# changelog

author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-1
changelog:
  - Update to 3.0.6
  - Resolves: RHEL-1681 - [RFE] Log buffering for all log types
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-38917 - dscreate interactive install shows a traceback
    when mdb is selected
  - Resolves: RHEL-42485 - [RFE] pbkdf2 hardcoded parameters should be turned
    into configuration options
  - Resolves: RHEL-59513 - [RFE] Port logconv.pl to python
  - Resolves: RHEL-61253 - Make online import more robust
  - Resolves: RHEL-69819 - "Duplicated DN detected" errors when creating
    indexes or importing entries. [rhel-10.0]
  - Resolves: RHEL-70122 - Crash in attrlist_find() when the Account Policy
    plugin is enabled.
  - Resolves: RHEL-74149 - backup/restore broken
  - Resolves: RHEL-74154 - If an entry RDN is identical to the suffix, then
    Entryrdn gets broken during a reindex
  - Resolves: RHEL-74159 - Crash during bind when acct policy plugin does not
    have "alwaysrecordlogin" set
  - Resolves: RHEL-74164 - On replica consumer, account policy plugin fails
    to manage the last login history
  - Resolves: RHEL-76020 - IPA LDAP error code T3 when no exceeded time limit
    from a paged search result [rhel-10]
  - Resolves: RHEL-76838 - Unlocked and locked users having same error output
  - Resolves: RHEL-76841 - Healthcheck tool should warn admin about creating
    a substring index on membership attribute


author: Viktor Ashirov <vashirov@redhat.com> - 3.0.6-2
changelog:
  - Bump version to 3.0.6-3
  - Resolves: RHEL-5141 - [RFE] For each request, a ldap client can assign an
    identifier to be added in the logs
  - Resolves: RHEL-77948 - ns-slapd crashes with data directory ≥ 2 days old
    [rhel-10]
  - Resolves: RHEL-78342 - During import of entries without nsUniqueId, a
    supplier generates duplicate nsUniqueId (LMDB only)


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-2
changelog:
  - Resolves: RHEL-5117 - ns-slapd crash in
    dbmdb_import_prepare_worker_entry()
  - Resolves: RHEL-31959 - [RFE] add plugin origin or source in security's
    log msg info
  - Resolves: RHEL-35241 - ns-slapd crashes in referral mode
  - Resolves: RHEL-61327 - Incomplete messages about replication in the
    errors log.
  - Resolves: RHEL-61353 - dbscan  on replication changelog does not display
    MOD_TYPE
  - Resolves: RHEL-62874 - dsidm: issue when renaming users
  - Resolves: RHEL-65660 - DSIDM: Re-enabling user accounts that reached
    inactivity limit fails with error
  - Resolves: RHEL-67003 - dsconf backend replication monitor fails if
    replica id starts with 0
  - Resolves: RHEL-67006 - dsconf  utility  should let you configure the
    "uniqueness-exclude-subtrees" parameter of the Attribute Uniqueness plug-
    in
  - Resolves: RHEL-67019 - Crash in __strlen_sse2 when using the nsRole
    filter rewriter.
  - Resolves: RHEL-67022 - Password modify extended operation should skip
    password policy checks when executed by root DN
  - Resolves: RHEL-70117 - Unify how group description can be added to a new
    group in WebUI and CLU
  - Resolves: RHEL-74085 - Increased memory consumption caused by NDN cache
  - Resolves: RHEL-74270 - [RFE] Implement "list-dn" option for dsidm tool in
    Directory Server
  - Resolves: RHEL-76832 - Wrong backend database name syntax causes "Red Hat
    Directory Server" => "Databases" menu blank in Cockpit
  - Resolves: RHEL-76837 - dsidm Error: float() argument must be a string or
    a number, not 'NoneType'
  - Resolves: RHEL-76840 - Monitoring tab should use dsconf monitor
  - Resolves: RHEL-77490 - Complete remove the parameter "nsslapd-subtree-
    rename-switch" from DS-12
  - Resolves: RHEL-79080 - Json option does not work with "dsidm account get-
    by-dn" command
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-80253 - RHDS hangs when having online backup running
    together with automember_rebuild task executing
  - Resolves: RHEL-80497 - Can't rename users member of automember rule
    [rhel-10]
  - Resolves: RHEL-81277 - logconv.py fails when specific timestamps are
    provided
  - Resolves: RHEL-83850 - mdb database statistics don't work
  - Resolves: RHEL-86279 - Cannot create a nested role using "dsidm role
    create-nested"
  - Resolves: RHEL-86280 - Cannot create a filtered role using "dsidm role
    create-filtered"
  - Resolves: RHEL-86313 - RootDN Access Control Plugin with wildcards for IP
    addresses fails with an error "Invalid IP address"
  - Resolves: RHEL-86314 - dsidm failing with error "argument must be a
    string or a number"
  - Resolves: RHEL-86315 - Dsidm get_dn option fails for organizational unit,
    service and posixgroup
  - Resolves: RHEL-86316 - Dsidm uniquegroup members option does not work
  - Resolves: RHEL-86321 - dsidm role rename-by-dn does not rename a role
  - Resolves: RHEL-86322 - dsidm role subtree-status doesn't work
  - Resolves: RHEL-86323 - dsidm role get-by-dn doesn't work properly with -j
    option
  - Resolves: RHEL-86324 - Deleting a role with dsidm results in proper
    deletion message, but role is still present
  - Resolves: RHEL-86785 - dscontainer: support loading custom schema
  - Resolves: RHEL-86878 - segfault at 7ff2370010c8 ip 00007ff2339ba239 sp
    00007fed321fe100 error 6 in liblmdb.so.0.0.0
  - Resolves: RHEL-89748 - Nested group does not receive memberOf attribute
  - Resolves: RHEL-89774 - Improve the "result" field of ipa-healthcheck if
    replicas are busy [rhel-10]
  - Resolves: RHEL-89776 - RHDS12.2 NSMMReplicationPlugin - release_replica
    Unable to parse the response
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]
  - Resolves: RHEL-95761 - Improve  error message when bulk import connection
    is closed
  - Resolves: RHEL-97565 - On RHDS 12.6 The user password policy for a user
    was created, but the pwdpolicysubentry attribute for this user
    incorrectly points to the People OU password policy instead of the
    specific user policy.
  - Resolves: RHEL-101926 - ipa-backup failed with error : 'No such file or
    directory: '/usr/sbin/dsctl'


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-3
changelog:
  - Resolves: RHEL-80252 - [RFE] Structured (JSON) logging option for RHDS
    access and error logs
  - Resolves: RHEL-95441 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip
    00007ff734050cdb sp 00007ff6de9f1430 error 6 in
    libslapd.so.0.1.0[7ff733ec0000+1b3000]


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-4
changelog:
  - Resolves: RHEL-73032 - segfault - error 4 in libpthread-2.28.so
  - Resolves: RHEL-79079 - Failure to get Server monitoring data when NDN
    cache is disabled.
  - Resolves: RHEL-87352 - ns-slapd crashed when we add nsslapd-referral
  - Resolves: RHEL-92054 - Memory leak in
    roles_cache_create_object_from_entry [rhel-10]
  - Resolves: RHEL-107001 - ipa-restore fails to restore SELinux contexts,
    causes ns-slapd AVC denials on /dev/shm after restore. [rhel-10]
  - Resolves: RHEL-107028 - CWE-284 dirsrv log rotation creates files with
    world readable permission
  - Resolves: RHEL-107035 - CWE-532 Created user password hash available to
    see in audit log
  - Resolves: RHEL-107037 - CWE-778 Log doesn't show what user gets password
    changed by administrator


author: Viktor Ashirov <vashirov@redhat.com> - 3.1.3-5
changelog:
  - Resolves: RHEL-101727 - The numSubordinates value is not matching the
    number of direct children.
  - Resolves: RHEL-101783 - RHDS12: Web console doesn't show Server Version
  - Resolves: RHEL-109018 - Allow Uniqueness plugin to search uniqueness
    attributes using custom matching rules
  - Resolves: RHEL-111224 - Error showing local password policy on web UI
  - Resolves: RHEL-112675 - Statistics about index lookup report a wrong
    duration
  - Resolves: RHEL-112689 - Crash if repl keep alive entry can not be created
  - Resolves: RHEL-112722 - Exception thrown by dsconf instance repl get_ruv
  - Resolves: RHEL-113969 - AddressSanitizer: memory leak in
    memberof_add_memberof_attr


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Resolves: RHEL-18041 - [RFE] When there are multiple backends cache auto-
    tune should adapt its tuning
  - Resolves: RHEL-58682 - [RFE]  modify entry cache eviction strategy to
    allow large groups to stay in the cache
  - Resolves: RHEL-64019 - Units for changing MDB max size are not consistent
    across different tools
  - Resolves: RHEL-83274 - Replication online reinitialization of a large
    database gets stalled.
  - Resolves: RHEL-83852 - LDAP high CPU usage while handling indexes with
    IDL scan limit at INT_MAX
  - Resolves: RHEL-86534 - [RFE] Support Dynamic Groups similar to OpenLDAP
  - Resolves: RHEL-89601 - (&(cn:dn:=groups)) no longer returns results
  - Resolves: RHEL-94025 - PAM Pass Through Authentication Plugin processes
    requests for accounts that do not meet the criteria specified in the
    `pamFilter` option.
  - Resolves: RHEL-95395 - Getting "build_candidate_list - Database error 11"
    messages after migrating to LMDB.
  - Resolves: RHEL-96196 - Duplicate/double local password policy entry
    display from redhat directory server webconsole
  - Resolves: RHEL-99331 - [RFE] Need an option with dsconf to delete all the
    conflicts at once instead of deleting each conflict one after the other
  - Resolves: RHEL-105578 - IPA health check up script shows time skew is
    over 24 hours
  - Resolves: RHEL-106502 - Ignore the memberOfDeferredUpdate setting when
    LMDB is used.
  - Resolves: RHEL-106559 - When deferred memberof update is enabled after
    the server crashed it should not launch memberof fixup task by default
  - Resolves: RHEL-106849 - Abort the offline import if the root entry cannot
    be added.
  - Resolves: RHEL-107003 - Improve output dsctl dbverify when backend does
    not exist
  - Resolves: RHEL-109113 - [RFE] memberOf plugin - Add scope for specific
    groups
  - Resolves: RHEL-111219 - Attribute uniqueness is not enforced upon modrdn
    operation
  - Resolves: RHEL-113965 - RetroCL plugin generates invalid LDIF
  - Resolves: RHEL-115179 - Several password related attributes are not
    replicating from the Replicas to the Masters
  - Resolves: RHEL-115484 - ns-slapd crash in libdb, possible memory
    corruption
  - Resolves: RHEL-116060 - Fix paged result search locking
  - Resolves: RHEL-117124 - Missing access JSON logging for TLS/CLient auth
  - Resolves: RHEL-117140 - Changelog trimming - add number of scanned
    entries to the log
  - Resolves: RHEL-117520 - Typo in errors log after a Memberof fixup task.
  - Resolves: RHEL-121208 - [RFE] Make nsslapd-haproxy-trusted-ip accept
    whole subnets
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-122674 - [WebUI] Replication tab crashes after enabling
    replication as a consumer
  - Resolves: RHEL-123220 - Improve the way to detect asynchronous operations
    in the access logs
  - Resolves: RHEL-123275 - The new ipahealthcheck test
    ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue
  - Resolves: RHEL-123663 - Online initialization of consumers fails with
    error -23
  - Resolves: RHEL-123664 - RHDS 12.6 doesn't handle 'ldapsearch' filter with
    space char in DN name correctly
  - Resolves: RHEL-123762 - 389-ds-base OpenScanHub Leaks Detected
  - Resolves: RHEL-124694 - Access logs are not getting deleted as
    configured.
  - Resolves: RHEL-126535 - memory corruption in alias entry plugin
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-129675 - Can't locate CSN error seen in errors log when
    replicating after importing data from ldif files
  - Resolves: RHEL-131129 - ns-slapd[2233]: segfault at 0 ip 00007f1f1d7cd7fc
    sp 00007f1e775fc070 error 4 in libjemalloc.so.2[7f1f1d738000+ac000] on
    389-ds-base-2.6.1-11
  - Resolves: RHEL-133795 - Memory leak observed in ns-slapd with 389-ds-
    base-2.6.1-12
  - Resolves: RHEL-139826 - Rebase 389-ds-base to 3.2.x


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-2
changelog:
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-3
changelog:
  - Bump version to 3.2.0-3
  - Resolves: RHEL-76835 - Web console doesn't show the sub suffix of
    ou=foo,ou=people,dc=example,dc=com.
  - Resolves: RHEL-86320 - [RFE] Support updating/renewing TLS certificate
    without restarting slapd
  - Resolves: RHEL-110192 - ns-slapd doesn't support PQC keys
  - Resolves: RHEL-111220 - RHDS-11.9 dsctl db2index --attr recreates all
    indexes instead of selected ones
  - Resolves: RHEL-111931 - Improve error messages for dsconf localpwp list
  - Resolves: RHEL-121981 - Setting password history count to 0 does not
    flush history
  - Resolves: RHEL-122625 - ipa-healthcheck is complaining about missing or
    incorrectly configured system indexes.
  - Resolves: RHEL-128906 - Scalability issue of replication online
    initialization with large database
  - Resolves: RHEL-137786 - Upgrading IDM to latest version: 389-ds-base and
    ipa-server breaks replication
  - Resolves: RHEL-146769 - Remove memberof_del_dn_from_groups from MemberOf
    plugin


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-4
changelog:
  - Bump version to 3.2.0-4
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.
  - Resolves: RHEL-133085 - Replica installation is failing with message
    MDB_BAD_VALSIZE: Unsupported size of key/DB name/data, or wrong DUPFIXED
  - Resolves: RHEL-137072 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote
    Code Execution and Denial of Service via heap buffer overflow [rhel-10.2]
  - Resolves: RHEL-138729 - Crash ( Segmentation fault ) in
    atomic_compare_exchange()


author: Viktor Ashirov <vashirov@redhat.com> - 3.2.0-6
changelog:
  - Bump version to 3.2.0-6
  - Resolves: RHEL-86312 - Crash in trim_changelog() during the Retro
    Changelog trimming.


author: Filip Pokrývka <fpokryvk@redhat.com> - 1:1.53.3-1
changelog:
  - Update to 1.53.3 (dev)
  - Add more IPv6 prefix delegation options (RHEL-81948)
  - Fix order of parsing port/controller properies in nmcli (RHEL-80273)
  - Improve interface activation logic (RHEL-80157)
  - Fix WireGuard IPv6 firewall rules (RHEL-79975)
  - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-78769)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.4-1
changelog:
  - Update to 1.53.4 (dev)
  - initrd: add new NBFT parser (RHEL-83058)
  - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-89582)
  - Support reapply on OVS settings (RHEL-86877)
  - Add support for configuring the loopback interface in nmtui (RHEL-70484)
  - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-1794)
  - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-83752)
  - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-86767)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.53.90-1
changelog:
  - Update to 1.54.0 (rc1)
  - Devices not becoming managed sometimes (RHEL-89914)
  - Crash on _l3cfg_notify_cb (RHEL-92020)
  - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.91-1
changelog:
  - Update to 1.54.0 (rc2)
  - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-69125)
  - Fix a race condition in ovs tun interface (RHEL-17358)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.53.92-1
changelog:
  - Update to 1.54.0 (rc3)
  - Fix ipv6 static route deleted with dualstack (RHEL-102774)
  - Allow setting IP method to disabled in port connections (RHEL-90756)


author: Filip Pokryvka <fpokryvk@redhat.com> - 1:1.54.0-1
changelog:
  - Update to 1.54.0
  - Fix reaply on bridge port VLAN (RHEL-102318)
  - Accept hostnames longer than 64 characters from DNS lookup (RHEL-104357)


author: Vladimír Beneš <vbenes@redhat.com> - 1:1.55.4-1
changelog:
  - Update to 1.55.4 (dev)
  - Adding a VF configuration resets and re-configures all other VFs (RHEL-95844)
  - Fix connection.autoconnect-ports of OVS ports (RHEL-93876)
  - Global DNS config without domains silently ignored from D-Bus (RHEL-109853)
  - Add support for a DHCP client-id kernelarg (RHEL-108454)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.55.90-1
changelog:
  - Update to 1.56.0 (rc1)
  - Support setting protocol version of HSR/PRP (RHEL-100764)
  - Support interlink for HSR/PRP (RHEL-100768)
  - Reject connections if the corresponding feature is disabled or removed (RHEL-93829)
  - Improve logging of networking off (RHEL-103925)
  - Don't delete unrelated OVS ports (RHEL-120176)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Al Stone <ahs3@fedoraproject.org> - 20240322-1
changelog:
  - Update source tree to 20240322 version from upstream.  NB: this update
    is done in conjunction with removing s390x support due to the large
    number of patches that are now rendered obsolete.  Closes BZ#2138250.
  - Note, too, that the upstream version of the tarball is missing two
    commits and has the wrong name; discussed this with upstream and
    included a patch with the two commits to correct this, and renamed
    the tarballs to try to maintain consistency. So, upstream is actually
    named version 20240321, but it should be 20240322 according to their
    own git tree (see tag G20240322 on github).
  - Removed executable bit from all the upstream source files
  - Remove big-endian support, aka s390x.  Closes BZ#2298855.
  - Remove several 32-bit only patches that are also obsolete since they
    are for unsupported architectures (thanks to pbonzini and PR#5).
  - Remove PIE patches since that is currently the default (again, thanks
    to pbonzini and PR#5)
  - Resolves: RHEL-66144


author: Eduard Abdullin <eabdullin@almalinux.org> - 10.0-12
changelog:
  - Add dist_purl_namespace to macros.dist
  - Re-disable rpcbind.service and rpcbind.socket
  - Enable greenboot services


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.38-1
changelog:
  - bootloader: efi: utilize grub2-common script for handling config file
    generation (k.koukiou)
    Resolves: RHEL-58830


