# changelog

author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-515.el9]
changelog:
  - smb: client: fix double put of @cfile in smb2_set_path_size() (Paulo Alcantara) [RHEL-57983]
  - smb: client: fix double put of @cfile in smb2_rename_path() (Paulo Alcantara) [RHEL-57983]
  - smb: client: fix hang in wait_for_response() for negproto (Paulo Alcantara) [RHEL-57983]
  - smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (Paulo Alcantara) [RHEL-57983]
  - smb/client: fix typo: GlobalMid_Sem -> GlobalMid_Lock (Paulo Alcantara) [RHEL-57983]
  - smb: client: ignore unhandled reparse tags (Paulo Alcantara) [RHEL-57983]
  - smb3: fix problem unloading module due to leaked refcount on shutdown (Paulo Alcantara) [RHEL-57983]
  - smb3: fix broken cached reads when posix locks (Paulo Alcantara) [RHEL-57983]
  - smb: smb2pdu.h: Use static_assert() to check struct sizes (Paulo Alcantara) [RHEL-57983]
  - smb3: fix lock breakage for cached writes (Paulo Alcantara) [RHEL-57983]
  - cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath (Paulo Alcantara) [RHEL-57983]
  - Fix spelling errors in Server Message Block (Paulo Alcantara) [RHEL-57983]
  - smb3: fix setting SecurityFlags when encryption is required (Paulo Alcantara) [RHEL-57983]
  - smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp (Paulo Alcantara) [RHEL-57983]
  - smb3: add dynamic tracepoints for shutdown ioctl (Paulo Alcantara) [RHEL-57983]
  - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara) [RHEL-57983]
  - smb3: add dynamic trace point for session setup key expired failures (Paulo Alcantara) [RHEL-57983]
  - smb3: add four dynamic tracepoints for copy_file_range and reflink (Paulo Alcantara) [RHEL-57983]
  - smb3: add dynamic tracepoint for reflink errors (Paulo Alcantara) [RHEL-57983]
  - cifs: mount with "unix" mount option for SMB1 incorrectly handled (Paulo Alcantara) [RHEL-57983]
  - cifs: fix reconnect with SMB1 UNIX Extensions (Paulo Alcantara) [RHEL-57983]
  - cifs: fix potential null pointer use in destroy_workqueue in init_cifs error path (Paulo Alcantara) [RHEL-57983]
  - cifs: fix noisy message on copy_file_range (Paulo Alcantara) [RHEL-57983]
  - cifs: fix setting SecurityFlags to true (Paulo Alcantara) [RHEL-57983]
  - cifs: fix typo in module parameter enable_gcm_256 (Paulo Alcantara) [RHEL-57983]
  - smb: client: fix deadlock in smb2_find_smb_tcon() (Paulo Alcantara) [RHEL-57983]
  - cifs: fix creating sockets when using sfu mount options (Paulo Alcantara) [RHEL-57983]
  - smb: smb2pdu.h: Avoid -Wflex-array-member-not-at-end warnings (Paulo Alcantara) [RHEL-57983]
  - smb3: fix lock ordering potential deadlock in cifs_sync_mid_result (Paulo Alcantara) [RHEL-57983]
  - smb3: missing lock when picking channel (Paulo Alcantara) [RHEL-57983]
  - smb: client: Fix struct_group() usage in __packed structs (Paulo Alcantara) [RHEL-57983]
  - cifs: reinstate original behavior again for forceuid/forcegid (Paulo Alcantara) [RHEL-57983]
  - ksmbd: common: use struct_group_attr instead of struct_group for network_open_info (Paulo Alcantara) [RHEL-57983]
  - cifs: Add tracing for the cifs_tcon struct refcounting (Paulo Alcantara) [RHEL-57983]
  - cifs: Fix reacquisition of volume cookie on still-live connection (Paulo Alcantara) [RHEL-57983]
  - smb3: fix broken reconnect when password changing on the server by allowing password rotation (Paulo Alcantara) [RHEL-57983]
  - smb3: fix Open files on server counter going negative (Paulo Alcantara) [RHEL-57983]
  - smb3: retrying on failed server close (Paulo Alcantara) [RHEL-57983]
  - cifs: Fix caching to try to do open O_WRONLY as rdwr on server (Paulo Alcantara) [RHEL-57983]
  - netdev: add queue stat for alloc failures (CKI Backport Bot) [RHEL-57771]
  - netdev: add per-queue statistics (CKI Backport Bot) [RHEL-57771]
  - net/iucv: Avoid explicit cpumask var allocation on stack (Mete Durlu) [RHEL-56533] {CVE-2024-42094}
