# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: James Chapman <jachapma@redhat.com> - 2.4.4-1
changelog:
  - Bump version to 2.4.4-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base-2.4 in RHEL 9.4
  - Resolves: RHEL-16830 - ns-slapd crash in slapi_attr_basetype


author: James Chapman <jachapma@redhat.com> - 2.4.5-1
changelog:
  - Bump version to 2.4.5-1
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: James Chapman <jachapma@redhat.com> - 2.4.5-2
changelog:
  - Bump version to 2.4.5-2
  - Resolves: RHEL-15907 - Rebase 389-ds-base in RHEL 9.4
  - Resolves: RHEL-5142  - RFE Disable Transparent Huge Pages when using large caches
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix
  - Resolves: RHEL-5133  - RFE Provide a history for 'LastLoginTime'
  - Resolves: RHEL-16984 - RFE inChain Matching Rule


author: Simon Pichugin <spichugi@redhat.com> - 2.4.5-4
changelog:
  - Bump version to 2.4.5-4
  - Resolves: RHEL-5130  - RFE Add PROXY protocol support to 389-ds-base via confiuration item - similar to Postfix


author: Viktor Ashirov <vashirov@redhat.com> - 2.4.5-6
changelog:
  - Bump version to 2.4.5-6
  - Resolves: RHEL-30588 - [RFE] allows plugins to log multi-factor authentication notification


author: James Chapman <jachapma@redhat.com> - 2.5.1-1
changelog:
  - Bump version to 2.5.1-1
  - Resolves: RHEL-31777 - Rebase 389-ds-base.2.5.1 in RHEL 9.5
  - Resolves: RHEL-33348 - redhat-ds:11/389-ds-base: potential denial of service via specially crafted kerberos AS-REQ requ


author: James Chapman <jachapma@redhat.com> - 2.5.1-2
changelog:
  - Bump version to 2.5.1-2
  - Resolves: RHEL-44324 - unauthenticated user can trigger a DoS by sending a specific extended search request
  - Resolves: RHEL-40946 - Malformed userPassword hash may cause Denial of Service
  - Resolves: RHEL-33087 - dsconf schema does not show inChain matching rule
  - Resolves: RHEL-28177 - Malformed userPassword may cause crash at do_modify in slapd/modify.c
  - Resolves: RHEL-25070 - nsslapd-haproxy-trusted-ip is not in schema


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-1
changelog:
  - Bump version to 2.5.2-1
  - Resolves: RHEL-5108 - ns-slapd crash in referint_get_config
  - Resolves: RHEL-5113 - nsslapd-numlisteners limit is not enforced
  - Resolves: RHEL-5115 - `dscreate ds-root` accepts relative path
  - Resolves: RHEL-5131 - ldif2db can be very slow
  - Resolves: RHEL-5138 - Logconv.pl CSV file contains mismatched header and data columns
  - Resolves: RHEL-14760 - ns-slapd crash in vlvIndex_delete
  - Resolves: RHEL-17511 - nsslapd-idletimeout is ignored
  - Resolves: RHEL-49454 - perf search result investigation for many large static groups and members
  - Resolves: RHEL-49458 - subsuffix are not returned in one level scoped search


author: Viktor Ashirov <vashirov@redhat.com> - 2.5.2-2
changelog:
  - Bump version to 2.5.2-2
  - Resolves: RHEL-55744 - ipahealthcheck.ds.backends.BackendsCheck.DSBLE0006: BDB is deprecated and should not be used as a backend


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.48.6-1
changelog:
  - Wait until link is ready before activating for ovs-interface (RHEL-49796)
  - Fix rollback on OVS checkpoint (RHEL-31972)
  - Assert that the auto-activate list is empty on dispose (RHEL-44345)


author: Fernando Fernandez Mancera <ferferna@redha.com> - 1:1.46.8-1
changelog:
  - Stop writing offensive terms into keyfiles (RHEL-52597)
  - Remove offensive words (RHEL-33368)
  - Fix cloned-mac-address race condition with DHCP on ovs-interfaces (RHEL-49796)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-1
changelog:
  - Unblock the autoconnect for children when parent is available (RHEL-46904)
  - Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
  - Support reapplying bridge-port VLANs (RHEL-26750)
  - Add small backoff time before resync (RHEL-29902)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.49.90-1
changelog:
  - Upgrade to 1.50 pre-release (rc1)
  - Retry reverse hostname resolution when it fails (RHEL-17972)
  - Allow VPNs to supply IP configurations with routes but no addresses (RHEL-21875)
  - Warn of dhclient deprecation when it's explicitly chose (RHEL-24622)
  - Allow cloud-setup to restart more rapidly (RHEL-49694)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.51.1-1
changelog:
  - Upgrade to 1.51.1 (dev)
  - Use meson and remove autotools configuration
  - Fix crashes (SIGABRT) in several functions (RHEL-17840)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.51.2-1
changelog:
  - Upgrade to 1.51.2 (dev)
  - Fix race condition on OVS interface deletion (RHEL-50747)
  - Fix validation of DPDK interface name (RHEL-60022)
  - Support IPVLAN interface (RHEL-47334)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.51.3-1
changelog:
  - Upgrade to 1.51.3 (dev)
  - Support configuring dhcp-send-hostname globally (RHEL-32685)
  - cloud-setup: Support OCI (Oracle Cloud) provider (RHEL-62729)
  - Support automatically adding DNS routes (RHEL-56555)
  - Support IPv6-Only Preferred DHCPv4 option (RHEL-58660)
  - Only validate SR-IOV capacity when enabled (RHEL-58397)
  - Steer IGMP/MLD queries to the active bond balance-slb primary port (RHEL-59559)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.4-1
changelog:
  - Upgrade to 1.51.4 (dev)
  - Add iputils as recommended dependency for ping command
  - Fix configs shown with NetworkManger --print-config (RHEL-14438)
  - Added ip-ping-addresses to check other hosts presence on activation (RHEL-21160)
  - Support ethtool Forward Error Correction (FEC) (RHEL-24055)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.51.5-1
changelog:
  - Upgrade to 1.51.5 (dev)
  - Never retry ACD on NOARP interfaces (RHEL-47301)
  - Delete routes added by NM to tables different than main (RHEL-67324)
  - Honor route-table property for the route to VPN server (RHEL-69901)
  - Send GARP on bonding-slb failover (RHEL-59558)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.51.6-1
changelog:
  - Update to 1.51.6 (dev)
  - Honor the routing-rules property for VPN connections (RHEL-69899)
  - Fix potential crash when ipv4.dhcp-send-release is enabled (RHEL-67918)
  - Support encrypted DNS servers (RHEL-66260)
  - Fix configuration of VLAN ingress/egress QoS mapping (RHEL-72475)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1.2.18-2
changelog:
  - Support point-to-point IPSec tunnel (RHEL-20690)
  - Fix crash in libreswan_nmstate_iface_dpd_rsa (RHEL-21221)
  - Support configuring IPSec mode with 'type' (RHEL-21554)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Pete Walter <pwalter@fedoraproject.org> - 2.0.14-1
changelog:
  - Update to 2.0.14
  - Rebase multilib.patch
  - Don't use globs in the form of libFOO.so.* for listing files


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-10
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-7273]
  - Resolves: RHEL-7273
    ([Azure][WALA] Consider to disable Log collector)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-11
changelog:
  - wla-redhat-Add-a-udev-rule-to-avoid-managing-slave-NICs-.patch [RHEL-5880]
  - Resolves: RHEL-5880
    ([Azure][RHEL-9]68-azure-sriov-nm-unmanaged.rules cannot stop NetworkManager-wait-online.service checking SRIOV interface)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972101]
  - Resolves: bz#1972101
    ([Azure][RHEL-9]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wala-Require-iptables-package.patch [bz#1978572]
  - Resolves: bz#1978572
    ([Azure][WALA][RHEL-9] WALA needs iptables package)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.8.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.8.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.9.0-1
changelog:
  - update to https://github.com/containers/aardvark-dns/releases/tag/v1.9.0
  - Related: Jira:RHEL-2112


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Sohan Kunkerkar <skunkerk@redhat.com> - 4.6.0-2
changelog:
  - Rebuild because of Fedora infra issues last week to see if a new build fixes some 
    problems we are seeing.


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Radovan Sroka <rsroka@redhat.com> - 0.16-23
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606


author: Radovan Sroka <rsroka@redhat.com> - 0.16-102
changelog:
  RHEL 9.5.0 ERRATUM
  - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly
  Resolves: RHEL-27606
  - AIDE fails when using root_prefix option
  Resolves: RHEL-28882


author: Radovan Sroka <rsroka@redhat.com> - 0.16-103
changelog:
  RHEL 9.6.0 ERRATUM
  - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation
  Resolves: RHEL-4331


author: Jaroslav Kysela <perex@perex.cz> - 2.2.5-2
changelog:
  - add sof-rpl-rt711-l0-rt1316-l12-rt714-l3.tplg for Dell SKU 0BDA
  - add xz compression support (with CRC32)


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.1-1
changelog:
  - anaconda-diskroot: wait before dying on media check fail (awilliam)
    Resolves: RHEL-4790
  - Add ping tool to Dracut (jkonecny)
    Resolves: RHEL-5719
  - gui:Fix index error for _remove_treeinfo_repositories() (liuwenyu.0311)
    Resolves: RHEL-29561


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.3-1
changelog:
  - Fix Source0 in spec to point to upstream source URL (kkoukiou)
  - Do not try to load sha256 module in intramfs (rvykydal)
    Resolves: RHEL-4747
  - Do not try to load the floppy kernel module (jstodola)
    Resolves: RHEL-4747
  - anaconda-modprobe: don't try and load cramfs (awilliam)
    Resolves: RHEL-4747


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.5-1
changelog:
  - Update translations from Weblate for rhel-9
  - Do not rewrite logs in rescue mode (jstodola)
    Resolves: RHEL-4794
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-14005
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-30406


author: Katerina Koukiou <kkoukiou@redhat.com> - 34.25.5.6-1
changelog:
  - Update translations from Weblate for rhel-9
  - Change location of rescue mode flag file (jstodola)
    Resolves: RHEL-4794


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.5.7-1
changelog:
  - Fix source spoke being inaccessible if payload thread errors out (mkolman)
    Resolves: RHEL-4721
  - Do not create default wired connections for bond ports (rvykydal)
    Resolves: RHEL-38451
  - Consolidate code for dumping network connections (rvykydal)
    Related: RHEL-38451


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.8-1
changelog:
  - Use proxy server also for FTP .treeinfo download (jkonecny)
    Resolves: RHEL-27938
  - Update translations from Weblate for rhel-9 (github-actions)


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.9-1
changelog:
  - network: ignore kickstart configuration of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not dump configurations of nBFT devices (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: ignore nBFT devices connections in network configuration (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: add a test for ignoring ifname=nbft* for device renaming (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: do not create empty dir for only ifname=nbft* options (rvykydal)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - network: Avoid creating link files for 'nbft' interfaces (tbzatek)
    Resolves: RHEL-30149
    Resolves: RHEL-34235
    Resolves: RHEL-32146
  - Update translations from Weblate for rhel-9 (github-actions)


author: Katerina Koukiou <k.koukiou@gmail.com> - 34.25.5.10-1
changelog:
  - Fix check for biosboot partition in GRUB2.check (vtrefny)
    Resolves: RHEL-55922
  - Ignore all storage errors when trying to activate swaps (vtrefny)
    Resolves: RHEL-55922


author: Martin Kolman <mkolman@redhat.com> - 34.25.5.11-1
changelog:
  - security: call /usr/libexec/fips-setup-helper (asosedkin)
    Resolves: RHEL-58667
  - release-notes: Document support for compressed kernel modules in Driver Discs
    (peter.georg)
    Related: RHEL-9913
  - Add documentation about support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Update test info to reflect added support for compressed kernel
    modules (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for zstd compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add test for xz compressed kernel module (peter.georg)
    Resolves: RHEL-9913
  - dd_extract: Add support for compressed kernel modules (peter.georg)
    Resolves: RHEL-9913
  - New version - 34.25.5.10 (k.koukiou)


author: Jiri Konecny <jkonecny@redhat.com> - 34.25.5.13-1
changelog:
  - security: require pykickstart version with %certificates support (rvykydal)
    Resolves: RHEL-61430
  - security: do not crash initramfs ks parsing on failing certificate dump
    (rvykydal)
    Resolves: RHEL-61430
  - security: add service to transfer certificates from initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates in initramfs (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates in pre-install phase only for dnf payload
    (rvykydal)
    Resolves: RHEL-61430
  - security: raise exception if certificate destination is unknown (rvykydal)
    Resolves: RHEL-61430
  - security: log a warning when dumping certificate over an existing file
    (rvykydal)
    Resolves: RHEL-61430
  - security: pre-install certificates before payload installation (rvykydal)
    Resolves: RHEL-61430
  - security: add API to install certificates early before payload (rvykydal)
    Resolves: RHEL-61430
  - security: install certificates on target system (rvykydal)
    Resolves: RHEL-61430
  - security: Add API for installation on target system (rvykydal)
    Resolves: RHEL-61430
  - security: import certificates early after Anaconda start (rvykydal)
    Resolves: RHEL-61430
  - security: add API to import certificates to Anaconda environment (rvykydal)
    Resolves: RHEL-61430
  - security: add API: Certificate getter (rvykydal)
    Resolves: RHEL-61430
  - kickstart: extend section specification for list of section data (rvykydal)
  - security: implement the support to install certificates to Anaconda
    (rvykydal)
    Resolves: RHEL-61430
  - translations: bump dependency to l10n repo because of branch switch
    (k.koukiou)
  - util: correct errors and suppress stderr for common cases (riehecky)
  - util: Add additional information for EFI systems (riehecky)
    Resolves: RHEL-55128


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 11.04-1
changelog:
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Nick Clifton <nickc@redhat.com> - 12.12-1
changelog:
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.


author: Nick Clifton <nickc@redhat.com> - 12.28-1
changelog:
  - Tests: Fix obsoleted syntax in plans/ci.fmf  (RHEL-12194)
  - Spec File: Use SPDX licensing.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - LLVM Plugin: Fix building with LLVM version 17.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon binutils-devel.
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifron <nickc@redhat.com> - 12.31-1
changelog:
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.


author: Nick Clifron <nickc@redhat.com> - 12.64-1
changelog:
  - Rebase to 12.64, allowing build with LLVM 18.  (RHEL-49953)
  - Retire: annobin-strings-no-attach.patch
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.
  - GCC Plugin: Add support for -fhardended.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - Spec File: Add LTO option to clang and llvm plugin builds.  (RHEL-50796)


author: Nick Clifton <nickc@redhat.com> - 12.83-1
changelog:
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.
  - Clang & LLVM Plugins: Include install directory in binary.  (RHEL-54069)
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76809)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-76040)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2057652
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2070452
  - Add "Requires: ansible-core or ansible"
    Resolves: rhbz#2067496


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-1
changelog:
  - Add MVP HA functionality to the server role
    Resolves: rhbz#2066337
  - Add mssql_tls_remote_src to the server role
    Resolves: rhbz#2098212
  - Add Requires: linux-system-roles or rhel-system-roles
  - Add downstream values to galaxy.yml


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.0-2
changelog:
  - Update mssql commit
    Resolves: rhbz#2066337
  - Add condition for upstream spec build for galaxy_transform
  - Replace extra-mapping with replacing in the legacy format with sed


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.3-1
changelog:
  - Use firewall role to configure firewall for SQL Server
    Resolves: rhbz#2120709
  - Add mssql_ha_virtual_ip
    Replace mssql_ha_db_name with mssql_ha_db_names to let users replicate multiple DBs
    Resolves: rhbz#2066337

  - Replace simple `mssql_input_sql_file` with `pre` and `post` variables
    Resolves: rhbz#2120712
  - Add Requires: linux-system-roles or rhel-system-roles
  - Replace fedora.linux_system_roles:redhat.rhel_system_roles on RHEL
  - Add downstream values to galaxy.yml
  - Change defcommit to defsource that takes both tags and commits
  - Update CHANGELOG.md with the current date and copy it to collection dir


author: Sergei Petrosian <spetrosi@redhat.com> - 1.2.4-1
changelog:
  - Replicate all provided databases
    - This change fixes the bug where only the first database provided with
  mssql_ha_db_names got replicated
    - Clarify that the role does not remove not listed databases
    Resolves: rhbz#2066337
  - Input multiple sql scripts
    - Allow _input_sql_file vars to accept list of files
    - Flush handlers prior to inputting post sql script
    Resolves: rhbz#2120712
  - Note that ha_cluster is not idempotent
  - SPEC: Do not update dates in CHANGELOG.md


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-1
changelog:
  - Keep spec consistent with linux-system-roles and simplify
    - Return conditionals related to EL to keep up- and downstream consistent
    - Add pretrans scriplet to remove symlinks if exist to fix issue with update
    - Instead of copying doc and license files create symlinks
    - Dynamically generate %files section
    - Add -t to md2html to generate TOC
    - Do not install roles to /usr/share/microsoft and then create symlinks
      to /usr/share/ansible/roles/, instead install directly to
      /usr/share/ansible/roles/
    - Remove unused removal of ambiguous python shebangs
    - Remove all loops because this RPM contains only one role
    - Remove defsource - simply define the source for mssql
    - 's|$RPM_BUILD_ROOT|%{buildroot}|' for consistency
    - Remove getarchivedir for simplicity
    - Wrap description by 80 symbols and clarify it
    - Remove tests/.fmf dir from the RPM
    Resolves: rhbz#2151281
  - On SQL Server Enterprise Edition, support configuring asynchronous replication
    Resolves: rhbz#2151282
  - Support configuring a read-scale SQL server availability group (without pacemaker
    Resolves: rhbz#2151283
  - Use the certificate role to create the cert and the key
    Resolves: rhbz#2151284
  - Support SQL Server version 2022
    Resolves: rhbz#2153428
  - Support integrating with AD Server for authentication
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-2
changelog:
  - Replace fedora.linux_system_roles/redhat.rhel_system_roles and
    linux-system-roles.mssql with microsoft.sql.server in the role.
    Resolves: rhbz#2151281
  - Use latest 1.3.0 to fix ad_Integration issues
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.3.0-3
changelog:
  - Spec: add functionality to build from a commit hash
  - Use latest 1.3.0 to add flexibility to AD integration functionality
    Resolves: rhbz#2163709


author: Sergei Petrosian <spetrosi@redhat.com> - 1.4.1-1
changelog:
  - Update BuiildRequires to use ansible-core on RHEL > 8.8
  - Move RHEL related code into an include for spec readability
  - Update role to version 1.4.1 to add customizable storage paths
    Resolves: RHEL-529


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-2
changelog:
  - Use latest auto-maintenance for updates in lsr_role2collection.py
  - Remove with_html, instead use built-in .README.html
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.1-3
changelog:
  - CHANGELOG.md was missing in some places
  - In legacy role, sed repalced unexpected strings at some places
    Resolves: RHEL-23455


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.3-1
changelog:
  - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9
    Resolves: RHEL-16342
  - ExcludeArch: i686


author: Sergei Petrosian <spetrosi@redhat.com> - 2.5.2-1
changelog:
  - Fail on RHEL or CentOS 10 because it's not supported
    Resolves: RHEL-67804
  - Use new adutil functionality to enable AES encryption
    Resolves: RHEL-67807
  - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools
    Resolves: RHEL-68374
  - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula
    Resolves: RHEL-69311


author: Dimitri Savineau <dsavinea@redhat.com> - 2.14.2-4
changelog:
  - rebuild with python 3.11 (rhbz#2169466)
  - remove bundled dependencies from requirements file (rhbz#2152615)
  - add bundled version of resolvelib
  - use PyPi sources
  - remove straightplugin
  - add missing obsoletes constraint


author: Dimitri Savineau <dsavinea@redhat.com> - 2.15.0-1
changelog:
  - ansible-core 2.15.0 release (rhbz#2204510)
  - update bundled markupsafe to 2.1.2.
  - update bundled packaging to 21.3.
  - update bundled pyparsing to 3.0.7.
  - update bundled resolvelib to 1.0.1.
  - remove six runtime dependency.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.7-1
changelog:
  - ansible-core 2.14.7 release (rhbz#2221820)
  - rebuild with python 3.9 (rhbz#2221820)
  - remove bundled packaging, pyparsing and resolvelib.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.9-1
changelog:
  - ansible-core 2.14.9 release (rhbz#2232432)
  - Use docs and examples from ansible-documentation project.
  - Build the manpages.


author: Dimitri Savineau <dsavinea@redhat.com> - 1:2.14.14-1
changelog:
  - ansible-core 2.14.14 release (RHEL-23783)
  - Fix CVE-2024-0690 (possible information leak in tasks that ignore
    ANSIBLE_NO_LOG configuration) (RHEL-22124)


author: Thomas Woerner <twoerner@redhat.com> - 1.8.3-1
changelog:
  - Update to version 1.8.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.3
    Related: RHBZ#2080322
  - Fixes replica deployment issue for domains without SID support.
    Related: RHBZ#2110478


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35565
  - New inventory plugin
    Resolves: RHEL-35541
  - Enable batch command as backend
    Resolves: RHEL-38943
  - New collection sub package
    Resolves: RHEL-38931


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35565
  - Convert input certificates
    Resolves: RHEL-44614
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40869


author: Thomas Woerner <twoerner@redhat.com> - 1.14.0-1
changelog:
  - Update to version 1.14.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0
    Resolves: RHEL-67566
  - Multi sudorule management with the ipasudorule module
    Resolves: RHEL-61431


author: Thomas Woerner <twoerner@redhat.com> - 1.14.1-1
changelog:
  - Update to version 1.14.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1
    Resolves: RHEL-67566
  - Fix requirements for ansible-core
    Resolves: RHEL-69146


author: Thomas Woerner <twoerner@redhat.com> - 1.14.2-1
changelog:
  - Update to version 1.14.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2
    Resolves: RHEL-67566
  - ipareplica: Pass ipareplica_ip_addresses to ipaclient
    Resolves: RHEL-40227
  - ipagroup: Correctly handle externalmember in member actions
    Resolves: RHEL-25009
  - ipasudorule: Evaluate all members related to hosts and users
    Resolves: RHEL-68439
  - ipacert: Correctly handle removFromCRL revocation
    Resolves: RHEL-70016
  - Collection: No more role module duplication
    Resolves: RHEL-71123


author: Nathan Scott <nathans@redhat.com> 2.0.3-1
changelog:
  - Updated for new version with changed namespace
  - Ansible collection macros now used in the spec
  - Added ansible-lint checking in %check section


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.10.9-15
changelog:
  - Implement new Java bindings and fix ant-manual license
  - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519


author: Neal Gompa <ngompa@centosproject.org> - 0.15.5-2
changelog:
  - Create symlinks manually to make it build
    (the symlinks were not created because of reverting the patch to
    upgrade to Meson 0.62)


author: Neal Gompa <ngompa@centosproject.org> - 0.16.1-1
changelog:
  - Rebase to 0.16.1
    Resolves: rhbz#2169103
  - Drop unneeded downstream hacks to build with older Meson


author: Richard Hughes <richard@hughsie.com> 1:9-20240827
changelog:
  - New metadata version
  - Do not ship fedora-specific files
  - Resolves: #RHEL-4522
  - Resolves: #RHEL-19012


author: Tom Stellard <tstellar@redhat.com> - 1.6.1-13
changelog:
  - Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Tom Deseyn <tom.deseyn@gmail.com> - 8.0.103-3
changelog:
  - We disable checking the signature of the last certificate in a chain if the certificate is supposedly self-signed.
    A side effect of not checking the self-signature of such a certificate is that disabled or unsupported message
    digests used for the signature are not treated as fatal errors.
  - Resolves: RHEL-28344


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Caolán McNamara <caolanm@redhat.com> - 1:7.1.8.1-8
changelog:
  - Resolves: rhbz#2134759 Untrusted Macros
  - Resolves: rhbz#2134757 Weak Master Keys
  - Resolves: rhbz#2134755 Static Initialization Vector
  - Resolves: rhbz#2134761 Macro URL arbitrary script execution


author: Stephan Bergmann <sbergman@redhat.com> - 1:7.1.8.1-11
changelog:
  - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
    Parsing
  - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
    without prompt via IFrame
  - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Nils Philippsen <nils@tiptoe.de> - 0.1.72-2
changelog:
  - BR: librsvg2-tools for rsvg-convert
  - mark license files as %license
  - use %apiver macro consistently
  - don't ship .gitignore file


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-5
changelog:
  - Fix libbpf bio tools (RHEL-19368)
  - Add S390x support to libbpf-tools (RHEL-16325)
  - Power enhancements(RHEL-11477)


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.0-3
changelog:
  - Really prevent the loading of compromised headers (RHEL-28769, CVE-2024-2314)
  - Add python3-pyelftools dependency (RHEL-36583)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-3
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-5
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-6
changelog:
  - Bound the amount of work performed for delegations (CVE-2022-2795)
  - Add /usr/lib64/named to bind-chroot (#2129466)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-9
changelog:
  - Prevent flooding with UPDATE requests (CVE-2022-3094)
  - Handle RRSIG queries when server-stale is active (CVE-2022-3736)
  - Fix crash when soft-quota is reached and serve-stale is active (CVE-2022-3924)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-16
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.27-2
changelog:
  - Disable building of DLZ packages
  - Conflict explicitly with more bind subpackages
  - Merge license subpackage into libs


author: Nick Clifton <nickc@redhat.com> - 2.35.2-51
changelog:
  - Backport commit 88141209e25ce19473ec07d7aac09cc68f06a630 to fix stripping lld linked binaries.  (RHEL-50536)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-52
changelog:
  - Backport commit 6fde04116b4b to stop objcopy from crashing when copying non-PE binaries into a PE output.  (RHEL-48882)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-53
changelog:
  - Backport commit bc5baa9f13ff to ensure that objcopy does not loose the minimum section alignment for PE binaries.  (RHEL-30268)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-7
changelog:
  - Fix setting kickstart data
    Resolves: rhbz#2174296
  - Do not set memory limit for LUKS2 when running in FIPS mode
    Resolves: rhbz#2193096


author: Jan Pokorny <japokorn@redhat.com> - 3.6.0-9
changelog:
  Backport iSCSI initiator name related fixes:
  - Allow changing iSCSI initiator name after setting it
    Resolves: rhbz#2221935
  - Add a basic test case for the iscsi module
    Resolves: rhbz#2221935
  - tests: Use blivet-specific prefix for targetcli backing files
    Resolves: rhbz#2221935
  - iscsi: Save firmware initiator name to /etc/iscsi/initiatorname.iscsi
    Resolves: rhbz#2221932
  - tests: Improve iscsi_test.ISCSITestCase
    Resolves: rhbz#2221935


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-10
changelog:
  - nvme: Require additional rpms for dracut
    Resolves: RHEL-2855
  - nvme: Align HostNQN and HostID format to TP-4126
    Resolves: RHEL-1254


author: Tomas Bzatek <tbzatek@redhat.com> - 3.6.0-11
changelog:
  - nvme: Retrieve HostNQN from a first active fabrics connection
  - tests: Add a simple unit test for the NVMe module
    Resolves: RHEL-11541


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-14
changelog:
  - Do not add new PVs to the LVM devices file if it doesn't exist and VGs are present
    Resolves: RHEL-473


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-15
changelog:
  - Backport fixes for Stratis support needed for storage role
    Resolves: RHEL-35382
  - Add support for resizing PVs to the size of the underlying block device
    Resolves: RHEL-35386


author: Vojtech Trefny <vtrefny@redhat.com> - 3.6.0-18
changelog:
  - Add a basic read-only support for UDF filesystem
    Resolves: RHEL-13329
  - nvme: Skip startup/write when NVMe plugin isn't available
    Resolves: RHEL-28124


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-18
changelog:
  - Backport patch to autoselect best cipher suite when working over lanplus backend
  - Fixed 'ipmitool pef status/info' not printing final newline
  - Expanded column for sensor name in 'ipmi sdr/sensor' output so longer names are aligned


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-19
changelog:
  - Backport fix for CVE-2020-5208 (#1798722); for details see
    https://github.com/ipmitool/ipmitool/security/advisories/GHSA-g659-9qxw-p7cp


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-26
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Bryan Gurney <bgurney@redhat.com> - 1.6.1-2
changelog:
  - Add issues resolved by release 1.6.1
  - Resolves: RHEL-36001
  - Resolves: RHEL-36664
  - Resolves: RHEL-36667
  - Resolves: RHEL-36691


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Colin Walters <walters@verbum.org> - 0.2.11-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.11
    Resolves: https://issues.redhat.com/browse/RHEL-5273


author: Colin Walters <walters@verbum.org> - 0.2.15-2
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.15
    Related: https://issues.redhat.com/browse/RHEL-14388


author: Joseph Marrero <jmarrero@fedoraproject.org> - 0.2.18-1
changelog:
  - https://github.com/coreos/bootupd/releases/tag/v0.2.18
    backport patch to support GRUB console.cfg
    Resolves: RHEL-26439


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Viktor Malik <vmalik@redhat.com> - 0.20.3-1
changelog:
  - Rebase on bpftrace 0.20.3 (RHEL-30779)
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)
  - Fix bpftrace creating BPF programs with truncated names (RHEL-8502)


author: Viktor Malik <vmalik@redhat.com> - 0.20.4-1
changelog:
  - Rebase on bpftrace 0.20.4
  - Fix CVE allowing unprivileged users loading of compromised linux headers
    (RHEL-28765, CVE-2024-2313)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.0-1
changelog:
  - update to https://github.com/containers/buildah/releases/tag/v1.37.0
  - Resolves: RHEL-47164 RHEL-40808


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/f31d99d)
  - Resolves: RHEL-61148


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.37
    (https://github.com/containers/buildah/commit/c060201)
  - Related: RHEL-60277


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Jayashree Huttanagoudar <jhuttana@redhat.com> - 4.0.11-1
changelog:
  - Upgrated to latest upstream version 4.0.11
  - Added a patch to fix rpm build issue caused due to misconfiguration in upstream
  - Added required additional plugins required for build


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Ray Strode <rstrode@redhat.com> - 80.8-1
changelog:
  - Fix black spot in one of the backgrounds
    Resolves: #1684106
  - Add missing 2560x1600 8-abstract-light background
    Resolves: #1692309
  - letter box instead of crop backgrounds when there's no
    good aspect ratio
    Related: #1720610


author: Ray Strode <rstrode@redhat.com> - 81.0-1
changelog:
  - Add wallpapers for wider screen monitors
    Related: #1720610
  - Move logo to corner in wallpapers that have it in center
    Resolves: #1706793


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Jerry James <loganjerry@gmail.com> - 0.15.0-1
changelog:
  - Version 0.15.0
  - Add -formatspec and -attribute-format patches
  - Build with both cmake and autotools


