# changelog

author: Jan Stancek <jstancek@redhat.com> [6.12.0-38.el10]
changelog:
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_reset() (Cindy Lu) [RHEL-56981]
  - virtio_net: ensure netdev_tx_reset_queue is called on tx ring resize (Cindy Lu) [RHEL-56981]
  - virtio_ring: add a func argument 'recycle_done' to virtqueue_resize() (Cindy Lu) [RHEL-56981]
  - virtio_net: correct netdev_tx_reset_queue() invocation point (Cindy Lu) [RHEL-56981]
  - intel_idle: add Granite Rapids Xeon D support (David Arcari) [RHEL-68122]
  - sched/dlserver: Fix dlserver time accounting (Phil Auld) [RHEL-68342]
  - sched/dlserver: Fix dlserver double enqueue (Phil Auld) [RHEL-68342]
  - sched/fair: Fix NEXT_BUDDY (Phil Auld) [RHEL-68342]
  - sched/fair: Fix sched_can_stop_tick() for fair tasks (Phil Auld) [RHEL-68342]
  - sched/eevdf: More PELT vs DELAYED_DEQUEUE (Phil Auld) [RHEL-68342]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-39.el10]
changelog:
  - platform/x86/intel/pmc: Disable C1 auto-demotion during suspend (Steve Best) [RHEL-66570]
  - platform/x86/intel/pmc: Refactor platform resume functions to use cnl_resume() (Steve Best) [RHEL-66570]
  - redhat/configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen) [RHEL-51429]
  - bnxt_en: Unregister PTP during PCI shutdown and suspend (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Refactor bnxt_ptp_init() (Michal Schmidt) [RHEL-54644 RHEL-69499]
  - bnxt_en: Fix receive ring space parameters when XDP is active (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Fix queue start to update vnic RSS table (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Set backplane link modes correctly for ethtool (Michal Schmidt) [RHEL-54644]
  - bnxt_en: Reserve rings after PCIe AER recovery if NIC interface is down (Michal Schmidt) [RHEL-54644]
  - bnxt_en: use irq_update_affinity_hint() (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Support unset l4proto on ip4/ip6 ntuple rules (Michal Schmidt) [RHEL-54644]
  - bnxt_en: ethtool: Remove ip4/ip6 ntuple support for IPPROTO_RAW (Michal Schmidt) [RHEL-54644]
  - s390/cio: Externalize full CMG characteristics (Mete Durlu) [RHEL-24140]
  - s390/pci: Expose FIDPARM attribute in sysfs (Mete Durlu) [RHEL-71374]
  - perf machine: Initialize machine->env to address a segfault (Michael Petlan) [RHEL-70278]
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar) [RHEL-70863]
  - rtla/timerlat: Fix histogram ALL for zero samples (Tomas Glozar) [RHEL-72691]
  - s390/pci: Fix leak of struct zpci_dev when zpci_add_device() fails (Mete Durlu) [RHEL-24143]
  - s390/pci: Ignore RID for isolated VFs (Mete Durlu) [RHEL-24143]
  - s390/pci: Use topology ID for multi-function devices (Mete Durlu) [RHEL-24143]
  - s390/pci: Sort PCI functions prior to creating virtual busses (Mete Durlu) [RHEL-24143]


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Lukas Javorsky <ljavorsk@redhat.com> - 3.7.7-1
changelog:
  - Rebase to version 3.7.7
  - Fixing SAST issues, accepted by upstream
  - Resolves: RHEL-39391 RHEL-67895


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.1-1
changelog:
  - buildah-1.37.1-1.el10
  - update to https://github.com/containers/buildah/releases/tag/v1.37.1
  - Related: RHEL-34195


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Eduard Abdullin <eabdullin@almalinux.org> - 1.79.0-3.alma.2
changelog:
  - Set target_cpu=x86-64-v2 for x86_64_v2 arch in build_rustflags macro
  - Set RUSTC_TARGET_CPU_X86_64 as x86-64-v2 for x86_64_v2 arch


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.2 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Workaround for GFX11.5 export priority (RHEL-49746)


author: Nikita Popov <npopov@redhat.com> - 19.1.7-1
changelog:
  - Update to LLVM 19.1.7 (RHEL-57456)
  - Remove llvm18 compat package (RHEL-57457)
  - Remove generated html content from llvm-doc subpackage (RHEL-58900)
  - Enable LLVM_ENABLE_ZSTD=ON (RHEL-70325)


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-1
changelog:
  - composefs-1.0.5-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.0.6-1
changelog:
  - update to the latest upstream release
    https://github.com/containers/composefs/releases/tag/v1.0.6 Related:
    RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 1.0.7-1
changelog:
  - composefs-1.0.7-1.el10
  - update to https://github.com/containers/composefs/releases/tag/v1.0.7
  - Related: RHEL-60292


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.11-1
changelog:
  - conmon-2.1.11-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.11
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.12-1
changelog:
  - conmon-2.1.12-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.12
  - Related: RHEL-34195


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Joseph Myers <josmyers@redhat.com> - 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/88313, c++/96097,
  	c++/112288, c++/115296, c++/115361, c++/115656, c++/115987,
  	c++/116071, c++/116219, c++/116223, c++/116276, c++/116320,
  	c++/116327, c++/116369, c++/116384, c++/116418, c++/116424,
  	c++/116449, c++/116476, c++/116492, c++/116534, c++/116567,
  	c++/116606, c++/116636, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/79685,
  	fortran/84868, fortran/100273, fortran/108889, fortran/116530,
  	ipa/109985, ipa/115815, ipa/116410, jit/117275, libstdc++/37475,
  	libstdc++/108619, libstdc++/113663, libstdc++/116038,
  	libstdc++/116159, libstdc++/116381, libstdc++/116529,
  	libstdc++/116549, libstdc++/116641, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	libstdc++/117321, libstdc++/117406, lto/116361, lto/116614,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, middle-end/117354,
  	rtl-optimization/116783, rtl-optimization/117327, sanitizer/117209,
  	target/85624, target/112108, target/113384, target/115464,
  	target/115860, target/116007, target/116033, target/116043,
  	target/116174, target/116189, target/116237, target/116287,
  	target/116295, target/116390, target/116407, target/116415,
  	target/116512, target/116617, target/116627, target/116738,
  	target/116839, target/116883, target/116921, target/116953,
  	target/116962, target/117116, target/117159, target/117240,
  	target/117296, target/117318, testsuite/70150, testsuite/116238,
  	tree-optimization/107467, tree-optimization/113281,
  	tree-optimization/116156, tree-optimization/116166,
  	tree-optimization/116224, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116501,
  	tree-optimization/116585, tree-optimization/116610,
  	tree-optimization/116768, tree-optimization/116850,
  	tree-optimization/116879, tree-optimization/116907,
  	tree-optimization/116982, tree-optimization/116990,
  	tree-optimization/117041, tree-optimization/117104,
  	tree-optimization/117287
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Petr Pisar <ppisar@redhat.com> - 1.1.2-3
changelog:
  - Fix a file descriptor and a memory leak in an error path of
    cr_detect_compression() (RHEL-45645)


author: Jindrich Novy <jnovy@redhat.com> - 1.14.4-1
changelog:
  - crun-1.14.4-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.14.4
  - Resolves: RHEL-34649 RHEL-30621


author: Jindrich Novy <jnovy@redhat.com> - 1.16-1
changelog:
  - crun-1.16-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.16
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.16.1-1
changelog:
  - crun-1.16.1-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.16.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.17-1
changelog:
  - crun-1.17-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.17
  - Related: RHEL-58992


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65464)
  - Fix signal handling at exit
  - Add emacs-nw and emacs-gtk+x11 to supported emacs flavors
  - Minor edits in the rpm scripts
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-51349 Cups browsing with 'Autoclustering on' cannot find printer clusters for HA due incorrect orientation-requested-default


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-7
changelog:
  - CVE-2024-47176 cups-browsed: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source
  - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-4
changelog:
  - RHEL-54297 cups source rpm doesn't actually build lspp support
  - RHEL-49447 Fix garbage uri when adding discovered print in web ui


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.10-8
changelog:
  - RHEL-45525 cups-2.4.10-2.el10: RHEL SAST Automation: address 1 High impact true positive(s)
  - RHEL-60354 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file


author: Pavol Zacik <pzacik@redhat.com> - 1:2.4.9-1
changelog:
  - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
  - RHEL-25804 Rebase CUPS to next upstream version - 2.4.9