  - powerpc/64s: Enable KFENCE on book3s64 (Mamatha Inamdar) [RHEL-52738]
  - powerpc/perf: Fix the threshold compare group constraint for power10 (Mamatha Inamdar) [RHEL-50637]
  - tools/power turbostat: version 2024.07.26 (Steve Best) [RHEL-57077]
  - tools/power turbostat: Include umask=%x in perf counter's config (Steve Best) [RHEL-57077]
  - tools/power turbostat: Document PMT in turbostat.8 (Steve Best) [RHEL-57077]
  - tools/power turbostat: Add MTL's PMT DC6 builtin counter (Steve Best) [RHEL-57077]
  - tools/power turbostat: Add early support for PMT counters (Steve Best) [RHEL-57077]
  - tools/power turbostat: Move verbose counter messages to level 2 (Steve Best) [RHEL-57077]
  - tools/power turbostat: Move debug prints from stdout to stderr (Steve Best) [RHEL-57077]
  - tools/power turbostat: Fix typo in turbostat.8 (Steve Best) [RHEL-57077]
  - tools/power turbostat: Add perf added counter example to turbostat.8 (Steve Best) [RHEL-57077]
  - tools/power turbostat: Fix formatting in turbostat.8 (Steve Best) [RHEL-57077]
  - tools/power turbostat: Extend --add option with perf counters (Steve Best) [RHEL-57077]
  - tools/power turbostat: Group SMI counter with APERF and MPERF (Steve Best) [RHEL-57077]
  - tools/power turbostat: Add ZERO_ARRAY for zero initializing builtin array (Steve Best) [RHEL-57077]
  - tools/power turbostat: Replace enum rapl_source and cstate_source with counter_source (Steve Best) [RHEL-57077]
  - tools/power turbostat: Remove anonymous union from rapl_counter_info_t (Steve Best) [RHEL-57077]
  - tools/power/turbostat: Switch to new Intel CPU model defines (Steve Best) [RHEL-57077]
  - scsi: ufs: renesas: Fix private allocation (Radu Rendec) [RHEL-60138]
  - powerpc/pseries/iommu: Define spapr_tce_table_group_ops only with CONFIG_IOMMU_API (Mamatha Inamdar) [RHEL-52741]
  - powerpc/iommu: Reimplement the iommu_table_group_ops for pSeries (Mamatha Inamdar) [RHEL-52741]
  - powerpc/iommu: Move dev_has_iommu_table() to iommu.c (Mamatha Inamdar) [RHEL-52741]
  - vfio/spapr: Always clear TCEs before unsetting the window (Mamatha Inamdar) [RHEL-52741]
  - powerpc/pseries/iommu: Use the iommu table[0] for IOV VF's DDW (Mamatha Inamdar) [RHEL-52741]
  - powerpc/pseries/iommu: Fix the VFIO_IOMMU_SPAPR_TCE_GET_INFO ioctl output (Mamatha Inamdar) [RHEL-52741]
  - powerpc/iommu: Move pSeries specific functions to pseries/iommu.c (Mamatha Inamdar) [RHEL-52741]
  - powerpc/powernv/pci: Remove ioda1 support (Mamatha Inamdar) [RHEL-52741]
  - tools/cpupower: display residency value in idle-info (Steve Best) [RHEL-59682]
  - cpupower: Change the var type of the 'monitor' subcommand display mode (Steve Best) [RHEL-59682]
  - ceph: remove the incorrect Fw reference check when dirtying pages (Xiubo Li) [RHEL-60255]
  - pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID (Steve Best) [RHEL-60002]
  - dmaengine: dw: Add memory bus width verification (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: omap-dma: Initialize sglen after allocation (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: dw: Add peripheral bus width verification (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: add missing MODULE_DESCRIPTION() macros (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: virt-dma: add missing MODULE_DESCRIPTION() macro (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma: Fix BCHAN count with UHC and HC channels (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: sh: rz-dmac: Fix lockdep assert warning (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: qcom: gpi: clean up the IRQ disable/enable in gpi_reset_chan() (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: qcom: gpi: remove unused struct 'reg_info' (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: add channel device name to channel registration (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: qcom: add missing MODULE_DESCRIPTION() macros (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: imx-sdma: don't print warning when firmware is absent (Jerry Snitselaar) [RHEL-56794]