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.39-1
changelog:
  - Remove --root-mount-spec to enable bootc's btrfs subvolume auto-detection
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Collect kernel arguments before installation to pass to bootc
    (k.koukiou)
    Related: RHEL-58215
  - bootc: Bind mount /boot into sysroot for %post scripts (k.koukiou)
    Related: RHEL-58215
  - pyanaconda: bootc: specify the bootloader to grub for bootc (k.koukiou)
    Related: RHEL-58215
  - Add bootc installation method (ppolawsk)
    Resolves: RHEL-58215
  - Include bootc command in expected pykickstart commands (ppolawsk)
    Related: RHEL-58215


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.40-1
changelog:
  - rhsm: add --flatpak-registry-url support (bciconel)
    Resolves: RHEL-132652
  - flatpak: handle self-signed certificate errors in registry sources (bciconel)
    Resolves: RHEL-132652
  - flatpak: add utility to check for self-signed certificate errors (bciconel)
    Resolves: RHEL-132652
  - Fix permissions of the ssh config created by Anaconda (ppolawsk)
    Resolves: RHEL-99673
  - Add x-initrd.attach to /etc/crypttab device for / volumes (mkolman)
    Resolves: RHEL-112702
    Related: RHEL-132666


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.41-1
changelog:
  - ostree needs to have /boot be bindmounted into sysroot (k.koukiou)
    Resolves: RHEL-66155
  - modules: rpm_ostree: allow /boot/efi mount point in bootc installation
    (k.koukiou)
    Resolves: RHEL-141155


author: Bruno <bciconel@redhat.com> - 40.22.3.42-1
changelog:
  - payloads: flatpak: fix SSL error detection on older Python versions
    (bciconel)
    Related: RHEL-141069
    Resolves: RHEL-142694


author: Bruno <bciconel@redhat.com> - 40.22.3.43-1
changelog:
  - installation: run subscription tasks after network configuration (bciconel)
    Resolves: RHEL-135111
  - subscription: ensure /var/lib/insights exists before running insights-client
    (bciconel)
    Resolves: RHEL-135111
  - spec: Require zram-generator-defaults for RHEL-10 (k.koukiou)
    Resolves: RHEL-117685
  - Only show compatible translations in text mode (mkolman)
    Resolves: RHEL-16168


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.44-1
changelog:
  - storage: stop creating /etc/mtab symlink during installation (k.koukiou)
    Related: RHEL-135116
  - rescue: Add warning for immutable systems (k.koukiou)
    Related: RHEL-135116
  - rescue: detect OSTree deployments in rescue mode and show deployment path
    (k.koukiou)
    Resolves: RHEL-135116
  - pyanaconda: storage: fix FindExistingSystems API for ostree based OSes
    (k.koukiou)
    Related: RHEL-135116
  - network: List all network interfaces IP for RDP session (ppolawsk)
    Resolves: RHEL-74268


author: Katerina Koukiou <k.koukiou@gmail.com> - 40.22.3.45-1
changelog:
  - Fix user input in driver disk menu is not displayed (adamkankovsky)
    Resolves: RHEL-58828
  - flatpak: tests: fix unreachable code (fsouza.bruno)
    Related: RHEL-143566
  - flatpak: Only override remote URLs when subscription module is available
    (bciconel)
    Related: RHEL-143566
  - flatpak: Make installation failures non-blocking (bciconel)
    Resolves: RHEL-143566
  - Reload installer SELinux policy at exit so dracut shutdown works (k.koukiou)
    Resolves: RHEL-144456


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.3
changelog:
  - lenses/tmpfiles.aug: Permit '$' character in /usr/lib/tmpfiles.d/*.conf
    resolves: RHEL-76283
  - lenses/multipath.aug: Support all possible values for find_multipaths
  - lenses/systemd.aug: Allow "+"(fullprivileges) command flag


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.2-0.9
changelog:
  - Fix: fails to parse /etc/fstab when there is a double comma after character
    resolves: RHEL-77279
  - Fix: fails to parse /etc/iproute2/README and /usr/share/iproute2/
    resolves: RHEL-113748
  - Synchronize spec file with Fedora


author: Jerome Marchand <jmarchan@redhat.com> - 0.34.0-1
changelog:
  - Rebase to the latest version (RHEL-78921)
  - Rebuild with LLVM 20 (RHEL-81772)
  - Silence warning of trace tools (RHEL-68952)
  - Fix bpf-runqlen (RHEL-91190)
  - Fix sslsniff and sofdsnoop (RHEL-58348)
  - Fix slabratetop (RHEL-58810)
  - Fix funclatency funcslower and gethostlatency on s390x (RHEL-68947)
  - Fix bpf-klockstat on aarch64 and ppc64 (RHEL-83001)
  - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-75529)
  - Fix multiples ppc64 tools (RHEL-58147)


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.33-12
changelog:
  - Refuse malformed DNSKEY records (CVE-2025-8677)
  - Address various spoofing attacks (CVE-2025-40778)
  - Prevent cache poisoning due to weak PRNG (CVE-2025-40780)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jan Friesse <jfriesse@redhat.com> - 3.1.9-2
changelog:
  - Resolves: RHEL-96073

  - exec: Add support for env STATE_DIRECTORY
  - init: Use LogsDirectory in systemd unit file


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Veronika Hanulikova <vhanulik@redhat.com> - 2.9.11-7
changelog:
  - Add missing man page for create-cracklib-dict (RHEL-39972)
  - Preserve special characters in cracklib-format (RHEL-39972)


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Ondrej Kozina <okozina@redhat.com> - 2.7.5-1
changelog:
  - Update to cryptsetup 2.7.5
  - patch: Warn if Argon2 keyslot is unlocked in FIPS mode.
  - patch: Enable Argon2 in FIPS with openssl backend.
  - Resolves: RHEL-57036 RHEL-57037 RHEL-61581


author: Kristina Hanicova <khanicov@redhat.com> - 2.8.1-2
changelog:
  - patch: opal: Submit PSID reset command to R/W file descriptor.
  - patch: Read integrity profile info from top level device.
  - patch: Fix possible use of uninitialized variable.
  - patch: Reinstate pbkdf serialization flag in device activation.
  - patch: Fix LUKS2 device status in inline HW mode and detached header.
  - patch: Set inline integrity flag if no underlying dm-integrity device.
  - patch: Fix wrong device size status reports in cryptsetup and integritysetup.
  - Resolves: RHEL-122285 RHEL-125150 RHEL-125155 RHEL-125166 RHEL-132584 RHEL-140107


author: Jeff Moyer <jmoyer@redhat.com> - 80-4
changelog:
  - Fix listing of region capabilities (Jeff Moyer)
  - Remove orphaned patch file (Jeff Moyer)
  - Resolves: RHEL-80436


author: Marian Csontos <mcsontos@redhat.com> - 2.03.28-4
changelog:
  - Fix temporary LVs not cleaned when converting in use LV to a thin pool.
  - Check FS resize is supported before extending LV.
  - Fix issue affecting memory locking before suspend (2.03.27).
  - Workaround for NVMe WWID changing after kernel update.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.32-2
changelog:
  - Fix vgremove hanging immediately after lockstart.
  - Add repair option for RAID volumes with too many transiently failed devices.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-7
changelog:
  - Add 0018-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
  - Add 0019-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
  - Add 0020-libmpathutil-add-support-for-Unix-pathname-sockets.patch
  - Add 0021-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
  - Add 0022-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
  - Add 0023-multipathd-allow-receiving-two-socket-fds-from-syste.patch
  - Add 0024-multipathd-listen-on-pathname-and-abstract-socket-by.patch
  - Add 0025-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
  - Add 0026-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
  - Add 0027-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  - Add 0028-multipath-clean-up-find_multipaths-documentation.patch
  - Add 0029-multipathd-Add-multipathd-man-page-section-about-soc.patch
    * Fixes RHEL-82180 ("RFE: Enable multipathd to communicate with a
      process in another network namespace")
  - Resolves: RHEL-82180


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-9
changelog:
  - Add 0030-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
  - Add 0031-libmultipath-add-helper-function-check_path_wwid_cha.patch
  - Add 0032-multipathd-re-add-paths-skipped-because-they-were-of.patch
    * Fixes RHEL-82535 ("multipathd does not monitor multipath devices
      created externally while there are offline paths.")
  - Resolves: RHEL-82535


author: Filip Suba <fsuba@redhat.com> - 0.9.9-11
changelog:
  - Add 0033-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
    * Fixes RHEL-103112 ("Update multipath builtin config to add new
      device defaults [rhel-10]")
  - Resolves: RHEL-103112


author: Lin Li <lilin@redhat.com> - 0.9.9-12
changelog:
  Add 0034-libmultipath-fix-crash-in-print_foreign_topology.patch
    * Fixes RHEL-107436 ("Running multipath -ll on system with "enable_foreign
      nvme" results in segfault")
  Resolves: RHEL-107436


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-13
changelog:
  - Add 0035-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
  - Add 0036-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
  - Add 0037-libmpathpersist-check-released-key-against-the-reser.patch
  - Add 0038-multipathd-remove-thread-from-mpath_pr_event_handle.patch
  - Add 0039-libmpathpersist-remove-uneeded-wrapper-function.patch
  - Add 0040-libmpathpersist-reduce-log-level-for-persistent-rese.patch
  - Add 0041-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
  - Add 0042-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
  - Add 0043-libmpathpersist-limit-changing-prflag-in-update_map_.patch
  - Add 0044-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
  - Add 0045-libmpathpersist-remove-useless-function-send_prout_a.patch
  - Add 0046-libmpathpersist-redesign-failed-release-workaround.patch
  - Add 0047-libmpathpersist-fail-the-release-if-all-threads-fail.patch
  - Add 0048-libmpathpersist-Handle-changing-key-corner-case.patch
  - Add 0049-libmpathpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
  - Add 0050-libmultipath-rename-prflag_value-enums.patch
  - Add 0051-libmpathpersist-use-a-switch-statement-for-prout-com.patch
  - Add 0052-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
  - Add 0053-libmpathpersist-remove-update_map_pr-code-for-NULL-p.patch
  - Add 0054-libmpathpersist-move-update_map_pr-to-multipathd.patch
  - Add 0055-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
  - Add 0056-libmpathpersist-clean-up-duplicate-function-declarat.patch
  - Add 0057-multipathd-wrap-setting-and-unsetting-prflag.patch
  - Add 0058-multipathd-unregister-PR-key-when-path-is-restored-i.patch
  - Add 0059-libmpathpersist-Fix-up-reservation_key-checking.patch
  - Add 0060-libmpathpersist-change-how-reservation-conflicts-are.patch
  - Add 0061-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
  - Add 0062-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
  - Add 0063-libmpathpersist-Restore-old-reservation-key-on-failu.patch
  - Add 0064-libmpathpersist-update-reservation-key-before-checki.patch
  - Add 0065-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
  - Add 0066-libmpathpersist-Don-t-always-fail-registrations-for-.patch
  - Add 0067-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
  - Add 0068-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
  - Add 0069-libmpathpersist-reregister-keys-when-self-preempting.patch
  - Add 0070-libmpathpersist-handle-updating-key-race-condition.patch
  - Add 0071-libmpathpersist-handle-preempting-all-registrants-re.patch
  - Add 0072-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
  - Add 0073-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
  - Add 0074-libmpathpersist-use-check_holding_reservation-in-mpa.patch
  - Add 0075-libmpathpersist-Fix-unregistering-while-holding-the-.patch
  - Add 0076-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
  - Add 0077-multipathd-Fix-tracking-of-old-PR-key.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-14
changelog:
  - Add 0078-multipathd-Fix-race-while-registering-PR-key.patch
  - Add 0079-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
    * Fixes RHEL-118720 ("There are many bugs in multipath's persistent
      reservation handling [rhel-10]")
  - Resolves: RHEL-118720


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-15
changelog:
  - Add 0080-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
    * Fixes RHEL-128338 ("Update the multipath.conf stanza for Infinidat
      storage")
  - Resolves: RHEL-128338


author: Ales Nezbeda <anezbeda@redhat.com> - 0.8.8-49
changelog:
  - Fix SPDX license tag based on further research
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/396#note_1976038980
  - Related: RHEL-37885


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-17
changelog:
  - fix building with latest openssl (RHEL-117460)
  - add /var/lib/dovecot to tmpfiles for image mode (RHEL-130953)


author: Than Ngo <than@redhat.com> - 2:1.12.0-3
changelog:
  - Fix Non-reproducible file names in doxygen output
  - Fix broken markdown links to anchors
  Related: RHEL-58045


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-1
changelog:
  - Rebase to edk2-stable202505 [RHEL-82556]
  - Resolves: RHEL-82556
    ([edk2,rhel-10] rebase to edk2-stable202505)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250523-2
changelog:
  - edk2-add-qemu-vars-builds-to-build-config-and-file-lists.patch [RHEL-2908]
  - edk2-add-dbx-update-script.patch [RHEL-96866]
  - edk2-update-dbx-to-20250610.patch [RHEL-96866]
  - Resolves: RHEL-2908
    ([aarch64][EDK2] UEFI writable variable service in QEMU)
  - Resolves: RHEL-96866
    ([edk2,rhel-10] dbx update 20250610)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-1
changelog:
  - Rebase to edk2-stable202508 [RHEL-111718]
  - Resolves: RHEL-111718
    ([edk2,rhel-10] rebase to edk2-stable202508)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-2
changelog:
  - edk2-add-DBXUpdate-20250610.aa64.bin.patch [RHEL-109548]
  - Resolves: RHEL-109548
    ([aarch64][edk2] missing DBXUpdate-${date}.aa64.bin)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-3
changelog:
  - edk2-Bumped-OpenSSL-to-3.5.1-6.patch [RHEL-115880]
  - Resolves: RHEL-115880
    (CVE-2025-9230 edk2: Out-of-bounds read & write in RFC 3211 KEK Unwrap [rhel-10.2])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250822-4
changelog:
  - edk2-make-dbxupdate.sh-get-version-tag-add-to-commit-mess.patch [RHEL-126085]
  - edk2-update-dbx-to-20251016-v1.6.1.patch [RHEL-126085]
  - Resolves: RHEL-126085
    ([edk2,rhel-10] dbx update to 20251016 / v1.6.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-1
changelog:
  - Rebase to edk2-stable202511 [RHEL-118386]
  - Resolves: RHEL-118386
    ([edk2,rhel-10] rebase to edk2-stable202511)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-2
changelog:
  - edk2-ArmPkg-UefiCpuPkg-Fix-boot-failure-on-FEAT_LPA-only-.patch [RHEL-138335]
  - Resolves: RHEL-138335
    ([AmpereoneX] ArmConfigureMmu: The MaxAddress 0xFFFFFFFFFFFFF is not supported by this MMU configuration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-3
changelog:
  - edk2-OvmfPkg-AmdSev-add-memory-debug-log-support.patch [RHEL-139470]
  - edk2-OvmfPkg-MemDebugLogPeiLib-drop-duplicate-MemDebugLog.patch [RHEL-139470]
  - edk2-OvmfPkg-MemDebugLogPeiCoreLib-enable-for-PEIMs.patch [RHEL-139470]
  - edk2-ArmVirtPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
  - edk2-OvmfPkg-use-MemDebugLogPeiCoreLib-for-PEIMs.patch [RHEL-139470]
  - Resolves: RHEL-139470
    (Enable memory debug logging support in firmware image configs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20251114-4
changelog:
  - edk2-OvmfPkg-X86QemuLoadImageLib-flip-default-for-EnableL.patch [RHEL-134956]
  - edk2-update-openssl-rhel-submodule.patch [RHEL-147785]
  - edk2-update-openssl-rhel-tarball.patch [RHEL-147785]
  - Resolves: RHEL-134956
    (CVE-2025-2296 edk2: EDK2: Improper Input Validation allows arbitrary command execution [rhel-10.2])
  - Resolves: RHEL-147785
    ([edk2] pick up openssl updates)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-2
changelog:
  - edk2-.distro-drop-setup-macro-in-specfile-comment.patch [RHEL-85759]
  - edk2-.distro-switch-to-rhel-10-build-config.patch [RHEL-85759]
  - edk2-.distro-add-riscv64-sub-rpm.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20250221-3
changelog:
  - edk2-.distro-make-sure-virt-firmware-is-new-enough.patch [RHEL-85759]
  - Resolves: RHEL-85759
    (RFE: Add riscv64 build and sub-package)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Jan Grulich <jgrulich@redhat.com> - 1.16.0-1
changelog:
  - Update to 1.16.0
    Resolves: RHEL-72779
  - Add support for preinstalling Flatpaks
    Resolves: RHEL-26066


author: Yaakov Selkowitz <yselkowi@redhat.com> - 40-1
changelog:
  - Version bump for F40
  - Define JAVA_HOME, JAVACONFDIRS and %__maven_path
  - Change xmvn configuration location


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Parag Nemade <pnemade AT redhat DOT com> - 20230101-14
changelog:
  - Resolves: RHEL-138159
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138144
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138126
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Antonio Torres <antorres@redhat.com> - 3.2.8-2
changelog:
  - Disable JIT if PCRE can't allocate executable memory
  - Fix warnings from service file
    Resolves: RHEL-116594


author: Marek Kasik <mkasik@redhat.com> - 2:3.10.3-3
changelog:
  - Initialize function pointers after resource allocation
  - Fixes CVE-2025-4478
  - Resolves: RHEL-91583


author: Ondrej Holy <oholy@redhat.com> - 2:3.10.3-8
changelog:
  - Backport several CVE fixes
    Resolves: RHEL-142414, RHEL-142398, RHEL-142382, RHEL-142366, RHEL-142350
    Resolves: RHEL-142334, RHEL-142318


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Neal Gompa <ngompa@centosproject.org> - 2.7.2-1
changelog:
  - Update to 2.7.2
    + Backport fixes from upstream to use BeaconDB
    + Use BeaconDB for the default location services source
    Resolves: RHEL-79063


