# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-653.el9]
changelog:
  - sfc: fix potential memory leak in efx_mae_process_mport() (Izabela Bakollari) [RHEL-97678]
  - sfc: replace min/max nesting with clamp() (Izabela Bakollari) [RHEL-97678]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Izabela Bakollari) [RHEL-97678]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Izabela Bakollari) [RHEL-97678]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124606] {CVE-2025-39806}
  - ACPI: CPPC: Perform fast check switch only for online CPUs (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Check revision of MRRM table (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Use platform device for devres-related actions (Mark Langsdorf) [RHEL-114091]
  - ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids() (Mark Langsdorf) [RHEL-114091]
  - ACPI: pfr_update: Fix the driver update version check (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Relax sanity check of the ECDT ID string (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: perflib: Move problematic pr->performance check (Mark Langsdorf) [RHEL-114091]
  - ACPI: Fix typos (Mark Langsdorf) [RHEL-114091]
  - ACPI/PCI: Remove space before newline (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: throttling: Remove space before newline (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: perflib: Fix initial _PPC limit application (Mark Langsdorf) [RHEL-114091]
  - ACPI: TAD: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Update debug message in fan_get_state_acpi4() (Mark Langsdorf) [RHEL-114091]
  - ACPI: PRM: Reduce unnecessary printing to avoid user confusion (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Replace sprintf() with sysfs_emit() (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: fix acpi_object initialization (Mark Langsdorf) [RHEL-114091]
  - ACPI: LPSS: Remove AudioDSP related ID (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Replace sprintf()/scnprintf() with sysfs_emit() in show() functions (Mark Langsdorf) [RHEL-114091]
  - ACPI: PM: Set .detach in acpi_general_pm_domain definition (Mark Langsdorf) [RHEL-114091]
  - ACPI: pfr_update: Add more debug information when firmware update failed (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Prefer to use octal permission (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Use str_enabled_disabled() helper (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Remove unused header (Mark Langsdorf) [RHEL-114091]
  - ACPI: proc: Use correct format specifier and drop casting (Mark Langsdorf) [RHEL-114091]
  - ACPI: wakeup: Drop unneeded casting for sleep_state (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Decrease `AcpiExTracePoint` verbosity (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Refuse to evaluate a method if arguments are missing (Mark Langsdorf) [RHEL-114091]
  - ACPI: Enable CONFIG_ACPI_DEBUG by default (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: Use IRQ override on MACHENIKE 16P (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Ignore ECDT tables with an invalid ID string (Mark Langsdorf) [RHEL-114091]
  - ACPI: CPPC: Fix NULL pointer dereference when nosmp is used (Mark Langsdorf) [RHEL-114091]
  - ACPI: PAD: Update arguments of mwait_idle_with_hints() (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Switch back to using strncpy() in acpi_ut_safe_strncpy() (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Silence error code static checker warning (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Fix default max memory region (Mark Langsdorf) [RHEL-114091]
  - ACPI: irq: Introduce acpi_get_gsi_dispatcher() (Mark Langsdorf) [RHEL-114091]
  - ACPI: bus: Bail out if acpi_kobj registration fails (Mark Langsdorf) [RHEL-114091]
  - ACPI: thermal: Execute _SCP before reading trip points (Mark Langsdorf) [RHEL-114091]
  - ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions" (Mark Langsdorf) [RHEL-114091]
  - ACPI: tables: Improve logging around acpi_initialize_tables() (Mark Langsdorf) [RHEL-114091]
  - ACPI: VIOT: Remove (explicitly) unused header (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Add /sys files to describe memory ranges (Mark Langsdorf) [RHEL-114091]
  - ACPI: MRRM: Minimal parse of ACPI MRRM table (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Update copyright year (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Replace strncpy() with memcpy() (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Utilities: Fix spelling mistake "Incremement" -> "Increment" (Mark Langsdorf) [RHEL-114091]
  - ACPICA: utilities: Fix overflow check in vsnprintf() (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list (Mark Langsdorf) [RHEL-114091]
  - ACPI: PPTT: Fix processor subtable walk (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Apply pack(1) to union aml_resource (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Add support for printing AML arguments when trace point enabled (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Remove redundant pr->power.count assignment (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Set pr->flags.power unconditionally (Mark Langsdorf) [RHEL-114091]
  - ACPI: battery: Round capacity percengate to closest integer (Mark Langsdorf) [RHEL-114091]
  - ACPICA: exserial: don't forget to handle FFixedHW opregions for reading (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Remove obsolete comment (Mark Langsdorf) [RHEL-114091]
  - ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls (Mark Langsdorf) [RHEL-114091]
  - ACPI: EC: Set ec_no_wakeup for Lenovo Go S (Mark Langsdorf) [RHEL-114091]
  - ACPI: button: Only send `KEY_POWER` for `ACPI_BUTTON_NOTIFY_STATUS` (Mark Langsdorf) [RHEL-114091]
  - ACPI: video: Handle fetching EDID as ACPI_TYPE_PACKAGE (Mark Langsdorf) [RHEL-114091]
  - ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid (Mark Langsdorf) [RHEL-114091]
  - ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP (Mark Langsdorf) [RHEL-114091]
  - ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list (Mark Langsdorf) [RHEL-114091]
  - ACPI: NUMA: Use str_enabled_disabled() helper function (Mark Langsdorf) [RHEL-114091]
  - ACPICA: Fix warnings from PR #295 merge (Mark Langsdorf) [RHEL-114091]
  - ACPICA: fix acpi parse and parseext cache leaks (Mark Langsdorf) [RHEL-114091]
  - ACPICA: fix acpi operand cache leak in dswstate.c (Mark Langsdorf) [RHEL-114091]
  - hwmon: (acpi_power_meter) Replace the deprecated hwmon_device_register (Mark Langsdorf) [RHEL-114091]
  - ACPI: button: Install notifier for system events as well (Mark Langsdorf) [RHEL-114091]
  - acpi: nfit: fix narrowing conversion in acpi_nfit_ctl (Mark Langsdorf) [RHEL-114091]
  - hwmon: (acpi_power_meter) Fix the fake power alarm reporting (Mark Langsdorf) [RHEL-114091]
  - ACPI: fan: Add fan speed reporting for fans with only _FST (Mark Langsdorf) [RHEL-114091]
  - ACPI: HED: Always initialize before evged (Mark Langsdorf) [RHEL-114091]
  - ACPI: video: Use str_yes_no() helper in acpi_video_bus_add() (Mark Langsdorf) [RHEL-114091]
  - ACPI: power: Use str_on_off() helper function (Mark Langsdorf) [RHEL-114091]
  - ACPI: thermal: Fix stale comment regarding trip points (Mark Langsdorf) [RHEL-114091]
  - ACPI: tables: Use string choice helpers (Mark Langsdorf) [RHEL-114091]
  - x86/amd: Use heterogeneous core topology for identifying boost numerator (Mark Langsdorf) [RHEL-114091]
  - ACPI: resource: fix a typo for MECHREVO in irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82671]
  - genirq: Unexport nr_irqs (Mark Langsdorf) [RHEL-82671]
  - genirq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - fs/procfs: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - xen/events: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: ucc_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: cpm_uart: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: amba-pl011: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: amba-pl010: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: 8250: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - serial: core: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - scsi: aha152x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - net: 3com: 3c59x: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - hpet: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - s390/irq: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - powerpc/cell: Switch to irq_get_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - x86/aperfmperf: Fix deadlock on cpu_hotplug_lock (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement acpi_device_hid when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement for_each_acpi_consumer_dev when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: header: implement acpi_device_handle when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: implement for_each_acpi_dev_match when !ACPI (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: change the prototype for acpi_get_physical_device_location (Mark Langsdorf) [RHEL-82671]
  - ACPI: GTDT: Relax sanity checking on Platform Timers array count (Mark Langsdorf) [RHEL-82671]
  - ACPI: PRM: Remove unnecessary strict handler address checks (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: IRQ override for Eluktronics MECH-17 (Mark Langsdorf) [RHEL-82671]
  - ACPI: property: Fix return value for nval == 0 in acpi_data_prop_read() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add skip i2c clients quirk for Vexia EDU ATLA 10 tablet 5V (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix a check for the return value of read_domain_devices(). (Mark Langsdorf) [RHEL-82671]
  - APEI: GHES: Have GHES honor the panic= setting (Mark Langsdorf) [RHEL-82671]
  - mm/early_ioremap: add null pointer checks to prevent NULL-pointer dereference (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Fix random crashes due to bad kfree() (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix update the power trip points on failure (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix uninitialized variables (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: acpi_dev_irq_override(): Check DMI match last (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add TongFang GM5HG0A to irq1_edge_low_force_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus Vivobook X1504VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: property: Consider data nodes as being available (Mark Langsdorf) [RHEL-82671]
  - ACPI: fan: cleanup resources in the error path of .probe() (Mark Langsdorf) [RHEL-82671]
  - ACPICA: events/evxfregn: don't release the ContextMutex that was never acquired (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Rename extensions to hook in messages (Mark Langsdorf) [RHEL-82671]
  - ACPI: OSL: Use usleep_range() in acpi_os_sleep() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Fix memory resource type union access (Mark Langsdorf) [RHEL-82671]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP09A (Mark Langsdorf) [RHEL-82671]
  - ACPI: introduce acpi_arch_init() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Clean up Asus entries in acpi_quirk_skip_dmi_ids[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add skip i2c clients quirk for Acer Iconia One 8 A1-840 (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor_idle: Use acpi_idle_play_dead() for all C-states (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for Apple MacbookPro11,2 and Air7,2 (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Fix _CPC register setting issue (Mark Langsdorf) [RHEL-82671]
  - hwmon: (acpi_power_meter) Fix fail to load module on platform without _PMD method (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Add adev NULL check to acpi_quirk_skip_serdev_enumeration() (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Make UART skip quirks work on PCI UARTs without an UID (Mark Langsdorf) [RHEL-82671]
  - acpi/arm64: remove unnecessary cast (Mark Langsdorf) [RHEL-82671]
  - acpi/arm64: Adjust error handling procedure in gtdt_parse_timer_block() (Mark Langsdorf) [RHEL-82671]
  - ACPI: allow building without CONFIG_HAS_IOPORT (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor_perflib: extend X86 dependency (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBSHC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: power: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: pci_root: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: pci_link: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: event: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: APD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: thermal: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Check for error code from devm_mutex_init() call (Mark Langsdorf) [RHEL-82671]
  - ACPI: GTDT: Tighten the check for the array of platform timer structures (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Make rmw_lock a raw_spin_lock (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: make EC support compile-time conditional (Mark Langsdorf) [RHEL-82671]
  - redhat/configs: enable CONFIG_ACPI_EC (Mark Langsdorf) [RHEL-82671]
  - ACPI: pfr_telemetry: remove redundant error check on ret (Mark Langsdorf) [RHEL-82671]
  - cpufreq: CPPC: fix perf_to_khz/khz_to_perf conversion exception (Mark Langsdorf) [RHEL-82671]
  - ACPI: button: Add DMI quirk for Samsung Galaxy Book2 to fix initial lid detection issue (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add LG 16T90SP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - x86/acpi: Switch to irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - genirq: Introduce irq_get_nr_irqs() and irq_set_nr_irqs() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Register power supply with power_supply_register() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Fold Asus ExpertBook B1402C* and B1502C* DMI quirks together (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Make Asus ExpertBook B2502 matches cover more models (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Make Asus ExpertBook B2402 matches cover more models (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use DEFINE_SIMPLE_DEV_PM_OPS (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: initialize mutexes through devm_ APIs (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: allocate driver data through devm_ APIs (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: check result of register_pm_notifier() (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Fix possible crash when unregistering a battery hook (Mark Langsdorf) [RHEL-82671]
  - power: supply: core: add wakeup source inhibit by power_supply_config (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Simplify battery hook locking (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 5480 AIO (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[] (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Loosen the Asus E1404GAB DMI match to also cover the E1404GA (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Remove duplicate Asus E1504GAB IRQ override (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Drop check for non zero perf ratio (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Add support for setting EPP register in FFH (Mark Langsdorf) [RHEL-82671]
  - ACPI: PM: Quirk ASUS ROG M16 to default to S3 sleep (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18 (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use driver core managed async probing (Mark Langsdorf) [RHEL-82671]
  - ACPI: button: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: Define and use symbols for device and class name lengths (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Go E1404GAB (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Fix MASK_VAL() usage (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow for more flexibility in _DSM args (Mark Langsdorf) [RHEL-82671]
  - ACPICA: iasl: handle empty connection_node (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Avoid warning for Dump Functions (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Add support for Windows 11 22H2 _OSI string (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Update integer-to-hex-string conversions (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Add support for supressing leading zeros in hex strings (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow for supressing leading zeros when using acpi_ex_convert_to_ascii() (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Fix memory leak if acpi_ps_get_next_field() fails (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow PCC Data Type in MCTP resource. (Mark Langsdorf) [RHEL-82671]
  - ACPICA: executer/exsystem: Don't nag user about every Stall() violating the spec (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Implement ACPI_WARNING_ONCE and ACPI_ERROR_ONCE (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Implement the Dword_PCC Resource Descriptor Macro (Mark Langsdorf) [RHEL-82671]
  - ACPICA: haiku: Fix invalid value used for semaphores (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Allow setting waking vector on reduced hardware platforms (Mark Langsdorf) [RHEL-82671]
  - ACPICA: Detect FACS in reduced hardware build (Mark Langsdorf) [RHEL-82671]
  - ACPI: utils: Add rev/func to message when acpi_evaluate_dsm() fails (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Make Lenovo Yoga Tab 3 X90F DMI match less strict (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: Refactor dependency creation (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for Apple MacbookPro9,2 (Mark Langsdorf) [RHEL-82671]
  - ACPI: acpi_processor: Use strscpy instead() of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: AC: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: PAD: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Do IRQ override on MECHREV GM7XG0M (Mark Langsdorf) [RHEL-82671]
  - ACPI: APD: Add AMDI0015 as platform device (Mark Langsdorf) [RHEL-82671]
  - ACPI/IORT: Add PMCG platform information for HiSilicon HIP10/11 (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Add Dell UART backlight controller detection (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Reduce the log level of a per-CPU message about idle states (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: remove return value of acpi_device_setup_files() (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: manage sysfs attributes through device core (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: manage attributes as attribute_group (Mark Langsdorf) [RHEL-82671]
  - ACPI: sysfs: evaluate _STR on each sysfs access (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Remove redundant NULL initalizations (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: EC: Do not release locks during operation region accesses (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MJ (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: force native for some T2 macbooks (Mark Langsdorf) [RHEL-82671]
  - ACPI: video: Use strscpy() instead of strcpy() (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: Replace ternary operator with umax() (Mark Langsdorf) [RHEL-82671]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MU (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Constify struct pmic_table (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: Add support for charge limiting state (Mark Langsdorf) [RHEL-82671]
  - ACPI: bus: Indicate support for battery charge limiting thru _OSC (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: add devm_battery_hook_register() (Mark Langsdorf) [RHEL-82671]
  - ACPI: Add post_eject to struct acpi_scan_handler for cpu hotplug (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Register deferred CPUs from acpi_processor_get_info() (Mark Langsdorf) [RHEL-82671]
  - ACPI: scan: switch to flags for acpi_scan_check_and_detach() (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Add acpi_get_processor_handle() helper (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Move checks and availability of acpi_processor earlier (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Drop duplicated check on _STA (enabled + present) (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Simplify initial onlining to use same path for cold and hotplug (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Fix memory leaks in error paths of processor_add() (Mark Langsdorf) [RHEL-82671]
  - ACPI / amba: Drop unnecessary check for registered amba_dummy_clk (Mark Langsdorf) [RHEL-82671]
  - ACPI: processor: Downgrade Intel _OSC and _PDC messages to debug (Mark Langsdorf) [RHEL-82671]
  - ACPI: NFIT: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: manage alarm sysfs attribute through psy core (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: use sysfs_emit over sprintf (Mark Langsdorf) [RHEL-82671]
  - ACPI: SBS: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: create alarm sysfs attribute atomically (Mark Langsdorf) [RHEL-82671]
  - ACPI: AC: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: battery: constify powersupply properties (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Replace open coded be16_to_cpu() (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Convert pr_*() to dev_*() printing macros (Mark Langsdorf) [RHEL-82671]
  - ACPI: PMIC: Use sizeof() instead of hard coded value (Mark Langsdorf) [RHEL-82671]
  - ACPI: CPPC: add sysfs entry for guaranteed performance (Mark Langsdorf) [RHEL-82671]
  - ACPI: HMAT: Use ACCESS_COORDINATE_CPU when appropriate (Mark Langsdorf) [RHEL-82671]
  - ACPI: acpi_pad: Still evaluate _OST when _PUR evaluation fails (Mark Langsdorf) [RHEL-82671]
  - ACPI: x86: Switch to new Intel CPU model defines (Mark Langsdorf) [RHEL-82671]
  - ACPI: arm64: Sort entries alphabetically (Mark Langsdorf) [RHEL-82671]
  - ACPI: LPSS: Switch to new Intel CPU model defines (Mark Langsdorf) [RHEL-82671]
  - ACPI: fan: Add hwmon support (Mark Langsdorf) [RHEL-82671]
  - PM: sleep: core: Fix runtime PM enabling in device_resume_early() (Mark Langsdorf) [RHEL-109251]
  - drm/amd/pm: fix missing device_attr cleanup in amdgpu_pm_sysfs_init() (Mark Langsdorf) [RHEL-81536]
  - driver core: Drop unneeded 'extern' keyword in fwnode.h (Mark Langsdorf) [RHEL-109251]
  - ucsi_ccg: Disable async suspend in ucsi_ccg_probe() (Mark Langsdorf) [RHEL-109251]
  - soundwire: intel_auxdevice: Fix system suspend/resume handling (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: annotate RCU list iterations (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Avoid lockdep warnings with nested regmap-irq chips (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Free the regmap-irq mutex (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rearrange suspend/resume error handling in the core (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: fix OF node leak (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Take active children into account in pm_runtime_get_if_in_use() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Update power.completion for all devices on errors (Mark Langsdorf) [RHEL-109251]
  - regmap: get rid of redundant debugfs_file_{get,put}() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Add strict_midlayer flag to struct dev_pm_info (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Introduce __rpm_get_driver_callback() (Mark Langsdorf) [RHEL-109251]
  - PM: Check power.needs_force_resume in pm_runtime_force_suspend() (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit() (Mark Langsdorf) [RHEL-109251]
  - PM: Make pm_runtime_force_resume() work with DPM_FLAG_SMART_SUSPEND (Mark Langsdorf) [RHEL-109251]