  - firmware: add nowarn variant of request_firmware_nowait() (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma: fix module autoloading (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: add missing MODULE_DESCRIPTION() macros (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: Add API function dmaengine_prep_peripheral_dma_vec() (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma-glue: clean up return in k3_udma_glue_rx_get_irq() (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: imx-sdma: Add i2c dma support (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: imx-sdma: utilize compiler to calculate ADDRS_ARRAY_SIZE_V<n> (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: qcom: Drop hidma DT support (Jerry Snitselaar) [RHEL-56794]
  - dma: Add lockdep asserts to virt-dma (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: imx-sdma: support dual fifo for DEV_TO_DEV (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: imx-sdma: Support 24bit/3bytes for sg mode (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: imx-sdma: Support allocate memory from internal SRAM (iram) (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-psil-j721s2: Add entry for CSI2RX (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma-glue: Add function to request RX chan for thread ID (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma-glue: Add function to request TX chan for thread ID (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma-glue: Update name for remote RX channel device (Jerry Snitselaar) [RHEL-56794]
  - dmaengine: ti: k3-udma-glue: Add function to parse channel by ID (Jerry Snitselaar) [RHEL-56794]
  - vhost/vsock: always initialize seqpacket_allow (CKI Backport Bot) [RHEL-55592] {CVE-2024-43873}
  - Bluetooth: af_bluetooth: Fix deadlock (CKI Backport Bot) [RHEL-34156] {CVE-2024-26886}
  - Bluetooth: l2cap: fix null-ptr-deref in l2cap_chan_timeout (CKI Backport Bot) [RHEL-36374] {CVE-2024-27399}
  - Bluetooth: Ignore too large handle values in BIG (CKI Backport Bot) [RHEL-51918] {CVE-2024-42133}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-516.el9]
changelog:
  - memcg: protect concurrent access to mem_cgroup_idr (Rafael Aquini) [RHEL-56254] {CVE-2024-43892}
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Michal Schmidt) [RHEL-57259] {CVE-2024-44984}
  - intel_th: pci: Add Granite Rapids SOC support (Michael Petlan) [RHEL-15664]
  - dma: fix call order in dmam_free_coherent (Eder Zulian) [RHEL-54751] {CVE-2024-43856}
  - dmaengine: idxd: Avoid unnecessary destruction of file_ida (Jerry Snitselaar) [RHEL-44508] {CVE-2024-38629}
  - tipc: Return non-zero value from tipc_udp_addr2str() on error (Xin Long) [RHEL-55074] {CVE-2024-42284}
  - net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (Michal Schmidt) [RHEL-57119] {CVE-2024-44970}
  - net/mlx5e: Fix CT entry update leaks of modify header context (Michal Schmidt) [RHEL-55628] {CVE-2024-43864}
  - net/mlx5: Always drain health in shutdown callback (Michal Schmidt) [RHEL-55616] {CVE-2024-43866}
  - net/mlx5: SF, Stop waiting for FW as teardown was called (Michal Schmidt) [RHEL-55616]
  - net/mlx5: Fix missing lock on sync reset reload (Michal Schmidt) [RHEL-55121] {CVE-2024-42268}
  - ionic: fix kernel panic in XDP_TX action (CKI Backport Bot) [RHEL-47730] {CVE-2024-40907}
  - r8169: Fix possible ring buffer corruption on fragmented Tx packets. (Izabela Bakollari) [RHEL-44037] {CVE-2024-38586}
  - ata: libata-core: Fix double free on error (Tomas Henzl) [RHEL-53777]
  - ata: libata: Fix memory leak for error path in ata_host_alloc() (Tomas Henzl) [RHEL-53777]