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-15
changelog:
  - RHEL-67044 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
  - RHEL-67050 CVE-2024-46952 ghostscript: Buffer Overflow in Ghostscript PDF XRef Stream Handling
  - RHEL-67050 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
  - RHEL-67050 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
  - RHEL-67050 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution


author: Arjun Shankar <arjun@redhat.com> - 2.39-111
changelog:
  - Sync with upstream branch release/2.39/master (RHEL-126766)	
  - Upstream commit: ce65d944e38a20cb70af2a48a4b8aa5d8fabe1cc	
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814)	
  - resolv: Fix NSS DNS backend for getnetbyaddr (CVE-2026-0915)	
  - memalign: reinstate alignment overflow check (CVE-2026-0861)	
  - support: Exit on consistency check failure in resolv_response_add_name	
  - support: Fix FILE * leak in check_for_unshare_hints in test-container	
  - sprof: fix -Wformat warnings on 32-bit hosts	
  - sprof: check pread size and offset for overflow	
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]	
  - nptl: Optimize trylock for high cache contention workloads (BZ #33704)	
  - ppc64le: Power 10 rawmemchr clobbers v20 (bug #33091)	
  - ppc64le: Restore optimized strncmp for power10	
  - ppc64le: Restore optimized strcmp for power10	
  - AArch64: Optimise SVE scalar callbacks	
  - aarch64: fix includes in SME tests	
  - aarch64: fix cfi directives around __libc_arm_za_disable	
  - aarch64: tests for SME	
  - aarch64: clear ZA state of SME before clone and clone3 syscalls	
  - aarch64: define macro for calling __libc_arm_za_disable	
  - aarch64: update tests for SME	
  - aarch64: Disable ZA state of SME in setjmp and sigsetjmp	
  - linux: Also check pkey_get for ENOSYS on tst-pkey (BZ 31996)	
  - aarch64: Do not link conform tests with -Wl,-z,force-bti (bug 33601)	
  - x86: fix wmemset ifunc stray '!' (bug 33542)	
  - x86: Detect Intel Nova Lake Processor	
  - x86: Detect Intel Wildcat Lake Processor


author: Takao Fujiwara <tfujiwar@redhat.com> - 2018.1-17
changelog:
  - Resolve RHELPLAN-170235 Fix OpenScanHub report
  - Fix deprecated g_spawn_check_exit_status with -Wdeprecated-declarations
  - Fix uninitialized n_failed with -Wanalyzer-use-of-uninitialized-value
  - Fix to check return value of g_setenv() with CWE-252


author: Matthias Clasen <mclasen@redhat.com> - 3.36.0-14
changelog:
  - Use autosetup
  - Rename 14.patch to gnome-menus-01.patch
  - Rearrange after design review
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.36.0-16
changelog:
  - Fix Calculator to be presented
  - Papers should be in Utilities and not in Graphics and Office
  - Resolves: RHEL-65839


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Matthias Clasen <mclasen@redhat.com> - 3.24.43-4
changelog:
  - Stop relying on xpms in the testsuite
    Resolves: RHEL-69453
  - Avoid criticals on headless systems
    Resolves: RHEL-40884
  - Hide emoji chooser unless explicitly requested
    Resolves: RHEL-65214


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Coiby Xu <coxu@redhat.com> - 1.6.2-4
changelog:
  - ima-setup: Use RSAHEADER to tell if a package has been signed
  - ima-setup: skip installing rpm-plugin-ima if it has been installed (RHEL-99356)
  - ima-setup: rebuild all initramfs images to include the integrity dracut module (RHEL-92638)


author: Phil Sutter <psutter@redhat.com> - 7.22-4
changelog:
  - Add legacy actions for service save support
  - ipset-services to depend on iptables-nft-services
  - Require kernel-modules-extra


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.2.0-10
changelog:
  - Switch to OpenJDK 21 as default JDK/JRE
  - Drop generated Requires on JRE
  - Drop subpackages related to Java other than 21
  - Resolves: RHEL-49822, RHEL-51276, RHEL-51276


author: Martin Osvald <mosvald@redhat.com> - 2.6.3-1
changelog:
  - New version 2.6.3
  - Fix for: CVE-2025-32801, CVE-2025-32802, CVE-2025-32803
  - kea.conf: Remove /tmp/ from socket-name for existing configurations
  - kea.conf: Set pseudo-random password for default config to secure fresh
    install and allow CA startup without user intervention
  - kea.conf: Restrict directory permissions
  - Sync service files with upstream
  - Fix leases ownership when switching from root to kea user


author: Martin Osvald <mosvald@redhat.com> - 3.0.0-1
changelog:
  - New version 3.0.0
  - Remove broken keactrl in favor of systemd unit files
  - kea.spec: General cleanup and removal of lines that have no effect
  - kea-msg-compiler was moved from kea to kea-devel


