# changelog

author: Jan Stancek <jstancek@redhat.com> [5.14.0-590.el9]
changelog:
  - cifs: Fix integer overflow while processing acdirmax mount option (Paulo Alcantara) [RHEL-87940] {CVE-2025-21963}
  - perf test: Update event_groups test to use instructions (Michael Petlan) [RHEL-80165]
  - xfrm: Support ESN context update to hardware for TX (CKI Backport Bot) [RHEL-86504]
  - redhat: Add packing_test to mod-internal.list (Petr Oros) [RHEL-92666]
  - redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-92666]
  - lib: packing: catch kunit_kzalloc() failure in the pack() test (Petr Oros) [RHEL-92666]
  - lib: packing: document recently added APIs (Petr Oros) [RHEL-92666]
  - lib: packing: add pack_fields() and unpack_fields() (Petr Oros) [RHEL-92666]
  - lib: packing: demote truncation error in pack() to a warning in __pack() (Petr Oros) [RHEL-92666]
  - lib: packing: create __pack() and __unpack() variants without error checking (Petr Oros) [RHEL-92666]
  - lib: packing: use GENMASK() for box_mask (Petr Oros) [RHEL-92666]
  - lib: packing: use BITS_PER_BYTE instead of 8 (Petr Oros) [RHEL-92666]
  - lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (Petr Oros) [RHEL-92666]
  - lib: packing: add additional KUnit tests (Petr Oros) [RHEL-92666]
  - lib: packing: add KUnit tests adapted from selftests (Petr Oros) [RHEL-92666]
  - lib: packing: duplicate pack() and unpack() implementations (Petr Oros) [RHEL-92666]
  - lib: packing: add pack() and unpack() wrappers over packing() (Petr Oros) [RHEL-92666]
  - lib: packing: remove kernel-doc from header file (Petr Oros) [RHEL-92666]
  - lib: packing: adjust definitions and implementation for arbitrary buffer lengths (Petr Oros) [RHEL-92666]
  - lib: packing: refuse operating on bit indices which exceed size of buffer (Petr Oros) [RHEL-92666]
  - lib: packing: remove MODULE_LICENSE in non-modules (Petr Oros) [RHEL-92666]
  - Documentation: core-api: packing: correct spelling (Petr Oros) [RHEL-92666]
  - lib: packing: replace bit_reverse() with bitrev8() (Petr Oros) [RHEL-92666]
  - Revert "SUNRPC: Revert e0a912e8ddba" (Benjamin Coddington) [RHEL-92060]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S16 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed ASUS platform headset Mic issue (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use devres for remove as well (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic assignment on ASUS VivoBook X515UA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model (Jaroslav Kysela) [RHEL-80682]
  - tools headers: Update the linux/unaligned.h copy with the kernel sources (Jaroslav Kysela) [RHEL-80682]
  - soundwire: take in count the bandwidth of a prepared stream (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Don't use __free(device_node) at graph_util_parse_dai() (Jaroslav Kysela) [RHEL-80682] {CVE-2025-39930}
  - ALSA: hda/realtek: Bass speaker fixup for ASUS UM5606KA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: separate DJM-A9 cap lvl options (Jaroslav Kysela) [RHEL-80682]
  - PCI: pci_ids: add INTEL_HDA_PTL_H (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: convert to SYSTEM_SLEEP_PM_OPS (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt722-sdca: add missing readable registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Fix maximum ADC Volume (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ops: Consistently treat platform_max as control value (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt1320: set wake_capable = 0 explicitly (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel: Add Dell ALC3271 to power_save denylist (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: update ALC222 depop optimize (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: Add jack delay debounce after suspend (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Fix unlikely uninitialized variable use in create_sdw_dailinks() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usx2y: validate nrpacks module parameter on probe (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Avoid module auto-load handling at event delivery (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix Asus Z13 2025 audio (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Remove (revert) duplicate Ally X config (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix microphone regression on ASUS N705UD (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix wrong mic setup for ASUS VivoBook 15 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Prevent races when soft-resetting using SPI control (Jaroslav Kysela) [RHEL-80682]
  - firmware: cs_dsp: Remove async regmap writes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: warn both sdw and pch dmic are used (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: don't check number of sdw links when set dmic_fixup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl: Rename stream name of SAI DAI driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: es8328: fix route from DAC to output (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Set the SDOUT polarity correctly (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2764: Fix power control mask (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Drop UMP events when no UMP-conversion is set (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2770: Fix volume scale (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Reduce codec resume time (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/cirrus: Correct the full scale volume set logic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: imx-audmix: remove cpu_mclk which is from cpu dai device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fixup ALC225 depop procedure (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l41: Fix acpi_device_hid() not found (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add branch prediction hint in ACP IRQ handler (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Drop unused includes from Vangogh driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: amd: Add post_fw_run_delay ACP quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt713_vb_l2_rt1320_l13 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: revise typo of rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: hda-intel: add Panther Lake-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: pci-ptl: Add support for PTL-H (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: intel-dsp-config: Add PTL-H support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: drop a redundant code (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Harden loops for looking up ALH copiers (Jaroslav Kysela) [RHEL-80682] {CVE-2025-21870}
  - ASoC: cs35l41: Fallback to using HID for system_name if no SUB is available (Jaroslav Kysela) [RHEL-80682]
  - ASoC: arizona/madera: use fsleep() in up/down DAPM event delays. (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: pcm: Clear the susbstream pointer to NULL on close (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Limit mic boost on Positivo ARN50 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils.c: add missing dlc->of_node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB] (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-mtl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-tgl-match: declare adr as ull (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add support for Fatcat board with BT offload enabled in PTL platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add quirk for Asus Zenbook S14 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add lookup of quirk using PCI subsystem ID (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Enable default case in micfil_set_quality() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Workaround for resume on Dell Venue 11 Pro 7130 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix headset detection failure due to unstable sort (Jaroslav Kysela) [RHEL-80682]
  - ALSA: pcm: use new array-copying-wrapper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codec: es8316: "DAC Soft Ramp Rate" is just a 2 bit control (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: acp: Fix possible deadlock (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for iBasso DC07 Pro (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Fix quirk matching for Legion Pro 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: SND_SIU_MIGOR should depend on DMADEVICES (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: bytcr_rt5640: Add DMI quirk for Vexia Edu Atla 10 tablet 5V (Jaroslav Kysela) [RHEL-80682]
  - ASoC: da7213: Initialize the mutex (Jaroslav Kysela) [RHEL-80682]