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Filip Janus <fjanus@redhat.com> - 2.1.28-21
changelog:
  - Remove BerkeleyDB converting tool. It was intended to be removed in
    RHEL10. Because There is no instance of BerkeleyDB in RHEL10/c10s
    Resolves: RHEL-43136


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Andrew Hughes <gnu.andrew@redhat.com> - 11.5.4-2
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54649


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.21-14
changelog:
  - fix CVE-2024-23185: very large headers can cause resource exhaustion
    when parsing message (RHEL-55218)
  - fix CVE-2024-23184: using a large number of address headers may trigger
    a denial of service (RHEL-55205)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-12
changelog:
  - dtc-pylibfdt-libfdt.i-Use-SWIG_AppendOutput.patch [RHEL-64318 RHEL-65448]
  - dtc-Disable-problematic-waring-flags.patch [RHEL-64318 RHEL-65448]
  - Resolves: RHEL-64318
    ([RHEL10][CS10] dtc fails to build with Swig 4.3.0)
  - Resolves: RHEL-65448
    ([RHEL10][CS10][FTBFS] dtc fails to build on CS10 and RHEL10)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.13.1-7
changelog:
  - lib/all agents: use r"" to avoid SyntaxWarnings 
    Resolves: RHEL-35663
  - fix pycurl bundled path
    Resolves: RHEL-35986


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-1
changelog:
  - new upstream release
    Resolves: RHEL-65332
  - ha-cloud-support: add awscli2 dependency
    Resolves: RHEL-60021
  - fence_bladecenter fix SyntaxWarning: invalid escape sequence '\s'
    Resolves: RHEL-57063
  - build: remove python-poetry-core BuildRequires
    Resolves: RHEL-60893


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Resolves: RHEL-64749


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Ondrej Holy <oholy@redhat.com> - 2:3.5.1-1
changelog:
  - Update to 3.5.1 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Ondřej Pohořelský <opohorel@redhat.com> - 2.45.2-1
changelog:
  - update to 2.45.2
  - add glibc-utils BuildRequires
  - build docs with asciidoc instead of a asciidoctor
  - drop git-p4 subpackage
  - Resolves: RHEL-45572, RHEL-45215


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Arjun Shankar <arjun@redhat.com> - 2.39-16
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 7f9f25f255ee2c00178779fbce502f4b94b848b9:
  - Linux: Include <dl-symbol-redir-ifunc.h> in dl-sysdep.c
  - x86: Properly set x86 minimum ISA level [BZ #31883]
  - x86: Properly set MINIMUM_X86_ISA_LEVEL for i386 [BZ #31867]
  - localedata: ssy_ER: Fix syntax error
  - malloc: New test to check malloc alternate path using memory obstruction
  - malloc: Improve aligned_alloc and calloc test coverage.
  - malloc/Makefile: Split and sort tests
  - x86/cet: fix shadow stack test scripts


author: Arjun Shankar <arjun@redhat.com> - 2.39-21
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 4bdcc1963bc2b5ba5f8e319e402d9eb2cb6096c1:
  - manual: make setrlimit() description less ambiguous
  - manual/stdio: Clarify putc and putwc
  - malloc: add multi-threaded tests for aligned_alloc/calloc/malloc
  - malloc: avoid global locks in tst-aligned_alloc-lib.c
  - resolv: Track single-request fallback via _res._flags (bug 31476)
  - resolv: Do not wait for non-existing second DNS response after error (bug 30081)
  - resolv: Allow short error responses to match any query (bug 31890)
  - elf: Fix localplt.awk for DT_RELR-enabled builds (BZ 31978)
  - Fix usage of _STACK_GROWS_DOWN and _STACK_GROWS_UP defines [BZ 31989]
  - Linux: Make __rseq_size useful for feature detection (bug 31965)
  - elf: Make dl-rseq-symbols Linux only
  - nptl: fix potential merge of __rseq_* relro symbols
  - s390x: Fix segfault in wcsncmp [BZ #31934]
  - stdlib: fix arc4random fallback to /dev/urandom (BZ 31612)
  - math: Provide missing math symbols on libc.a (BZ 31781)
  - math: Fix isnanf128 static build (BZ 31774)
  - math: Fix i386 and m68k exp10 on static build (BZ 31775)
  - math: Fix i386 and m68k fmod/fmodf on static build (BZ 31488)
  - posix: Fix pidfd_spawn/pidfd_spawnp leak if execve fails (BZ 31695)


author: Florian Weimer <fweimer@redhat.com> - 2.39-22
changelog:
  - Support clearing options in /etc/resolv.conf, RES_OPTIONS with a - prefix
  - Introduce the strict-error/RES_STRICTERR stub resolver option (RHEL-18039)


author: Arjun Shankar <arjun@redhat.com> - 2.39-29
changelog:
  - Sync with upstream branch release/2.39/master,
    commit dcaf51b41e259387602774829c45222d0507f90a:
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - Make tst-strtod-underflow type-generic
  - Add crt1-2.0.o for glibc 2.0 compatibility tests
  - Add tests of more strtod special cases
  - Add more tests of strtod end pointer
  - Make tst-strtod2 and tst-strtod5 type-generic
  - powerpc64le: Build new strtod tests with long double ABI flags (bug 32145)
  - Do not set errno for overflowing NaN payload in strtod/nan (bug 32045)
  - Improve NaN payload testing
  - Make __strtod_internal tests type-generic
  - Fix strtod subnormal rounding (bug 30220)
  - More thoroughly test underflow / errno in tst-strtod-round
  - Test errno setting on strtod overflow in tst-strtod-round
  - Add tests of fread
  - stdio-common: Add new test for fdopen
  - libio: Attempt wide backup free only for non-legacy code
  - debug: Fix read error handling in pcprofiledump
  - elf: Fix tst-dlopen-tlsreinit1.out test dependency
  - elf: Avoid re-initializing already allocated TLS in dlopen (bug 31717)
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Support recursive use of dynamic TLS in interposed malloc
  - nptl: Use <support/check.h> facilities in tst-setuid3
  - posix: Use <support/check.h> facilities in tst-truncate and tst-truncate64
  - ungetc: Fix backup buffer leak on program exit [BZ #27821]
  - ungetc: Fix uninitialized read when putting into unused streams [BZ #27821]
  - Make tst-ungetc use libsupport
  - stdio-common: Add test for vfscanf with matches longer than INT_MAX [BZ #27650]
  - support: Add FAIL test failure helper
  - string: strerror, strsignal cannot use buffer after dlmopen (bug 32026)
  - Define __libc_initial for the static libc
  - x86: Fix bug in strchrnul-evex512 [BZ #32078]
  - Adjust check-local-headers test for libaudit 4.0
  - x32/cet: Support shadow stack during startup for Linux 6.10
  - x86-64: Remove sysdeps/x86_64/x32/dl-machine.h
  - support: Add options list terminator to the test driver
  - manual/stdio: Further clarify putc, putwc, getc, and getwc
  - Fix name space violation in fortify wrappers (bug 32052)
  - resolv: Fix tst-resolv-short-response for older GCC (bug 32042)
  - Add mremap tests
  - mremap: Update manual entry
  - linux: Update the mremap C implementation [BZ #31968]
  - Enhanced test coverage for strncmp, wcsncmp
  - Enhance test coverage for strnlen, wcsnlen


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: eabdullin <ed.abdullin.1@gmail.com> - 47.1-2.alma.1
changelog:
  - AlmaLinux changes: Use AlmaLinux icon as activities button Use unbranded
    illustrations Fix Firefox desktop filename in favorites


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-10
changelog:
  - Resolves RHEL-67042: update selinux policy for valkey datasource
  - Resolves RHEL-61900: allow mssql datasource in selinux policy


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-12
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Clean up the grafana.ini file


author: Sam Feifer <sfeifer@redhat.com> - 10.2.6-13
changelog:
  - Resolves RHEL-68657: Update configurations to allow loading the valkey datasource
  - Revert changes that break older custom dashboards


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-17
changelog:
  - Allows for postgreSQL datasource in selinux policy
  - grafana-cli wrapper script now allows for the gid to be 0


author: Sam Feifer <sfeifer@redhat.com> 5.1.1-4
changelog:
  - Move location of plugin from /usr/share/... to /usr/libexec/... because there is a binary executable


author: Sam Feifer <sfeifer@redhat.com> - 5.2.1-1
changelog:
  - Resolves RHEL-67043: update to 5.2.0/1 tagged upstream community sources, see CHANGELOG
  - Resolves RHEL-16337: added PCP Vector Top Consumers dashboard in new release


author: Wim Taymans <wtaymans@redhat.com> - 1.24.10-1
changelog:
  - Update to 1.24.10
    Resolves: RHEL-70408, RHEL-71032, RHEL-71020, RHEL-70996
    Resolves: RHEL-70960, RHEL-70947, RHEL-70934