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-199.el10]
changelog:
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (Maurizio Lombardi) [RHEL-106984]
  - s390/drivers: Remove unnecessary include <linux/export.h> (Mete Durlu) [RHEL-99994]
  - scsi: zfcp: Simplify workqueue allocation (Mete Durlu) [RHEL-99994]
  - s390/zfcp: Remove outdated email address (Mete Durlu) [RHEL-99994]
  - redhat/configs: rename CONFIG_QCOM_QFPROM to CONFIG_NVMEM_QCOM_QFPROM (Eric Chanudet) [RHEL-144943]
  - nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144337] {CVE-2026-22998}
  - redhat: add usbio kmod placement rule (Jan Stancek) [RHEL-139637]
  - net: ipv4: convert ip_rcv_options to drop reasons (Antoine Tenart) [RHEL-139232]
  - net: ipv4: simplify drop reason handling in ip_rcv_finish_core (Antoine Tenart) [RHEL-139232]
  - net: ipv4: make udp_v4_early_demux explicitly return drop reason (Antoine Tenart) [RHEL-139232]
  - tcp: prefer sk_skb_reason_drop() (Antoine Tenart) [RHEL-139232]
  - net/sched: Add precise drop reason for pfifo_fast queue overflows (Antoine Tenart) [RHEL-139232]
  - net: track pfmemalloc drops via SKB_DROP_REASON_PFMEMALLOC (Antoine Tenart) [RHEL-139232]
  - net: arp: use kfree_skb_reason() in arp_rcv() (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in CAN protocols receive path (Antoine Tenart) [RHEL-139232]
  - can: add drop reasons in the receive path of AF_CAN (Antoine Tenart) [RHEL-139232]
  - net: neigh: use kfree_skb_reason() in neigh_resolve_output() and neigh_connected_output() (Antoine Tenart) [RHEL-139232]
  - net: flush_backlog() small changes (Antoine Tenart) [RHEL-139232]
  - drm/amdkfd: Fix improper NULL termination of queue restore SMI event string (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix DP no audio issue (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: force send pcie parmater on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/pm: fix wrong pcie parameter on navi1x (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: shrink struct members (Anusha Srivatsa) [RHEL-142315]
  - drm/radeon: Remove __counted_by from ClockInfoArray.clockInfo[] (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Fix enable/disable order (Anusha Srivatsa) [RHEL-142315]
  - drm/atomic-helper: Export and namespace some functions (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Fix query for VPE block_type and ip_count (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Apply e4479aecf658 to dml (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/atomic-helper: Re-order bridge chain pre-enable and post-disable" (Anusha Srivatsa) [RHEL-142315]
  - nouveau: don't attempt fwsec on sb on newer platforms. (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Disallow exporting of PM/FW protected objects (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/dispnv50: Don't call drm_atomic_get_crtc_state() in prepare_fb (Anusha Srivatsa) [RHEL-142315]
  - drm/pagemap, drm/xe: Ensure that the devmem allocation is idle before use (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/svm: Fix a debug printout (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/gem: Zero-initialize the eb.vma array in i915_gem_do_execbuffer (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Drop preempt-fences when destroying imported dma-bufs. (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Use usleep_range for accurate long-running workload timeslicing (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Adjust long-running workload timeslices to reasonable values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/eustall: Disallow 0 EU stall property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Disallow 0 OA property values (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/bo: Don't include the CCS metadata in the dma-buf sg-table (Anusha Srivatsa) [RHEL-142315]
  - drm: Fix object leak in DRM_IOCTL_GEM_CHANGE_HANDLE (Anusha Srivatsa) [RHEL-142315]
  - drm/mgag200: Fix big-endian support (Anusha Srivatsa) [RHEL-142315]
  - drm/ttm: Avoid NULL pointer deref for evicted BOs (Anusha Srivatsa) [RHEL-142315]
  - drm/i915: Fix format string truncation warning (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Trap handler support for expert scheduling mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: bump minimum vgpr size for gfx1151 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Export the cwsr_size and ctl_stack_size to userspace (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau/gsp: Allocate fwsec-sb at boot (Anusha Srivatsa) [RHEL-142315]
  - drm/bridge: ti-sn65dsi83: ignore PLL_UNLOCK errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amd: Fix unbind/rebind for VCN 4.0.5 (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Fix potential UAF in xe_oa_add_config_ioctl() (Anusha Srivatsa) [RHEL-142315]
  - drm/gma500: Remove unused helper psb_fbdev_fb_setcolreg() (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Separate clear and dirty free block trees (Anusha Srivatsa) [RHEL-142315]
  - drm/buddy: Optimize free block management with RB tree (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc11: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/sdma6: Update SDMA 6.0.3 FW version to include UMQ protected-fence fix (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add missing lock to amdgpu_ttm_access_memory_sdma (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: Forward VMID reservation errors (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/gmc12: add amdgpu_vm_handle_fault() handling (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd: Skip power ungate during suspend for VPE" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/guc: READ/WRITE_ONCE g2h_fence->done (Anusha Srivatsa) [RHEL-142315]
  - drm/gem-shmem: Fix the MODULE_LICENSE() string (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: don't attach the tlb fence for SI (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: add quirk to ignore DisplayID checksum errors (Anusha Srivatsa) [RHEL-142315]
  - drm/edid: add DRM_EDID_IDENT_INIT() to initialize struct drm_edid_ident (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: depend on CONFIG_64BIT (Anusha Srivatsa) [RHEL-142315]
  - drm/displayid: pass iter to drm_find_displayid_extension() (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN351 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix scratch registers offsets for DCN35 (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() (Anusha Srivatsa) [RHEL-142315]
  - Revert "drm/amd/display: Fix pbn to kbps Conversion" (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/oa: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Limit num_syncs to prevent oversized allocations (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: fix a job->pasid access race in gpu recovery (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: sony-td4353-jdi: Enable prepare_prev_first (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Restore engine registers before restarting schedulers after GT reset (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Increase TDF timeout (Anusha Srivatsa) [RHEL-142315]
  - drm/me/gsc: mei interrupt top half should be in irq disabled context (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: fix drm_gpusvm_init() arguments (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() (Anusha Srivatsa) [RHEL-142315]
  - drm/xe: Fix freq kobject leak on sysfs_create_files failure (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in set_up_atomic_state() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: Handle EDEADLK in drm_test_check_valid_clones() (Anusha Srivatsa) [RHEL-142315]
  - drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: Hold runtime PM ref during fbdev BO creation (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: deduplicate struct drm_mode_fb_cmd2 init (Anusha Srivatsa) [RHEL-142315]
  - drm/{i915, xe}/fbdev: pass struct drm_device to intel_fbdev_fb_alloc() (Anusha Srivatsa) [RHEL-142315]
  - drm/i915/fbdev: make intel_framebuffer_create() error return handling explicit (Anusha Srivatsa) [RHEL-142315]
  - drm/xe/fbdev: use the same 64-byte stride alignment as i915 (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: Use huge page size to check split svm range alignment (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: fix circular dep oops from vendored i2c encoder (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: refactor deprecated strcpy (Anusha Srivatsa) [RHEL-142315]
  - drm/plane: Fix IS_ERR() vs NULL check in drm_plane_create_hotspot_properties() (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: novatek-nt35560: avoid on-stack device structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Prevent potential UAF in group creation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdkfd: assign AID to uuid in topology for SPX mode (Anusha Srivatsa) [RHEL-142315]
  - drm/amd/display: Fix logical vs bitwise bug in get_embedded_panel_info_v2_1() (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Avoid adding of kernel BOs to extobj list (Anusha Srivatsa) [RHEL-142315]
  - drm/nouveau: restrict the flush page to a 32-bit address (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Move OLDI mode validation to OLDI bridge mode_valid hook (Anusha Srivatsa) [RHEL-142315]
  - drm/tidss: Remove max_pclk_khz and min_pclk_khz from tidss display features (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix potential memleak of vma structure (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF on kernel BO VA nodes (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix race with suspend during unplug (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix UAF race between device unplug and FW event processing (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Fix group_free_queue() for partially initialized queues (Anusha Srivatsa) [RHEL-142315]
  - drm/panthor: Handle errors returned by drm_sched_entity_init() (Anusha Srivatsa) [RHEL-142315]
  - drm/imagination: Fix reference to devm_platform_get_and_ioremap_resource() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when unbinding BOs (Anusha Srivatsa) [RHEL-142315]
  - drm: nova: select NOVA_CORE (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Remove skip of dma unmap for imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/rcar-du: dsi: Fix missing parameter in RXSETR_...EN macros (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu/userq: fix SDMA and compute validation (Anusha Srivatsa) [RHEL-142315]
  - drm/amdgpu: add userq object va track helpers (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix race condition when mapping dmabuf (Anusha Srivatsa) [RHEL-142315]
  - drm: atmel-hlcdc: fix atmel_xlcdc_plane_setup_scaler() (Anusha Srivatsa) [RHEL-142315]
  - drm/vgem-fence: Fix potential deadlock on release (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix DCT active percent format (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Rework bind/unbind of imported buffers (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Don't clear all mode flags (Anusha Srivatsa) [RHEL-142315]
  - drm/panel: visionox-rm69299: Fix clock frequency for SHIFT6mq (Anusha Srivatsa) [RHEL-142315]
  - accel/ivpu: Ensure rpm_runtime_put in case of engine reset/resume fail (Anusha Srivatsa) [RHEL-142315]
  - lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-138056]
  - lib/freader: support reading more than 2 folios (Waiman Long) [RHEL-138056]
  - lib: move freader into buildid.h (Waiman Long) [RHEL-138056]
  - sfc: fix potential memory leak in efx_mae_process_mport() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: replace min/max nesting with clamp() (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - PCI/ERR: Remove remnants of .link_reset() callback (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: unfix not-a-typo in comment (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - net: Fix typos [sfc] (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: falcon: refactor and document ef4_ethtool_get_rxfh_fields (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: siena: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - sfc: eliminate xdp_rxq_info_valid using XDP base API (Michal Schmidt) [RHEL-96527 RHEL-99226]
  - squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138021] {CVE-2025-38415}
  - Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138021] {CVE-2025-38415}
  - erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137980] {CVE-2025-38172}
  - perf/x86/intel/cstate: Add Clearwater Forest support (Michael Petlan) [RHEL-45066]
  - cpuidle: governors: menu: Select polling state in some more cases (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Rearrange main loop in menu_select() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid selecting states with too much latency (Mark Langsdorf) [RHEL-120323]
  - cpuidle: governors: menu: Avoid using invalid recent intervals data (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y (Mark Langsdorf) [RHEL-120323]
  - cpuidle: dt: fix opencoded for_each_cpu() in idle_state_valid() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Drop redundant sync_state support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Opt-out from genpd's common ->sync_state() support (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Fix uninitialized variable in dt_idle_state_present() (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Avoid initializing faux device if no DT idle states are present (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Correct the domain-idlestate statistics in debugfs (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Move the per CPU variable domain_state to a struct (Mark Langsdorf) [RHEL-120323]
  - pmdomain: core: Add genpd helper to correct the usage/rejected counters (Mark Langsdorf) [RHEL-120323]
  - cpuidle: psci: Transition to the faux device interface (Mark Langsdorf) [RHEL-120323]
  - cpuidle: menu: Optimize bucket assignment when next_timer_ns equals KTIME_MAX (Mark Langsdorf) [RHEL-120323]
  - cpuidle: teo: Fix typos in two comments (Mark Langsdorf) [RHEL-120323]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-200.el10]
changelog:
  - nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference (Ming Lei) [RHEL-143329]
  - iommufd/selftest: Add missing kconfig for DMA_SHARED_BUFFER (Cédric Le Goater) [RHEL-111742]
  - iommufd: Fix building without dmabuf (Cédric Le Goater) [RHEL-111742]
  - iommu/arm-smmu-v3-iommufd: Allow attaching nested domain for GBPA cases (Cédric Le Goater) [RHEL-111742]
  - iommufd/selftest: Add some tests for the dmabuf flow (Cédric Le Goater) [RHEL-111742]
  - iommufd: Accept a DMABUF through IOMMU_IOAS_MAP_FILE (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have iopt_map_file_pages convert the fd to a file (Cédric Le Goater) [RHEL-111742]
  - iommufd: Have pfn_reader process DMABUF iopt_pages (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow MMIO pages in a batch (Cédric Le Goater) [RHEL-111742]
  - iommufd: Allow a DMABUF to be revoked (Cédric Le Goater) [RHEL-111742]
  - iommufd: Do not map/unmap revoked DMABUFs (Cédric Le Goater) [RHEL-111742]
  - iommufd: Add DMABUF to iopt_pages (Cédric Le Goater) [RHEL-111742]
  - vfio/pci: Add vfio_pci_dma_buf_iommufd_map() (Cédric Le Goater) [RHEL-111742]
  - module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper (Cédric Le Goater) [RHEL-111742]
  - dma-direct: Fix missing sg_dma_len assignment in P2PDMA bus mappings (Cédric Le Goater) [RHEL-132423]
  - vfio/pds: Fix memory leak in pds_vfio_dirty_enable() (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the VGA region (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Disable qword access to the PCI ROM bar (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Add vfio_pci_device_init_perf_test (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate INVALID_IOVA (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split libvfio.h into separate header files (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move vfio_selftests_*() helpers into libvfio.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename vfio_util.h to libvfio.h (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Stop passing device for IOMMU operations (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOVA allocator into iova_allocator.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move IOMMU library code into iommu.c (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_dma_region to dma_region (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Upgrade driver logging to dev_err() (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Prefix logs with device BDF where relevant (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Eliminate overly chatty logging (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Support multiple devices in the same container/iommufd (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Introduce struct iommu (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Rename struct vfio_iommu_mode to iommu_mode (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Allow passing multiple BDFs on the command line (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Split run.sh into separate scripts (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Move run.sh into scripts directory (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: wait for the GPU mem to be ready (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Inform devmem unmapped after reset (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: split the code to wait for GPU ready (Cédric Le Goater) [RHEL-132423]
  - vfio: use vfio_pci_core_setup_barmap to map bar in mmap (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace-gpu: Add support for huge pfnmap (Cédric Le Goater) [RHEL-132423]
  - vfio: refactor vfio_pci_mmap_huge_fault function (Cédric Le Goater) [RHEL-132423]
  - dma-buf: fix integer overflow in fill_sg_entry() for buffers >= 8GiB (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Use RCU for error/request triggers to avoid circular locking (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Support get_dmabuf_phys (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Add dma-buf export support for MMIO regions (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Enable peer-to-peer DMA transactions by default (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Share the core device pointer while invoking feature functions (Cédric Le Goater) [RHEL-132423]
  - vfio: Export vfio device get and put registration helpers (Cédric Le Goater) [RHEL-132423]
  - dma-buf: provide phys_vec to scatter-gather mapping routine (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Document DMABUF model (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Provide an access to pci_p2pdma_map_type() function (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Refactor to separate core P2P functionality from memory allocation (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Simplify bus address mapping API (Cédric Le Goater) [RHEL-132423]
  - PCI/P2PDMA: Separate the mmap() support from the core logic (Cédric Le Goater) [RHEL-132423]
  - vfio: Remove the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Move the remaining drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Convert all PCI drivers to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Convert to get_region_info_caps (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Convert mbochs to use vfio_info_add_capability() (Cédric Le Goater) [RHEL-132423]
  - vfio: Add get_region_info_caps op (Cédric Le Goater) [RHEL-132423]
  - vfio: Require drivers to implement get_region_info (Cédric Le Goater) [RHEL-132423]
  - vfio/gvt: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/ccw: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/cdx: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/fsl: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/platform: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mbochs: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mdpy: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/pci: Fill in the missing get_region_info ops (Cédric Le Goater) [RHEL-132423]
  - vfio/nvgrace: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/virtio: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio/hisi: Convert to the get_region_info op (Cédric Le Goater) [RHEL-132423]
  - vfio: Provide a get_region_info op (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: Add .match_token_uuid callback in hisi_acc_vfio_pci_migrn_ops (Cédric Le Goater) [RHEL-132423]
  - vfio: Fix ksize arg while copying user struct in vfio_df_ioctl_bind_iommufd() (Cédric Le Goater) [RHEL-132423]
  - hisi_acc_vfio_pci: adapt to new migration configuration (Cédric Le Goater) [RHEL-132423]
  - crypto: hisilicon - qm updates BAR configuration (Cédric Le Goater) [RHEL-132423]
  - vfio/mtty: Fix spelling typo in samples/vfio-mdev (Cédric Le Goater) [RHEL-132423]
  - vfio: selftests: Store libvfio build outputs in $(OUTPUT)/libvfio (Cédric Le Goater) [RHEL-132423]
  - iommu/dma: add missing support for DMA_ATTR_MMIO for dma_iova_unlink() (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix kmsan_handle_dma() to avoid false positives (Cédric Le Goater) [RHEL-116969]
  - kmsan: fix missed kmsan_handle_dma() signature conversion (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: properly take MMIO path (Cédric Le Goater) [RHEL-116969]
  - mm/hmm: migrate to physical address-based DMA mapping API (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: export new dma_*map_phys() interface (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: implement DMA_ATTR_MMIO for dma_(un)map_page_attrs() (Cédric Le Goater) [RHEL-116969]
  - kmsan: convert kmsan_handle_dma to use physical addresses (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: convert dma_direct_*map_page to be phys_addr_t based (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for iommu_dma_(un)map_phys() (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: rename iommu_dma_*map_page to iommu_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: rename trace_dma_*map_page to trace_dma_*map_phys (Cédric Le Goater) [RHEL-116969]
  - dma-debug: refactor to use physical addresses for page mapping (Cédric Le Goater) [RHEL-116969]
  - iommu/dma: implement DMA_ATTR_MMIO for dma_iova_link(). (Cédric Le Goater) [RHEL-116969]
  - dma-mapping: introduce new DMA attribute to indicate MMIO memory (Cédric Le Goater) [RHEL-116969]
  - objtool: Support Clang AUTOFDO .cold functions (Joe Lawrence) [RHEL-114919]
  - objtool: Fix skip_alt_group() for non-alternative STAC/CLAC (Joe Lawrence) [RHEL-114919]
  - objtool/LoongArch: Get table size correctly if LTO is enabled (Joe Lawrence) [RHEL-114919]
  - objtool/klp: Only enable --checksum when needed (partial) (Joe Lawrence) [RHEL-114916]
  - objtool: Set minimum xxhash version to 0.8 (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add the debian-based package name of xxhash to the hint (Joe Lawrence) [RHEL-114916]
  - Revert "objtool: Warn on functions with ambiguous -ffunction-sections section names" (Joe Lawrence) [RHEL-114916]
  - kbuild: Check for functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - objtool: Warn on functions with ambiguous -ffunction-sections section names (Joe Lawrence) [RHEL-114916]
  - tty: synclink_gt: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - tty: amiserial: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - media: atomisp: gc2235: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - serial: icom: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - drivers/xen/xenbus: Fix namespace collision and split() section placement with AutoFDO (Joe Lawrence) [RHEL-114916]
  - media: atomisp: Fix namespace collision and startup() section placement with -ffunction-sections (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Fix TEXT_MAIN to include .text.start and friends (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Exclude .text.startup and .text.exit from TEXT_MAIN (Joe Lawrence) [RHEL-114916]
  - tools/objtool: Copy the __cleanup unused variable fix for older clang (Joe Lawrence) [RHEL-114916]
  - livepatch: Introduce source code helpers for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --show-first-changed option to show function divergence (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce klp-build script for generating livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Add stub init code for livepatch modules (Joe Lawrence) [RHEL-114916]
  - livepatch/klp-build: Introduce fix-patch-lines script to avoid __LINE__ diff noise (Joe Lawrence) [RHEL-114916]
  - kbuild,objtool: Defer objtool validation step for CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - livepatch: Add CONFIG_KLP_BUILD (Joe Lawrence) [RHEL-114916]
  - objtool: Add base objtool support for livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor prefix symbol creation code (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add post-link subcommand to finalize livepatch modules (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug option to show cloning decisions (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Introduce klp diff subcommand for diffing object files (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --debug-checksum=<funcs> to show per-instruction checksums (Joe Lawrence) [RHEL-114916]
  - objtool/klp: Add --checksum option to generate per-function checksums (Joe Lawrence) [RHEL-114916]
  - objtool: Unify STACK_FRAME_NON_STANDARD entry sizes (Joe Lawrence) [RHEL-114916]
  - x86/asm: Annotate special section entries (Joe Lawrence) [RHEL-114916]
  - x86/bug: Add ARCH_WARN_ASM macro for BUG/WARN asm code sharing with Rust (Joe Lawrence) [RHEL-114916]
  - objtool: Add ANNOTATE_DATA_SPECIAL (Joe Lawrence) [RHEL-114916]
  - objtool: Move ANNOTATE* macros to annotate.h (Joe Lawrence) [RHEL-114916]
  - objtool: Add annotype() helper (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_file() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_reloc() and elf_init_reloc() (Joe Lawrence) [RHEL-114916]
  - objtool: Add elf_create_data() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_section() (Joe Lawrence) [RHEL-114916]
  - objtool: Generalize elf_create_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify special symbol handling in elf_update_symbol() (Joe Lawrence) [RHEL-114916]
  - objtool: Refactor add_jump_destinations() (Joe Lawrence) [RHEL-114916]
  - objtool: Reindent check_options[] (Joe Lawrence) [RHEL-114916]
  - objtool: Resurrect --backup option (Joe Lawrence) [RHEL-114916]
  - objtool: Rename --Werror to --werror (Joe Lawrence) [RHEL-114916]
  - objtool: Avoid emptying lists for duplicate sections (Joe Lawrence) [RHEL-114916]
  - objtool: Simplify reloc offset calculation in unwind_read_hints() (Joe Lawrence) [RHEL-114916]
  - objtool: Mark prefix functions (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol hole detection for .cold functions (Joe Lawrence) [RHEL-114916]
  - objtool: Mark .cold subfunctions (Joe Lawrence) [RHEL-114916]
  - objtool: Add section/symbol type helpers (Joe Lawrence) [RHEL-114916]
  - objtool: Convert elf iterator macros to use 'struct elf' (Joe Lawrence) [RHEL-114916]
  - objtool: Fix failure when being compiled on x32 system (Joe Lawrence) [RHEL-114916]
  - objtool: Add action to check for absence of absolute relocations (Joe Lawrence) [RHEL-114916]
  - objtool: Remove .parainstructions reference (Joe Lawrence) [RHEL-114916]
  - objtool: Clean up compiler flag usage (Joe Lawrence) [RHEL-114916]
  - objtool: Const string cleanup (Joe Lawrence) [RHEL-114916]
  - objtool: Check for missing annotation entries in read_annotate() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix "unexpected end of section" warning for alternatives (Joe Lawrence) [RHEL-114916]
  - objtool: Fix __pa_symbol() relocation handling (Joe Lawrence) [RHEL-114916]
  - objtool: Fix x86 addend calculation (Joe Lawrence) [RHEL-114916]
  - objtool: Fix weak symbol detection (Joe Lawrence) [RHEL-114916]
  - objtool: Fix interval tree insertion for zero-length symbols (Joe Lawrence) [RHEL-114916]
  - objtool: Add empty symbols to the symbol tree again (Joe Lawrence) [RHEL-114916]
  - objtool: Remove error handling boilerplate (Joe Lawrence) [RHEL-114916]
  - objtool: Fix standalone --hacks=jump_label (Joe Lawrence) [RHEL-114916]
  - objtool: Propagate elf_truncate_section() error in elf_write() (Joe Lawrence) [RHEL-114916]
  - objtool: Fix broken error handling in read_symbols() (Joe Lawrence) [RHEL-114916]
  - objtool: Make find_symbol_containing() less arbitrary (Joe Lawrence) [RHEL-114916]
  - interval_tree: Sync interval_tree_generic.h with tools (Joe Lawrence) [RHEL-114916]
  - x86/alternative: Refactor INT3 call emulation selftest (Joe Lawrence) [RHEL-114916]
  - modpost: Ignore unresolved section bounds symbols (Joe Lawrence) [RHEL-114916]
  - kbuild: Remove 'kmod_' prefix from __KBUILD_MODNAME (Joe Lawrence) [RHEL-114916]
  - elfnote: Change ELFNOTE() to use __UNIQUE_ID() (Joe Lawrence) [RHEL-114916]
  - compiler.h: Make addressable symbols less of an eyesore (Joe Lawrence) [RHEL-114916]
  - compiler: Tweak __UNIQUE_ID() naming (Joe Lawrence) [RHEL-114916]
  - x86/kprobes: Remove STACK_FRAME_NON_STANDARD annotation (Joe Lawrence) [RHEL-114916]
  - x86/module: Improve relocation error messages (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Unify TEXT_MAIN, DATA_MAIN, and related macros (Joe Lawrence) [RHEL-114916]
  - s390/vmlinux.lds.S: Prevent thunk functions from getting placed with normal text (Joe Lawrence) [RHEL-114916]
  - vmlinux.lds: Include .data.rel[.local] into .data section (Joe Lawrence) [RHEL-114916]
  - HID: intel-ish-hid: Fix -Wcast-function-type-strict in devm_ishtp_alloc_workqueue() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Separate hibernate callbacks in dev_pm_ops (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use IPC RESET instead of void message in ish_wakeup() (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: ipc: Always schedule FW reset work on RESET_NOTIFY/ACK (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Reset clients state on resume from D3 (Tony Camuso) [RHEL-135993]
  - HID: intel-ishtp-hid: Clear suspended flag only after connected on resume (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Add ishtp_get_connection_state() interface (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-hid: Use dedicated unbound workqueues to prevent resume blocking (Tony Camuso) [RHEL-135993]
  - HID: intel-ish-ipc: Remove redundant ready check after timeout function (Tony Camuso) [RHEL-135993]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-201.el10]
changelog:
  - vfio: Prevent from pinned DMABUF importers to attach to VFIO DMABUF (Cédric Le Goater) [RHEL-144911]
  - r8152: Advertise software timestamp information. (Jose Ignacio Tornos Martinez) [RHEL-124653]
  - mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143197] {CVE-2025-68800}
  - RDMA/efa: Remove possible negative shift (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Extend admin timeout error print (Kamal Heib) [RHEL-140846]
  - RDMA/efa: Add Network HW statistics counters (Kamal Heib) [RHEL-140846]
  - io_uring/io-wq: fix incorrect io_wq_for_each_worker() termination logic (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: cast rw->flags assignment to rwf_t (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-140845]
  - io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-140845]
  - io_uring: fix filename leak in __io_openat_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: fix nr_segs calculation in io_import_kbuf (Jeff Moyer) [RHEL-140845]
  - io_uring: fix min_wait wakeups for SQPOLL (Jeff Moyer) [RHEL-140845]
  - io_uring/kbuf: use READ_ONCE() for userspace-mapped memory (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: fix lost entries after cloned range (Jeff Moyer) [RHEL-140845]
  - io_uring/poll: correctly handle io_poll_add() return value on update (Jeff Moyer) [RHEL-140845]
  - io_uring/rsrc: don't use blk_rq_nr_phys_segments() as number of bvecs (Jeff Moyer) [RHEL-140845]
  - io_uring/rw: ensure allocated iovec gets cleared for early failure (Jeff Moyer) [RHEL-140845]
  - io_uring: fix regbuf vector size truncation (Jeff Moyer) [RHEL-140845]
  - io_uring: use WRITE_ONCE for user shared memory (Jeff Moyer) [RHEL-140845]
  - io_uring: fix types for region size calulation (Jeff Moyer) [RHEL-140845]
  - io_uring: correct __must_hold annotation in io_install_fixed_file (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: be smarter on when to update the stime usage (Jeff Moyer) [RHEL-140845]
  - io_uring/sqpoll: switch away from getrusage() for CPU accounting (Jeff Moyer) [RHEL-140845]
  - io_uring: fix use-after-free of sq->thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: get rid of dumping credentials (Jeff Moyer) [RHEL-140845]
  - io_uring/fdinfo: only compile if CONFIG_PROC_FS is set (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect unlikely() usage in io_waitid_prep() (Jeff Moyer) [RHEL-140845]
  - io_uring: protect mem region deregistration (Jeff Moyer) [RHEL-140845]
  - Revert "io_uring/rw: drop -EOPNOTSUPP check in __io_complete_rw_common()" (Jeff Moyer) [RHEL-140845]
  - io_uring: fix incorrect io_kiocb reference in io_link_skb (Jeff Moyer) [RHEL-140845]
  - io_uring/msg_ring: kill alloc_cache for io_kiocb allocations (Jeff Moyer) [RHEL-140845]
  - io_uring: include dying ring in task_work "should cancel" state (Jeff Moyer) [RHEL-140845]
  - fs: add a FMODE_ flag to indicate IOCB_HAS_METADATA availability (Jeff Moyer) [RHEL-140845]
  - io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-140845]
  - io_uring: export io_[un]account_mem (Jeff Moyer) [RHEL-140845]
  - io_uring: don't use int for ABI (Jeff Moyer) [RHEL-140845]
  - tools headers UAPI: sync linux/stat.h linux/fs.h with tools (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix size read races in truncate, fallocate and copy offload (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Deal with page bases that are > PAGE_SIZE (Olga Kornievskaia) [RHEL-134733]
  - NFS/localio: Stop further I/O upon hitting an error (Olga Kornievskaia) [RHEL-134733]
  - pnfs/blocklayout: Fix memory leak in bl_parse_scsi() (Olga Kornievskaia) [RHEL-134733]
  - pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix a deadlock involving nfs_release_folio() (Olga Kornievskaia) [RHEL-134733]
  - pNFS: Fix a deadlock when returning a delegation during open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Drop the client reference in client_states_open() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix nfsd_file reference leak in nfsd4_add_rdaccess_to_wrdeleg() (Olga Kornievskaia) [RHEL-134733]
  - lockd: fix vfs_test_lock() calls (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Clear TIME_DELEG in the suppattr_exclcreat bitmap (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix memory leak in nfsd_create_serv error paths (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: restore destructor on submit failure (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Mark variable __maybe_unused to avoid W=1 build break (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: bound check rq_pages index in inline path (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: return 0 on success from svc_rdma_copy_inline_range (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: use rc_pageoff for memcpy byte offset (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: duplicate handshake cancellations leak socket (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: fix regression due to out-of-order __put_cred (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove 61 byte hole from needless ____cacheline_aligned (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove alignment size checking in nfs_is_local_dio_possible (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix inheritance of the block sizes when automounting (Olga Kornievskaia) [RHEL-134733]
  - NFS: Automounted filesystems should inherit ro,noexec,nodev,sync flags (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68764}
  - Revert "nfs: ignore SB_RDONLY when mounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: clear SB_RDONLY before getting superblock" (Olga Kornievskaia) [RHEL-134733]
  - Revert "nfs: ignore SB_RDONLY when remounting nfs" (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68349}
  - NFSv4.1: protect destroying and nullifying bc_serv structure (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: new helper function for stopping backchannel server (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: cleanup common code in backchannel request (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: pass transport for callback shutdown (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: ensure the open stateid seqid doesn't go backwards (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in _nfs4_open_and_get_state (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Initialise verifiers for visible dentries in readdir and lookup (Olga Kornievskaia) [RHEL-134733]
  - NFS: Avoid changing nlink when file removes and attribute updates race (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Make FILE_SYNC WRITEs comply with spec (Olga Kornievskaia) [RHEL-134733]
  - NFSD: use correct reservation type in nfsd4_scsi_fence_client (Olga Kornievskaia) [RHEL-134733]
  - NFSD: don't start nfsd if sv_permsocks is empty (Olga Kornievskaia) [RHEL-134733]
  - lockd: don't allow locking on reexported NFSv2/3 (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Extract extent mapping from proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - NFSD/blocklayout: Fix minlength check in proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - svcrdma: Release transport resources synchronously (Olga Kornievskaia) [RHEL-134733]
  - net/handshake: Fix memory leak in tls_handshake_accept() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Fix LTP test failures when timestamps are delegated (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68242}
  - NFSv4: Fix an incorrect parameter when calling nfs4_call_sync() (Olga Kornievskaia) [RHEL-134733]
  - NFS: sysfs: fix leak when nfs_client kobject add fails (Olga Kornievskaia) [RHEL-134733]
  - NFSv2/v3: Fix error handling in nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: do not issue misaligned DIO out-of-order (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: Ensure DIO WRITE's IO on stable storage upon completion (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: backfill missing partial read support for misaligned DIO (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add refcounting for each iocb IO associated with NFS pgio header (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: remove unecessary ENOTBLK handling in DIO WRITE support (Olga Kornievskaia) [RHEL-134733]
  - NFS: Check the TLS certificate fields in nfs_match_client() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68243}
  - pnfs: Set transport security policy to RPC_XPRTSEC_NONE unless using TLS (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v4_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - pnfs: Fix TLS logic in _nfs4_pnfs_v3_ds_connect() (Olga Kornievskaia) [RHEL-134733]
  - Revert "SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ensure SEQUENCE replay sends a valid reply. (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Never cache a COMPOUND when the SEQUENCE operation fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Skip close replay processing if XDR encoding fails (Olga Kornievskaia) [RHEL-134733]
  - NFSD: free copynotify stateid in nfs4_free_ol_stateid() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40273}
  - nfsd: add missing FATTR4_WORD2_CLONE_BLKSIZE from supported attributes (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix refcount leak in nfsd_set_fh_dentry() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40212}
  - nfsd: Avoid strlen conflict in nfsd4_encode_components_esc() (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix crash in nfsd4_read_release() (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40324}
  - NFS4: Fix state renewals missing after boot (Olga Kornievskaia) [RHEL-134733]
  - NFS: check if suid/sgid was cleared after a write as needed (Olga Kornievskaia) [RHEL-134733]
  - NFS4: Apply delay_retrans to async operations (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: fix to allocate mirror->dss before use (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Define a proc_layoutcommit for the FlexFiles layout type (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40087}
  - nfsd: discard nfserr_dropit (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Make RPCSEC_GSS_KRB5 select CRYPTO instead of depending on it (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Add io_cache_{read,write} controls to debugfs (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Do the grace period check in ->proc_layoutget (Olga Kornievskaia) [RHEL-134733]
  - nfsd: delete unnecessary NULL check in __fh_verify() (Olga Kornievskaia) [RHEL-134733]
  - NFS: add basic STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add tracepoints for misaligned DIO READ and WRITE support (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: add proper O_DIRECT support for READ and WRITE (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: refactor iocb and iov_iter_bvec initialization (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: avoid issuing misaligned IO using O_DIRECT (Olga Kornievskaia) [RHEL-134733]
  - nfs/localio: make trace_nfs_local_open_fh more useful (Olga Kornievskaia) [RHEL-134733]
  - NFSD: filecache: add STATX_DIOALIGN and STATX_DIO_READ_ALIGN support (Olga Kornievskaia) [RHEL-134733]
  - fs: add STATX_DIO_READ_ALIGN (Olga Kornievskaia) [RHEL-134733]
  - fs: reformat the statx definition (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: unexport rpc_malloc() and rpc_free() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update layout stats & error paths for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Write path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Commit path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Read path updates for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Update low level helper functions to be DS stripe aware. (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Add data structure support for striped layouts (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Use ds_commit_idx when marking a write commit (Olga Kornievskaia) [RHEL-134733]
  - NFSv4/flexfiles: Remove cred local variable dependency (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Disallow layoutget during grace period (Olga Kornievskaia) [RHEL-134733]
  - nfs4_setup_readdir(): insufficient locking for ->d_parent->d_inode dereferencing (Olga Kornievskaia) [RHEL-134733] {CVE-2025-68185}
  - fs: add RWF_DONTCACHE iocb and FOP_DONTCACHE file_operations flag (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update gssx_accept_sec_context() to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Update svcxdr_init_decode() to call xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the flexfilelayout driver to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the filelayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update the blocklayout to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update listxattr to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update getacl to use xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - NFS: Update readdir to use a scratch folio (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Introduce xdr_set_scratch_folio() (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Remove redundant __GFP_NOWARN (Olga Kornievskaia) [RHEL-134733]
  - nfs: remove NFS_WBACK_BUSY() (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix mount hang after CREATE_SESSION failure (Olga Kornievskaia) [RHEL-134733]
  - NFSv4.1: fix backchannel max_resp_sz verification check (Olga Kornievskaia) [RHEL-134733]
  - NFSv4: fix "prefered"->"preferred" (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: add a Kconfig option to redirect dfprintk() output to trace buffer (Olga Kornievskaia) [RHEL-134733]
  - redhat/configs: Add CONFIG_SUNRPC_DEBUG_TRACE (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: remove dfprintk_cont() and dfprintk_rcu_cont() (Olga Kornievskaia) [RHEL-134733]
  - nfs: cleanup tracepoint declarations (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_writepages() (Olga Kornievskaia) [RHEL-134733]
  - nfs: more in-depth tracing of writepage events (Olga Kornievskaia) [RHEL-134733]
  - nfs: new tracepoints around write handling (Olga Kornievskaia) [RHEL-134733]
  - nfs: add tracepoints to nfs_file_read() and nfs_file_write() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix "occurence"->"occurrence" (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Don't force CRYPTO_LIB_SHA256 to be built-in (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Reduce DRC bucket size (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Delay adding new entries to LRU (Olga Kornievskaia) [RHEL-134733]
  - SUNRPC: Move the svc_rpcb_cleanup() call sites (Olga Kornievskaia) [RHEL-134733]
  - NFS: Remove rpcbind cleanup for NFSv4.0 callback (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Drop redundant conversion to bool (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: eliminate return pointer in svc_tcp_sendmsg() (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix pr_notice in svc_tcp_sendto() to show correct length (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix destination buffer size in nfsd4_ssc_setup_dul() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Eliminate an allocation in nfs4_make_rec_clidname() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: Replace open-coded conversion of bytes to hex (Olga Kornievskaia) [RHEL-134733]
  - lockd: Remove space before newline (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix timestamp updates in CB_GETATTR (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix SETATTR updates for delegated timestamps (Olga Kornievskaia) [RHEL-134733]
  - nfsd: track original timestamps in nfs4_delegation (Olga Kornievskaia) [RHEL-134733]
  - nfsd: use ATTR_CTIME_SET for delegated ctime updates (Olga Kornievskaia) [RHEL-134733]
  - vfs: add ATTR_CTIME_SET flag (Olga Kornievskaia) [RHEL-134733]
  - nfsd: ignore ATTR_DELEG when checking ia_valid before notify_change() (Olga Kornievskaia) [RHEL-134733]
  - nfsd: fix assignment of ia_ctime.tv_nsec on delegated mtime update (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Fix last write offset handling in layoutcommit (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Implement large extent array support in pNFS (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit decoding (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Minor cleanup in layoutcommit processing (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Rework encoding and decoding of nfsd4_deviceid (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: Change ret code of xdr_stream_decode_opaque_fixed (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: delay pc_release callback until after the reply is sent (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Move the fh_getattr() helper (Olga Kornievskaia) [RHEL-134733]
  - NFSD: Relocate the fh_want_write() and fh_drop_write() helpers (Olga Kornievskaia) [RHEL-134733]
  - sunrpc: fix null pointer dereference on zero-length checksum (Olga Kornievskaia) [RHEL-134733] {CVE-2025-40129}
  - nfsctl: symlink has no business bumping link count of parent directory (Olga Kornievskaia) [RHEL-134733]
  - slightly simplify nfs_atomic_open() (Olga Kornievskaia) [RHEL-134733]
  - simplify nfs_atomic_open_v23() (Olga Kornievskaia) [RHEL-134733]
  - check_export(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - rqst_exp_get_by_name(): constify path argument (Olga Kornievskaia) [RHEL-134733]
  - nfs: constify path argument of __vfs_getattr() (Olga Kornievskaia) [RHEL-134733]
  - ipv4: route: Prevent rt_bind_exception() from rebinding stale fnhe (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_twsk_hashdance_schedule() (Guillaume Nault) [RHEL-133462]
  - inet: Avoid ehash lookup race in inet_ehash_insert() (Guillaume Nault) [RHEL-133462]
  - rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() (Guillaume Nault) [RHEL-133462]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-202.el10]
changelog:
  - net: bridge: annotate data-races around fdb->{updated,used} (Mohammad Heib) [RHEL-123945]
  - bridge: fix C-VLAN preservation in 802.1ad vlan_tunnel egress (Mohammad Heib) [RHEL-123945]
  - net: bridge: Describe @tunnel_hash member in net_bridge_vlan_group struct (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix MST static key usage (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix use-after-free due to MST port state bypass (Mohammad Heib) [RHEL-123945]
  - selftests: bridge_mdb: Add a test for MDB flush on snooping disable (Mohammad Heib) [RHEL-123945]
  - net: bridge: Flush multicast groups when snooping is disabled (Mohammad Heib) [RHEL-123945]
  - net: bridge: use common function to compute the features (Mohammad Heib) [RHEL-123945]
  - net: add a common function to compute features for upper devices (Mohammad Heib) [RHEL-123945]
  - net: bridge: correct debug message function name in br_fill_ifinfo (Mohammad Heib) [RHEL-123945]
  - bridge: br_vlan_fill_forward_path_pvid: use br_vlan_group_rcu() (Mohammad Heib) [RHEL-123945]
  - selftests: bridge_fdb_local_vlan_0: Test FDB vs. NET_ADDR_SET behavior (Mohammad Heib) [RHEL-123945]
  - net: bridge: Install FDB for bridge MAC on VLAN 0 (Mohammad Heib) [RHEL-123945]
  - selftests: forwarding: Add test for BR_BOOLOPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - selftests: net: lib.sh: Don't defer failed commands (Mohammad Heib) [RHEL-123945]
  - selftests: defer: Introduce DEFER_PAUSE_ON_FAIL (Mohammad Heib) [RHEL-123945]
  - selftests: defer: Allow spaces in arguments of deferred commands (Mohammad Heib) [RHEL-123945]
  - net: bridge: Introduce UAPI for BR_BOOLOPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: Skip local FDBs on VLAN creation (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: On bridge changeaddr, skip per-VLAN FDBs (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: On port changeaddr, skip per-VLAN FDBs (Mohammad Heib) [RHEL-123945]
  - net: bridge: BROPT_FDB_LOCAL_VLAN_0: Look up FDB on VLAN 0 on miss (Mohammad Heib) [RHEL-123945]
  - net: bridge: Introduce BROPT_FDB_LOCAL_VLAN_0 (Mohammad Heib) [RHEL-123945]
  - net: bridge: Bounce invalid boolopts (Mohammad Heib) [RHEL-123945]
  - net: bridge: remove unused argument of br_multicast_query_expired() (Mohammad Heib) [RHEL-123945]
  - net: bridge: fix soft lockup in br_multicast_query_expired() (Mohammad Heib) [RHEL-123945]
  - selftests: net: Test bridge backup port when port is administratively down (Mohammad Heib) [RHEL-123945]
  - bridge: Redirect to backup port when port is administratively down (Mohammad Heib) [RHEL-123945]
  - selftests: net: bridge_vlan_aware: test untagged/8021p-tagged with and without PVID (Mohammad Heib) [RHEL-123945]
  - redhat: export FLAVOR (George Jacob) [RHEL-109549]
  - redhat: export only selected variables (George Jacob) [RHEL-109549]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-203.el10]
changelog:
  - nouveau/gsp: fix suspend/resume regression on r570 firmware (José Expósito) [RHEL-141658]
  - nouveau: add a third state to the fini handler. (José Expósito) [RHEL-141658]
  - nouveau/gsp: use rpc sequence numbers properly. (José Expósito) [RHEL-141658]
  - redhat/dracut-virt.conf: omit drm drivers in UKI initrd (Li Tian) [RHEL-146125]
  - scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147285]
  - dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-129484]
  - dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-140641]
  - dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-140641]
  - dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-140641]
  - mei: me: add wildcat lake P DID (Steve Best) [RHEL-95680]
  - redhat/configs: ftrace: enable FUNCTION_GRAPH_RETVAL (Jerome Marchand) [RHEL-105766]
  - KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) (Maxim Levitsky) [RHEL-127414]
  - KVM: x86: Fix a semi theoretical bug in kvm_arch_async_page_present_queued() (Maxim Levitsky) [RHEL-127414]
  - cpufreq: scmi: Account for malformed DT in scmi_dev_used_by_cpus() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Initialize cpufreq-based invariance before subsys (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag (Mark Langsdorf) [RHEL-120319]
  - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event (Mark Langsdorf) [RHEL-120319]
  - drivers: cpufreq: add Tegra114 support (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Exit governor when failed to start old governor (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Move the check of cpufreq_driver->get into cpufreq_verify_current_freq() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Init policy->rwsem before it may be possibly used (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Initialize cpufreq-based frequency-invariance later (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Remove duplicate check in __cpufreq_offline() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Contain scaling_cur_freq.attr in cpufreq_attrs (Mark Langsdorf) [RHEL-120319]
  - cpufreq: tegra124: Allow building as a module (Mark Langsdorf) [RHEL-120319]
  - cpufreq: dt: Add register helper (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Export disable_cpufreq() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: brcmstb-avs: Fully open-code compatible for grepping (Mark Langsdorf) [RHEL-120319]
  - cpufreq: apple: drop default ARCH_APPLE in Kconfig (Mark Langsdorf) [RHEL-120319]
  - cpufreq: userspace: set CPUFREQ_GOV_STRICT_TARGET flag (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Remove forward declaration of cppc_cpufreq_register_em() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Do not return a value from populate_efficiency_class() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Remove cpu_data_list (Mark Langsdorf) [RHEL-120319]
  - cpufreq: CPPC: Add support for autonomous selection (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Update sscanf() to kstrtouint() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Replace magic number (Mark Langsdorf) [RHEL-120319]
  - cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Add Rust-based cpufreq-dt driver (Mark Langsdorf) [RHEL-120319]
  - cpufreq: drop redundant cpus_read_lock() from store_local_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop policy locking from cpufreq_policy_is_good_for_eas() (Mark Langsdorf) [RHEL-120319]
  - powernow: use pr_info_once (Mark Langsdorf) [RHEL-120319]
  - cpufreq/sched: Move cpufreq-specific EAS checks to cpufreq (Mark Langsdorf) [RHEL-120319]
  - cpufreq/sched: schedutil: Add helper for governor checks (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Force sync policy boost with global boost on sysfs update (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Preserve policy's boost state after resume (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Introduce policy_set_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Don't unnecessarily call set_boost() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop unused cpufreq_get_policy() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Introduce cpufreq_policy_refresh() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Use __free() for policy reference counting cleanup (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Drop cpufreq_cpu_acquire() and cpufreq_cpu_release() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Use locking guard and __free() in cpufreq_update_policy() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Add and use cpufreq policy locking guards (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Split cpufreq_online() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: Consolidate some code in cpufreq_online() (Mark Langsdorf) [RHEL-120319]
  - cpufreq: intel_pstate: Rearrange max frequency updates handling code (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: modify CONFIG_OF dependency (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: Depends on OF (Mark Langsdorf) [RHEL-120319]
  - cpufreq: airoha: Add EN7581 CPUFreq SMCCC driver (Mark Langsdorf) [RHEL-120319]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-204.el10]
changelog:
  - netlink: avoid infinite retry looping in netlink_unicast() (Paolo Abeni) [RHEL-133487] {CVE-2025-38727}
  - netlink: make sure we allow at least one dump skb (Paolo Abeni) [RHEL-133487]
  - netlink: Fix rmem check in netlink_broadcast_deliver(). (Paolo Abeni) [RHEL-133487]
  - netlink: Fix wraparounds of sk->sk_rmem_alloc. (Paolo Abeni) [RHEL-133487]
  - genetlink: fix genl_bind() invoking bind() after -EPERM (Paolo Abeni) [RHEL-133487] {CVE-2025-39926}
  - nvme: add support for dynamic quirk configuration via module parameter (Maurizio Lombardi) [RHEL-126507]
  - nvme: expose active quirks in sysfs (Maurizio Lombardi) [RHEL-141683]
  - block: fix memory leak in __blkdev_issue_zero_pages (Ming Lei) [RHEL-137852]
  - virtio: clean up features qword/dword terms (Laurent Vivier) [RHEL-111004]
  - virtio-net: avoid unnecessary checksum calculation on guest RX (Laurent Vivier) [RHEL-111004]
  - virtio_net: fix alignment for virtio_net_hdr_v1_hash (Laurent Vivier) [RHEL-111004]
  - virtio-net: zero unused hash fields (Laurent Vivier) [RHEL-111004]
  - vhost/net: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - tun: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - virtio_net: enable gso over UDP tunnel support. (Laurent Vivier) [RHEL-111004]
  - net: implement virtio helpers to handle UDP GSO tunneling. (Laurent Vivier) [RHEL-111004]
  - virtio_net: add supports for extended offloads (Laurent Vivier) [RHEL-111004]
  - vhost-net: allow configuring extended features (Laurent Vivier) [RHEL-111004]
  - virtio_pci_modern: allow configuring extended features (Laurent Vivier) [RHEL-111004]
  - virtio: introduce extended features (Laurent Vivier) [RHEL-111004]
  - fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-142435]
  - tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-142435]
  - gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-142435]
  - netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-142435]
  - redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-142435]
  - xfs: set max_agbno to allow sparse alloc of last full inode chunk (CKI Backport Bot) [RHEL-141684]
  - redhat/configs: Enable CONFIG_PM_DEVFREQ for aarch64 (Nick Cao) [RHEL-140756]
  - mlxbf_gige: emit messages during open and probe failures (David Thompson) [RHEL-104014]
  - mlxbf_gige: return EPROBE_DEFER if PHY IRQ is not available (David Thompson) [RHEL-104014]
  - redhat/configs: enable ACPI_DEBUG on non-debug kernels (Mark Langsdorf) [RHEL-88729 RHEL-89376]