  - ASoC: use to_platform_device() instead of container_of() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: acp: Support microphone from Lenovo Go S (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: Add entry for new 8M Plus revision (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8: Add entries for new 8QM and 8QXP revisions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx: Add mach entry to select cs42888 topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: select CONFIG_DMA_SHARED_BUFFER (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: imx8m: add SAI2,5,6,7 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix return code from poll ops (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix incorrect resp->opcode retrieval (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix meter_levels type to __le32 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable Mute LED on HP Laptop 14s-fq1xxx (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: ES8326: Improved PSRR (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: return error value in asrc_m2m_device_run() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: only handle pairs for m2m in the suspend (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ctxfi: Simplify dao_clear_{left,right}_input() functions (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb: fcp: Fix hwdep read ops types (Jaroslav Kysela) [RHEL-80682]
  - ALSA: scarlett2: Add device_setup option to use FCP driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: FCP: Add Focusrite Control Protocol driver (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek - Fixed headphone distorted sound on Acer Aspire A115-31 laptop (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Support for Ideapad hotkey mute LEDs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dapm: add support for preparing streams (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dai: add snd_soc_dai_prepare() and use it internally (Jaroslav Kysela) [RHEL-80682]
  - ALSA: usb-audio: Add delay quirk for USB Audio Device (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Transfer firmware in two chunks (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Enable headset mic on Positivo C6400 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Make tied_device=0 as default / unknown (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-dapm: remove !card check from snd_soc_dapm_set_bias_level() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,micfil: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Add AZX_DCAPS_NO_TCSEL flag for Loongson HDA devices (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Use ARRAY_SIZE() to calculate PEB2466_TLV_SIZE (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() to improve bdw_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: return 0 if np was NULL on snd_soc_daifmt_parse_clock_provider_raw() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: audio-graph-card: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: nau8824: fix max volume for Speaker output (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: fsl,mqs: Add compatible string for i.MX943 platform (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_mqs: Add i.MX943 platform support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: line6: convert timeouts to secs_to_jiffies() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify UMP EP and FB changes (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Allow system notification in atomic (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Update rawmidi name per EP name update (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy safe string name to rawmidi (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ump: Copy FB name string more safely (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Bump protocol version to 2.0.5 (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Show substream activity in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rawmidi: Expose the tied device number in info ioctl (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix compilation of snd_hdac_adsp_xxx() helpers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card: Drop unnecessary "dai-tdm-slot-width-map" property presence check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sb: Use str_enabled_disabled() helper in info_read() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Use str_yes_no() helper (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Use of_property_present() for non-boolean properties (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: Add ACPI dependency to fix build error (Jaroslav Kysela) [RHEL-80682]
  - ALSA: rme9652: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Simplify with str_yes_no() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add missing includes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust IPC traces (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Adjust DSP status register names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update ASRC definition (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Improve logging of firmware loading (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Clearly state assumptions of hw_params() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Add MODULE_FIRMWARE to inform about FW (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Print IPC error messages in lower layer (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Update hda component teardown sequences (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix init-config parsing (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix theoretical infinite loop (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Fix the minimum firmware version numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: avs: Do not readq() u32 registers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: renesas: rz-ssi: Add a check for negative sample_space (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-card: remove card check (Jaroslav Kysela) [RHEL-80682]
  - ALSA: firewire: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for SDCA deferred controls (Jaroslav Kysela) [RHEL-80682]
  - regmap: sdw-mbq: Add support for further MBQ register sizes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Update list of entity_0 controls (Jaroslav Kysela) [RHEL-80682]
  - soundwire: SDCA: Add additional SDCA address macros (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Simplify with str_enable_disable() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: Simplify with str_enabled_disabled() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: emu10k1: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdspm: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Simplify with str_off_on() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: trident: Simplify with str_on_off() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt5682: Support the ALC5682I-VE codec (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ens137x: Use str_on_off() helper in snd_ensoniq_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: madera: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: Use str_yes_no() helper in atom_dump() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: Add aw88083 amplifier driver (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: Add schema for "awinic,aw88083" (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Show if link is unidirectional (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple_card: Improve debugging messages (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Make dependency on UMP clearer (Jaroslav Kysela) [RHEL-80682]
  - ALSA: Align the syntax of iov_iter helpers with standard ones (Jaroslav Kysela) [RHEL-80682]
  - ALSA: AC97: Use str_on_off() helper in snd_ac97_proc_read_main() (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda/realtek: Add a comment for alc_fixup_inv_dmic() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Split function type patching and function naming (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing function type names (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add bounds check for function address (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Clean up error messages (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SDCA: Add missing header includes (Jaroslav Kysela) [RHEL-80682]
  - soundwire: amd: clear wake enable register for power off mode (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: count the bandwidth of active streams only (Jaroslav Kysela) [RHEL-80682]
  - SoundWire: pass stream to compute_params() (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: add lane in sdw_group_params (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: select data lane (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: check required freq accurately (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: correct clk_freq check in sdw_select_row_col (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: generic_bandwidth_allocation: set frame shape on fly (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: stream: program BUSCLOCK_SCALE (Jaroslav Kysela) [RHEL-80682]