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Tomas Popela <tpopela@redhat.com> - 3.24.43-2
changelog:
  - Don't require package gtk-immodules-imsettings as it isn't part of
    RHEL 10 (it's built from GTK 2 SRPM which isn't presented)
  - Resolves: RHEL-38223


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.1-1
changelog:
  - New stable version 1.52.1
  - Rebase on top of patches from RHEL 9.5
  - Reboot Windows between each firstboot script to improve reliability
    resolves: RHEL-56319
  - customize: Implement --inject-blnsvr operation
    resolves: RHEL-56330
  - Add support for nbd+unix:// URIs
    resolves: RHEL-56332


author: Richard W.M. Jones <rjones@redhat.com> - 1.52.2-2
changelog:
  - Rebase to guestfs-tools 1.52.2
    resolves: RHEL-56812
  - Replace Jansson with json-c
    resolves: RHEL-65295


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - gvisor-tap-vsock-0.7.5-1.el10
  - update to https://github.com/containers/gvisor-tap-
    vsock/releases/tag/v0.7.5
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-67315


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-58990


author: Joe Orton <jorton@redhat.com> - 2.4.59-3.1
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.61-1
changelog:
  - new version 2.4.61
  - Resolves: RHEL-45753 - httpd: Potential SSRF in 
    mod_rewrite (CVE-2024-39573)
  - Resolves: RHEL-45757 - httpd: null pointer dereference in
    mod_proxy (CVE-2024-38477)
  - Resolves: RHEL-45776 - httpd: Improper escaping of output in
    mod_rewrite (CVE-2024-38475)
  - Resolves: RHEL-45791 - httpd: Encoding problem in 
    mod_proxy (CVE-2024-38473)
  - Resolves: RHEL-45811 - httpd: Substitution encoding issue in 
    mod_rewrite (CVE-2024-38474)
  - Resolves: RHEL-46051 - httpd: Security issues via backend applications 
    whose response headers are malicious or exploitable (CVE-2024-38476)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-53632 - RFE: httpd, add IP_FREEBIND support for Listen
  - Resolves: RHEL-53722 - [RFE] ProxyWebsocketIdleTimeout from
    httpd mod_proxy_wstunnel


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.47.20220731git
changelog:
  - hpvd-Add-support-for-newer-fcopy-UIO-hyperv-daemons-modul.patch [RHEL-44617]
  - hpvd-Update-main-package-dep-on-hypervfcopyd-to-be-arch-d.patch [RHEL-44617]
  - hpvd-Particularize-hypervfcopyd-service-requirements.patch [RHEL-44617]
  - Resolves: RHEL-44617
    ([RHEL-10] Add support for fcopy UIO userland module in hyperv-daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.49.20220731git
changelog:
  - hpvd-Use-NetworkManager-information-to-report-DHCP-settin.patch [RHEL-65434]
  - hpvd-Use-NetworkManager-information-to-report-DNS-setting.patch [RHEL-65434]
  - Resolves: RHEL-65434
    ([Hyper-V][RHEL-10]KVP daemon inspects /etc/sysconfig/network-scripts/ifcfg-* files to get DHCP information)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-16
changelog:
  - tests: Update packages with comps-f41
  - Add base-graphical
  - Add fonts default
  - Delete libcanberra-gtk3, libproxy-duktape
  - Delete tmt for RHEL CI


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-18
changelog:
  - Update CI for RHEL10
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-7
changelog:
  - Resolves #2297147 Add directory datadir/GConf/gsettings
  - Resolves #2297735 Move ibus.conf to ibus-xinit sub package
  - Fix memory leaks in error handlings


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31~beta1-11
changelog:
  - Disable ibus-panel rich condition in RHEL
  - Delete ibus-xx-desktop-testing-mutter.patch
  - Delete libXtst-devel dependency
  - Replace gnome-terminal with ptyxis
  - Install gnome-desktop-testing for RHEL
  - Delete xorg-x11-server-Xvfb gnome-session-xsession
  - Delete build packages for gnome-desktop-testing for RHEL
  - Move evince gnome-logs gvfs-fuse gvfs-gphoto2 gvfs-smb to Fedora specific
  - Fix CI test case conditions
  - Add no-overview@fthx until gnome-shell-extension-no-overview is available
  - Add gnome-headless-session@.service until GDM will provide it


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.31-1
changelog:
  - Bump to 1.5.31
  - Delete RHEL specific packages
  - Update installed packages in CI
  - configure option for Flatpak build
  - Move xinit post scripts
  - Require gnome-shell-extension-no-overview in RHEL


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-5
changelog:
  - Resolves: RHELMISC-5984 Fix CI tests better: Check for existence of
    directory instead of checking Fedora version.


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Andrew Hughes <gnu.andrew@redhat.com> - 5.5.0-3
changelog:
  - Rebuilt with java-21-openjdk as default JDK:
    https://issues.redhat.com/browse/RHEL-34597
  - Resolves: RHEL-54331


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2.19.0-1
changelog:
  - Rebase to https://github.com/coreos/ignition/releases/tag/v2.19.0
  - Update ignition-edge commit https://github.com/fedora-iot/ignition-edge/pull/2


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
  - Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests


author: Julien Rische <jrische@redhat.com> - 4.12.1-1
changelog:
  - Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-2
changelog:
  - Resolves: RHEL-46607 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46606 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-46605 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-46592 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
  - Resolves: RHEL-46556 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-42705 PSKC.xml issues with ipa_otptoken_import.py


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-3
changelog:
  - Resolves: RHEL-49452 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-49433 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases
  - Resolves: RHEL-49432 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-49413 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-47157 ipa-migrate -V options fails to display version
  - Resolves: RHEL-47148 Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-40892 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-4
changelog:
  - Resolves: RHEL-53501 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52305 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52223 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51937 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50805 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-49592 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install
  - Resolves: RHEL-4879 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54545 Covscan issues: Resource Leak
  - Resolves: RHEL-54304 support for python cryptography 43.0.0
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-46897 With unreachable AD, ipa trust returns an internal error


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-2
changelog:
  - Resolves: RHEL-47294 SID generation task is failing when SELinux is in Enforcing mode
  - Resolves: RHEL-56472 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-56917 RFE add a tool to quickly detect and fix issues with IPA ID ranges
  - Resolves: RHEL-56965 Backport test fixes in python3-ipatests
  - Resolves: RHEL-58067 ipa replication installation fails in FIPS mode on rhel10
  - Resolves: RHEL-59265 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
  - Resolves: RHEL-59266 Also enable SSSD's ssh service when enabling sss_ssh_knownhosts


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-4
changelog:
  - Related: RHEL-59777 Rebase Samba to the latest 4.21.x release
  - Resolves: RHEL-59659 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-61636 Uninstall ACME separately during PKI uninstallation
  - Resolves: RHEL-61723 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-63325 Last expired OTP token would be considered as still assigned to the user


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-66599 vault-add fails in FIPS mode
  - Resolves: RHEL-66598 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-66597 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66595 Sentences truncated in man pages
  - Resolves: RHEL-66592 IDP configuration in the IdM WebUI shows Organization is required
  - Resolves: RHEL-65650 ipa-server-install with setup-dns fails 'job for ipa.service failed because the control process exited with error code'


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-69300 Support GSSAPI in Cockpit on IPA servers
  - Resolves: RHEL-68447 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-57674 Use RSNv3 and enable cert pruning by default in RHEL 10.0


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-70759 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70477 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-70253 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken
  - Resolves: RHEL-69926 add support for python cryptography 44.0.0
  - Resolves: RHEL-69635 All user groups are not being included during HSM token validation


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Brian C. Lane <bcl@redhat.com> - 1.2.5-1
changelog:
  - New Version 1.2.5 (bcl)
    Resolves: RHEL-45005
  - testpyisomd5sum.py: Use a consistent iso size (bcl)
  - Remove quiet from iso creation, size seems wrong (bcl)
  - workflows: Move to Fedora 39 and checkout v4 (bcl)
  - Add support for riscv64 (davidlt)
  - workflows: Update to use actions/checkout (bcl)
  - Add a GitHub Action to run tests (bcl)
  - Add mips64 (wangray1021)
  - testpyisomd5sum.py: Support genisoimage, Python 2 (ryan)