  - PM: Move two sleep-related functions under CONFIG_PM_SLEEP (Mark Langsdorf) [RHEL-109251]
  - PM: Use true/false as power.needs_force_resume values (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make async suspend handle suppliers like parents (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make async resume handle consumers like children (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Drop superfluous might_sleep() calls (Mark Langsdorf) [RHEL-109251]
  - regmap: fix potential memory leak of regmap_bus (Mark Langsdorf) [RHEL-109251]
  - driver core: Add device_link_test() for testing device link flags (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Quiet probe failures (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Suppress bind attributes (Mark Langsdorf) [RHEL-109251]
  - regmap: kunit: Constify regmap_range_cfg array (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Add locking to dpm_async_resume_children() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix power.is_suspended cleanup for direct-complete devices (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix list splicing in device suspend error paths (Mark Langsdorf) [RHEL-109251]
  - regmap-irq: Use dedicated interrupt wake setters (Mark Langsdorf) [RHEL-109251]
  - regmap: Move selecting for REGMAP_MDIO and REGMAP_IRQ (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Introduce pm_sleep_transition_in_progress() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Print PM debug messages during hibernation (Mark Langsdorf) [RHEL-109251]
  - PM: sysfs: Move debug runtime PM attributes to runtime_attrs[] (Mark Langsdorf) [RHEL-109251]
  - PM: wakeup: Add missing wakeup source attribute relax_count (Mark Langsdorf) [RHEL-109251]
  - firmware_loader: use SHA-256 library API instead of crypto_shash API (Mark Langsdorf) [RHEL-109251]
  - regcache: Use sort()'s default swap() implementation (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Add new devm functions (Mark Langsdorf) [RHEL-109251]
  - devres: Add devm_is_action_added() helper (Mark Langsdorf) [RHEL-109251]
  - devres: Move devm_*_action*() APIs to devres.h (Mark Langsdorf) [RHEL-109251]
  - devres: rename the first parameter of devm_add_action(_or_reset) (Mark Langsdorf) [RHEL-109251]
  - devres: Pass unique name of the resource to devm_add_action_or_reset() (Mark Langsdorf) [RHEL-109251]
  - PM: wakeup: Do not expose 4 device wakeup source APIs (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: Fix IS_ERR() vs NULL mixup in __devm_auxiliary_device_create() (Mark Langsdorf) [RHEL-109251]
  - property: Add functions to iterate named child (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Make suspend of devices more asynchronous (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Suspend async parents after suspending children (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Resume children after resuming the parent (Mark Langsdorf) [RHEL-109251]
  - software node: Correct a OOB check in software_node_get_reference_args() (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: Avoid overhead from for_each_present_section_nr() (Mark Langsdorf) [RHEL-109251]
  - drivers/base: Extend documentation with preferred way to use auxbus (Mark Langsdorf) [RHEL-109251]
  - devres: simplify devm_kstrdup() using devm_kmemdup() (Mark Langsdorf) [RHEL-109251]
  - platform: replace magic number with macro PLATFORM_DEVID_NONE (Mark Langsdorf) [RHEL-109251]
  - component: do not try to unbind unbound components (Mark Langsdorf) [RHEL-109251]
  - driver core: fix potential NULL pointer dereference in dev_uevent() (Mark Langsdorf) [RHEL-109251]
  - driver core: introduce device_set_driver() helper (Mark Langsdorf) [RHEL-109251]
  - Revert "drivers: core: synchronize really_probe() and dev_uevent()" (Mark Langsdorf) [RHEL-109251]
  - driver core: auxiliary bus: add device creation helpers (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: Add sysfs groups after probing (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: improve add_boot_memory_block() (Mark Langsdorf) [RHEL-109251]
  - drivers/base/memory: simplify outputting of valid_zones_show() (Mark Langsdorf) [RHEL-109251]
  - arch_topology: Support SMT control for OF based system (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Fix handling devices with direct_complete set on errors (Mark Langsdorf) [RHEL-109251]
  - PM: clk: Remove unused pm_clk_remove() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: core: Fix indentation in dpm_wait_for_children() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Remove unused pm_generic_ wrappers (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Unify error handling during suspend and resume (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rearrange dpm_async_fn() and async state clearing (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Rename power.async_in_progress to power.work_in_progress (Mark Langsdorf) [RHEL-109251]
  - PM: core: Tweak pm_runtime_block_if_disabled() return value (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Update power.smart_suspend under PM spinlock (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Adjust check before setting power.must_resume (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Drop status check from pm_runtime_force_resume() (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Suppress sleeping parent warning in special case (Mark Langsdorf) [RHEL-109251]
  - PM: sleep: Avoid unnecessary checks in device_prepare_smart_suspend() (Mark Langsdorf) [RHEL-109251]
  - driver core: Introduce device_{add,remove}_of_node() (Mark Langsdorf) [RHEL-109251]
  - driver core: faux: only create the device if probe() succeeds (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: add function to query the bound status (Mark Langsdorf) [RHEL-109251]
  - PM: clk: remove unused of_pm_clk_add_clk() (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: Add debug message for unbind (Mark Langsdorf) [RHEL-109251]
  - drivers: base: devres: Fix find_group() documentation (Mark Langsdorf) [RHEL-109251]
  - drivers: base: devres: Allow to release group on device release (Mark Langsdorf) [RHEL-109251]
  - devres: Introduce devm_kmemdup_array() (Mark Langsdorf) [RHEL-109251]
  - driver core: Split devres APIs to device/devres.h (Mark Langsdorf) [RHEL-109251]
  - driver core: location: Use str_yes_no() helper function (Mark Langsdorf) [RHEL-109251]
  - drivers: base: component: Allow more space for device name (Mark Langsdorf) [RHEL-109251]
  - drivers/base/bus.c: fix spelling of "subsystem" (Mark Langsdorf) [RHEL-109251]
  - driver core: class: Remove needless return in void API class_remove_file() (Mark Langsdorf) [RHEL-109251]
  - err.h: move IOMEM_ERR_PTR() to err.h (Mark Langsdorf) [RHEL-109251]
  - PM: runtime: Switch to use hrtimer_setup() (Mark Langsdorf) [RHEL-109251]
  - regmap: irq: Use one way of setting all bits in the register (Mark Langsdorf) [RHEL-109251]
  - devtmpfs: replace ->mount with ->get_tree in public instance (Mark Langsdorf) [RHEL-109251]
  - regmap: Reorder 'struct regmap' (Mark Langsdorf) [RHEL-109251]
  - spi: use container_of_cont() for to_spi_device() (Mark Langsdorf) [RHEL-81536]
  - cpumask: align text in comment (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: Convert pm_runtime_blocked() to static inline (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Fix bit masking operation (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: Introduce pm_runtime_blocked() (Mark Langsdorf) [RHEL-81536]
  - PM: Block enabling of runtime PM during system suspend (Mark Langsdorf) [RHEL-81536]
  - PM: Rearrange documentation related to __pm_runtime_disable() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fix device leak in __fw_devlink_relax_cycles() (Mark Langsdorf) [RHEL-81536]
  - dio: Have dio_bus_match() callback take a const * (Mark Langsdorf) [RHEL-81536]
  - zorro: make match function take a const pointer (Mark Langsdorf) [RHEL-81536]
  - mfd: syscon: Use regmap max_register_is_0 as needed (Mark Langsdorf) [RHEL-81536]
  - driver core: add a faux bus for use when a simple device/bus is needed (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: core: Restrict power.set_active propagation (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: Add missing kfree() (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: core: Synchronize runtime PM status of parents and children (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: wakeirq: Introduce device-managed variant of dev_pm_set_wake_irq() (Mark Langsdorf) [RHEL-81536]
  - devcoredump: Define 'struct bin_attribute' through macro (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Allow configuring the DPM watchdog to warn earlier than panic (Mark Langsdorf) [RHEL-81536]
  - device property: Split property reading bool and presence test ops (Mark Langsdorf) [RHEL-81536]
  - devres: add devm_remove_action_nowarn() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: remove device_link argument from class_compat_[create|remove]_link (Mark Langsdorf) [RHEL-81536]
  - i2c: Remove I2C_COMPAT config symbol and related code (Mark Langsdorf) [RHEL-81536]
  - driver core: Move two simple APIs for finding child device to header (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce device_iter_t for device iterating APIs (Mark Langsdorf) [RHEL-81536]
  - driver core: Correct API device_for_each_child_reverse_from() prototype (Mark Langsdorf) [RHEL-81536]
  - driver core: Correct parameter check for API device_for_each_child_reverse_from() (Mark Langsdorf) [RHEL-81536]
  - driver core: Move true expression out of if condition in 3 device finding APIs (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Fix wild pointer dereferences in API class_dev_iter_next() (Mark Langsdorf) [RHEL-81536]
  - devcoredump: cleanup some comments (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce an device matching API device_match_type() (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove match_any() (Mark Langsdorf) [RHEL-81536]
  - driver core: Simplify API device_find_child_by_name() implementation (Mark Langsdorf) [RHEL-81536]
  - driver core: Constify API device_find_child() and adapt for various usages (Mark Langsdorf) [RHEL-81536]
  - driver core: have match() callback in struct bus_type take a const * (Mark Langsdorf) [RHEL-81536]
  - w1: Remove driver match function (Mark Langsdorf) [RHEL-81536]
  - kernel/range: Const-ify range_contains parameters (Mark Langsdorf) [RHEL-81536]
  - drivers: base: test: Add ...find_device_by...(... NULL) tests (Mark Langsdorf) [RHEL-81536]
  - drivers: base: test: Enable device model tests with KUNIT_ALL_TESTS (Mark Langsdorf) [RHEL-81536]
  - drivers: base: Don't match devices with NULL of_node/fwnode/etc (Mark Langsdorf) [RHEL-81536]
  - regmap: regmap_multi_reg_read(): make register list const (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: sysfs: don't include 'pm_wakeup.h' directly (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Update stale comment in device_resume() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: rbtree: use krealloc_array() to replace krealloc() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: mapple: use kmalloc_array() to replace kmalloc() (Mark Langsdorf) [RHEL-81536]
  - regmap: place foo / 8 and foo % 8 closer to each other (Mark Langsdorf) [RHEL-81536]
  - regmap: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: Use BITS_TO_BYTES() (Mark Langsdorf) [RHEL-81536]
  - regmap: detach regmap from dev on regmap_exit (Mark Langsdorf) [RHEL-81536]
  - regmap: Use correct format specifier for logging range errors (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Fix possible resource leak in fw_log_firmware_info() (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fw_devlink: Fix excess parameter description in docstring (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Correct WARN() message in APIs class_(for_each|find)_device() (Mark Langsdorf) [RHEL-81536]
  - cacheinfo: Use of_property_present() for non-boolean properties (Mark Langsdorf) [RHEL-81536]
  - drivers: core: fw_devlink: Make the error message a bit more useful (Mark Langsdorf) [RHEL-81536]
  - driver core: fw_devlink: Stop trying to optimize cycle detection logic (Mark Langsdorf) [RHEL-81536]
  - driver core: constify devlink class (Mark Langsdorf) [RHEL-81536]
  - driver core: Put device attribute @wakeup_last_time_ms and its show() together (Mark Langsdorf) [RHEL-81536]
  - cacheinfo: Don't opencode per_cpu_cacheinfo() (Mark Langsdorf) [RHEL-81536]
  - driver core: auxiliary bus: Spelling s/pecific/specific/ (Mark Langsdorf) [RHEL-81536]
  - regmap: irq: Set lockdep class for hierarchical IRQ domains (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: Provide lockdep (sub)class for maple tree's internal lock (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Fix repeated test param (Mark Langsdorf) [RHEL-81536]
  - Revert "driver core: Fix uevent_show() vs driver detach race" (Mark Langsdorf) [RHEL-81536]
  - drivers/base: Remove unused auxiliary_find_device (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Reorganize kerneldoc parameter names (Mark Langsdorf) [RHEL-81536]
  - PM: domains: Support required OPPs in dev_pm_domain_attach_list() (Mark Langsdorf) [RHEL-81536]
  - OPP: Rework _set_required_devs() to manage a single device per call (Mark Langsdorf) [RHEL-81536]
  - OPP: fix error code in dev_pm_opp_set_config() (Mark Langsdorf) [RHEL-81536]
  - PM: domains: Fix alloc/free in dev_pm_domain_attach|detach_list() (Mark Langsdorf) [RHEL-81536]
  - driver core: Add device probe log helper dev_warn_probe() (Mark Langsdorf) [RHEL-81536]
  - regmap: Specifically test writing 0 as a value to sparse caches (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: Consistently use memset32() in regmap_irq_thread() (Mark Langsdorf) [RHEL-81536]
  - driver core: attribute_container: Remove unused functions (Mark Langsdorf) [RHEL-81536]
  - driver core: Trivially simplify ((struct device_private *)curr)->device->p to @curr (Mark Langsdorf) [RHEL-81536]
  - devres: Correclty strip percpu address space of devm_free_percpu() argument (Mark Langsdorf) [RHEL-81536]
  - driver core: Make parameter check consistent for API cluster device_(for_each|find)_child() (Mark Langsdorf) [RHEL-81536]
  - platform: Make platform_bus_type constant (Mark Langsdorf) [RHEL-81536]
  - driver core: class: Check namespace relevant parameters in class_register() (Mark Langsdorf) [RHEL-81536]
  - driver:base:core: Adding a "Return:" line in comment for device_link_add() (Mark Langsdorf) [RHEL-81536]
  - drivers/base: Introduce device_match_t for device finding APIs (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Block path traversal (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Add coverage of spinlocked regmaps (Mark Langsdorf) [RHEL-81536]
  - regcache: use map->alloc_flags also for allocating cache (Mark Langsdorf) [RHEL-81536]
  - regmap: Use locking during kunit tests (Mark Langsdorf) [RHEL-81536]
  - regmap: Hold the regmap lock when allocating and freeing the cache (Mark Langsdorf) [RHEL-81536]
  - driver core: Use 2-argument strscpy() (Mark Langsdorf) [RHEL-81536]
  - driver core: Make use of returned value of dev_err_probe() (Mark Langsdorf) [RHEL-81536]
  - driver core: Use guards for simple mutex locks (Mark Langsdorf) [RHEL-81536]
  - driver core: Use kasprintf() instead of fixed buffer formatting (Mark Langsdorf) [RHEL-81536]
  - driver core: Sort headers (Mark Langsdorf) [RHEL-81536]
  - PM: domains: add device managed version of dev_pm_domain_attach|detach_list() (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix a potential null-ptr-deref in module_add_driver() (Mark Langsdorf) [RHEL-81536]
  - driver core: bus: Add simple error handling for buses_init() (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove unused parameter for virtual_device_parent() (Mark Langsdorf) [RHEL-81536]
  - driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix error handling in driver API device_rename() (Mark Langsdorf) [RHEL-81536]
  - driver core: Fix size calculation of symlink name for devlink_(add|remove)_symlinks() (Mark Langsdorf) [RHEL-81536]
  - drivers: cacheinfo: use __free attribute instead of of_node_put() (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: work around gcc-14.1 false-positive warning (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Add test cases for regmap_multi_reg_(read,write}() (Mark Langsdorf) [RHEL-81536]
  - regmap: Implement regmap_multi_reg_read() (Mark Langsdorf) [RHEL-81536]
  - driver core: module: make module_[add|remove]_driver take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: make driver_find_device() take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: make driver_[create|remove]_file take a const * (Mark Langsdorf) [RHEL-81536]
  - regmap-irq: handle const struct regmap_irq_sub_irq_map (Mark Langsdorf) [RHEL-81536]
  - devres: Correct code style for functions that return a pointer type (Mark Langsdorf) [RHEL-81536]
  - devres: Initialize an uninitialized struct member (Mark Langsdorf) [RHEL-81536]
  - devres: Fix devm_krealloc() wasting memory (Mark Langsdorf) [RHEL-81536]
  - cpumask: Add enabled cpumask for present CPUs that can be brought online (Mark Langsdorf) [RHEL-81536]
  - cpu: Do not warn on arch_register_cpu() returning -EPROBE_DEFER (Mark Langsdorf) [RHEL-81536]
  - regmap: add missing MODULE_DESCRIPTION() macros (Mark Langsdorf) [RHEL-81536]
  - driver core: make [device_]driver_attach take a const * (Mark Langsdorf) [RHEL-81536]
  - driver core: Make dev_err_probe() silent for -ENOMEM (Mark Langsdorf) [RHEL-81536]
  - drivers: arch_topology: use __free attribute instead of of_node_put() (Mark Langsdorf) [RHEL-81536]
  - drivers: arch_topology: Refactor do-while loops (Mark Langsdorf) [RHEL-81536]
  - regmap-i2c: add missing MODULE_DESCRIPTION() macro (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Use array_size() and sizeof(*ptr) consistently (Mark Langsdorf) [RHEL-81536]
  - regmap: cache: Use correct type of the rb_for_each() parameter (Mark Langsdorf) [RHEL-81536]
  - regmap: spi: Fix potential off-by-one when calculating reserved size (Mark Langsdorf) [RHEL-81536]
  - driver core: remove devm_device_add_groups() (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - regmap: kunit: Fix memory leaks in gen_regmap() and gen_raw_regmap() (Mark Langsdorf) [RHEL-81536]
  - regmap-i2c: Subtract reg size from max_write (Mark Langsdorf) [RHEL-81536]
  - driver core: Add device_show_string() helper for sysfs attributes (Mark Langsdorf) [RHEL-81536]
  - module: don't ignore sysfs_create_link() failures (Mark Langsdorf) [RHEL-81536]
  - regmap: spi: Add missing MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - regmap: Drop capitalisation in MODULE_DESCRIPTION() (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Take advantage of %ps to simplify debug output (Mark Langsdorf) [RHEL-81536]
  - driver core: Remove unused platform_notify, platform_notify_remove (Mark Langsdorf) [RHEL-81536]
  - driver core: Introduce device_link_wait_removal() (Mark Langsdorf) [RHEL-81536]
  - regmap: maple: Remove second semicolon (Mark Langsdorf) [RHEL-81536]
  - device: core: Log warning for devices pending deferred probe on timeout (Mark Langsdorf) [RHEL-81536]
  - driver: core: Use dev_* instead of pr_* so device metadata is added (Mark Langsdorf) [RHEL-81536]
  - driver: core: Log probe failure as error and with device metadata (Mark Langsdorf) [RHEL-81536]
  - driver core: Add FWLINK_FLAG_IGNORE to completely ignore a fwnode link (Mark Langsdorf) [RHEL-81536]
  - driver core: Adds flags param to fwnode_link_add() (Mark Langsdorf) [RHEL-81536]
  - driver core: Move fw_devlink stuff to where it belongs (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Suppress warning on FW_OPT_NO_WARN flag (Mark Langsdorf) [RHEL-81536]
  - PM: runtime: add tracepoint for runtime_status changes (Mark Langsdorf) [RHEL-81536]
  - regmap: rework ->max_register handling (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Call dpm_async_fn() directly in each suspend phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Move devices to new lists earlier in each suspend phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Move some assignments from under a lock (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Log errors right after running suspend callbacks (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Call dpm_save_failed_step() at most once per phase (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Define suspend_stats next to the code using it (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Use an array of step failure counters (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: stats: Use array of suspend step names (Mark Langsdorf) [RHEL-81536]
  - driver core: component: fix spellos (Mark Langsdorf) [RHEL-81536]
  - driver core: cpu: make cpu_subsys const (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Relocate two device PM core functions (Mark Langsdorf) [RHEL-81536]
  - PM: sleep: Simplify dpm_suspended_list walk in dpm_resume() (Mark Langsdorf) [RHEL-81536]
  - PM: QoS: Use kcalloc() instead of kzalloc() (Mark Langsdorf) [RHEL-81536]
  - class: fix use-after-free in class_register() (Mark Langsdorf) [RHEL-81536]
  - driver core: class: fix Excess kernel-doc description warning (Mark Langsdorf) [RHEL-81536]
  - driver core: mark remaining local bus_type variables as const (Mark Langsdorf) [RHEL-81536]
  - driver core: container: make container_subsys const (Mark Langsdorf) [RHEL-81536]
  - PM: fix missing rculist.h dependency (Mark Langsdorf) [RHEL-81536]
  - regmap: fix kcalloc() arguments order (Mark Langsdorf) [RHEL-81536]
  - driver core: Better advertise dev_err_probe() (Mark Langsdorf) [RHEL-81536]
  - driver core: Emit reason for pending deferred probe (Mark Langsdorf) [RHEL-81536]
  - driver core: Enable fw_devlink=rpm by default (Mark Langsdorf) [RHEL-81536]
  - device property: fwnode_property_get_reference_args allows NULL args now (Mark Langsdorf) [RHEL-81536]
  - software node: Let args be NULL in software_node_get_reference_args (Mark Langsdorf) [RHEL-81536]
  - software node: Remove usage of the deprecated ida_simple_xx() API (Mark Langsdorf) [RHEL-81536]
  - base: soc: Remove usage of the deprecated ida_simple_xx() API (Mark Langsdorf) [RHEL-81536]
  - drivers: base: Print a warning instead of panic() when register_cpu() fails (Mark Langsdorf) [RHEL-81536]
  - drivers: base: add arch_cpu_is_hotpluggable() (Mark Langsdorf) [RHEL-81536]
  - device property: Add fwnode_name_eq() (Mark Langsdorf) [RHEL-81536]
  - driver core: make device_is_dependent() static (Mark Langsdorf) [RHEL-81536]
  - devcoredump: Send uevent once devcd is ready (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Expand Firmware upload error codes with firmware invalid error (Mark Langsdorf) [RHEL-81536]
  - regmap: fix regmap_noinc_write() description (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Abort all upcoming firmware load request once reboot triggered (Mark Langsdorf) [RHEL-81536]
  - firmware_loader: Refactor kill_pending_fw_fallback_reqs() (Mark Langsdorf) [RHEL-81536]
  - driver core: Release all resources during unbind before updating device links (Mark Langsdorf) [RHEL-81536]
  - driver core: class: remove boilerplate code (Mark Langsdorf) [RHEL-81536]
  - dev_printk: add new dev_err_probe() helpers (Mark Langsdorf) [RHEL-109251]
  - driver core: Move dev_err_probe() to where it belogs (Mark Langsdorf) [RHEL-109251]
  - sysfs: Introduce DEFINE_SIMPLE_SYSFS_GROUP_VISIBLE() (Mark Langsdorf) [RHEL-81536]
  - sysfs: Document new "group visible" helpers (Mark Langsdorf) [RHEL-81536]
  - soundwire: sysfs: have the driver core handle the creation of the device groups (Mark Langsdorf) [RHEL-81536]