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-10
changelog:
  - ci-Remove-dependency-on-python3-httpretty.patch [RHEL-33973]
  - Resolves: RHEL-33973
    ([RFE] Remove dependency on python3-httpretty)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-11
changelog:
  - ci-fix-Always-use-single-datasource-if-specified-5098.patch [RHEL-36255]
  - Resolves: RHEL-36255
    ([rhel-9.5] DataSourceNoCloudNet not configurable via config files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-12
changelog:
  - ci-fix-cloudstack-Use-parsed-lease-file-for-virtual-rou.patch [RHEL-40217]
  - Resolves: RHEL-40217
    ([Cloud-init] CloudstackDataSource cannot work with NetworkManager)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-13
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-17961]
  - ci-fix-jsonschema-Add-missing-sudo-definition-5418.patch [RHEL-44337]
  - ci-doc-update-examples-to-reflect-alternative-ways-to-p.patch [RHEL-44337]
  - ci-fix-dhcp-Guard-against-FileNotFoundError-and-NameErr.patch [RHEL-44598]
  - ci-fix-Address-TIOBE-abstract-interpretation-issues-486.patch [RHEL-44598]
  - ci-Update-pylint-version-to-support-python-3.12-5338.patch [RHEL-44598]
  - Resolves: RHEL-17961
    ([RHEL-9] cloud-init fails to configure DNS search domains)
  - Resolves: RHEL-44337
    ([rhel-9] fix `SUDO` configuration schema for users and groups)
  - Resolves: RHEL-44598
    (fix pylint error and support python 3.12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-14
changelog:
  - ci-Deprecate-the-users-ssh-authorized-keys-property-516.patch [RHEL-45262]
  - ci-docs-Add-deprecated-system_info-to-schema-5168.patch [RHEL-45262]
  - ci-fix-schema-permit-deprecated-hyphenated-keys-under-u.patch [RHEL-45262]
  - Resolves: RHEL-45262
    (Deprecate the users ssh-authorized-keys property and permit deprecated hyphenated keys under users key)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-15
changelog:
  - ci-Support-metalink-in-yum-repository-config-5444.patch [RHEL-44916]
  - ci-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-IPv6-ad.patch [RHEL-46194]
  - Resolves: RHEL-44916
    ([RFE] Support metalink in yum repository config)
  - Resolves: RHEL-46194
    ([RHEL-9] It leaves the ipv6 networking config as blank in NM keyfile when config dhcp ipv6 with customization spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-16
changelog:
  - ci-fix-add-schema-rules-for-baseurl-and-metalink-in-yum.patch [RHEL-46873]
  - Resolves: RHEL-46873
    (Suggest to update schema to support metalink)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-17
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49736]
  - ci-Support-setting-mirrorlist-in-yum-repository-config-.patch [RHEL-49674]
  - Resolves: RHEL-49736
    ([Cloud-init] [RHEL-9] Password reset feature broken with CloudstackDataSource)
  - Resolves: RHEL-49674
    (Support setting mirrorlist in yum repository config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-18
changelog:
  - ci-Revert-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-.patch [RHEL-54373]
  - Resolves: RHEL-54373
    ([RHEL9]Revert "fix(vmware): Set IPv6 to dhcp when there is no IPv6 addr (#5471)")


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-19
changelog:
  - ci-fix-Add-subnet-ipv4-ipv6-to-network-schema-5191.patch [RHEL-54686]
  - Resolves: RHEL-54686
    ([RHEL-9.5] cloud-init schema validation fails.)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-20
changelog:
  - ci-Fix-metric-setting-for-ifcfg-network-connections-for.patch [RHEL-61224]
  - ci-fix-python3.13-Fix-import-error-for-passlib-on-Pytho.patch [RHEL-61224]
  - Resolves: RHEL-61224
    (Configuring metric for default gateway is not working)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-21
changelog:
  - ci-fix-Render-bridges-correctly-for-v2-on-sysconfig-wit.patch [RHEL-38927]
  - ci-fix-Render-v2-bridges-correctly-on-network-manager-w.patch [RHEL-38927]
  - Resolves: RHEL-38927
    (NoCloud - network_config bridges incorrectly configured)


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.4-22
changelog:
  - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768]
  - Resolves: RHEL-65768
    ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.4-2
changelog:
  - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334]
  - Resolves: RHEL-74334
    ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6)


author: Packit <hello@packit.dev> - 11-1
changelog:
  - Show SELinux security context in permissions dialog
  - Support changing permissions of enclosed files


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Allow editing multiple file permissions
  - Support uploading files with administrator privileges
  - Add drag 'n drop support


author: Bob Mader <bob@redhat.com> - 0.1.7-2
changelog:
  - Initial build for EL9
  - Applying changes for gating - adding the .fmf directory
  - Resolves: RHEL-57044


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Packit <hello@packit.dev> - 326-1
changelog:
  - cockpit-pcp package is now obsolete
  - cockpit/ws container: Connect to servers without installed Cockpit
  - cockpit/ws container: Support host specific SSH keys
  - Storage: Support for Stratis filesystem sizes and limits


author: Packit <hello@packit.dev> - 330-1
changelog:
  - Web server: Increased sandboxing, setuid removal, bootc support
  - Development: New install mode using systemd-sysext
  - ws container: Move to Fedora 41


author: Packit <hello@packit.dev> - 331-1
changelog:
  - ws: Prevent search engine indexing with robots.txt
  - container/ws: Support using an external SSH agent


author: Packit <hello@packit.dev> - 332-1
changelog:
  - containers/ws: Include cockpit-files
  - login: Beibooting to all supported OSes
  - metrics: Show system boots in metrics


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 89-1
changelog:
  - Use binary http channel for podman socket for non-UTF-8 robustness
  - Stop using obsolete cockpit.utf8_{de,en}coder() API
  - Fix tests for CentOS/RHEL 10


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Release v7
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Justin Stephenson <jstephen@redhat.com> - 13-1
changelog:
  - Play after rewind in testFastforwardControls
  - Set TZ to avoid CI failures with testFilter* tests
  - testZoomSpeedControls incorrectly checks scale
  - Fix testSessionRecordingConf
  - Read TMT_TEST_DATA variable for LOGS in browser.sh
  - Fix node-modules in run-test.sh
  - Install sssd-proxy in test browser.sh
  - Add Files path for test recordings
  - FMF: Run tests together
  - Add executable bit to browser shell scripts
  - FMF: Fix minor typo in plans
  - Add FMF tests and test scripts
  - Read existing sssd conf domains and services
  - Makefile: Update Cockpit lib to 269bf89276c679a03befc8a04244addd
  - Remove CentOS condition in testZoomSpeedControls
  - Add accessible name label for Progress component
  - Remove 'enable_files_domain' from SSSD Config
  - SSSD config changes
  - testFastforwardControls update after player-restart
  - Switch wait_present to wait_visible
  - ESLint error and warning fixes
  - Fix stylelint errors
  - Dependency updates
  - Bring up to date with cockpit starter kit
  - Config: Switch SSSD files provider to Proxy provider
  - Update fedora license in spec file
  - Makefile: Bump test API to 267
  - Makefile: drop installing cockpit-ws/cockpit-packagekit
  - src: load translations via po.js
  - .semaphore: update TEST_OS to Fedora 36
  - webpack.config.js: update compression plugin to succeed build
  - Makefile: Adjust to changed rpmspec -q behaviour
  - Use standard "translate" marker in HTML
  - Update dependencies excluding Patternfly
  - Remove unneeded tlog UID code


author: Justin Stephenson <jstephen@redhat.com> - 16-1
changelog:
  - Rebase to upstream release 16
  - Config: Add sssd-proxy requirement
  - Commits from release 15
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class
  - Commits from release 14
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Justin Stephenson <jstephen@redhat.com> - 17-1
changelog:
  - Rebase to upstream release 17
  - Config: Use authselect enable-feature when possible
  - Test: Move from CDP to BiDi
  - Replace jQuery extend() with standard JS spread
  - Convert to TypeScript
  - Convert Application to a functional component
  - package.json: Drop date-fns
  - Various test fixes and build related fixes


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Phil Sutter <psutter@redhat.com> - 1.4.7-1
changelog:
  - config: Fix -Wimplicit-function-declaration
  - network: Fix -Wstrict-prototypes
  - build: don't suppress various warnings
  - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
  - New version 1.4.7


author: Kelvin Fan <kfan@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Require util-linux >= 2.36-1
  - Remove files related to the issuegen and motdgen executables


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.222.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.222.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - Remove dependency on policycoreutils-python-utils
  - Related: Jira:RHEL-2112
  - Related: Jira:RHEL-18316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Lokesh Mandvekar <lsm5@redhat.com> - 1-14
changelog:
  - rebuild with updated dependencies:
    [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
    aardvark-dns and netavark 1.9.0
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179960
  - Resolves: #2187333
  - Resolves: #2187376
  - Resolves: #2203705
  - Resolves: #2207519


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.4.1
  - Resolves: RHEL-28855


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.0-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.1-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 1:1.6.2-1
changelog:
  - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 2:1-12
changelog:
  - consume seccomp.json from the oldest vendored version of c/common,
    not main branch
  - Related: #2000051


author: Jindrich Novy <jnovy@redhat.com> - 2:1-16
changelog:
  - do not hardcode log_driver = "journald" and events_logger = "journald"
    for RHEL9 and leave the rootful/rootless behaviour change based on
    internal logic
  - Related: #2000051


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Nicola Sella <nsella@redhat.com> - 0.16.1
changelog:
  - Update to 0.16.1
  - Add the section number to the manual pages
  - Parse xml snippet in smaller parts (RhBug:1859689)
  - Add module metadata support to createrepo_c (RhBug:1795936)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.20.1-1
changelog:
  - Update to 0.20.1
  - createrepo_c shouldn't silently produce duplicate-NEVRA repos
  - Fix bad performance with task queue management
  - Update errno usage to fix incorrect GError messages
  - Install header for createrepo_shared module
  - Remove C API for cr_xml_parse_main_metadata_together
  - Remove python bindings for xml_parse_main_metadata_together
  - Fix '&' encoding in attributes when parsing repodata
  - Add a streaming parsing API that is user-controllable.
  - Fix a memory leak of primary pkg when parsing interrupted
  - Fix a memory leak when removing the first link in a list
  - Remove `allow_out_of_order` option for `xml_parse_main_metadata_together`
  - Make parse warnings visible through cr.Repomd(), cr.UpdateInfo()
  - Use --error-exit-val option by default
  - If new and old repomd matches during --update don't update
  - Add `cr_repomd_compare` for comparing two repomds
  - Store parsed repomd in `cr_MetadataLocation`
  - Set database version only for the database records, not everything
  - Use copy+delete fallback when moving of a dir fails
  - Fix memory leaks
  - [spec] Option for legacy hashes, enable on RHEL <= 8 (RhBug:2022271)


author: Adrian Reber <areber@redhat.com> - 3.15-11
changelog:
  - Remove unnecessary Requires: criu-libs
  - Remove wrong BR nftables-devel
  - Bump release for rebuild


author: Radostin Stoyanov <radostin@redhat.com> - 3.15-12
changelog:
  - Increase release number from 11 to 12
  - Disable podman test when crun doesn't support checkpoint/restore


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Vladis Dronov <vdronov@redhat.com> - 15.9-26
changelog:
  - Update cscope to 15.9-26 from Fedora (RHEL-65465)
  - Fix signal handling at exit
  - Minor edits in the rpm scripts and the changelog
  - Make xemacs a bcond


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-14
changelog:
  - RHEL-19201 redhat-lsb unnecessary pulls in cups and avahi dependencies
  - RHEL-16026 Cups Browsed does not correctly pull printer location and description information from print server


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-18
changelog:
  - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file
  - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes
  - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Jeff Moyer <jmoyer@redhat.com> - 78-1
changelog:
  - Rebase to v78
  - Add support for legacy monitor.conf file location
  - Fix a test failure.
  - Resolves: RHEL-10382
  - Resolves: RHEL-8204
  - Resolves: RHEL-29151


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-7
changelog:
  - Resolves: #2096149 - Fatal error when running "squatter -r user"
  - Resolves: #2096885 - Enhanced TMT testing for centos-stream


author: Martin Osvald <mosvald@redhat.com> - 3.4.1-11
changelog:
  - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
    for shared mailboxes
  - cyrus-imapd.spec: rename patches to correspond with others


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.1-3
changelog:
  - Fix some rpmlint issues, add comments, add license and doc,
    gpg verification, use pkgconfig BuildRequires, enable _hardened_build


author: Mark Wielaard <mjw@redhat.com> - 5.0-1
changelog:
  - Upgrade to upstream 5.0 release.
    - Removes find-debuginfo .sh suffix.
    - This release still has a find-debuginfo.sh -> find-debuginfo symlink.


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-1
changelog:
  - Rebase to 1.21.2
  - Add support for ppc64le and aarch64
  - Enable the test suite
  - Resolves: RHEL-22429


author: Alejandro Sáez <asm@redhat.com> - 1.21.2-2
changelog:
  - Modify ports: Some CI systems complain about the usage of the 8888 port.
  - Improve the way PPC64LE support is enabled.
  - Resolves: RHEL-22429


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-14
changelog:
  - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212)
  - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224)


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Pavel Valena <pvalena@redhat.com> - 057-67.git20240812
changelog:
  - feat(systemd): install systemd-executor
  - test: use -device instead of -watchdog to remove qemu
  - fix(fips): remove /dev/{random,urandom} pre-creation
  - fix(systemd): always include sg module
  - fix(fips): do not blindly remove /boot
  - fix(github): update format of labeler
  - fix(network-manager): add "After" dependency on dbus.service
  - fix(url-lib.sh): nfs_already_mounted() with trailing slash in
  - feat(systemd-pcrphase): introducing the systemd-pcrphase
  - fix(systemd-pcrphase): only include
  - fix(nfs): include also entries from /usr/lib/{passwd,group}


author: Pavel Valena <pvalena@redhat.com> - 057-70.git20240819
changelog:
  - fix(systemd): set right permissions for the machine-id file
  - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/
  - feat(dracut-init.sh): give --force-add precedence over --omit


author: Pavel Valena <pvalena@redhat.com> - 057-79.git20241127
changelog:
  - fix(35network-manager): install nftables kernel modules
  - fix(35network-manager): install nft binary during module
  - fix(dracut-install): copy xattr when use clone ioctl
  - feat(dracut.sh): add --add-confdir option
  - fix: typo in variable name
  - feat(fips): add support for UKIs
  - fix(kernel-modules): use modalias info in get_dev_module()
  - fix(dracut-functions.sh): convert mmcblk to the real kernel


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Viktor Malik <vmalik@redhat.com> - 1.24-1
changelog:
  - Resolves: rhbz#2140020
  - New release: v1.23
  - Process DW_TAG_LLVM_annotation tags.
  - Initial support for DW_TAG_skeleton_unit.
  - Encode BTF_KIND_TYPE_TAG and BTF_KIND_DECL_TAG
  - Fix handling of percpu symbols on s390.
  - Use cacheline size to infer struct member alignment from BTF.
  - Add --skip_missing to not stop when not finding one of -C arguments.
  - Fix __attribute__((__aligned__(N)) printing alignment for struct members.
  - Fix nested __attribute__(__aligned__(N)) struct printing order.
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Viktor Malik <vmalik@redhat.com> - 1.25-1
changelog:
  - Resolves: rhbz#2190484
  - Build with system libbpf
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-30780
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Hui Wang <huwang@redhat.com> - 1:4.20-4
changelog:
  - Drop unnecessary javax16.api.jar
  - Add dependency on javapackages-tools since the ecj binary requires it to run


author: Felix Kolwa <fkolwa@redhat.com> - 1.35.1-7
changelog:
  - Bump revision number to 7.
  - Pull in changes from Major Hayden:
    - Skip version check test
      Opened upstream bug:
          https://github.com/aws/efs-utils/issues/194
    - Disable automatic version check


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@redhat.com> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@redhat.com> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    elfutils-0.190-riscv-flatten.patch
    elfutils-0.191-riscv-flatten.patch
    elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.192-libelf-static.patch


author: Bhavin Gandhi <bhavin7392@gmail.com> - 1:27.1-1
changelog:
  - emacs-27.1 is available (#1867841)
  - Add systemd-devel to support Type=notify in unit file
  - Build with Cairo and Jansson support
  - Remove ImageMagick dependency as it's no longer used


author: Jan Synáček <jsynacek@redhat.com> - 1:27.1-2
changelog:
  - use make macros (original patch provided by Tom Stellard)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-16
changelog:
  Resolves: rhbs #2050849
  - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1]


author: Kalev Lember <klember@redhat.com> - 40.1-1
changelog:
  - Update to 40.1
  - Remove various minimum version requires
  - Remove old obsoletes
  - Don't use ldconfig_scriptlets
  - Filter private library provides


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-4
changelog:
  - Resolves: #2071056 (Addressbook: Switch from GData Contacts API to CardDAV API for Google books)
  - Resolves: #2071742 (Add patch to use correct colors in mail preview with webkit2gtk3 2.36.x)


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: #2129703 (EShellWindow: The 'New' menu is not filled after start)
  - Correct Requires for the 'devel' subpackage to enchant-2


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Milan Crha <mcrha@redhat.com> - 3.40.4-2
changelog:
  - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-7
changelog:
  - CVE-2021-3482: Fix heap-based buffer overflow in Jp2Image::readMetadata()
    CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1956174


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-8
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964183

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964189


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-3
changelog:
  - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
  - Resolves: RHEL-56761
  - Resolves: RHEL-57520
  - Resolves: RHEL-57511


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-103
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-104
changelog:
  RHEL 9.2.0 ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2097077
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2136802
  - Starting manually fapolicyd while the service is already running breaks the system
  Resolves: rhbz#2160517
  - Cannot execute /usr/libexec/grepconf.sh when falcon-sensor is enabled
  Resolves: rhbz#2160518
  - fapolicyd: Introduce filtering of rpmdb
  Resolves: RHEL-192


author: Radovan Sroka <rsroka@redhat.com> - 1.3.1-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: TBD


author: Radovan Sroka <rsroka@redhat.com> - 1.3.2-100
changelog:
  RHEL 9.3.0 ERRATUM
  - Rebase fapolicyd to the latest stable version
  Resolves: RHEL-430
  - fapolicyd can leak FDs and never answer request, causing target process to hang forever
  Resolves: RHEL-621
  - RFE: send rule number to fanotify so it gets audited
  Resolves: RHEL-624
  - fapolicyd needs to make sure the FD limit is never reached
  Resolves: RHEL-623
  - fapolicyd still allows execution of a program after "untrusting" it
  Resolves: RHEL-622
  - Default q_size doesn't match manpage's one
  Resolves: RHEL-627
  - fapolicyd-cli --update then mount/umount twice causes fapolicyd daemon to block (state 'D')
  Resolves: RHEL-817
  - Fix broken backwards compatibility backend numbers
  Resolves: RHEL-730
  - SELinux prevents the fapolicyd from reading symlink (cert_t)
  Resolves: RHEL-816


author: Radovan Sroka <rsroka@redhat.com> - 1.0-3
changelog:
  - backported few cosmetic small patches from upstream master
  - rebase selinux tarbal to v0.3
  - file context pattern for /run/fapolicyd.pid is missing
  Resolves: rhbz#1834674


author: Radovan Sroka <rsroka@redhat.com> - 1.0.1-1
changelog:
  - rebase to 1.0.1
  - introduced uthash dependency
  - SELinux prevents the fapolicyd process from writing to /run/dbus/system_bus_socket
  Resolves: rhbz#1874491
  - SELinux prevents the fapolicyd process from writing to /var/lib/rpm directory
  Resolves: rhbz#1876538


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-66
changelog:
  - Add missing licenses to spec-file
    Resolves: RHEL-27929
  - ha-cloud-support: fix aliyun-cli
    Resolves: RHEL-28097


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-69
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29649


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-70
changelog:
  - fence_aliyun: add credentials file support, filter parameter, and
    optimize log output
    Resolves: RHEL-31488, RHEL-31485, RHEL-31483


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-73
changelog:
  - fence_vmware_rest: detect if the API user has sufficient rights to
    manage the fence device
    Resolves: RHEL-25256


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-77
changelog:
  - fence_scsi: preempt clears all devices on the mpath device, so only
    run it for the first device
    Resolves: RHEL-59878
  - ha-cloud-support: remove bundled awscli and use awscli2 package
    instead
    Resolves: RHEL-60020


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-80
changelog:
  - fence_mpath: add support for hex-key format (used in multipath.conf)
    Resolves: RHEL-56138
  - fence_scsi/fence_mpath: add support for SPC-4 disks
    Resolves: RHEL-7629


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-81
changelog:
  - fence_ibm_powervs: add private endpoint and token file support
    Resolves: RHEL-62206
  - ha-cloud-support: bundle libs for the powervs-subnet resource agent
    Resolves: RHEL-64023


author: W. Michael Petullo <mike@flyn.org> - 2.5.0-8
changelog:
  - Remove empty lib subpackage
  - Fix make command line (add missing '\')
  - Use -p with install
  - Do not create /etc/festival
  - Do not create /usr/share/info
  - Simplify %files
  - Note BSD license for hts_engine module
  - Split data into noarch package
  - The festival-devel package now provides festival-static
  - Markup additional files as licenses


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Richard W.M. Jones <rjones@redhat.com> 3.23-5
changelog:
  - Disable automatic provides for fio engines (RHBZ#1884954).
  - Apply patch to change SONAME of fio engines (see comment 8 of above bug).


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Pavel Reichl <preichl@redhat.com> - 3.35-1
changelog:
  - Rebase to new upstream release
  - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc
  - Add signature check
  - Related: rhbz#2188805


author: Jan Grulich <jgrulich@redhat.com - 128.4.0-2
changelog:
  - Enable PipeWire camera support for RHEL 10
    + backport upstream fixes for PipeWire camera support
    Fixes: RHEL-64749


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Eric Garver <egarver@redhat.com> - 1.3.4-6
changelog:
  - feat(IPv6_rpfilter): support loose rpfilter
  - feat(IPv6_rpfilter): support loose-forward rpfilter
  - feat(IPv6_rpfilter): support strict-forward rpfilter


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Debarshi Ray <rishi@fedoraproject.org> - 1.12.4-2
changelog:
  - Don't try to add Fedora's OCI Flatpak repository on RHEL
  - Remove an obsolete Fedora-specific update path
  Resolves: #2051697


author: Kalev Lember <klember@redhat.com> - 1.12.9-2
changelog:
  - Backport upstream patches for CVE-2024-42472
  - Require bubblewrap version that has new --bind-fd option backported for
    addressing CVE-2024-42472


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-3
changelog:
  - Add back fullname property at the scan matching phase for the backward compatibility.
    Resolves: rhbz#1902881


author: Akira TAGOH <tagoh@redhat.com> - 2.13.93-4
changelog:
  - cherry pick some upstream patches
    - Skip leading white space in style.
    - Remove abort from FcCompareSize.
    - Fix memory leaks
    - Check qual and compare for family tests.
  -


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: José Expósito <jexposit@redhat.com> - 3.2.1-10
changelog:
  - Fix CVE-2024-24258 and CVE-2024-24259
    Resolves: https://issues.redhat.com/browse/RHEL-25176
    Resolves: https://issues.redhat.com/browse/RHEL-25178


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.7-1
changelog:
  - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Akira TAGOH <tagoh@redhat.com> - 1.0.8-2
changelog:
  - Restore the deprecated API that was accidentally removed in the previous release.
    Resolves: rhbz#1787293


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-1
changelog:
  - Resolves: #2129731 - Rebase FRR to the latest version
  - Resolves: #2129743 - Add targeted SELinux policy for FRR
  - Resolves: #2127494 - BGP incorrectly withdraws routes on graceful restart capable routers


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-2
changelog:
  - Resolves: #2128738 - out-of-bounds read in the BGP daemon may lead to information disclosure or denial of service


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-6
changelog:
  - Resolves: #2184870 - Reachable assertion in peek_for_as4_capability function
  - Resolves: #2196795 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196796 - denial of service by crafting a BGP OPEN message with an option of type 0xff
  - Resolves: #2196794 - out-of-bounds read exists in the BGP daemon of FRRouting


author: Michal Ruprich <mruprich@redhat.com> - 8.3.1-12
changelog:
  - Resolves: RHEL-3541 - Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router


author: Michal Ruprich <mruprich@redhat.com> - 8.5.3-2
changelog:
  - Resolves: RHEL-15915 - crash from specially crafted MP_UNREACH_NLRI-containing BGP UPDATE message
  - Resolves: RHEL-15918 - crash from malformed EOR-containing BGP UPDATE message


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Michal Schorm <mschorm@redhat.com> - 26.4.8-2
changelog:
  - Switch from SCONS build tooling to CMAKE build tooling
  - Use upstream variants of Systemd service file and Systemd service file wrapper srcipt


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.69-1
changelog:
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries if compiled using LTO.  (#2082146)


author: Nick Clifton <nickc@redhat.com> - 10.73-2
changelog:
  - Annocheck: Fix handling of command line options that take arguments.  (#2086850)
  - Annocheck: Do not complain about unenabled -mbranch-protection option in AArch64 binaries.  (#2078909)


author: Nick Clifton <nickc@redhat.com> - 10.75-1
changelog:
  - Annocheck: Fix covscan detected race condition between stat() and open().
  - Annocheck: Handle binaries created by Rust 1.18.  (#2094420)
  - Annocheck: Add optional function name to --skip arguments.  (PR 29229)


author: Nick Clifton <nickc@redhat.com> - 10.76-1
changelog:
  - Spec file: Correct the Provides for the annobin-doc subpackage.  (#2097065)
  - Annocheck: Check build-id of separate debuginfo files.
  - Annocheck: Add GAPS test replacing --ignore-gaps.
  - Annocheck: Fix covscan detected race condition between stat() and open().


author: Nick Clifton <nickc@redhat.com> - 11.08-4
changelog:
  - Fix building with Clang-16.  (#2216918)
  - Re-enable building with LTO.  (#2166579)
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)
  - Annocheck: Improve handling of tool versions.
  - GCC Plugin: Fix building with gcc-13.
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)
  - Annocheck: Use real filename rather than debuginfo filename.  (#2152280)
  - Rename gcc plugin to gts-annobin.  (#2111977)
  - Rebase to 10.94, brining in support for LLVM 15.  (#2118992)
  - Annocheck: Better detection of binaries which do not contain code.  (#2144533)
  - Annocheck: Provide more information when a test is skipped because the file being tested was not compiled.
  - Annocheck: Try harder not to run mutually exclusive tests.
  - Tests: Fix future-test so that it properly handles the situation where the compiler does not support the new options.
  - Libannocheck: Actually set result fields after tests are run.
  - Libannocheck: Replace libannocheck_version variable with LIBANNOCHECK_VERSION define.
  - Libannocheck: Remove 'Requires binutils-devel' from libannocheck.pc.
  - Libannocheck: Move into separate sub-package.
  - Libannocheck: Add libannocheck.pc pkgconfig file.
  - Libannocheck: Add libannocheck_reinit().
  - GCC Plugin: Record -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Annocheck: Add future tests for  -ftrivial-auto-var-init and -fzero-call-used-regs.
  - Clang Plugin: Fix for building with Clang-15.  (#2125875)
  - Annocheck: Add a test for the inconsistent use of -Ofast.  (#1248744)
  - Plugin: Fix top level configuration support for RiscV.
  - Annocheck: Improvements to the size tool.
  - Annocheck: Fixes for libannocheck.h.
  - Annocheck: Add automatic profile selection.
  - Annocheck: Improve gap detection and reporting.
  - Spec File: Use the %dir directive in the %files section to ensure that
  -  plugin directories are useable.  (#2080454)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.1.1-3
changelog:
  - update from releases/gcc-12 branch
    - PRs c++/49387, c++/102307, c++/102651, c++/104470, c++/105491, c++/105589,
  	c++/105623, c++/105652, c++/105655, c++/105725, c++/105734,
  	c++/105756, c++/105761, c++/105779, c++/105795, c++/105852,
  	c++/105871, c++/105885, c++/105908, c++/105925, c++/105931,
  	c++/105964, c++/106001, c/105635, d/105544, fortran/105230,
  	gcov-profile/105535, ipa/100413, ipa/105600, ipa/105639, ipa/105739,
  	libgomp/105745, libgomp/106045, libstdc++/104731, libstdc++/105284,
  	libstdc++/105671, libstdc++/105681, middle-end/105537,
  	middle-end/105604, middle-end/105711, middle-end/105951,
  	middle-end/105998, middle-end/106030, other/105527,
  	preprocessor/105732, rtl-optimization/105455, rtl-optimization/105559,
  	rtl-optimization/105577, sanitizer/105714, sanitizer/105729,
  	target/101891, target/104871, target/105162, target/105209,
  	target/105292, target/105472, target/105556, target/105599,
  	target/105854, target/105879, target/105953, target/105960,
  	target/105970, target/105981, target/106096, tree-optimization/103116,
  	tree-optimization/105431, tree-optimization/105458,
  	tree-optimization/105528, tree-optimization/105562,
  	tree-optimization/105618, tree-optimization/105726,
  	tree-optimization/105736, tree-optimization/105786,
  	tree-optimization/105940
  - enable tsan and lsan on s390x (#2101610)
  - fix up libtsan on s390x
  - fix nvptx build (PRs bootstrap/105551, target/105938)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Marek Polacek <polacek@redhat.com> 12.2.1-7.5
changelog:
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 12.32-1
changelog:
  - LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
  - GCC Plugin: Add support for -fhardended.
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)


author: Nick Clifton <nickc@redhat.com> - 12.32-2
changelog:
  - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51018)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53574)


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Nick Clifton <nickc@redhat.com> - 2.40-17
changelog:
  - Spec File: Do not use of the system zlib by default.  (RHEL-19373)
  - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)


author: Nick Clifton <nickc@redhat.com> - 2.40-19
changelog:
  - Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
  - [2.40-18: was a failed attempt to fix RHEL-22818]


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Marek Polacek <polacek@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Marek Polacek <polacek@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-17684)


author: Marek Polacek <polacek@redhat.com> 13.3.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.3 release
    - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
  	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
  	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
  	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
  	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
  	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
  	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
  	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
  	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
  	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
  	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
  	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
  	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
  	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
  	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
  	fortran/114825, fortran/115039, gcov-profile/114115,
  	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
  	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
  	libquadmath/114533, libstdc++/66146, libstdc++/93672,
  	libstdc++/104606, libstdc++/107800, libstdc++/108976,
  	libstdc++/110050, libstdc++/110054, libstdc++/113841,
  	libstdc++/114147, libstdc++/114316, libstdc++/114359,
  	libstdc++/114367, libstdc++/114401, libstdc++/114750,
  	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
  	middle-end/110027, middle-end/111151, middle-end/111632,
  	middle-end/111683, middle-end/112684, middle-end/112732,
  	middle-end/113396, middle-end/113622, middle-end/114070,
  	middle-end/114348, middle-end/114552, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/114907,
  	rtl-optimization/54052, rtl-optimization/114415,
  	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
  	sanitizer/114687, sanitizer/114743, sanitizer/114956,
  	sanitizer/115172, target/88309, target/101865, target/105522,
  	target/110621, target/111234, target/111600, target/111610,
  	target/111822, target/112397, target/113095, target/113233,
  	target/113950, target/114049, target/114130, target/114160,
  	target/114172, target/114175, target/114272, target/114747,
  	target/114752, target/114794, target/114837, target/114848,
  	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
  	testsuite/114036, testsuite/114662, tree-optimization/91838,
  	tree-optimization/109925, tree-optimization/110838,
  	tree-optimization/111009, tree-optimization/111268,
  	tree-optimization/111407, tree-optimization/111736,
  	tree-optimization/111882, tree-optimization/112281,
  	tree-optimization/112303, tree-optimization/112793,
  	tree-optimization/112961, tree-optimization/112991,
  	tree-optimization/113552, tree-optimization/113630,
  	tree-optimization/113670, tree-optimization/113831,
  	tree-optimization/113910, tree-optimization/114027,
  	tree-optimization/114115, tree-optimization/114121,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114246, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114485,
  	tree-optimization/114566, tree-optimization/114672,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114787,
  	tree-optimization/114799, tree-optimization/114876,
  	tree-optimization/114965, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154
  - add --without-clang-plugin --without-llvm-plugin to annobin configure
    options