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-205.el10]
changelog:
  - redhat/dracut-virt.conf: remove erroneous spaces in omit_dracutmodules (Li Tian)
  - configs: enable Freescale MXS DMA engine (Jiri Benc) [RHEL-148497]
  - smb: client: prevent races in ->query_interfaces() (Paulo Alcantara) [RHEL-148417]
  - smb: client: add proper locking around ses->iface_last_update (Paulo Alcantara) [RHEL-148417]
  - smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-148417]
  - cifs: Fix locking usage for tcon fields (Paulo Alcantara) [RHEL-148417]
  - cifs: Corrections to lock ordering notes (Paulo Alcantara) [RHEL-148417]
  - cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-148417]
  - cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-148417]
  - smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-148417]
  - smb/client: fix memory leak in SendReceive() (Paulo Alcantara) [RHEL-148417]
  - smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-148417]
  - netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-148417]
  - netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-148417]
  - netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-148417]
  - scsi: core: Fix the unit attention counter implementation (John Meneghini) [RHEL-147942]
  - perf/x86/intel/cstate: Add Pantherlake support (Michael Petlan) [RHEL-74192]
  - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-144003]
  - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-144003]
  - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-144003]
  - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-144003]
  - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-144003]
  - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-144003]
  - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-144003]
  - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-144003]
  - Disable CET when calling tboot shutdown procedure. (Tony Camuso) [RHEL-109479]
  - docs: perf: Fujitsu: Fix htmldocs build warnings and errors (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Fix hard lockup when !MITIGATE_SPECTRE_BRANCH_HISTORY (Mark Salter) [RHEL-132203]
  - arm64: Reject modules with internal alternative callbacks (Mark Salter) [RHEL-132203]
  - arm64: Fail module loading if dynamic SCS patching fails (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Fix hard lockup due to print in scheduler context (Mark Salter) [RHEL-132203]
  - arm64: proton-pack: Drop print when !CONFIG_MITIGATE_SPECTRE_BRANCH_HISTORY (Mark Salter) [RHEL-132203]
  - arm64: acpi: Drop message logging SPCR default console (Mark Salter) [RHEL-132203]
  - Revert "ACPI: Suppress misleading SPCR console message when SPCR table is absent" (Mark Salter) [RHEL-132203]
  - arm64: Use load LSE atomics for the non-return per-CPU atomic operations (Mark Salter) [RHEL-132203]
  - arm64: mte: Do not warn if the page is already tagged in copy_highpage() (Mark Salter) [RHEL-132203]
  - arm64, mm: avoid always making PTE dirty in pte_mkwrite() (Mark Salter) [RHEL-132203]
  - arm64: enable Guarded Control Stacks (Mark Salter) [RHEL-132203]
  - arm64: Kconfig: Spell out "ARMv9.4" in menuconfig text (Mark Salter) [RHEL-132203]
  - arm64/fpsimd: simplify sme_setup() (Mark Salter) [RHEL-132203]
  - Enable Fujitsu Uncore PMU (Mark Salter) [RHEL-132203]
  - perf: Fujitsu: Add the Uncore PMU driver (Mark Salter) [RHEL-132203]
  - arm64: cpufeature: add Neoverse-V3AE to BBML2 allow list (Mark Salter) [RHEL-132203]
  - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-132203]
  - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-132203]
  - arm64: probes: Fix incorrect bl/blr address and register usage (Mark Salter) [RHEL-132203]
  - uprobes: uprobe_warn should use passed task (Mark Salter) [RHEL-132203]
  - arm64: Kconfig: Remove GCS restrictions on UPROBES (Mark Salter) [RHEL-132203]
  - arm64: uprobes: Add GCS support to uretprobes (Mark Salter) [RHEL-132203]
  - arm64: probes: Add GCS support to bl/blr/ret (Mark Salter) [RHEL-132203]
  - arm64: uaccess: Add additional userspace GCS accessors (Mark Salter) [RHEL-132203]
  - arm64: uaccess: Move existing GCS accessors definitions to gcs.h (Mark Salter) [RHEL-132203]
  - arm64: probes: Break ret out from bl/blr (Mark Salter) [RHEL-132203]
  - arm64: Remove tautological LLVM Kconfig conditions (Mark Salter) [RHEL-132203]
  - arm64/sme: Drop inaccurate documentation of streaming mode switches (Mark Salter) [RHEL-132203]
  - wifi: enable rtw8922ae (Jose Ignacio Tornos Martinez) [RHEL-111098]
  - wifi: rtw89: 8922a: set random mac if efuse contains zeroes (Jose Ignacio Tornos Martinez) [RHEL-111098]