  - soundwire: sysfs: cleanup the logic for creating the dp0 sysfs attributes (Mark Langsdorf) [RHEL-81536]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-654.el9]
changelog:
  - x86/cpu: Rename and move CPU model entry for Diamond Rapids (David Arcari) [RHEL-129861]
  - x86/CPU/AMD: Prevent reset reasons from being retained across reboot (CKI Backport Bot) [RHEL-129867]
  - selftests/bpf: Clobber a lot of registers in tailcall_bpf2bpf_hierarchy tests (Gregory Bell) [RHEL-102718]
  - s390/bpf: Write back tail call counter for BPF_TRAMP_F_CALL_ORIG (Gregory Bell) [RHEL-102718]
  - s390/bpf: Write back tail call counter for BPF_PSEUDO_CALL (Gregory Bell) [RHEL-102718]
  - s390/bpf: Do not write tail call counter into helper and kfunc frames (Gregory Bell) [RHEL-102718]
  - s390/bpf: Describe the frame using a struct instead of constants (Gregory Bell) [RHEL-102718]
  - s390/bpf: Centralize frame offset calculations (Gregory Bell) [RHEL-102718]
  - s390/bpf: Use kernel's expoline thunks (Gregory Bell) [RHEL-102718]
  - s390/bpf: Add macros for calling external functions (Gregory Bell) [RHEL-102718]
  - bnxt_en: convert to ndo_hwtstamp_get() and ndo_hwtstamp_set() (Shruti Parab) [RHEL-108695]
  - bnxt_en: correct offset handling for IPv6 destination address (Shruti Parab) [RHEL-108695]
  - bnxt_en: Implement ethtool .set_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Implement ethtool .get_tunable() for ETHTOOL_PFC_PREVENTION_TOUT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Use VLAN_ETH_HLEN when possible (Shruti Parab) [RHEL-108695]
  - bnxt_en: Support for RoCE resources dynamically shared within VFs. (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add err_qpc backing store handling (Shruti Parab) [RHEL-108695]
  - bnxt_en: hsi: Update FW interface to 1.10.3.133 (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add fw log trace support for 5731X/5741X chips (Shruti Parab) [RHEL-108695]
  - bnxt_en: Improve bnxt_backing_store_cfg_v2() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Optimize bnxt_sriov_disable() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Remove unnecessary VF check in bnxt_hwrm_nvm_req() (Shruti Parab) [RHEL-108695]
  - bnxt_en: Drop redundant if block in bnxt_dl_flash_update() (Shruti Parab) [RHEL-108695]
  - bnxt_en: fix incorrect page count in RX aggr ring log (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix stats context reservation logic (Shruti Parab) [RHEL-108695]
  - bnxt_en: Adjust TX rings if reservation is less than requested (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix memory corruption when FW resources change during ifdown (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add Hyper-V VF ID (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add pcie_ctx_v2 support for ethtool -d (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add pcie_stat_len to struct bp (Shruti Parab) [RHEL-108695]
  - bnxt_en: Refactor bnxt_get_regs() (Shruti Parab) [RHEL-108695]
  - bnxt: move bnxt_hsi.h to include/linux/bnxt/hsi.h (Shruti Parab) [RHEL-108695]
  - bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix DCB ETS validation (Shruti Parab) [RHEL-108695]
  - bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL (Shruti Parab) [RHEL-108695]
  - bnxt: properly flush XDP redirect lists (Shruti Parab) [RHEL-108695]
  - bnxt_en: Improve comment wording and error return code (Shruti Parab) [RHEL-108695]
  - bnxt_en: Update MRU and RSS table of RSS contexts on queue reset (Shruti Parab) [RHEL-108695]
  - bnxt_en: Add a helper function to configure MRU and RSS (Shruti Parab) [RHEL-108695]
  - bnxt_en: Fix double invocation of bnxt_ulp_stop()/bnxt_ulp_start() (Shruti Parab) [RHEL-108695]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-655.el9]
changelog:
  - usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137148] {CVE-2025-68287}
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after hibernate (David Arcari) [RHEL-129866]
  - cpufreq/amd-pstate: Fix a regression leading to EPP 0 after resume (David Arcari) [RHEL-129866]
  - cpufreq/amd-pstate: Fix setting of CPPC.min_perf in active mode for performance governor (David Arcari) [RHEL-129866]
  - KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134723]
  - autofs: dont trigger mount if it cant succeed (Ian Kent) [RHEL-120685]
  - tick/sched: Limit non-timekeeper CPUs calling jiffies update (Phil Auld) [RHEL-132755]
  - PCI/ACPI: Fix pci_acpi_preserve_config() memory leak (Thilak KN) [RHEL-73305]
  - be2net: pass wrb_params in case of OS2BMC (Mohammad Heib) [RHEL-101842 RHEL-96554 RHEL-97699]
  - be2net: Use correct byte order and format string for TCP seq and ack_seq (Mohammad Heib) [RHEL-101842 RHEL-96554 RHEL-97699]
  - proc: block mounting on top of /proc/<pid>/fdinfo/* (Waiman Long) [RHEL-128728]
  - proc: block mounting on top of /proc/<pid>/fd/* (Waiman Long) [RHEL-128728]
  - proc: block mounting on top of /proc/<pid>/map_files/* (Waiman Long) [RHEL-128728]
  - proc: add proc_splice_unmountable() (Waiman Long) [RHEL-128728]
  - proc: proc_readfdinfo() -> proc_fdinfo_iterate() (Waiman Long) [RHEL-128728]
  - proc: proc_readfd() -> proc_fd_iterate() (Waiman Long) [RHEL-128728]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-656.el9]
changelog:
  - block: don't freeze queue for updating queue limits (Ming Lei) [RHEL-134978]
  - x86/resctrl: Fix miscount of bandwidth event when reactivating previously unavailable RMID (David Arcari) [RHEL-129399]
  - x86/resctrl: Implement resctrl_arch_reset_cntr() and resctrl_arch_cntr_read() (David Arcari) [RHEL-129399]
  - fs/resctrl: Introduce counter ID read, reset calls in mbm_event mode (David Arcari) [RHEL-129399]
  - x86/resctrl: Refactor resctrl_arch_rmid_read() (David Arcari) [RHEL-129399]
  - scsi: lpfc: Update lpfc version to 14.4.0.12 (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Add capability to register Platform Name ID to fabric (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Allow support for BB credit recovery in point-to-point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Modify kref handling for Fabric Controller ndlps (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Ensure unregistration of rpis for received PLOGIs (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb() (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Revise discovery related function headers and comments (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Update various NPIV diagnostic log messaging (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Copyright updates for 14.4.0.11 patches (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Update lpfc version to 14.4.0.11 (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Clean up extraneous phba dentries (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Use switch case statements in DIF debugfs handlers (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Define size of debugfs entry for xri rebalancing (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Use int type to store negative error codes (Paul Ely) [RHEL-127902]
  - scsi: lpfc: use min() to improve code (Paul Ely) [RHEL-127902]
  - scsi: lpfc: Fix wrong function reference in a comment (Paul Ely) [RHEL-127902]
  - lpfc: don't use file->f_path.dentry for comparisons (Paul Ely) [RHEL-127902]
  - nvmet-auth: update sc_c in target host hash calculation (Chris Leech) [RHEL-127047]
  - nvmet-auth: update sc_c in host response (Chris Leech) [RHEL-127047]
  - nvme/tcp: handle tls partially sent records in write_space() (Chris Leech) [RHEL-127047]
  - nvme-auth: update sc_c in host response (Chris Leech) [RHEL-127047]
  - nvme-auth: use hkdf_expand_label() (Chris Leech) [RHEL-127047]
  - nvme-auth: add hkdf_expand_label() (Chris Leech) [RHEL-127047]
  - nvme-tcp: send only permitted commands for secure concat (Chris Leech) [RHEL-127047]
  - nvme-auth: update bi_directional flag (Chris Leech) [RHEL-127047]
  - nvme-auth: remove unneeded semicolon (Chris Leech) [RHEL-127047]
  - nvme-tcp: log TLS handshake failures at error level (Chris Leech) [RHEL-127047]
  - nvme-tcp: fix signedness bug in nvme_tcp_init_connection() (Chris Leech) [RHEL-127047]
  - nvme-tcp: fix connect failure on receiving partial ICResp PDU (Chris Leech) [RHEL-127047]
  - fbcon: Fix OOB access in font allocation (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fix integer overflow in fbcon_do_set_font (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use 'bool' where appopriate (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Introduce get_{fg,bg}_color() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fbcon_is_inactive() -> fbcon_is_active() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: fbcon_cursor_noblink -> fbcon_cursor_blink (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix typo in Kconfig text for FB_DEVICE (Jocelyn Falempe) [RHEL-107476]
  - fbdev: svgalib: Clean up coding style (Jocelyn Falempe) [RHEL-107476]
  - fbdev: fix potential buffer overflow in do_register_framebuffer() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Fix outdated registered_fb reference in comment (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Include <linux/export.h> (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Remove trailing whitespaces (Jocelyn Falempe) [RHEL-107476]
  - video: screen_info: Relocate framebuffers behind PCI bridges (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var (Jocelyn Falempe) [RHEL-107476]
  - fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Make sure modelist not set on unregistered console (Jocelyn Falempe) [RHEL-107476]
  - dummycon: Trigger redraw when switching consoles with deferred takeover (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Send old blank state in FB_EVENT_BLANK (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Track display blanking state (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Rework fb_blank() (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use static attribute groups for sysfs entries (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Refactoring the fbcon packed pixel drawing routines (Jocelyn Falempe) [RHEL-107476]
  - fbdev: Register sysfs groups through device_add_group (Jocelyn Falempe) [RHEL-107476]
  - mdacon: rework dependency list (Jocelyn Falempe) [RHEL-107476]
  - dummycon: fix default rows/cols (Jocelyn Falempe) [RHEL-107476]
  - dummycon: only build module if there are users (Jocelyn Falempe) [RHEL-107476]
  - fbcon: Use correct erase colour for clearing in fbcon (Jocelyn Falempe) [RHEL-107476]
  - fbdev: core: tileblit: Implement missing margin clearing for tileblit (Jocelyn Falempe) [RHEL-107476]
  - genirq/irqdesc: Prevent use-after-free in irq_find_at_or_after() (Aristeu Rozanski) [RHEL-114221]
  - genirq: Initialize resend_node hlist for all interrupt descriptors (Aristeu Rozanski) [RHEL-114221]
  - xen/events: avoid using info_for_irq() in xen_send_IPI_one() (Aristeu Rozanski) [RHEL-114221]
  - genirq: Fix software resend lockup and nested resend (Aristeu Rozanski) [RHEL-114221]
  - genirq: Use a maple tree for interrupt descriptor management (Aristeu Rozanski) [RHEL-114221]
  - genirq: Encapsulate sparse bitmap handling (Aristeu Rozanski) [RHEL-114221]
  - genirq: Use hlist for managing resend handlers (Aristeu Rozanski) [RHEL-114221]
  - Revert "arm64-64k: Increase max NR_IRQS from 64+8192 to 2^^19" (Aristeu Rozanski) [RHEL-114221]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-657.el9]
changelog:
  - powerpc/kexec: Enable SMT before waking offline CPUs (Mamatha Inamdar) [RHEL-137134]
  - dpll: zl3073x: Allow to configure phase offset averaging factor (CKI Backport Bot) [RHEL-118666]
  - drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134429] {CVE-2025-40277}
  - PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (José Expósito) [RHEL-120786]
  - mlxbf-bootctl: use sysfs_emit_at() in secure_boot_fuse_state_show() (David Thompson) [RHEL-103900]
  - mlxbf-bootctl: Support sysfs entries for RTC battery status (David Thompson) [RHEL-103900]
  - platform/mellanox: mlxbf-bootctl: use sysfs_emit() instead of sprintf() (David Thompson) [RHEL-103900]
  - gpio: mlxbf3: use platform_get_irq_optional() (David Thompson) [RHEL-103874]
  - gpio: mlxbf3: Support shutdown() function (David Thompson) [RHEL-103874]
  - pinctrl: mlxbf3: Fix return value check for devm_platform_ioremap_resource (David Thompson) [RHEL-104059]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-658.el9]
changelog:
  - powerpc/64s/slb: Fix SLB multihit issue during SLB preload (Mamatha Inamdar) [RHEL-104980]
  - KVM: arm64: Guard PMSCR_EL1 initialization with SPE presence check (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: nv: Don't advance PC when pending an SVE exception (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: Don't access ICC_SRE_EL2 if GICv3 doesn't support v2 compatibility (Cornelia Huck) [RHEL-131243]
  - KVM: arm64: Fix kvm_vcpu_{set,is}_be() to deal with EL2 state (Cornelia Huck) [RHEL-131243]
  - rtla/timerlat_bpf: Stop tracing on user latency (Tomas Glozar) [RHEL-125445]
  - cpufreq: intel_pstate: Fix object lifecycle issue in update_qos_request() (David Arcari) [RHEL-129862]
  - dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-129505]
  - dlm: check for undefined release_option values (Alexander Aring) [RHEL-127940]
  - dlm: handle release_option as unsigned (Alexander Aring) [RHEL-127940]
  - dlm: handle invalid lockspace member remove (Alexander Aring) [RHEL-127940]
  - dlm: add new flag DLM_RELEASE_RECOVER for dlm_lockspace_release (Alexander Aring) [RHEL-127940]
  - dlm: add new configfs entry release_recover for lockspace members (Alexander Aring) [RHEL-127940]
  - dlm: add new RELEASE_RECOVER uevent attribute for release_lockspace (Alexander Aring) [RHEL-127940]
  - dlm: use defines for force values in dlm_release_lockspace (Alexander Aring) [RHEL-127940]
  - dlm: check for defined force value in dlm_lockspace_release (Alexander Aring) [RHEL-127940]
  - dlm: disallow different configs nodeid storages (Alexander Aring) [RHEL-127940]
  - dlm: prevent NPD when writing a positive value to event_done (Alexander Aring) [RHEL-127940] {CVE-2025-23131}
  - bits: introduce fixed-type BIT_U*() (José Expósito) [RHEL-125803]
  - bits: introduce fixed-type GENMASK_U*() (José Expósito) [RHEL-125803]
  - bits: add comments and newlines to #if, #else and #endif directives (José Expósito) [RHEL-125803]
  - linux/bits.h: simplify GENMASK_INPUT_CHECK() (José Expósito) [RHEL-125803]
  - compiler.h: add const_true() (José Expósito) [RHEL-125803]
  - iopoll: Generalize read_poll_timeout() into poll_timeout_us() (José Expósito) [RHEL-125803]
  - PM: hibernate: Fix pm_hibernation_mode_is_suspend() build breakage (José Expósito) [RHEL-125803]
  - PM: hibernate: Add pm_hibernation_mode_is_suspend() (José Expósito) [RHEL-125803]
  - overflow: add range_overflows() and range_end_overflows() (José Expósito) [RHEL-125803]
  - list: add list_last_entry_or_null() (José Expósito) [RHEL-125803]
  - redhat: Temporary stop adding 'kernel' component to SBAT (Li Tian) [RHEL-124584]
  - redhat: Switch to implicit enablement of CONFIG_EFI_SBAT_FILE (Li Tian) [RHEL-124584]
  - redhat: Add SBAT information to Linux kernel (Li Tian) [RHEL-124584]
  - x86/efi: Implement support for embedding SBAT data for x86 (Li Tian) [RHEL-124584]
  - efi: Fix .data section size calculations when .sbat is present (Li Tian) [RHEL-124584]
  - efi: Drop preprocessor directives from zboot.lds (Li Tian) [RHEL-124584]
  - efi: zboot specific mechanism for embedding SBAT section (Li Tian) [RHEL-124584]
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) [RHEL-104015]
  - mlxbf_gige: emit messages during open and probe failures (David Thompson) [RHEL-104015]
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson) [RHEL-104015]
  - mlxbf_gige: add support to display pause frame counters (David Thompson) [RHEL-104015]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-659.el9]
changelog:
  - mm: hugetlb: avoid soft lockup when mprotect to large memory area (Luiz Capitulino) [RHEL-139899]
  - net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139488] {CVE-2025-68301}
  - block: fix race between wbt_enable_default and IO submission (Ming Lei) [RHEL-137734]
  - libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137401] {CVE-2025-68285}
  - block: Use RCU in blk_mq_[un]quiesce_tagset() instead of set->tag_list_lock (Ming Lei) [RHEL-136168]
  - net: mana: Handle hardware recovery events when probing the device (Maxim Levitsky) [RHEL-132184]
  - net: mana: Drop TX skb on post_work_request failure and unmap resources (Maxim Levitsky) [RHEL-132184]
  - net: mana: Handle SKB if TX SGEs exceed hardware limit (Maxim Levitsky) [RHEL-132184]
  - net: mana: Add standard counter rx_missed_errors (Maxim Levitsky) [RHEL-132184]
  - net: mana: Move hardware counter stats from per-port to per-VF context (Maxim Levitsky) [RHEL-132184]
  - net: mana: Support HW link state events (Maxim Levitsky) [RHEL-132184]
  - RDMA/mana_ib: Extend modify QP (Maxim Levitsky) [RHEL-132184]
  - net: mana: Reduce waiting time if HWC not responding (Maxim Levitsky) [RHEL-132184]
  - net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Maxim Levitsky) [RHEL-132184]
  - RDMA/mana_ib: Drain send wrs of GSI QP (Maxim Levitsky) [RHEL-132184]
  - net: hv_netvsc: fix loss of early receive events from host during channel open. (Maxim Levitsky) [RHEL-132184]
  - rv: Update RHEL kconfigs for 6.17 upstream code (Gabriele Monaco) [RHEL-114755]
  - redhat/configs: Move CONFIG_RV_PER_TASK_MONITORS to common/generic (Gabriele Monaco) [RHEL-114755]
  - New configs in kernel/trace (Gabriele Monaco) [RHEL-114755]
  - rv: Make rtapp/pagefault monitor depends on CONFIG_MMU (Gabriele Monaco) [RHEL-114755]
  - rv: Fully convert enabled_monitors to use list_head as iterator (Gabriele Monaco) [RHEL-114755]
  - rv: Fix missing mutex unlock in rv_register_monitor() (Gabriele Monaco) [RHEL-114755]
  - include/linux/rv.h: remove redundant include file (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in enabled_monitors_next() (Gabriele Monaco) [RHEL-114755]
  - rv: Support systems with time64-only syscalls (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Fix minor typo in monitor_synthesis page (Gabriele Monaco) [RHEL-114755]
  - rv: Add opid per-cpu monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add nrp and sssw per-task monitors (Gabriele Monaco) [RHEL-114755]
  - rv: Replace tss and sncid monitors with more complete sts (Gabriele Monaco) [RHEL-114755]
  - sched: Adapt sched tracepoints for RV task model (Gabriele Monaco) [RHEL-114755]
  - rv: Retry when da monitor detects race conditions (Gabriele Monaco) [RHEL-114755]
  - rv: Adjust monitor dependencies (Gabriele Monaco) [RHEL-114755]
  - rv: Use strings in da monitors tracepoints (Gabriele Monaco) [RHEL-114755]
  - rv: Remove trailing whitespace from tracepoint string (Gabriele Monaco) [RHEL-114755]
  - rv: Add da_handle_start_run_event_ to per-task monitors (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in reactors_show() and monitor_reactor_show() (Gabriele Monaco) [RHEL-114755]
  - rv: Fix wrong type cast in monitors_show() (Gabriele Monaco) [RHEL-114755]
  - rv: Remove struct rv_monitor::reacting (Gabriele Monaco) [RHEL-114755]
  - rv: Remove rv_reactor's reference counter (Gabriele Monaco) [RHEL-114755]
  - rv: Merge struct rv_reactor_def into struct rv_reactor (Gabriele Monaco) [RHEL-114755]
  - rv: Merge struct rv_monitor_def into struct rv_monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Remove unused field in struct rv_monitor_def (Gabriele Monaco) [RHEL-114755]
  - rv: Return init error when registering monitors (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Organise Kconfig entries for nested monitors (Gabriele Monaco) [RHEL-114755]
  - tools/dot2c: Fix generated files going over 100 column limit (Gabriele Monaco) [RHEL-114755]
  - tools/rv: Stop gracefully also on SIGTERM (Gabriele Monaco) [RHEL-114755]
  - tools/rv: Do not skip idle in trace (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Do not generate unused variables (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Generate each variable definition only once (Gabriele Monaco) [RHEL-114755]
  - rv/ltl: Do not execute the Buchi automaton twice on start condition (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Support the 'next' operator (Gabriele Monaco) [RHEL-114755]
  - panic: Fix up description of vpanic() (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Add documentation for linear temporal logic monitors (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Add support for linear temporal logic (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Restructure the classes to prepare for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/rvgen: Restructure the templates files (Gabriele Monaco) [RHEL-114755]
  - Documentation/rv: Prepare monitor synthesis document for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Prepare the frontend for LTL inclusion (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Replace is_container() hack with subparsers (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Remove __buff_to_string() (Gabriele Monaco) [RHEL-114755]
  - verification/dot2k: Make a separate dot2k_templates/Kconfig_container (Gabriele Monaco) [RHEL-114755]
  - tracing: Remove pointless memory barriers (Gabriele Monaco) [RHEL-114755]
  - rv: Allow to configure the number of per-task monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add documentation for rtapp monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp_sleep monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp_pagefault monitor (Gabriele Monaco) [RHEL-114755]
  - riscv: mm: Add page fault trace points (Gabriele Monaco) [RHEL-114755]
  - x86/tracing, x86/mm: Move page fault tracepoints to generic (Gabriele Monaco) [RHEL-114755]
  - x86/tracing, x86/mm: Remove redundant trace_pagefault_key (Gabriele Monaco) [RHEL-114755]
  - rv: Add rtapp container monitor (Gabriele Monaco) [RHEL-114755]
  - rv: Add support for LTL monitors (Gabriele Monaco) [RHEL-114755]
  - rv: rename CONFIG_DA_MON_EVENTS to CONFIG_RV_MON_EVENTS (Gabriele Monaco) [RHEL-114755]
  - rv: Let the reactors take care of buffers (Gabriele Monaco) [RHEL-114755]
  - panic: Add vpanic() (Gabriele Monaco) [RHEL-114755]
  - kernel/panic.c: format kernel-doc comments (Gabriele Monaco) [RHEL-114755]
  - printk: Make vprintk_deferred() public (Gabriele Monaco) [RHEL-114755]
  - rv: Add #undef TRACE_INCLUDE_FILE (Gabriele Monaco) [RHEL-114755]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-660.el9]
changelog:
  - bpf, arm64: Do not audit capability check in do_jit() (CKI Backport Bot) [RHEL-126125]
  - vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139285] {CVE-2025-40248}
  - x86/sev: Guard sev_evict_cache() with CONFIG_AMD_MEM_ENCRYPT (Paolo Bonzini) [RHEL-32892]
  - x86/sev: Evict cache lines during SNP memory validation (Paolo Bonzini) [RHEL-32892]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-136560]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: Increase ISHTP resume ack timeout to 300ms (Tony Camuso) [RHEL-136560]
  - HID: intel-ish-hid: ipc: Add Wildcat Lake PCI device ID (Tony Camuso) [RHEL-136560]
  - hid: intel-ish-hid: Use PCI_DEVICE_DATA() macro for ISH device table (Tony Camuso) [RHEL-136560]
  - cifs: Fix deadlock in cifs_writepages during reconnect (Paulo Alcantara) [RHEL-132486]
  - irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131972] {CVE-2025-37819}
  - time/timecounter: Fix the lie that struct cyclecounter is const (Ivan Vecera) [RHEL-127559]
  - Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128894] {CVE-2025-40141}
  - ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128470] {CVE-2025-40185}