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Guinevere Larsen <blarsen@redhat.com> - 12.1-4.el9
changelog:
  - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
    (Nick Clifton)
  - Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
    (Nick Clifton, RHEL-4234)


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-14-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.52-1
changelog:
  - Initial import of sources.
  - Compared to GTS-13 annobin (12.32) the improvements are:
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.
  - Annocheck: Update heuristics for detecting glibc code in executables.  (RHEL-30579)
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.
  - Annocheck: Improve detection of -mbranch-protection option.
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - GCC Plugin: Fix bug extracing the value of target specific command line options.
  - Configure: Remove check for FrontendPluginRegistry.h header as it is stored in a non-standard location on Debian systems.
  - Debuginfod test: Allow for the libdwfl library silently contacting the debuginfod server.
  - LLVM Plugin: Use llvm-config to get the correct paths and options for building executables.
  - Clang Plugin: Likewise.
  - Enable silent rules for most building.
  - Annocheck: Correctly extract DWARF attributes from DT_REL files.
  - Annocheck: Improve heuristics for locating debug info files.  (#2267097)
  - Configure: Harmonize configure options.    
  - Clang Plugin: Fix building with Clang 18.  (#31414)
  - GCC Plugin: Add support for MIPS specific target functions.
  - GCC Plugin: Use .dc.a for address expressions in 64-bit ELF format notes.
  - Spec File: Remove a workaround for ppc64le.
  - Annocheck: Improve heuristic for skipping LTO and FORTIFY tests.  (#2264000)
  - Annocheck: Also skip property note test for i686 binaries. (#2258571)
  - Annocheck: Also skip the entry point test for i686 binaries. (#2258571)
  - GCC Plugin: Do not use section groups with string format notes.
  - Annocheck: Disable cf-protection test for i686 architecture. (#2258571)
  - Spec File: Disable hard gcc check in order to allow builds with new version of gcc.
  - Spec File: Do not install annocheck.1.gz when annocheck is disabled.
  - Annocheck: Improve detection of FIPS compliant GO binaries.
  - GCC Plugin: Fix recording of the -Wimplicit-int and -Wimplicit-function-declaration warnings.  Add active checks for when they are deliberately disabled.
  - Tests: Fix implicit-values test so that it will compile with gcc 14+.


author: Nick Clifton <nickc@redhat.com> - 12.65-1
changelog:
  - Rebase to 12.65.  (RHEL-51056)
  - Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
  - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
  - Annocheck: Add improvements to the builtby utility.
  - Annocheck: Add support for ADA binaries.
  - Annocheck: Add support for binaries built from more than two high level source languages.
  - Annocheck: Add support for object files containing no executable code.
  - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
  - Annocheck: Add support for Fortran binaries.
  - Annocheck: Add heuristic for detecting parts of the CGO runtime library.
  - Annocheck: Add improvements for handling Clang runtime binaries.
  - Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
  - Annocheck: Add more glibc source file names.
  - Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239)
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.67-1
changelog:
  - Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
  - Annocheck: Stop warnings about known gaps.    (RHEL-53218)
  - Annocheck: Fix stack realign test.  (#2302427)


author: Nick Clifton <nickc@redhat.com> - 12.67-2
changelog:
  - Spec File: Use correct directory for plugin installation.  (RHEL-53209)
  - Spec File: Disable plugin when running on wrong major version of the compiler.


author: Nick Clifton <nickc@redhat.com> - 12.69-1
changelog:
  - BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
  - Spec File: Use correct names for the symlinks.  (RHEL-53209)


author: Nick Clifton <nickc@redhat.com> - 12.87-1
changelog:
  - Rebase for GTS 14.1 release.  (RHEL-76932)
  - Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
  - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
  - Annocheck: Fix the --debug-dir option.
  - Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
  - Annocheck: Remove spurious debugging messages.
  - Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
  - Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
  - Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
  - GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
  - Testsuite: Use configured compiler when running tests.
  - GCC Plugin: Fix building with gcc 15.  (#32429)
  - Annocheck: Fix overly long debug messages.
  - Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
  - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
  - Annocheck: Add --enable-future to enable future fail components in normal tests.
  - Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
  - Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Add --skip-passes option.
  - Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
  - Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
  - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
  - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.


author: Marek Polacek <polacek@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496
  - add -fno-stack-protector to aarch64 tests (RHEL-16940)


author: Marek Polacek <polacek@redhat.com> 13.3.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
  	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
  	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
  	rtl-optimization/115092, target/113281, target/113719, target/115297,
  	target/115317, target/115324, tree-optimization/115192,
  	tree-optimization/115307, tree-optimization/115337
  - fix a shell condition (RHEL-40722)
  - backport a fix for modes_1.f90 (RHEL-40234)
  - fix up pointer types to may_alias structures (PR c/114493, RHEL-39736)


author: Marek Polacek <polacek@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Marek Polacek <polacek@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch (RHEL-74061)
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362, RHEL-70192)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream (RHEL-74059)
  - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
  - have gfortran require install-info (RHEL-62417)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Keith Seitz <keiths@redhat.com> - 10.2-5.el9
changelog:
  - Backport five patches to support glibc 2.34 with merged libpthread.
    (Simon Marchi and Kevin Buettner, RH BZ 1971095)


author: Keith Seitz <keiths@redhat.com> - 10.2-6.el9
changelog:
  - Backport "PowerPC remove 512 bytes region limit if 2nd DAWR is available"
    (Rogerio Alves, RHBZ 1870029)
  - Backport patches for "Support prefixed instructions in GDB"
    (Will Schmidt and Luis Machado, RHBZ 1870031)


author: Bruno Larsen <blarsen@redhat.com>
changelog:
  - Bakport "Fix assertion failure in copy_type"
    (Tom Tromey, RHBZ 2155439)
  - Bakport "[gdb/testsuite] Fix PR20630 regression test in gdb.base/printcmds.exp"
    (Tom de Vries)


author: Bruno Larsen <blarsen@redhat.com> - 10.2-11.el9
changelog:
  - Backport "libiberty: prevent buffer overflow when decoding user input"
    (Luís Ferreira, RHBZ2132600)


author: Guinevere Larsen <blarsen@redhat.com> - 10.2-12.el9
changelog:
  - Backport "libiberty: Fix infinite recursion in rust demangler."
    (Nick Clifton)
  - Backport Add a recursion limit to the demangle_const function in the Rust demangler.
    (Nick Clifton, RHEL-4234)
  - Backport Fix typo in recent code to add stack recursion limit to the Rust demangler.
    (Nick Clifton)


author: Keith Seitz - 10.2-13.el9
changelog:
  - Backport patches for "Fix undefined behaviour dereferencing empty string"
    (Magne Hov et al, RHEL-17631)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Remove gdb-6.5-BEA-testsuite.patch, as it was upstreamed and
    will make its way back with the next rebase.


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Guinevere Larsen <blarsen@redhat.com> - 14.2-1.el9
changelog:
  - Rebase to gdb-14.2 and update all bug references
    (Resolves: RHEL-39554)
    (Resolves: RHEL-39553)
    (Resolves: RHEL-10550)
    (Resolves: RHEL-39555)
    (Resolves: RHEL-39585)
    (Resolves: RHEL-36211)


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-12
changelog:
  - More fixes from RHEL 8:
    - Fix DisallowTCP=false
    - Fix crash when both wayland and xorg are unavailable
    Related: #2056931


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Frédéric Bérat <fberat@redhat.com> - 2.34-149
changelog:
  - Backport: fix the glibc manual to handle spaces for @deftypefun
    references. (RHEL-65356)
  - Backport verbosity patches for glibc math (RHEL-38225)
  - Backport getdelim test coverage improvements (RHEL-54250)
  - Backport mkdirat mode test (RHEL-56743)
  - Backport: cover the documentation coverage gap adding thread safety
    annotations for clock_gettime and clock_getres (RHEL-57586)
  - Backport test implementation to verify lstat behavior (RHEL-56539)
  - Backport test implementation to verify rewinddir behavior
    (RHEL-56540)
  - Backport elf/tst-startup-errno test (RHEL-58671)
  - Backport: Identify unsafe macros in the glibc documentation (RHEL-46740)
  - Backport: testsuite fixes for rhel-57588, rhel-57589, and rhel-57590 (RHEL-65910)
  - Backport new multi-threaded test for sem_getvalue (RHEL-69028)
  - Backport pthread_getcpuclockid tests (RHEL-70395)
  - Backport: Debug/tst-longjmp_chk3 needs to be enabled (RHEL-68850)
  - Backport: Improve pthread_spin_trylock test coverage (RHEL-61568)
  - Backport: Implement test to verify dynamic linker behaves correctly in case
    of hash collision for the symbol name and symbol version. (RHEL-58979)
  - Backport: Improve sem_trywait test coverage (RHEL-65354)


author: Frédéric Bérat <fberat@redhat.com> - 2.34-150
changelog:
  - Backport test implementation to verify readdir behavior (RHEL-56542)
  - Backport the deallocation attributes commit for opendir/fdopendir (RHEL-56543)
  - Backport: Fix bug bz#27454 and test implementation to verify
    fdopendir behavior (RHEL-56544)


author: Frédéric Bérat <fberat@redhat.com> - 2.34-150
changelog:
  - Backport test implementation to verify readdir behavior (RHEL-56542)
  - Backport the deallocation attributes commit for opendir/fdopendir (RHEL-56543)
  - Backport: Fix bug bz#27454 and test implementation to verify
    fdopendir behavior (RHEL-56544)
  - Backport test implementation to verify closedir behavior
    (RHEL-56541)


author: Frédéric Bérat <fberat@redhat.com> - 2.34-152
changelog:
  - Additional TLS test cases (RHEL-58989)
  - Additional mremap test cases  (RHEL-62716)
  - Fix pthread_timedjoin_np error handling and increase test coverage (RHEL-68857)
  - Avoid uninitialized result in sem_open when file does not exist (RHEL-69633)


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Kalev Lember <klember@redhat.com> - 40.0-1
changelog:
  - Update to 40.0
  - Require hicolor-icon-theme for icon directories rather than adwaita
  - Use https source URL
  - Validate appdata file
  - Filter private libraries
  - Don't install various development files


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Felipe Borges <feborges@redhat.com> - 40.0-38
changelog:
  - Scale up monitors drawing in display arrangment settings when multiple monitors
    Related: RHEL-4196


author: Ray Strode <rstrode@redhat.com> - 40.0-6
changelog:
  - Copy and run the script from XDG_RUNTIME_DIR
    Resolves: https://issues.redhat.com/browse/RHEL-25536


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: David Benoit <dbenoit@redhat.com> 3.0.9-5
changelog:
  - Remove fedora-specific Go dependency automation macros
  - Remove dependency on golist
  - Temporarily remove incompatible template spec files
  - Update gobuild flags
  - Resolves: rhbz#1982298


author: Alejandro Sáez <asm@redhat.com> - 1.21.7-1
changelog:
  - Rebase to Go 1.21.7
  - Set GOTOOLCHAIN to local
  - Resolves: RHEL-24334
  - Resolves: RHEL-18364
  - Resolves: RHEL-18365


author: Alejandro Sáez <asm@redhat.com> - 1.22.3-1
changelog:
  - Rebase to 1.22.3
  - Removes re-enable-cgo.patch
  - Resolves: RHEL-35634
  - Resolves: RHEL-35883
  - Resolves: RHEL-10068
  - Resolves: RHEL-34924


author: Archana Ravindar <aravinda@redhat.com> - 1.22.4-1
changelog:
  - Rebase to Go1.22.4 that includes fixes for CVE-2024-24789 and CVE-2024-24790
  - Resolves: RHEL-40156


author: David Benoit <dbenoit@redhat.com> - 1.22.5-2
changelog:
  - Rebuild race detector archives from LLVM sources
  - Add golang-race subpackage
  - Resolves: RHEL-33421
  - Remove unused crypto/internal/boring/syso package
  - Resolves: RHEL-54335


author: Archana <aravinda@redhat.com> - 1.23.2-1
changelog:
  - Rebase to Go1.23.2
  - Remove fix standard crypto panic patch as the source already has changes
  - Resolves: RHEL-62392


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Peng Wu <pwu@redhat.com> - 20230817-1
changelog:
  - Update Noto CJK to Sans 2.004 and Serif 2.002
  - Drop some Noto CJK Language Specific OTFs sub packages
  - Resolves: RHEL-13738


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Sam Feifer <sfeifer@redhat.com> 10.2.6-2
changelog:
  - Fixes patch 1002 for update to golang-fips
  - Remove unused code under apsl-1.1 and apsl-1.2 licenses
  - Resolves RHEL-33655


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-10
changelog:
  - Resolves RHEL-7505
  - Adds a selinux policy for grafana
  - Resolves RHEL-12666
  - fix CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Resolves RHEL-19296
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.2.0-2
changelog:
  - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
  - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working
  - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
  - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
  - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
  - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - update to 5.0.0 tagged upstream community sources, see CHANGELOG
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - revert the breaking change (change of internal plugin IDs) of upstream v5.0.0,
    i.e. there are no breaking changes when performing this upgrade
  - enable Go modules in build process
  - make vendor and webpack tarballs reproducible
  - drop makefile in favor of create_bundles.sh script


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Jose Noguera <jnoguera@redhat.com> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Add ability to configure maximum number of boot attempts via env var and config file.
  - Add How does it work section to README.
  - Add CI via GitHub Actions and unit testing with BATS.
  - Add update platforms DNS resolutiona and connection checker as health checks out of the box


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.5-1
changelog:
  - The 0.15.5 release
  - Auto-detect image type and use correct rollback
  - Support for read only /boot mount
  - Warn users of missing disabled healthchecks
  - Add feature to disable healthchecks


author: Paul Whalen <pwhalen@fedoraproject.org> - 0.15.5-3
changelog:
  - Moved greenboot config to /etc/grub.d.
  - %post symlink greenboot.cfg to bootupd if present
  - %postun remove symlink from bootupd if present


author: Sayan Paul <paul.sayan@gmail.com> - 0.15.7-1
changelog:
  - Update to 0.15.7
  - Reword warning message for disabled checks
  - Fixed the issue that boot_counter cannot be unset and some scripts do not have executable permissions
  - Packit: only use IoT relevant branches


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-5
changelog:
  - Handle both compressed and uncompressed man pages
  - Fix build with small patch
  - Resolves: rhbz#2005247


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Bump version
  - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542,
    CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835
    Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037
    Resolves: RHEL-71019, RHEL-70995, RHEL-71163


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - CVE-2023-37327: integer overflow leading to heap overwrite in FLAC
    image tag handling
  - Resolves: RHEL-19471


author: Wim Taymans <wtaymans@redhat.com> - 1.22.12-4
changelog:
  - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
    CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
    CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
    CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
    CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
    CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
  - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
  - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
  - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
  - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
  - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
  - Resolves: RHEL-71189


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Kalev Lember <klember@redhat.com> - 3.24.25-2
changelog:
  - Backport upstream patches to fix regressions in Compose file parsing
  - Backport upstream patch to further tweak scrollbar transitions and size


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Kalev Lember <klember@redhat.com> - 2.24.33-3
changelog:
  - Drop imsettings dependency on Fedora as well
  - Recommend libcanberra-gtk2 for sound theme events in gtk2 apps


author: Kalev Lember <klember@redhat.com> - 4.1.2-1
changelog:
  - Update to 4.1.2
  - Disable gtk-doc support as we don't have gi-docgen in Fedora yet
  - Remove old obsoletes


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.1
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.4-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.4
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.0-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.1-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1
  - Resolves: RHEL-69761


author: Jindrich Novy <jnovy@redhat.com> - 6:0.8.2-1
changelog:
  - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2
  - Related: RHEL-60277


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-16
changelog:
  - fence_openstack: add support for reading config from clouds.yaml
    and openrc
    Resolves: rhbz#2041933, rhbz#2041935


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-22
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420
  - fence_gce: update fence agent
    Resolves: rhbz#2079889


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-23
changelog:
  - fence_ibm_vpc: remove unused instance parameter and make limit
    optional
    Resolves: rhbz#2081235


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-25
changelog:
  - all agents: unify ssl parameters to avoid having to use --ssl when
    using --ssl-secure/--ssl-insecure for some agents
    Resolves: rhbz#2072420


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-27
changelog:
  - fence_ibm_powervs: add support for proxy, private API servers and
    get token via API key
    Resolves: rhbz#2093216


author: Ryan O'Hara <rohara@redhat.com> - 2.4.7-1
changelog:
  - Update to 2.4.7 (#1966688)
  - Fix domain parts in :scheme and :path fields (CVE-2021-39240, #1998196)
  - Fix spaces in the :method field (CVE-2021-39241, #1998198)
  - Fix mismatch between :authority and Host fields (CVE-2021-39242, #1998200)
  - Fix request smuggling attack or response splitting (CVE-2021-40346, #2000621)


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 2.4.22-4
changelog:
  - Always clear retry flags in read/write functions to avoid CPU
    usage spikes
  - Fix "unable to load certificate chain from file" issue
    Resolves: RHEL-71925, RHEL-68780


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-7
changelog:
  - Resolves: #2094997 - CVE-2022-26377 httpd: mod_proxy_ajp: Possible request
    smuggling
  - Resolves: #2097032 - CVE-2022-28615 httpd: out-of-bounds read in 
    ap_strcmp_match()
  - Resolves: #2098248 - CVE-2022-31813 httpd: mod_proxy: X-Forwarded-For dropped
    by hop-by-hop mechanism
  - Resolves: #2097016 - CVE-2022-28614 httpd: out-of-bounds read via ap_rwrite()
  - Resolves: #2097452 - CVE-2022-29404 httpd: mod_lua: DoS in r:parsebody
  - Resolves: #2097459 - CVE-2022-30522 httpd: mod_sed: DoS vulnerability
  - Resolves: #2097481 - CVE-2022-30556 httpd: mod_lua: Information disclosure
    with websockets


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Joe Orton <jorton@redhat.com> - 2.4.57-6
changelog:
  - Resolves: RHEL-5071 - mod_dav_fs: add DavLockDBType
  - mod_dav_fs: add global mutex around lockdb interaction


author: Joe Orton <jorton@redhat.com> - 2.4.57-8
changelog:
  - mod_xml2enc: fix media type handling
    Resolves: RHEL-17686
  - mod_dav: add DavBasePath
    Resolves: RHEL-6600


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.59-1
changelog:
  - new version 2.4.59
  - Resolves: RHEL-14668 - RFE: httpd rebase to 2.4.59
  - Resolves: RHEL-31856 - httpd: HTTP response splitting
    (CVE-2023-38709)
  - Resolves: RHEL-31859 - httpd: HTTP Response Splitting in multiple
    modules (CVE-2024-24795)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-3
changelog:
  - Resolves: RHEL-68660 - RewriteRule proxying to UDS (unix domain socket)
    configured in .htaccess doesn't work on httpd-2.4.62-1


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.62-4
changelog:
  - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode
    characters in the name


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.24-5
changelog:
  - Fix covscan reviews. Related: rhbz#1963071

  - Implement ibus_im_context_set_surrounding_with_selection()


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.14.0-1
changelog:
  - New release
  - Add ignition-apply symlink
  - Add ignition-rmcfg symlink and ignition-delete-config.service


author: Miguel Martín <mmartinv@redhat.com> - 2.19.0-3
changelog:
  - Update ignition-edge commit to support FIPS
      - https://github.com/fedora-iot/ignition-edge/pull/2


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54546 Covscan issues: Resource Leak
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-2
changelog:
  - Related: RHEL-59788 Rebase Samba to the latest 4.21.x release
  - Resolves: RHEL-61642 Uninstall ACME separately during PKI uninstallation
  - Resolves: RHEL-56963 SSSD offline causing test-adtrust-install failure
  - Resolves: RHEL-56473 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-48104 Default hbac rules are duplicated on remote server post ipa-migrate in prod-mode
  - Resolves: RHEL-45330 [RFE] add a tool to quickly detect and fix issues with IPA ID ranges
  - Resolves: RHEL-40376 SID generation task is failing when SELinux is in Enforcing mode
  - Resolves: RHEL-4915 Last expired OTP token would be considered as still assigned to the user


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-5
changelog:
  - Resolves: RHEL-67414 ipa dns-zone --allow-query '!198.18.2.0/24;any;' fails with Unrecognized IPAddress flags
  - Resolves: RHEL-67410 ipa-migrate should also migrate DNS forward zones
  - Resolves: RHEL-67409 ipa-migrate in stage mode fails with TypeError: 'NoneType' object is not iterable
  - Resolves: RHEL-66964 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-64135 IDP configuration in the IdM WebUI shows Organization is required


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-6
changelog:
  - Resolves: RHEL-68448 ipa trust-add fails in FIPS mode with an internal error has occurred
  - Resolves: RHEL-69301 Support GSSAPI in Cockpit on IPA servers


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-7
changelog:
  - Resolves: RHEL-70760 Fix typo in ipa-migrate log file i.e 'Privledges' to 'Privileges'
  - Resolves: RHEL-70481 ipa-server-upgrade fails after established trust with ad
  - Resolves: RHEL-69927 add support for python cryptography 44.0.0
  - Resolves: RHEL-69908 All user groups are not being included during HSM token validation
  - Resolves: RHEL-69900 Upgrade to ipa-server-4.12.2-1.el9 OTP-based bind to LDAP without enforceldapotp is broken


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-8
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking [rhel-9]
  - Resolves: RHEL-71261 [RHEL-9.6] Include latest fixes in python3-ipatests package
  - Resolves: RHEL-67191 CVE-2024-11029 ipa: Administrative user data leaked through systemd journal [rhel-9.6]
  - Resolves: RHEL-59040 KRA installation failure caused by a certificate mismatch in NSS DB and configuration file.


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-9
changelog:
  - Resolves: RHEL-74465 kinit with external idp user is failing
  - Resolves: RHEL-75656 Include latest fixes in python3-ipatests package


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-10
changelog:
  - Resolves: RHEL-73022 A slow HSM can cause IPA server installation to fail setting up certificate tracking


author: Julien Rische <jrische@redhat.com> - 4.12.0-4
changelog:
  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-5
changelog:
  - Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
  - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-6
changelog:
  - Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-46003 ipa-migrate -V options fails to display version
  - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
  - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-7
changelog:
  - Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
  - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Rob Crittenden <rcritten@redhat.com> - 0.8-7.1
changelog:
  - Switch from tox to pytest as the test runner. tox is being deprecated
    in some distros. (#1942157)


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Jan Macku <jamacku@redhat.com> - 20210202-10
changelog:
  - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110)
  - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718)
  - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480)
  - ping: Fix socket error reporting (RHEL-4608)


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:1.8.0.332.b09-2
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102435


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.332.b09-3
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Perform configuration changes (e.g. nss.cfg, nss.fips.cfg, tzdb.dat) in installjdk
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2099801
  - Resolves: rhbz#2100678


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b06-0.1.ea
changelog:
  - Update to shenandoah-jdk8u342-b06 (EA)
  - Update release notes for shenandoah-8u342-b06.
  - Switch to EA mode for 8u342 pre-release builds.
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Remove redundant "REPOS" variable from tarball script
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Resolves: rhbz#2083322


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.342.b07-2
changelog:
  - Update to shenandoah-jdk8u342-b07 (GA)
  - Update release notes for 8u342-b07.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2106509


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-2
changelog:
  - Update to shenandoah-jdk8u345-b01 (GA)
  - Update release notes for 8u345-b01.
  - Resolves: rhbz#2112405


author: Stephan Bergmann <sbergman@redhat.com> - 1:1.8.0.345.b01-3
changelog:
  - Disable copy-jdk-configs for Flatpak builds
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102727


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-4
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121273


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.345.b01-5
changelog:
  - Allow the default keystore to be configured using security.systemCACerts
  - Use of the property can now be disabled using -Dsecurity.systemCACerts=
  - Move cacerts replacement to install section and retain original of this and tzdb.dat
  - Resolves: rhbz#2077006


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b07-0.2.ea
changelog:
  - Update to shenandoah-jdk8u352-b07 (EA)
  - Update release notes for shenandoah-8u352-b07.
  - Switch to EA mode for 8u352 pre-release builds.
  - Rebase FIPS patch against 8u352-b07
  - Resolves: rhbz#2130623


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.352.b08-2
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b01-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b01 (EA)
  - Update release notes for shenandoah-8u362-b01.
  - Switch to EA mode for 8u362 pre-release builds.
  - Drop JDK-8195607/PR3776/RH1760437 now this is upstream
  - Related: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b07-0.3.ea
changelog:
  - Update to shenandoah-jdk8u362-b07 (EA)
  - Update release notes for shenandoah-8u362-b07.
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Drop tzdata patches for 2022d & 2022e (JDK-8294357 & JDK-8295173) which are now upstream
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150196


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b08-3
changelog:
  - Update to shenandoah-jdk8u352-b08 (GA)
  - Update release notes for shenandoah-8u352-b08.
  - Fix broken links and missing release notes in older releases.
  - Drop RH1163501 patch which is not upstream or in 11, 17 & 19 packages and seems obsolete
    - Patch was broken by inclusion of "JDK-8293554: Enhanced DH Key Exchanges"
    - Patch was added for a specific corner case of a 4096-bit DH key on a Fedora host that no longer exists
    - Fedora now appears to be using RSA and the JDK now supports ECC in preference to large DH keys
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-3
changelog:
  - Update cacerts patch to fix OPENJDK-1433 SecurityManager issue
  - Update to shenandoah-jdk8u352-b09 (GA)
  - Update release notes for shenandoah-8u352-b09.
  - Resolves: rhbz#2162714


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Resolves: rhbz#2150202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.362.b09-4
changelog:
  - Drop use of portable build on s390x due to libffi compatibility issue (needs libffi.so.6)
  - Related: rhbz#2150202


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.15.0.10-3
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2102434


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-4
changelog:
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2099839
  - Resolves: rhbz#2100676


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.7-0.1.ea
changelog:
  - Update to jdk-11.0.16+7
  - Update release notes to 11.0.16+7
  - Switch to EA mode for 11.0.16 pre-release builds.
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Resolves: rhbz#2083325


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-2
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Switch to GA mode for release
  - Resolves: rhbz#2106517


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-2
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119528


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-3
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121275


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.1-0.2.ea
changelog:
  - Update to jdk-11.0.17+1
  - Update release notes to 11.0.17+1
  - Switch to EA mode for 11.0.17 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130619


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.17.0.8-2
changelog:
  - Update to jdk-11.0.17+8 (GA)
  - Update release notes to 11.0.17+8
  - Switch to GA mode for release
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.1-0.3.ea
changelog:
  - Update to jdk-11.0.18+1
  - Update release notes to 11.0.18+1
  - Switch to EA mode for 11.0.18 pre-release builds.
  - Drop local copies of JDK-8294357 & JDK-8295173 now upstream contains tzdata 2022e
  - Drop local copy of JDK-8275535 which is finally upstream
  - Related: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.9-0.3.ea
changelog:
  - Update to jdk-11.0.18+9
  - Update release notes to 11.0.18+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150197


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-3
changelog:
  - Update to jdk-11.0.18+10 (GA)
  - Update release notes to 11.0.18+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.18.0.10-4
changelog:
  - On portable architectures, replace build section with extraction of existing builds from portables
  - Rewrite ELF files so the source file path is correct and debugsources can be assembled
  - Backport SHA-3 support for PKCS11 provider
  - Sync patch set with portable build we are using by removing rh1648644-java_access_bridge_privileged_security.patch
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-2
changelog:
  - Update to jdk-11.0.19.0+7
  - Update release notes to 11.0.19.0+7
  - Require tzdata 2023c due to local inclusion of JDK-8274864 & JDK-8305113
  - Update generate_tarball.sh to add support for passing a boot JDK to the configure run
  - Add POSIX-friendly error codes to generate_tarball.sh and fix whitespace
  - Remove .jcheck and GitHub support when generating tarballs, as done in upstream release tarballs
  - Rebase FIPS support against 11.0.19+6
  - Rebase RH1750419 alt-java patch against 11.0.19+6
  - Replace local copies of JDK portable binaries with build dependencies
  - Use portable build on x86_32 now one is available
  - ** This tarball is embargoed until 2023-04-18 @ 1pm PT. **
  - Resolves: rhbz#2185182
  - Resolves: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-3
changelog:
  - Revert "Restore native build for x86 as there is no portable build"
  - Reintroduce useful cleanups from x86 reversion
  - Adjust oj_vendor_version & oj_vendor_bug_url to match the portable so test passes
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.19.0.7-4
changelog:
  - Include the java-11-openjdk-portable.spec file with instructions on how to rebuild.
  - Related: rhbz#2150201


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-1
changelog:
  - Update to jdk-11.0.20.0+8 (GA)
  - Update release notes to 11.0.20.0+8
  - Drop local inclusion of JDK-8274864 & JDK-8305113 as they are included in 11.0.20+1
  - Bump tzdata requirement to 2023c now it is available in the buildroot
  - Bump bundled LCMS version to 2.15 as in jdk-11.0.20+1.
  - Bump bundled HarfBuzz version to 7.0.1 as in jdk-11.0.20+7
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - ** This tarball is embargoed until 2023-07-18 @ 1pm PT. **
  - Resolves: rhbz#2217715
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.0.8-3
changelog:
  - Fix tzdata requirement copy-and-paste error that led to two BuildRequires and no Requires
  - Resolves: rhbz#2224420


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.20.1.1-1
changelog:
  - Update to jdk-11.0.20.1+1 (GA)
  - Add backport of JDK-8312489 already upstream in 11.0.22 (see OPENJDK-2095)
  - Add backport of JDK-8243210 already upstream in 11.0.21 (see RH2229269)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Resolves: rhbz#2236590


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.0.7-1
changelog:
  - Update to jdk-17.0.8+7 (GA)
  - Update release notes to 17.0.8+7
  - Switch to GA mode for final release.
  - Sync the copy of the portable specfile with the latest update
  - Add note at top of spec file about rebuilding
  - * This tarball is embargoed until 2023-07-18 @ 1pm PT. *
  - Resolves: rhbz#2221106


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.8.1.1-1
changelog:
  - Update to jdk-17.0.8.1+1 (GA)
  - Update release notes to 17.0.8.1+1
  - Add backport of JDK-8312489 already upstream in 17.0.10 (see OPENJDK-2095)
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise runtime and buildtime tzdata requirements
  - Resolves: rhbz#2236592