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-45217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Define portablesuffix according to whether pkgos is defined or not
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Related: RHEL-45217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-3
changelog:
  - Fix gating.yaml to reference RHEL 10
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Resolves: RHEL-34597
  - Resolves: RHEL-51617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to local inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-52723


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32427


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45357
  - Resolves: RHEL-46026


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45357
  - Resolves: RHEL-52735
  - Related: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47024


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.1.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-62239
  - Resolves: RHEL-62241


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61276


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61276


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61276


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.5.0.11-4
changelog:
  - Revert incorrect automated Release change from 1:21.0.5.0.11-2.1
  - Set rpmrelease to 4
  - Remove copy-jdk-configs logic
  - Remove alternatives removal special handling
  - Move postun alternatives logic to preun
  - Remove --family arguments to alternatives --install
  - Precompute alternative priorities at build time
  - Remove extra newlines
  - Inline .gz for alternatives slave man pages
  - Unwrap alternatives --install lines
  - Remove set_if_needed_alternatives
  - Unroll alternatives --install loops
  - Remove exit 0 from alternatives scriptlets
  - Move alternatives installation from posttrans to post
  - Replace jrelnk alternative with sdkdir
  - Remove full version from uniquejavadocdir
  - Remove full version from uniquesuffix
  - Fix classes.jsa and classes_nocoops.jsa file-listed-twice warnings
  - Eliminate devel "failed to link [/usr/lib/jvm/java-21-openjdk] exists and it is not a symlink" warning
  - Eliminate javadoc-zip "failed to link [/usr/share/javadoc/java-21-openjdk.zip] exists and it is not a symlink" warning
  - Eliminate javadoc "failed to link [/usr/share/javadoc/java-21-openjdk] exists and it is not a symlink" warning
  - Take ownership of versioned jvmdir in javadoc, javadoc-zip subpackages
  - Make headless own /usr/share/doc/java-21-openjdk
  - Make javadoc-zip own /usr/share/javadoc/java-21-openjdk
  - Delete old conflicting links in pretrans for headless, javadoc and javadoc-zip
  - Use compatiblename not name in uniquejavadocdir and uniquesuffix
  - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps
  - Use RPM global macro for man page file extension and unwrap --slave lines
  - Comment on alternatives removal in preun and RPM scriptlet idiom
  - Remove unused family macros
  - Document priority_for
  - Consistently end scriptlets with exit 0
  - Resolves: RHEL-71920
  - Resolves: RHEL-71954
  - Resolves: RHEL-69321
  - Resolves: RHEL-69995
  - Resolves: RHEL-71924
  - Resolves: RHEL-68848


author: Martin Osvald <mosvald@redhat.com> - 2.6.1-4
changelog:
  - Add missing changes to service files so kea starts as non-root
  - Fix startup failures during upgrade due to wrong permissions and
    ownership


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.4-1
changelog:
  - tests: Fix "invalid escape sequence '\#'" warning from Python 3.12 (vtrefny)
  - tests: Fail early when recompilation fails in library_test (vtrefny)
  - lvm-dbus: Replace g_critical calls with bd_utils_log_format (vtrefny)
  - Use log function when calling a plugin function that is not loaded (vtrefny)
  - logging: Default to DEBUG log level if compiled with --enable-debug (vtrefny)
  - nvme: Rework memory allocation for device ioctls (tbzatek)
  - packit: Add configuration for downstream builds (vtrefny)
  - fs: correct btrfs set label description (jvanderwaa)
  - fs: Disable progress for ntfsresize (vtrefny)
  - part: Do not open disk read-write for read only operations (vtrefny)
  - ci: Bump actions/checkout from v3 to v4 (vtrefny)
  - plugins: btrfs: use g_autofree where possible for g_free (jvanderwaa)
  - plugins: use g_autofree for free'ing g_char's (jvanderwaa)
  - spec: Move obsoleted devel subpackages to libblockdev-devel (vtrefny)
  - spec: Obsolete vdo plugin packages (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-1
changelog:
  - tests: Skip some checks for btrfs errors with btrfs-progs 6.6.3 (vtrefny)
  - Fix missing progress initialization in bd_crypto_luks_add_key (vtrefny)
  - fs: Report reason for open() and ioctl() failures (tbzatek)
  - utils: Add expected printf string annotation (tbzatek)
  - lvm-dbus: Avoid using already-freed memory (tbzatek)
  - lvm-dbus: Fix leaking error (tbzatek)
  - python: Add a deepcopy function to our structs (vtrefny)
  - tests: Remove unreliable nvme attribute checks (tbzatek)
  - tests: Use BDPluginSpec constructor in LVM DBus plugin tests (vtrefny)
  - tests: Avoid setting up intermediary loop device for the nvme target (tbzatek)
  - tests: Default to /tmp for create_sparse_tempfile() (tbzatek)
  - part: Fix potential double free when getting parttype (vtrefny)
  - Mark NVDIMM plugin as deprecated since 3.1 (vtrefny)
  - tests: Remove some obsolete rules to skip tests (vtrefny)
  - fs: Add support for getting filesystem min size for NTFS and Ext (vtrefny)
  - fs: Fix allowed UUID for generic mkfs with VFAT (vtrefny)
  - fs: Add a generic function to check for fs info availability (vtrefny)
  - fs: Add a function to check label format for F2FS (vtrefny)
  - swap: Add support for checking label and UUID format (vtrefny)
  - ci: Remove the custom version command for Packit (vtrefny)
  - ci: Manually prepare spec file for Packit (vtrefny)
  - overrides: Remove unused 'sys' import (vtrefny)
  - Add BDPluginSpec constructor and use it in plugin_specs_from_names (vtrefny)
  - Sync spec with downstream (vtrefny)
  - ci: Add an action to compile libblockdev with different compilers (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - libselinux-3.7-3
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - restorecon: Include <selinux/label.h> (RHEL-53852)
  - Fix integer comparison issues when compiling for 32-bit


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-4
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - virt-host-validate: Allow longer list of CPU flags
  - vmx: Be even more lax when trying to comprehend serial ports
  - vmx: Do not require all ID data for VMWare Distributed Switch
  - tests: vhostuser: add virtiofsd json descriptor
  - tests: qemuxmlconf: adjust test case to new virtiofsd
  - qemu: fill capabilities for virtiofsd
  - qemu: do not use deprecated options for new virtiofsd
  - qemu: migration: allow migration for virtiofs
  - virt-host-validate: Drop extra "PASS"
  - qemu: Don't leave beingDestroyed=true on inactive domain


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - qemu: virtiofs: cache: use 'never' instead of 'none'
  - qemu_domain: Strip <acpi/> from s390(x) definitions
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390
  - vsh: Allow vshReadlineInit() to be called multiple times


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-45518, RHEL-49607, RHEL-50968, RHEL-52449, RHEL-54235
      RHEL-55707, RHEL-55749, RHEL-55769, RHEL-56699


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61752)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61752)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61752)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61752)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61752)


author: Jiri Denemark <jdenemar@redhat.com> - 10.9.0-1
changelog:
  - Rebased to libvirt-10.9.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-753, RHEL-62174


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-1
changelog:
  - Rebased to libvirt-10.10.0 (RHEL-50577)
  - The rebase also fixes the following bugs:
      RHEL-58152, RHEL-65187, RHEL-65268, RHEL-66222, RHEL-66223
      RHEL-68066, RHEL-69449