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-661.el9]
changelog:
  - iavf: avoid deadlock by cancelling work without netdev lock in remove path (Mohammad Heib) [RHEL-130117]
  - tools/power turbostat: Validate APERF access for VMWARE (David Arcari) [RHEL-127044]
  - workqueue: Initialize wq_isolated_cpumask in workqueue_init_early() (Waiman Long) [RHEL-120441]
  - workqueue: add printf attribute to __alloc_workqueue() (Waiman Long) [RHEL-120441]
  - workqueue: Increase worker desc's length to 32 (Waiman Long) [RHEL-120441]
  - workqueue: Refactor worker ID formatting and make wq_worker_comm() use full ID string (Waiman Long) [RHEL-120441]
  - Revert "Drivers: hv: Add CONFIG_HYPERV_VMBUS option" (José Expósito) [RHEL-125801]
  - Reapply "drm/amdgpu: fix incorrect vm flags to map bo" (José Expósito) [RHEL-125801]
  - Reapply "drm/i915: Convert REG_GENMASK*() to fixed-width GENMASK_U*()" (José Expósito) [RHEL-125801]
  - drm/amd/display: Do not use CC_FLAGS_FPU/CC_FLAGS_NO_FPU (José Expósito) [RHEL-125801]
  - dma-buf: dma-heap: Do not use string literal in EXPORT_SYMBOL_NS_GPL (José Expósito) [RHEL-125801]
  - Revert "drm/sysfb: Find screen_info format with helpers" (José Expósito) [RHEL-125801]
  - Revert "change the calling conventions for vfs_parse_fs_string()" (José Expósito) [RHEL-125801]
  - drm/pagemap: Add missing parameter to vma_alloc_folio() (José Expósito) [RHEL-125801]
  - drm: Use previous includes (José Expósito) [RHEL-125801]
  - Revert "mm: make folio page count functions return unsigned" (José Expósito) [RHEL-125801]
  - redhat/configs: Add new configs from DRM 6.18 backport (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc7..v6.18 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc6..v6.18-rc7 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc5..v6.18-rc6 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.18-rc4..v6.18-rc5 (José Expósito) [RHEL-125801]
  - Merge DRM changes from upstream v6.17..v6.18-rc4 (José Expósito) [RHEL-125801]
  - efi/x86: Memory protection on EfiGcdMemoryTypeMoreReliable (Lenny Szubowicz) [RHEL-95228]
  - mmc: dw_mmc: add exynos7870 DW MMC support (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc-bluefield: Add support for eMMC HW reset (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Use devm_mmc_alloc_host() helper (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves (Steve Dunnagan) [RHEL-104061]
  - mmc: host: Fix typos in comments across various files (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Add support for platform specific eMMC HW reset (Steve Dunnagan) [RHEL-104061]
  - mmc: Convert from tasklet to BH workqueue (Steve Dunnagan) [RHEL-104061]
  - mmc: dw_mmc: Remove unused of_gpio.h (Steve Dunnagan) [RHEL-104061]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-662.el9]
changelog:
  - Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139463] {CVE-2025-68305}
  - Set fc_nlinfo in nh_create_ipv4, nh_create_ipv6 (Guillaume Nault) [RHEL-138491]
  - net: ethtool: update set_rxfh_indir to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: update set_rxfh to use ethtool_get_rx_ring_count helper (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add get_rx_ring_count callback to optimize RX ring queries (Ivan Vecera) [RHEL-132646]
  - net: ethtool: remove the duplicated handling from ethtool_get_rxrings (Ivan Vecera) [RHEL-132646]
  - net: ethtool: add support for ETHTOOL_GRXRINGS ioctl (Ivan Vecera) [RHEL-132646]
  - net: ethtool: pass the num of RX rings directly to ethtool_copy_validate_indir (Ivan Vecera) [RHEL-132646]
  - net: openvswitch: Avoid needlessly taking the RTNL on vport destroy (Adrian Moreno) [RHEL-137482]
  - powercap: intel_rapl: Add support for Wildcat Lake platform (CKI Backport Bot) [RHEL-95625]
  - Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136967] {CVE-2025-40294}
  - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136823] {CVE-2025-38568}
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134735]
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134735]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134735]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Encode COMPOUND operation status on page boundaries (Olga Kornievskaia) [RHEL-134735]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134735]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134735]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134735]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134735]
  - Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136257] {CVE-2025-40318}
  - net: vlan: sync VLAN features with lower device (CKI Backport Bot) [RHEL-80409]
  - mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134449] {CVE-2025-40258}
  - sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134005] {CVE-2025-40240}
  - inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-116117]
  - inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-116117]
  - ipv4/route: avoid unused-but-set-variable warning (Guillaume Nault) [RHEL-116117]
  - net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133365]
  - openvswitch: Stricter validation for the userspace action (Paolo Valerio) [RHEL-115648]
  - openvswitch: Fix unsafe attribute parsing in output_userspace() (Paolo Valerio) [RHEL-115648]
  - net: openvswitch: fix nested key length validation in the set() action (Paolo Valerio) [RHEL-115648]
  - openvswitch: use RCU protection in ovs_vport_cmd_fill_info() (Paolo Valerio) [RHEL-115648]
  - openvswitch: fix lockup on tx to unregistering netdev with carrier (Paolo Valerio) [RHEL-115648]
  - ethtool: Don't check for RXFH fields conflict when no input_xfrm is requested (Ivan Vecera) [RHEL-127561]
  - net: ethtool: don't mux RXFH via rxnfc callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hns3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: hinic: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: nfp: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: mlx5: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: qede: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: benet: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: siena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sfc: falcon: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: sxgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: dpaa: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: niu: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: otx2: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: thunder: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ena: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnxt: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: bnx2x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: iavf: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ice: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: i40e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: fm10k: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: ixgbe: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igc: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: igb: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: e1000e: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: lan743x: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cxgb4: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: cisco: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: gianfar: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: hyperv: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: virtio: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - net: drv: vmxnet3: migrate to new RXFH callbacks (Ivan Vecera) [RHEL-127561]
  - eth: remove empty RXFH handling from drivers (Ivan Vecera) [RHEL-127561]
  - net: ethtool: add dedicated callbacks for getting and setting rxfh fields (Ivan Vecera) [RHEL-127561]
  - net: ethtool: require drivers to opt into the per-RSS ctx RXFH (Ivan Vecera) [RHEL-127561]
  - net: ethtool: remove the duplicated handling from rxfh and rxnfc (Ivan Vecera) [RHEL-127561]
  - net: ethtool: copy the rxfh flow handling (Ivan Vecera) [RHEL-127561]
  - net: ethtool: mm: reset verification status when link is down (Ivan Vecera) [RHEL-127569]
  - net: ethtool: mm: extract stmmac verification logic into common library (Ivan Vecera) [RHEL-127569]
  - net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129085] {CVE-2025-40170}
  - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() (Hangbin Liu) [RHEL-129085]
  - net: ipv4: Consolidate ipv4_mtu and ip_dst_mtu_maybe_forward (Hangbin Liu) [RHEL-129085]
  - ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129022] {CVE-2025-40135}
  - ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128985] {CVE-2025-40158}
  - net: dst: introduce dst->dev_rcu (Hangbin Liu) [RHEL-128985]
  - ipv4: use RCU protection in __ip_rt_update_pmtu() (Hangbin Liu) [RHEL-128985]
  - net: Add locking to protect skb->dev access in ip_output (Hangbin Liu) [RHEL-128985]
  - net: dst: add four helpers to annotate data-races around dst->dev (Hangbin Liu) [RHEL-128985]
  - bpf: Fix mismatched RCU unlock flavour in bpf_out_neigh_v6 (Hangbin Liu) [RHEL-128985]
  - vrf: Fix lockdep splat in output path (Hangbin Liu) [RHEL-128985]
  - ipv6: remove nexthop_fib6_nh_bh() (Hangbin Liu) [RHEL-128985]
  - net: remove rcu_dereference_bh_rtnl() (Hangbin Liu) [RHEL-128985]
  - neighbour: switch to standard rcu, instead of rcu_bh (Hangbin Liu) [RHEL-128985]
  - ipv6: flowlabel: do not disable BH where not needed (Hangbin Liu) [RHEL-128985]
  - ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() (Hangbin Liu) [RHEL-128985]
  - neigh: introduce neigh_confirm() helper function (Hangbin Liu) [RHEL-128985]
  - net: Prevent use after free in netif_napi_set_irq_locked() (Petr Oros) [RHEL-83023]
  - net: move aRFS rmap management and CPU affinity to core (Petr Oros) [RHEL-83023]
  - xfrm: Check inner packet family directly from skb_dst (Hangbin Liu) [RHEL-95005]
  - xfrm: fix offloading of cross-family tunnels (Hangbin Liu) [RHEL-95005]
  - udp: also consider secpath when evaluating ipsec use for checksumming (Hangbin Liu) [RHEL-95005]
  - xfrm: restore GSO for SW crypto (Hangbin Liu) [RHEL-95005]
  - xfrm: always initialize offload path (Hangbin Liu) [RHEL-95005]
  - xfrm: check for PMTU in tunnel mode for packet offload (Hangbin Liu) [RHEL-95005]
  - xfrm: provide common xdo_dev_offload_ok callback implementation (Hangbin Liu) [RHEL-95005]
  - xfrm: rely on XFRM offload (Hangbin Liu) [RHEL-95005]
  - xfrm: simplify SA initialization routine (Hangbin Liu) [RHEL-95005]
  - xfrm: delay initialization of offload path till its actually requested (Hangbin Liu) [RHEL-95005]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-663.el9]
changelog:
  - scsi: sg: Fix occasional bogus elapsed time that exceeds timeout (Michal Rábek) [RHEL-58952]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140261] {CVE-2025-68349}
  - smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131389] {CVE-2025-39933}
  - redhat/kernel.spec.template: Let kernel-modules installation rebuild initrd in UKI system (Li Tian) [RHEL-135721]
  - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129113] {CVE-2025-40154}
  - xfrm: bring back device check in validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - bonding: Fix multiple long standing offload races (Hangbin Liu) [RHEL-116770]
  - bonding: Mark active offloaded xfrm_states (Hangbin Liu) [RHEL-116770]
  - xfrm: Add explicit dev to .xdo_dev_state_{add,delete,free} (Hangbin Liu) [RHEL-116770]
  - xfrm: Remove unneeded device check from validate_xmit_xfrm (Hangbin Liu) [RHEL-116770]
  - xfrm: Use xdo.dev instead of xdo.real_dev (Hangbin Liu) [RHEL-116770]
  - net/mlx5: Avoid using xso.real_dev unnecessarily (Hangbin Liu) [RHEL-116770]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-664.el9]
changelog:
  - nvme: fix PCIe subsystem reset controller state transition (John Meneghini) [RHEL-137435]
  - powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling (John Meneghini) [RHEL-137435]
  - powerpc/eeh: Make EEH driver device hotplug safe (John Meneghini) [RHEL-137435] {CVE-2025-38576}
  - objtool: Fix standalone --hacks=jump_label (Rado Vrbovsky) [RHEL-114923]
  - objtool: Fix weak symbol detection (Rado Vrbovsky) [RHEL-114923]
  - objtool, spi: amd: Fix out-of-bounds stack access in amd_set_spi_freq() (Rado Vrbovsky) [RHEL-114923]
  - bus: mhi: host: pci_generic: Set DMA mask for VFs (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: core: Improve mhi_sync_power_up handling for SYS_ERR state (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Reset QDU100 while the MHI driver is removed (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add SRIOV support (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Read SUBSYSTEM_VENDOR_ID for VF's to check status (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Add support for separate controller configurations for VF and PF (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: ep: Fix chained transfer handling in read path (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Notify EE change via uevent (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: Do not use uninitialized 'dev' pointer in mhi_init_irq_setup() (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - bus: mhi: host: pci_generic: Add support for all Foxconn T99W696 SKU variants (Jose Ignacio Tornos Martinez) [RHEL-132593]
  - gfs2: Do not cancel internal demote requests (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: run_queue cleanup (Andreas Gruenbacher) [RHEL-135362]
  - gfs2: Get rid of unnecessary test_and_set_bit (Andreas Gruenbacher) [RHEL-135362]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [5.14.0-665.el9]
changelog:
  - sched: Fix build for modules using set_tsk_need_resched() (Gabriele Monaco) [RHEL-141542]
  - sched: Export hidden tracepoints to modules (Gabriele Monaco) [RHEL-141542]
  - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-138326]
  - devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (Petr Oros) [RHEL-121722]
  - devlink: Introduce switchdev_inactive eswitch mode (Petr Oros) [RHEL-121722]
  - devlink: Add new "max_mac_per_vf" generic device param (Petr Oros) [RHEL-121722]
  - devlink: region: correct port region lookup to use port_ops (Petr Oros) [RHEL-121722]
  - devlink rate: Remove unnecessary 'static' from a couple places (Petr Oros) [RHEL-121722]
  - devlink: Add a 'num_doorbells' driverinit param (Petr Oros) [RHEL-121722]
  - devlink: Add 'total_vfs' generic device param (Petr Oros) [RHEL-121722]
  - devlink: Make health reporter burst period configurable (Petr Oros) [RHEL-121722]
  - devlink: Introduce burst period for health reporter (Petr Oros) [RHEL-121722]
  - devlink: Move health reporter recovery abort logic to a separate function (Petr Oros) [RHEL-121722]
  - devlink: Move graceful period parameter to reporter ops (Petr Oros) [RHEL-121722]
  - devlink/port: Check attributes early and constify (Petr Oros) [RHEL-121722]
  - devlink/port: Simplify return checks (Petr Oros) [RHEL-121722]
  - netdevsim: add fw_update_flash_chunk_time_ms debugfs knobs (Petr Oros) [RHEL-121722]
  - devlink: Fix excessive stack usage in rate TC bandwidth parsing (Petr Oros) [RHEL-121722]
  - selftest: netdevsim: Add devlink rate tc-bw test (Petr Oros) [RHEL-121722]
  - devlink: Extend devlink rate API with traffic classes bandwidth management (Petr Oros) [RHEL-121722]
  - netlink: introduce type-checking attribute iteration for nlmsg (Petr Oros) [RHEL-121722]
  - docs: netdevsim: fixe typo in netdevsim documentation (Petr Oros) [RHEL-121722]
  - selftests: drv-net: import things in lib one by one (Petr Oros) [RHEL-121722]
  - documentation: networking: devlink: Fix a typo in devlink-trap.rst (Petr Oros) [RHEL-121722]
  - devlink: add value check to devlink_info_version_put() (Petr Oros) [RHEL-121722]
  - x86/bugs: Report correct retbleed mitigation status (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix reporting of LFENCE retpoline (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 forcing (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove uses of cpu_mitigations_off() (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify SSB cmdline parsing (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Use early_param() for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for VMSCAPE (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SSB (Waiman Long) [RHEL-119225]
  - x86/microcode/AMD: Handle the case of no BIOS microcode (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix GDS mitigation selecting when mitigation is off (Waiman Long) [RHEL-119225]
  - x86/bugs: Select best SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Print enabled attack vectors (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TSA (Waiman Long) [RHEL-119225]
  - x86/pti: Add attack vector controls for PTI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for ITS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for L1TF (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for BHI (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v2_user (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for spectre_v1 (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for GDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for SRBDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for RFDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MMIO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for TAA (Waiman Long) [RHEL-119225]
  - x86/bugs: Add attack vector controls for MDS (Waiman Long) [RHEL-119225]
  - x86/bugs: Define attack vectors relevant for each bug (Waiman Long) [RHEL-119225]
  - x86/Kconfig: Add arch attack vector support (Waiman Long) [RHEL-119225]
  - cpu: Define attack vectors (Waiman Long) [RHEL-119225]
  - Documentation/x86: Document new attack vector controls (Waiman Long) [RHEL-119225]
  - x86/bugs: Clean up SRSO microcode handling (Waiman Long) [RHEL-119225]
  - x86/bugs: Use IBPB for retbleed if used by SRSO (Waiman Long) [RHEL-119225]
  - x86/bugs: Add SRSO_MITIGATION_NOSMT (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove its=stuff dependency on retbleed (Waiman Long) [RHEL-119225]
  - x86/bugs: Introduce cdt_possible() (Waiman Long) [RHEL-119225]
  - x86/bugs: Use switch/case in its_apply_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid warning when overriding return thunk (Waiman Long) [RHEL-119225]
  - x86/bugs: Simplify the retbleed=stuff checks (Waiman Long) [RHEL-119225]
  - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix spectre_v2 mitigation default on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure ITS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Fix SRSO reporting on Zen1/2 with SMT disabled (Waiman Long) [RHEL-119225]
  - x86/cpu: Add "Old Microcode" docs to hw-vuln toctree (Waiman Long) [RHEL-119225]
  - x86/cpu: Help users notice when running old Intel microcode (Waiman Long) [RHEL-119225]
  - x86/cpufeatures: Shorten X86_FEATURE_CLEAR_BHB_LOOP_ON_VMEXIT (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove X86_BUG_MMIO_UNKNOWN (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRSO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure L1TF mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SSB mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure BHI mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v2_user mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure retbleed mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Allow retbleed=stuff only on Intel (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure spectre_v1 mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure GDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure SRBDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Remove md_clear_*_mitigation() (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure RFDS mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MMIO mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure TAA mitigation (Waiman Long) [RHEL-119225]
  - x86/bugs: Restructure MDS mitigation (Waiman Long) [RHEL-119225]
  - KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions (Waiman Long) [RHEL-119225]
  - Documentation/x86: Update the naming of CPU features for /proc/cpuinfo (Waiman Long) [RHEL-119225]
  - redhat/configs: Enable CONFIG_CPU_MITIGATIONS (Waiman Long) [RHEL-119225]
  - cpu: Ignore "mitigations" kernel parameter if CPU_MITIGATIONS=n (Waiman Long) [RHEL-119225]
  - cpu: Re-enable CPU mitigations by default for !X86 architectures (Waiman Long) [RHEL-119225]
  - x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n (Waiman Long) [RHEL-119225]