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.9.0.9-1
changelog:
  - Update to jdk-17.0.9+9 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Re-generate FIPS patch against 17.0.9+1 following backport of JDK-8209398
  - Bump libpng version to 1.6.39 following JDK-8305815
  - Bump HarfBuzz version to 7.2.0 following JDK-8307301
  - Bump freetype version to 2.13.0 following JDK-8306881
  - Update generate_tarball.sh to be closer to upstream vanilla script inc. no more ECC removal
  - Sync generate_tarball.sh with 11u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Apply all patches using -p1
  - Temporarily turn off 'fresh_libjvm' due to removal of JVM_IsThreadAlive (JDK-8305425)
  - Add missing JFR and jpackage alternative ghosts
  - Move jcmd to the headless package
  - ** This tarball is embargoed until 2023-10-17 @ 1pm PT. **
  - Resolves: RHEL-12228
  - Resolves: RHEL-13660
  - Resolves: RHEL-13665
  - Resolves: RHEL-3494
  - Resolves: RHEL-11317
  - Resolves: RHEL-3461


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+6 (EA)
  - fips-17u-d63771ea660.patch: Regenerate from gnu-andrew branch
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash
  - generate_source_tarball.sh: shellcheck: Double-quote variable references
  - generate_source_tarball.sh: shellcheck: Do not use -a
  - generate_source_tarball.sh: shellcheck: Do not use $ in expression
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Add note on network usage of OPENJDK_LATEST
  - Related: RHEL-20997


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.10.0.7-1
changelog:
  - Update to jdk-17.0.10+7 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Move to -P<n> usage for patch macro which works on all RPM versions
  - Remove RH1648644 patch not in portable build (and so not applied to binary used)
  - Re-enable DEFAULT_PROMOTED_VERSION_PRE check disabled for the July 2023 release
  - generate_source_tarball.sh: Add --sort=name to tar invocation for reproducibility
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20997


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.7-0.2.ea
changelog:
  - Update to jdk-17.0.11+7 (EA)
  - Update buildjdkver to match the featurever
  - Use featurever macro to specify fips patch
  - Explain patchN syntax situation in a comment
  - Sync generate_source_tarball.sh
  - Require tzdata 2023d (JDK-8322725)
  - openjdk_news.sh: Use grep -E instead of egrep
  - Remove RH1649512 patch for libjpeg-turbo FAR macro
  - Move pcsc-lite-libs patch to in-need-of-upstreaming section
  - Related: RHEL-30941


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.11.0.9-2
changelog:
  - Update to jdk-17.0.11+9 (GA)
  - Add openjdk-17.0.11+9.tar.xz to .gitignore
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Update buildver from 7 to 9
  - Update portablerelease from 1 to 3
  - Change is_ga from 0 to 1 to enable GA mode for release
  - Update tzdata Requires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires comment to mention that 2024a is not yet in the buildroot
  - Update tzdata BuildRequires from 2023c to 2023d
  - Update sources from openjdk-17.0.11+7-ea.tar.xz to openjdk-17.0.11+9.tar.xz
  - Resolves: RHEL-30941
  - Resolves: RHEL-32421
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-3
changelog:
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set rpmrelease to 3
  - Set portablesuffix to el9


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.13+1 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+1-ea.tar.xz
  - Synchronize java-17-openjdk-portable.specfile
  - Set updatever to 13
  - Set buildver to 1
  - Set is_ga to 0
  - Update sources to openjdk-17.0.13+1-ea.tar.xz
  - Related: RHEL-58785
  - Remove 0001-8332174-Remove-2-unpaired-RLO-Unicode-characters-in-.patch
  - Remove unicode section from rpminspect.yml, fixed instead by
    https://gitlab.cee.redhat.com/osci/rpminspect-data-redhat/-/merge_requests/180
    (OPENJDK-2904)
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.9-0.1.ea
changelog:
  - Update to jdk-17.0.13+9 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+9-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 9
  - Set rpmrelease to 1
  - Set portablerelease to 1
  - Update sources to openjdk-17.0.13+9-ea.tar.xz
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.10-0.1.ea
changelog:
  - Update to jdk-17.0.13+10 (EA)
  - Update .gitignore to ignore openjdk-17.0.13+10-ea.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9
  - Set buildver to 10
  - Update sources to openjdk-17.0.13+10-ea.tar.xz
  - Related: RHEL-58785


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.10-0.2.ea
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Set rpmrelease to 2
  - Related: RHEL-58785


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.13.0.11-2
changelog:
  - Update to jdk-17.0.13+11 (GA)
  - Update .gitignore to ignore openjdk-17.0.13+11.tar.xz
  - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8
  - Set buildver to 11
  - Set is_ga to 1
  - Update sources to openjdk-17.0.13+11.tar.xz
  - Resolves: RHEL-58785
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.13.0.11-4
changelog:
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel', etc.
  - Set rpmrelease to 4
  - Resolves: RHEL-63034


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-5
changelog:
  - Switch to static builds, reducing system dependencies and making build more portable
  - Resolves: rhbz#2121268


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.1-0.2.ea
changelog:
  - Update to jdk-17.0.5+1
  - Update release notes to 17.0.5+1
  - Switch to EA mode for 17.0.5 pre-release builds.
  - Bump HarfBuzz bundled version to 4.4.1 following JDK-8289853
  - Bump FreeType bundled version to 2.12.1 following JDK-8290334
  - Related: rhbz#2130622


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-2
changelog:
  - Update to jdk-17.0.5+8 (GA)
  - Update release notes to 17.0.5+8 (GA)
  - Switch to GA mode for final release.
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources
  - Resolves: rhbz#2133695


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.5.0.8-5
changelog:
  - Update FIPS support to bring in latest changes
  - * Add nss.fips.cfg support to OpenJDK tree
  - * RH2117972: Extend the support for NSS DBs (PKCS11) in FIPS mode
  - * Remove forgotten dead code from RH2020290 and RH2104724
  - Drop local nss.fips.cfg.in handling now this is handled in the patched OpenJDK build
  - Resolves: rhbz#2118493


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.1-0.3.ea
changelog:
  - Update to jdk-17.0.6+1
  - Update release notes to 17.0.6+1
  - Switch to EA mode for 17.0.6 pre-release builds.
  - Re-enable EA upstream status check now it is being actively maintained.
  - Drop JDK-8294357 (tzdata2022d) & JDK-8295173 (tzdata2022e) local patches which are now upstream
  - Drop JDK-8275535 local patch now this has been accepted and backported upstream
  - Bump tzdata requirement to 2022e now the package is available in RHEL
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.3.ea
changelog:
  - Update to jdk-17.0.6+9
  - Update release notes to 17.0.6+9
  - Drop local copy of JDK-8293834 now this is upstream
  - Require tzdata 2022g due to inclusion of JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone
  - Resolves: rhbz#2150198


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Fix flatpak builds by disabling TestTranslations test due to missing tzdb.dat
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.9-0.4.ea
changelog:
  - Update FIPS support to bring in latest changes
  - * OJ1357: Fix issue on FIPS with a SecurityManager in place
  - Related: rhbz#2150198


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.6.0.10-3
changelog:
  - Update to jdk-17.0.6.0+10
  - Update release notes to 17.0.6.0+10
  - Switch to GA mode for release
  - Resolves: rhbz#2160111


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-2
changelog:
  - Update to jdk-17.0.4.1+1
  - Update release notes to 17.0.4.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2119532


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.4.1.1-3
changelog:
  - Update FIPS support to bring in latest changes
  - * RH2104724: Avoid import/export of DH private keys
  - * RH2092507: P11Key.getEncoded does not work for DH keys in FIPS mode
  - * Build the systemconf library on all platforms
  - * RH2048582: Support PKCS#12 keystores
  - * RH2020290: Support TLS 1.3 in FIPS mode
  - Resolves: rhbz#2104725
  - Resolves: rhbz#2117758
  - Resolves: rhbz#2115164
  - Resolves: rhbz#2029665


author: Stephan Bergmann <sbergman@redhat.com> - 1:17.0.4.1.1-4
changelog:
  - Fix flatpak builds (catering for their uncompressed manual pages)
  - Fix flatpak builds by exempting them from bootstrap
  - Resolves: rhbz#2102726


author: Petra Alice Mikova <pmikova@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to ea version of jdk18
  - Add new slave jwebserver and corresponding manpage
  - Adjust rh1684077-openjdk_should_depend_on_pcsc-lite-libs_instead_of_pcsc-lite-devel.patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:18.0.2.0.9-1
changelog:
  - Update to jdk-18.0.2 release
  - Support JVM variant zero following JDK-8273494 no longer installing Zero's libjvm.so in the server directory
  - Rebase FIPS patches from fips-18u branch
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Drop now unused fresh_libjvm, build_hotspot_first, bootjdk and buildjdkver variables, as we don't build a JDK here
  - Drop tzdata patches added for 17.0.7 which will eventually appear in the upstream tarball when we reach OpenJDK 21
  - Disable tzdata tests until we are on the latest JDK and things are back in sync
  - Use empty nss.fips.cfg until it is again available via the FIPS patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-1
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Rebase FIPS patches from fips-19u branch
  - Remove references to sample directory removed by JDK-8284999
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases
  - Related: RHEL-12998


author: Jiri Vanek <jvanek@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Dropped JDK-8295447, JDK-8296239 & JDK-8299439 patches now upstream
  - Adapted rh1750419-redhat_alt_java.patch
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:20.0.0.0.36-1
changelog:
  - Update to jdk-20.0.2+9
  - Update release notes to 20.0.2+9
  - Update system crypto policy & FIPS patch from new fips-20u tree
  - Update generate_tarball.sh ICEDTEA_VERSION
  - Update CLDR reference data following update to 42 (Rocky Mountain-Normalzeit => Rocky-Mountain-Normalzeit)
  - Related: RHEL-12998


author: Petra Alice Mikova <pmikova@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Replace smoke test files used in the staticlibs test, as fdlibm was removed by JDK-8303798
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-1
changelog:
  - Update to jdk-21.0.0+35
  - Update system crypto policy & FIPS patch from new fips-21u tree
  - Update generate_tarball.sh to sync with upstream vanilla script inc. no more ECC removal
  - Drop fakefeaturever now it is no longer needed
  - Change top_level_dir_name to use the VCS tag, matching new upstream release style tarball
  - Use upstream release URL for OpenJDK source
  - Re-enable tzdata tests now we are on the latest JDK and things are back in sync
  - Install jaxp.properties introduced by JDK-8303530
  - Install lible.so introduced by JDK-8306983
  - Related: RHEL-12998
  - Resolves: RHEL-41087


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.0.0.35-2
changelog:
  - Update documentation (README.md)
  - Replace alt-java patch with a binary separate from the JDK
  - Drop stale patches that are of little use any more:
  - * nss.cfg has been disabled since early PKCS11 work and long superseded by FIPS work
  - * No accessibility subpackage to warrant RH1648242 & RH1648644 patches any more
  - * No use of system libjpeg turbo to warrant RH649512 patch any more
  - Replace RH1684077 pcsc-lite-libs patch with better JDK-8009550 fix being upstreamed
  - Adapt alt-java test to new binary where there is always a set_speculation function
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-1
changelog:
  - Update to jdk-21.0.1.0+12 (GA)
  - Update release notes to 21.0.1.0+12
  - Sync the copy of the portable specfile with the latest update
  - Update openjdk_news script to specify subdirectory last
  - Add missing discover_trees script required by openjdk_news
  - Synchronise bundled versions with 21u sources (FreeType, LCMS, HarfBuzz, libpng)
  - Sync generate_tarball.sh with 11u & 17u version
  - Update bug URL for RHEL to point to the Red Hat customer portal
  - Fix upstream release URL for OpenJDK source
  - Following JDK-8005165, class data sharing can be enabled on all JIT architectures
  - Use tapsets from the misc tarball
  - Introduce 'prelease' for the portable release versioning, to handle EA builds
  - Make sure root installation directory is created first
  - Use in-place substitution for all but the first of the tapset changes
  - Synchronise runtime and buildtime tzdata requirements
  - Remove ghosts for binaries not in java-21-openjdk (pack200, rmid, unpack200)
  - Add missing jfr, jpackage and jwebserver alternative ghosts
  - Move jcmd to the headless package
  - Revert alt-java binary location to being within the JDK tree
  - Resolves: RHEL-12998
  - Resolves: RHEL-14953
  - Resolves: RHEL-13925
  - Resolves: RHEL-14957
  - Related: RHEL-14945
  - Resolves: RHEL-11321
  - Resolves: RHEL-14947


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-2
changelog:
  - Define pkgnameroot to simplify build requirements and allow '-rhel7' suffix on RHEL
  - Related: RHEL-12998


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.1.0.12-3
changelog:
  - Include JDK-8311630 patch to implement Foreign Function & Memory preview API on s390x
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-16290


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-20999


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to upstream inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-30946


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-30946


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32424


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45355
  - Resolves: RHEL-46029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45355
  - Resolves: RHEL-47395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47023


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-2
changelog:
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Add build scripts to repository to ease remembering all CentOS & RHEL targets and options
  - Related: RHEL-58797


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.9-0.2.ea
changelog:
  - Update to jdk-21.0.5+9 (EA)
  - Update release notes to 21.0.5+9
  - Switch to EA mode
  - Bump giflib version to 5.2.2 following JDK-8328999
  - Bump libpng version to 1.6.43 following JDK-8329004
  - Sync with RHEL 7 portable build:
    - Use ExclusiveArch over ExcludeArch
    - pkgos definition needs to be early enough to be used in portablesuffix
  - Make build scripts executable
  - Sync the copy of the portable specfile with the latest update
  - Resolves: RHEL-58797
  - Resolves: RHEL-17191


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-2
changelog:
  - Update to jdk-21.0.5+10 (GA)
  - Update release notes to 21.0.5+10
  - Switch to GA mode.
  - Revert JDK-8327501 & JDK-8328366 backport until more mature.
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Resolves: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.10-3
changelog:
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. **
  - Related: RHEL-61344


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.5.0.11-2
changelog:
  - Update to jdk-21.0.5+11 (GA)
  - Update release notes to 21.0.5+11
  - Remove local JDK-8327501 & JDK-8328366 backport as this is now upstream.
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-61344