  - ata: ahci: Clean up sysfs file on error (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Fix null pointer dereference on error (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Tomas Henzl) [RHEL-53777]
  - ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Tomas Henzl) [RHEL-53777]
  - ata: libata-scsi: Set the RMB bit only for removable media devices (Tomas Henzl) [RHEL-53777]
  - ata: libata-core: Do not try to set sleeping devices to standby (Tomas Henzl) [RHEL-53777]
  - KVM: s390: fix validity interception issue when gisa is switched off (CKI Backport Bot) [RHEL-57197] {CVE-2024-45005}
  - wifi: rtw89: limit the PPDU length for VHT rate to 0x40000 (Narpat Mali) [RHEL-35542]
  - wifi: rtw89: 885xbx: apply common settings to 8851B, 8852B and 8852BT (Narpat Mali) [RHEL-35542]
  - wifi: rtw89: 8852b: fix definition of KIP register number (Narpat Mali) [RHEL-35542]
  - wifi: rtw89: 8852b: set AMSDU limit to 5000 (Narpat Mali) [RHEL-35542]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-517.el9]
changelog:
  - crypto: octeontx2 - add missing check for dma_map_single (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - support setting ctx ilen for inline CPT LF (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - register error interrupts for inline cptlf (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - add ctx_val workaround (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - add LF reset on queue disable (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - remove errata workaround for CN10KB or CN10KA B0 chip. (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - add devlink option to set t106 mode (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - add SGv2 support for CN10KB or CN10KA B0 (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - remove CPT block reset (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - Fix cptvf driver cleanup (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - By default allocate one CPT LF per CPT VF (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - hardware configuration for inline IPsec (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - add support for AF to CPT PF uplink mbox (Štěpán Horáček) [RHEL-31478]
  - crypto: octeontx2 - Fix objects shared between several modules (Štěpán Horáček) [RHEL-31478]
  - octeontx2-af: add mbox for CPT LF reset (Štěpán Horáček) [RHEL-31478]
  - nexthop: fix uninitialized variable in nla_put_nh_group_stats() (Ivan Vecera) [RHEL-59118]
  - nexthop: Fix splat with CONFIG_DEBUG_PREEMPT=y (Ivan Vecera) [RHEL-59118]
  - nexthop: Fix out-of-bounds access during attribute validation (Ivan Vecera) [RHEL-59118]
  - nexthop: Only parse NHA_OP_FLAGS for dump messages that require it (Ivan Vecera) [RHEL-59118]
  - nexthop: Only parse NHA_OP_FLAGS for get messages that require it (Ivan Vecera) [RHEL-59118]
  - selftests: forwarding: Add a test for NH group stats (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Have all NH notifiers carry NH ID (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Initialize NH group ID in resilient NH group notifiers (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Expose nexthop group HW stats to user space (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Add ability to enable / disable hardware statistics (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Add hardware statistics notifications (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Expose nexthop group stats to user space (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Add nexthop group entry stats (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Add NHA_OP_FLAGS (Ivan Vecera) [RHEL-59118]
  - net: nexthop: Adjust netlink policy parsing for a new attribute (Ivan Vecera) [RHEL-59118]
  - nexthop: Annotate struct nh_notifier_grp_info with __counted_by (Ivan Vecera) [RHEL-59118]
  - nexthop: Annotate struct nh_notifier_res_table_info with __counted_by (Ivan Vecera) [RHEL-59118]