author: Tao Liu <ltao@redhat.com> - 2.0.29-2
changelog:
  - Re-introduce vmcore creation notification to kdump
  - Revert "Introduce vmcore creation notification to kdump"
  - Add kdump dracut config
  - kdump-lib-initramfs: Improve mount point retrieval logic


author: Tao Liu <ltao@redhat.com> - 2.0.29-3
changelog:
  - fadump: fix passing additional parameters for capture kernel
  - fadump: pass additional parameters for capture kernel


author: Tao Liu <ltao@redhat.com> - 2.0.29-6
changelog:
  - 99-kdump.conf: Omit rdma module
  - Fallback to get NIC driver by /sys/class/net/NIC/device/driver/module
  - Note user-specified crashkernel value will be overwritten by default value


author: Tao Liu <ltao@redhat.com> - 2.0.29-7
changelog:
  - 99-kdump.conf: Omit clevis related dracut modules
  - kdump-lib.sh: rounded up the total_mem to 128M in get_system_size
  - kdump-lib.sh: Adjust default crashkernel reservation for x86_64 and s390x
  - doc/kdump.conf: correctly align the options


author: Tao Liu <ltao@redhat.com> - 2.0.29-8
changelog:
  - kdumpctl: check and generate /etc/vconsole.conf
  - kdump-lib.sh: Reserve crashkernel by default for systems with 1G-2G memory


author: Tao Liu <ltao@redhat.com> - 2.0.29-12
changelog:
  - Allow "sudo kdumpctl" for LUKS dump target
  - Restore SELinux label of crypttab file
  - Allow kdump.service to access LUKS volume keys
  - Wait for LUKS configfs API to be ready
  - Change LUKS volume key prefix to kdump-cryptsetup:vk-
  - Remove unused LUKS volume keys from keyring
  - Limit LUKS support to x86_64
  - Add kdumpctl setup-crypttab subcommand
  - Return LUKS devices in the form of UUIDs directly
  - Fix SC2181 issues in kdump-udev-throttler
  - LUKS: make /usr writable
  - Address CPU/memory hot plugging for kdump LUKS support
  - shfmt kdump-udev-throttler
  - Use cryptsetup --link-vk-to-keyring to save volume keys
  - Support dumping to a LUKS-encrypted target
  - Add a helper function to get uuid by MAJ:MIN


author: Pingfan Liu <piliu@redhat.com> - 2.0.29-14
changelog:
  - powerpc: Set nr_cpus=16 for kdump kernel
  - powerpc: consider CPU count while calculating crashkernel value
  - Use all available CPUs to collect dump


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - Make tests compatible with sssd-client
    Resolves: rhbz#2151513
  - Remove invalid password expiry warning
    Resolves: rhbz#2121099
  - Update error checking for OpenSSL CMS_verify
    Resolves: rhbz#2063838
  - New upstream version (1.20.1)
    Resolves: rhbz#2016312
  - Fix integer overflows in PAC parsing (CVE-2022-42898)
    Resolves: rhbz#2140971


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: Steve Dickson <steved@redhat.com> 0.10-0
changelog:
  - Initial package
  - Upstream contributions by:
      - Chuck Lever <chuck.lever@oracle.com>
      - Hannes Reinecke <hare@suse.de>
      - Jeff Layton <jlayton@kernel.org>
      - Benjamin Coddington <bcodding@redhat.com>
      - David Härdeman <david@hardeman.nu>
      - Tigran Mkrtchyan <tigran.mkrtchyan@desy.de>
      - Moritz "WanzenBug" Wanzenböck <moritz.wanzenboeck@linbit.com>


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-5
changelog:
  - resolves: RHEL-101761 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-4.el9)


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-1
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114548 - Update to version 4.23.4
  - resolves: RHEL-132995 - Fix Time Machine backup
  - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-1
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-143401 - Fix winbind group resolution
  - resolves: RHEL-141027 - Fix winbind crash


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: David Malcolm <dmalcolm@redhat.com> - 11.5.0-14
changelog:
  - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
    branches and calls to gcov output, but not conditions (RHEL-105416).