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-533.el9]
changelog:
  - ext4: sanity check for NULL pointer after ext4_force_shutdown (Brian Foster) [RHEL-64967] {CVE-2024-43898}
  - ext4: dax: fix overflowing extents beyond inode size when partially writing (Brian Foster) [RHEL-64575] {CVE-2024-50015}
  - ext4: fix access to uninitialised lock in fc replay path (Brian Foster) [RHEL-63918] {CVE-2024-50014}
  - ext4: fix error message when rejecting the default hash (Brian Foster) [RHEL-63899]
  - ext4: factor out ext4_hash_info_init() (Brian Foster) [RHEL-63899]
  - ext4: filesystems without casefold feature cannot be mounted with siphash (Brian Foster) [RHEL-63899] {CVE-2024-49968}
  - ext4: check stripe size compatibility on remount as well (Brian Foster) [RHEL-63289] {CVE-2024-47700}
  - ata: libata: avoid superfluous disk spin down + spin up during hibernation (Tomas Henzl) [RHEL-52820]
  - ata: libata-scsi: Fix ata_msense_control() CDL page reporting (Tomas Henzl) [RHEL-52820]
  - ata: libata: Fix W=1 compilation warning (Tomas Henzl) [RHEL-52820]
  - ata: libata: Move sector_buf from struct ata_port to struct ata_device (Tomas Henzl) [RHEL-52820]
  - ata: libata: Rename ata_eh_read_sense_success_ncq_log() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Move sata_std_hardreset() definition to libata-sata.c (Tomas Henzl) [RHEL-52820]
  - ata: libata: Move sata_down_spd_limit() to libata-sata.c (Tomas Henzl) [RHEL-52820]
  - ata: libata: Improve __ata_qc_complete() (Tomas Henzl) [RHEL-52820]
  - ata: libata-scsi: Improve ata_scsi_handle_link_detach() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Cleanup libata-transport (Tomas Henzl) [RHEL-52820]
  - ata: libata: Add helper ata_eh_decide_disposition() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Remove ata_noop_qc_prep() (Tomas Henzl) [RHEL-52820]
  - ata: libata: Change ata_dev_knobble() to return a bool (Tomas Henzl) [RHEL-52820]
  - perf test: Restore sample rate for perf_event_attr (Michael Petlan) [RHEL-22716]
  - perf test attr: Add back missing topdown events (Michael Petlan) [RHEL-15967]
  - gfs2: Prevent inode creation race (Andreas Gruenbacher) [RHEL-68102]
  - gfs2: Only defer deletes when we have an iopen glock (Andreas Gruenbacher) [RHEL-68102]
  - thermal: intel: int340x: processor: Fix warning during module unload (David Arcari) [RHEL-65903] {CVE-2024-50093}
  - x86/resctrl: Avoid overflow in MB settings in bw_validate() (David Arcari) [RHEL-59825]
  - KVM: SVM: Propagate error from snp_guest_req_init() to userspace (Bandan Das) [RHEL-65840]
  - KVM: SEV: Provide support for SNP_EXTENDED_GUEST_REQUEST NAE event (Bandan Das) [RHEL-65840]
  - x86/sev: Move sev_guest.h into common SEV header (Bandan Das) [RHEL-65840]
  - KVM: SEV: Provide support for SNP_GUEST_REQUEST NAE event (Bandan Das) [RHEL-65840]
  - perf vendor events: Move PM_BR_MPRED_CMPL event for power10 platform (Mamatha Inamdar) [RHEL-52736]
  - perf vendor events power10: Move the JSON/events (Mamatha Inamdar) [RHEL-52736]
  - perf vendor events power10: Update JSON/events (Mamatha Inamdar) [RHEL-52736]
  - perf vendor events power10: Update JSON/events (Mamatha Inamdar) [RHEL-52736]
  - tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). (Guillaume Nault) [RHEL-66328] {CVE-2024-50154}
  - net: explicitly clear the sk pointer, when pf->create fails (Andrea Claudi) [RHEL-66687] {CVE-2024-50186}
  - scsi: libcxgbi: Remove an unused field in struct cxgbi_device (Chris Leech) [RHEL-66745]
  - scsi: bnx2i: Remove unused declarations (Chris Leech) [RHEL-66745]
  - scsi: iscsi: Remove unused list 'connlist_err' (Chris Leech) [RHEL-66745]
  - scsi: qla4xxx: Replace deprecated strncpy() with strscpy() (Chris Leech) [RHEL-66745]
  - scsi: be2iscsi: Make some variables static (Chris Leech) [RHEL-66745]
  - net: sched: fix use-after-free in taprio_change() (Xin Long) [RHEL-65971] {CVE-2024-50127}
  - selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: local_termination: Down ports on cleanup (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: no_forwarding: Down ports on cleanup (Ivan Vecera) [RHEL-66601]
  - selftests: net/forwarding: spawn sh inside vrf to speed up ping loop (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: add PTP frames to the mix (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: don't use xfail_on_veth() (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: introduce new tests which capture VLAN behavior (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: add one more test for VLAN-aware bridges (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: parameterize test name (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: parameterize sending interface (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: refactor macvlan creation/deletion (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: kill PIDs before del netns (Ivan Vecera) [RHEL-66601]
  - selftests: libs: Drop unused functions (Ivan Vecera) [RHEL-66601]
  - selftests: libs: Drop slow_path_trap_install()/_uninstall() (Ivan Vecera) [RHEL-66601]
  - selftests: mirror_gre_lag_lacp: Drop unnecessary code (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: Drop dual SW/HW testing (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: mirror_test(): Allow exact count of packets (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: do_test_span_dir_ips(): Install accurate taps (Ivan Vecera) [RHEL-66601]
  - selftests: mirror_gre_lag_lacp: Check counters at tunnel (Ivan Vecera) [RHEL-66601]
  - selftests: lib: tc_rule_stats_get(): Move default to argument definition (Ivan Vecera) [RHEL-66601]
  - selftests: mirror: Drop direction argument from several functions (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Add test for minimum and maximum MTU (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: remove 'ns' var in setup_ns (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: do not set ns var as readonly (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: remove ns from list after clean-up (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: ignore possible errors (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: avoid error removing empty netns name (Ivan Vecera) [RHEL-66601]
  - selftests: net: lib: support errexit with busywait (Ivan Vecera) [RHEL-66601]
  - selftests: net: local_termination: annotate the expected failures (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: add wait_for_dev() helper (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: add check_driver() helper (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_nh: Add a diagram (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_mpath_nh_res: Add a diagram (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_mpath_nh: Add a diagram (Ivan Vecera) [RHEL-66601]
  - selftests: drivers: hw: Include tc_common.sh in hw_stats_l3 (Ivan Vecera) [RHEL-66601]
  - selftests: drivers: hw: ethtool.sh: Adjust output (Ivan Vecera) [RHEL-66601]
  - selftests: drivers: hw: Fix ethtool_rmon (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Add a test for testing lib.sh functionality (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: router_mpath_nh_lib: Don't skip, xfail on veth (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Mark performance-sensitive tests (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Change inappropriate log_test_skip() calls (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Ditch skip_on_veth() (Ivan Vecera) [RHEL-66601]
  - selftests: mlxsw: ethtool_lanes: Source ethtool lib from correct path (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Move several selftests (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ipip_lib: Do not import lib.sh (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Make {, ip6}gre-inner-v6-multipath tests more robust (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: Remove IPv6 L3 multipath hash tests (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_mm: fall back to aggregate if device does not report pMAC stats (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_mm: support devices with higher rx-min-frag-size (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_rmon: Add histogram counter test (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: ethtool_mm: Skip when MAC Merge is not supported (Ivan Vecera) [RHEL-66601]
  - selftests: forwarding: add a test for MAC Merge layer (Ivan Vecera) [RHEL-66601]
  - bpf: Fix a sdiv overflow issue (CKI Backport Bot) [RHEL-64597] {CVE-2024-49888}
  - xfrm: validate new SA's prefixlen using SA family when sel.family is unset (Sabrina Dubroca) [RHEL-66461] {CVE-2024-50142}
  - selinux,smack: don't bypass permissions check in inode_setsecctx hook (CKI Backport Bot) [RHEL-66109] {CVE-2024-46695}
  - ext4: don't set SB_RDONLY after filesystem errors (CKI Backport Bot) [RHEL-66718] {CVE-2024-50191}
  - netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put() (CKI Backport Bot) [RHEL-63300] {CVE-2024-47685}
  - netfilter: bpf: must hold reference on net namespace (Florian Westphal) [RHEL-65877] {CVE-2024-50130}
  - bpf: fix order of args in call to bpf_map_kvcalloc (Viktor Malik) [RHEL-30773]
  - bpf: Allow return values 0 and 1 for kprobe session (Viktor Malik) [RHEL-30773]
  - selftests/bpf: skip the timer_lockup test for single-CPU nodes (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add tests for tail calls with locks and refs (Viktor Malik) [RHEL-30773]
  - bpf: Unify resource leak checks (Viktor Malik) [RHEL-30773]
  - bpf: Tighten tail call checks for lingering locks, RCU, preempt_disable (Viktor Malik) [RHEL-30773]
  - bpf: fix do_misc_fixups() for bpf_get_branch_snapshot() (Viktor Malik) [RHEL-30773]
  - bpf: use type_may_be_null() helper for nullable-param check (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add timer lockup selftest (Viktor Malik) [RHEL-30773]
  - bpf: Defer work in bpf_timer_cancel_and_free (Viktor Malik) [RHEL-30773]
  - bpf: Fail bpf_timer_cancel when callback is being cancelled (Viktor Malik) [RHEL-30773]
  - selftests/bpf: amend for wrong bpf_wq_set_callback_impl signature (Viktor Malik) [RHEL-30773]
  - bpf: helpers: fix bpf_wq_set_callback_impl signature (Viktor Malik) [RHEL-30773]
  - bpf: Fix atomic probe zero-extension (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add more ring buffer test coverage (Viktor Malik) [RHEL-30773]
  - bpf: Change bpf_session_cookie return value to __u64 * (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a few tests to cover (Viktor Malik) [RHEL-30773]
  - bpf: Add missed var_off setting in coerce_subreg_to_size_sx() (Viktor Malik) [RHEL-30773]
  - bpf: Add missed var_off setting in set_sext32_default_val() (Viktor Malik) [RHEL-30773]
  - bpf: Harden __bpf_kfunc tag against linker kfunc removal (Viktor Malik) [RHEL-30773]
  - compiler_types.h: Define __retain for __attribute__((__retain__)) (Viktor Malik) [RHEL-30773]
  - bpf: fix UML x86_64 compile failure (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add test coverage for reg_set_min_max handling (Viktor Malik) [RHEL-30773]
  - bpf: Reduce stack consumption in check_stack_write_fixed_off (Viktor Malik) [RHEL-30773]
  - bpf: Fix reg_set_min_max corruption of fake_reg (Viktor Malik) [RHEL-30773]
  - bpf: Make bpf_session_cookie() kfunc return long * (Viktor Malik) [RHEL-30773]
  - bpf: Set run context for rawtp test_run callback (Viktor Malik) [RHEL-30773]
  - bpf, devmap: Remove unnecessary if check in for loop (Viktor Malik) [RHEL-30773]
  - libbpf: don't close(-1) in multi-uprobe feature detector (Viktor Malik) [RHEL-30773]
  - bpf: Fix bpf_session_cookie BTF_ID in special_kfunc_set list (Viktor Malik) [RHEL-30773]
  - powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH (Viktor Malik) [RHEL-30773]
  - selftests/bpf: extend multi-uprobe tests with USDTs (Viktor Malik) [RHEL-30773]
  - selftests/bpf: extend multi-uprobe tests with child thread case (Viktor Malik) [RHEL-30773]
  - libbpf: detect broken PID filtering logic for multi-uprobe (Viktor Malik) [RHEL-30773]
  - bpf: remove unnecessary rcu_read_{lock,unlock}() in multi-uprobe attach logic (Viktor Malik) [RHEL-30773]
  - bpf: fix multi-uprobe PID filtering logic (Viktor Malik) [RHEL-30773]
  - bpf: Fix potential integer overflow in resolve_btfids (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add more variations of map-in-map situations (Viktor Malik) [RHEL-30773]
  - bpf: save extended inner map info for percpu array maps as well (Viktor Malik) [RHEL-30773]
  - bpf, docs: Fix the description of 'src' in ALU instructions (Viktor Malik) [RHEL-30773]
  - bpf: make list_for_each_entry portable (Viktor Malik) [RHEL-30773]
  - bpf: ignore expected GCC warning in test_global_func10.c (Viktor Malik) [RHEL-30773]
  - bpf: disable strict aliasing in test_global_func9.c (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Fix a few tests for GCC related warnings. (Viktor Malik) [RHEL-30773]
  - s390/bpf: Emit a barrier for BPF_FETCH instructions (Viktor Malik) [RHEL-30773]
  - kbuild,bpf: Switch to using --btf_features for pahole v1.26 and later (Viktor Malik) [RHEL-30773]
  - kbuild: avoid too many execution of scripts/pahole-flags.sh (Viktor Malik) [RHEL-30773]
  - bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (Viktor Malik) [RHEL-30773]
  - bpf: guard BPF_NO_PRESERVE_ACCESS_INDEX in skb_pkt_end.c (Viktor Malik) [RHEL-30773]
  - bpf: avoid UB in usages of the __imm_insn macro (Viktor Malik) [RHEL-30773]
  - bpf: avoid uninitialized warnings in verifier_global_subprogs.c (Viktor Malik) [RHEL-30773]
  - bpf, arm64: Add support for lse atomics in bpf_arena (Viktor Malik) [RHEL-30773]
  - selftests/bpf: shorten subtest names for struct_ops_module test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: validate struct_ops early failure detection logic (Viktor Malik) [RHEL-30773]
  - libbpf: improve early detection of doomed-to-fail BPF program loading (Viktor Malik) [RHEL-30773]
  - libbpf: fix libbpf_strerror_r() handling unknown errors (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add another struct_ops callback use case test (Viktor Malik) [RHEL-30773]
  - libbpf: handle yet another corner case of nulling out struct_ops program (Viktor Malik) [RHEL-30773]
  - libbpf: remove unnecessary struct_ops prog validity check (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add CFLAGS per source file and runner (Viktor Malik) [RHEL-30773]
  - bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC (Viktor Malik) [RHEL-30773]
  - bpf: Disable some `attribute ignored' warnings in GCC (Viktor Malik) [RHEL-30773]
  - bpf: Avoid __hidden__ attribute in static object (Viktor Malik) [RHEL-30773]
  - bpf: Remove redundant page mask of vmf->address (Viktor Malik) [RHEL-30773]
  - selftests/bpf: MUL range computation tests. (Viktor Malik) [RHEL-30773]
  - bpf/verifier: relax MUL range computation check (Viktor Malik) [RHEL-30773]
  - selftests/bpf: XOR and OR range computation tests. (Viktor Malik) [RHEL-30773]
  - bpf/verifier: improve XOR and OR range computation (Viktor Malik) [RHEL-30773]
  - bpf/verifier: refactor checks for range computation (Viktor Malik) [RHEL-30773]
  - bpf/verifier: replace calls to mark_reg_unknown. (Viktor Malik) [RHEL-30773]
  - bpftool, selftests/hid/bpf: Fix 29 clang warnings (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Use bpf_tracing.h instead of bpf_tcp_helpers.h (Viktor Malik) [RHEL-30773]
  - powerpc/bpf: enable kfunc call (Viktor Malik) [RHEL-30773]
  - libbpf: Avoid casts from pointers to enums in bpf_tracing.h (Viktor Malik) [RHEL-30773]
  - libbpf: Fix bpf_ksym_exists() in GCC (Viktor Malik) [RHEL-30773]
  - libbpf: fix ring_buffer__consume_n() return result logic (Viktor Malik) [RHEL-30773]
  - libbpf: fix potential overflow in ring__consume_n() (Viktor Malik) [RHEL-30773]
  - bpf: Missing trailing slash in tools/testing/selftests/bpf/Makefile (Viktor Malik) [RHEL-30773]
  - libbpf: Fix error message in attach_kprobe_multi (Viktor Malik) [RHEL-30773]
  - libbpf: Fix error message in attach_kprobe_session (Viktor Malik) [RHEL-30773]
  - libbpf: better fix for handling nulled-out struct_ops program (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add tests for the "module: Function" syntax (Viktor Malik) [RHEL-30773]
  - libbpf: support "module: Function" syntax for tracing programs (Viktor Malik) [RHEL-30773]
  - bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE (Viktor Malik) [RHEL-30773 RHEL-64874] {CVE-2024-38564}
  - selftests/bpf: Add kprobe session cookie test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add kprobe session test (Viktor Malik) [RHEL-30773]
  - libbpf: Add kprobe session attach type name to attach_type_name (Viktor Malik) [RHEL-30773]
  - libbpf: Add support for kprobe session attach (Viktor Malik) [RHEL-30773]
  - bpf: Add support for kprobe session cookie (Viktor Malik) [RHEL-30773]
  - bpf: Add support for kprobe session context (Viktor Malik) [RHEL-30773]
  - bpf: Add support for kprobe session attach (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Drop an unused local variable (Viktor Malik) [RHEL-30773]
  - bpf: Do not walk twice the hash map on free (Viktor Malik) [RHEL-30773]
  - bpf: Do not walk twice the map on free (Viktor Malik) [RHEL-30773]
  - selftests/bpf: validate nulled-out struct_ops program is handled properly (Viktor Malik) [RHEL-30773]
  - libbpf: handle nulled-out program in struct_ops correctly (Viktor Malik) [RHEL-30773]
  - bpf: Include linux/types.h for u32 (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Free strdup memory in veristat (Viktor Malik) [RHEL-30773]
  - bpf: Switch to krealloc_array() (Viktor Malik) [RHEL-30773]
  - bpf: Use struct_size() (Viktor Malik) [RHEL-30773]
  - samples/bpf: Add valid info for VMLINUX_BTF (Viktor Malik) [RHEL-30773]
  - bpf: Fix verifier assumptions about socket->sk (Viktor Malik) [RHEL-30773]
  - bpf, docs: Clarify PC use in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - bpf_helpers.h: Define bpf_tail_call_static when building with GCC (Viktor Malik) [RHEL-30773]
  - bpf, docs: Add introduction for use in the ISA Internet Draft (Viktor Malik) [RHEL-30773]
  - selftests/bpf: dummy_st_ops should reject 0 for non-nullable params (Viktor Malik) [RHEL-30773]
  - bpf: check bpf_dummy_struct_ops program params for test runs (Viktor Malik) [RHEL-30773]
  - selftests/bpf: do not pass NULL for non-nullable params in dummy_st_ops (Viktor Malik) [RHEL-30773]
  - selftests/bpf: adjust dummy_st_ops_success to detect additional error (Viktor Malik) [RHEL-30773]
  - bpf: mark bpf_dummy_struct_ops.test_1 parameter as nullable (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add ring_buffer__consume_n test. (Viktor Malik) [RHEL-30773]
  - bpf: Add bpf_guard_preempt() convenience macro (Viktor Malik) [RHEL-30773]
  - bpf: update the comment for BTF_FIELDS_MAX (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Fix wq test. (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add tests for preempt kfuncs (Viktor Malik) [RHEL-30773]
  - bpf: Introduce bpf_preempt_[disable,enable] kfuncs (Viktor Malik) [RHEL-30773]
  - bpf: Don't check for recursion in bpf_wq_work. (Viktor Malik) [RHEL-30773]
  - selftests/bpf: wq: add bpf_wq_start() checks (Viktor Malik) [RHEL-30773]
  - bpf: add bpf_wq_start (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add checks for bpf_wq_set_callback() (Viktor Malik) [RHEL-30773]
  - bpf: wq: add bpf_wq_set_callback_impl (Viktor Malik) [RHEL-30773]
  - selftests/bpf: wq: add bpf_wq_init() checks (Viktor Malik) [RHEL-30773]
  - bpf: wq: add bpf_wq_init (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add bpf_wq tests (Viktor Malik) [RHEL-30773]
  - bpf: allow struct bpf_wq to be embedded in arraymaps and hashmaps (Viktor Malik) [RHEL-30773]
  - bpf: add support for KF_ARG_PTR_TO_WORKQUEUE (Viktor Malik) [RHEL-30773]
  - bpf: verifier: bail out if the argument is not a map (Viktor Malik) [RHEL-30773]
  - tools: sync include/uapi/linux/bpf.h (Viktor Malik) [RHEL-30773]
  - bpf: add support for bpf_wq user type (Viktor Malik) [RHEL-30773]
  - bpf: replace bpf_timer_cancel_and_free with a generic helper (Viktor Malik) [RHEL-30773]
  - bpf: replace bpf_timer_set_callback with a generic helper (Viktor Malik) [RHEL-30773]
  - bpf: replace bpf_timer_init with a generic helper (Viktor Malik) [RHEL-30773]
  - bpf: make timer data struct more generic (Viktor Malik) [RHEL-30773]
  - bpf: Fix typos in comments (Viktor Malik) [RHEL-30773]
  - bpf: Fix typo in function save_aux_ptr_type (Viktor Malik) [RHEL-30773]
  - bpf, docs: Fix formatting nit in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - bpf, docs: Clarify helper ID and pointer terms in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - bpf: Fix JIT of is_mov_percpu_addr instruction. (Viktor Malik) [RHEL-30773]
  - libbpf: Fix dump of subsequent char arrays (Viktor Malik) [RHEL-30773]
  - libbpf: Fix misaligned array closing bracket (Viktor Malik) [RHEL-30773]
  - bpftool: Address minor issues in bash completion (Viktor Malik) [RHEL-30773]
  - bpftool: Update documentation where progs/maps can be passed by name (Viktor Malik) [RHEL-30773]
  - bpf: Harden and/or/xor value tracking in verifier (Viktor Malik) [RHEL-30773]
  - bpf, tests: Fix typos in comments (Viktor Malik) [RHEL-30773]
  - btf: Avoid weak external references (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add read_trace_pipe_iter function (Viktor Malik) [RHEL-30773]
  - bpftool: Fix typo in error message (Viktor Malik) [RHEL-30773]
  - selftest/bpf: Test a perf BPF program that suppresses side effects (Viktor Malik) [RHEL-30773]
  - tools include: Add some common function attributes (Viktor Malik) [RHEL-30773]
  - bpf: Choose RCU Tasks based on TASKS_RCU rather than PREEMPTION (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Enable tests for atomics with cpuv4 (Viktor Malik) [RHEL-30773]
  - bpftool: Add link dump support for BPF_LINK_TYPE_SOCKMAP (Viktor Malik) [RHEL-30773]
  - libbpf: Add bpf_link support for BPF_PROG_TYPE_SOCKMAP (Viktor Malik) [RHEL-30773]
  - bpf: Add bpf_link support for sk_msg and sk_skb progs [UAPI headers only] (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add tests for atomics in bpf_arena. (Viktor Malik) [RHEL-30773]
  - bpf: Add support for certain atomics in bpf_arena to x86 JIT (Viktor Malik) [RHEL-30773]
  - selftests/bpf: eliminate warning of get_cgroup_id_from_path() (Viktor Malik) [RHEL-30773]
  - libbpf: Add ring__consume_n / ring_buffer__consume_n (Viktor Malik) [RHEL-30773]
  - libbpf: ringbuf: Allow to consume up to a certain amount of items (Viktor Malik) [RHEL-30773]
  - libbpf: Start v1.5 development cycle (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Verify calling core kfuncs from BPF_PROG_TYPE_SYCALL (Viktor Malik) [RHEL-30773]
  - bpf: Allow invoking kfuncs from BPF_PROG_TYPE_SYSCALL progs (Viktor Malik) [RHEL-30773]
  - bpf, docs: Editorial nits in instruction-set.rst (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Make sure libbpf doesn't enforce the signature of a func pointer. (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add test for bpf_for_each_map_elem() with different maps (Viktor Malik) [RHEL-30773]
  - bpf: allow invoking bpf_for_each_map_elem with different maps (Viktor Malik) [RHEL-30773]
  - bpf: store both map ptr and state in bpf_insn_aux_data (Viktor Malik) [RHEL-30773]
  - bpf: fix perf_snapshot_branch_stack link failure (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add fp-leaking precise subprog result tests (Viktor Malik) [RHEL-30773]
  - bpf: prevent r10 register from being marked as precise (Viktor Malik) [RHEL-30773]
  - bpftool: Mount bpffs on provided dir instead of parent dir (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_get_branch_snapshot() helper (Viktor Malik) [RHEL-30773]
  - bpf: make bpf_get_branch_snapshot() architecture-agnostic (Viktor Malik) [RHEL-30773]
  - bpf: Optimize emit_mov_imm64(). (Viktor Malik) [RHEL-30773]
  - bpf: handle CONFIG_SMP=n configuration in x86 BPF JIT (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_map_lookup_elem() helper for PERCPU_HASH map (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_map_lookup_elem() for PERCPU_ARRAY maps (Viktor Malik) [RHEL-30773]
  - bpf: inline bpf_get_smp_processor_id() helper (Viktor Malik) [RHEL-30773]
  - bpf: add special internal-only MOV instruction to resolve per-CPU addrs (Viktor Malik) [RHEL-30773]
  - bpf: Replace deprecated strncpy with strscpy (Viktor Malik) [RHEL-30773]
  - bpf: Add arm64 JIT support for bpf_addr_space_cast instruction. (Viktor Malik) [RHEL-30773]
  - bpf: Add arm64 JIT support for PROBE_MEM32 pseudo instructions. (Viktor Malik) [RHEL-30773]
  - libbpf: Use local bpf_helpers.h include (Viktor Malik) [RHEL-30773]
  - bpf: Improve program stats run-time calculation (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Skip test when perf_event_open returns EOPNOTSUPP (Viktor Malik) [RHEL-30773]
  - bpftool: Use __typeof__() instead of typeof() in BPF skeleton (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Using llvm may_goto inline asm for cond_break macro (Viktor Malik) [RHEL-30773]
  - bpf: Add a verbose message if map limit is reached (Viktor Malik) [RHEL-30773]
  - bpf: Fix typo in uapi doc comments (Viktor Malik) [RHEL-30773]
  - bpftool: Clean-up typos, punctuation, list formatting in docs (Viktor Malik) [RHEL-30773]
  - bpftool: Remove useless emphasis on command description in man pages (Viktor Malik) [RHEL-30773]
  - bpftool: Use simpler indentation in source rST for documentation (Viktor Malik) [RHEL-30773]
  - selftests/bpf: make multi-uprobe tests work in RELEASE=1 mode (Viktor Malik) [RHEL-30773]
  - bpf: Avoid kfree_rcu() under lock in bpf_lpm_trie. (Viktor Malik) [RHEL-30773]
  - bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a kprobe_multi subtest to use addrs instead of syms (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Fix kprobe_multi_bench_attach test failure with LTO kernel (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add {load,search}_kallsyms_custom_local() (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Refactor trace helper func load_kallsyms_local() (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Refactor some functions for kprobe_multi_test (Viktor Malik) [RHEL-30773]
  - libbpf: Handle <orig_name>.llvm.<hash> symbol properly (Viktor Malik) [RHEL-30773]
  - libbpf: Mark libbpf_kallsyms_parse static function (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Replace CHECK with ASSERT macros for ksyms test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add batched tp/raw_tp/fmodret tests (Viktor Malik) [RHEL-30773]
  - bpf: add bpf_modify_return_test_tp() kfunc triggering tracepoint (Viktor Malik) [RHEL-30773]
  - selftests/bpf: lazy-load trigger bench BPF programs (Viktor Malik) [RHEL-30773]
  - selftests/bpf: remove syscall-driven benchs, keep syscall-count only (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add batched, mostly in-kernel BPF triggering benchmarks (Viktor Malik) [RHEL-30773]
  - bpf: Mitigate latency spikes associated with freeing non-preallocated htab (Viktor Malik) [RHEL-30773]
  - selftests/bpf: rename and clean up userspace-triggered benchmarks (Viktor Malik) [RHEL-30773]
  - bpf,arena: Use helper sizeof_field in struct accessors (Viktor Malik) [RHEL-30773]
  - bpf: implement insn_is_cast_user() helper for JITs (Viktor Malik) [RHEL-30773]
  - bpf: Avoid get_kernel_nofault() to fetch kprobe entry IP (Viktor Malik) [RHEL-30773]
  - bpf: Sync uapi bpf.h to tools directory (Viktor Malik) [RHEL-30773]
  - libbpf: Add new sec_def "sk_skb/verdict" (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Mark uprobe trigger functions with nocf_check attribute (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Use syscall(SYS_gettid) instead of gettid() wrapper in bench (Viktor Malik) [RHEL-30773]
  - bpf-next: Avoid goto in regs_refine_cond_op() (Viktor Malik) [RHEL-30773]
  - bpftool: Clean up HOST_CFLAGS, HOST_LDFLAGS for bootstrap bpftool (Viktor Malik) [RHEL-30773]
  - selftests/bpf: scale benchmark counting by using per-CPU counters (Viktor Malik) [RHEL-30773]
  - bpftool: Remove unnecessary source files from bootstrap version (Viktor Malik) [RHEL-30773]
  - bpftool: Enable libbpf logs when loading pid_iter in debug mode (Viktor Malik) [RHEL-30773]
  - selftests/bpf: add raw_tp/tp_btf BPF cookie subtests (Viktor Malik) [RHEL-30773]
  - libbpf: add support for BPF cookie for raw_tp/tp_btf programs (Viktor Malik) [RHEL-30773]
  - bpf: support BPF cookie in raw tracepoint (raw_tp, tp_btf) programs (Viktor Malik) [RHEL-30773]
  - bpf: pass whole link instead of prog when triggering raw tracepoint (Viktor Malik) [RHEL-30773]
  - bpf: flatten bpf_probe_register call chain (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a sk_msg prog bpf_get_ns_current_pid_tgid() test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Refactor out some functions in ns_current_pid_tgid test (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test (Viktor Malik) [RHEL-30773]
  - bpf: Allow helper bpf_get_[ns_]current_pid_tgid() for all prog types (Viktor Malik) [RHEL-30773]
  - bpf/lpm_trie: Inline longest_prefix_match for fastpath (Viktor Malik) [RHEL-30773]
  - bpf: Check return from set_memory_rox() (Viktor Malik) [RHEL-30773]
  - libbpbpf: Check bpf_map/bpf_program fd validity (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Remove second semicolon (Viktor Malik) [RHEL-30773]
  - bpf: Take return from set_memory_rox() into account with bpf_jit_binary_lock_ro() (Viktor Malik) [RHEL-30773]
  - bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro() (Viktor Malik) [RHEL-30773]
  - bpf: preserve sleepable bit in subprog info (Viktor Malik) [RHEL-30773]
  - selftests/bpf: Ensure libbpf skip all-zeros fields of struct_ops maps. (Viktor Malik) [RHEL-30773]
  - libbpf: Skip zeroed or null fields if not found in the kernel type. (Viktor Malik) [RHEL-30773]
  - bpftool: Fix missing pids during link show (Viktor Malik) [RHEL-30773]
  - bpftool: Cast pointers for shadow types explicitly. (Viktor Malik) [RHEL-30773]
  - arm64: probes: Remove broken LDR (literal) uprobe support (CKI Backport Bot) [RHEL-66045] {CVE-2024-50099}
  - xfrm: fix one more kernel-infoleak in algo dumping (CKI Backport Bot) [RHEL-65959] {CVE-2024-50110}
  - net: napi: Prevent overflow of napi_defer_hard_irqs (Antoine Tenart) [RHEL-63914] {CVE-2024-50018}
  - net: tighten bad gso csum offset check in virtio_net_hdr (Guillaume Nault) [RHEL-62411]
  - udp: fix receiving fraglist GSO packets (Guillaume Nault) [RHEL-62411]
  - redhat/configs: For aarch64/RT, default kstack randomization off (Gabriele Monaco) [RHEL-62390]
  - wifi: ath11k: fix RCU documentation in ath11k_mac_op_ipv6_changed() (Antoine Tenart) [RHEL-62205]
  - wifi: ath11k: use RCU when accessing struct inet6_dev::ac_list (Antoine Tenart) [RHEL-62205]
  - ipv6: Fix address dump when IPv6 is disabled on an interface (Antoine Tenart) [RHEL-62205]
  - ipv6: remove RTNL protection from inet6_dump_addr() (Antoine Tenart) [RHEL-62205]
  - ipv6: use xa_array iterator to implement inet6_dump_addr() (Antoine Tenart) [RHEL-62205]
  - ipv6: remove unnecessary local variable (Antoine Tenart) [RHEL-62205]
  - ipv6: make in6_dump_addrs() lockless (Antoine Tenart) [RHEL-62205]
  - ipv6: make inet6_fill_ifaddr() lockless (Antoine Tenart) [RHEL-62205]
  - ipv6: anycast: complete RCU handling of struct ifacaddr6 (Antoine Tenart) [RHEL-62205]
  - inet: fix inet_fill_ifaddr() flags truncation (Antoine Tenart) [RHEL-62204]
  - inet6: expand rcu_read_lock() scope in inet6_dump_addr() (Antoine Tenart) [RHEL-62204]
  - rtnetlink: make the "split" NLM_DONE handling generic (Antoine Tenart) [RHEL-62204]
  - ipv4: correctly iterate over the target netns in inet_dump_ifaddr() (Antoine Tenart) [RHEL-62204]
  - ipv4: Fix address dump when IPv4 is disabled on an interface (Antoine Tenart) [RHEL-62204]
  - rtnetlink: use xarray iterator to implement rtnl_dump_ifinfo() (Antoine Tenart) [RHEL-62204]
  - inet: use xa_array iterator to implement inet_dump_ifaddr() (Antoine Tenart) [RHEL-62204]
  - inet: prepare inet_base_seq() to run without RTNL (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_flags (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_preferred_lft (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_valid_lft (Antoine Tenart) [RHEL-62204]
  - inet: annotate data-races around ifa->ifa_tstamp and ifa->ifa_cstamp (Antoine Tenart) [RHEL-62204]
  - ipv6: use xa_array iterator to implement inet6_netconf_dump_devconf() (Antoine Tenart) [RHEL-62203]
  - ipv6/addrconf: annotate data-races around devconf fields (II) (Antoine Tenart) [RHEL-62203]
  - ipv6: Remove duplicate statements (Antoine Tenart) [RHEL-62203]
  - ipv6/addrconf: annotate data-races around devconf fields (I) (Antoine Tenart) [RHEL-62203]
  - ipv6: addrconf_disable_policy() optimization (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around devconf->disable_policy (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around devconf->proxy_ndp (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races in rt6_probe() (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around idev->cnf.ignore_routes_with_linkdown (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races in ndisc_router_discovery() (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.forwarding (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.hop_limit (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.mtu6 (Antoine Tenart) [RHEL-62203]
  - ipv6: addrconf_disable_ipv6() optimization (Antoine Tenart) [RHEL-62203]
  - ipv6: annotate data-races around cnf.disable_ipv6 (Antoine Tenart) [RHEL-62203]
  - ipv6: add ipv6_devconf_read_txrx cacheline_group (Antoine Tenart) [RHEL-62203]
  - inet: use xa_array iterator to implement inet_netconf_dump_devconf() (Antoine Tenart) [RHEL-62202]
  - inet: do not use RTNL in inet_netconf_get_devconf() (Antoine Tenart) [RHEL-62202]
  - inet: annotate devconf data-races (Antoine Tenart) [RHEL-62202]
  - slip: make slhc_remember() more robust against malicious packets (CKI Backport Bot) [RHEL-63892] {CVE-2024-50033}
  - mm: split critical region in remap_file_pages() and invoke LSMs in between (Waiman Long) [RHEL-63349]
  - mm: call the security_mmap_file() LSM hook in remap_file_pages() (Waiman Long) [RHEL-63349] {CVE-2024-47745}
  - NFS: Further fixes to attribute delegation a/mtime changes (Scott Mayhew) [RHEL-59704]
  - NFS: Fix attribute delegation behaviour on exclusive create (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Always release the rpcrdma_device's xa_array (Scott Mayhew) [RHEL-59704]
  - nfsd: fix possible badness in FREE_STATEID (Scott Mayhew) [RHEL-59704]
  - NFSv4.2: Fix detection of "Proxying of Times" server support (Scott Mayhew) [RHEL-59704]
  - nfsd: fix initial getattr on write delegation (Scott Mayhew) [RHEL-59704]
  - nfsd: untangle code in nfsd4_deleg_getattr_conflict() (Scott Mayhew) [RHEL-59704]
  - NFSD: remove redundant assignment operation (Scott Mayhew) [RHEL-59704]
  - nfsd/sunrpc: have svc tasks sleep in TASK_IDLE (Scott Mayhew) [RHEL-59704]
