolves: RHEL-178095


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Simon Pichugin <spichugi@redhat.com> - 0.6.3-1
changelog:
  - Update to 0.6.3
  - Update License to BSD-2-Clause to match upstream SPDX identifier
  - Added nesting depth limit to ASN.1 decoder (CVE-2026-30922)
  - Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490)
  - Resolves: RHEL-170862


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 8.0-1
changelog:
  - Update to 8.0
  - Resolves: RHEL-155709 Upgrade python-qrcode in RHEL 9 with the version
    from RHEL 10


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Marek Blaha <mblaha@redhat.com> - 0.7.24-5
changelog:
  - Backport "choice rules: also do solver_choicerulecheck for package downgrades"
    Resolves: RHEL-141449


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Petr Menšík <pemensik@redhat.com> - 1.24.2-2
changelog:
  - Switch TLS configuration to follow TLS sockets by crypto-policy again
    (RHEL-147860)
  - Change the default of tls-use-system-policy-versions at build-time


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-6
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143110
  Resolves: RHEL-143170
  Resolves: RHEL-144894


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-7
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143110, RHEL-143170, RHEL-144894


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.3.1-1
changelog:
  - Initial package
  - Fedora contributions by:
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Jon Ciesla <limburgher@gmail.com>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Kevin Kofler <Kevin@tigcc.ticalc.org>
      Luke Macken <lmacken@redhat.com>
      Lumir Balhar <lbalhar@redhat.com>
      Marcel Plch <mplch@redhat.com>
      Matej Stuchlik <mstuchli@redhat.com>
      Michal Cyprian <m.cyprian@gmail.com>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Pádraig Brady <P@draigBrady.com>
      Peter Halliday <hoangelos@fedoraproject.org>
      Petr Viktorin <pviktori@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Tim Flink <tflink@fedoraproject.org>
      Tomáš Hrnčiar <thrnciar@redhat.com>
      Tomas Orsava <torsava@redhat.com>
      Toshio Kuratomi <toshio@fedoraproject.org>
      Ville Skyttä <ville.skytta@iki.fi>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 65.5.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.12-6
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-140567, RHEL-139400, RHEL-142917


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-5
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143112
  Resolves: RHEL-143172
  Resolves: RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-6
changelog:
  - Rebuilding previous fixes for different build target
  Related: RHEL-143112, RHEL-143172, RHEL-144895


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.13-1
changelog:
  - Update to 3.12.13
  - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672
  Related: RHEL-168159, RHEL-167917


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.13-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224
  Resolves: RHEL-168159, RHEL-167917


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.18-1
changelog:
  - Initial package
  - Fedora contributions by
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-2
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-142909, RHEL-139399, RHEL-142922


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.19-3
changelog:
  - Security fix for CVE-2026-44431
  - Security fix for CVE-2026-44432
  Resolves: RHEL-184901, RHEL-185126


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367
  Resolves: RHEL-144896, RHEL-143115, RHEL-143173


author: Karolina Surma <ksurma@redhat.com> - 3.14.4-1
changelog:
  - Update to Python 3.14.4
  - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865
  Related: RHEL-167918, RHEL-168160


author: Charalampos Stratakis <cstratak@redhat.com> - 3.14.4-2
changelog:
  - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100
  Resolves: RHEL-167918, RHEL-168160


author: Miro Hrončok <mhroncok@redhat.com> - 3.14.5~rc1-1
changelog:
  - Update to 3.14.5rc1
  - Move back to the generational from the incremental garbage collector
  - Security fix for CVE-2026-6019
  Resolves: RHEL-180642