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-2
changelog:
  - util: Fix typo in virNetDevOpenvswitchInterfaceSetQos (RHEL-69840)
  - qemu: tpm: do not update profile name for transient domains (RHEL-69774)
  - qemu: Enable I/O APIC if needed (RHEL-71414)
  - cpu_map: Sort data files in meson.build (RHEL-70129)
  - sync_qemu_models_i386: Update meson.build (RHEL-70129)
  - sync_qemu_models_i386: Generate missing -v1 variants (RHEL-70129)
  - cpu_map: Add 486-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium2-v1 CPU model (RHEL-70129)
  - cpu_map: Add pentium3-v1 CPU model (RHEL-70129)
  - cpu_map: Add coreduo-v1 CPU model (RHEL-70129)
  - cpu_map: Add n270-v1 CPU model (RHEL-70129)
  - cpu_map: Add core2duo-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu32-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm32-v1 CPU model (RHEL-70129)
  - cpu_map: Add qemu64-v1 CPU model (RHEL-70129)
  - cpu_map: Add kvm64-v1 CPU model (RHEL-70129)
  - cpu_map: Add Conroe-v1 CPU model (RHEL-70129)
  - cpu_map: Add Penryn-v1 CPU model (RHEL-70129)
  - cpu_map: Add KnightsMill-v1 CPU model (RHEL-70129)
  - cpu_map: Add athlon-v1 CPU model (RHEL-70129)
  - cpu_map: Add phenom-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G1-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G2-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G3-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G4-v1 CPU model (RHEL-70129)
  - cpu_map: Add Opteron_G5-v1 CPU model (RHEL-70129)
  - cpu_map: Add EPYC-Genoa-v1 CPU model (RHEL-70129)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-3
changelog:
  - qemu: Enable I/O APIC even more frequently (RHEL-71414)
  - cpu_map: Add avx10* CPU features (RHEL-71897)
  - cpu_map: Add GraniteRapids-v2 CPU model (RHEL-71897)
  - cpu_map: Add sha512, sm3, and sm4 CPU features (RHEL-71898)


author: Jiri Denemark <jdenemar@redhat.com> - 10.10.0-4
changelog:
  - conf, docs: Add support for direct and extended tlbflush features (RHEL-73088)
  - qemu: Add support for direct and extended tlbflush features (RHEL-73088)
  - conf: refactor hyperv features formatting (RHEL-73088)
  - conf: Adjust hyperv tlbflush formatting (RHEL-73088)
  - qemu_migration: Do not consider post-copy active in postcopy-recover (RHEL-73699)


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-29893)
  - The rebase also fixes the following bugs:
      RHEL-30177, RHEL-35244, RHEL-39024


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.1-3
changelog:
  - Resolves: RHEL-33742 - Disable ENGINE support by default
  - disable ENGINE support by default
  - add engine bcond


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Jan Macku <jamacku@redhat.com> - 1.27-1
changelog:
  - alternatives: properly handle chars with const in normalize_path
  - alternatives: use exit in main instead of return for critical failures
  - alternatives: fix leak
  - alternatives: fix leak
  - alternatives: fix possible overrun
  - alternatives: fix all the leaks of groups in readConfig
  - alternatives: fix all the leaks of read line in readConfig
  - alternatives: fix leak
  - alternatives: fix memory leak
  - alternatives: fix memory leak
  - alternatives: initialize parameters in main to NULL
  - alternatives: fix memory leak
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Japanese)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Update translation files
  - Translated using Weblate (Japanese)
  - Fix systemd dependency


author: Jan Macku <jamacku@redhat.com> - 1.29-1
changelog:
  - add basic mkosi config
  - remove not used directory from makefile
  - ntsysv: fix leaks
  - leveldb: security_context_t is deprecated
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - leveldb: fix leak
  - chkconfig: fix leak
  - chkconfig: fix leak
  - chkconfig: fix memory leak when deleting a service
  - leveldb: add destructors for service
  - leveldb: fix memory leak
  - leveldb.c: fix memory leak
  - chkconfig: fix leak
  - leveldb: fix memory leak
  - alternatives: ensure the current alt. is freed if parsing fails
  - alternatives: ensure the current group is freed
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Turkish)


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.5
changelog:
  - Build OpenSSH without ENGINE API
    Resolves: RHEL-45507
  - Remove pam_ssh_agent_auth subpackage
    Resolves: RHEL-45002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-5
changelog:
  - Restore GSS connectivity when no hostkeys are present
    Related: RHEL-42635
  - Add missing gsskeyex authentication method
    Related: RHEL-42635
  - "publickey-hostbound@openssh.com" extension makes no sense with GSS
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Update to OpenSSH 9.9p1
    Resolves: RHEL-60564
  - Separate ssh-keysign to a dedicated package
    Resolves: RHEL-62112
  - Use FIPS KEX defaults in FIPS mode
    Resolves: RHEL-58986


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-2
changelog:
  - Resolve memory management issues after rebase
    Related: RHEL-60564
  - Add extra help information on ssh early failure
    Resolves: RHEL-62718


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-3
changelog:
  - Extra help information should not be printed if stderr is not a TTY
    Resolves: RHEL-63061
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-63190


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Align start of PCP services with systemd presets (RHEL-22723)
  - Improved pcp-xsos command line error diagnostics (RHEL-56836)
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57795)
  - Guard against symlink attacks in pmpost program (RHEL-57797)
  - Update to latest stable version of PCP (RHEL-62801)


author: Jan Stancek <jstancek@redhat.com> [6.12.0-40.el10]
changelog:
  - selftests: netfilter: Stabilize rpath.sh (Phil Sutter) [RHEL-71139]
  - redhat/configs: automotive: disable CONFIG_AIO (Davide Caratti) [RHEL-71905]
  - redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-73371]
  - RHEL: Set correct config option for CRYPTO_HMAC_S390 (Mete Durlu) [RHEL-24137]
  - redhat/configs: automotive: disable CONFIG_NET_DROP_MONITOR (Davide Caratti) [RHEL-70868]
  - qed: put cond_resched() in qed_dmae_operation_wait() (CKI Backport Bot) [RHEL-71560]
  - qed: allow the callee of qed_mcp_nvm_read() to sleep (CKI Backport Bot) [RHEL-71560]
  - qed: put cond_resched() in qed_grc_dump_ctx_data() (CKI Backport Bot) [RHEL-71560]
  - qed: make 'ethtool -d' 10 times faster (CKI Backport Bot) [RHEL-71560]
  - x86/sev: Convert shared memory back to private on kexec (Vitaly Kuznetsov) [RHEL-68482]
  - x86/mm: Refactor __set_clr_pte_enc() (Vitaly Kuznetsov) [RHEL-68482]
  - x86/boot: Skip video memory access in the decompressor for SEV-ES/SNP (Vitaly Kuznetsov) [RHEL-68482]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-41.el10]
changelog:
  - netfilter: IDLETIMER: Fix for possible ABBA deadlock (Phil Sutter) [RHEL-70301]
  - tcp: Fix use-after-free of nreq in reqsk_timer_handler(). (Guillaume Nault) [RHEL-73194]
  - netfilter: nf_tables: do not defer rule destruction via call_rcu (Florian Westphal) [RHEL-68691]
  - sched/numa: fix memory leak due to the overwritten vma->numab_state (Phil Auld) [RHEL-67478]
  - netfilter: ipset: Fix for recursive locking warning (Phil Sutter) [RHEL-71827]
  - NFSD: Mark exports of NFS as unsupported (Benjamin Coddington) [RHEL-50656]
  - netdev-genl: Hold rcu_read_lock in napi_get (Paolo Abeni) [RHEL-73205]
  - net: avoid potential UAF in default_operstate() (Paolo Abeni) [RHEL-73205] {CVE-2024-56635}
  - net: defer final 'struct net' free in netns dismantle (Paolo Abeni) [RHEL-73205] {CVE-2024-56658}
  - net: restrict SO_REUSEPORT to inet sockets (Paolo Abeni) [RHEL-73205]
  - Revert "rtnetlink: add guard for RTNL" (Paolo Abeni) [RHEL-73205]
  - netlink: fix false positive warning in extack during dumps (Paolo Abeni) [RHEL-73205] {CVE-2024-53212}
  - tcp: check space before adding MPTCP SYN options (Paolo Abeni) [RHEL-73143]
  - net: fix memory leak in tcp_conn_request() (Paolo Abeni) [RHEL-73143]
  - Revert "udp: avoid calling sock_def_readable() if possible" (Paolo Abeni) [RHEL-73132]
  - netfilter: ipset: Hold module reference while requesting a module (Phil Sutter) [RHEL-69538]
  - redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov) [RHEL-72983]
  - KVM: arm64: Fix S1/S2 combination when FWB==1 and S2 has Device memory type (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Do not allow ID_AA64MMFR0_EL1.ASIDbits to be overridden (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add error handling in vgic_its_cache_translation (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Add tests for MMIO external abort injection (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: selftests: Convert to kernel's ESR terminology (Shaoqin Huang) [RHEL-68039]
  - tools: arm64: Grab a copy of esr.h from kernel (Shaoqin Huang) [RHEL-68039]
  - KVM: selftests: Don't bother deleting memslots in KVM when freeing VMs (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add stronger type-checking to the ITS entry sizes (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Kill VGIC_MAX_PRIVATE definition (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic: Make vgic_get_irq() more robust (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Pass on SVE mapping failures (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't map 'kvm_vgic_global_state' at EL2 with pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Just advertise SEIS as 0 when emulating ICC_CTLR_EL1 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: vgic-its: Add a data length check in vgic_its_save_* (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Don't retire aborted MMIO instruction (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Get rid of userspace_irqchip_in_use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize trap register values in hyp in pKVM (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Initialize the hypervisor's VM state at EL2 (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Refactor kvm_vcpu_enable_ptrauth() for hyp use (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Move pkvm_vcpu_init_traps() to init_pkvm_hyp_vcpu() (Shaoqin Huang) [RHEL-68039]
  - KVM: arm64: Correctly access TCR2_EL1, PIR_EL1, PIRE0_EL1 with VHE (Shaoqin Huang) [RHEL-68039]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-42.el10]
changelog:
  - net: sched: fix erspan_opt settings in cls_flower (Xin Long) [RHEL-73195]
  - KVM: SVM: Allow guest writes to set MSR_AMD64_DE_CFG bits (Vitaly Kuznetsov) [RHEL-71416]
  - redhat/configs: enable ARCH_TEGRA_241_SOC (Mark Salter) [RHEL-67684]
  - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR implementation (Steve Best) [RHEL-68393]
  - net: sysctl: allow dump_cpumask to handle higher numbers of CPUs (Antoine Tenart) [RHEL-73199]
  - net: sysctl: do not reserve an extra char in dump_cpumask temporary buffer (Antoine Tenart) [RHEL-73199]
  - net: sysctl: remove always-true condition (Antoine Tenart) [RHEL-73199]
  - net: tcp: Add noinline_for_tracing annotation for tcp_drop_reason() (Antoine Tenart) [RHEL-73172]
  - compiler_types: Add noinline_for_tracing annotation (Antoine Tenart) [RHEL-73172]
  - net: vxlan: replace VXLAN_INVALID_HDR with VNI_NOT_FOUND (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in encap_bypass_if_local() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_encap_bypass() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_mdb_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add drop reasons support to vxlan_xmit_one() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: use kfree_skb_reason() in vxlan_xmit() (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_set_mac() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_snoop() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: make vxlan_remcsum() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: vxlan: add skb drop reasons to vxlan_rcv() (Antoine Tenart) [RHEL-73172]
  - net: tunnel: make skb_vlan_inet_prepare() return drop reasons (Antoine Tenart) [RHEL-73172]
  - net: tunnel: add pskb_inet_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - net: skb: add pskb_network_may_pull_reason() helper (Antoine Tenart) [RHEL-73172]
  - redhat: Install bpftool into BPF selftests dir (Viktor Malik) [RHEL-73480]
  - redhat: Drop bpftool from kernel spec (Viktor Malik) [RHEL-73480]
  - tools/power turbostat: Add initial support for GraniteRapids-D (Eddie Kovsky) [RHEL-29354]
  - rtc: check if __rtc_read_time was successful in rtc_timer_do_work() (Steve Best) [RHEL-73490] {CVE-2024-56739}
  - powerpc/mm/fault: Fix kfence page fault reporting (Mamatha Inamdar) [RHEL-73630]
  - bonding: Fix feature propagation of NETIF_F_GSO_ENCAP_ALL (CKI Backport Bot) [RHEL-73198]
  - bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features (CKI Backport Bot) [RHEL-73198]
  - net, team, bonding: Add netdev_base_features helper (CKI Backport Bot) [RHEL-73198]
  - bonding: add ESP offload features when slaves support (CKI Backport Bot) [RHEL-73198]
  - Documentation: bonding: add XDP support explanation (CKI Backport Bot) [RHEL-73198]
  - bonding: return detailed error when loading native XDP fails (CKI Backport Bot) [RHEL-73198]