  - nfsd: fix nfsd4_deleg_getattr_conflict in presence of third party lease (Scott Mayhew) [RHEL-59704]
  - fs/nfsd: fix update of inode attrs in CB_GETATTR (Scott Mayhew) [RHEL-59704]
  - nfsd: fix potential UAF in nfsd4_cb_getattr_release (Scott Mayhew) [RHEL-59704]
  - nfsd: hold reference to delegation when updating it for cb_getattr (Scott Mayhew) [RHEL-59704]
  - nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open (Scott Mayhew) [RHEL-59704]
  - NFS: Avoid unnecessary rescanning of the per-server delegation list (Scott Mayhew) [RHEL-59704]
  - NFSv4: Fix clearing of layout segments in layoutreturn (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Scott Mayhew) [RHEL-59704]
  - nfs: fix bitmap decoder to handle a 3rd word (Scott Mayhew) [RHEL-59704]
  - nfs: fix the fetch of FATTR4_OPEN_ARGUMENTS (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Trace connection registration and unregistration (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Use XA_FLAGS_ALLOC instead of XA_FLAGS_ALLOC1 (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Device kref is over-incremented on error from xa_alloc (Scott Mayhew) [RHEL-59704]
  - nfsd: don't set SVC_SOCK_ANONYMOUS when creating nfsd sockets (Scott Mayhew) [RHEL-59704]
  - sunrpc: avoid -Wformat-security warning (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Fix a race to wake a sync task (Scott Mayhew) [RHEL-59704]
  - nfs: split nfs_read_folio (Scott Mayhew) [RHEL-59704]
  - nfs: do not extend writes to the entire folio (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: add support for NVMe (Scott Mayhew) [RHEL-59704]
  - nfs: remove nfs_page_length (Scott Mayhew) [RHEL-59704]
  - nfs: remove the unused max_deviceinfo_size field from struct pnfs_layoutdriver_type (Scott Mayhew) [RHEL-59704]
  - nfsd: new netlink ops to get/set server pool_mode (Scott Mayhew) [RHEL-59704]
  - sunrpc: refactor pool_mode setting code (Scott Mayhew) [RHEL-59704]
  - nfsd: allow passing in array of thread counts via netlink (Scott Mayhew) [RHEL-59704]
  - nfsd: make nfsd_svc take an array of thread counts (Scott Mayhew) [RHEL-59704]
  - sunrpc: fix up the special handling of sv_nrpools == 1 (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Add a trace point in svc_xprt_deferred_close (Scott Mayhew) [RHEL-59704]
  - lockd: Use *-y instead of *-objs in Makefile (Scott Mayhew) [RHEL-59704]
  - svcrdma: Handle ADDR_CHANGE CM event properly (Scott Mayhew) [RHEL-59704]
  - svcrdma: Refactor the creation of listener CMA ID (Scott Mayhew) [RHEL-59704]
  - NFSD: remove unused structs 'nfsd3_voidargs' (Scott Mayhew) [RHEL-59704]
  - NFSD: harden svcxdr_dupstr() and svcxdr_tmpalloc() against integer overflows (Scott Mayhew) [RHEL-59704]
  - nfs: don't reuse partially completed requests in nfs_lock_and_join_requests (Scott Mayhew) [RHEL-59704]
  - nfs: move nfs_wait_on_request to write.c (Scott Mayhew) [RHEL-59704]
  - nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests (Scott Mayhew) [RHEL-59704]
  - nfs: fold nfs_folio_find_and_lock_request into nfs_lock_and_join_requests (Scott Mayhew) [RHEL-59704]
  - nfs: simplify nfs_folio_find_and_lock_request (Scott Mayhew) [RHEL-59704]
  - nfs: remove nfs_folio_private_request (Scott Mayhew) [RHEL-59704]
  - nfs: remove dead code for the old swap over NFS implementation (Scott Mayhew) [RHEL-59704]
  - nfs: Block on write congestion (Scott Mayhew) [RHEL-59704]
  - nfs: Properly initialize server->writeback (Scott Mayhew) [RHEL-59704]
  - nfs: Drop pointless check from nfs_commit_release_pages() (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: SCSI layout trace points for reservation key reg/unreg (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: Report only when /no/ device is found (Scott Mayhew) [RHEL-59704]
  - nfs/blocklayout: Fix premature PR key unregistration (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Do layout state recovery upon reboot (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Remove redundant call to unhash the layout (Scott Mayhew) [RHEL-59704]
  - NFSv4/pnfs: Give nfs4_proc_layoutreturn() a flags argument (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Retry the layout return later in case of a timeout or reboot (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Handle server reboots in pnfs_poc_release() (Scott Mayhew) [RHEL-59704]
  - NFSv4/pNFS: Add a helper to defer failed layoutreturn calls (Scott Mayhew) [RHEL-59704]
  - NFSv4/pnfs: Add support for the PNFS_LAYOUT_FILE_BULK_RETURN flag (Scott Mayhew) [RHEL-59704]
  - pNFS: Add a flag argument to pnfs_destroy_layouts_byclid() (Scott Mayhew) [RHEL-59704]
  - NFSv4: Clean up encode_nfs4_stateid() (Scott Mayhew) [RHEL-59704]
  - NFSv4.1: constify the stateid argument in nfs41_test_stateid() (Scott Mayhew) [RHEL-59704]
  - NFSv4/pnfs: Remove redundant list check (Scott Mayhew) [RHEL-59704]
  - NFSv4: Don't send delegation-related share access modes to CLOSE (Scott Mayhew) [RHEL-59704]
  - Return the delegation when deleting sillyrenamed files (Scott Mayhew) [RHEL-59704]
  - NFSv4: Ask for a delegation or an open stateid in OPEN (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add support for OPEN4_RESULT_NO_OPEN_STATEID (Scott Mayhew) [RHEL-59704]
  - NFSv4: Detect support for OPEN4_SHARE_ACCESS_WANT_OPEN_XOR_DELEGATION (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add support for the FATTR4_OPEN_ARGUMENTS attribute (Scott Mayhew) [RHEL-59704]
  - NFSv4: Don't request atime/mtime/size if they are delegated to us (Scott Mayhew) [RHEL-59704]
  - NFSv4: Fix up delegated attributes in nfs_setattr (Scott Mayhew) [RHEL-59704]
  - NFSv4: Delegreturn must set m/atime when they are delegated (Scott Mayhew) [RHEL-59704]
  - NFSv4: Enable attribute delegations (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add a capability for delegated attributes (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add recovery of attribute delegations (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add support for delegated atime and mtime attributes (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add a flags argument to the 'have_delegation' callback (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add CB_GETATTR support for delegated attributes (Scott Mayhew) [RHEL-59704]
  - NFSv4: Plumb in XDR support for the new delegation-only setattr op (Scott Mayhew) [RHEL-59704]
  - NFSv4: Add new attribute delegation definitions (Scott Mayhew) [RHEL-59704]
  - NFSv4: Refactor nfs4_opendata_check_deleg() (Scott Mayhew) [RHEL-59704]
  - NFSv4: Clean up open delegation return structure (Scott Mayhew) [RHEL-59704]
  - fs: nfs: add missing MODULE_DESCRIPTION() macros (Scott Mayhew) [RHEL-59704]
  - NFS: remove unused struct 'mnt_fhstatus' (Scott Mayhew) [RHEL-59704]
  - xprtrdma: Remove temp allocation of rpcrdma_rep objects (Scott Mayhew) [RHEL-59704]
  - xprtrdma: Clean up synopsis of frwr_mr_unmap() (Scott Mayhew) [RHEL-59704]
  - xprtrdma: Handle device removal outside of the CM event handler (Scott Mayhew) [RHEL-59704]
  - rpcrdma: Implement generic device removal (Scott Mayhew) [RHEL-59704]
  - xprtrdma: removed asm-generic headers from verbs.c (Scott Mayhew) [RHEL-59704]
  - nfs: drop usage of folio_file_pos (Scott Mayhew) [RHEL-59704]
  - nfs: Avoid flushing many pages with NFS_FILE_SYNC (Scott Mayhew) [RHEL-59704]
  - nfs: propagate readlink errors in nfs_symlink_filler (Scott Mayhew) [RHEL-59704]
  - pNFS: rework pnfs_generic_pg_check_layout to check IO range (Scott Mayhew) [RHEL-59704]
  - pNFS/filelayout: check layout segment range (Scott Mayhew) [RHEL-59704]
  - NFS: Don't enable NFS v2 by default (Scott Mayhew) [RHEL-59704]
  - SUNRPC: fix handling expired GSS context (Scott Mayhew) [RHEL-59704]
  - NFSv4: Fixup smatch warning for ambiguous return (Scott Mayhew) [RHEL-59704]
  - NFS: make sure lock/nolock overriding local_lock mount option (Scott Mayhew) [RHEL-59704]
  - pNFS/filelayout: Specify the layout segment range in LAYOUTGET (Scott Mayhew) [RHEL-59704]
  - pNFS/filelayout: Remove the whole file layout requirement (Scott Mayhew) [RHEL-59704]
  - NFS/knfsd: Remove the invalid NFS error 'NFSERR_OPNOTSUPP' (Scott Mayhew) [RHEL-59704]
  - nfsd: set security label during create operations (Scott Mayhew) [RHEL-59704]
  - NFSD: Add COPY status code to OFFLOAD_STATUS response (Scott Mayhew) [RHEL-59704]
  - NFSD: Record status of async copy operation in struct nfsd4_copy (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Remove comment for sp_lock (Scott Mayhew) [RHEL-59704]
  - NFSD: add listener-{set,get} netlink command (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add a new svc_find_listener helper (Scott Mayhew) [RHEL-59704]
  - SUNRPC: introduce svc_xprt_create_from_sa utility routine (Scott Mayhew) [RHEL-59704]
  - NFSD: add write_version to netlink command (Scott Mayhew) [RHEL-59704]
  - NFSD: convert write_threads to netlink command (Scott Mayhew) [RHEL-59704]
  - NFSD: allow callers to pass in scope string to nfsd_svc (Scott Mayhew) [RHEL-59704]
  - NFSD: move nfsd_mutex handling into nfsd_svc callers (Scott Mayhew) [RHEL-59704]
  - lockd: host: Remove unnecessary statements＇host = NULL;＇ (Scott Mayhew) [RHEL-59704]
  - nfsd: optimise recalculate_deny_mode() for a common case (Scott Mayhew) [RHEL-59704]
  - nfsd: add tracepoint in mark_client_expired_locked (Scott Mayhew) [RHEL-59704]
  - nfsd: new tracepoint for check_slot_seqid (Scott Mayhew) [RHEL-59704]
  - nfsd: drop extraneous newline from nfsd tracepoints (Scott Mayhew) [RHEL-59704]
  - nfsd: trivial GET_DIR_DELEGATION support (Scott Mayhew) [RHEL-59704]
  - NFSD: Move callback_wq into struct nfs4_client (Scott Mayhew) [RHEL-59704]
  - nfsd: drop st_mutex before calling move_to_close_lru() (Scott Mayhew) [RHEL-59704]
  - nfsd: replace rp_mutex to avoid deadlock in move_to_close_lru() (Scott Mayhew) [RHEL-59704]
  - nfsd: move nfsd4_cstate_assign_replay() earlier in open handling. (Scott Mayhew) [RHEL-59704]
  - nfsd: perform all find_openstateowner_str calls in the one place. (Scott Mayhew) [RHEL-59704]
  - Revert "NFSD: Convert the callback workqueue to use delayed_work" (Scott Mayhew) [RHEL-59704]
  - Revert "NFSD: Reschedule CB operations when backchannel rpc_clnt is shut down" (Scott Mayhew) [RHEL-59704]
  - nfs: Handle error of rpc_proc_register() in nfs_net_init(). (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add a missing rpc_stat for TCP TLS (Scott Mayhew) [RHEL-59704]
  - NFSD: Clean up nfsd4_encode_replay() (Scott Mayhew) [RHEL-59704]
  - NFS: trace the uniquifier of fscache (Scott Mayhew) [RHEL-59704]
  - NFS: remove unused variable nfs_rpcstat (Scott Mayhew) [RHEL-59704]
  - nfs: properly protect nfs_direct_req fields (Scott Mayhew) [RHEL-59704]
  - NFS: enable nconnect for RDMA (Scott Mayhew) [RHEL-59704]
  - NFSv4: nfs4_do_open() is incorrectly triggering state recovery (Scott Mayhew) [RHEL-59704]
  - NFS: avoid infinite loop in pnfs_update_layout. (Scott Mayhew) [RHEL-59704]
  - nfs: make the rpc_stat per net namespace (Scott Mayhew) [RHEL-59704]
  - nfs: expose /proc/net/sunrpc/nfs in net namespaces (Scott Mayhew) [RHEL-59704]
  - sunrpc: add a struct rpc_stats arg to rpc_create_args (Scott Mayhew) [RHEL-59704]
  - nfs: remove unused NFS_CALL macro (Scott Mayhew) [RHEL-59704]
  - NFSv4.1: add tracepoint to trunked nfs4_exchange_id calls (Scott Mayhew) [RHEL-59704]
  - NFSD: send OP_CB_RECALL_ANY to clients when number of delegations reaches its limit (Scott Mayhew) [RHEL-59704]
  - NFSD: Document nfsd_setattr() fill-attributes behavior (Scott Mayhew) [RHEL-59704]
  - nfsd: Fix NFSv3 atomicity bugs in nfsd_setattr() (Scott Mayhew) [RHEL-59704]
  - NFSD: OP_CB_RECALL_ANY should recall both read and write delegations (Scott Mayhew) [RHEL-59704]
  - NFSD: handle GETATTR conflict with write delegation (Scott Mayhew) [RHEL-59704]
  - NFSD: add support for CB_GETATTR callback (Scott Mayhew) [RHEL-59704]
  - nfsd: clean up comments over nfs4_client definition (Scott Mayhew) [RHEL-59704]
  - svcrdma: Post WRs for Write chunks in svc_rdma_sendto() (Scott Mayhew) [RHEL-59704]
  - svcrdma: Post the Reply chunk and Send WR together (Scott Mayhew) [RHEL-59704]
  - svcrdma: Move write_info for Reply chunks into struct svc_rdma_send_ctxt (Scott Mayhew) [RHEL-59704]
  - svcrdma: Post Send WR chain (Scott Mayhew) [RHEL-59704]
  - svcrdma: Fix retry loop in svc_rdma_send() (Scott Mayhew) [RHEL-59704]
  - svcrdma: Prevent a UAF in svc_rdma_send() (Scott Mayhew) [RHEL-59704]
  - svcrdma: Fix SQ wake-ups (Scott Mayhew) [RHEL-59704]
  - svcrdma: Increase the per-transport rw_ctx count (Scott Mayhew) [RHEL-59704]
  - svcrdma: Update max_send_sges after QP is created (Scott Mayhew) [RHEL-59704]
  - svcrdma: Report CQ depths in debugging output (Scott Mayhew) [RHEL-59704]
  - svcrdma: Reserve an extra WQE for ib_drain_rq() (Scott Mayhew) [RHEL-59704]
  - nfsd: allow layout state to be admin-revoked. (Scott Mayhew) [RHEL-59704]
  - nfsd: allow delegation state ids to be revoked and then freed (Scott Mayhew) [RHEL-59704]
  - nfsd: allow open state ids to be revoked and then freed (Scott Mayhew) [RHEL-59704]
  - nfsd: allow lock state ids to be revoked and then freed (Scott Mayhew) [RHEL-59704]
  - nfsd: allow admin-revoked NFSv4.0 state to be freed. (Scott Mayhew) [RHEL-59704]
  - nfsd: report in /proc/fs/nfsd/clients/*/states when state is admin-revoke (Scott Mayhew) [RHEL-59704]
  - nfsd: allow state with no file to appear in /proc/fs/nfsd/clients/*/states (Scott Mayhew) [RHEL-59704]
  - nfsd: prepare for supporting admin-revocation of state (Scott Mayhew) [RHEL-59704]
  - nfsd: split sc_status out of sc_type (Scott Mayhew) [RHEL-59704]
  - nfsd: avoid race after unhash_delegation_locked() (Scott Mayhew) [RHEL-59704]
  - nfsd: don't call functions with side-effecting inside WARN_ON() (Scott Mayhew) [RHEL-59704]
  - nfsd: hold ->cl_lock for hash_delegation_locked() (Scott Mayhew) [RHEL-59704]
  - nfsd: remove stale comment in nfs4_show_deleg() (Scott Mayhew) [RHEL-59704]
  - NFSD: Remove redundant cb_seq_status initialization (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Remove EXPORT_SYMBOL_GPL for svc_process_bc() (Scott Mayhew) [RHEL-59704]
  - nfsd: make svc_stat per-network namespace instead of global (Scott Mayhew) [RHEL-59704]
  - nfsd: remove nfsd_stats, make th_cnt a global counter (Scott Mayhew) [RHEL-59704]
  - nfsd: make all of the nfsd stats per-network namespace (Scott Mayhew) [RHEL-59704]
  - nfsd: expose /proc/net/sunrpc/nfsd in net namespaces (Scott Mayhew) [RHEL-59704]
  - nfsd: rename NFSD_NET_* to NFSD_STATS_* (Scott Mayhew) [RHEL-59704]
  - sunrpc: use the struct net as the svc proc private (Scott Mayhew) [RHEL-59704]
  - sunrpc: remove ->pg_stats from svc_program (Scott Mayhew) [RHEL-59704]
  - sunrpc: pass in the sv_stats struct through svc_create_pooled (Scott Mayhew) [RHEL-59704]
  - nfsd: stop setting ->pg_stats for unused stats (Scott Mayhew) [RHEL-59704]
  - sunrpc: don't change ->sv_stats if it doesn't exist (Scott Mayhew) [RHEL-59704]
  - nfsd: use __fput_sync() to avoid delayed closing of files. (Scott Mayhew) [RHEL-59704]
  - nfsd: Don't leave work of closing files to a work queue (Scott Mayhew) [RHEL-59704]
  - SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int (Scott Mayhew) [RHEL-59704]
  - nfs: fix regression in handling of fsc= option in NFSv4 (Scott Mayhew) [RHEL-59704]
  - pnfs/filelayout: add tracepoint to getdeviceinfo (Scott Mayhew) [RHEL-59704]
  - NFS: Display the "fsc=" mount option if it is set (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add xrpt id to rpc_stats_latency tracepoint (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Add a transport callback to handle dequeuing of an RPC request (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Don't try to send when the connection is shutting down (Scott Mayhew) [RHEL-59704]
  - SUNRPC: Don't retry using the same source port if connection failed (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change the back-channel queue to lwq (Scott Mayhew) [RHEL-59704]
  - SUNRPC: discard sp_lock (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change sp_nrthreads to atomic_t (Scott Mayhew) [RHEL-59704]
  - SUNRPC: use lwq for sp_sockets - renamed to sp_xprts (Scott Mayhew) [RHEL-59704]
  - SUNRPC: only have one thread waking up at a time (Scott Mayhew) [RHEL-59704]
  - SUNRPC: rename some functions from rqst_ to svc_thread_ (Scott Mayhew) [RHEL-59704]
  - lib: add light-weight queuing mechanism. (Scott Mayhew) [RHEL-59704]
  - redhat/configs: add CONFIG_LWQ_TEST (Scott Mayhew) [RHEL-59704]
  - llist: add llist_del_first_this() (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change service idle list to be an llist (Scott Mayhew) [RHEL-59704]
  - llist: add interface to check if a node is on a list. (Scott Mayhew) [RHEL-59704]
  - SUNRPC: discard SP_CONGESTED (Scott Mayhew) [RHEL-59704]
  - SUNRPC: add list of idle threads (Scott Mayhew) [RHEL-59704]
  - SUNRPC: change how svc threads are asked to exit. (Scott Mayhew) [RHEL-59704]
  - nfsd: convert to ctime accessor functions (Scott Mayhew) [RHEL-59704]
  - nfs: convert to ctime accessor functions (Scott Mayhew) [RHEL-59704]
  - fs: drop the timespec64 arg from generic_update_time (Scott Mayhew) [RHEL-59704]
  - fs: convert to ctime accessor functions (Scott Mayhew) [RHEL-59704]
  - mptcp: pm: do not remove closing subflows (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix ID 0 endp usage after multiple re-creations (Davide Caratti) [RHEL-58839 RHEL-62871] {CVE-2024-46711}
  - mptcp: pm: do not remove already closed subflows (Davide Caratti) [RHEL-62871]
  - mptcp: pm: reset MPC endp ID when re-added (Davide Caratti) [RHEL-62871]
  - mptcp: pm: skip connecting to already established sf (Davide Caratti) [RHEL-62871]
  - mptcp: pm: send ACK on an active subflow (Davide Caratti) [RHEL-62871]
  - mptcp: pm: update add_addr counters after connect (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: cannot rm sf if closed (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: add evts_get_info helper (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: update userspace pm test helpers (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix UaF read in mptcp_pm_nl_rm_addr_or_subflow (Davide Caratti) [RHEL-62871 RHEL-66074] {CVE-2024-45009}
  - selftests: mptcp: join: restrict fullmesh endp on 1st sf (Davide Caratti) [RHEL-62871]
  - mptcp: pm: ADD_ADDR 0 is not a new address (Davide Caratti) [RHEL-62871]
  - mptcp: avoid duplicated SUB_CLOSED events (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: check removing ID 0 endpoint (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix RM_ADDR ID for the initial subflow (Davide Caratti) [RHEL-62871]
  - mptcp: pm: reuse ID 0 after delete and re-add (Davide Caratti) [RHEL-62871]
  - mptcp: pr_debug: add missing \n at the end (Davide Caratti) [RHEL-62871]
  - mptcp: sched: check both backup in retrans (Davide Caratti) [RHEL-62871]
  - mptcp: close subflow when receiving TCP+FIN (Davide Caratti) [RHEL-62871]
  - mptcp: pm: avoid possible UaF when selecting endp (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: validate fullmesh endp on 1st sf (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fullmesh: select the right ID later (Davide Caratti) [RHEL-62871]
  - mptcp: pm: only in-kernel cannot have entries with ID 0 (Davide Caratti) [RHEL-62871]
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Davide Caratti) [RHEL-62871]
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Davide Caratti) [RHEL-62871 RHEL-66074] {CVE-2024-45009}
  - mptcp: pm: only mark 'subflow' endp as available (Davide Caratti) [RHEL-62871 RHEL-66083] {CVE-2024-45010}
  - mptcp: pm: remove mptcp_pm_remove_subflow() (Davide Caratti) [RHEL-62871]
  - mptcp: pm: re-using ID of unused flushed subflows (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: check re-using ID of closed subflow (Davide Caratti) [RHEL-62871]
  - mptcp: pm: re-using ID of unused removed subflows (Davide Caratti) [RHEL-62871]
  - mptcp: pm: re-using ID of unused removed ADD_ADDR (Davide Caratti) [RHEL-62871]
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: test both signal & subflow (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: ability to invert ADD_ADDR check (Davide Caratti) [RHEL-62871]
  - mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set (Davide Caratti) [RHEL-62871]
  - mptcp: pm: don't try to create sf if alloc failed (Davide Caratti) [RHEL-62871]
  - mptcp: pm: reduce indentation blocks (Davide Caratti) [RHEL-62871]
  - mptcp: pm: deny endp with signal + subflow + port (Davide Caratti) [RHEL-62871]
  - mptcp: fully established after ADD_ADDR echo on MPJ (Davide Caratti) [RHEL-62871]
  - mptcp: fix duplicate data handling (Davide Caratti) [RHEL-62871]
  - mptcp: fix bad RCVPRUNED mib accounting (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: check backup support in signal endp (Davide Caratti) [RHEL-62871]
  - mptcp: pm: fix backup support in signal endpoints (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: join: validate backup in MPJ (Davide Caratti) [RHEL-62871]
  - mptcp: mib: count MPJ with backup flag (Davide Caratti) [RHEL-62871]
  - mptcp: pm: only set request_bkup flag when sending MP_PRIO (Davide Caratti) [RHEL-62871]
  - mptcp: distinguish rcv vs sent backup flag in requests (Davide Caratti) [RHEL-62871]
  - mptcp: sched: check both directions for backup (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: always close input's FD if opened (Davide Caratti) [RHEL-62871]
  - selftests: mptcp: fix error path (Davide Caratti) [RHEL-62871]
  - mptcp: fix NL PM announced address accounting (Davide Caratti) [RHEL-62871]
  - mptcp: fix user-space PM announced address accounting (Davide Caratti) [RHEL-62871]
  - mptcp: add validity check for sending RM_ADDR (Davide Caratti) [RHEL-62871]
  - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID (Davide Caratti) [RHEL-62871]
  - mptcp: include inet_common in mib.h (Davide Caratti) [RHEL-62871]
  - mptcp: move mptcp_pm_gen.h's include (Davide Caratti) [RHEL-62871]
  - mptcp: remove unnecessary else statements (Davide Caratti) [RHEL-62871]
  - mptcp: prefer strscpy over strcpy (Davide Caratti) [RHEL-62871]
  - mptcp: sockopt: info: stop early if no buffer (Davide Caratti) [RHEL-62871]
  - mptcp: fix full TCP keep-alive support (Davide Caratti) [RHEL-62871]
  - mptcp: SO_KEEPALIVE: fix getsockopt support (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_DEFER_ACCEPT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_LINGER2 locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_KEEPCNT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_KEEPINTVL locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_USER_TIMEOUT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: set TCP_SYNCNT locklessly (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around fastopenq.max_qlen (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around icsk->icsk_user_timeout (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->notsent_lowat (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around rskq_defer_accept (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->linger2 (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around icsk->icsk_syn_retries (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->keepalive_probes (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->keepalive_intvl (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->keepalive_time (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->tsoffset (Davide Caratti) [RHEL-62871]
  - tcp: annotate data-races around tp->tcp_tx_delay (Davide Caratti) [RHEL-62871]
  - net: do not delay dst_entries_add() in dst_release() (Paolo Abeni) [RHEL-62849]
  - net: add more sanity checks to qdisc_pkt_len_init() (Paolo Abeni) [RHEL-62849 RHEL-64328] {CVE-2024-49948}
  - net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size (Paolo Abeni) [RHEL-62849]
  - net: busy-poll: use ktime_get_ns() instead of local_clock() (Paolo Abeni) [RHEL-62849]
  - pktgen: use cpus_read_lock() in pg_net_init() (Paolo Abeni) [RHEL-62849]
  - net: linkwatch: use system_unbound_wq (Paolo Abeni) [RHEL-62849]
  - rtnetlink: Don't ignore IFLA_TARGET_NETNSID when ifname is specified in rtnl_dellink(). (Paolo Abeni) [RHEL-62849]
  - net: page_pool: fix warning code (Paolo Abeni) [RHEL-62849]
  - net: give more chances to rcu in netdev_wait_allrefs_any() (Paolo Abeni) [RHEL-62849]
  - bpf: Fix a kernel verifier crash in stacksafe() (CKI Backport Bot) [RHEL-66098] {CVE-2024-45020}
  - bpf: Fix use-after-free in bpf_uprobe_multi_link_attach() (Viktor Malik) [RHEL-63330] {CVE-2024-47675}
  - bpf: Fix out-of-bounds write in trie_get_next_key() (CKI Backport Bot) [RHEL-66876] {CVE-2024-50262}
  - selftests/bpf: Add return value checks for failed tests (Viktor Malik) [RHEL-63343]
  - selftests/bpf: Workaround strict bpf_lsm return value check. (Viktor Malik) [RHEL-63343]
  - bpf: Fix compare error in function retval_range_within (Viktor Malik) [RHEL-63343]
  - bpf, lsm: Add check for BPF LSM return value (CKI Backport Bot) [RHEL-63343] {CVE-2024-47703}
  - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_debug: Remove a useless memset() (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Retry START STOP UNIT commands (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Remove duplicate included header file linux/bio-integrity.h (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Remove obsoleted declaration for scsi_driverbyte_string() (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: ufs: Simplify alloc*_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: stex: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_transport_fc: Simplify alloc_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: snic: Simplify alloc_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: qedi: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: qedf: Simplify alloc_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: myrs: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: myrb: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: mpt3sas: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: mpi3mr: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: ibmvscsi_tgt: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: fcoe: Simplify alloc_ordered_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: esas2r: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: bfa: Simplify an alloc_ordered_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: be2iscsi: Simplify an alloc_workqueue() invocation (Ewan D. Milne) [RHEL-62151]
  - scsi: mptfusion: Simplify the alloc*_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: Expand all create*_workqueue() invocations (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Ignore command SYNCHRONIZE CACHE error if format in progress (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Do not attempt to configure discard unless LBPME is set (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Fix the return value of scsi_logical_block_count() (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Keep the discard mode stable (Ewan D. Milne) [RHEL-62151]
  - minmax: scsi: fix mis-use of 'clamp()' in sr.c (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_debug: Fix create target debugfs failure (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Fix an incorrect comment (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Disable CDL by default (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Use READ(16) when reading block zero on large capacity disks (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Pass sdev to blk_mq_alloc_queue() (Ewan D. Milne) [RHEL-62151]
  - scsi: sr: Fix unintentional arithmetic wraparound (Ewan D. Milne) [RHEL-62151]
  - scsi: core: alua: I/O errors for ALUA state transitions (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Improve the code for showing commands in debugfs (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Introduce scsi_cmd_list_info() (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_transport_srp: Fix a couple of kernel-doc warnings (Ewan D. Milne) [RHEL-62151]
  - scsi: scsi_transport_fc: Add kernel-doc for function return (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Add function return kernel-doc for 2 functions (Ewan D. Milne) [RHEL-62151]
  - scsi: libfcoe: Fix a slew of kernel-doc warnings (Ewan D. Milne) [RHEL-62151]
  - scsi: iser: Fix @read_stag kernel-doc warning (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Add kernel-doc for scsi_msg_to_host_byte() (Ewan D. Milne) [RHEL-62151]
  - scsi: st: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: sr: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: ses: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Drop driver owner initialization (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Store owner from modules with scsi_register_driver() (Ewan D. Milne) [RHEL-62151]
  - scsi: devinfo: Replace strncpy() and manual pad (Ewan D. Milne) [RHEL-62151]
  - scsi: sd: Have pr commands retry UAs (Ewan D. Milne) [RHEL-62151]
  - scsi: Fix sshdr use in scsi_cdl_enable (Ewan D. Milne) [RHEL-62151]
  - scsi: Add support for block PR read keys/reservation (Ewan D. Milne) [RHEL-62151]
  - scsi: Move sd_pr_type to scsi_common (Ewan D. Milne) [RHEL-62151]
  - scsi: Rename sd_pr_command (Ewan D. Milne) [RHEL-62151]
  - scsi: core: Remove scsi_execute_req()/scsi_execute() functions (Ewan D. Milne) [RHEL-62151]
  - scsi: Adjust recently added fields to SCSI and FC structures (Ewan D. Milne) [RHEL-62151]
  - dpll: add Embedded SYNC feature for a pin (CKI Backport Bot) [RHEL-57743]
  - dpll: fix return value check for kmemdup (CKI Backport Bot) [RHEL-57743]
  - sched: sch_cake: fix bulk flow accounting logic for host fairness (CKI Backport Bot) [RHEL-60755] {CVE-2024-46828}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47802] {CVE-2024-40914}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-534.el9]
changelog:
  - block: fix integer overflow in BLKSECDISCARD (Ming Lei) [RHEL-64512] {CVE-2024-49994}
  - fsnotify: clear PARENT_WATCHED flags lazily (CKI Backport Bot) [RHEL-62134] {CVE-2024-47660}
  - thunderbolt: Fix KASAN reported stack out-of-bounds read in tb_retimer_scan() (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: restrict SNK_WAIT_CAPABILITIES_TIMEOUT transitions to non self-powered devices (Desnes Nunes) [RHEL-59051]
  - drm/test: fix the gem shmem test to map the sg table. (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: qcom,dwc3: Update ipq5332 interrupt info (Desnes Nunes) [RHEL-59051]
  - minmax: improve macro expansion and type checking (Desnes Nunes) [RHEL-59051]
  - minmax: simplify min()/max()/clamp() implementation (Desnes Nunes) [RHEL-59051]
  - minmax: don't use max() in situations that want a C constant expression (Desnes Nunes) [RHEL-59051]
  - minmax: make generic MIN() and MAX() macros available everywhere (Desnes Nunes) [RHEL-59051]
  - minmax: simplify and clarify min_t()/max_t() implementation (Desnes Nunes) [RHEL-59051]
  - minmax: add a few more MIN_T/MAX_T users (Desnes Nunes) [RHEL-59051]
  - minmax: avoid overly complicated constant expressions in VM code (Desnes Nunes) [RHEL-59051]
  - mm: set pageblock_order to HPAGE_PMD_ORDER in case with !CONFIG_HUGETLB_PAGE but THP enabled (Desnes Nunes) [RHEL-59051]
  - minmax: fix indentation of __cmp_once() and __clamp_once() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix busy loop on ASUS VivoBooks (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Remove useless error check from ucsi_read_error() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Call CANCEL from single location (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Common function for the GET_PD_MESSAGE command (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Only assign the identity structure if the PPM supports it (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Don't truncate the reads (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Remove unused fields from struct ucsi_connector_status (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix cable registration (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix the partner PD revision (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: core: update LC timer as per USB Spec V3.2 (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: Avoid waking up gadget during startxfer (Desnes Nunes) [RHEL-59051]
  - USB: serial: option: add MeiG Smart SRM825L (Desnes Nunes) [RHEL-59051]
  - usb: cdnsp: fix for Link TRB with TC (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: ep0: Don't reset resource alloc flag (including ep0) (Desnes Nunes) [RHEL-59051]
  - usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes() (Desnes Nunes) [RHEL-59051]
  - usb: typec: fsa4480: Relax CHIP_ID check (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: microchip,usb2514: Fix reference USB device schema (Desnes Nunes) [RHEL-59051]
  - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (Desnes Nunes) [RHEL-59051]
  - usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: core: Prevent USB core invalid event buffer address access (Desnes Nunes) [RHEL-59051] {CVE-2024-46675}
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Desnes Nunes) [RHEL-59051]
  - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix the return value of ucsi_run_command() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: fix duplicate stall handling in handle_tx_event() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix a deadlock in ucsi_send_command_common() (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: avoid sink goto SNK_UNATTACHED state if not received source capability message (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Mark XDomain as unplugged when router is removed (Desnes Nunes) [RHEL-59051]
  - phy: fsl-imx8mq-usb: fix tuning parameter name (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Fix memory leaks in {port|retimer}_sb_regs_write() (Desnes Nunes) [RHEL-59051]
  - USB: serial: debug: do not echo input by default (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: Delete extra semi-colon (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: Fix dereferencing freeing memory in tps6598x_apply_patch() (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpci: Fix error code in tcpci_check_std_output_cap() (Desnes Nunes) [RHEL-59051]
  - usb: typec: fsa4480: Check if the chip is really there (Desnes Nunes) [RHEL-59051]
  - usb: gadget: core: Check for unset descriptor (Desnes Nunes) [RHEL-59051] {CVE-2024-44960}
  - dt-bindings: usb: microchip,usb2514: Add USB2517 compatible (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix custom control mapping probing (Desnes Nunes) [RHEL-59051]
  - USB: uas: Implement the new shutdown callback (Desnes Nunes) [RHEL-59051]
  - USB: core: add 'shutdown' callback to usb_driver (Desnes Nunes) [RHEL-59051]
  - usb: typec: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: enable CCI support for AMD-xilinx DWC3 controller (Desnes Nunes) [RHEL-59051]
  - usb: gadget: Use u16 types for 16-bit fields (Desnes Nunes) [RHEL-59051]