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Karel Zak <kzak@redhat.com> 2.37.4-21
changelog:
  - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing
  - fix RHEL-56983 - sulogin: fix POSIX locale use


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.48-9
changelog:
  - Fix integer overflow in _libcap_strdup() (CVE-2023-2603)
    Resolves: rhbz#2210638
  - Correctly check pthread_create() return value to avoid memory leak (CVE-2023-2602)
    Resolves: rhbz#2222198


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Evan Goode <egoode@redhat.com> - 0.69.0-16
changelog:
  - Introduce $releasever_major, $releasever_minor variables, shell-style
    variable substitution (RHEL-95006)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.40-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
    (mariocanfly@hotmail.com)
  - spec: Add missing GLib dependency when building without DNF
    (debarshir@gnome.org)
  - Remove deprecated `locale.*()` functions (mhorky@redhat.com)
  - Remove version constraint of pytest (mhorky@redhat.com)
  - RHEL-15110: RegisterServer is stopped, when not needed (jhnidek@redhat.com)
  - RHEL-15110: Fix issue with registration using gsd-subman (jhnidek@redhat.com)
  - Fix an error in debug logging of cloud-what (mhorky@redhat.com)
  - ci: bump actions/upload-artifact from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Improve debug logging to make it faster to understand (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.41-1
changelog:
  - feat: update man page with deprecation notices (jajerome@redhat.com)
  - feat: Disable anonymous cloud registration temporarily (mhorky@redhat.com)
  - feat: Deprecate 'syspurpose addons' (mhorky@redhat.com)
  - fix: make SyspurposeComplianceStatusCache.get_overall_status() always usable
    (ptoscano@redhat.com)
  - fix: Change order of checks (jhnidek@redhat.com)
  - fix: Cache shouldn't try to get data from server without UUID
    (jhnidek@redhat.com)
  - feat: Deprecate import command (zpetrace@redhat.com)
  - fix: 1.29 modify section about remove command in man page
    (jhnidek@redhat.com)
  - feat: 1.29 Deprecate redeem sub-command (jhnidek@redhat.com)
  - fix: Reformated man page of subscription-manager (jhnidek@redhat.com)
  - fix: [1.29] Remove command should not be primary command (jhnidek@redhat.com)
  - feat: deprecate autosubscribe/auto-attach register options
    (jajerome@redhat.com)
  - feat: deprecate attach/auto-attach modules (jajerome@redhat.com)
  - docs: deprecate attach/auto-attach in man page (jajerome@redhat.com)
  - fix: Hide subscription management "errors" in container mode
    (mhorky@redhat.com)
  - feat: 1.29 Deprecate remove sub-command (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora latest
    (jhnidek@redhat.com)
  - fix: 1.29 Do not try to test this branch for Fedora rawhide
    (jhnidek@redhat.com)
  - fix(test): Properly stop method mock (mhorky@redhat.com)
  - feat: Azure: added extended location and type of location fact
    (jhnidek@redhat.com)
  - fix: Update version of Azure metadata (jhnidek@redhat.com)
  - feat: Added Azure location to facts (jhnidek@redhat.com)
  - feat: Added zone GCP fact (jhnidek@redhat.com)
  - feat: Added more AWS cloud facts (jhnidek@redhat.com)
  - fix: Change type hint according returned value. (jhnidek@redhat.com)
  - feat: Add warning message about release version to dnf plugin
    (jhnidek@redhat.com)
  - Bump black from 23.3.0 to 24.3.0
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Format code with black==24.3.0 (ptoscano@redhat.com)
  - Fix memory leaks in test-productdb.c (jhnidek@redhat.com)
  - Fix memory leaks in productdb.c (jhnidek@redhat.com)
  - fix: Function prototype without declaration is deprecated
    (jhnidek@redhat.com)
  - Removed unused includes of .h files (jhnidek@redhat.com)
  - libdnf: switch from g_error_free() to g_clear_error() in tests
    (ptoscano@redhat.com)
  - libdnf: do not build test code in plugin (ptoscano@redhat.com)
  - Change handling of deprecated `datetime.datetime.utcnow()`
    (mhorky@redhat.com)
  - CCT-66: Update identity reporting in DNF plugin during autoregistration
    (mhorky@redhat.com)
  - Remove automatic registration delay for rhsmcertd (mhorky@redhat.com)
  - Remove API endpoint for automatic cloud registration v1 (mhorky@redhat.com)
  - CCT-67: Use automatic registration v2 (mhorky@redhat.com)
  - IdentityUpdateAction: Improve logging for updating identity certificates
    (mhorky@redhat.com)
  - Identity: Add method to extract current owner (mhorky@redhat.com)
  - rhsmcertd: Define exit codes (mhorky@redhat.com)
  - rhsmcertd: Use module-level logger (mhorky@redhat.com)
  - Add AnonymousCertificateManager (mhorky@redhat.com)
  - Add CloudTokenCache for Candlepin JWT (mhorky@redhat.com)
  - Implement API endpoints for Automatic registration v2 (mhorky@redhat.com)
  - Update documentation for one API call in connection.py (mhorky@redhat.com)
  - Fix type hint of RegisterService.register() (mhorky@redhat.com)
  - rhsmcertd: Drop D-Bus loop code (mhorky@redhat.com)
  - rhsmcertd: Add type hints (mhorky@redhat.com)
  - rhsmcertd: Remove forgotten old comment (mhorky@redhat.com)
  - Stop logging full lscpu output (mhorky@redhat.com)
  - Prevent double-logging of syspurpose cache log statement (mhorky@redhat.com)
  - Update the log message containing response time statistics
    (mhorky@redhat.com)
  - CCT-266: Update TLS flags (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.43-1
changelog:
  - [1.29] feat/cct-868: Subset of list command options marked as deprecated *
    Options --available, --all, --ondate, --servicelevel --no-overlap --match-
    install, --pool-only, --afterdate were marked as deprecated in ListCommand
    definition of their help string. (mgrunwal@redhat.com)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - docs: update proxy details in man page (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.44-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.45-1
changelog:
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: [1.29] Added basic configuration for Packit (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.46-1
changelog:
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - ci: use the right distro for coverage reporting (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.47-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: [1.29] Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - feat: [1.29] Call random.seed() at begining of auto-register
    (jhnidek@redhat.com)
  - feat: [1.29] Better control over auto-reg waiting game (jhnidek@redhat.com)
  - fix: [1.29] Enable content during auto-registration v2 (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.29.48-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - feat: [1.29] Added dnf4 warning about skewed clock (jhnidek@redhat.com)
  - fix: [1.29] Require findutils in .spec file (jhnidek@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)


author: DJ Delorie <dj@redhat.com> - 3.4.2-8
changelog:
  - Use /etc/sysconfig/libffi-force-shared-memory-check-first to
    override selinux permissions check for shared memory access (#2152228)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-9
changelog:
  - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode
  - Do not allow large salt lengths with RSA-PSS padding
  - Disable X9.31 key generation in FIPS mode
  - Update the FIPS integrity checking code to upstream version
  - Update cipher modes FIPS indicators for AES WRAP and GCM
  - Disable jitter entropy generator


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-10
changelog:
  - Provide FIPS indicators for MD and HMACs
  - Improve PCT tests for ECDSA and always run them after key is generated
  - Add missing guards for FIPS status in md_sign/verify function
  - Provider FIPS indicators for public key operation flags


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Kamal Heib <kheib@redhat.com> - 60.0-1
changelog:
  - Rebase to upstream release v60.0
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-2
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 60.0-3
changelog:
  - bump release to rebuild in sidetag
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Kamal Heib <kheib@redhat.com> - 61.0-1
changelog:
  - Rebase to upstream release v61.0
  - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331


author: Dan Horák <dhorak@redhat.com> - 4.2.3-1
changelog:
  - updated to 4.2.3 (RHEL-11415)
  - fix selfcheck in FIPS mode (RHEL-9918)
  - Resolves: RHEL-11415 RHEL-9918


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Tomas Halman <thalman@redhat.com> - 2.9.8-1
changelog:
  - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
  - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
  - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
  - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-28
changelog:
  -  Makefile.am: allow mount.nfs to be writeable by owner (RHEL-68701)
  -  mount.nfs: retry NFSv3 mount after NFSv4 failure in auto negotiation (RHEL-68574)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-30
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-72823)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-64340)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-31
changelog:
  - nfsdcld: prevent from accessing /var/lib/nfs/nfsdcld in read-only file system during boot (RHEL-78177)
  - Replace functional gating tests with the ones from RHEL10 (RHEL-78110)
  - Add explicit version requirement for libnfsidmap (RHEL-78107)
  - Add --disable-sbin-override for when /sbin is a symlink (RHEL-69771)
  - Move remaining binaries from /sbin to /usr/sbin (RHEL-69771)


author: Scott Mayhew <smayhew@redhat.com> 2.5.4-32
changelog:
  - Undo 'Add explicit version requirement for libnfsidmap' from previous build (RHEL-78107)
  - Undo 'Add --disable-sbin-override for when /sbin is a symlink' from previous build (RHEL-69771)
  - Undo 'Move remaining binaries from /sbin to /usr/sbin' from previous build (RHEL-69771)


author: Steve Dickson <steved@redhat.com> 2.5.4-35
changelog:
  - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
  - nfsd: allow more than 64 backlogged connections (RHEL-87752)


author: Steve Dickson <steved@redhat.com> 2.5.4-37
changelog:
  - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
  - gssd: do not use krb5_cc_initialize (RHEL-85412)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-3
changelog:
  - Enable pkcs11 support
  - Fix broken libsofthsm path on i686
  - Add missing bugzilla references from the rebase commit
  - Related: rhbz#2026449
  - Resolves: rhbz#1977913, rhbz#1975500


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-4
changelog:
  - Move loglevel closer to openssh loglevel
  - Add openssh config feature of +,-,^ for algorithm lists
  - Fix memory leaks of bignum
  - Prevent multiple expansion of escape characters
  - Resolves: rhbz#2132407, rhbz#2137839, rhbz#2144795, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-6
changelog:
  - Fix covscan error
  - Remove unwanted test with yet unimplemented feature
  - Related: rhbz#2137839, rhbz#2136824


author: Norbert Pocs <npocs@redhat.com> - 0.10.4-9
changelog:
  - Fix CVE-2023-1667 and CVE-2023-2283
  - Fix issues found by cosvcan
  - Resolves: rhbz#2182252, rhbz#2189740


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-12
changelog:
  - Fix CVE-2023-48795 Prefix truncation attack on Binary Packet Protocol (BPP)
  - Fix CVE-2023-6918 Missing checks for return values for digests
  - Fix CVE-2023-6004 ProxyCommand/ProxyJump features allow injection
    of malicious code through hostname
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Sahana Prasad <sahana@redhat.com> - 0.10.4-13
changelog:
  - Bump up the version so that the version in 9.3 is lower.
  - Resolves: RHEL-19310, RHEL-19691, RHEL-17245


author: Pavol Žáčik <pzacik@redhat.com> - 0.10.4-16
changelog:
  - Fix CVE-2025-5987
    Resolves: RHEL-130051
  - Workaround sshd failure rate limiting in tests
    Resolves: RHEL-135506


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: David King <dking@redhat.com> - 2.9.13-10
changelog:
  - Fix CVE-2025-6021 (RHEL-96507)
  - Fix CVE-2025-49794 (RHEL-96405)
  - Fix CVE-2025-49796 (RHEL-96431)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: RHEL Packaging Agent <jotnar@redhat.com> - 0.3.24-1
changelog:
  - Rebase to 0.3.24
  - Add missing libzstd-devel BuildRequires
  - Add missing files to the %files tests section
  - Resolves: RHEL-116442


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Patsy Griffin <patsy@redhat.com> - 6.04-4
changelog:
  - Activate previously added patch to improve mktime documentation and
    add 3 related upstream patches including an example.
    Related: RHEL-58342


author: Patsy Griffin <patsy@redhat.com> - 6.04-7
changelog:
  - Break up man-pages-additional-20140218.tar.xz
  - Add rtas.2, swapcontext.2 and cons.saver.8 man pages as a patch.
    Resolves: RHEL-101596


author: Xiao Ni <xni@redhat.com> - 4.2-7
changelog:
  - Update to latest upstream and keep udev rule close to upstream
  - Resolves rhbz#2107147, rhbz#2129087, rhbz#2126428


author: Xiao Ni <xni@redhat.com> - 4.2-8
changelog:
  - Update to latest upstream
  - Resolves rhbz#2127101, rhbz#2139789, rhbz#2149292, rhbz#2151209, rhbz#2148945


author: Xiao Ni <xni@redhat.com> - 4.2-9
changelog:
  - Update to latest upstream and fix mdcheck service bug
  - Resolves rhbz#2159923, rhbz#2150865, rhbz#2124071, rhbz#2203859


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Lukas Hrazky <lhrazky@redhat.com> - 3.9.1-1
changelog:
  - Update to 3.9.1
  - leaves: Treat recommends as dependencies when install_weak_deps=True
  - Add leaves command
  - Remove non-breaking space from "Size" column (RhBug:2010676)


author: Nicola Sella <nsella@redhat.com> - 3.9.1-2
changelog:
  - Revert: leaves: Treat recommends as dependencies when install_weak_deps=True
  - Revert: Add leaves command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.2-9.20210508
changelog:
  - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
  - ignore TERMINFO and HOME environment variables if running as root (#2211666)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Phil Sutter <psutter@redhat.com> [1.0.9-4.el9]
changelog:
  - parser_json: fix handle memleak from error path (Phil Sutter) [RHEL-88181]
  - json: deal appropriately with multidevice in chain (Phil Sutter) [RHEL-88181]


author: Phil Sutter <psutter@redhat.com> [1.0.9-5.el9]
changelog:
  - tests: py: missing json output in never merge across non-expression statements (Phil Sutter) [RHEL-114095]
  - tests: py: add missing json.output data (Phil Sutter) [RHEL-114095]
  - tests: py: remove huge-limit test cases (Phil Sutter) [RHEL-114095]
  - datatype: rt_symbol_table_init() to search for iproute2 configs (Phil Sutter) [RHEL-114095]
  - tests: shell: connect chains to hook point (Phil Sutter) [RHEL-114095]
  - tests: shell: Fix sets/reset_command_0 for current kernels (Phil Sutter) [RHEL-114095]


author: Phil Sutter <psutter@redhat.com> [1.0.9-6.el9]
changelog:
  - Revert doc/ part of "exthdr: add boolean DCCP option matching" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "meta: introduce meta broute support" (Phil Sutter) [RHEL-126817]
  - Revert doc/ part of "src: add tcp option reset support" (Phil Sutter) [RHEL-126817]
  - spec: Update expected test suite results (Phil Sutter) [RHEL-126817]


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.1-6
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-73344, upgrade openCryptoki
  - Resolves: RHEL-90590, basic support of AES-GCM
  - Resolves: RHEL-72965, cca token support cipher keys
  - Resolves: RHEL-72969, support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-75141, add a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75762, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85375, cca token: Support ECDH to derive AES keys
  - Resolves: RHEL-85377, ep11 token: PKCS #11 3.0 - support SHA3


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73344, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77147, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104602


author: Than Ngo <than@redhat.com> - 3.25.0-4
changelog:
  - Fix pkcsslotd fails to start in FIPS
  - Drop tier1 test as it mostly provides duplicate results
  - Enable ci test for FIPS mode
    Resolves: RHEL-109050


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75139, ep11 token BLS support
  - Resolves: RHEL-85381, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85384. cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100059, openCryptoki 3.26.0


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-1
changelog:
  - Rebase to latest 0.23.0 release (#2100409)
  - Use separate OpenSSL context to work better from inside of OpenSSL providers


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-2
changelog:
  - Fix regression in handling OpenPGP cards
  - Fix CVE-2023-2977: buffer overrun in pkcs15init for cardos


author: Jakub Jelen <jjelen@redhat.com> - 0.23.0-3
changelog:
  - Fix file caching with different offsets (RHEL-4079)
  - Fix CVE-2023-40660: Potential PIN bypass
  - Fix CVE-2023-40661: Dynamic analyzers reports in pkcs15init
  - Fix CVE-2023-4535: Out-of-bounds read in MyEID driver handling encryption using symmetric keys
  - Fix CVE-2023-5992: Side-channel leaks while stripping encryption PKCS#1.5 padding


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-2
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-119515
  - Canonicalize username when matching a user
    Resolves: RHEL-118372


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-3
changelog:
  - Enable support for DSA keys
    Resolves: RHEL-127624
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-133959
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-133960


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Dan Horák <dhorak@redhat.com> - 2.3.0-1
changelog:
  - updated to 2.3.0 (#2044177)
  - add provider for openssl 3.x (#2044185)
  - Resolves: #2044177 #2044185


author: Dan Horák <dhorak@redhat.com> - 2.4.0-2
changelog:
  - engine: Only register those algos specified with default_algorithms (#2221894)
  - Resolves: #2221894


author: Dan Horák <dhorak@redhat.com> - 2.4.0-4
changelog:
  - provider: RSA: Fix get_params to retrieve max-size, bits, and security-bits (#2222878 #2224568)
  - provider: Default debug directory to /tmp but make it configurable (#2160084)
  - Resolves: #2222878 #2160084 #2224568


author: Jakub Jelen <jjelen@redhat.com> - 0.4.11-8
changelog:
  - Fix sending parameters for RSA-OAEP operations (#2063378)
  - Improve logging and fix selection of expired certificates (#2029834)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.3-3
changelog:
  - Fix regression in trust where file creation fails for long cert labels
    Resolves: RHEL-58899
  - Fix usage message in p11-kit list-tokens command
    Resolves: RHEL-31810


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-24
changelog:
  - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519
  - pam.conf: remove tallylog. Resolves: RHEL-15324


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-26
changelog:
  - pam_unix: sync expiry checks with shadow.
    Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973
  - pam.conf: remove tallylog. Resolves: RHEL-15324
  - pam_namespace: fix potential privilege escalation.
    Resolves: CVE-2025-6020 and RHEL-96727


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Brian C. Lane <bcl@redhat.com> - 3.5-3
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73217
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73217
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73217
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73217


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomas Orsava <torsava@redhat.com> - 1.14.5-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-3
changelog:
  - Fix CVE-2023-23931: Don't allow update_into to mutate immutable objects, resolves rhbz#2172399
  - Fix FTBFS due to failing test_load_invalid_ec_key_from_pem and test_decrypt_invalid_decrypt


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Rafael Jeffman <rjeffman@redhat.com> - 2.2.1-1
changelog:
  - Rebase to version 2.2.1
    Resolves: rhbz#2088661
  - Disable DNSSEC tests using SHA1 due to crypto policies
    Resolves: rhbz#2107651


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: John Kacur <jkacur@redhat.com> - 0.7.3-1
changelog:
  - Rebase to upstream python-linux-procfs-0.7.3
  - This rebase removes upstream spec files and
  - syncs the git tag with version
  Resolves: RHEL-7614


author: John Kacur <jkacur@redhat.com> - 0.7.4-2
changelog:
  - Update setup.py for older distributions
  - Use explicit setup.py build commands
  Resolves: RHEL-119895


author: Thomas Moschny <thomas.moschny@gmx.de> - 3.3.4-2
changelog:
  - Apply PR6 by Igor Raits <ignatenkobrain@fedoraproject.org>: Support
    for building on EPEL8 + upstream tests invocation.
  - Remove unused BR on python3-tidy (we'd need pytidylib instead, which
    doesn't seem to be packaged).