  - Soundwire: add sdw_slave_get_scale_index helper (Jaroslav Kysela) [RHEL-80682]
  - soundwire: generic_bandwidth_allocation: skip DEPREPARED streams (Jaroslav Kysela) [RHEL-80682]
  - soundwire: stream: set DEPREPARED state earlier (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane_used_bandwidth in struct sdw_bus (Jaroslav Kysela) [RHEL-80682]
  - soundwire: mipi_disco: read lane mapping properties from ACPI (Jaroslav Kysela) [RHEL-80682]
  - soundwire: add lane field in sdw_port_runtime (Jaroslav Kysela) [RHEL-80682]
  - soundwire: bus: Move irq mapping cleanup into devres (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ad1889: Use str_enabled_disabled() helper function (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hdsp: Use str_on_off() and str_yes_no() helper functions (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: force cast for snd_pcm_format_t type (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: remove redundant assignment to variable ret (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l43: don't include '<linux/find.h>' directly (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Increase the SoundWire attach timeout (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Use gpiod_set_raw for GPIO operations (Jaroslav Kysela) [RHEL-80682]
  - mfd: cs42l43: Prepare support for updated bios patch (Jaroslav Kysela) [RHEL-80682]
  - ASoC: qcom: sdm845: add handling of secondary MI2S clock (Jaroslav Kysela) [RHEL-80682]
  - ASoC: rt715: Remove unused hda_to_sdw (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: Unify clock direction by clk_direction (Jaroslav Kysela) [RHEL-80682]
  - ASoC: soc-core: tidyup ret handling for card->disable_route_checks (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C 8x CS35L56 without CS42L43 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: mtl-match: Add CDB35L56-EIGHT-C with aggregated speakers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: tgl-match: Add entries for CS35L56 on CDB35L56-EIGHT-C (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: sof-priv: Remove unused SOF_DAI_STREAM() and SOF_FORMATS (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: ipc4-topology: Use macro to set the EXT_PARAM_SIZE in widget setup (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Intel: hda-pcm: Follow the pause_supported flag to drop PAUSE support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: SOF: Add support for pause supported tokens from topology (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: register m2m platform device (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc_m2m: Add memory to memory function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_easrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_asrc: define functions for memory to memory usage (Jaroslav Kysela) [RHEL-80682]
  - ALSA: compress: Add output rate and output format support (Jaroslav Kysela) [RHEL-80682]
  - ALSA: sonicvibes: Use str_on_off() helper in snd_sonicvibes_proc_read() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: convert rt5682.txt to dt-schema (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8985: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: wm8904: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tpa6130a2: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic3x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320aic31xx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tlv320adc3xxx: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas5720: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2562: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ssm2602: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: pcm186x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98095: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98090: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: max98088: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5632: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: alc5623: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1977: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1781: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: adau1761: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: ad193x: Remove use of i2c_match_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: dt-bindings: qcom,wcd9335: Drop number of DAIs from the header (Jaroslav Kysela) [RHEL-80682]
  - ASoC: codecs: wcd9335: Add define for number of DAIs (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-lnl-match: add rt713_vb_l2_rt1320_l13 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: soc-acpi-intel-ptl-match: add rt712_vb + rt1320 support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Add a dev_dbg message for the SOC_SDW_CODEC_MIC quirk (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: Correct quirk for Lenovo Yoga Slim 7 (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: improve the log of DAI link numbers (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: reduce log level for not using internal dmic (Jaroslav Kysela) [RHEL-80682]
  - ASoC: Intel: sof_sdw: correct mach_params->dmic_num (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use for_each_of_graph_port() on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: check port reg first on graph_get_dai_id() (Jaroslav Kysela) [RHEL-80682]
  - ASoC: simple-card-utils: use __free(device_node) for device node (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_sai: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add sample rate constraint (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_micfil: Switch to common sample rate constraint function (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_utils: Add function to constrain rates (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: oss: fix typo in seq_oss_init.c (Jaroslav Kysela) [RHEL-80682]
  - ALSA: cmipci: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: lola: Fix typo in lola_clock.c (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: add ZSC control register programming sequence (Jaroslav Kysela) [RHEL-80682]
  - ASoC: amd: ps: update mach params subsystem_rev variable (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Always check capability at opening a hwdep (Jaroslav Kysela) [RHEL-80682]
  - ASoC: sdw_utils: cs_amp: Assign non-overlapping TDM masks for each codec on a bus (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs35l56: Split SoundWire DAI into separate playback and capture (Jaroslav Kysela) [RHEL-80682]
  - ALSA: hda: Fix typo in hda_sysfs.h (Jaroslav Kysela) [RHEL-80682]
  - ALSA: ac97: Modify the incorrect format specifier (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Skip notifications unless subscribed to announce port (Jaroslav Kysela) [RHEL-80682]
  - ALSA: seq: Notify client and port info changes (Jaroslav Kysela) [RHEL-80682]
  - ASoC: cs42l51: Constify struct i2c_device_id (Jaroslav Kysela) [RHEL-80682]
  - ASoC: tas2781: Fix redundant logical jump (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Add suspend and resume support (Jaroslav Kysela) [RHEL-80682]
  - ASoC: fsl_xcvr: Use regmap for PHY and PLL registers (Jaroslav Kysela) [RHEL-80682]


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-23607, RHEL-24850, RHEL-29267, RHEL-30842, RHEL-53963
      RHEL-54325, RHEL-54326, RHEL-55240, RHEL-64341, RHEL-65372
      RHEL-65780, RHEL-65844, RHEL-67702, RHEL-67836, RHEL-68614
      RHEL-69417


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69938)
  - qemu: tpm: do not update profile name for transient domains (RHEL-71072)
  - qemu: Enable I/O APIC if needed (RHEL-65844)
  - cpu_map: Sort data files in meson.build (RHEL-70052)
  - sync_qemu_models_i386: Update meson.build (RHEL-70052)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70052)
  - cpu_map: Add 486-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70052)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70052)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70052)
  - cpu_map: Add n270-v1 CPU model (RHEL-70052)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70052)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70052)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70052)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70052)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70052)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70052)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70052)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70052)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70052)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70052)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-7122)
  - qemu: Add support for direct and extended tlbflush features (RHEL-7122)