  - pinctrl: tegra: Use scope based of_node_put() cleanups (Desnes Nunes) [RHEL-59051]
  - of: Introduce for_each_*_child_of_node_scoped() to automate of_node_put() handling (Desnes Nunes) [RHEL-59051]
  - of: Add cleanup.h based auto release via __free(device_node) markings (Desnes Nunes) [RHEL-59051]
  - writing_musb_glue_layer.rst: Fix broken URL (Desnes Nunes) [RHEL-59051]
  - redhat: configs: Drop CONFIG_MEMSTICK_REALTEK_PCI config option (Desnes Nunes) [RHEL-59051]
  - memstick: rtsx_pci_ms: Remove Realtek PCI memstick driver (Desnes Nunes) [RHEL-59051]
  - USB: serial: garmin_gps: use struct_size() to allocate pkt (Desnes Nunes) [RHEL-59051]
  - USB: serial: garmin_gps: annotate struct garmin_packet with __counted_by (Desnes Nunes) [RHEL-59051]
  - USB: serial: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - USB: serial: spcp8x5: remove unused struct 'spcp8x5_usb_ctrl_arg' (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: core: Check all ports when set phy suspend (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpci: add support to set connector orientation (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: Convert fsl-usb to yaml (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: reorder operations in ucsi_run_command() (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: extract common code for command handling (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: inline ucsi_read_message_in (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: rework command execution functions (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: split read operation (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: simplify command sending API (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: move ucsi_acknowledge() from ucsi_read_error() (Desnes Nunes) [RHEL-59051]
  - phy: core: Fix documentation of of_phy_get (Desnes Nunes) [RHEL-59051]
  - redhat/configs: Adding CONFIG_UCSI_LENOVO_YOGA_C630 (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: add Lenovo Yoga C630 glue driver (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: UCSI2.0 Get Error Status changes (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: UCSI2.0 Get Error Status data structure changes (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Only set number of plug altmodes after registration (Desnes Nunes) [RHEL-59051]
  - xhci: sort out TRB Endpoint ID bitfield macros (Desnes Nunes) [RHEL-59051]
  - xhci: Apply XHCI_RESET_TO_DEFAULT quirk to TGL (Desnes Nunes) [RHEL-59051]
  - usb: xhci: add 'goto' for halted endpoint check in handle_tx_event() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move process TD code out of the while loop (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove infinite loop prevention (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove false xhci_giveback_urb_in_irq() header comment (Desnes Nunes) [RHEL-59051]
  - usb: xhci: ensure skipped isoc TDs are returned when isoc ring is stopped (Desnes Nunes) [RHEL-59051]
  - xhci: rework xhci internal endpoint halt state detection. (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove obsolete sanity check debug messages (Desnes Nunes) [RHEL-59051]
  - usb: xhci: improve error message for targetless transfer event (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move untargeted transfer event handling to a separate function (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move all segment re-numbering to xhci_link_rings() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: move link chain bit quirk checks into one helper function. (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove unused argument from handle_port_status() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove unused argument from xhci_handle_cmd_config_ep() (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove unused 'xhci' argument (Desnes Nunes) [RHEL-59051]
  - usb: xhci: remove 'num_trbs' from struct 'xhci_td' (Desnes Nunes) [RHEL-59051]
  - xhci: dbc: Allow users to modify DbC poll interval via sysfs (Desnes Nunes) [RHEL-59051]
  - xhci: Set correct transferred length for cancelled isoc transfers (Desnes Nunes) [RHEL-59051]
  - xhci: show usb device name in xhci urb tracing (Desnes Nunes) [RHEL-59051]
  - xhci: Remove dead code in xhci_move_dequeue_past_td() (Desnes Nunes) [RHEL-59051]
  - usb: chipidea: ci_hdrc_imx: Switch to RUNTIME/SYSTEM_SLEEP_PM_OPS() (Desnes Nunes) [RHEL-59051]
  - usb: misc: onboard_usb_dev: Add match function (Desnes Nunes) [RHEL-59051]
  - usb: uas: set host status byte on data completion error (Desnes Nunes) [RHEL-59051]
  - media: b2c2: flexcop-usb: fix flexcop_usb_memory_req (Desnes Nunes) [RHEL-59051]
  - media: flexcop-usb: Use min macro (Desnes Nunes) [RHEL-59051]
  - media: cx231xx: Constify struct vb2_ops (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: Add the binding example for the Genesys Logic GL3523 hub (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: psy: Add support for the charge type property (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Changing the driver data type to void (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: qcom,dwc3: Add SC8180X compatibles (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: don't retrieve PDOs if not supported (Desnes Nunes) [RHEL-59051]
  - usb: host: xhci-plat: Add support for XHCI_WRITE_64_HI_LO (Desnes Nunes) [RHEL-59051]
  - xhci: Add a quirk for writing ERST in high-low order (Desnes Nunes) [RHEL-59051]
  - usb: dwc3: Support quirk for writing high-low order (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: use min() to set tps6598x firmware packet size (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: add error log to provide firmware name and size (Desnes Nunes) [RHEL-59051]
  - usb: typec: tipd: drop second firmware name read (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: use 'time_left' variable with wait_for_completion_timeout() (Desnes Nunes) [RHEL-59051]
  - usb: misc: Drop explicit initialization of struct i2c_device_id::driver_data to 0 (Desnes Nunes) [RHEL-59051]
  - usb: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - usb: common: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - usb: host: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - usb: misc: add missing MODULE_DESCRIPTION() macros (Desnes Nunes) [RHEL-59051]
  - dt-bindings: usb: cdns,usb3: use common usb-drd yaml (Desnes Nunes) [RHEL-59051]
  - thunderbolt: debugfs: Use FIELD_GET() (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Add receiver lane margining support for retimers (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Make margining functions accept target and retimer index (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Split out margining from USB4 port (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Add sideband register access to debugfs (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Make usb4_port_sb_read/write() available outside of usb4.c (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Move usb4_port_margining_caps() declaration into correct place (Desnes Nunes) [RHEL-59051]
  - thunderbolt: Mention Thunderbolt/USB4 debugging tools in Kconfig (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Remove mappings form uvc_device_info (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Remove PLF device quirking (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Cleanup version-specific mapping (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Probe the PLF characteristics (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Refactor Power Line Frequency limit selection (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Allow custom control mapping (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix the bandwdith quirk on USB 3.x (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Force UVC version to 1.0a for 0408:4035 (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Override default flags (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Enforce alignment of frame and interval (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Add quirk for invalid dev_sof in Logitech C920 (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix integer overflow calculating timestamp (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Fix hw timestamp handling for slow FPS (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Refactor clock circular buffer (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Allow hw clock updates with buffers not full (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Quirk for invalid dev_sof in Logitech C922 (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Ignore empty TS packets (Desnes Nunes) [RHEL-59051]
  - media: uvcvideo: Support timestamp lists of any size (Desnes Nunes) [RHEL-59051]
  - redhat/configs: Adding CONFIG_PHY_FSL_IMX8QM_HSIO (Desnes Nunes) [RHEL-59051]
  - phy: freescale: imx8qm-hsio: Add i.MX8QM HSIO PHY driver support (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Enable UCSI v2.0 notifications (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Add new capability bits (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Always set number of alternate modes (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Delay alternate mode discovery (Desnes Nunes) [RHEL-59051]
  - usb: typec: Update sysfs when setting ops (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Fix null pointer dereference in trace (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: print error on hard reset (Desnes Nunes) [RHEL-59051]
  - usb: typec: tcpm: avoid resets for missing source capability messages (Desnes Nunes) [RHEL-59051]
  - usb: typec: ucsi: Add new notification bits (Desnes Nunes) [RHEL-59051]
  - usb: cdns3-ti: Add workaround for Errata i2409 (Desnes Nunes) [RHEL-59051]
  - usb: cdns3: Add quirk flag to enable suspend residency (Desnes Nunes) [RHEL-59051]
  - usb-storage: Optimize scan delay more precisely (Desnes Nunes) [RHEL-59051]
  - gnss: add USB support (Desnes Nunes) [RHEL-59051]
  - xfs: fix finding a last resort AG in xfs_filestream_pick_ag (CKI Backport Bot) [RHEL-66904] {CVE-2024-50216}
  - ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package() (Mark Langsdorf) [RHEL-64502] {CVE-2024-49962}
  - parport: Proper fix for array out-of-bounds access (CKI Backport Bot) [RHEL-65181] {CVE-2024-50074}
  - scsi: target: core: Fix null-ptr-deref in target_alloc_device() (CKI Backport Bot) [RHEL-66470] {CVE-2024-50153}
  - blk-mq: setup queue ->tag_set before initializing hctx (CKI Backport Bot) [RHEL-65152] {CVE-2024-50081}
  - udf: fix uninit-value use in udf_get_fileshortad (CKI Backport Bot) [RHEL-66420] {CVE-2024-50143}
  - block: fix potential invalid pointer dereference in blk_add_partition (Ming Lei) [RHEL-63267] {CVE-2024-47705}
  - xfs: dquot recovery does not validate the recovered dquot (Bill O'Donnell) [RHEL-62760]
  - block: update the stable_writes flag in bdev_add (Bill O'Donnell) [RHEL-62760]
  - xfs: clean up dqblk extraction (Bill O'Donnell) [RHEL-62760]
  - xfs: respect the stable writes flag on the RT device (Bill O'Donnell) [RHEL-62760]
  - filemap: add a per-mapping stable writes flag (Bill O'Donnell) [RHEL-62760]
  - xfs: clean up FS_XFLAG_REALTIME handling in xfs_ioctl_setattr_xflags (Bill O'Donnell) [RHEL-62760]
  - xfs: inode recovery does not validate the recovered inode (Bill O'Donnell) [RHEL-62760]
  - xfs: up(ic_sema) if flushing data device fails (Bill O'Donnell) [RHEL-62760]
  - xfs: only remap the written blocks in xfs_reflink_end_cow_extent (Bill O'Donnell) [RHEL-62760]
  - xfs: abort intent items when recovery intents fail (Bill O'Donnell) [RHEL-62760]
  - xfs: factor out xfs_defer_pending_abort (Bill O'Donnell) [RHEL-62760]
  - xfs: allow read IO and FICLONE to run concurrently (Bill O'Donnell) [RHEL-62760]
  - xfs: handle nimaps=0 from xfs_bmapi_write in xfs_alloc_file_space (Bill O'Donnell) [RHEL-62760]
  - xfs: introduce protection for drop nlink (Bill O'Donnell) [RHEL-62760]
  - xfs: don't look for end of extent further than necessary in xfs_rtallocate_extent_near() (Bill O'Donnell) [RHEL-62760]
  - xfs: don't try redundant allocations in xfs_rtallocate_extent_near() (Bill O'Donnell) [RHEL-62760]
  - xfs: limit maxlen based on available space in xfs_rtallocate_extent_near() (Bill O'Donnell) [RHEL-62760]
  - xfs: return maximum free size from xfs_rtany_summary() (Bill O'Donnell) [RHEL-62760]
  - xfs: invert the realtime summary cache (Bill O'Donnell) [RHEL-62760]
  - xfs: simplify rt bitmap/summary block accessor functions (Bill O'Donnell) [RHEL-62760]
  - xfs: simplify xfs_rtbuf_get calling conventions (Bill O'Donnell) [RHEL-62760]
  - xfs: cache last bitmap block in realtime allocator (Bill O'Donnell) [RHEL-62760]
  - xfs: consolidate realtime allocation arguments (Bill O'Donnell) [RHEL-62760]
  - xfs: use accessor functions for summary info words (Bill O'Donnell) [RHEL-62760]
  - xfs: create helpers for rtsummary block/wordcount computations (Bill O'Donnell) [RHEL-62760]
  - xfs: use accessor functions for bitmap words (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to handle logging parts of rt bitmap/summary blocks (Bill O'Donnell) [RHEL-62760]
  - xfs: create helpers for rtbitmap block/wordcount computations (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt summary macros to helpers (Bill O'Donnell) [RHEL-62760]
  - xfs: convert open-coded xfs_rtword_t pointer accesses to helper (Bill O'Donnell) [RHEL-62760]
  - xfs: remove XFS_BLOCKWSIZE and XFS_BLOCKWMASK macros (Bill O'Donnell) [RHEL-62760]
  - xfs: convert the rtbitmap block and bit macros to static inline functions (Bill O'Donnell) [RHEL-62760]
  - xfs: use shifting and masking when converting rt extents, if possible (Bill O'Donnell) [RHEL-62760]
  - xfs: create rt extent rounding helpers for realtime extent blocks (Bill O'Donnell) [RHEL-62760]
  - xfs: convert do_div calls to xfs_rtb_to_rtx helper calls (Bill O'Donnell) [RHEL-62760]
  - xfs: create helpers to convert rt block numbers to rt extent numbers (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to convert extlen to rtextlen (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to compute leftovers of realtime extents (Bill O'Donnell) [RHEL-62760]
  - xfs: create a helper to convert rtextents to rtblocks (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt extent numbers to xfs_rtxnum_t (Bill O'Donnell) [RHEL-62760]
  - xfs: rename xfs_verify_rtext to xfs_verify_rtbext (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t (Bill O'Donnell) [RHEL-62760]
  - xfs: convert rt bitmap/summary block numbers to xfs_fileoff_t (Bill O'Donnell) [RHEL-62760]
  - xfs: convert xfs_extlen_t to xfs_rtxlen_t in the rt allocator (Bill O'Donnell) [RHEL-62760]
  - xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h (Bill O'Donnell) [RHEL-62760]
  - xfs: make sure maxlen is still congruent with prod when rounding down (Bill O'Donnell) [RHEL-62760]
  - xfs: rt stubs should return negative errnos when rt disabled (Bill O'Donnell) [RHEL-62760]
  - xfs: prevent rt growfs when quota is enabled (Bill O'Donnell) [RHEL-62760]
  - xfs: hoist freeing of rt data fork extent mappings (Bill O'Donnell) [RHEL-62760]
  - xfs: bump max fsgeom struct version (Bill O'Donnell) [RHEL-62760]
  - xfs: move xfs_xattr_handlers to .rodata (Bill O'Donnell) [RHEL-62760]
  - cgroup/cpuset: Correct invalid remote parition prs (Waiman Long) [RHEL-36267]
  - cgroup: Fix incorrect WARN_ON_ONCE() in css_release_work_fn() (Waiman Long) [RHEL-36267]
  - cgroup: Show # of subsystem CSSes in cgroup.stat (Waiman Long) [RHEL-36267]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-535.el9]
changelog:
  - redhat: create 'crashkernel=' addons for UKI (Vitaly Kuznetsov) [RHEL-33051]
  - redhat: avoid superfluous quotes in UKI cmdline addones (Vitaly Kuznetsov) [RHEL-33051]
  - x86/mm: Fix a kdump kernel failure on SME system when CONFIG_IMA_KEXEC=y (Baoquan He) [RHEL-39727]
  - netfilter: nft_payload: sanitize offset and length before calling skb_checksum() (CKI Backport Bot) [RHEL-66855] {CVE-2024-50251}
  - cxl/port: Fix use-after-free, permit out-of-order decoder shutdown (CKI Backport Bot) [RHEL-66836] {CVE-2024-50226}
  - fs/netfs/fscache_cookie: add missing "n_accesses" check (CKI Backport Bot) [RHEL-57214] {CVE-2024-45000}
  - ACPI: sysfs: validate return type of _STR method (CKI Backport Bot) [RHEL-63262] {CVE-2024-49860}
  - tty: n_gsm: Fix use-after-free in gsm_cleanup_mux (CKI Backport Bot) [RHEL-65117] {CVE-2024-50073}
  - ACPI: PAD: fix crash in exit_round_robin() (Mark Langsdorf) [RHEL-64453] {CVE-2024-49935}
  - ext4: avoid use-after-free in ext4_ext_show_leaf() (CKI Backport Bot) [RHEL-64591] {CVE-2024-49889}
  - kthread: unpark only parked kthread (Radostin Stoyanov) [RHEL-63788] {CVE-2024-50019}
  - irqchip/gic-v4: Correctly deal with set_affinity on lazily-mapped VPEs (Charles Mirabile) [RHEL-66968] {CVE-2024-50192}
  - irqchip/gic-v4: Don't allow a VMOVP on a dying VPE (Charles Mirabile) [RHEL-66968] {CVE-2024-50192}
  - selftests: fib_nexthops: Test 16-bit next hop weights (Ivan Vecera) [RHEL-68365]
  - selftests: router_mpath_nh_res: Test 16-bit next hop weights (Ivan Vecera) [RHEL-68365]
  - selftests: router_mpath_nh: Test 16-bit next hop weights (Ivan Vecera) [RHEL-68365]
  - selftests: router_mpath: Sleep after MZ (Ivan Vecera) [RHEL-68365]
  - net: nexthop: Increase weight to u16 (Ivan Vecera) [RHEL-68365]
  - net: nexthop: Add flag to assert that NHGRP reserved fields are zero (Ivan Vecera) [RHEL-68365]
  - mm, slub: avoid zeroing kmalloc redzone (Waiman Long) [RHEL-64035] {CVE-2024-49885}
  - mm/slub: avoid zeroing outside-object freepointer for single free (Waiman Long) [RHEL-64035]
  - slub, kasan: improve interaction of KASAN and slub_debug poisoning (Waiman Long) [RHEL-64035]
  - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error (CKI Backport Bot) [RHEL-64518] {CVE-2024-49959}
  - page_pool: export page_pool_disable_direct_recycling() (Felix Maurer) [RHEL-57765]
  - page_pool: fix &page_pool_params kdoc issues (Felix Maurer) [RHEL-57765]
  - xsk: use generic DMA sync shortcut instead of a custom one (Felix Maurer) [RHEL-57765]
  - page_pool: check for DMA sync shortcut earlier (Felix Maurer) [RHEL-57765]
  - page_pool: don't use driver-set flags field directly (Felix Maurer) [RHEL-57765]
  - page_pool: make sure frag API fields don't span between cachelines (Felix Maurer) [RHEL-57765]
  - page_pool: add DMA-sync-for-CPU inline helper (Felix Maurer) [RHEL-57765]
  - page_pool: constify some read-only function arguments (Felix Maurer) [RHEL-57765]
  - page_pool: try direct bulk recycling (Felix Maurer) [RHEL-57765]
  - page_pool: check for PP direct cache locality later (Felix Maurer) [RHEL-57765]
  - net: page_pool: factor out page_pool recycle check (Felix Maurer) [RHEL-57765]
  - net: page_pool: fix recycle stats for system page_pool allocator (Felix Maurer) [RHEL-57765]
  - page_pool: disable direct recycling based on pool->cpuid on destroy (Felix Maurer) [RHEL-57765]
  - scsi: lpfc: Update lpfc version to 14.4.0.5 (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Support loopback tests with VMID enabled (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Revise TRACE_EVENT log flag severities from KERN_ERR to KERN_WARNING (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix kref imbalance on fabric ndlps from dev_loss_tmo handler (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Restrict support for 32 byte CDBs to specific HBAs (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update phba link state conditional before sending CMF_SYNC_WQE (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd() (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Remove trailing space after \n newline (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update lpfc version to 14.4.0.4 (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update PRLO handling in direct attached topology (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix unintentional double clearing of vmid_flag (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Remove redundant vport assignment when building an abort request (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Change diagnostic log flag during receipt of unknown ELS cmds (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Update lpfc version to 14.4.0.3 (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Relax PRLI issue conditions after GID_FT response (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (Dick Kennedy) [RHEL-53595]
  - scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (Dick Kennedy) [RHEL-53595]
  - dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume (CKI Backport Bot) [RHEL-54875] {CVE-2024-43820}
  - ACPI: PRM: Clean up guid type in struct prm_handler_info (Mark Langsdorf) [RHEL-66520] {CVE-2024-50141}
  - ACPI: PRM: Find EFI_MEMORY_RUNTIME block for PRM handler and context (CKI Backport Bot) [RHEL-66520] {CVE-2024-50141}
  - ext4: force disable fscrypt feature (Brian Foster) [RHEL-41061]
  - exfat: fix memory leak in exfat_load_bitmap() (CKI Backport Bot) [RHEL-63633] {CVE-2024-50013}
  - nbd: fix race between timeout and normal completion (Ming Lei) [RHEL-55992]
  - nfsd: map the EBADMSG to nfserr_io to avoid warning (Olga Kornievskaia) [RHEL-63586] {CVE-2024-49875}
  - bpf: Use nla_ok() instead of checking nla_len directly (Petr Oros) [RHEL-57755]
  - devlink: use kvzalloc() to allocate devlink instance resources (Petr Oros) [RHEL-57755]
  - Documentation: Add documentation for eswitch attribute (Petr Oros) [RHEL-57755]
  - devlink: fix port new reply cmd type (Petr Oros) [RHEL-57755]
  - tools: ynl: add header guards for nlctrl (Petr Oros) [RHEL-57755]
  - devlink: Add comments to use netlink gen tool (Petr Oros) [RHEL-57755]
  - net/netlink: Add getsockopt support for NETLINK_LISTEN_ALL_NSID (Petr Oros) [RHEL-57755]
  - netlink: specs: support generating code for genl socket priv (Petr Oros) [RHEL-57755]
  - tools: ynl: remove trailing semicolon (Petr Oros) [RHEL-57755]
  - netlink: specs: support unterminated-ok (Petr Oros) [RHEL-57755]
  - tools: ynl-gen: support using pre-defined values in attr checks (Petr Oros) [RHEL-57755]
  - ynl: samples: fix recycling rate calculation (Petr Oros) [RHEL-57755]
  - tools: ynl: Fix spelling mistake "Constructred" -> "Constructed" (Petr Oros) [RHEL-57755]
  - doc/netlink/specs: Add spec for nlctrl netlink family (Petr Oros) [RHEL-57755]
  - doc/netlink: Allow empty enum-name in ynl specs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add nest-type-value decoding (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Fix c codegen for array-nest (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Fix extack decoding for netlink-raw (Petr Oros) [RHEL-57755]
  - tools: ynl: check for overflow of constructed messages (Petr Oros) [RHEL-57755]
  - tools: ynl: add --dbg-small-recv for easier kernel testing (Petr Oros) [RHEL-57755]
  - tools: ynl: support debug printing messages (Petr Oros) [RHEL-57755]
  - tools: ynl: allow setting recv() size (Petr Oros) [RHEL-57755]
  - tools: ynl: move the new line in NlMsg __repr__ (Petr Oros) [RHEL-57755]
  - tools: ynl: remove __pycache__ during clean (Petr Oros) [RHEL-57755]
  - tools: ynl: add distclean to .PHONY in all makefiles (Petr Oros) [RHEL-57755]
  - tools: ynl: rename make hardclean -> distclean (Petr Oros) [RHEL-57755]
  - genetlink: fit NLMSG_DONE into same read() as families (Petr Oros) [RHEL-57755]
  - netdev: let netlink core handle -EMSGSIZE errors (Petr Oros) [RHEL-57755]
  - netlink: handle EMSGSIZE errors in the core (Petr Oros) [RHEL-57755]
  - tools: ynl: use MSG_DONTWAIT for getting notifications (Petr Oros) [RHEL-57755]
  - tools: ynl: remove the libmnl dependency (Petr Oros) [RHEL-57755]
  - tools: ynl: stop using mnl socket helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: switch away from MNL_CB_* (Petr Oros) [RHEL-57755]
  - tools: ynl: switch away from mnl_cb_t (Petr Oros) [RHEL-57755]
  - tools: ynl: stop using mnl_cb_run2() (Petr Oros) [RHEL-57755]
  - tools: ynl: use ynl_sock_read_msgs() for ACK handling (Petr Oros) [RHEL-57755]
  - tools: ynl: wrap recv() + mnl_cb_run2() into a single helper (Petr Oros) [RHEL-57755]
  - tools: ynl-gen: remove unused parse code (Petr Oros) [RHEL-57755]
  - tools: ynl: make yarg the first member of struct ynl_dump_state (Petr Oros) [RHEL-57755]
  - tools: ynl: create local ARRAY_SIZE() helper (Petr Oros) [RHEL-57755]
  - tools: ynl: create local nlmsg access helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: create local for_each helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: create local attribute helpers (Petr Oros) [RHEL-57755]
  - tools: ynl: give up on libmnl for auto-ints (Petr Oros) [RHEL-57755]
  - tools: ynl: protect from old OvS headers (Petr Oros) [RHEL-57755]
  - tools: ynl: fix header guards (Petr Oros) [RHEL-57755]
  - genetlink: make info in GENL_REQ_ATTR_CHECK() const (Petr Oros) [RHEL-57755]
  - tools: ynl: allow user to pass enum string instead of scalar value (Petr Oros) [RHEL-57755]
  - tools: ynl: process all scalar types encoding in single elif statement (Petr Oros) [RHEL-57755]
  - tools: ynl: allow user to specify flag attr with bool values (Petr Oros) [RHEL-57755]
  - tools: ynl: don't access uninitialized attr_space variable (Petr Oros) [RHEL-57755]
  - tools: ynl: add support for encoding multi-attr (Petr Oros) [RHEL-57755]
  - doc: netlink: specs: tc: add multi-attr to tc-taprio-sched-entry (Petr Oros) [RHEL-57755]
  - tools: ynl: correct typo and docstring (Petr Oros) [RHEL-57755]
  - Documentation: Fix counter name of mlx5 vnic reporter (Petr Oros) [RHEL-57755]
  - net: make dev_unreg_count global (Petr Oros) [RHEL-57755]
  - tools: ynl: auto-gen for all genetlink families (Petr Oros) [RHEL-57755]
  - tools: ynl: generate code for ovs families (Petr Oros) [RHEL-57755]
  - tools: ynl: include dpll and mptcp_pm in C codegen (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add type info to struct members in generated docs (Petr Oros) [RHEL-57755]
  - doc/netlink: Describe nested structs in netlink raw docs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add support for nested structs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Move formatted_string method out of NlAttr (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Rename _fixed_header_size() to _struct_size() (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Combine struct decoding logic in ynl (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Encode default values for binary blobs (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Add support for encoding sub-messages (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Refactor fixed header encoding into separate method (Petr Oros) [RHEL-57755]
  - doc/netlink: Describe sub-message selector resolution (Petr Oros) [RHEL-57755]
  - tools/net/ynl: Support sub-messages in nested attribute spaces (Petr Oros) [RHEL-57755]
  - netlink: Return unsigned value for nla_len() (Petr Oros) [RHEL-57755]
  - tools: ynl: move private definitions to a separate header (Petr Oros) [RHEL-57755]
  - tools: ynl: remove generated user space code from git (Petr Oros) [RHEL-57755]
  - ice: document RDMA devlink parameters (Petr Oros) [RHEL-57755]
  - tracing: devlink: Use static array for string in devlink_trap_report event (Petr Oros) [RHEL-57755]
  - net: get rid of rtnl_lock_unregistering() (Petr Oros) [RHEL-57755]
  - netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage. (Michal Schmidt) [RHEL-59089]
  - locking/local_lock: Add local nested BH locking infrastructure. (Michal Schmidt) [RHEL-59089]
  - locking/local_lock: Introduce guard definition for local_lock. (Michal Schmidt) [RHEL-59089]
  - vhost_vdpa: assign irq bypass producer token correctly (Cindy Lu) [RHEL-63364] {CVE-2024-47748}
  - nfsd: call cache_put if xdr_reserve_space returns NULL (Olga Kornievskaia) [RHEL-63382] {CVE-2024-47737}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-536.el9]
changelog:
  - gfs2: Get rid of demote_ok checks (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove freeze_go_demote_ok (Andreas Gruenbacher) [RHEL-67675]
  - Revert "GFS2: Don't add all glocks to the lru" (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Revise glock reference counting model (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Add GL_NOBLOCK flag (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: fix double destroy_workqueue error (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Switch to a per-filesystem glock workqueue (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Report when glocks cannot be freed for a long time (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: gfs2_glock_get cleanup (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Invert the GLF_INITIAL flag (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove outdated comment in glock_work_func (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Update glocks documentation (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename handle_callback to request_demote (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename GLF_FROZEN to GLF_HAVE_FROZEN_REPLY (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename GLF_REPLY_PENDING to GLF_HAVE_REPLY (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Rename GLF_FREEING to GLF_UNLOCKED (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove useless return statement in run_queue (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: Remove unnecessary function prototype (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: dynamically allocate the gfs2-qd shrinker (Andreas Gruenbacher) [RHEL-67675]
  - gfs2: dynamically allocate the gfs2-glock shrinker (Andreas Gruenbacher) [RHEL-67675]
  - Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change (CKI Backport Bot) [RHEL-63971] {CVE-2024-50044}
  - selftests/mm: relax test to fail after 100 migration failures (Radostin Stoyanov) [RHEL-62703]
  - perf dso: Fix symtab_type for kmod compression (Michael Petlan) [RHEL-62198]
  - Bluetooth: HCI: Fix potential null-ptr-deref (CKI Backport Bot) [RHEL-38466] {CVE-2024-36011}
  - RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: Remove some dead code (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: Fix some error handling paths in bnxt_re_probe() (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: synchronize the qp-handle table array (Mohammad Heib) [RHEL-67317]
  - RDMA/bnxt_re: Fix the usage of control path spin locks (Mohammad Heib) [RHEL-67317]
  - bnxt_re: Fix imm_data endianness (Mohammad Heib) [RHEL-67317]
  - Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs (CKI Backport Bot) [RHEL-66803] {CVE-2024-50255}
  - Revert "ixgbe: Manual AN-37 for troublesome link partners for X550 SFI" (Ivan Vecera) [RHEL-44950]
  - Bluetooth: hci_core: Fix calling mgmt_device_connected (Bastien Nocera) [RHEL-63624] {CVE-2024-49950}
  - Bluetooth: L2CAP: Fix uaf in l2cap_connect (CKI Backport Bot) [RHEL-63624] {CVE-2024-49950}
  - Bluetooth: SCO: Fix UAF on sco_sock_timeout (CKI Backport Bot) [RHEL-65927] {CVE-2024-50125}
  - Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Fix UAF on create_le_conn_complete (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Attempt to dequeue connection attempt (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_conn: Always use sk_timeo as conn_timeout (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: Remove pending ACL connection attempts (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_conn: Only do ACL connections sequentially (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: hci_event: Use HCI error defines instead of magic values (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: Remove superfluous call to hci_conn_check_pending() (Bastien Nocera) [RHEL-63875] {CVE-2024-50029}
  - Bluetooth: Call iso_exit() on module unload (CKI Backport Bot) [RHEL-65144] {CVE-2024-50078}
  - Bluetooth: ISO: Fix multiple init when debugfs is disabled (CKI Backport Bot) [RHEL-65135] {CVE-2024-50077}
  - Bluetooth: bnep: fix wild-memory-access in proto_unregister (CKI Backport Bot) [RHEL-66364] {CVE-2024-50148}
  - fsdax: dax_unshare_iter needs to copy entire blocks (Brian Foster) [RHEL-64959]
  - fsdax: remove zeroing code from dax_unshare_iter (Brian Foster) [RHEL-64959]
  - iomap: turn iomap_want_unshare_iter into an inline function (Brian Foster) [RHEL-64959]
  - iomap: share iomap_unshare_iter predicate code with fsdax (Brian Foster) [RHEL-64959]
  - iomap: constrain the file range passed to iomap_file_unshare (Brian Foster) [RHEL-64959]
  - iomap: don't bother unsharing delalloc extents (Brian Foster) [RHEL-64959]
  - iomap: improve shared block detection in iomap_unshare_iter (Brian Foster) [RHEL-64959]
  - iomap: convert iomap_unshare_iter to use large folios (Brian Foster) [RHEL-64959]
  - xfs: don't allocate COW extents when unsharing a hole (Brian Foster) [RHEL-64959]
  - xfs: don't free cowblocks from under dirty pagecache on unshare (Brian Foster) [RHEL-64959]
  - xfs: skip background cowblock trims on inodes open for write (Brian Foster) [RHEL-64959]
  - uprobe: avoid out-of-bounds memory access of fetching args (Oleg Nesterov) [RHEL-64995] {CVE-2024-50067}
  - uprobes: encapsulate preparation of uprobe args buffer (Oleg Nesterov) [RHEL-64995] {CVE-2024-50067}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-537.el9]
changelog:
  - smb: client: Handle kstrdup failures for passwords (Paulo Alcantara) [RHEL-65939] {CVE-2024-50120}
  - fs/inode: Prevent dump_mapping() accessing invalid dentry.d_name.name (CKI Backport Bot) [RHEL-64530] {CVE-2024-49934}
  - mptcp: init: protect sched with rcu_read_lock (CKI Backport Bot) [RHEL-68179] {CVE-2024-53047}
  - ARM: 9361/1: amba: store owner from modules with amba_driver_register() (Mark Salter) [RHEL-56484]
  - amba: bus: balance firmware node reference counting (Mark Salter) [RHEL-56484]
  - of/platform: increase refcount of fwnode (Mark Salter) [RHEL-56484]
  - of/platform: Propagate firmware node by calling device_set_node() (Mark Salter) [RHEL-56484]
  - amba: bus: fix refcount leak (Mark Salter) [RHEL-56484]
  - amba: move to_amba_device() to use container_of_const (Mark Salter) [RHEL-56484]
  - ARM: tegra: Remove MODULE_LICENSE in non-modules (Mark Salter) [RHEL-56484]
  - ARM: 9261/1: amba: Drop redundant assignments of the system PM callbacks (Mark Salter) [RHEL-56484]
  - ARM: 9229/1: amba: Fix use-after-free in amba_read_periphid() (Mark Salter) [RHEL-56484]
  - ARM: 9220/1: amba: Remove deferred device addition (Mark Salter) [RHEL-56484]
  - ARM: 9207/1: amba: fix refcount underflow if amba_device_add() fails (Mark Salter) [RHEL-56484]
  - ARM: 9192/1: amba: fix memory leak in amba_device_try_add() (Mark Salter) [RHEL-56484]
  - ARM: 9193/1: amba: Add amba_read_periphid() helper (Mark Salter) [RHEL-56484]
  - amba: Use driver_set_override() instead of open-coding (Mark Salter) [RHEL-56484]
  - ARM: 9174/1: amba: Move EXPORT_SYMBOL() closer to definition (Mark Salter) [RHEL-56484]