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-40
changelog:
  - Improve error handling on keystore load (RHEL-114837)
  - Sort files before passing to file attr dependency generators (RHEL-95376)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.3-1
changelog:
  - SETools 4.4.3 release
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.5-6
changelog:
  - Security fix for CVE-2024-37891
  - Backport upstream patch to fix TypeError for http connection if the PoolManager
  - is instantiated with server_hostname
  Resolves: RHEL-43172
  Resolves: RHEL-39285


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Sumit Bose <sbose@redhat.com>
changelog:
  - Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - migrated to SPDX license
  - allow multiple names and _srv_ ad_server option
    Resolves: jira#RHEL-12112
  - fix ccache handling for leave operation
    Resolves: jira#RHEL-5104


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-57
changelog:
  - Revert "boot: Use EFI_BOOT_MANAGER_POLICY_PROTOCOL to connect console devices" (RHEL-108596)
  - boot: Use correct memory type for allocations (RHEL-108555)
  - meson: /etc/systemd/network is also used by udevd (RHEL-109096)
  - sd-bus: make bus_add_match_full accept timeout (RHEL-31756)
  - core/unit: add get_timeout_start_usec in UnitVTable and define it for service (RHEL-31756)
  - core/unit: increase the NameOwnerChanged/GetNameOwner timeout to the unit's start timeout (RHEL-31756)
  - core,sd-bus: drop empty lines between function call and error check (RHEL-31756)
  - core: do not disconnect from bus when failed to install signal match (RHEL-31756)
  - dbus: stash the subscriber list when we disconenct from the bus (RHEL-31756)
  - manager: s/deserialized_subscribed/subscribed_as_strv (RHEL-31756)
  - bus-util: do not reset the count returned by sd_bus_track_count_name() (RHEL-31756)
  - core/manager: restore bus track deserialization cleanup in manager_reload() (RHEL-31756)
  - core/manager: drop duplicate bus track deserialization (RHEL-31756)
  - sd-bus/bus-track: use install_callback in sd_bus_track_add_name() (RHEL-31756)
  - shell completion: add kernel-identify/inspect verbs for bootctl (RHEL-108576)
  - test: add tests for format_timestamp() and parse_timestamp() with various timezone (RHEL-109488)
  - test-time-util: disable failing tests (RHEL-109488)
  - test: test parse_timestamp() in various timezone (RHEL-109488)
  - systemctl: logind: add missing asserts (RHEL-109488)
  - systemctl: logind: make logind_schedule_shutdown accept action as param (RHEL-109488)
  - systemctl: add option --when for scheduled shutdown (RHEL-109488)
  - test-time-util: add test cases to invalidate "show" and "cancel" (RHEL-109488)
  - Introduce RET_GATHER and use it in src/shared/ (RHEL-108598)
  - fd-util: don't eat up errors in fd_cloexec_many (RHEL-108598)
  - sd-bus: refuse to send messages with an invalid string (RHEL-108584)
  - test: check if we correctly handle invalid UTF-8 in mount stuff (RHEL-108584)
  - test: fix a typo in the cleanup stuff (RHEL-108584)
  - test: explicitly specify a UTF-8 locale for UTF-8 shenanigans (RHEL-108584)
  - test: use the correct file name when restoring the original fstab (RHEL-108584)
  - core: escape UTF-8 in mount unit Where field before sending to clients (RHEL-108584)
  - Revert "test-time-util: disable failing tests" (RHEL-109488)
  - test: use get_timezones() to iterate all known timezones (RHEL-109488)
  - test-time-util: do not fail on DST change (RHEL-109488)
  - test-time-util: suppress timestamp conversion failures for Africa/Khartoum timezone (RHEL-109488)
  - test-time-util: do more suppression of time zone checks (RHEL-109488)
  - test-time-util: fix truncation of usec to sec (RHEL-109488)
  - test: unset TZ before timezone-sensitive unit tests are run (RHEL-109488)
  - meson: extend timeout for test-time-util (RHEL-109488)
  - time-util: use DEFINE_STRING_TABLE_LOOKUP_TO_STRING() macro (RHEL-109488)
  - time-util: align string table (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: add assertions (RHEL-109488)
  - time-util: drop redundant else (RHEL-109488)
  - time-util: do not use strdupa() (RHEL-109488)
  - time-util: use result from startswith_no_case() (RHEL-109488)
  - time-util: use usec_add() and usec_sub_unsigned() (RHEL-109488)
  - time-util: shorten code a bit (RHEL-109488)
  - time-util: rename variables (RHEL-109488)
  - time-util: drop unnecessary assignment of timezone name (RHEL-109488)
  - time-util: make parse_timestamp() use the RFC-822/ISO 8601 standard timezone spec (RHEL-109488)
  - time-util: fix typo (RHEL-109488)
  - ci: bump the tools tree to F42 (RHEL-109488)
  - journald: extend STDOUT_STREAMS_MAX to 64k (RHEL-111065)
  - Revert "Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT"" (RHEL-50103)
  - udev-builtin-net_id: ignore firmware_node/sun == 0 (RHEL-50103)
  - fundamental: fix compile check for explicit_bzero (RHEL-108568)
  - time-util: make USEC_TIMESTAMP_FORMATTABLE_MAX for 32bit system off by one day (RHEL-109488)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-59
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118215)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118215)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118215)
  - timer: don't run service immediately after restart of a timer (RHEL-118215)
  - test: store and compare just the property value (RHEL-118215)
  - test: make test-fd-util more lenient when using fd_move_above_stdio() (RHEL-114974)
  - basic: add PIDFS magic (#31709) (RHEL-114974)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-60
changelog:
  - man: fix a missing word (RHEL-115182)
  - cryptsetup: Add optional support for linking volume key in keyring. (RHEL-97175)
  - cryptsetup: fix typo (RHEL-97175)
  - cryptsetup: HAVE_CRYPT_SET_KEYRING_TO_LINK is always defined (RHEL-97175)
  - coredump: make check that all argv[] meta data fields are passed strict (RHEL-104138)
  - coredump: restore compatibility with older patterns (RHEL-104138)
  - coredump: use %d in kernel core pattern (RHEL-104138)
  - pidref: add structure that can reference a pid via both pidfd and pid_t (RHEL-104138)
  - fd-util: introduce parse_fd() (RHEL-104138)
  - coredump: add support for new %F PIDFD specifier (RHEL-104138)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-61
changelog:
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
  - strv: introduce string_strv_hashmap_remove() (RHEL-14112)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-62
changelog:
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
  - timer: rebase last_trigger timestamp if needed (RHEL-118215)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-63
changelog:
  - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
  - cryptsetup-generator: continue parsing after error (RHEL-127859)
  - cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
  - cryptsetup-generator: always process cmdline devices (RHEL-127859)
  - logind: add "background-light" session class (RHEL-109833)
  - pam_systemd: honor session class provided via PAM environment (RHEL-109833)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-64
changelog:
  - core: fix array size in unit_log_resources() (RHEL-131338)
  - pid1: add env var to override default mount rate limit burst (RHEL-129153)
  - pid1: add env var to override default mount rate limit interval (RHEL-129153)


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 5-1
changelog:
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2077759: invoke cockpit.translate() after document loading
    (ptoscano@redhat.com)
  - test: Drop outdated copy of packagelib.py (martin@piware.de)
  - Added missing keys to react components (jhnidek@redhat.com)
  - Fix the issue, when it is not possible to install insights-client
    (jhnidek@redhat.com)
  - test: Sync packagelib.py with cockpit main (martin@piware.de)
  - New target and added one project directory to .gitignore (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 6-1
changelog:
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - 2169976: insights: fix spawn_error_to_string in more cases
    (ptoscano@redhat.com)


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-7
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 98cf8d63 (RHEL-30953)
  - Use proper SPDX license identifiers
  - Fix a test failure


author: Vladis Dronov <vdronov@redhat.com> - 6.17-1
changelog:
  - Add Intel CET IBT instrumentation to assembly code
  - Update to the upstream v6.17 @ ac43f912 (RHEL-64951)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-21
changelog:
  - Resolves: RHEL-70265 - Rebase rsync to 3.2.5
  - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices
  - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps.
  - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-2
changelog:
  - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70208 - Path traversal vulnerability in rsync
  - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-1
changelog:
  - rebased to 2.29.0 (RHEL-11408)
  - KVM: Support AP Bindings in SE Header (RHEL-10572)
  - KVM: Userspace Tool for IBK Request Generation and Insertion (RHEL-10578)
  - zkey: support for key type PKEY_TYPE_EP11_AES (RHEL-11440)
  - vmur: fix handling of option -t (RHEL-11480)
  - dbginfo.sh: global original Input Field Separator (IFS) (RHEL-16527)
  - enable multi-arch build (RHEL-10567)
  - Resolves: RHEL-11408 RHEL-10572 RHEL-10578 RHEL-11440 RHEL-11480 RHEL-16527 RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.29.0-3
changelog:
  - add s390utils-se-data as a noarch subpackage with Secure Execution data files
  - Resolves: RHEL-10567


author: Dan Horák <dhorak@redhat.com> - 2:2.33.1-1
changelog:
  - rebased to 2.33.1 (RHEL-23704)
  - dbginfo.sh: missing data of new ROCE cards (RHEL-24109)
  - SE-tooling: New IBM host-key subject locality (RHEL-30273)
  - Fix disk type detection when running under QEMU (RHEL-40358)
  - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-50026)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030)
  - Resolves: RHEL-50026 RHEL-50030


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-50026)
  - cpacfinfo: new tool to provide CPACF information (RHEL-50020)
  - chpstat: Additional Channel Measurements (RHEL-50023)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024)
  - KVM: Support extended attestation for Secure Execution (RHEL-50009)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64705)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853)
  - KVM: Rewrite genprotimg in Rust (RHEL-72023)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019)
  - zkey key support for dm-crypt with XTS keys (RHEL-50010)
  - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73342)
  - LPAR level power consumption reporting (RHEL-72675)
  - Provide Topology-Map information to userspace (RHEL-72682)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73021)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390)
  - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100439)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745)
  - zipl: makedumpfile is required for ngdump support (RHEL-114663)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109215)
  - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215


author: Dan Horák <dhorak@redhat.com> - 2:2.40.0-1
changelog:
  - rebased to 2.40.0 (RHEL-100439)
  - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent
  - Secure Execution: Add tool to verify host-key documents (RHEL-136796)
  - Resolves: RHEL-100439 RHEL-136796


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.59-1
changelog:
  - virt: allow QEMU use of the qgs daemon for attestation
  Resolves: RHEL-87744
  - qgs: add contrib module for TDX "qgs" daemon
  Resolves: RHEL-87744
  - kernel: add interfaces for using SGX enclaves
  Resolves: RHEL-87744
  - Allow coreos-installer search sssd library directory
  Resolves: RHEL-95689
  - Label /dev/diag as diagnostic_device_t
  Resolves: RHEL-95342
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.60-1
changelog:
  - Allow irqbalance execute shell if irqbalance_run_unconfined is on
  Resolves: RHEL-1556
  - Update irqbalance policy for using unconfined scripts
  Resolves: RHEL-1556


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.61-1
changelog:
  - Fix incorrect /run and /usr/bin file context entries
  Resolves: SELINUX-4392
  - Dontaudit irqbalance read sssd public files
  Resolves: RHEL-1556
  - Update sssd_dontaudit_read_public_files()
  Resolves: RHEL-1556
  - Allow insights-client file transition for files in /var/tmp
  Resolves: SELINUX-4392
  - Add the virt_exec_virsh() interface
  Resolves: SELINUX-4392
  - Add the ssh_exec_sshd() interface
  Resolves: SELINUX-4392
  - Add rhsmcertd interfaces
  Resolves: SELINUX-4392
  - Add the bind_exec_named_checkconf() interface
  Resolves: SELINUX-4392
  - Add the auth_write_motd_var_run_files() interface
  Resolves: SELINUX-4392
  - Add the gpg_domtrans_agent() interface
  Resolves: SELINUX-4392
  - Add the gpg_read_user_secrets() interface
  Resolves: SELINUX-4392
  - Add policy for insights-core
  Resolves: SELINUX-4392


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.62-1
changelog:
  - Allow "hostapd_cli ping" run as a systemd service
  Resolves: RHEL-59683
  - Allow systemd-timedated start/stop timemaster services
  Resolves: RHEL-95690
  - Allow lldpd connect to systemd-machined over a unix socket
  Resolves: RHEL-96167
  - Allow power-profiles-daemon get attributes of filesystems with extended attributes
  Resolves: RHEL-100718
  - Allow tuned-ppd watch_reads sysfs directories
  Resolves: RHEL-101687
  - Allow tuned-ppd watch sysfs directories
  Resolves: RHEL-101687


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.63-1
changelog:
  - Allow samba-dcerpcd send sigkills to passwd
  Resolves: RHEL-100032
  - Allow power-profiles-daemon watch sysfs directories
  Resolves: RHEL-100718
  - Allow power-profiles-daemon write sysfs files
  Resolves: RHEL-100718
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-59683
  - Allow irqbalance search sssd lib directories
  Resolves: RHEL-1556
  - Add insights_client_delete_lib_dirs() interface
  Related: RHEL-59145


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.64-1
changelog:
  - Add insights_core and insights_client interfaces
  Related: RHEL-59145
  - Label /usr/libexec/postfix/tlsproxy with postfix_smtp_exec_t
  Resolves: RHEL-77101
  - Remove "minimum" as a SELINUXTYPE from /etc/selinux/config
  Resolves: RHEL-101140


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.65-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110650
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110650


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.66-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112367
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112367


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.67-1
changelog:
  - Allow login_userdomain dbus chat with tuned-ppd
  Resolves: RHEL-113906
  - selinux-policy: add allow rule for tuned_ppd_t
  Resolves: RHEL-113906
  - Add ppd_base_profile to file transition to get tuned_rw_etc_t type
  Resolves: RHEL-113906
  - Allow tuned-ppd manage tuned log files
  Resolves: RHEL-113906
  - Allow tuned-ppd connect to sssd over a unix stream socket
  Resolves: RHEL-113906
  - Allow tuned-ppd create ppd_base_profile with a file transition
  Resolves: RHEL-113906
  - Allow init create and use vsock socket
  Resolves: RHEL-113647
  - Add Valkey rules to Redis module
  Resolves: RHEL-108982
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-103975
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-66119


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.68-1
changelog:
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-108826
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-127329
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-103975
  - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
  Resolves: RHEL-101155
  - Allow bootupd delete symlinks in the /boot directory
  Resolves: RHEL-101155
  - Update policy for bootupd
  Resolves: RHEL-101155
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-123225


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.69-1
changelog:
  - Allow sysadm access to TPM
  Resolves: RHEL-119055
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113941
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114157
  - Allow login_userdomain watch /home and /var directories
  Resolves: RHEL-119686
  - Allow login_userdomain read lastlog
  Resolves: RHEL-119686
  - Allow staff role read/write cockpit-session unix stream sockets
  Resolves: RHEL-108068
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113941


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.70-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-108826
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-108826
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-66119


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.71-1
changelog:
  - Revert "Allow NM nvme dispatcher script start systemd services"
  Resolves: RHEL-111946
  - Allow ssh_agent_type create a sockfile in /run/user/USERID
  Resolves: RHEL-121936
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-111946
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121480
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129879


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.72-1
changelog:
  - Add insights_client service interfaces
  Related: RHEL-140893
  - Confine rhc-worker-playbook.worker and rhc-playbook-verifier
  Resolves: RHEL-132748
  - Allow gpg manage rpm cache
  Related: RHEL-108775
  - Allow gpg read rpm cache
  Related: RHEL-108775
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121480
  - Allow rules for confined users logged in plasma
  Resolves: RHEL-133898
  - Allow login_userdomain watch lnk_files in /usr
  Resolves: RHEL-133898


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-13
changelog:
  - nss.c: shadow_logfd to stderr. Resolves: RHEL-83431
  - vipw: restore the original terminal pgrp after editing. Resolves: RHEL-70844 and RHEL-72940


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-1
changelog:
  - Update to 4.9.1 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.1-2
changelog:
  - Update to 4.9.1-2 in RHEL 9
    Resolves: RHEL-86668
    Resolves: RHEL-86644
    Resolves: RHEL-86647
    Resolves: RHEL-86646


author: Jan Jansky <jjansky@redhat.com> = 4.9.2-1
changelog:
  - Update to 4.9.2 
    Resolves: RHEL-101717
    Resolves: RHEL-101718
    Resolves: RHEL-101719
    Resolves: RHEL-101720


author: Jan Jansky <jjansky@redhat.com> = 4.10.0-1
changelog:
  - Update to 4.10.0
    Resolves: RHEL-110500
    Resolves: RHEL-110501
    Resolves: RHEL-110502
    Resolves: RHEL-110503


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Abhi Das <adas@redhat.com> - 4.4-9.git1
changelog:
  - CVE-2021-40153 squashfs-tools: unvalidated filepaths allow writing outside of destination
    rhbz#2000638


author: Abhi Das <adas@redhat.com> - 4.4-10.git1
changelog:
  - CVE-2021-41072 squashfs-tools: additional write outside destination directory exploit fix
    rhbz#2007304


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.18-2
changelog:
  - Fix the issues reported by covscan (#2103068).
  - Fix SELinux context matching for the deleted paths (#2087693).
  - Fix sloppy FD usage in the bpf test (#2103137).
  - Cater for RHEL 9 license requirement idiosyncrasies (#2103032).