  - conf: refactor hyperv features formatting (RHEL-7122)
  - conf: Adjust hyperv tlbflush formatting (RHEL-7122)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73085)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-5
changelog:
  - qemu: allow migration of guest with mdev vGPU to VF vGPU (RHEL-68064)
  - storage_file: Refuse qcow2 images with empty string as 'data_file' (RHEL-73504)
  - virstoragetest: Add case for qcow2 image with empty string as 'data_file' (RHEL-73504)
  - qemu: snapshot: delete disk image only if parent snapshot is external (RHEL-74041)
  - storage_file: de-modularize the local file backend (RHEL-73507)
  - libvirt.spec: Move ownership of 'storage-file' backends directory to gluster (RHEL-73507)
  - qemu: re-use existing ActualNetDef for more interface types during update-device (RHEL-7036)
  - tools: ssh-proxy: Check for domain status before parsing its CID (RHEL-75577)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-6
changelog:
  - build: Bump minimum glib2 version to 2.66.0 (RHEL-77884)
  - qemuProcessHandleIOError: Refactor to extract 'priv' instead of 'driver' (RHEL-77884)
  - qemu: Handle quirks of 'device' field of BLOCK_IO_ERROR event in monitor code (RHEL-77884)
  - qemu: Rename 'diskAlias' to 'device' in qemu IO error event handling (RHEL-77884)
  - qemuProcessHandleIOError: Rename local variables (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Do not munge 'reason' field of IO error event (RHEL-77884)
  - qemuProcessHandleIOError: Prefer lookup by node name (RHEL-77884)
  - qemuMonitorJSONHandleIOError: Propagate new 'qom-path' field (RHEL-77884)
  - virStorageSource: Add fields for storing last I/O error message (RHEL-77884)
  - qemuProcessHandleIOError: Populate I/O error reason to virStorageSource (RHEL-77884)
  - qemuProcessHandleIOError: Log IO errors in the VM log file (RHEL-77884)
  - libxlDomainGetMessages: Add existing flags to 'virCheckFlags' (RHEL-77884)
  - virDomainObjGetMessages: Refactor using GPtrArray (RHEL-77884)
  - virDomainGetMessages: Introduce VIR_DOMAIN_MESSAGE_IOERRORS (RHEL-77884)
  - include: libvirt-domain: Reword documentation for @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - include: libvirt-domain: Add 'message' @reason of VIR_DOMAIN_EVENT_ID_IO_ERROR_REASON (RHEL-77884)
  - qemuSnapshotForEachQcow2: Don't initialize 'nrollback' (RHEL-73315)
  - qemu: process: Export qemuPrepareNVRAM for use in snapshot code (RHEL-73315)
  - qemu: snapshot: Ensure that NVRAM image exists when taking inactive internal snapshot (RHEL-73315)
  - qemuxmlconftest: Allow testing of the 'writable' flag for passed FDs for disks (RHEL-37519)
  - qemuxmlconftest: Add testing of FDs with 'writable' flag in 'disk-source-fd' (RHEL-37519)
  - qemu: domain: Initialize FD passthrough for a virStorageSource before using it (RHEL-37519)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-7
changelog:
  - qemu_migration: Refactor qemuMigrationSrcRestoreDomainState (RHEL-79168)
  - qemu_migration: Do not automatically resume domain after I/O error (RHEL-79168)
  - qemucapabilitiestest: Add data for the qemu-10.0 dev cycle on x86_64 (RHEL-79095)
  - qemucapabilitiestest: Update 'caps_10.0.0_x86_64' to 'v9.2.0-1636-gffaf7f0376' (RHEL-79095)
  - qemu: capabilies: Introduce QEMU_CAPS_BLOCKDEV_SET_ACTIVE (RHEL-79095)
  - qemu: monitor: Add monitor backend for 'blockdev-set-active' (RHEL-79095)
  - qemu: migration: Reactivate block nodes after migration if VM is left paused (RHEL-79095)
  - conf: change virDomainHostdevInsert() to return void (RHEL-69455)
  - qemu: fix qemu validation to forbid guest-side IP address for type='vdpa' (RHEL-69455)
  - qemu: validate that model is virtio for vhostuser and vdpa interfaces in the same place (RHEL-69455)
  - qemu: automatically set model type='virtio' for interface type='vhostuser' (RHEL-69455)
  - qemu: do all vhostuser attribute validation in qemu driver (RHEL-69455)
  - conf/qemu: make <source> element *almost* optional for type=vhostuser (RHEL-69455)
  - qemu: use switch instead of if in qemuProcessPrepareDomainNetwork() (RHEL-69455)
  - qemu: make qemuPasstCreateSocketPath() public (RHEL-69455)
  - qemu: complete vhostuser + passt support (RHEL-69455)
  - qemu: fail validation if a domain def has vhostuser/passt but no shared mem (RHEL-69455)
  - docs: improve type='user' docs to higlight differences between SLIRP and passt (RHEL-69455)
  - docs: document using passt backend with <interface type='vhostuser'> (RHEL-69455)
  - utils: Canonicalize paths before comparing them (RHEL-79166)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-8
changelog:
  - remote: add sysusers file to create 'libvirt' group (RHEL-81749)
  - qemu: Avoid crash in qemuDomainCheckCPU with unknown host CPU (RHEL-81747)
  - qemu_snapshot: allow reverting to external disk only snapshot (RHEL-21549)
  - qemu: snapshot: error out early when reverting snapshot for VM with non-file disk (RHEL-30971)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-9
changelog:
  - util: introduce object for holding a system inhibitor lock (RHEL-83064)
  - src: convert drivers over to new virInhibitor APIs (RHEL-83064)
  - rpc: remove logind support for virNetDaemon (RHEL-83064)
  - util: fix off-by-1 in inhibitor constants (RHEL-83064)
  - util: don't attempt to acquire logind inhibitor if not requested (RHEL-83064)
  - network: Free inhibitor in networkStateCleanup() (RHEL-83064)
  - conf: introduce support for multiple ACPI tables (RHEL-81041)
  - src: validate permitted ACPI table types in libxl/qemu drivers (RHEL-81041)
  - src: introduce 'raw' and 'rawset' ACPI table types (RHEL-81041)
  - qemu: support 'raw' ACPI table type (RHEL-81041)
  - libxl: support 'rawset' ACPI table type (RHEL-81041)
  - conf: support MSDM ACPI table type (RHEL-81041)
  - qemu: support MSDM ACPI table type (RHEL-81041)
  - qemuxmlconftest: Include shared memory 'net-vhostuser' test cases (RHEL-84133)
  - qemuValidateDomainDeviceDefNetwork: Require shared memory for all vhost-user interfaces (RHEL-84133)
  - qemu: process: Remove un-updated 'qemuProcessStartWarnShmem' (RHEL-84133)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-10
changelog:
  - esxConnectListAllDomains: Don't propagate failure to lookup a single domain (RHEL-80606)
  - conf: parse interface/source/@dev for all interface types (with backend type='passt') (RHEL-82539)
  - libvirt-host: Clarify/fix description of the CPU frequency field (RHEL-86197)
  - virNodeGetInfo: Improve description of the case when fake data is reported (RHEL-86197)
  - manpages: virsh: Use disclaimer from 'virNodeGetInfo()' for 'virsh nodeinfo' (RHEL-86197)
  - esx: Accept empty "path" URI component same way as "/" (RHEL-86459)
  - qemu: Rename outgoingMigration parameter in various TPM functions (RHEL-86800)
  - qemu: Properly propagate migration state to TPM cleanup code (RHEL-86800)
  - qemuDomainBlockCopyCommon: Don't revoke access to file twice on failure (RHEL-7357)
  - qemuxmlconftest: Drop s390-default-cpu-...ccw-virtio-2.7 test cases (RHEL-72976)
  - tests: add capabilities for QEMU 10.0.0 on s390x (RHEL-72976)
  - qemu: Do NOT autoadd NUMA node for s390 (RHEL-72976)
  - qemu_command: Use qemuBuildVirtioDevProps() to build cmd line for virtio-mem and virtio-pmem (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-pci-s390x.xml (RHEL-72976)
  - qemu_caps: Introduce QEMU_CAPS_DEVICE_VIRTIO_MEM_CCW (RHEL-72976)
  - qemu: Validate virtio-mem-ccw (RHEL-72976)
  - qemu: Allow virtio-mem on CCW (RHEL-72976)
  - qemuxmlconftest: Introduce memory-hotplug-virtio-mem-ccw-s390x.xml (RHEL-72976)
  - qemu_domain_address: fix CCW virtio-mem hotplug (RHEL-72976)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-11
changelog:
  - Add load average information type into virDomainGetGuestInfo (RHEL-88447)
  - qemu_agent: Add qemuAgentGetLoadAvg() (RHEL-88447)
  - qemu: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - virsh: Add support for VIR_DOMAIN_GUEST_INFO_LOAD (RHEL-88447)
  - qemu_capabilities: Fetch caps for virtio-mem-ccw too (RHEL-87532)
  - cpu_map: Add avx10* CPU features (RHEL-87796)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-87796)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-87796)
  - virsh: Introduce new hypervisor-cpu-models command (RHEL-11435)
  - qemu: remove nonsensical sanity check in processNetdevStreamDisconnectedEvent() (RHEL-80169)
  - qemu: make processNetDevStreamDisconnectedEvent() reusable (RHEL-80169)
  - qemu: respond to NETDEV_VHOST_USER_DISCONNECTED event (RHEL-80169)
  - qemu: put vhost-user code that's special for passt in a helper function (RHEL-80169)
  - qemu: make passt+vhostuser reconnect behave identically to passt+user (RHEL-80169)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-7036, RHEL-7122, RHEL-35752, RHEL-46870, RHEL-52314
      RHEL-60030, RHEL-60033, RHEL-64341


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Tomas Halman <thalman@redhat.com> - 0.17.0-9
changelog:
  - Fixing mellon_create_metadata.sh script
    Resolves: RHEL-35898
  - Publishing diagnostic module in CRB repository
    Resolves: RHEL-33585


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.5-6
changelog:
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85510
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89353


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-9
changelog:
  - RHEL 9 patch for openssl missing configuration file
    https://bugzilla.redhat.com/show_bug.cgi?id=1977214#c13


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.45.6-11
changelog:
  - Fix: syslinux: failed to create ldlinux.sys
    resolves: rhbz#1990720, rhbz#1950627
  - Fix license files.
  - Move appliance to separate subpackage
    resolves: rhbz#1989514


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: systemd maintenance team <systemd-maint@redhat.com> - 252-15
changelog:
  - ci: trigger `differential-shellcheck` workflow on push (#2100440)
  - ci: workflow for gathering metadata for source-git automation (#2100440)
  - ci: first part of the source-git automation - commit linter (#2100440)
  - ci(Mergify): check CodeQL and build workflows based on changed files (#2100440)
  - ci: add NOTICE to also update regexp in `.mergify.yml` when updating `paths` property (#2100440)
  - Support /etc/system-update for OSTree systems (#2203133)
  - journal-def: fix type of signature to match the actual field in the Header structure (#2183546)
  - journal: use compound initialization for journal file Header structure (#2183546)
  - journald: fix log message (#2183546)
  - sd-journal: cache results of parsing environment variables (#2183546)
  - compress: introduce compression_supported() helper function (#2183546)
  - sd-journal: always use the compression algorithm specified in the header (#2183546)
  - sd-journal: allow to specify compression algorithm through env (#2183546)
  - test: add test case that journal file is created with the requested compression algorithm (#2183546)
  - rules: do not online CPU automatically on IBM platforms (#2143107)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-16
changelog:
  - ci: update permissions for source-git automation workflows (#2170883)
  - pstore: fixes for dmesg.txt reconstruction (#2170883)
  - pstore: explicitly set the base when converting record ID (#2170883)
  - pstore: avoid opening the dmesg.txt file if not requested (#2170883)
  - test: add a couple of tests for systemd-pstore (#2170883)
  - test: match all messages with the FILE field (#2170883)
  - test: build the SELinux test module on the host (#2170883)
  - test: make the stress test slightly less stressful on slower machines (#2170883)
  - coredump: use unaligned_read_ne{32,64}() to parse auxv (#2170883)
  - core/transaction: make merge_unit_ids() always return NUL-terminated string (#2170883)
  - core/transaction: make merge_unit_ids() return non-NULL on success (#2170883)
  - core/transaction: do not log "(null)" (#2170883)
  - ci: allow `RHEL-only` labels to mark downstream-only commits (#2170883)
  - elf-util: discard PT_LOAD segment early based on the start address. (#2215412)
  - elf-util: check for overflow when computing end of core's PT_LOAD segments (#2215412)
  - sulogin: use DEFINE_MAIN_FUNCTION() (#2169959)
  - sulogin: fix control lost of the current terminal when default.target is rescue.target (#2169959)
  - journal-vacuum: count size of all journal files (#2182632)
  - memory-util: add a concept for gcc cleanup attribute based array destruction (#2182632)
  - macro: introduce FOREACH_ARRAY() macro (#2182632)
  - journal-vacuum: rename function to match struct name (#2182632)
  - journal-vacuum: use CLEANUP_ARRAY (#2182632)
  - pam: add call to pam_umask (#2210145)
  - udev-builtin-net_id: align VF representor names with VF names (#2218886)
  - pam: add a call to pam_namespace (#2218184)
  - rules: online CPU automatically on IBM s390x platforms when configured (#2212612)
  - core/mount: escape invalid UTF8 char in dbus reply (#2208240)
  - Revert "user: delegate cpu controller, assign weights to user slices" (#2176899)
  - udev-rules: fix nvme symlink creation on namespace changes (#2172509)
  - rules: add whitespace after comma before the line continuation (#2172509)
  - udev: restore compat symlink for nvme devices (#2172509)
  - rules: drop doubled space (#2172509)
  - manager: don't taint the host if cgroups v1 is used (#2193456)
  - core/service: when resetting PID also reset known flag (#2210237)
  - ci: drop systemd-stable from advanced-commit-linter config (#2170883)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-17
changelog:
  - Revert "core/service: when resetting PID also reset known flag" (#2225667
  - ci: explicitly install python3-lldb-$COMPILER_VERSION (#2225667)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-18
changelog:
  - doc: add downstream CONTRIBUTING document (#2170883)
  - doc: improve CONTRIBUTING document (#2170883)
  - doc: use link with prefilled Jira issue (#2170883)
  - docs: link downstream CONTRIBUTING in README (#2170883)
  - bpf: fix restrict_fs on s390x (#2230364)
  - udev/net_id: use naming scheme for RHEL-9.3 (#2231845)
  - core/timer: Always use inactive_exit_timestamp if it is set (#2211065)
  - timer: Use dual_timestamp_is_set() in one more place (#2211065)
  - loginctl: list-users: also show state (#2209912)
  - loginctl: list-sessions: minor modernization (#2209912)
  - loginctl: list-sessions: also show state (#2209912)
  - test: add test for state in loginctl list-{users,sessions} (#2209912)
  - test: add a missing session activation (#2209912)
  - test: extend test for loginctl list-* (#2209912)
  - loginctl: shorten variable name (#2209912)
  - loginctl: use bus_map_all_properties (#2209912)
  - loginctl: show session idle status in list-sessions (#2209912)
  - loginctl: some modernizations (#2209912)
  - loginctl: list-sessions: fix timestamp for idle hint (#2209912)
  - loginctl: list-users: use bus_map_all_properties (#2209912)
  - loginctl: also show idle hint in session-status (#2209912)
  - memory-util: make ArrayCleanup passed to array_cleanup() const (#2190226)
  - static-destruct: several cleanups (#2190226)
  - static-destruct: introduce STATIC_ARRAY_DESTRUCTOR_REGISTER() (#2190226)
  - macro: support the case that the number of elements has const qualifier (#2190226)
  - shared/generator: apply similar config reordering of generated units (#2190226)
  - nulstr-util: make ret_size in strv_make_nulstr() optional (#2190226)
  - generator: teach generator_add_symlink() to instantiate specified unit (#2190226)
  - units: rework growfs units to be just a regular unit that is instantiated (#2190226)
  - fstab-generator: use correct targets when /sysroot is specificied in fstab only (#2190226)
  - fstab-generator: add SYSTEMD_SYSFS_CHECK env var (#2190226)
  - test: add fstab file support for fstab-generator tests (#2190226)
  - test-fstab-generator: also check file contents (#2190226)
  - test-fstab-generator: add tests for mount options (#2190226)
  - fstab-generator: split out several functions from parse_fstab() (#2190226)
  - fstab-generator: call add_swap() earlier (#2190226)
  - fstab-generator: refuse to add swap earlier if disabled (#2190226)
  - fstab-generator: refuse invalid mount point path in fstab earlier (#2190226)
  - fstab-generator: fix error code propagation in run_generator() (#2190226)
  - fstab-generator: support defining mount units through kernel command line (#2190226)
  - test: add test cases for defining mount and swap units from kernel cmdline (#2190226)
  - generators: change TimeoutSec=0 to TimeoutSec=infinity (#2190226)
  - units: change TimeoutSec=0 to TimeoutSec=infinity (#2190226)
  - fstab-generator: use correct swap name var (#2190226)
  - fstab-generator: add more parameter name comments (#2190226)
  - fstab-generator: unify initrd-root-device.target dependency handling code (#2190226)
  - fstab-util: add fstab_is_bind (#2190226)
  - fstab-generator: resolve bind mount source when in initrd (#2190226)
  - fstab-generator: rename 'initrd' flag to 'prefix_sysroot' (#2190226)
  - fstab-generator: fix target of /sysroot/usr (#2190226)
  - fstab-generator: add rd.systemd.mount-extra= and friends (#2190226)
  - fstab-generator: add a flag to accept entry for "/" in initrd (#2190226)
  - test-fstab-generator: extract core part as a function (#2190226)
  - test-fstab-generator: also test with SYSTEMD_IN_INITRD=no (#2190226)
  - test-fstab-generator: add more tests for systemd.mount-extra= and friends (#2190226)
  - fstab-generator: enable fsck for block device mounts specified in systemd.mount-extra= (#2190226)
  - core: use correct scope of looking up units (#2226980)
  - test: merge unit file related tests into TEST-23-UNIT-FILE (#2213521)
  - test: rename TEST-07-ISSUE-1981 to TEST-07-PID1 (#2213521)
  - test: merge TEST-08-ISSUE-2730 into TEST-07-PID1 (#2213521)
  - test: merge TEST-09-ISSUE-2691 into TEST-07-PID1 (#2213521)