author: Andrew Lukoshko <alukoshko@almalinux.org> - 6.12.0-205
changelog:
  - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
  - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
  - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
  - qla4xxx: bring back deprecated PCI ids
  - be2iscsi: bring back deprecated PCI ids
  - kernel/rh_messages.h: enable all disabled pci devices by moving to
    unmaintained


author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-212.el10]
changelog:
  - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-150776]
  - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-150776]
  - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-150776]
  - redhat: bump RHEL_MINOR for 10.3 (Alexandra Hájková)
  - net: use NUMA drop counters for softnet_data.dropped (Guillaume Nault) [RHEL-145975]
  - inet: raw: add drop_counters to raw sockets (Guillaume Nault) [RHEL-145975]
  - udp: add drop_counters to udp socket (Guillaume Nault) [RHEL-145975]
  - net: add sk->sk_drop_counters (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_skbadd() helper (Guillaume Nault) [RHEL-145975]
  - net: add sk_drops_read(), sk_drops_inc() and sk_drops_reset() helpers (Guillaume Nault) [RHEL-145975]
  - NFSD: Fix permission check for read access to executable-only files (Scott Mayhew) [RHEL-135095]
  - fs/proc/task_mmu: fix PAGE_IS_PFNZERO detection for the huge zero folio (Audra Mitchell) [RHEL-97168]
  - configs: riscv: Enable StarFive and ESWIN drivers (Jennifer Berringer) [RHEL-129062]
  - riscv: Fix memory leak in module_frob_arch_sections() (Jennifer Berringer) [RHEL-129062]
  - reset: eswin: Add eic7700 reset driver (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: reset: eswin: Documentation for eic7700 SoC (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: eswin: add HiFive Premier P550 board device tree (Jennifer Berringer) [RHEL-129062]
  - riscv: dts: add initial support for EIC7700 SoC (Jennifer Berringer) [RHEL-129062]
  - dt-bindings: riscv: Add SiFive HiFive Premier P550 board (Jennifer Berringer) [RHEL-129062]
  - riscv: Add Kconfig option for ESWIN platforms (Jennifer Berringer) [RHEL-129062]
  - riscv: add Andes SoC family Kconfig support (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix regulator error check and Kconfig dependency (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Fix unsigned comparison to less than zero issue (Jennifer Berringer) [RHEL-129062]
  - pinctrl: eswin: Add EIC7700 pinctrl driver (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Optimize PLT/GOT entry counting (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Allocate PLT entries for R_RISCV_PLT32 (Jennifer Berringer) [RHEL-129062]
  - riscv: module: Fix out-of-bounds relocation access (Jennifer Berringer) [RHEL-129062] {CVE-2025-37975}
  - cache: sifive_ccache: Add ESWIN EIC7700 support (Jennifer Berringer) [RHEL-129062]


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Enable abidb
  - Add BuildRequires: python3-devel
  - Add libabigail.so.4 and libabigail.so.4.0.0 to the RPM


author: Dodji Seketeli <dodji@redhat.com> - 2.6-1
changelog:
  - Update to upstream 2.6 tarball
  - Update to changing SONAME (libabigail.so.5.0.0)
  - Add BuildRequires xxhash-devel


author: Dodji Seketeli <dodji@redhat.com> - 2.8-1
changelog:
  - Update to upstream 2.8 tarball
  - Remove 0001-Fix-fedabipkgdiff-configure-check-for-Python-3.12.patch
    that is applied upstream.
  - Update to changing SONAME (libabigail.so.7.0.0)
  - Add xxhash-devel as BuildRequires and inlined-xxhash to avoid
    depending on it at runtime


author: RHEL Packaging Agent <jotnar@redhat.com> - 2.9-1
changelog:
  - Rebase to upstream 2.9 tarball
  - Update to changing SONAME (libabigail.so.8.0.0)
  - Simplify %check section to run both test targets in single invocation
  - Resolves: RHEL-121667


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Andreas Schneider <asn@redhat.com> - 1.1.7-1
changelog:
  - Update to version 1.1.7
    * Update ignore list for source tarball generation
    * Added new assert macros to compare 2 double given an epsilon
    * Added meson build system
    * Added header with version to TAP13 output
    * Fixed issues with MSVC
    * Fixed TAP output for skipped tests
    * Fixed issue with fail_msg
    * CMake generated configs for find_package(cmocka)
    * Documentation improvements


author: Jan Kolarik <jkolarik@redhat.com> - 0.1.20-1
changelog:
  - Update to 0.1.20
  - Fixes of xml parsing
  - Fix non-optimized builds by removing inline keyword
  - Use Py_hash_t instead of long


author: Pavol Žáčik <pzacik@redhat.com> - 0.6.5-3
changelog:
  - Patch bugs found by static analysis tools
  - Add %{name}-fix-handle-leaks-in-rdmsr-c.patch
  - Add %{name}-fix-cpuid_get_hypervisor.patch
  - Add %{name}-prevent-intel_fn11-array-overruns.patch


author: Pavol Žáčik <pzacik@redhat.com> - 0.7.0-1
changelog:
  - Rebase to 0.7.0
  - Begin building the package for aarch64
  - Add Python bindings as a subpackage (python3-libcpuid)


author: Ales Matej <amatej@redhat.com> - 0.73.1-14
changelog:
  - Mark all protected packages as user installed for all transactions (RHEL-128445)
  - Add `filterUnneededExtraUserinstalled` and Python version to the API
  - Describe all problems even when there are protected removals (RHEL-146507)
  - Clearer error for protected package broken dependencies


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Karel Zak <kzak@redhat.com> - 2.40.2-14
changelog:
  - lscpu: Add NVIDIA Olympus arm64 core
  - libfdisk: improve collision reporting
  - libfdisk: (dos) ignore incomplete EBR for non-wholedisk
  - wall: always use utmp as fallback


author: Karel Zak <kzak@redhat.com> - 2.40.2-15
changelog:
  - mount: improve --all documentation
  - libblkid: Fix probe_ioctl_tp assigning BLKGETDISKSEQ as physical
  - libblkid: use snprintf() instead of sprintf()


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-2
changelog:
  - update from releases/gcc-14 branch (RHEL-83953)
    - GCC 14.3 release
    - PRs ada/112958, ada/118712, ada/119265, c/100420, c/112556,
  	c/113688, c/114014, c/114713, c/114870, c/116284, c/117145,
  	c/117245, c/117391, c/117724, c/117806, c/119000, c/119183,
  	c/119582, c++/79786, c++/86769, c++/98533, c++/98935,
  	c++/99214, c++/99546, c++/100476, c++/101180, c++/102051,
  	c++/105104, c++/105475, c++/106973, c++/106976, c++/107522,
  	c++/109464, c++/109682, c++/109961, c++/110635, c++/110871,
  	c++/110872, c++/111075, c++/111728, c++/112341, c++/113457,
  	c++/113773, c++/113835, c++/113925, c++/114292, c++/114525,
  	c++/114630, c++/114772, c++/114970, c++/114992, c++/115434,
  	c++/115580, c++/115586, c++/115905, c++/115906, c++/116379,
  	c++/116482, c++/116502, c++/116506, c++/116681, c++/116731,
  	c++/116793, c++/116880, c++/116954, c++/116960, c++/117153,
  	c++/117336, c++/117501, c++/117504, c++/117512, c++/117530,
  	c++/117775, c++/117778, c++/117827, c++/117849, c++/117855,
  	c++/118047, c++/118049, c++/118053, c++/118104, c++/118147,
  	c++/118245, c++/118255, c++/118285, c++/118355, c++/118509,
  	c++/118590, c++/118629, c++/118655, c++/118661, c++/118673,
  	c++/118763, c++/118775, c++/118822, c++/118849, c++/119038,
  	c++/119045, c++/119123, c++/119134, c++/119150, c++/119175,
  	c++/119194, c++/119233, c++/119303, c++/119316, c++/119344,
  	c++/119345, c++/119378, c++/119383, c++/119387, c++/119574,
  	c++/119652, c++/119687, c++/119807, c++/119981, c++/120123,
  	c++/120125, c++/120161, d/114434, d/115249, d/116373,
  	d/116961, d/117002, d/117115, d/117621, d/118309, d/118477,
  	d/119112, d/119139, d/119817, d/119826, debug/101533,
  	driver/117739, driver/119727, fortran/59252, fortran/81978,
  	fortran/85750, fortran/98454, fortran/103391, fortran/106692,
  	fortran/106948, fortran/108434, fortran/108454,
  	fortran/109066, fortran/110993, fortran/116706,
  	fortran/117434, fortran/118080, fortran/118640,
  	fortran/118683, fortran/118750, fortran/119054,
  	fortran/119380, fortran/119656, fortran/119986,
  	fortran/120191, gcov-profile/116743, ipa/111245, ipa/113197,
  	ipa/116572, ipa/117432, ipa/118243, ipa/118318, ipa/118400,
  	ipa/119067, ipa/119852, jit/118780, libfortran/118571,
  	libfortran/120196, libgcc/101075, libgcc/119151,
  	libgcc/119796, libstdc++/21334, libstdc++/90389,
  	libstdc++/99832, libstdc++/100249, libstdc++/101527,
  	libstdc++/101587, libstdc++/104395, libstdc++/105258,
  	libstdc++/105609, libstdc++/106612, libstdc++/108487,
  	libstdc++/108760, libstdc++/108846, libstdc++/110498,
  	libstdc++/112490, libstdc++/112803, libstdc++/114758,
  	libstdc++/114945, libstdc++/115046, libstdc++/115285,
  	libstdc++/115939, libstdc++/116212, libstdc++/116440,
  	libstdc++/116471, libstdc++/117121, libstdc++/117921,
  	libstdc++/117983, libstdc++/118083, libstdc++/118158,
  	libstdc++/118160, libstdc++/118185, libstdc++/118413,
  	libstdc++/118699, libstdc++/118811, libstdc++/119121,
  	libstdc++/119135, libstdc++/119429, libstdc++/119469,
  	libstdc++/119593, libstdc++/119671, libstdc++/120198,
  	libstdc++/120548, lto/91299, lto/113207, lto/114501,
  	lto/119625, lto/119792, middle-end/66279, middle-end/101478,
  	middle-end/111285, middle-end/113546, middle-end/114877,
  	middle-end/115871, middle-end/115913, middle-end/117498,
  	middle-end/117811, middle-end/118140, middle-end/118411,
  	middle-end/118819, middle-end/118950, middle-end/119119,
  	middle-end/119204, middle-end/119219, middle-end/119706,
  	middle-end/119808, middle-end/120547, modula2/115032,
  	modula2/115112, modula2/118703, modula2/118761,
  	preprocessor/108900, preprocessor/116047, preprocessor/120061,
  	rtl-optimization/115568, rtl-optimization/116564,
  	rtl-optimization/117186, rtl-optimization/117239,
  	rtl-optimization/117506, rtl-optimization/118320,
  	rtl-optimization/118638, rtl-optimization/118662,
  	rtl-optimization/118739, rtl-optimization/119071,
  	rtl-optimization/119291, rtl-optimization/119689,
  	rtl-optimization/119785, target/86772, target/106544,
  	target/110901, target/113257, target/115258, target/115485,
  	target/116036, target/116086, target/116111, target/116149,
  	target/116240, target/116256, target/116305, target/116308,
  	target/116550, target/116591, target/116592, target/116593,
  	target/116693, target/116720, target/116809, target/116827,
  	target/116927, target/117286, target/117383, target/117483,
  	target/117544, target/117682, target/117878, target/118067,
  	target/118137, target/118154, target/118182, target/118184,
  	target/118329, target/118357, target/118501, target/118531,
  	target/118561, target/118601, target/118623, target/118685,
  	target/118776, target/118813, target/118815, target/118825,
  	target/118835, target/118843, target/118844, target/118892,
  	target/118942, target/119084, target/119133, target/119172,
  	target/119235, target/119327, target/119340, target/119383,
  	target/119386, target/119408, target/119450, target/119533,
  	target/119547, target/119549, target/119572, target/119610,
  	target/119784, target/119834, target/120441, target/120480,
  	testsuite/52641, testsuite/116448, testsuite/118127,
  	testsuite/118597, tree-optimization/117358,
  	tree-optimization/120638 tree-optimization/87984,
  	tree-optimization/98845, tree-optimization/111873,
  	tree-optimization/112859, tree-optimization/113197,
  	tree-optimization/114052, tree-optimization/115347,
  	tree-optimization/115494, tree-optimization/116098,
  	tree-optimization/116125, tree-optimization/116412,
  	tree-optimization/116749, tree-optimization/116906,
  	tree-optimization/116922, tree-optimization/117113,
  	tree-optimization/117119, tree-optimization/117243,
  	tree-optimization/117424, tree-optimization/117919,
  	tree-optimization/117979, tree-optimization/118476,
  	tree-optimization/118522, tree-optimization/118605,
  	tree-optimization/118653, tree-optimization/118689,
  	tree-optimization/118717, tree-optimization/118915,
  	tree-optimization/118922, tree-optimization/118924,
  	tree-optimization/118953, tree-optimization/118976,
  	tree-optimization/119057, tree-optimization/119096,
  	tree-optimization/119145, tree-optimization/119351,
  	tree-optimization/119399, tree-optimization/119417,
  	tree-optimization/119534, tree-optimization/119706,
  	tree-optimization/119707, tree-optimization/119722,
  	tree-optimization/119778, tree-optimization/120048,
  	tree-optimization/120156