author: Python Maint <python-maint@redhat.com> - 1.1.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haïkel Guémar <hguemar@fedoraproject.org>
        Iryna Shcherbina <ishcherb@redhat.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumír Balhar <lbalhar@redhat.com>
        Michal Schorm <mschorm@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 5.0.2-5
changelog:
  - Initial package
  Fedora contributions by:
      Adam Williamson <awilliam@redhat.com>
      Alexander Bokovoy <abokovoy@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Dan Callaghan <dcallagh@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenko@redhat.com>
      Iryna Shcherbina <ishcherb@redhat.com>
      Jakub Dorňák <jdornak@redhat.com>
      James Bowes <jbowes@redhat.com> 1.0-1
      Jan Kaluza <jkaluza@redhat.com>
      Jesse Keating <jkeating@fedoraproject.org>
      Joe Orton <jorton@redhat.com>
      Josh Kayse <joshkayse@fedoraproject.org>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Luboš Uhliarik <luhliari@redhat.com>
      Luke Macken <lmacken@redhat.com>
      Matthias Runge <mrunge@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Orion Poplawski <orion@cora.nwra.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Richard W.M. Jones <rjones@redhat.com>
      Ricky Zhou <ricky@fedoraproject.org>
      Tomas Orsava <torsava@redhat.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Stellard <tstellar@redhat.com>
      Troy Dawson <tdawson@redhat.com>
      Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.3.4-1
changelog:
  - Initial import
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lukáš Zaoral <lzaoral@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Songsong Zhang <u2fsdgvkx1@gmail.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Tulio Magno Quites Machado Filho <tuliom@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Lukáš Zachar <lzachar@redhat.com> - 25.2-5
changelog:
  - Fix gating plan
  - removed unnecessary older VERSION= tests
  - removed bootstrap test
  - fix pip_install_upgrade to run pip-3.14
  - fix bash completion + remove unused metadata file


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-29
changelog:
  - Initial package
  Fedora contributions by:
      Dennis Gilmore <dennis@ausil.us>
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      Christian Heimes <cheimes@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jesse Keating <jkeating@fedoraproject.org>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Patrik Kopkan <pkopkan@redhat.com>
      Rob Crittenden <rcritten@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Stephen Gallagher <sgallagh@redhat.com>
      Thomas Spura <tomspur@fedoraproject.org>
      Tom Callaway <spot@fedoraproject.org>
      Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11^20251221git9d7c400-1
changelog:
  - Update to the latest and last upstream commit
  - The project won't have any new releases
  - Use modern pyproject macros
  Related: RHEL-120845


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.16.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Abdurachmanov <davidlt@rivosinc.com>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.6.1-1
changelog:
  - Update to 2.6.1
  - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37
  - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.6.3-2
changelog:
  - Security fix for CVE-2026-44431 and CVE-2026-44432
  - Resolves: RHEL-184902
  - Resolves: RHEL-185127


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.5.0
changelog:
  - Set version to 102.5.0
  - Bug 1972070 - RFE: Add Windows Server 2022 version support for mingw-qemu-ga


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.6.0
changelog:
  - Set version to 102.6.0
  - BZ#1978859 - The qemu-ga-win build version in MSI is different between checking inside guest and qga command
  - BZ#1981302 - QGA version can't be upgrade directly without uninstalling old version


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.9.0
changelog:
  - Set version to 102.9.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Use mingw-glib2-2.70.1


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.10.0
changelog:
  - Set version to 102.10.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Dynamically link mingw-glib2 library


author: Konstantin Kostiuk <kkostiuk@redhat.com> 103.0.0
changelog:
  - Set version to 103.0.0
  - BZ#1992643 - Add mingw-qemu-ga-win package to CentOS stream
  - Rebase to qemu-6.2.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 104.0.0
changelog:
  - Set version to 104.0.0
  - BZ#2078384 - Rebase QEMU Guest Agent Windows to 7.0.0
  - Rebase to qemu-7.0.0