  - test: merge TEST-10-ISSUE-2467 with TEST-07-PID1 (#2213521)
  - test: merge TEST-11-ISSUE-3166 into TEST-07-PID1 (#2213521)
  - test: merge TEST-12-ISSUE-3171 into TEST-07-PID1 (#2213521)
  - test: move TEST-23's units into a dedicated subfolder (#2213521)
  - test: merge TEST-47-ISSUE-14566 into TEST-07-PID1 (#2213521)
  - test: merge TEST-51-ISSUE-16115 into TEST-07-PID1 (#2213521)
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (#2213521)
  - test: abstract the common test parts into a utility script (#2213521)
  - test: add tests for JoinsNamespaceOf= (#2213521)
  - core/unit: drop doubled empty line (#2213521)
  - core/unit: make JoinsNamespaceOf= implies the inverse dependency (#2213521)
  - core/unit: search shared namespace in transitive relation of JoinsNamespaceOf= (#2213521)
  - core/unit: update bidirectional dependency simultaneously (#2213521)
  - resolvectl: fix type of ifindex D-Bus field, and make sure to initialize to zero in all code paths (#2161260)
  - resolved: add some line-breaks/comments (#2161260)
  - resolvectl: don't filter loopback DNS server from global DNS server list (#2161260)
  - blockdev-util: add simple wrapper around BLKSSZGET (#2170883)
  - loop-util: insist on setting the sector size correctly (#2170883)
  - dissect-image: add probe_sector_size() helper for detecting sector size of a GPT disk image (#2170883)
  - loop-util: always tell kernel explicitly about loopback sector size (#2170883)
  - Revert "Treat EPERM as "not available" too" (#2178222)
  - Revert "test: accept EPERM for unavailable idmapped mounts as well" (#2178222)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-19
changelog:
  - ci: Extend source-git-automation (RHEL-1086)
  - netif-naming-scheme: let's also include rhel8 schemes (RHEL-7026)
  - systemd-analyze: Add table and JSON output implementation to plot (RHEL-5070)
  - systemd-analyze: Update man/systemd-analyze.xml with Plot JSON and table (RHEL-5070)
  - systemd-analyze: Add tab complete logic for plot (RHEL-5070)
  - systemd-analyze: Add --json=, --table and -no-legend tests for plot (RHEL-5070)
  - ci: enable source-git automation to validate reviews and ci results (RHEL-1086)
  - ci: remove Mergify config - replaced by Pull Request Validator (RHEL-1086)
  - ci: enable auto-merge GH Action (RHEL-1086)
  - ci: add missing permissions (RHEL-1086)
  - ci: `permissions: write-all` (RHEL-1086)
  - ci(lint): exclude `.in` files from ShellCheck lint (RHEL-1086)
  - udev: raise RLIMIT_NOFILE as high as we can (RHEL-11040)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-20
changelog:
  - udev/net: allow new link name as an altname before renaming happens (RHEL-5988)
  - sd-netlink: do not swap old name and alternative name (RHEL-5988)
  - sd-netlink: restore altname on error in rtnl_set_link_name (RHEL-5988)
  - udev: attempt device rename even if interface is up (RHEL-5988)
  - sd-netlink: add a test for rtnl_set_link_name() (RHEL-5988)
  - test-network: add a test for renaming device to current altname (RHEL-5988)
  - udev: align table (RHEL-5988)
  - sd-device: make device_set_syspath() clear sysname and sysnum (RHEL-5988)
  - sd-device: do not directly access entry in sd-device object (RHEL-5988)
  - udev: move device_rename() from device-private.c (RHEL-5988)
  - udev: restore syspath and properties on failure (RHEL-5988)
  - sd-device: introduce device_get_property_int() (RHEL-5988)
  - core/device: downgrade log level for ignored errors (RHEL-5988)
  - core/device: ignore failed uevents (RHEL-5988)
  - test: add tests for failure in renaming network interface (RHEL-5988)
  - test: modernize test-netlink.c (RHEL-5988)
  - test-netlink: use dummy interface to test assigning new interface name (RHEL-5988)
  - udev: use SYNTHETIC_ERRNO() at one more place (RHEL-5988)
  - udev: make udev_builtin_run() take UdevEvent* (RHEL-5988)
  - udev/net: verify ID_NET_XYZ before trying to assign it as an alternative name (RHEL-5988)
  - udev/net: generate new network interface name only on add uevent (RHEL-5988)
  - sd-netlink: make rtnl_set_link_name() optionally append alternative names (RHEL-5988)
  - udev/net: assign alternative names only on add uevent (RHEL-5988)
  - test: add tests for renaming network interface (RHEL-5988)
  - Backport ukify from upstream (RHEL-13199)
  - bootctl: make --json output normal json (RHEL-13199)
  - test: replace readfp() with read_file() (RHEL-13199)
  - stub/measure: document and measure .uname UKI section (RHEL-13199)
  - boot: measure .sbat section (RHEL-13199)
  - Revert "test_ukify: no stinky root needed for signing" (RHEL-13199)
  - ukify: move to /usr/bin and mark as non non-experimental (RHEL-13199)
  - kernel-install: Add uki layout (RHEL-16354)
  - kernel-install: remove math slang from man page (RHEL-16354)
  - kernel-install: handle uki installs automatically (RHEL-16354)
  - 90-uki-copy.install: create $BOOT/EFI/Linux directory if needed (RHEL-16354)
  - kernel-install: Log location that uki is installed in (RHEL-16354)
  - bootctl: fix errno logging (RHEL-16354)
  - bootctl: add kernel-identity command (RHEL-16354)
  - bootctl: add kernel-inspect command (RHEL-16354)
  - bootctl: add kernel-inspect to --help text (RHEL-16354)
  - bootctl: drop full stop at end of --help texts (RHEL-16354)
  - bootctl: change section title for kernel image commands (RHEL-16354)
  - bootctl: remove space that should not be there (RHEL-16354)
  - bootctl: kernel-inspect: print os info (RHEL-16354)
  - bootctl-uki: several coding style fixlets (RHEL-16354)
  - tree-wide: unify how we pick OS pretty name to display (RHEL-16354)
  - bootctl-uki: several follow-ups for inspect_osrel() (RHEL-16354)
  - bootctl: Add missing %m (RHEL-16354)
  - bootctl: tweak DOS header magic check (RHEL-16354)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-21
changelog:
  - meson: fix installation of ukify (RHEL-13199)
  - sd-id128: introduce id128_hash_ops_free (RHEL-5988)
  - udevadm-trigger: allow to fallback without synthetic UUID only first time (RHEL-5988)
  - udevadm-trigger: settle with synthetic UUID if the kernel support it (RHEL-5988)
  - udevadm-trigger: also check with the original syspath if device is renamed (RHEL-5988)
  - test: use 'udevadm trigger --settle' even if device is renamed (RHEL-5988)
  - sd-event: don't mistake USEC_INFINITY passed in for overflow (RHEL-6090)
  - pid1: rework service_arm_timer() to optionally take a relative time value (RHEL-6090)
  - manager: add one more assert() (RHEL-6090)
  - pid1: add new Type=notify-reload service type (RHEL-6090)
  - man: document Type=notify-reload (RHEL-6090)
  - pid1: make sure we send our calling service manager RELOADING=1 when reloading (RHEL-6090)
  - networkd: implement Type=notify-reload protocol (RHEL-6090)
  - udevd: implement the full Type=notify-reload protocol (RHEL-6090)
  - logind: implement Type=notify-reload protocol properly (RHEL-6090)
  - notify: add --stopping + --reloading switches (RHEL-6090)
  - test: add Type=notify-reload testcase (RHEL-6090)
  - update TODO (RHEL-6090)
  - core: check for SERVICE_RELOAD_NOTIFY in manager_dbus_is_running (RHEL-6090)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-22
changelog:
  - Revert "man: mention System Administrator's Guide in systemctl manpage" (RHEL-19436)
  - man: mention RHEL documentation in systemctl's man page (RHEL-19436)
  - resolved: actually check authenticated flag of SOA transaction (RHEL-6216)
  - udev: allow/denylist for reading sysfs attributes when composing a NIC name (RHEL-1317)
  - man: environment value -> udev property (RHEL-1317)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-23
changelog:
  - logind: don't setup idle session watch for lock-screen and greeter (RHEL-20757)
  - logind: don't make idle action timer accuracy more coarse than timeout (RHEL-20757)
  - logind: do TTY idle logic only for sessions marked as "tty" (RHEL-20757)
  - meson: Properly install 90-uki-copy.install (RHEL-16354)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-24
changelog:
  - ci: use source-git-automation composite Action (RHEL-1086)
  - ci: increase the cron interval to 45 minutes (RHEL-1086)
  - ci: add all Z-Stream versions to array of allowed versions (RHEL-1086)
  - udev/net_id: introduce naming scheme for RHEL-9.4 (RHEL-22427)
  - basic/errno-util: add wrappers which only accept negative errno (RHEL-22443)
  - errno-util: allow ERRNO_IS_* to accept types wider than int (RHEL-22443)
  - udev: add new builtin net_driver (RHEL-22443)
  - udev/net_id: introduce naming scheme for RHEL-8.10 (RHEL-22427)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-27
changelog:
  - test: merge TEST-20-MAINPIDGAMES into TEST-07-PID1 (fixup) (RHEL-1086)
  - test: use the default nsec3-iterations value (RHEL-1086)
  - test: explicitly set nsec3-iterations to 0 (RHEL-1086)
  - core: mount namespaces: Remove auxiliary bind mounts directory after unit termination (RHEL-19483)
  - ci: deploy systemd man to GitHub Pages (RHEL-1086)