author: Jan Stancek <jstancek@redhat.com> [6.12.0-43.el10]
changelog:
  - net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged (CKI Backport Bot) [RHEL-39340]
  - vfio/pci: Fallback huge faults for unaligned pfn (Alex Williamson) [RHEL-72822]
  - iommu/tegra241-cmdqv: do not use smp_processor_id in preemptible context (Luis Claudio R. Goncalves) [RHEL-74342]
  - net: sched: fix ordering of qlen adjustment (CKI Backport Bot) [RHEL-73395] {CVE-2024-53164}
  - net_sched: sch_fq: don't follow the fast path if Tx is behind now (CKI Backport Bot) [RHEL-73395]
  - s390/uvdevice: Support longer secret lists (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets sysfs support (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Increase indent in IOCTL definitions (Mete Durlu) [RHEL-25204]
  - s390/uvdevice: Add Retrieve Secret IOCTL (Mete Durlu) [RHEL-25204]
  - s390/uv: Retrieve UV secrets support (Mete Durlu) [RHEL-25204]
  - s390/uv: Use a constant for more-data rc (Mete Durlu) [RHEL-25204]
  - s390/uv: Provide host-key hashes in sysfs (Mete Durlu) [RHEL-47110]
  - s390/uv: Refactor uv-sysfs creation (Mete Durlu) [RHEL-47110]
  - net/l2tp: fix warning in l2tp_exit_net found by syzbot (Guillaume Nault) [RHEL-73846]
  - geneve: do not assume mac header is set in geneve_xmit_skb() (Guillaume Nault) [RHEL-73846]
  - net: Fix netns for ip_tunnel_init_flow() (Guillaume Nault) [RHEL-73846]
  - futex: fix user access on powerpc (Waiman Long) [RHEL-70187]
  - x86: fix off-by-one in access_ok() (Waiman Long) [RHEL-70187]
  - futex: improve user space accesses (Waiman Long) [RHEL-70187]
  - s390/pci: Add pci_msg debug view to PCI report (Mete Durlu) [RHEL-24144]
  - s390/debug: Add a reverse mode for debug_dump() (Mete Durlu) [RHEL-24144]
  - s390/debug: Add debug_dump() to write debug view to a string buffer (Mete Durlu) [RHEL-24144]
  - s390/debug: Split private data alloc/free out of file operations (Mete Durlu) [RHEL-24144]
  - s390/debug: Simplify and document debug_next_entry() logic (Mete Durlu) [RHEL-24144]
  - s390/pci: Report PCI error recovery results via SCLP (Mete Durlu) [RHEL-24144]
  - s390/debug: Pass in and enforce output buffer size for format handlers (Mete Durlu) [RHEL-24144]
  - s390/sclp: Allow user-space to provide PCI reports for optical modules (Mete Durlu) [RHEL-71264]


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Alex Laurie <alex.r.laurie@gmail.com> - 24.004.60-13.alma.1
changelog:
  - Almalinux change: Add in the symlink for fedora-gdm-logo.png to
    watermark.png in the spinner theme directory to ensure the AlmaLinux
    watermark is displayed in plymouth.


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-1
changelog:
  - stick to v5.2-rhel upstream branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 6:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Attila Lakatos <alakatos@redhat.com> - 4.0.3-1
changelog:
  - Rebase to 4.0.3
  - Pluginst must have .conf suffix, otherwise skipped
    Resolves: RHEL-58838
  - ausearch checkpoint inode fix
    Resolves: RHEL-62333
  - Audisp-filter: filter audit events and forward them to other plugins
    Resolves: RHEL-5199
  - Log to console when system is halted due to audit not having enough storage
    Resolves: RHEL-990
  - auditctl: remove misleasing error with --input file
    Resolves: RHEL-5200
  - Remove ProtectKernelModules=true from service file
    Resolves: RHEL-59571
  - Update syscall tables to reflect current kernel
    Resolves: RHEL-46969
  - af_unix: Restore old behavior
    Resolves: RHEL-39955
  - Add systemd-tempfiles.d for audit when root fs is read-only
    Resolves: RHEL-45311
  - ausearch fix error reporting
    Resolves: RHEL-32808
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-59561