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-9
changelog:
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
  - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
  - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
  - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
  - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
  - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
  - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
  - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
  - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
  - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
  - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
  - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
  - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
  - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
  - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
  - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
  - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
  - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
  - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
  - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
  - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
  - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
  - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
  - Resolves: RHEL-131144
    (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-10
changelog:
  - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
  - Resolves: RHEL-132193
    ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-11
changelog:
  - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
  - Resolves: RHEL-138240
    (QEMU crashes when stopping source VM during live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-12
changelog:
  - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
  - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
  - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
  - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
  - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
  - kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
  - Resolves: RHEL-132989
    (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
  - Resolves: RHEL-140187
    (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
  - Resolves: RHEL-139057
    ([qemu, rhel-9] increase default TSEG size)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-13
changelog:
  - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
  - Resolves: RHEL-147422
    (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
  - Resolves: RHEL-130620
    (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-14
changelog:
  - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
  - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
  - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
  - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
  - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
  - Resolves: RHEL-67115
    ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-15
changelog:
  - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
  - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
  - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
  - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
  - Resolves: RHEL-149396
    (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-16
changelog:
  - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
  - Resolves: RHEL-151679
    ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-17
changelog:
  - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
  - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
  - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
  - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
  - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
  - Resolves: RHEL-155947
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
  - Resolves: RHEL-155948
    (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
  - Resolves: RHEL-154174
    (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-18
changelog:
  - kvm-pc-bios-s390-ccw-Always-reset-virtio-device-on-faile.patch [RHEL-156851]
  - kvm-block-enable-stats-intervals-for-storage-devices.patch [RHEL-135379]
  - kvm-qdev-Free-property-array-on-release.patch [RHEL-135379]
  - Resolves: RHEL-156851
    (RHEL9.8 - [KVM] Guest configured with different boot order, crashed during "virsh reset".)
  - Resolves: RHEL-135379
    (Add stats-intervals support to --blockdev [rhel9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-19
changelog:
  - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164535]
  - Resolves: RHEL-164535
    (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.9])


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-20
changelog:
  - kvm-vmstate-Introduce-VMSTATE_VARRAY_INT32_ALLOC.patch [RHEL-174859]
  - kvm-target-arm-Move-compare_u64-to-helper.c.patch [RHEL-174859]
  - kvm-target-arm-Convert-init_cpreg_list-to-g_hash_table_f.patch [RHEL-174859]
  - kvm-target-arm-machine-Use-VMSTATE_VARRAY_INT32_ALLOC-fo.patch [RHEL-174859]
  - kvm-target-arm-kvm-Export-kvm_print_register_name.patch [RHEL-174859]
  - kvm-target-arm-kvm-Tweak-print_register_name-for-arm64-s.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-cpreg-names-which-do-not-ma.patch [RHEL-174859]
  - kvm-target-arm-machine-Trace-all-register-mismatches.patch [RHEL-174859]
  - kvm-target-arm-machine-Fix-detection-of-unknown-incoming.patch [RHEL-174859]
  - kvm-target-arm-cpu-Introduce-the-infrastructure-for-cpre.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceNotOnBothEnds-mig.patch [RHEL-174859]
  - kvm-target-arm-machine-Handle-ToleranceOnlySrcTestValue-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Mitigate-migration-failures-due-to-.patch [RHEL-174859]
  - kvm-target-arm-cpu64-Define-cpreg-migration-tolerance-fo.patch [RHEL-174859]
  - kvm-target-arm-helper-Define-cpreg-migration-tolerance-f.patch [RHEL-174859]
  - kvm-Revert-target-arm-Reinstate-bogus-AArch32-DBGDTRTX-r.patch [RHEL-174859]
  - Resolves: RHEL-174859
    ([rhel9] Backport qemu cross-kernel migration mitigation series)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-21
changelog:
  - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-158243]
  - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-158243]
  - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-158243]
  - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-177969]
  - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-177969]
  - Resolves: RHEL-158243
    (live migration failed the VM just register key only [rhel-9.9])
  - Resolves: RHEL-177969
    (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests)


author: Jon Maloy <jmaloy@redhat.com> - 10.1.0-22
changelog:
  - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184528]
  - Resolves: RHEL-184528
    (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.9])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-104999
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105004


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