  - doc: add missing `<listitem>` to `systemd.net-naming-scheme.xml` (RHEL-7026)
  - man: reorder the list of supported naming schemes (RHEL-7026)
  - tree-wide: fix return value handling of base64mem() (RHEL-16182)
  - Consolidate various TAKE_* into TAKE_GENERIC(), add TAKE_STRUCT() (RHEL-16182)
  - pcrphase: add $SYSTEMD_PCRPHASE_STUB_VERIFY env var for overriding stub check (RHEL-16182)
  - pcrphase: gracefully exit if TPM2 support is incomplete (RHEL-16182)
  - tpm2-util: split out code that derives "good" TPM2 banks into an strv from pcrphase and generalize it in tpm2-util.c (RHEL-16182)
  - tpm2-util: split out code that extends a PCR from pcrphase (RHEL-16182)
  - tpm2-util: optionally do HMAC in tpm2_extend_bytes() in case we process sensitive data (RHEL-16182)
  - cryptsetup: add tpm2-measure-pcr= and tpm2-measure-bank= crypttab options (RHEL-16182)
  - man: document the new crypttab measurement options (RHEL-16182)
  - gpt-auto-generator: automatically measure root/var volume keys into PCR 15 (RHEL-16182)
  - blkid-util: define enum for blkid_do_safeprobe() return values (RHEL-16182)
  - pcrphase: make tool more generic, reuse for measuring machine id/fs uuids (RHEL-16182)
  - units: measure /etc/machine-id into PCR 15 during early boot (RHEL-16182)
  - generators: optionally, measure file systems at boot (RHEL-16182)
  - tpm2: add common helper for checking if we are running on UKI with TPM measurements (RHEL-16182)
  - man: document new machine-id/fs measurement options (RHEL-16182)
  - test: add simple integration test for checking PCR extension works as it should (RHEL-16182)
  - update TODO (RHEL-16182)
  - cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (RHEL-16182)
  - boot: Simplify object erasure (RHEL-16182)
  - tree-wide: use CLEANUP_ERASE() at various places (RHEL-16182)
  - dlfcn: add new safe_dclose() helper (RHEL-16182)
  - tpm2: rename tpm2 alg id<->string functions (RHEL-16182)
  - tpm2: rename struct tpm2_context to Tpm2Context (RHEL-16182)
  - tpm2: use ref counter for Tpm2Context (RHEL-16182)
  - tpm2: use Tpm2Context* instead of ESYS_CONTEXT* (RHEL-16182)
  - tpm2: add Tpm2Handle with automatic cleanup (RHEL-16182)
  - tpm2: simplify tpm2_seal() blob creation (RHEL-16182)
  - tpm2: add salt to pin (RHEL-16182)
  - basic/macro: add macro to iterate variadic args (RHEL-16182)
  - test/test-macro: add tests for FOREACH_VA_ARGS() (RHEL-16182)
  - basic/bitfield: add bitfield operations (RHEL-16182)
  - test/test-bitfield: add tests for bitfield macros (RHEL-16182)
  - tpm2: add tpm2_get_policy_digest() (RHEL-16182)
  - tpm2: add TPM2_PCR_VALID() (RHEL-16182)
  - tpm2: add/rename functions to manage pcr selections (RHEL-16182)
  - test/test-tpm2: add tests for pcr selection functions (RHEL-16182)
  - tpm2: add tpm2_pcr_read() (RHEL-16182)
  - tpm2: move openssl-required ifdef code out of policy-building function (RHEL-16182)
  - tpm2: add tpm2_is_encryption_session() (RHEL-16182)
  - tpm2: move policy building out of policy session creation (RHEL-16182)
  - tpm2: add support for a trusted SRK (RHEL-16182)
  - tpm2: fix nits from PR #26185 (RHEL-16182)
  - tpm2: replace magic number (RHEL-16182)
  - tpm2: add tpm2_digest_*() functions (RHEL-16182)
  - tpm2: replace hash_pin() with tpm2_digest_*() functions (RHEL-16182)
  - tpm2: add tpm2_set_auth() (RHEL-16182)
  - tpm2: add tpm2_get_name() (RHEL-16182)
  - tpm2: rename pcr_values_size vars to n_pcr_values (RHEL-16182)
  - tpm2: add tpm2_policy_pcr() (RHEL-16182)
  - tpm2: add tpm2_policy_auth_value() (RHEL-16182)
  - tpm2: add tpm2_policy_authorize() (RHEL-16182)
  - tpm2: use tpm2_policy_authorize() (RHEL-16182)
  - tpm2: add tpm2_calculate_sealing_policy() (RHEL-16182)
  - tpm: remove external calls to dlopen_tpm2() (RHEL-16182)
  - tpm2: remove all extern tpm2-tss symbols (RHEL-16182)
  - tpm2: add tpm2_get_capability(), tpm2_cache_capabilities(), tpm2_capability_pcrs() (RHEL-16182)
  - tpm2: verify symmetric parms in tpm2_context_new() (RHEL-16182)
  - tpm2: replace _cleanup_tpm2_* macros with _cleanup_() (RHEL-16182)
  - tpm2-util: use compound initialization when allocating tpm2 objects (RHEL-16182)
  - tpm2: add tpm2_get_capability_handle(), tpm2_esys_handle_from_tpm_handle() (RHEL-16182)
  - tpm2: add tpm2_read_public() (RHEL-16182)
  - tpm2: add tpm2_get_legacy_template() and tpm2_get_srk_template() (RHEL-16182)
  - tpm2: add tpm2_load() (RHEL-16182)
  - tpm2: add tpm2_load_external() (RHEL-16182)
  - tpm2: move local vars in tpm2_seal() to point of use (RHEL-16182)
  - tpm2: replace magic number in hmac_sensitive initialization (RHEL-16182)
  - tpm2: add tpm2_create() (RHEL-16182)
  - tpm2: replace tpm2_capability_pcrs() macro with direct c->capaiblity_pcrs use (RHEL-16182)
  - basic/alloc-util: add greedy_realloc_append() (RHEL-16182)
  - tpm2: cache the TPM supported commands, add tpm2_supports_command() (RHEL-16182)
  - tpm2: cache TPM algorithms (RHEL-16182)
  - tpm2: add tpm2_persist_handle() (RHEL-16182)
  - tpm2: add tpm2_get_or_create_srk() (RHEL-16182)
  - tpm2: move local vars in tpm2_unseal() to point of use (RHEL-16182)
  - tpm2: remove tpm2_make_primary() (RHEL-16182)
  - tpm2: use CreatePrimary() to create primary keys instead of Create() (RHEL-16182)
  - cryptsetup: downgrade a bunch of log messages that to LOG_WARNING (RHEL-16182)
  - boot/measure: replace TPM PolicyPCR session with calculation (RHEL-16182)
  - core: imply DeviceAllow=/dev/tpmrm0 with LoadCredentialEncrypted (RHEL-16182)
  - added more test cases (RHEL-16182)
  - test: fixed negative checks in TEST-70-TPM2. Use in-line error handling rather than redirections. Follow up on #27020 (RHEL-16182)
  - systemd-cryptenroll: add string aliases for tpm2 PCRs Fixes #26697. RFE. (RHEL-16182)
  - cryptenroll: fix an assertion with weak passwords (RHEL-16182)
  - man/systemd-cryptenroll: update list of PCRs, link to uapi docs (RHEL-16182)
  - tpm2: add debug logging to functions converting hash or asym algs to/from strings or ids (RHEL-16182)
  - tpm2: add tpm2_hash_alg_to_size() (RHEL-16182)
  - tpm2: change tpm2_tpm*_pcr_selection_to_mask() to return mask (RHEL-16182)
  - tpm2: add more helper functions for managing TPML_PCR_SELECTION and TPMS_PCR_SELECTION (RHEL-16182)
  - tpm2: add Tpm2PCRValue struct and associated functions (RHEL-16182)
  - tpm2: move declared functions in header lower down (RHEL-16182)
  - tpm2: declare tpm2_log_debug_*() functions in tpm2_util.h (RHEL-16182)
  - tpm2: change tpm2_calculate_policy_pcr(), tpm2_calculate_sealing_policy() to use Tpm2PCRValue array (RHEL-16182)
  - tpm2: change tpm2_parse_pcr_argument() parameters to parse to Tpm2PCRValue array (RHEL-16182)
  - tpm2: add TPM2B_*_MAKE(), TPM2B_*_CHECK_SIZE() macros (RHEL-16182)
  - tpm2: add tpm2_pcr_read_missing_values() (RHEL-16182)
  - openssl: add openssl_pkey_from_pem() (RHEL-16182)
  - openssl: add rsa_pkey_new(), rsa_pkey_from_n_e(), rsa_pkey_to_n_e() (RHEL-16182)
  - openssl: add ecc_pkey_new(), ecc_pkey_from_curve_x_y(), ecc_pkey_to_curve_x_y() (RHEL-16182)
  - test: add DEFINE_HEX_PTR() helper function (RHEL-16182)
  - openssl: add test-openssl (RHEL-16182)
  - tpm2: add functions to convert TPM2B_PUBLIC to/from openssl pkey or PEM (RHEL-16182)
  - tpm2: move policy calculation out of tpm2_seal() (RHEL-16182)
  - man: update systemd-cryptenroll man page with details on --tpm2-pcrs format change (RHEL-16182)
  - tpm2: update TEST-70-TPM2 to test passing PCR value to systemd-cryptenroll (RHEL-16182)
  - tpm2: change *alg_to_* functions to use switch() (RHEL-16182)
  - tpm2: lowercase TPM2_PCR_VALUE[S]_VALID functions (RHEL-16182)
  - tpm2: move cast from lhs to rhs in uint16_t/int comparison (RHEL-16182)
  - tpm2: in validator functions, return false instead of assert failure (RHEL-16182)
  - tpm2: in tpm2_pcr_values_valid() use FOREACH_ARRAY() (RHEL-16182)
  - tpm2: use SIZE_MAX instead of strlen() for unhexmem() (RHEL-16182)
  - tpm2: put !isempty() check inside previous !isempty() check (RHEL-16182)
  - tpm2: simplify call to asprintf() (RHEL-16182)
  - tpm2: check pcr value hash != 0 before looking up hash algorithm name (RHEL-16182)
  - tpm2: use strempty() (RHEL-16182)
  - tpm2: split TPM2_PCR_VALUE_MAKE() over multiple lines (RHEL-16182)
  - tpm2: remove ret_ prefix from input/output params (RHEL-16182)
  - tpm2: use memcpy_safe() instead of memcpy() (RHEL-16182)
  - openssl: use new(char, size) instead of malloc(size) (RHEL-16182)
  - tpm2: use table for openssl<->tpm2 ecc curve id mappings (RHEL-16182)
  - tpm2: use switch() instead of if-else (RHEL-16182)
  - tpm2: make logging level consistent at debug for some functions (RHEL-16182)
  - tpm2: remove unnecessary void* cast (RHEL-16182)
  - tpm2: add tpm2_pcr_values_has_(any|all)_values() functions (RHEL-16182)
  - tpm2: wrap (7) in UINT32_C() (RHEL-16182)
  - cryptenroll: change man page example to remove leading 0x and lowercase hex (RHEL-16182)
  - openssl: add log_openssl_errors() (RHEL-16182)
  - openssl: add openssl_digest_size() (RHEL-16182)