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 14.3.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/107536, ada/113536, analyzer/118300, c/122188, c++/120620,
  	c++/120757, c++/121801, c++/121977, c++/121981, fortran/89092,
  	fortran/120784, fortran/121145, fortran/121263, go/104290,
  	libstdc++/110853, libstdc++/117276, libstdc++/120698,
  	libstdc++/121097, libstdc++/121374, libstdc++/121496,
  	libstdc++/121745, libstdc++/121827, libstdc++/122168,
  	libstdc++/122322, middle-end/121453, middle-end/121828, other/118919,
  	rtl-optimization/121253, target/49857, target/81540, target/118280,
  	target/120442, target/120476, target/120691, target/121118,
  	target/121208, target/121294, target/121414, target/121449,
  	target/121542, target/121599, target/121608, target/121749,
  	target/122177, target/122187, target/122210, target/122220,
  	target/122222, testsuite/118567, tree-optimization/117423,
  	tree-optimization/119085, tree-optimization/120357,
  	tree-optimization/120358, tree-optimization/120654,
  	tree-optimization/120817, tree-optimization/120944,
  	tree-optimization/121059, tree-optimization/121256,
  	tree-optimization/121370, tree-optimization/121772,
  	tree-optimization/121870, tree-optimization/122104


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.1
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libstdc++fs.a and libstdc++exp.a in sysroot packages
    - add libsanitizer sysroot packages
    - save testsuite .sum files in build logs
    - add packages with files from build tree used in testsuite
    - escape \r in dg-regexp test names to avoid truncation in build-tree testing
    - fix iconv linking for installed testing
    - enable compat testing for installed testing
    - distinguish canonical and noncanonical target for installed testing
    - add plugin headers packages for cross compilers
    - install text-art/*.h plugin headers
    - support plugin tests for installed testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.2
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable stack-protector tests in cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.3
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - enable guality tests in cross testing
    - enable simulate-thread tests in cross testing
    - enable gcov tests in cross testing
    - enable some miscellaneous tests in cross testing
    - fix some tree-prof tests for cross testing


author: Joseph Myers <josmyers@redhat.com> - 14.3.1-4.4
changelog:
  - fixes for testing non-production cross compilers (RHEL-114521)
    - include libsanitizer.spec and static sanitizer libraries in packages
    - enable tests involving target environment variables in cross testing
    - disable color for more sanitizer tests


author: Eduard Abdullin <eabdullin@almalinux.org> - 14.3.1-4.4.alma.2
changelog:
  - Change to almalinux bugtracker
  - Set --with-arch_64=x86-64-v2 on v2 arch
  - Fix sysroot packages for i686 architecture


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.58.1-2
changelog:
  - Rebase to libguestfs 1.58.1
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846
  - Add new xfs_info2 API
    resolves: RHEL-143673


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.26-1
changelog:
  - New upstream release
  - Improve TX performance and use less CPU
  - minor other improvements
  - Build system update


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.27-1
changelog:
  - New upstream release
  - Fix potential startup race condition (corosync use case)
  - Fix crypto config check
  - Minor API cleanup
  - Test suite fixes


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.4-100
changelog:
  - Update to version 4.23.4
  - resolves: RHEL-114545 - Update to version 4.23.4
  - resolves: RHEL-132338 - Fix Time Machine backup
  - resolves: RHEL-132975 - Remove unexpected dependency of libldb to samba


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.23.5-100
changelog:
  - Update to version 4.23.5
  - resolves: RHEL-138263 - Fix winbind group resolution
  - resolves: RHEL-141012 - Fix winbind crash


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.0-1
changelog:
  - Rebase to libnbd 1.24.0
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Richard W.M. Jones <rjones@redhat.com> - 1.24.1-1
changelog:
  - Rebase to libnbd 1.24.1
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296
  - Implement Post-Quantum Cryptography (PQC)
    resolves: RHEL-101267


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-4
changelog:
  - nfsiostat: normalize the mountpoints passed in from the command line (RHEL-90562)
  - Remove /var/lib/nfs/v4recovery (RHEL-137935)


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Phil Sutter <psutter@redhat.com> [1.3.0-3.el10]
changelog:
  - src: Do not include userdata content in debug output (Phil Sutter) [RHEL-119650]
  - Revert "udata: Store u32 udata values in Big Endian" (Phil Sutter) [RHEL-119650]
  - udata: Store u32 udata values in Big Endian (Phil Sutter) [RHEL-119650]
  - data_reg: Support concatenated data (Phil Sutter) [RHEL-119650]
  - data_reg: Respect data byteorder when printing (Phil Sutter) [RHEL-119650]
  - Introduce nftnl_{expr,set_elem}_set_imm() (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::sizes array (Phil Sutter) [RHEL-119650]
  - data_reg: Introduce struct nftnl_data_reg::byteorder field (Phil Sutter) [RHEL-119650]
  - expr: Pass byteorder to struct expr_ops::set callback (Phil Sutter) [RHEL-119650]
  - expr: data_reg: Avoid extra whitespace (Phil Sutter) [RHEL-119650]
  - set_elem: Review debug output (Phil Sutter) [RHEL-119650]


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-14
changelog:
  - Improve a documentation (RHEL-38831)
  - Refactor parse_entitlement_data() (RHEL-32365)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-37866)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Sumit Bose <sbose@redhat.com> - 2.12.0-1
changelog:
  - Resolves: RHEL-139110 - Rebase SSSD for RHEL 10.2
  - Resolves: RHEL-132552 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so[7f6fd25ae000+4d000]
  - Resolves: RHEL-132505 - RFE: package LDAP provider support for subid ranges
  - Resolves: RHEL-130571 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
  - Resolves: RHEL-129636 - sssd service fails to start after updating to 2.9.6-4 or 2.9.7-4
  - Resolves: RHEL-128594 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name
  - Resolves: RHEL-127792 - Remove SSSD option ipa_enable_dns_sites
  - Resolves: RHEL-120501 - Crash in 'sss_client/autofs/sss_autofs.c'
  - Resolves: RHEL-120287 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems [rhel-10.2]
  - Resolves: RHEL-114468 - Spam in 'sssd_kcm.log' during normal operations
  - Resolves: RHEL-113111 - Including innapropriate IPv6 addresses in dyndns_update
  - Resolves: RHEL-104221 - The SSSD cache is filled with groups having GID=0, causing the cache index to grow excessively large. This, in turn, leads to timeouts
  - Resolves: RHEL-94545 - When the user name of an AD user in an IPA-AD trust environment overwritten, the user private group, the users primary group, cannot be lookup up by the overwritten name.
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache
  - Resolves: RHEL-72935 - sss_override does not work on AD UPN
  - Resolves: RHEL-11913 - GDM Support for IdM IdP feature and MFA [SSSD]
  - Resolves: RHEL-4990 - [RFE] SSSD support for Azure AD / Microsoft Entra ID (or general direct support of OIDC authentication)


author: Michal Hlavinka <mhlavink@redhat.com> - 4.6.0-8
changelog:
  - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-148253)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-2
changelog:
  - tests: add test for a single per-device smmuv3 (RHEL-74200)
  - qemu: Use pci_bus to identify multi-smmuv3 model (RHEL-74200)
  - qemu: tpm: Account for possible migration without actually sharing storage (RHEL-132534)
  - tests: Test virFileIsSharedFSOverride (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSType (RHEL-102925)
  - util: Fix race condition in virFileIsSharedFSOverride (RHEL-102925)
  - util: Rework virFileIsSharedFSOverride using virFileCheckParents (RHEL-102925)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-3
changelog:
  - util: json: Increase JSON nesting limit when parsing to 300 (RHEL-135181)
  - virjsontest: Add test for nesting depth (RHEL-135181)
  - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-114412)
  - esx: Allow connecting to IPv6 server (RHEL-138300)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-4
changelog:
  - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-141820)
  - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-141820)
  - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-141820)
  - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-141820)
  - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144089)
  - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144089)
  - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144089)
  - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144089)
  - esx: Debug URL just before opening with curl (RHEL-138300)
  - esx: Abstract all URL-creation code into one function (RHEL-138300)
  - esx: Switch to creating URLs using virURIFormat (RHEL-138300)
  - esx_util: Introduce esxUtil_EscapeInventoryObject() (RHEL-140196)
  - esx: URI encode inventory objects twice (RHEL-140196)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-5
changelog:
  - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145769)
  - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145769)
  - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145769)
  - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145769)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-6
changelog:
  - qemu: Implement support for associating iommufd to hostdev (RHEL-126346, RHEL-74202)
  - qemu: Introduce privateData for hostdevs (RHEL-126346, RHEL-74202)
  - qemu: Support per-process memory accounting for iommufd (RHEL-126346, RHEL-74202)
  - qemu: open VFIO FDs from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: open iommufd FD from libvirt backend (RHEL-126346, RHEL-74202)
  - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126346, RHEL-74202)
  - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126346, RHEL-74202)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-8
changelog:
  - src/esx/esx_vi.c: Debug path element comparisons (RHEL-145080)
  - qemu: Ignore cmp_legacy CPU flag (RHEL-148494)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-9
changelog:
  - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-135115)
  - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-135115)
  - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-135115)
  - qemu: Implement support for persistent reservation migration control (RHEL-135115)
  - qemu: Extract disk setup done via QMP into a separate helper (RHEL-131335)
  - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-131335)
  - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-131335)
  - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-131335)
  - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-131335)
  - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-131335)
  - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-131335)
  - Introduce support for disk operation latency histogram collection (RHEL-131335)
  - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-131335)


author: Jiri Denemark <jdenemar@redhat.com> - 11.10.0-10
changelog:
  - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150351)
  - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150351)
  - util: Move openning IOMMU device to viriommufd (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150351)
  - util: Move openning VFIO device to virpci (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150351)
  - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150351)
  - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150351)
  - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150351)
  - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150351)
  - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150351)
  - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150351)
  - qemuxmlconftest: Refactor host device preparation (RHEL-150351)
  - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150351)
  - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150351)
  - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150351)
  - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150351)
  - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150351)
  - qemu: Save IOMMUFD state into status XML (RHEL-150351)
  - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150351)
  - qemu_command: Extract building IOMMUFD props to function (RHEL-150351)
  - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150351)
  - conf: Introduce iommufd enum for domaincaps (RHEL-148135)
  - qemu: Fill iommufd domain capability (RHEL-148135)
  - tests: properly mock VFIO and IOMMU checks (RHEL-148135)
  - iommufd: fix FD leak in case of error (RHEL-150351)


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Dominik Mierzejewski <rpm@greysector.net> - 2.16.01-1
changelog:
  - update to 2.16.01 (#2155636)
  - drop obsolete patch
  - drop rdoff subpackage (discontinued upstream)


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.2-1
changelog:
  - Rebase to nbdkit 1.46.2
  - Backport nbdkit_debug_hexdiff, nbdkit_name, nbdkit_timestamp
    from nbdkit 1.47.
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755
  - Fix assertion failure in blocksize-policy filter
  - Fix v2v conversion failure when minimum_io_size > 64K
    resolves: RHEL-139390
  - Test and document that VDDK 9.0.1.0 works
    resolves: RHEL-140615


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Phil Sutter <psutter@redhat.com> [1.1.5-2.el10]
changelog:
  - spec: Require libnftnl >= 1.3.0-2 for NFTA_DEVICE_PREFIX handling (Phil Sutter) [RHEL-108861]
  - mnl: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108861]
  - tests: shell: Test ifname-based hooks (Phil Sutter) [RHEL-108861]
  - parser_bison: Accept ASTERISK_STRING in flowtable_expr_member (Phil Sutter) [RHEL-108861]
  - mnl: Support simple wildcards in netdev hooks (Phil Sutter) [RHEL-108861]


author: Phil Sutter <psutter@redhat.com> [1.1.5-3.el10]
changelog:
  - Update expected test suite results (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix for out-of-path call (Phil Sutter) [RHEL-121194]


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-6
changelog:
  - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack
    on TLS proxied connections


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-107158)
  - Support setting protocol version of HSR/PRP. (RHEL-100763)
  - Fix inconsistent interface order. (RHEL-130157)


author: Mingyu Shi <mshi@redhat.com> - 2.2.58-1
changelog:
  - Upgrade to 2.2.58
  - vrf: Handle ignore interface when verifying desired state. RHEL-1417
  - alt-name: Remove alt-names when interface marked as absent. RHEL-126481
  - hsr: Automatically disable IP on hsr port. RHEL-100774
  - hsr: add support for configuring "interlink" property. RHEL-100766
  - Support referring alternative-name as port/parent/next-hop-interface.
    RHEL-126508
  - Support referring interface name using its alternative name. RHEL-126510


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.59-1
changelog:
  - Upgrade to 2.2.59
  - route: add support for lock-mtu option. RHEL-151844
  - iptunnel: introduce support for ipip/sit/ip6ip6/ipip6 tunnels. RHEL-79801
  - nm: Fix error when modify port list of down interface. RHEL-52334


author: Richard W.M. Jones <rjones@redhat.com> - 5.2.0-5
changelog:
  - Fix remote code execution via buffer over-read in Marshal deserialization
    CVE-2026-28364
    Resolves: RHEL-152488


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Than Ngo <than@redhat.com> - 3.26.0-1
changelog:
  - Resolves: RHEL-75138, ep11 token BLS support
  - Resolves: RHEL-85380, ep11 token: ML-KEM and ML-DSA support
  - Resolves: RHEL-85383, cca token: ML-KEM and ML-DSA support
  - Resolves: RHEL-100058, openCryptoki 3.26.0


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-74
changelog:
  - Use %{buildroot} instead of $RPM_BUILD_ROOT as it is more recent
  - Use directory macros and push/popd


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-75
changelog:
  - Fix installation on OSTree by removing %ghost (rhbz#2193429)
  - Remove %ldconfig_postun as it has no effect in Fedora


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-77
changelog:
  - Sync the RHEL version and Fedora version of the specfile
  - Update sources file and config.{sub|guess}
  - Skip verification for .soc file as it will change after install


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Paul Howarth <paul@city-fan.org> - 2.14-1
changelog:
  - Update to 2.14 (rhbz#2161420)
    - Remove Test::Fatal and Test::Needs from test prereqs (GH#7, GH#8)
  - Use SPDX-format license tag


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.227-1
changelog:
  - Update to 1.227
    - New maintainer, GTERMARS
    - Add basic GitHub Actions setup for testing
    - Typo corrections in POD
    - Eliminated use of state/node files in temp directory


author: Paul Howarth <paul@city-fan.org> - 0.14-21
changelog:
  - Use SPDX-format license tag
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Drop support for old Perl versions needing XS helper


author: Michal Josef Špaček <mspacek@redhat.com> - 6.16-1
changelog:
  - 6.16 bump
  - Fix minimal version of IO::Socket::IP
  - Fix requires/provided modules in *tests package


author: Paul Howarth <paul@city-fan.org> - 1.18-1
changelog:
  - Update to 1.18 (rhbz#2251844)
    - Address Freebsd build issue: make function checks more robust within
      shared lib (GH#35)


author: Paul Howarth <paul@city-fan.org> - 1.20-1
changelog:
  - Update to 1.20 (rhbz#2256127)
    - Remove --no-undefined from compiler test, which is not compatible with all
      platforms (GH#37)
    - Skip t/pty_get_winsize.t tests on AIX (GH#32)
    - Fix patchlevel check for util.h (GH#27)


author: Paul Howarth <paul@city-fan.org> - 20231003.0-1
changelog:
  - Update to 20231003.0 (rhbz#2241845)
    - On Windows, avoid hang under IPCRUNDEBUG (GH#157)
    - Refresh "cpanfile" from Makefile.PL, to allow use on Windows
    - Normalize shebangs to /usr/bin/perl (GH#163)
    - Fix or skip all tests recently seen to fail on Windows
    - Include t/result.t in releases
    - Make full_result() and result() Windows behavior match non-Windows (GH#168)


author: Paul Howarth <paul@city-fan.org> - 0.142-1
changelog:
  - Update to 0.142
    Deprecations
    - Tilde expansion is deprecated due to inconsistent and bug-prone behavior
    Bug fixes
    - Prevent expansion of tildes that are not the very first character (e.g.
      "./~foo")
    - Prevent unintentional tilde expansion during internal path processing
    - Escape non-tilde glob characters before tilde expansion
    - Fixed spew/edit to a long filename approaching the filesystem length limit
    - Internal calls to 'print' are checked for possible errors
    - Internal read calls are checked for errors
    Changes
    - Path stringification now adds "./" in front of paths starting with literal
      tilde so they will round-trip; FREEZE updated to use this stringification
      rule as well
    - 'move' now uses File::Copy::move internally instead of the built-in
      'rename', allowing it to work across filesystems; it also returns an object
      for the moved location, allowing chaining
    - edit_lines_raw now uses a buffered raw I/O layer
    - edit_lines_utf8 now prefers PerlIO::utf8_strict, if available
    - lines_utf8 now consistently uses a buffered I/O layer
    - open*_utf8 now prefers PerlIO::utf8_strict, if available
    - slurp_utf8 now consistently uses an unbuffered I/O layer
    Documented
    - Changed all raw/UTF-8 layer descriptions in method documentation to match
      the code
    - Fixed SYNOPSIS syntax
    - Documented how to disable TMPDIR when making temp files/dirs
    Testing
    - Add additional tilde stringification testing
    - Fixed tilde expansion tests on Windows
    - Skip a problematic test case on Cygwin


author: Michal Josef Špaček <mspacek@redhat.com> - 1.65-4
changelog:
  - Rewrite to use of /builddir/build/BUILDROOT/perl-Pod-Parser-1.67-5.el10.s390x macro
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 0.001013-21
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.03-48
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Specify all dependencies
    - Fix permissions verbosely
    - Simplify find commands using -empty and -delete
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.202-1
changelog:
  - Update to 1.202 (rhbz#2158345)
    - Converted to Dist::Zilla
    - Test::Deep will now require v5.12, and this may go up; this change allows
      simplification of the Makefile.PL, which was coping with a mistake made
      twelve years ago
  - Use SPDX-format license tag
  - Package LICENSE file


author: Paul Howarth <paul@city-fan.org> - 1.204-1
changelog:
  - Update to 1.204 (rhbz#2159015)
    - Try to avoid clobbering global error variables when loading test libraries
    - hash_each now enumates keys in sort() order, to make errors more consistent


author: Paul Howarth <paul@city-fan.org> - 0.7000-1
changelog:
  - Update to 0.70
    - Stop pointless use of taint-mode in tests, so tests pass when perl is
      built without taint support


author: Paul Howarth <paul@city-fan.org> - 0.7100-1
changelog:
  - Update to 0.71
    - Document and test different behavior regarding Booleans in perl 5.38.0
      compared to earlier versions (GH#21)


author: Paul Howarth <paul@city-fan.org> - 0.43-23
changelog:
  - Spec tidy-up
    - Use SPDX-format license tag
    - Use author-independent source URL
    - Fix permissions verbosely
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.032-1
changelog:
  - Update to 0.032
    - New config variable, $ENV{PERL_TEST_WARNINGS_ONLY_REPORT_WARNINGS}, for
      temporarily turning failures into reports


author: Paul Howarth <paul@city-fan.org> - 0.033-1
changelog:
  - Update to 0.033
    - Add Test2 compatibility in the test triggered by done_testing()
    - New long-awaited feature (!!!) "allow_patterns", to either
      temporarily or globally exempt particular warning patterns