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-1
changelog:
  - Rebase to v6.7; drop upstream patches on top of 5.18 (RHEL-8646).
  - Updated the SPDX license expression.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-2
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65109).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.12-1
changelog:
  - Rebase to v6.12; drop upstream patches on top of 6.7, drop the harcoded
    "-isystem /usr/include" from CPPFLAGS (RHEL-8646).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Clemens Lang <cllang@redhat.com> - 5.71-1
changelog:
  - New upstream release 5.71
    Resolves: RHEL-2468
  - Enable socket activation support
  - verify upstream source in %prep
  - clean up stale conditionals


author: Clemens Lang <cllang@redhat.com> - 5.71-2
changelog:
  - Speed up loading client CA list from CAfile
    Resolves: RHEL-52321
  - Do not load all CAs in client mode to allow continued use of BEGIN TRUSTED CERTIFICATE format
    Resolves: RHEL-52317


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.19-1
changelog:
  - ENT-4083: Fix flake8 error E402 (mhorky@redhat.com)
  - ENT-4085: Fix flake8 error E713 (mhorky@redhat.com)
  - 2003777: Show available organizations before asking for input
    (mhorky@redhat.com)
  - ENT-4302: Remove "u" prefix from strings (mhorky@redhat.com)
  - ENT-4326: Drop "-*- coding" comment (mhorky@redhat.com)
  - ENT-4277: Drop __future__ imports (mhorky@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Debian / Ubuntu multi-architectures support
    (sbernhard@users.noreply.github.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - 1859157: Display better error message on incorrect --org (mhorky@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - 1924338: list prints not status and dates in SCA mode (jhnidek@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - ENT-4089: Fix flake8 error E741 (mhorky@redhat.com)
  - ENT-4090: Fix flake8 error F821 (mhorky@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - ENT-4091: Fix flake8 error F841 (mhorky@redhat.com)
  - ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - Drop unused M2Crypto bits (ptoscano@redhat.com)
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - ENT-4213: Remove deprecated pep8 package (mhorky@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - flake8: enable E131, E714 (ptoscano@redhat.com)
  - 1859569: Abort on invalid username/token option in syspurpose commands
    (mhorky@redhat.com)
  - Drop logging.conf (ptoscano@redhat.com)
  - Drop long-dead sat5to6 script (ptoscano@redhat.com)
  - Drop RHN migration (ptoscano@redhat.com)
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - ENT-164: Remove ga_loader importer (mhorky@redhat.com)
  - ENT-164: Drop rhsm-gtk (mhorky@redhat.com)
  - ENT-164: Drop subscription-manager-gui & rhsm-icon (mhorky@redhat.com)
  - Add minimal documentation for the plugins directories (ptoscano@redhat.com)
  - ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - Move zypper plugins to an own directory (ptoscano@redhat.com)
  - Move dnf plugins to an own directory (ptoscano@redhat.com)
  - Move libdnf plugins to an own directory (ptoscano@redhat.com)
  - Drop support for YUM plugins (ptoscano@redhat.com)
  - Drop YUM plugins (ptoscano@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - ENT-4152: Drop initial-setup addon (mhorky@redhat.com)
  - ENT-4136: Drop firstboot support (mhorky@redhat.com)
  - ENT-3764: Change comments to follow Conscious language initiative
    (mhorky@redhat.com)
  - ENT-3764: Update variable names in hwprobe.py (mhorky@redhat.com)
  - ENT-3764: Update project URLs to new versions (mhorky@redhat.com)
  - ENT-3764: Remove BLACKLISTED_LOCALES (mhorky@redhat.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - flake8: enable E121, E122, E123, E126, E127, E128 (ptoscano@redhat.com)
  - flake8: disable E122 for test/test_utils.py (ptoscano@redhat.com)
  - Wrap first argument/element in function calls & containers
    (ptoscano@redhat.com)
  - Fix indentation of some continuation lines (ptoscano@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1977452: typo in string format change Add quotes to a {filename} and remove
    an extra space. (tmerry@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - Added new stage for running libdnf unit tests. (jhnidek@redhat.com)
  - make sure gpg key download doesn't fail because of private certs
    (sbernhard@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.21-1
changelog:
  - 2020248: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.23-1
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - Drop the Vagrant bits (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.24-1
changelog:
  - 2023430: Cockpit: another improvement of curtain view (jhnidek@redhat.com)
  - environments: fix list for account in env-less org (ptoscano@redhat.com)
  - Reverting disabling AutoAttach() and PoolAttach() in SCA mode
    (jhnidek@redhat.com)
  - 2023430: cockpit: improve handling of main curtain view (ptoscano@redhat.com)
  - Squelch DeprecationWarning's when importing pyinotify (ptoscano@redhat.com)
  - Drop tox.ini, no more needed now (ptoscano@redhat.com)
  - flake8: improve, and integrate bits from tox.ini (ptoscano@redhat.com)
  - flake8: misc fixes in tito/tests (ptoscano@redhat.com)
  - 2035662: facts: tweak message for dmidecode warnings (ptoscano@redhat.com)
  - facts: improve/tweak logging of warnings (ptoscano@redhat.com)
  - jenkins: use custom settings for the RH internal npmjs repo
    (ptoscano@redhat.com)
  - jenkins: switch away from readFile() (ptoscano@redhat.com)
  - jenkins: simplify script filenames & labels (ptoscano@redhat.com)
  - jenkins: remove old scripts (ptoscano@redhat.com)
  - ENT-4671: Improve debug logging to stdout (mhorky@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - ENT-4650: Remove python-six from build system (mhorky@redhat.com)
  - ENT-4093: Fix flake8 warning W605 (mhorky@redhat.com)
  - ENT-4618: Switch away from six.get_method_* (mhorky@redhat.com)
  - ENT-4414: Remove RhsmIconCache (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ENT-4589: Switch away from six.reraise (mhorky@redhat.com)
  - 2041968: Update man and help for environments options (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.25-1
changelog:
  - 2046516: register: do not check environments w/ activation keys
    (ptoscano@redhat.com)
  - No-op refactor of RegisterCommand._process_environments()
    (ptoscano@redhat.com)
  - 1935446: Use updated cert with SHA-256 algorithm (jhnidek@redhat.com)
  - build: pin pytest to < 7 (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)


author: Christopher Snyder <csnyder@redhat.com> 1.29.26-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Revert "1935446: Use updated cert with SHA-256 algorithm"
    (csnyder@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 20220608-1
changelog:
  - New package built with tito
  - Using new version pattern for subscription-manager-rhsm-certificates


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-8
changelog:
  RHEL 9.2.0 ERRATUM
  - sudo digest check fails incorrectly for certain file sizes (SHA512/SHA384)
  Resolves: rhbz#2115789


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-9
changelog:
  RHEL 9.2.0 ERRATUM
  - CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
  Resolves: rhbz#2161225


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-10
changelog:
  RHEL 9.3.0.Z ERRATUM
  - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
  Resolves: RHEL-21834
  - CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
  Resolves: RHEL-21828
  - CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables
  Resolves: RHEL-21821


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-12
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-13
changelog:
  RHEL: 9.7.0 ERRATUM
  - sudo missing spacing and separator in log when using "--preserve-env=list"
  Resolves: RHEL-71916
  - CVE-2025-32462 sudo: LPE via host option
  Resolves: RHEL-100020


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.34-8
changelog:
  - Backport upstream changes to jailify extraction directory
    Includes related gnulib changes to add openat2
    Fixes CVE-2025-45582


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.34-9
changelog:
  - Fix the last patch to solve a regression with -x and --xattrs: RHEL-136277
    also, fix another tiny mistake in the patch (w/o visible consequences)


author: Pavel Cahyna <pcahyna@redhat.com> - 2:1.34-10
changelog:
  - Backport fix for regression in the --no-overwrite-dir option
    Upstream commit 4e742fc8674064a9fa00d4483d06aca48d5b0463, discussed
    in https://www.mail-archive.com/bug-tar@gnu.org/msg06445.html


author: Lukas Javorsky <ljavorsk@redhat.com> - 2:1.34-4
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Jan Macku <jamacku@redhat.com> - 3:2.1.1-1
changelog:
  - rebase to 2.1.1 (RHEL-67117)
      Interpret ipv4-mapped ipv6 addresses (::ffff:A.B.C.D) as true ipv4.

  	   There are no ipv4-mapped addresses in the real network which we
  	   operate on, so use just ipv4 in such cases, but allow users
  	   to specify it this way for convenience.

  	  Return back more robast poll(2) loop handling.


author: John Kacur <jkacur@redhat.com> - 0.19-3
changelog:
  - Don't start the gui if a display is not available
  - Change to SPDX licence tag in the specfile
  Resolves: RHEL-8859


author: John Kacur <jkacur@redhat.com> - 0.19-8
changelog:
  - Fix show_threads -t and show_irqs -q to not match everything if no match
  - Fix run command failing to apply BATCH policy
  - Add -U and -K to the move command
  Resolves: RHEL-86862 RHEL-106065 RHEL-106066


author: John B. Wyatt IV <jwyatt@redhat.com> - 0.19-9
changelog:
  - Disable cpu_power from showing in help menu and checking for cpu_power
  match functionality.
  Resolves: RHEL-107847


author: Leah Leshchinsky <lleshchi@redhat.com> - 0.18-9
changelog:
  - Remove import and fix help message
  - Update manpages for argparse CLI changes
  Resolves: rhbz#2138692


author: John Kacur <jkacur@redhat.com> - 0.20-1
changelog:
  - Update to upstream version 0.20
  - Remove all patches (now included in upstream)
  - Remove oscilloscope (unsupported in RHEL)
  Resolves: RHEL-83079


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17121
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value
      resolves: RHEL-25847


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-50568
    - spec: create /etc/tuned/profiles directory
    - hotplug: wait for device initialization
    - sap-netweaver: increased vm.max_map_count
      resolves: RHEL-31757
    - daemon: buffer sighup signal
      resolves: RHEL-31180
    - added an option to configure profile directories
      resolves: RHEL-26157
    - api: added commands to dynamically create/destroy instances
    - functions: added 'intel_recommended_pstate'
    - functions: added 'log' which helps with debugging
    - functions: added 'package2cpus' and 'packages2uncores' matchers
    - functions: added 'lscpu' to list CPU details
    - plugins: added plugin_irq
    - plugin_video: added support for amdgpu `panel_power_savings` attribute
    - plugin_cpu: check that writes are necessary if they may cause redundant IPIs
      resolves: RHEL-25613
    - plugin_uncore: allow to configure frequency limits using percent
    - amd-pstate: added support for controlling core performance boost
    - plugin_scheduler: adjusted error logging in _set_affinity
      resolves: RHEL-46560
    - plugin_audio: enabled controller reset to fix suspend with NVIDIA
    - plugin_irq: fixed expansion of variables
    - plugin_irqbalance: switched to IRQBALANCE_BANNED_CPULIST


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-0.2.rc1
changelog:
  - fixed functions packaging and added explicit conflict with power-profiles-daemon
    related: RHEL-50568


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50568
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-2
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66638
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66615


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-70457
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
      resolves: RHEL-51760
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
      resolves: RHEL-58820
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
      resolves: RHEL-72981
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
      resolves: RHEL-60906
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - sap-hana: Set transparent_hugepages to madvise
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70457
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion
      resolves: RHEL-75773


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94808
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
    - functions: silenced errors if module kvm_intel does not exist
      resolves: RHEL-79943
    - functions: make calc_isolated_cores return CPU ranges
      resolves: RHEL-75751
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: Disable appropriate P-State drivers
      resolves: RHEL-85637
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
    - udev-settle: obey udev buffer size and handle possible tracebacks
    - daemon: re-raise daemon init exception in no-daemon mode
      resolves: RHEL-71304
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
      resolves: RHEL-101578
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
    - Egypt reintroduced DST, from April through October.
    - Morocco springs forward April 23, not April 30.
    - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-2
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-26860)


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74308)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84741)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-56
changelog:
  - Use the C crc implementation instead of the asm (i686 only, other arches already use C)
  Related: rhbz#2045075


author: Jakub Martisko <jamartis@redhat.com> - 6.0-57
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45994


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-17
changelog:
  - CVE-2022-1154 vim: use after free in utf_ptr2char
  - CVE-2022-1420 vim: Out-of-range Pointer Offset


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-19
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-23
changelog:
  - RHEL-112005 CVE-2025-53905 vim: Vim path traversial
  - RHEL-112009 CVE-2025-53906 vim: Vim path traversal


author: Than Ngo <than@redhat.com> - 2.21-30
changelog:
  - Add a check to ensure that /proc/$$/exe can be read
    thanks to mbliss@redhat.com for the report and the proposed patch
    Resolves: RHEL-101073


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-4
changelog:
  - Explicitly allow/disallow unsafe legacy renegotiation on configuration base.
    Resolves: rhbz#2077973


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-3
changelog:
  - xfsdump: restoring inventory prevents non-directory files being restored from tape,
  - actually fixed by rebase to 3.1.12
  - related: bz#2166557
  - xfsrestore: Files from the backup go to orphanage dir because of xfsdump issue
  - related: bz#2034327


author: Pavel Reichl <preichl@redhat.com> - 3.1.12-4
changelog:
  - xfsdump/xfsrestore: suggest recovery for false roots may be possible using -x
  - Related: RHEL-8000


author: Pavel Reichl <preichl@redhat.com> - 5.19.0-1
changelog:
  - New upstream release
  - Tolerate tiny (<300MB) filesystems
  - Rename xfsprogs-5.12.0-default-bigtime-inobtcnt-on.patch to
      xfsprogs-5.19.0-disable-old-kernel-bigtime-inobtcnt-on.patch
      and amend it to reflect upstream changes
  - Backport all "Fixing" patches relevant to 5.19
    Related: rhbz#2142910


author: Pavel Reichl <preichl@redhat.com> - 6.3.0-1
changelog:
  - Rebase to upstream version 6.3.0
  -
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0)
  - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0)
  - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0)
  - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0)
  -
  - Rename the remaining patches so the name contains upstream version in which
  - they are implemented, or "rhelonly".
  -
  - Drop Eric Sandeen's public key used to check tarball signature and replace it by
  - Carlos Maiolino's (current upstream xfsprogs maintainer).
  -
  - Following is a list of newly backported patches from versions released after 6.3
  - which are fixing patches present in version 6.3:
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  -
  - Backport:
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  - to implement RHEL-RHEL-8284
  -
  - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch
  - to implement RHEL-7900
  -
  - Related: RHEL-15399
  - Related: RHEL-8284
  - Related: RHEL-7900


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-1
changelog:
  - Rebase to a more recent upstream release
  - Related: RHEL-28339
  - Following is a list of dropped backported patches which
  - are contained in the current rebase:
  - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch
  - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch
  - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch
  - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch
  - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch
  - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch
  - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch
  -
  - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream
  -	version it was merged in.


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-2
changelog:
  - Fix various CVE issues.
  - Related: RHEL-32996
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch
  - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch
  - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch
  - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch
  - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch


author: Bill O'Donnell <bodonnel@redhat.com> - 6.4.0-3
changelog:
  - Fix coverity issue
  - Related: RHEL-39449
  - Following is the patch list:
  - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch


author: Pavel Reichl <preichl@redhat.com> - 6.4.0-7
changelog:
  - xfs unrepairable filesystem if directory block not junked in phase 3 - more
  - fixes
  - Related: RHEL-54342


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