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as a provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-4.el10
changelog:
  - kvm-accel-kvm-check-for-KVM_CAP_READONLY_MEM-on-VM.patch [RHEL-58928]
  - kvm-hw-s390x-ipl-Provide-more-memory-to-the-s390-ccw.img.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Use-the-libc-from-SLOF-and-remove-s.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Link-the-netboot-code-into-the-main.patch [RHEL-58153]
  - kvm-redhat-Remove-the-s390-netboot.img-from-the-spec-fil.patch [RHEL-58153]
  - kvm-hw-s390x-Remove-the-possibility-to-load-the-s390-net.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Merge-netboot.mak-into-the-main-Mak.patch [RHEL-58153]
  - kvm-docs-system-s390x-bootdevices-Update-the-documentati.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-ISO-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-ECKD-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-SCSI-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-DASD-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Remove-panics-from-Netboot-IPL-path.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Enable-failed-IPL-to-return-after-e.patch [RHEL-58153]
  - kvm-include-hw-s390x-Add-include-files-for-common-IPL-st.patch [RHEL-58153]
  - kvm-s390x-Add-individual-loadparm-assignment-to-CCW-devi.patch [RHEL-58153]
  - kvm-hw-s390x-Build-an-IPLB-for-each-boot-device.patch [RHEL-58153]
  - kvm-s390x-Rebuild-IPLB-for-SCSI-device-directly-from-DIA.patch [RHEL-58153]
  - kvm-pc-bios-s390x-Enable-multi-device-boot-loop.patch [RHEL-58153]
  - kvm-docs-system-Update-documentation-for-s390x-IPL.patch [RHEL-58153]
  - kvm-tests-qtest-Add-s390x-boot-order-tests-to-cdrom-test.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Clarify-alignment-is-in-bytes.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Don-t-generate-TEXTRELs.patch [RHEL-58153]
  - kvm-pc-bios-s390-ccw-Introduce-EXTRA_LDFLAGS.patch [RHEL-58153]
  - kvm-vnc-fix-crash-when-no-console-attached.patch [RHEL-50529]
  - kvm-vfio-migration-Report-only-stop-copy-size-in-vfio_st.patch [RHEL-64308]
  - kvm-vfio-migration-Change-trace-formats-from-hex-to-deci.patch [RHEL-64308]
  - kvm-kvm-Allow-kvm_arch_get-put_registers-to-accept-Error.patch [RHEL-20574]
  - kvm-target-i386-kvm-Report-which-action-failed-in-kvm_ar.patch [RHEL-20574]
  - kvm-target-i386-cpu-set-correct-supported-XCR0-features-.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-do-not-rely-on-ExtSaveArea-for-accelerat.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-return-bool-from-x86_cpu_filter_features.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-add-AVX10-feature-and-AVX10-version-prop.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-add-CPUID.24-features-for-AVX10.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-Add-feature-dependencies-for-AVX10.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-Add-AVX512-state-when-AVX10-is-supported.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-Introduce-GraniteRapids-v2-model.patch [RHEL-30315 RHEL-45110]
  - kvm-target-i386-add-sha512-sm3-sm4-feature-bits.patch [RHEL-30315 RHEL-45110]
  - Resolves: RHEL-58928
    (Boot SNP guests failed with qemu-kvm: kvm_set_user_memory_region)
  - Resolves: RHEL-58153
    ([IBM 10.0 FEAT] KVM: Full boot order support - qemu part)
  - Resolves: RHEL-50529
    (Qemu-kvm  crashed  if  no display device setting and switching display by remote-viewer)
  - Resolves: RHEL-64308
    (High threshold value observed in vGPU live migration)
  - Resolves: RHEL-20574
    (Fail migration properly when put cpu register fails)
  - Resolves: RHEL-30315
    ([Intel 10.0 FEAT] [GNR] Virt-QEMU: Add AVX10.1 instruction support)
  - Resolves: RHEL-45110
    ([Intel 10.0 FEAT] [CWF][DMR] Virt-QEMU: Advertise new instructions SHA2-512NI, SM3, and SM4)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-5
changelog:
  - kvm-migration-Ensure-vmstate_save-sets-errp.patch [RHEL-63051]
  - kvm-kvm-replace-fprintf-with-error_report-printf-in-kvm_.patch [RHEL-57685]
  - kvm-kvm-refactor-core-virtual-machine-creation-into-its-.patch [RHEL-57685]
  - kvm-accel-kvm-refactor-dirty-ring-setup.patch [RHEL-57685]
  - kvm-KVM-Dynamic-sized-kvm-memslots-array.patch [RHEL-57685]
  - kvm-KVM-Define-KVM_MEMSLOTS_NUM_MAX_DEFAULT.patch [RHEL-57685]
  - kvm-KVM-Rename-KVMMemoryListener.nr_used_slots-to-nr_slo.patch [RHEL-57685]
  - kvm-KVM-Rename-KVMState-nr_slots-to-nr_slots_max.patch [RHEL-57685]
  - kvm-Require-new-dtrace-package.patch [RHEL-67899]
  - Resolves: RHEL-63051
    (qemu crashed after killed virtiofsd during migration)
  - Resolves: RHEL-57685
    (Bad migration performance when performing vGPU VM live migration )
  - Resolves: RHEL-67899
    (Failed to build qemu-kvm due to missing dtrace [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-vfio-container-Fix-container-object-destruction.patch [RHEL-67936]
  - kvm-virtio-net-disable-USO-for-RHEL9.patch [RHEL-40950]
  - kvm-qemu-guest-agent-add-new-api-to-allow-rpc.patch [RHEL-60223]
  - Resolves: RHEL-67936
    (QEMU should fail gracefully with passthrough devices in SEV-SNP guests)
  - Resolves: RHEL-40950
    ([Stable_Guest_ABI][USO]From 10-beta to RHEL.9.5.0  the guest with 9.4 machine type only, the guest crashed  with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7 )
  - Resolves: RHEL-60223
    ([qemu-guest-agent] Add new api 'guest-network-get-route' to allow-rpc)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-58316]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68444]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68444]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68444]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68444]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68444]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68444]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68444]
  - Resolves: RHEL-58316
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel10.0)
  - Resolves: RHEL-68444
    (The new "boot order" feature is sometimes not working as expected [RHEL 10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-69047]
  - Resolves: RHEL-69047
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-32665]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-32665]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-32665]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-32665]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-32665]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-32665]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71939]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67108]
  - Resolves: RHEL-32665
    ([IBM 10.0 FEAT] KVM: CPU model for new IBM Z HW - qemu-kvm part)
  - Resolves: RHEL-71939
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-67108
    ([aarch64] [rhel-10.0] Backport some important post 9.1 qemu fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-43412]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-43412]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-43412]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-43412]
  - kvm-pc-q35-Bump-max_cpus-to-4096-vcpus.patch [RHEL-57668]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-73005]
  - kvm-virtio-net-disable-USO-for-all-RHEL9.patch [RHEL-69500]
  - Resolves: RHEL-43412
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-10.0-beta])
  - Resolves: RHEL-57668
    ([RFE] [HPEMC] [RHEL-10.0] qemu-kvm: support up to 4096 VCPUs)
  - Resolves: RHEL-73005
    (qemu-kvm: vhost: reports error while updating IOTLB entries)
  - Resolves: RHEL-69500
    ([Stable_Guest_ABI][USO][9.6.0-machine-type]From 10.0 to RHEL.9.6.0 the guest with 9.6 machine type only, the guest crashed with - qemu-kvm: Features 0x1c0010130afffa7 unsupported. Allowed features: 0x10179bfffe7)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-11
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-73002]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73835]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-74361]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-74461]
  - Resolves: RHEL-73002
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9 [rhel-10])
  - Resolves: RHEL-73835
    (VM crashes when requesting domstats [rhel-10])
  - Resolves: RHEL-74361
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))
  - Resolves: RHEL-74461
    (fsfreeze hooks doesn't log error on system logs when running hook fails [rhel-10])


author: Eduard Abdullin <eabdullin@almalinux.org> - 9.1.0-11.alma.1
changelog:
  - Enable QXL device build
  - Enable building for ppc64le
  - Re-added Spice support
  - Don't remove slof.bin for ppc64le


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-qtest-x86-numa-test-do-not-use-the-obsolete-pentium-.patch [RHEL-28972]
  - kvm-tests-qtest-libqtest-add-qtest_has_cpu_model-api.patch [RHEL-28972]
  - kvm-tests-qtest-x86-check-for-availability-of-older-cpu-.patch [RHEL-28972]
  - kvm-target-cpu-models-x86-Remove-the-existing-deprecated.patch [RHEL-28972]
  - kvm-x86-cpu-deprecate-cpu-models-that-do-not-support-x86.patch [RHEL-28971]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-36329]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-36329]
  - kvm-s390x-remove-deprecated-rhel-machine-types.patch [RHEL-39898]
  - kvm-s390x-select-correct-components-for-no-board-build.patch [RHEL-39898]
  - kvm-target-s390x-Add-a-CONFIG-switch-to-disable-legacy-C.patch [RHEL-39898]
  - kvm-target-s390x-cpu_models-Disable-everything-up-to-the.patch [RHEL-39898]
  - kvm-target-s390x-Revert-the-old-s390x-CPU-model-disablem.patch [RHEL-39898]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-43409 RHEL-43410]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-43409 RHEL-43410]
  - Resolves: RHEL-28972
    (x86: Remove the existing deprecated CPU models on RHEL10)
  - Resolves: RHEL-28971
    (Consider deprecating CPU models like "Nehalem" / "IvyBridge" on RHEL 10)
  - Resolves: RHEL-36329
    ([RHEL10.0.beta][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)
  - Resolves: RHEL-39898
    (s390: Remove the legacy CPU models on RHEL10)
  - Resolves: RHEL-43409
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-43410
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-46239]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-46239]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-46239]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-46239]
  - Resolves: RHEL-46239
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-5
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-40959]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-40959]
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-40959]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-40959]
  - Resolves: RHEL-40959
    (Qemu hang when quit dst vm after storage migration(nbd+tls))