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Resolves: RHEL-128802 (CVE-2025-12818) [rhel-10.2]
  - Resolves: RHEL-128801 (CVE-2025-12818) [rhel-10.1.z]


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149365 RHEL-149399 RHEL-149333


author: Filip Janus <fjanus@redhat.com> - 18.3-1
changelog:
  - Update to 18.3
  - Enable pltcl
  - Update gating configuration
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code
  - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error


author: Jan Rybar <jrybar@redhat.com> - 4.0.4-11
changelog:
  - ps: etime overflow reappeared with rewritten library
  - uptime, w: report user sessions only; upstream backport of 734930e47
  - Resolves: RHEL-60826
  - Resolves: RHEL-141839


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Miro Hrončok <mhroncok@redhat.com> - 1:7.2.6-2
changelog:
  - Weaken the runtime dependency on:
    - python3-sphinxcontrib-applehelp
    - python3-sphinxcontrib-devhelp
    - python3-sphinxcontrib-jsmath
    - python3-sphinxcontrib-htmlhelp
    - python3-sphinxcontrib-serializinghtml
    - python3-sphinxcontrib-qthelp
  - Packages that want to use them during build need to BuildRequire them explicitly


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Miro Hrončok <mhroncok@redhat.com> - 3.8.0-3
changelog:
  - Fork python-flit-core from the python-flit package
  - Adjust the License tag to include flit_core/versionno.py's regex (BSD-2-Clause)


author: Karolina Surma <ksurma@redhat.com> - 1.4.1-5
changelog:
  - License verified according to the SPDX specification
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-22
changelog:
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup
  - Resolves: RHEL-89893 ipa: Privilege escalation from host to domain admin in FreeIPA
  - Resolves: RHEL-99316 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-97053 ipa-idrange-fix: 'Env' object has no attribute 'basedn'
  - Resolves: RHEL-96936 Nightly test failure (rawhide) in test_trust.py::TestTrust::test_server_option_with_unreachable_ad
  - Resolves: RHEL-49440 kdb: support storing and retrieving multiple master keys


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-23
changelog:
  - Resolves: RHEL-105973 Include fixes in python3-ipatests package
  - Resolves: RHEL-105513 kdb: prevent double crash in RBCD ACL free
  - Resolves: RHEL-101708 ipatests: use "sos report" instead of "sosreport" command
  - Resolves: RHEL-95733 Incorrect use of external IdP GitHub trademark
  - Resolves: RHEL-95374 eDNS: multiple issues during encrypted DNS setup


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-27
changelog:
  - Resolves: RHEL-122767 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier
  - Resolves: RHEL-119628 Include fixes in python3-ipatests
  - Resolves: RHEL-110204 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM
  - Resolves: RHEL-119481 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
  - Resolves: RHEL-126761 [RFE] Support storing LWCA private keys on an HSM
  - Resolves: RHEL-86030 [RFE] ipa-client-automount should have an option to include domain of the machine.
  - Resolves: RHEL-119617 test_cacert_manage fails due to expired Let's Encrypt R3 certificate


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.0-1
changelog:
  - Resolves: RHEL-120956 Rebase ipa to latest 4.13.x version for RHEL 10.2
  - Resolves: RHEL-90121 Add modern WebUI as submodule and enable routing in Apache
  - Resolves: RHEL-132337 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-129965 Fix ipatests for kdcproxy after CVE-2025-59088 fix
  - Resolves: RHEL-129547 Switch IPA to use the PKI python API directly rather than RPC calls
  - Resolves: RHEL-133342 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-1
changelog:
  - Resolves: RHEL-140587 Support replaceable WebUI artwork for RHEL and CentOS
  - Resolves: RHEL-113778 Command that retrieve and install new CA certificates
  - Resolves: RHEL-141296 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
  - Resolves: RHEL-141011 Include latest fixes in python3-ipatests package
  - Resolves: RHEL-119339 Memory leaks in IPA plugins


author: Florence Blanc-Renaud <flo@redhat.com> - 4.13.1-2
changelog:
  - Resolves: RHEL-146023 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
  - Resolves:  RHEL-145855 Include latest fixes in python3-ipatests package
  - Resolves:  RHEL-88855 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
  - Resolves:  RHEL-43143 ipa-advise client script requires keytab (should just require root access on client system)
  - Resolves:  RHEL-4895 ipa use systemd-sysusers
  - Resolves:  RHEL-4823 Names of domains from a trusted forest should be compared case-insentive


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.1-1
changelog:
  - Update to 7.4.1
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-1-2023-09-02
  - Fixes: rhbz#2236995


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.2-1
changelog:
  - Update to 7.4.2
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-2-2023-09-07
  - Fixes: rhbz#2237942


author: Miro Hrončok <mhroncok@redhat.com> - 7.4.3-1
changelog:
  - Update to 7.4.3
  - Changelog: https://docs.pytest.org/en/stable/changelog.html#pytest-7-4-3-2023-10-24
  - Fixes: rhbz#2245983


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.14.0-2
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lukáš Zachar <lzachar@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <mhroncok@redhat.com>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tom Stellard <tstellar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        U2FsdGVkX1 <U2FsdGVkX1@gmail.com>
        Victor Stinner <vstinner@redhat.com>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Karolina Surma <ksurma@redhat.com> - 3.14.3-1
changelog:
  - Update to Python 3.14.3
  - Security fixes for CVE-2025-11468, CVE-2026-0672,CVE-2026-0865,
  CVE-2025-15282, CVE-2026-1299, CVE-2025-11468, CVE-2025-15366,
  CVE-2025-15367
  Resolves: RHEL-144855, RHEL-143058, RHEL-143111


author: Tomáš Hrnčiar <thrciar@redhat.com> - 1.6.0-3
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <mhroncok@redhat.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Priscila Gutierres <pgutier@redhat.com>
        Thomas Moschny <thomas.moschny@gmx.de>
        Tomas Orsava <torsava@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.10-3
changelog:
  - Initial package
  Fedora contributions by:
      Ales Nezbeda <anezbeda@redhat.com>
      Bill Nottingham <notting@fedoraproject.org>
      Bohuslav Kabrda <bkabrda@redhat.com>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Devrim Gündüz <devrim@gunduz.org>
      Filip Januš <fjanus@redhat.com>
      Honza Horak <hhorak@redhat.com>
      Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com>
      Igor Gnatenko <ignatenkobrain@fedoraproject.org>
      Jason L Tibbitts III <tibbs@math.uh.edu>
      Jesse Keating <jkeating@fedoraproject.org>
      Jozef Mlich <jmlich@redhat.com>
      Lumír Balhar <lbalhar@redhat.com>
      Miro Hrončok <mhroncok@redhat.com>
      Ondřej Sloup <ondrej.sloup@protonmail.com>
      Patrik Novotný <panovotn@redhat.com>
      Pavel Raiskup <praiskup@redhat.com>
      Petr Kubat <pkubat@redhat.com>
      Peter Robinson <pbrobinson@fedoraproject.org>
      Todd Zullinger <tmz@pobox.com>
      Tomas Hrnciar <thrnciar@redhat.com>
      Tom Lane <tgl@redhat.com>


author: Cristian Le <git@lecris.dev> - 2.13.6-7
changelog:
  - Refactor the build script
  - Drop the python3-python2 distinction
  - Use standard cmake and pyproject macros (rhbz#2377381)
  - Allow to build with arbitrary generator (rhbz#2381106)


author: Lukáš Zachar <lzachar@redhat.com> - 78.1.1-3
changelog:
  - Adjust gating
  - Generic gating.yaml for all rhel
  - Use CS repos instead of Fedora
  - Remove python versions not available on c10s
  - Test with python-isort


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Jun Aruga <jaruga@redhat.com> - 3.4.2-24
changelog:
  - Fix the tests using SHA-1 Probabilistic Signature Scheme (PSS) parameters.
    Resolves: rhbz#2358256


author: Jun Aruga <jaruga@redhat.com> - 3.4.7-28
changelog:
  - Upgrade to Ruby 3.4.7.
    Resolves: rhbz#2402422
  - Fix URI Credential Leakage Bypass previous fixes.
    Resolves: CVE-2025-61594
  - Fix REXML denial of service.
    Resolves: CVE-2025-58767


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.13-1
changelog:
  - Add the rpm_signal() interface
  Related: RHEL-107589
  - Allow tuned_t use its private tmpfs files
  Related: RHEL-107589
  - Allow samba-bgqd send to smbd over a unix datagram socket
  Resolves: RHEL-93731
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041
  - Confine redfish_finder - host api discovery service
  Resolves: RHEL-50299
  - Update policy for dhcpc_hook_t
  Resolves: RHEL-113937
  - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
  Resolves: RHEL-113937
  - Allow systemd to map files under /sys
  Resolves: RHEL-132638


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.14-1
changelog:
  - Update ktls policy
  Resolves: RHEL-123737
  - Update policy for redfish-finder
  Resolves: RHEL-50299
  - Allow sshd-session read, write, and map ica tmpfs files
  Resolves: RHEL-138247
  - Allow sshd_net_t ioctl on unix_stream_socket of sshd_session_t
  Resolves: RHEL-127721
  - Allow stalld map sysfs files
  Resolves: RHEL-135512
  - Allow aide get attributes of a filesystem with extended attributes
  Resolves: RHEL-121479
  - Label miscellaneous /dev/papr-* devices
  Resolves: RHEL-129839
  - Allow KDE Plasma Login Manager to function as a display manager
  Resolves: RHEL-135676
  - Update specfile trigger for openwsmand
  Resolves: RHEL-133024


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.15-1
changelog:
  - Allow hostapd write to socket files in /tmp
  Resolves: RHEL-77047
  - Allow stap server read virtual memory sysctls
  Resolves: RHEL-114104
  - Allow sshd-session inherit limits from its parent process
  Resolves: RHEL-136673
  - Allow sshd noatsecure on sshd-session execution
  Resolves: RHEL-138247
  - Allow sshd-net read and write to sshd vsock socket
  Related: RHEL-138247


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.16-1
changelog:
  - Allow sshd-session inherit limits from its parent sshd process
  Resolves: RHEL-136673
  - Revert "Allow sshd-session inherit limits from its parent process"
  Resolves: RHEL-136673
  - Allow tlshd write generic certificates
  Resolves: RHEL-123737
  - Allow systemd-hostnamed to create its Varlink socket
  Resolves: RHEL-139385
  - Update gpg_role() interface with unix_stream_socket permissions
  Resolves: RHEL-128555
  - Label /etc/aliases.cdb with etc_aliases_t
  Resolves: RHEL-109976
  - Add aliases.lmdb to mta_filetrans_named_content()
  Resolves: RHEL-140884
  - Update policy for bootupd
  Resolves: RHEL-141391


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.17-1
changelog:
  - Allow rhsmcertd read anaconda run files
  Resolves: RHEL-141391
  - Allow mdadm to use CAP_BPF during RAID monitoring
  Resolves: RHEL-135765
  - Allow mdadm the CAP_SYS_PTRACE capability
  Resolves: RHEL-135765
  - Allow staff and sysadm execute iotop using sudo
  Resolves: RHEL-134940
  - Allow kernel_t to read/write all domains' pipes
  Resolves: RHEL-124442
  - Allow nfsd_t domain setuid and setgid capability for rpc.mountd
  Resolves: RHEL-148107


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.18-1
changelog:
  - Allow NetworkManager list bpf directories
  Resolves: RHEL-142171
  - Dontaudit systemd-generator connect to sssd over a unix stream socket
  Resolves: RHEL-114886
  - Allow pkcsslotd read files in /proc and /sys
  Resolves: RHEL-130812
  - Allow pkcsslotd map its private tmpfs files
  Resolves: RHEL-130812
  - Allow tlshd communication to unconfined_t over a tcp socket
  Resolves: RHEL-125106
  - Label /run/insights-client.ppid with insights_client_run_t
  Resolves: RHEL-146687
  - Allow NM nvme dispatcher script start systemd services
  Resolves: RHEL-140760
  - Allow tlshd write generic certificate dirs
  Resolves: RHEL-127023
  - Allow aide get attributes of tmpfs and devtmpfs filesystems
  Resolves: RHEL-121479
  - Allow plasma login manager stop login services
  Resolves: RHEL-140911
  - Rebuild selinux policy after installation of the extra package
  Resolves: RHEL-135875
  Resolves: RHEL-143926
  - Move triggerin scriptlets to the parent packages
  Resolves: RHEL-141813
  - Rebuild policy before running {binsbin|varrun}-convert.sh
  Resolves: RHEL-141813


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-11
changelog:
  - passwd.c: lock, open, close and unlock passwd database
    Resolves: RHEL-151055
    Resolves: RHEL-150955


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Andreas Schneider <asn@redhat.com> - 1.4.0-1
changelog:
  - Update to version 1.4.0
    * https://gitlab.com/cwrap/socket_wrapper/-/blob/socket_wrapper-1.4.0/CHANGELOG


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Jitka Plesnikova <jplesnik@redhat.com> - 4.2.1-1
changelog:
  - Resolves: RHEL-32325
  - 4.2.1 bump
  - Fix gcc's -Wformat-security warning in R Raise function
  - OCaml 5.2.0 ppc64le fix
  - Add support for Python 3.13


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.1-4
changelog:
  - Fix memory/resource leaks, insufficient memory allocations and
    variable declarations without initializer
    Resolves: RHEL-43595


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Andreas Schneider <asn@redhat.com> - 1.3.0-1
changelog:
  - Update to version 1.3.0
    o https://gitlab.com/cwrap/uid_wrapper/-/blob/uid_wrapper-1.3.0/CHANGELOG


author: Packit <hello@packit.dev> - 0.17.17-1
changelog:
  - Fix race with worker thread accessing $UMOCKDEV_DIR
  - Disable -Wincompatible-function-pointer-types for clang


author: Packit <hello@packit.dev> - 0.17.18-1
changelog:
  - preload: Don't read udev cache data from system (thanks Bastien Nocera)
  - spec: Update License: to SPDX format
  - Various test fixes


author: Packit <hello@packit.dev> - 0.18.0-1
changelog:
  - Record and restore SELinux context for mocked /dev nodes
  - preload: wrap fstatfs() and statfs() on musl
  - Fix build with meson 1.4


author: Packit <hello@packit.dev> - 0.18.1-1
changelog:
  - preload: Provide wrappers for functions specific to 64-bit time_t (thanks Steve Langasek)
  - preload: Fix building with _FILE_OFFSET_BITS (thanks Zixing Liu and Steve Langasek)


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Michal Hlavinka <mhlavink@redhat.com> - 1.6.2-58
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-1
changelog:
  - Rebased to virt-manager-5.1.0 (RHEL-119228)
  - The rebase also fixes the following bugs:
      RHEL-105818


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.10.0-5
changelog:
  - Rebase to virt-v2v 2.10.0
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956
  - Remove reduce-memory-pressure=on as workaround for Dell Powermax 8000
    resolves: RHEL-135617
  - Hard depend on libnbd 1.24
    resolves: RHEL-140894
  - Add documentation about BitLocker Recovery
    resolves: RHEL-103915
  - Fix regression when converting vmx+ssh with snapshots
    resolves: RHEL-102938
  - Expose XFS version in virt-v2v-inspector
    resolves: RHEL-144075
  - Fix Debian 12 UEFI conversions
    resolves: RHEL-144467
  - Fix import when datastore name has characters like '+'
    resolves: RHEL-133729
  - Replace /etc/crypttab /dev/sdX with UUID
    resolves: RHEL-93583
  - Replace '/' in output name with '_'
    resolves: RHEL-136479


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: José Expósito <jexposit@redhat.com> - 1.20.0-6
changelog:
  - Rebuilt to include the package in CRB. See:
    https://bugzilla.redhat.com/show_bug.cgi?id=2309121
    https://issues.redhat.com/browse/RHEL-57593
    https://issues.redhat.com/browse/ENGCMP-4434


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