  - openssl: add openssl_digest_many() (RHEL-16182)
  - openssl: replace openssl_hash() with openssl_digest() (RHEL-16182)
  - openssl: add openssl_hmac_many() (RHEL-16182)
  - openssl: add rsa_oaep_encrypt_bytes() (RHEL-16182)
  - openssl: add kdf_kb_hmac_derive() (RHEL-16182)
  - openssl: add openssl_cipher_many() (RHEL-16182)
  - openssl: add ecc_edch() (RHEL-16182)
  - openssl: add kdf_ss_derive() (RHEL-16182)
  - dlfcn-util: add static asserts ensuring our sym_xyz() func ptrs match the types from the official headers (RHEL-16182)
  - tpm2: add tpm2_marshal_blob() and tpm2_unmarshal_blob() (RHEL-16182)
  - tpm2: add tpm2_serialize() and tpm2_deserialize() (RHEL-16182)
  - tpm2: add tpm2_index_to_handle() and tpm2_index_from_handle() (RHEL-16182)
  - tpm2: fix build failure without openssl (RHEL-16182)
  - tpm2-util: look for tpm2-pcr-signature.json directly in /.extra/ (RHEL-16182)
  - tpm2: downgrade most log functions from error to debug (RHEL-16182)
  - tpm2: handle older tpm enrollments without a saved pcr bank (RHEL-16182)
  - tpm2: allow tpm2_make_encryption_session() without bind key (RHEL-16182)
  - tpm2: update tpm2 test for supported commands (RHEL-16182)
  - tpm2: use GREEDY_REALLOC_APPEND() in tpm2_get_capability_handles(), cap max value (RHEL-16182)
  - tpm2: change tpm2_unseal() to accept Tpm2Context instead of device string (RHEL-16182)
  - tpm2: cache TPM's supported ECC curves (RHEL-16182)
  - tpm2-util: make tpm2_marshal_blob()/tpm2_unmarshal_blob() static (RHEL-16182)
  - tpm2-util: make tpm2_read_public() static, as we use it only internally in tpm2-util.c (RHEL-16182)
  - cryptenroll: allow specifying handle index of key to use for sealing (RHEL-16182)
  - test: add tests for systemd-cryptenroll --tpm2-seal-key-handle (RHEL-16182)
  - tpm2: do not call Esys_TR_Close() (RHEL-16182)
  - tpm2: don't use GetCapability() to check transient handles (RHEL-16182)
  - tpm2-util: pick up a few new symbols from tpm2-tss (RHEL-16182)
  - tpm2: add tpm2_get_pin_auth() (RHEL-16182)
  - tpm2: instead of adjusting authValue trailing 0(s), trim them as required by tpm spec (RHEL-16182)
  - tpm2-util: rename tpm2_calculate_name() → tpm2_calculate_pubkey_name() (RHEL-16182)
  - cryptenroll: do not implicitly verify with default tpm policy signature (RHEL-16182)
  - cryptenroll: drop deadcode (RHEL-16182)
  - tpm2: allow using tpm2_get_srk_template() without tpm (RHEL-16182)
  - tpm2: add test to verify srk templates (RHEL-16182)
  - tpm2: add tpm2_sym_alg_*_string() and tpm2_sym_mode_*_string() (RHEL-16182)
  - tpm2: add tpm2_calculate_seal() and helper functions (RHEL-16182)
  - tpm2: update test-tpm2 for tpm2_calculate_seal() (RHEL-16182)
  - cryptenroll: add support for calculated TPM2 enrollment (RHEL-16182)
  - test: update TEST-70 with systemd-cryptenroll calculated TPM2 enrollment (RHEL-16182)
  - openssl-util: avoid freeing invalid pointer (RHEL-16182)
  - creds-util: check for CAP_DAC_READ_SEARCH (RHEL-16182)
  - creds-util: do not try TPM2 if there is not support (RHEL-16182)
  - creds-util: merge the TPM2 detection for initrd (RHEL-16182)
  - cryptenroll: fix a memory leak (RHEL-16182)
  - sd-journal: introduce sd_journal_step_one() (RHEL-11591)
  - test: modernize test-journal-flush (RHEL-11591)
  - journal-file-util: do not fail when journal_file_set_offline() called more than once (RHEL-11591)
  - journal-file-util: Prefer punching holes instead of truncating (RHEL-11591)
  - test: add reproducer for SIGBUS issue caused by journal truncation (RHEL-11591)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-28
changelog:
  - random-seed: shorten a bit may_credit() (RHEL-16952)
  - random-seed: make one more use of random_write_entropy() (RHEL-16952)
  - random-seed: use getopt() (RHEL-16952)
  - random-seed: make the logic to calculate the number of bytes read from the random seed file clearer (RHEL-16952)
  - random-seed: no need to pass 'mode' argument when opening /dev/urandom (RHEL-16952)
  - random-seed: split out run() (RHEL-16952)
  - random_seed: minor improvement in run() (RHEL-16952)
  - random-seed: downgrade some messages (RHEL-16952)
  - random-seed: clarify one comment (RHEL-16952)
  - random-seed: make sure to load machine id even if the seed file is missing (RHEL-16952)
  - chase-symlinks: add new flag for prohibiting any following of symlinks (RHEL-16952)
  - bootctl,bootspec: make use of CHASE_PROHIBIT_SYMLINKS whenever we access the ESP/XBOOTLDR (RHEL-16952)
  - boot: implement kernel EFI RNG seed protocol with proper hashing (RHEL-16952)
  - random-seed: refresh EFI boot seed when writing a new seed (RHEL-16952)
  - random-seed: handle post-merge review nits (RHEL-16952)
  - boot: do not truncate random seed file (RHEL-16952)
  - bootctl: install system token on virtualized systems (RHEL-16952)
  - boot: remove random-seed-mode (RHEL-16952)
  - stub: handle random seed like sd-boot does (RHEL-16952)
  - efi: add efi_guid_equal() helper (RHEL-16952)
  - efi: add common implementation for loop finding EFI configuration tables (RHEL-16952)
  - boot: Detect hypervisors using SMBIOS info (RHEL-16952)
  - boot: Skip soft-brick warning when in a VM (RHEL-16952)
  - boot: Replace UINTN with size_t (RHEL-16952)
  - boot: Use unsigned for beep counting (RHEL-16952)
  - boot: Use unicode literals (RHEL-16952)
  - macro: add generic IS_ALIGNED32() anf friends (RHEL-16952)
  - meson: use 0|1 for SD_BOOT (RHEL-16952)
  - boot: Add printf functions (RHEL-16952)
  - boot: Use printf for error logging (RHEL-16952)
  - boot: Introduce log_wait (RHEL-16952)
  - boot: Add log_trace debugging helper (RHEL-16952)
  - tree-wide: Use __func__ in asserts (RHEL-16952)
  - boot: Drop use of xpool_print/SPrint (RHEL-16952)
  - boot: Drop use of Print (RHEL-16952)
  - boot: Rework GUID handling (RHEL-16952)
  - efi-string: Fix strchr() null byte handling (RHEL-16952)
  - efi-string: Add startswith8() (RHEL-16952)
  - efi-string: Add efi_memchr() (RHEL-16952)
  - vmm: Add more const (RHEL-16952)
  - vmm: Add smbios_find_oem_string() (RHEL-16952)
  - stub: Read extra kernel command line items from SMBIOS (RHEL-16952)
  - vmm: Modernize get_smbios_table() (RHEL-16952)
  - stub: measure SMBIOS kernel-cmdline-extra in PCR12 (RHEL-16952)
  - efi: support passing empty cmdline to mangle_stub_cmdline() (RHEL-16952)
  - efi: set EFIVAR to stop Shim from uninstalling its protocol (RHEL-16952)
  - ukify: use empty stub for addons (RHEL-16952)
  - stub: allow loading and verifying cmdline addons (RHEL-16952)
  - TODO: remove fixed item (RHEL-16952)
  - fix: do not check/verify slice units if recursive errors are to be ignored (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-30
changelog:
  - resolved: limit the number of signature validations in a transaction (RHEL-26643)
  - resolved: reduce the maximum nsec3 iterations to 100 (RHEL-26643)
  - efi: alignment of the PE file has to be at least 512 bytes (RHEL-26133)
  - units: change assert to condition to skip running in initrd/os (RHEL-16182)
  - ci: add configuration for regression sniffer GA (RHEL-1086)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-31
changelog:
  - bootctl: rework random seed logic to use open_mkdir_at() and openat() (RHEL-16952)
  - bootctl: properly sync fs before/after moving random seed file into place (RHEL-16952)
  - bootctl: when updating EFI random seed file, hash old seed with new one (RHEL-16952)
  - sha256: add helper than hashes a buffer *and* its size (RHEL-16952)
  - random-seed: don't refresh EFI random seed from random-seed.c anymore (RHEL-16952)
  - bootctl: downgrade graceful messages to LOG_NOTICE (RHEL-16952)
  - units: rename/rework systemd-boot-system-token.service → systemd-boot-random-seed.service (RHEL-16952)
  - bootctl: split out setting of system token into function of its own (RHEL-16952)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-33
changelog:
  - execute: Pass AT_FDCWD instead of -1 (RHEL-31783)
  - ci(src-git): update list of supported products (RHEL-30372)
  - coredump: by default process and store core files up to 1GiB (RHEL-15501)
  - coredump: keep core files for two weeks (RHEL-15501)
  - ukify: make the test happy with the latest OpenSSL (RHEL-30372)
  - test_ukify: use raw string for the regex (RHEL-30372)
  - coredump: generate stacktraces also for processes running in containers w/o coredump forwarding (RHEL-29430)
  - test: add a couple of tests for systemd-coredump (RHEL-29430)
  - test: don't expand the subshell expression prematurely (RHEL-29430)
  - coredump filter: fix stack overflow with =all (RHEL-29430)
  - coredump filter: add mask for 'all' using UINT32_MAX, not UINT64_MAX (RHEL-29430)
  - test: add coverage for CoredumpFilter=all (RHEL-29430)
  - test: rotate journal before storing coredumps (RHEL-29430)
  - test: sync with the fake binary before killing it (RHEL-29430)
  - test: check coredump handling in containers & namespaces (RHEL-29430)


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