  - ARM: 9173/1: amba: kill amba_find_match() (Mark Salter) [RHEL-56484]
  - ARM: 9172/1: amba: Cleanup amba pclk operation (Mark Salter) [RHEL-56484]
  - ARM: 9163/1: amba: Move of_amba_device_decode_irq() into amba_probe() (Mark Salter) [RHEL-56484]
  - ARM: 9162/1: amba: Kill sysfs attribute file of irq (Mark Salter) [RHEL-56484]
  - ARM: 9121/1: amba: Drop unused functions about APB/AHB devices add (Mark Salter) [RHEL-56484]
  - KVM: selftests: Allow skipping the KVM_RUN sanity check in rseq_test (Vitaly Kuznetsov) [RHEL-28186]
  - smb: client: fix OOBs when building SMB2_IOCTL request (Paulo Alcantara) [RHEL-66476] {CVE-2024-50151}
  - smb: client: fix possible double free in smb2_set_ea() (Paulo Alcantara) [RHEL-66493] {CVE-2024-50152}
  - libeth: add Tx buffer completion helpers (Petr Oros) [RHEL-59099]
  - net: intel: Remove MODULE_AUTHORs (Petr Oros) [RHEL-59099]
  - libeth: support different types of buffers for Rx (Petr Oros) [RHEL-59099]
  - libeth: add cacheline / struct layout assertion helpers (Petr Oros) [RHEL-59099]
  - net: intel: Use *-y instead of *-objs in Makefile (Petr Oros) [RHEL-59099]
  - libeth: add Rx buffer management (Petr Oros) [RHEL-59099]
  - net: intel: introduce {, Intel} Ethernet common library (Petr Oros) [RHEL-59099]
  - e1000e: Remove Meteor Lake SMBUS workarounds (Ivan Vecera) [RHEL-49812]
  - e1000e: change I219 (19) devices to ADP (Ivan Vecera) [RHEL-49812]
  - e1000e: avoid failing the system during pm_suspend (Ivan Vecera) [RHEL-49812]
  - net: intel: Remove MODULE_AUTHORs (Ivan Vecera) [RHEL-49812]
  - e1000e: fix force smbus during suspend flow (Ivan Vecera) [RHEL-49812]
  - e1000e: Fix S0ix residency on corporate systems (Ivan Vecera) [RHEL-49812]
  - net: intel: Use *-y instead of *-objs in Makefile (Ivan Vecera) [RHEL-49812]
  - e1000e: move force SMBUS near the end of enable_ulp function (Ivan Vecera) [RHEL-49812]
  - net: e1000e & ixgbe: Remove PCI_HEADER_TYPE_MFD duplicates (Ivan Vecera) [RHEL-49812]
  - e1000e: change usleep_range to udelay in PHY mdic access (Ivan Vecera) [RHEL-49812]
  - e1000e: Remove redundant runtime resume for ethtool_ops (Ivan Vecera) [RHEL-49812]
  - net: intel: implement modern PM ops declarations (Ivan Vecera) [RHEL-49812]
  - e1000e: move force SMBUS from enable ulp function to avoid PHY loss issue (Ivan Vecera) [RHEL-49812]
  - e1000e: Workaround for sporadic MDI error on Meteor Lake systems (Ivan Vecera) [RHEL-49812]
  - intel: legacy: Partial revert of field get conversion (Ivan Vecera) [RHEL-49812]
  - e1000e: Minor flow correction in e1000_shutdown function (Ivan Vecera) [RHEL-49812]
  - e1000e: correct maximum frequency adjustment values (Ivan Vecera) [RHEL-49812]
  - intel: legacy: field get conversion (Ivan Vecera) [RHEL-49812]
  - intel: legacy: field prep conversion (Ivan Vecera) [RHEL-49812]
  - e1000e: make lost bits explicit (Ivan Vecera) [RHEL-49812]
  - e1000e: Use pcie_capability_read_word() for reading LNKSTA (Ivan Vecera) [RHEL-49812]
  - e1000e: Use PCI_EXP_LNKSTA_NLW & FIELD_GET() instead of custom defines/code (Ivan Vecera) [RHEL-49812]
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() (Guillaume Nault) [RHEL-68205] {CVE-2024-50304}
  - ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_init_flow() (Guillaume Nault) [RHEL-68250] {CVE-2024-53042}
  - Bluetooth: ISO: Fix UAF on iso_sock_timeout (CKI Backport Bot) [RHEL-66320] {CVE-2024-50124}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-538.el9]
changelog:
  - perf dwarf-aux: Fix build with !HAVE_DWARF_GETLOCATIONS_SUPPORT (Michael Petlan) [RHEL-29796]
  - kernel.spec: Remove tools/build/Build (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/stat.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/prctl.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/fs.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/fcntl.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/socket.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/prctl.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/irq_vectors.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync arch/mips/kernel/syscalls/syscall_n64.tbl with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync arch/s390/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync arch/powerpc/kernel/syscalls/syscall.tbl with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync arch/x86/entry/syscalls/syscall_64.tbl with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync arch/x86/entry/syscalls/syscall_32.tbl with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm-generic/unistd.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/svm.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/kvm.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/msr-index.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/cpufeatures.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync asm/disabled-features.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/stat.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/in.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/kvm.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync linux/fscrypt.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync drm/i915_drm.h with kernel (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: sync drm/drm.h with kernel (Michael Petlan) [RHEL-29796]
  - perf cap: Add __NR_capget to arch/x86 unistd (Michael Petlan) [RHEL-29796]
  - perf python: Fix up the build on architectures without HAVE_KVM_STAT_SUPPORT (Michael Petlan) [RHEL-29796]
  - perf test: Handle perftool-testsuite_probe failure due to broken DWARF (Michael Petlan) [RHEL-29796]
  - perf trace: Fix non-listed archs in the syscalltbl routines (Michael Petlan) [RHEL-29796]
  - perf build: Change the clang check back to 12.0.1 (Michael Petlan) [RHEL-29796]
  - perf trace augmented_raw_syscalls: Add more checks to pass the verifier (Michael Petlan) [RHEL-29796]
  - perf trace augmented_raw_syscalls: Add extra array index bounds checking to satisfy some BPF verifiers (Michael Petlan) [RHEL-29796]
  - perf trace: The return from 'write' isn't a pid (Michael Petlan) [RHEL-29796]
  - perf tools: Update copy of libbpf's hashmap.c (Michael Petlan) [RHEL-29796]
  - perf cs-etm: Fix the assert() to handle captured and unprocessed cpu trace (Michael Petlan) [RHEL-29796]
  - perf build: Fix build feature-dwarf_getlocations fail for old libdw (Michael Petlan) [RHEL-29796]
  - perf build: Fix static compilation error when libdw is not installed (Michael Petlan) [RHEL-29796]
  - perf tools: Cope with differences for lib/list_sort.c copy from the kernel (Michael Petlan) [RHEL-29796]
  - tools check_headers.sh: Add check variant that excludes some hunks (Michael Petlan) [RHEL-29796]
  - tools headers UAPI: Sync the linux/in.h with the kernel sources (Michael Petlan) [RHEL-29796]
  - perf vdso: Missed put on 32-bit dsos (Michael Petlan) [RHEL-29796]
  - perf symbol: Set binary_type of dso when loading (Michael Petlan) [RHEL-29796]
  - perf trace: Mark the 'head' arg in the set_robust_list syscall as coming from user space (Michael Petlan) [RHEL-29796]
  - perf trace: Mark the 'rseq' arg in the rseq syscall as coming from user space (Michael Petlan) [RHEL-29796]
  - perf env: Find correct branch counter info on hybrid (Michael Petlan) [RHEL-29796]
  - perf evlist: Print hint for group (Michael Petlan) [RHEL-29796]
  - tools: Drop nonsensical -O6 (Michael Petlan) [RHEL-29796]
  - perf evsel: Add accessor for tool_event (Michael Petlan) [RHEL-29796]
  - perf pmus: Fake PMU clean up (Michael Petlan) [RHEL-29796]
  - perf list: Avoid potential out of bounds memory read (Michael Petlan) [RHEL-29796]
  - perf help: Fix a typo ("bellow") (Michael Petlan) [RHEL-29796]
  - perf ftrace: Detect whether ftrace is enabled on system (Michael Petlan) [RHEL-29796]
  - perf test shell probe_vfs_getname: Remove extraneous '=' from probe line number regex (Michael Petlan) [RHEL-29796]
  - perf build: Require at least clang 16.0.6 to build BPF skeletons (Michael Petlan) [RHEL-29796]
  - perf trace: If a syscall arg is marked as 'const', assume it is coming _from_ userspace (Michael Petlan) [RHEL-29796]
  - perf parse-events: Remove duplicated include in parse-events.c (Michael Petlan) [RHEL-29796]
  - perf callchain: Allow symbols to be optional when resolving a callchain (Michael Petlan) [RHEL-29796]
  - perf inject: Lazy build-id mmap2 event insertion (Michael Petlan) [RHEL-29796]
  - perf inject: Add new mmap2-buildid-all option (Michael Petlan) [RHEL-29796]
  - perf inject: Fix build ID injection (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Add pr_debug_scope() (Michael Petlan) [RHEL-29796]
  - perf annotate: Treat 'call' instruction as stack operation (Michael Petlan) [RHEL-29796]
  - perf build: Remove unused feature test target (Michael Petlan) [RHEL-29796]
  - perf build: Autodetect minimum required llvm-dev version (Michael Petlan) [RHEL-29796]
  - perf trace: Mark the rlim arg in the prlimit64 and setrlimit syscalls as coming from user space (Michael Petlan) [RHEL-29796]
  - perf trace: Support collecting 'union's with the BPF augmenter (Michael Petlan) [RHEL-29796]
  - perf trace: Add --force-btf for debugging (Michael Petlan) [RHEL-29796]
  - perf trace: Collect augmented data using BPF (Michael Petlan) [RHEL-29796]
  - perf trace: Pretty print buffer data (Michael Petlan) [RHEL-29796]
  - perf trace: Pretty print struct data (Michael Petlan) [RHEL-29796]
  - perf trace: Add trace__bpf_sys_enter_beauty_map() to prepare for fetching data in BPF (Michael Petlan) [RHEL-29796]
  - perf trace: Mark bpf's attr as from_user (Michael Petlan) [RHEL-29796]
  - perf trace: Introduce SCA_TIMESPEC_FROM_USER() to set .from_user = true (Michael Petlan) [RHEL-29796]
  - perf trace: Introduce SCA_SOCKADDR_FROM_USER() to set .from_user = true (Michael Petlan) [RHEL-29796]
  - perf trace: Introduce SCA_PERF_ATTR_FROM_USER() to set .from_user = true (Michael Petlan) [RHEL-29796]
  - perf trace: Mark which syscall arguments go from user space to kernel space (Michael Petlan) [RHEL-29796]
  - perf trace: Use a common encoding for augmented arguments, with size + error + payload (Michael Petlan) [RHEL-29796]
  - perf trace augmented_syscalls.bpf: Move the renameat aumenter to renameat2, temporarily (Michael Petlan) [RHEL-29796]
  - perf mem: Fix the wrong reference in parse_record_events() (Michael Petlan) [RHEL-29796]
  - perf mem: Fix missed p-core mem events on ADL and RPL (Michael Petlan) [RHEL-29796]
  - perf mem: Check mem_events for all eligible PMUs (Michael Petlan) [RHEL-29796]
  - perf script python: Avoid buffer overflow in python PEBS register interface (Michael Petlan) [RHEL-29796]
  - perf jevents: Ignore sys when determining a model directory (Michael Petlan) [RHEL-29796]
  - perf check: Fix inconsistencies in feature names (Michael Petlan) [RHEL-29796]
  - perf tests probe_vfs_getname.sh: Update to use 'perf check feature' (Michael Petlan) [RHEL-29796]
  - perf tools test_task_analyzer.sh: Update to use 'perf check feature' (Michael Petlan) [RHEL-29796]
  - perf version: Update --build-options to use 'supported_features' array (Michael Petlan) [RHEL-29796]
  - perf jevents: Add cpuid to model lookup command (Michael Petlan) [RHEL-29796]
  - perf check: Introduce 'check' subcommand (Michael Petlan) [RHEL-29796]
  - libsubcmd: Don't free the usage string (Michael Petlan) [RHEL-29796]
  - perf parse-events: Vary default_breakpoint_len on i386 and arm64 (Michael Petlan) [RHEL-29796]
  - perf parse-events: Add default_breakpoint_len helper (Michael Petlan) [RHEL-29796]
  - perf parse-events: Pass cpu_list as a perf_cpu_map in __add_event() (Michael Petlan) [RHEL-29796]
  - perf pmu: Merge boolean sysfs event option parsing (Michael Petlan) [RHEL-29796]
  - perf sched timehist: Add --prio option (Michael Petlan) [RHEL-29796]
  - perf sched timehist: Add --show-prio option (Michael Petlan) [RHEL-29796]
  - perf sched timehist: Remove redundant BUG_ON in timehist_sched_change_event() (Michael Petlan) [RHEL-29796]
  - perf sched timehist: Skip print non-idle task samples when only show idle events (Michael Petlan) [RHEL-29796]
  - perf record offcpu: Constify control data for BPF (Michael Petlan) [RHEL-29796]
  - perf lock contention: Constify control data for BPF (Michael Petlan) [RHEL-29796]
  - perf kwork: Constify control data for BPF (Michael Petlan) [RHEL-29796]
  - perf ftrace latency: Constify control data for BPF (Michael Petlan) [RHEL-29796]
  - perf stat: Constify control data for BPF (Michael Petlan) [RHEL-29796]
  - perf test: Make watchpoint data 32-bits on i386 (Michael Petlan) [RHEL-29796]
  - perf test: Skip uprobe test if probe command isn't present (Michael Petlan) [RHEL-29796]
  - perf time-utils: Fix 32-bit nsec parsing (Michael Petlan) [RHEL-29796]
  - perf pmus: Fix name comparisons on 32-bit systems (Michael Petlan) [RHEL-29796]
  - perf annotate: LLVM-based disassembler (Michael Petlan) [RHEL-29796]
  - perf annotate: Split out read_symbol() (Michael Petlan) [RHEL-29796]
  - perf report: Support LLVM for addr2line() (Michael Petlan) [RHEL-29796]
  - perf tools: Build x86 32-bit syscall table from arch/x86/entry/syscalls/syscall_32.tbl (Michael Petlan) [RHEL-29796]
  - perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time (Michael Petlan) [RHEL-29796]
  - perf lock contention: Do not fail EEXIST for update (Michael Petlan) [RHEL-29796]
  - perf lock contention: Simplify spinlock check (Michael Petlan) [RHEL-29796]
  - perf lock contention: Handle error in a single place (Michael Petlan) [RHEL-29796]
  - perf test: Additional pipe tests with pipe output written to a file (Michael Petlan) [RHEL-29796]
  - perf header: Remove repipe option (Michael Petlan) [RHEL-29796]
  - perf inject: Overhaul handling of pipe files (Michael Petlan) [RHEL-29796]
  - perf header: Allow attributes to be written after data (Michael Petlan) [RHEL-29796]
  - perf header: Fail read if header sections overlap (Michael Petlan) [RHEL-29796]
  - perf header: Add kerneldoc to 'struct perf_file_header' (Michael Petlan) [RHEL-29796]
  - perf session: Document 'struct perf_session' and constify its 'auxtrace' member (Michael Petlan) [RHEL-29796]
  - perf: cs-etm: Print queue number in raw trace dump (Michael Petlan) [RHEL-29796]
  - perf: cs-etm: Support version 0.1 of HW_ID packets (Michael Petlan) [RHEL-29796]
  - perf: cs-etm: Only save valid trace IDs into files (Michael Petlan) [RHEL-29796]
  - perf: cs-etm: Create decoders based on the trace ID mappings (Michael Petlan) [RHEL-29796]
  - perf: cs-etm: Move traceid_list to each queue (Michael Petlan) [RHEL-29796]
  - perf: cs-etm: Allocate queues for all CPUs (Michael Petlan) [RHEL-29796]
  - perf cs-etm: Create decoders after both AUX and HW_ID search passes (Michael Petlan) [RHEL-29796]
  - perf test: Add 'perf record cgroup' filtering test (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Support filtering on cgroups (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Add build dependency to header files (Michael Petlan) [RHEL-29796]
  - perf report: Fix segfault when 'sym' sort key is not used (Michael Petlan) [RHEL-29796]
  - perf test trace_btf_enum: Fix shellcheck warning (Michael Petlan) [RHEL-29796]
  - perf auxtrace: Remove unused 'pmu' pointer from struct auxtrace_record (Michael Petlan) [RHEL-29796]
  - perf auxtrace: Use evsel__is_aux_event() for checking AUX event (Michael Petlan) [RHEL-29796]
  - perf vendor events arm64: Move Yitian 710 DDR PMU into T-Head directory (Michael Petlan) [RHEL-29796]
  - perf vendor events: Move PM_BR_MPRED_CMPL event for power10 platform (Michael Petlan) [RHEL-29796]
  - perf vendor events power10: Move the JSON/events (Michael Petlan) [RHEL-29796]
  - perf vendor events power10: Update JSON/events (Michael Petlan) [RHEL-29796]
  - perf trace: Pass the richer 'struct syscall_arg' pointer to trace__btf_scnprintf() (Michael Petlan) [RHEL-29796]
  - perf trace: Fix perf trace -p <PID> (Michael Petlan) [RHEL-29796]
  - perf evlist: Introduce method to find if there is a bpf-output event (Michael Petlan) [RHEL-29796]
  - perf report: Name events in stats for pipe mode (Michael Petlan) [RHEL-29796]
  - perf testsuite: Install perf-report tests in the 'make install-tests -C tools/perf' target (Michael Petlan) [RHEL-29796]
  - perf testsuite report: Add test case for perf report (Michael Petlan) [RHEL-29796]
  - perf testsuite report: Add test for perf-report basic functionality (Michael Petlan) [RHEL-29796]
  - perf testsuite: Add common output checking helper (Michael Petlan) [RHEL-29796]
  - perf testsuite probe: Add test for line semantics (Michael Petlan) [RHEL-29796]
  - perf testsuite probe: Add test for invalid options (Michael Petlan) [RHEL-29796]
  - perf testsuite probe: Add test for basic perf-probe options (Michael Petlan) [RHEL-29796]
  - perf testsuite probe: Add test for blacklisted kprobes handling (Michael Petlan) [RHEL-29796]
  - perf testsuite: Fix shellcheck warnings (Michael Petlan) [RHEL-29796]
  - perf testsuite: Merge settings files for shell tests (Michael Petlan) [RHEL-29796]
  - perf tests shell: Skip base_* dirs in test script search (Michael Petlan) [RHEL-29796]
  - perf test vfs_getname: Look for alternative line where to collect the pathname (Michael Petlan) [RHEL-29796]
  - perf test: Update sample filtering tests with multiple events (Michael Petlan) [RHEL-29796]
  - perf tools: Print lost samples due to BPF filter (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Support multiple events properly (Michael Petlan) [RHEL-29796]
  - perf hist: Don't set hpp_fmt_value for members in --no-group (Michael Petlan) [RHEL-29796]
  - perf test: Support external tests for separate objdir (Michael Petlan) [RHEL-29796]
  - perf python: Disable -Wno-cast-function-type-mismatch if present on clang (Michael Petlan) [RHEL-29796]
  - perf python: Allow checking for the existence of warning options in clang (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Copy back variable types after move (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Update stack slot for the store (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Update debug messages (Michael Petlan) [RHEL-29796]
  - perf dwarf-aux: Handle bitfield members from pointer access (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Add 'typecln' sort key (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Show offset and size in hex (Michael Petlan) [RHEL-29796]
  - perf bpf: Remove redundant check that map is NULL (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Fix percpu pointer check (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Prefer struct/union over base type (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Fix missing constant copy (Michael Petlan) [RHEL-29796]
  - perf cap: Tidy up and improve capability testing (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Set bitfield member offset and size properly (Michael Petlan) [RHEL-29796]
  - perf test: Add cgroup sampling test (Michael Petlan) [RHEL-29796]
  - perf record: Fix sample cgroup & namespace tracking (Michael Petlan) [RHEL-29796]
  - perf inject: Combine mmap and mmap2 handling (Michael Petlan) [RHEL-29796]
  - perf inject: Combine different mmap and mmap2 functions (Michael Petlan) [RHEL-29796]
  - perf inject: Combine build_ids and build_id_all into enum (Michael Petlan) [RHEL-29796]
  - perf test: Expand pipe/inject test (Michael Petlan) [RHEL-29796]
  - perf evsel: Constify evsel__id_hdr_size() argument (Michael Petlan) [RHEL-29796]
  - perf dso: Constify dso_id (Michael Petlan) [RHEL-29796]
  - perf jit: Constify filename argument (Michael Petlan) [RHEL-29796]
  - perf map: API clean up (Michael Petlan) [RHEL-29796]
  - perf synthetic-events: Avoid unnecessary memset (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Update type stat at the end of find_data_type_die() (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Check variables in every scope (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Add is_better_type() helper (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Add is_pointer_type() helper (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Change return type of find_data_type_block() (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Add variable_state_str() (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Add 'enum type_match_result' (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Fix off-by-one in location range check (Michael Petlan) [RHEL-29796]
  - perf dwarf-aux: Check allowed location expressions when collecting variables (Michael Petlan) [RHEL-29796]
  - perf stat: Display iostat headers correctly (Michael Petlan) [RHEL-29796]
  - perf sched timehist: Fix missing free of session in perf_sched__timehist() (Michael Petlan) [RHEL-29796]
  - tools build: Provide consistent build options for fixdep (Michael Petlan) [RHEL-29796]
  - perf hist: Update hist symbol when updating maps (Michael Petlan) [RHEL-29796]
  - perf build: Fix up broken capstone feature detection fast path (Michael Petlan) [RHEL-29796]
  - perf test: Add new test cases for the branch counter feature (Michael Petlan) [RHEL-29796]
  - perf script: Add branch counters (Michael Petlan) [RHEL-29796]
  - perf annotate: Display the branch counter histogram (Michael Petlan) [RHEL-29796]
  - perf report: Display the branch counter histogram (Michael Petlan) [RHEL-29796]
  - perf evsel: Assign abbr name for the branch counter events (Michael Petlan) [RHEL-29796]
  - perf annotate: Save branch counters for each block (Michael Petlan) [RHEL-29796]
  - perf evlist: Save branch counters information (Michael Petlan) [RHEL-29796]
  - perf report: Remove the first overflow check for branch counters (Michael Petlan) [RHEL-29796]
  - perf report: Fix --total-cycles --stdio output error (Michael Petlan) [RHEL-29796]
  - perf test annotate: Dump trapping test in trap handler (Michael Petlan) [RHEL-29796]
  - perf disasm: Fix memory leak for locked operations (Michael Petlan) [RHEL-29796]
  - perf inject: Inject build ids for entire call chain (Michael Petlan) [RHEL-29796]
  - perf callchain: Add a for_each callback style API (Michael Petlan) [RHEL-29796]
  - perf test: Add test for Intel TPEBS counting mode (Michael Petlan) [RHEL-29796]
  - perf Document: Add TPEBS (Timed PEBS(Precise Event-Based Sampling)) to Documents (Michael Petlan) [RHEL-29796]
  - perf stat: Add command line option for enabling TPEBS recording (Michael Petlan) [RHEL-29796]
  - perf vendor events intel: Add MTL metric JSON files (Michael Petlan) [RHEL-29796]
  - perf stat: Fork and launch 'perf record' when 'perf stat' needs to get retire latency value for a metric. (Michael Petlan) [RHEL-29796]
  - perf data: Allow to use given fd in data->file.fd (Michael Petlan) [RHEL-29796]
  - perf parse-events: Add a retirement latency modifier (Michael Petlan) [RHEL-29796]
  - perf session: Constify tool (Michael Petlan) [RHEL-29796]
  - perf tool: Remove perf_tool__fill_defaults() (Michael Petlan) [RHEL-29796]
  - perf kwork: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf test event_update: Ensure tools is initialized (Michael Petlan) [RHEL-29796]
  - perf data convert ctf: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf data convert json: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf diff: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf timechart: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf mem: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf sched: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf annotate: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf stat: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf report: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf inject: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf script: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf c2c: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf record: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf evlist: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf lock: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf kvm: Use perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf buildid-list: Use perf_tool__init (Michael Petlan) [RHEL-29796]
  - perf kmem: Use perf_tool__init (Michael Petlan) [RHEL-29796]
  - perf tool: Add perf_tool__init() (Michael Petlan) [RHEL-29796]
  - perf tool: Move fill defaults into tool.c (Michael Petlan) [RHEL-29796]
  - perf tool: Constify tool pointers (Michael Petlan) [RHEL-29796]
  - perf s390-cpumsf: Remove unused struct (Michael Petlan) [RHEL-29796]
  - perf auxtrace: Remove dummy tools (Michael Petlan) [RHEL-29796]
  - perf inject: Fix leader sampling inserting additional samples (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Show first-level children by default in TUI (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Implement folding in TUI browser (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Support folding in TUI browser (Michael Petlan) [RHEL-29796]
  - perf vendor events: SKX, CLX, SNR uncore cache event fixes (Michael Petlan) [RHEL-29796]
  - perf lock contention: Change stack_id type to s32 (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Fix a buffer overflow in TUI browser (Michael Petlan) [RHEL-29796]
  - perf docs: Refine the description for the buffer size (Michael Petlan) [RHEL-29796]
  - perf script: add --addr2line option (Michael Petlan) [RHEL-29796]
  - perf tests pmu: Initialize all fields of test_pmu variable (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Support --skip-empty option (Michael Petlan) [RHEL-29796]
  - perf annotate: Fix --group behavior when leader has no samples (Michael Petlan) [RHEL-29796]
  - perf tools: Create source symlink in perf object dir (Michael Petlan) [RHEL-29796]
  - perf debuginfo: Fix the build with !HAVE_DWARF_SUPPORT (Michael Petlan) [RHEL-29796]
  - perf script python: Add the 'ins_lat' field to event handler (Michael Petlan) [RHEL-29796]
  - perf test shell lbr: Support hybrid x86 systems too (Michael Petlan) [RHEL-29796]
  - perf test: Add set of perf record LBR tests (Michael Petlan) [RHEL-29796]
  - perf callchain: Fix stitch LBR memory leaks (Michael Petlan) [RHEL-29796]
  - perf tests ftrace: Add pattern check for time, count (Michael Petlan) [RHEL-29796]
  - perf test: Add a new shell test for perf ftrace (Michael Petlan) [RHEL-29796]
  - perf annotate-data: Show typedef names properly (Michael Petlan) [RHEL-29796]
  - perf annotate: Cache debuginfo for data type profiling (Michael Petlan) [RHEL-29796]
  - perf hist: Fix reference counting of branch_info (Michael Petlan) [RHEL-29796]
  - perf jevents.py: Ensure event names aren't duplicated (Michael Petlan) [RHEL-29796]
  - perf pmu-events: Remove duplicated ampereone event (Michael Petlan) [RHEL-29796]
  - perf pmu-events: Change dependencies for empty-pmu-events.c test (Michael Petlan) [RHEL-29796]
  - perf test: Add build test for JEVENTS_ARCH=all (Michael Petlan) [RHEL-29796]
  - perf annotate: Add --skip-empty option (Michael Petlan) [RHEL-29796]
  - perf annotate: Set al->data_nr using the notes->src->nr_events (Michael Petlan) [RHEL-29796]
  - perf annotate: Use annotation__pcnt_width() consistently (Michael Petlan) [RHEL-29796]
  - perf annotate: Set notes->src->nr_events early (Michael Petlan) [RHEL-29796]
  - perf annotate: Use al->data_nr if possible (Michael Petlan) [RHEL-29796]
  - tools build: Correct bpf fixdep dependencies (Michael Petlan) [RHEL-29796]
  - tools build: Avoid circular .fixdep-in.o.cmd issues (Michael Petlan) [RHEL-29796]
  - tools build: Correct libsubcmd fixdep dependencies (Michael Petlan) [RHEL-29796]
  - perf mem: Update documentation for new options (Michael Petlan) [RHEL-29796]
  - perf mem: Add -T/--data-type option to report subcommand (Michael Petlan) [RHEL-29796]
  - perf mem: Add -s/--sort option (Michael Petlan) [RHEL-29796]
  - perf tools: Add mode argument to sort_help() (Michael Petlan) [RHEL-29796]
  - perf mem: Rework command option handling (Michael Petlan) [RHEL-29796]
  - perf mem: Free the allocated sort string, fixing a leak (Michael Petlan) [RHEL-29796]
  - perf hist: Correct hist_entry->mem_info refcounts (Michael Petlan) [RHEL-29796]
  - perf python: Remove PYTHON_PERF ifdefs (Michael Petlan) [RHEL-29796]
  - perf jevents: Autogenerate empty-pmu-events.c (Michael Petlan) [RHEL-29796]
  - perf bpf: Move BPF disassembly routines to separate file to avoid clash with capstone bpf headers (Michael Petlan) [RHEL-29796]
  - perf test: Update sample filtering test (Michael Petlan) [RHEL-29796]
  - perf record: Add --setup-filter option (Michael Petlan) [RHEL-29796]
  - perf record: Fix a potential error handling issue (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Support separate lost counts for each filter (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Support pin/unpin BPF object (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Split per-task filter use case (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Pass 'target' to perf_bpf_filter__prepare() (Michael Petlan) [RHEL-29796]
  - perf bpf-filter: Make filters map a single entry hashmap (Michael Petlan) [RHEL-29796]
  - perf jevents: Use name for special find value (PMU_EVENTS__NOT_FOUND) (Michael Petlan) [RHEL-29796]
  - perf list: Give clues if failed to open tracing events directory (Michael Petlan) [RHEL-29796]
  - perf tools: Fix wrong message when running "make JOBS=1" (Michael Petlan) [RHEL-29796]
  - libperf: Add gitignore (Michael Petlan) [RHEL-29796]
  - perf arm-spe: Support multiple Arm SPE events (Michael Petlan) [RHEL-29796]
  - perf arm-spe: Extract evsel setting up (Michael Petlan) [RHEL-29796]
  - perf test: make metric validation test return early when there is no metric supported on the test system (Michael Petlan) [RHEL-29796]
  - perf ftrace profile: Add -s/--sort option (Michael Petlan) [RHEL-29796]
  - perf ftrace: Add 'profile' command (Michael Petlan) [RHEL-29796]
  - perf ftrace: Factor out check_ftrace_capable() (Michael Petlan) [RHEL-29796]
  - perf ftrace: Add 'tail' option to --graph-opts (Michael Petlan) [RHEL-29796]
  - perf test pmu: Remove unused test_pmus (Michael Petlan) [RHEL-29796]
  - perf tools: Enable evsel__is_aux_event() to work for S390_CPUMSF (Michael Petlan) [RHEL-29796]
  - perf tools: Enable evsel__is_aux_event() to work for ARM/ARM64 (Michael Petlan) [RHEL-29796]
  - perf scripts python cs-etm: Restore first sample log in verbose mode (Michael Petlan) [RHEL-29796]
  - perf cs-etm: Output 0 instead of 0xdeadbeef when exception packets are flushed (Michael Petlan) [RHEL-29796]
  - perf inject: Convert comma to semicolon (Michael Petlan) [RHEL-29796]
  - perf daemon: Convert comma to semicolon (Michael Petlan) [RHEL-29796]
  - perf annotate: Convert comma to semicolon (Michael Petlan) [RHEL-29796]
  - perf vendor events power10: Update JSON/events (Michael Petlan) [RHEL-29796]
  - perf annotate: Set instruction name to be used with insn-stat when using raw instruction (Michael Petlan) [RHEL-29796]
  - perf annotate: Add support to use libcapstone in powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Use capstone_init and remove open_capstone_handle from disasm.c (Michael Petlan) [RHEL-29796]
  - perf annotate: Make capstone_init non-static so that it can be used during symbol disassemble (Michael Petlan) [RHEL-29796]
  - perf annotate: Update instruction tracking for powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Add more instructions for instruction tracking (Michael Petlan) [RHEL-29796]
  - perf annotate: Add some of the arithmetic instructions to support instruction tracking in powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Add support to identify memory instructions of opcode 31 in powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Add parse function for memory instructions in powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Update parameters for reg extract functions to use raw instruction on powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Add support to capture and parse raw instruction in powerpc using dso__data_read_offset utility (Michael Petlan) [RHEL-29796]
  - perf annotate: Add disasm_line__parse() to parse raw instruction for powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Update TYPE_STATE_MAX_REGS to include max of regs in powerpc (Michael Petlan) [RHEL-29796]
  - perf annotate: Add "update_insn_state" callback function to handle arch specific instruction tracking (Michael Petlan) [RHEL-29796]
  - perf annotate: Move the data structures related to register type to header file (Michael Petlan) [RHEL-29796]
  - perf test: Avoid python leak sanitizer test failures (Michael Petlan) [RHEL-29796]
  - perf trace: Remove arg_fmt->is_enum, we can get that from the BTF type (Michael Petlan) [RHEL-29796]
  - perf trace: Introduce trace__btf_scnprintf() (Michael Petlan) [RHEL-29796]
  - perf test trace_btf_enum: Add regression test for the BTF augmentation of enums in 'perf trace' (Michael Petlan) [RHEL-29796]
  - perf test: Add landlock workload (Michael Petlan) [RHEL-29796]
  - perf trace: Filter enum arguments with enum names (Michael Petlan) [RHEL-29796]
  - perf trace: Augment non-syscall tracepoints with enum arguments with BTF (Michael Petlan) [RHEL-29796]
  - perf trace: BTF-based enum pretty printing for syscall args (Michael Petlan) [RHEL-29796]
  - perf: Fix missing RCU reader protection in perf_event_clear_cpumask() (Michael Petlan) [RHEL-29796]
  - perf: Fix topology_sibling_cpumask check warning on ARM (Michael Petlan) [RHEL-29796]
  - dmaengine: idxd: Clean up cpumask and hotplug for perfmon (Michael Petlan) [RHEL-29796]
  - iommu/vt-d: Clean up cpumask and hotplug for perfmon (Michael Petlan) [RHEL-29796]
  - perf/x86/intel/cstate: Clean up cpumask and hotplug (Michael Petlan) [RHEL-29796]
  - perf: Add PERF_EV_CAP_READ_SCOPE (Michael Petlan) [RHEL-29796]
  - perf: Generic hotplug support for a PMU with a scope (Michael Petlan) [RHEL-29796]
  - perf/core: Fix small negative period being ignored (Michael Petlan) [RHEL-29796]
  - perf: Really fix event_function_call() locking (Michael Petlan) [RHEL-29796]
  - perf: Optimize __pmu_ctx_sched_out() (Michael Petlan) [RHEL-29796]
  - perf: Add context time freeze (Michael Petlan) [RHEL-29796]
  - perf: Fix event_function_call() locking (Michael Petlan) [RHEL-29796]
  - perf: Extract a few helpers (Michael Petlan) [RHEL-29796]
  - perf: Optimize context reschedule for single PMU cases (Michael Petlan) [RHEL-29796]
  - perf/x86/intel/bts: Fix comment about default perf_event_paranoid setting (Michael Petlan) [RHEL-29796]
  - perf,x86: avoid missing caller address in stack traces captured in uprobe (Michael Petlan) [RHEL-29796]
  - perf/x86/intel/pt: Fix sampling synchronization (Michael Petlan) [RHEL-29796]
  - perf/x86/intel: Allow to setup LBR for counting event for BPF (Michael Petlan) [RHEL-29796]
  - drivers/perf: arm_spe: Use perf_allow_kernel() for permissions (Michael Petlan) [RHEL-29796]
  - perf: Support PERF_SAMPLE_READ with inherit (Michael Petlan) [RHEL-29796]
  - perf: Rename perf_event_context.nr_pending to nr_no_switch_fast. (Michael Petlan) [RHEL-29796]
  - perf/x86: Add hw_perf_event::aux_config (Michael Petlan) [RHEL-29796]