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-6
changelog:
  - kvm-Enable-vhost-user-scmi-devices.patch [RHEL-50165]
  - Resolves: RHEL-50165
    (Enable 'vhost-user-scmi-pci' and 'vhost-user-scmi' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-7
changelog:
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-51901]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52599]
  - Resolves: RHEL-51901
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command[RHEL-10])
  - Resolves: RHEL-52599
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-x86-cpu-update-deprecation-string-to-match-lowest-un.patch [RHEL-54260]
  - Resolves: RHEL-54260
    ([RHEL10] Need to update the deprecated CPU model warning message)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-2
changelog:
  - kvm-x86-create-new-pc-q35-machine-type-for-rhel-9.6.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-arm-create-new-virt-machine-type-for-rhel-9.6.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-x86-create-pc-i440fx-machine-type-for-rhel10.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-x86-create-pc-q35-machine-type-for-rhel10.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-arm-create-virt-machine-type-for-rhel10.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-x86-remove-deprecated-rhel-machine-types.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-remove-stale-compat-definitions.patch [RHEL-29002 RHEL-29003 RHEL-35587 RHEL-38411 RHEL-45141]
  - kvm-RH-Author-Shaoqin-Huang-shahuang-redhat.com.patch [RHEL-38374]
  - kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-57028]
  - Resolves: RHEL-29002
    (Remove the existing deprecated machine types in RHEL-10)
  - Resolves: RHEL-29003
    (Deprecate RHEL-9 machine types in RHEL-10)
  - Resolves: RHEL-35587
    (Create a pc-i440fx-rhel10.0 machine type)
  - Resolves: RHEL-38411
    ([Fujitsu 10.0 FEAT]: qemu-kvm: Continue to support i440fx for RHEL10)
  - Resolves: RHEL-45141
    (Introduce virt-rhel10.0 arm-virt machine type [aarch64])
  - Resolves: RHEL-38374
    (aarch64 SMBIOS 'Manufacturer' and 'Product Name' differ from x86 ones [rhel-10])
  - Resolves: RHEL-57028
    (fsfreeze hooks break on the systems first restorecon [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-3
changelog:
  - kvm-hostmem-Apply-merge-property-after-the-memory-region.patch [RHEL-58936]
  - Resolves: RHEL-58936
    ([RHEL-10.0] QEMU core dump on applying merge property to memory backend)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-3
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-54012)
  - Fix potential use of uninitialized pgp struct (RHEL-54013)
  - Fix memory leak in rpmsign(8) (RHEL-37564)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-4
changelog:
  - Remove hardcoded GPG references from signing error messages
  - Support switching between GnuPG and Sequoia for package signing (RHEL-56363)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.1.1-9
changelog:
  - Revert the gnupg/sequoia sub-packages, too much headache
  - Ship sequoia-signing enablement macros as documentation instead
  - Generate binary signatures with Sequoia too


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-56701 - sss_ssh_knownhosts is breaking ansible-pull
  - Resolves: RHEL-55993 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.1-1
changelog:
  - Resolves: RHEL-62725 - Rebase SSSD for RHEL 10.0
  - Resolves: RHEL-4984 - Mismatch between input and parsed domain name when default_domain_suffix is set.
  - Resolves: RHEL-65848 - sssd password authentication broken in sssd-2.10.0~beta2-2 and later
  - Resolves: RHEL-67669 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option
  - Resolves: RHEL-68421 - sssd ldap_child process segfaults when krb5.conf is invalid [rhel-10]
  - Resolves: RHEL-66935 - Avoid log flooding in case an app keeps making invalid `getservbyport(0, ...)` request
  - Resolves: RHEL-65736 - ipa: sudo commands doesn't check threshold correctly
  - Resolves: RHEL-68319 - Please deprecate/remove ad_allow_remote_domain_local_groups


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Chris White <chwhite@redhat.com> - 1.19.2
changelog:
  - stalld.conf: Fix stalld service start fail
  - throttling.c:  null terminate input buffer
  - stalld: free malloc'd buffer on function exit
  - throttlectl.sh: use legal value for exit on fail
  - Make fill_process_comm() open comm file as READ_ONLY
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.3
changelog:
  - Makefile: change build to use FORTIFY_SOURCE=3
  - src/utils.c: fix off-by-one error in buffer allocation
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1.p3
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1.p5
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: Lukáš Zaoral <lzaoral@redhat.com> - 12.7.2-1
changelog:
  - Update to v12.7.2 (rhbz#2165400)
  - Use SPDX license format
  - Modernize the spec file according to the current packaging guidelines


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-15
changelog:
  - ci: rename beta branch to match dist-git name (RHEL-57603)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59871)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-56144)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-56144)
  - confidential-virt: add detection for s390x target (RHEL-56144)
  - man/systemd-detect-virt: fix row spanning for VM header (RHEL-56144)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-56144)


author: Jan Macku <jamacku@redhat.com> - 257-1
changelog:
  - Rebase to new upstream release v257 (RHEL-71409)
  - netif-naming-scheme: introduce rhel-10.0 scheme (RHEL-44417)


author: Jan Macku <jamacku@redhat.com> - 257-3
changelog:
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-44417)
  - Rebase to new upstream stable release v257.2 (RHEL-71409)


author: Frank Ch. Eigler <fche@redhat.com> - 5.1-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases

    * Thu Jan 25 2024 Frank Ch. Eigler <fche@redhat.com> - 5.1-17062192g5fd8daba
  - Automated weekly rawhide release
  - Applied spec changes from upstream git


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 3.6.1-2
changelog:
  - Do not include RSS miner service on RHEL/ELN
    Original patch by Carlos Garnacho <cgarnach@redhat.com>
    https://gitlab.com/redhat/centos-stream/rpms/tracker-miners/-/commit/4507ad77005aad38cb17b7a72a779446dce0981c


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-1
changelog:
  - Upstream 3.23.0 final
  - configure --enable-lto
  - Remove all upstreamed patches
  - Add BuildRequires: python3-devel for running testsuite.
  - Update license tags to spdx


author: Mark Wielaard <mjw@redhat.com> - 3.23.0-4
changelog:
  Add upstream VALGRIND_3_23_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.23-fixes.patch
    0002-486180-MIPS-VexGuestArchState-has-no-member-named-gu.patch
    0003-Bug-486293-memccpy-false-positives.patch
    0004-Bug-486569-linux-inotify_init-syscall-wrapper-missin.patch
    0005-aarch64-frinta-and-frinta-vector-instructions.patch
    0006-mips-skip-using-shared-syscall-numbers-for-mips32.patch
    0007-Fix-uninitialized-err-in-handle_extension.patch
    0008-Avoid-use-of-guest_IP_AT_SYSCALL-in-handle_extension.patch
    0009-s390x-Minor-fixes-in-extension-s390x.c.patch
    0010-Bug-453044-gbserver_tests-failures-in-aarch64.patch
    0011-Linux-regtest-reallocarray-needs-malloc.h.patch
    0012-Bug-487439-SIGILL-in-JDK11-JDK17.patch
    0013-Don-t-leave-fds-created-with-log-file-xml-file-or-lo.patch
    0014-Close-both-internal-pipe-fds-after-VG_-fork-in-paren.patch
    0015-Don-t-allow-programs-calling-fnctl-on-valgrind-s-own.patch
    0016-mips-skip-using-shared-syscall-numbers-for-mips64.patch
    0017-gdbserver_tests-filters-remove-python-rpm-module-loa.patch
    0018-Implement-VMOVQ-xmm1-xmm2-m64.patch
    0019-arm64-Fix-fcvtas-instruction.patch
    0020-gdbserver_tests-filters-remove-more-verbose-python-r.patch
    0021-Avoid-dev-inode-check-on-btrfs-with-sanity-level-3.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-1
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-2
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