  - selftests: net: Add test cases for nexthop groups with invalid neighbors (Ivan Vecera) [RHEL-59118]
  - nexthop: Do not return invalid nexthop object during multipath selection (Ivan Vecera) [RHEL-59118]
  - nexthop: Factor out neighbor validity check (Ivan Vecera) [RHEL-59118]
  - nexthop: Factor out hash threshold fdb nexthop selection (Ivan Vecera) [RHEL-59118]
  - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (CKI Backport Bot) [RHEL-59436] {CVE-2024-46761}
  - net: ip6mr: add RTM_GETROUTE netlink op (Andrea Claudi) [RHEL-50554]
  - rtla: Add --trace-buffer-size option (Luis Claudio R. Goncalves) [RHEL-58061]
  - net: Move {l,t,d}stats allocation to core and convert veth & vrf (Ivan Vecera) [RHEL-57740]
  - net, vrf: Move dstats structure to core (Ivan Vecera) [RHEL-57740]
  - x86/vmware: Add TDX hypercall support (Vitaly Kuznetsov) [RHEL-52683]
  - x86/vmware: Remove legacy VMWARE_HYPERCALL* macros (Vitaly Kuznetsov) [RHEL-52683]
  - x86/vmware: Correct macro names (Vitaly Kuznetsov) [RHEL-52683]
  - x86/vmware: Use VMware hypercall API (Vitaly Kuznetsov) [RHEL-52683]
  - drm/vmwgfx: Use VMware hypercall API (Vitaly Kuznetsov) [RHEL-52683]
  - input/vmmouse: Use VMware hypercall API (Vitaly Kuznetsov) [RHEL-52683]
  - ptp/vmware: Use VMware hypercall API (Vitaly Kuznetsov) [RHEL-52683]
  - x86/vmware: Introduce VMware hypercall API (Vitaly Kuznetsov) [RHEL-52683]
  - drm/vmwgfx: Add unwind hints around RBP clobber (Vitaly Kuznetsov) [RHEL-52683]
  - objtool: Allow stack operations in UNWIND_HINT_UNDEFINED regions (Vitaly Kuznetsov) [RHEL-52683]
  - x86,objtool: Split UNWIND_HINT_EMPTY in two (Vitaly Kuznetsov) [RHEL-52683]
  - powerpc/64s/radix: Fix soft dirty tracking (avchouha) [RHEL-20894]
  - net: intel: implement modern PM ops declarations (Corinna Vinschen) [RHEL-17488]
  - net: adopt skb_network_offset() and similar helpers (Corinna Vinschen) [RHEL-17488]
  - intel: legacy: field get conversion (Corinna Vinschen) [RHEL-17488]
  - intel: add bit macro includes where needed (Corinna Vinschen) [RHEL-17488]
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (CKI Backport Bot) [RHEL-59295] {CVE-2024-46743}
  - PCI: Add missing bridge lock to pci_bus_lock() (CKI Backport Bot) [RHEL-59331] {CVE-2024-46750}
  - bareudp: Pull inner IP header on xmit. (Guillaume Nault) [RHEL-59593]
  - bareudp: Pull inner IP header in bareudp_udp_encap_recv(). (Guillaume Nault) [RHEL-59593]
  - bareudp: Fix device stats updates. (Guillaume Nault) [RHEL-59593]
  - net: create a dummy net_device allocator (Izabela Bakollari) [RHEL-59092]
  - net: free_netdev: exit earlier if dummy (Izabela Bakollari) [RHEL-59092]
  - net: core: Fix documentation (Izabela Bakollari) [RHEL-59092]
  - net: Do not return value from init_dummy_netdev() (Izabela Bakollari) [RHEL-59092]
  - xfrm: get global statistics from the offloaded device (CKI Backport Bot) [RHEL-59900]
  - xfrm: generalize xdo_dev_state_update_curlft to allow statistics update (CKI Backport Bot) [RHEL-59900]
  - selftests/powerpc/dexcr: Fix spelling mistake "predicition" -> "prediction" (Mamatha Inamdar) [RHEL-52762]
  - Documentation: Document PowerPC kernel dynamic DEXCR interface (Mamatha Inamdar) [RHEL-52762]
  - Documentation: Document PowerPC kernel DEXCR interface (Mamatha Inamdar) [RHEL-52762]
  - selftests/powerpc/dexcr: Add chdexcr utility (Mamatha Inamdar) [RHEL-52762]
  - selftests/powerpc/dexcr: Add DEXCR config details to lsdexcr (Mamatha Inamdar) [RHEL-52762]
  - selftests/powerpc/dexcr: Attempt to enable NPHIE in hashchk selftest (Mamatha Inamdar) [RHEL-52762]
  - selftests/powerpc/dexcr: Add DEXCR prctl interface test (Mamatha Inamdar) [RHEL-52762]
  - powerpc/dexcr: Add DEXCR prctl interface (Mamatha Inamdar) [RHEL-52762]
  - powerpc/dexcr: Reset DEXCR value across exec (Mamatha Inamdar) [RHEL-52762]
  - powerpc/dexcr: Track the DEXCR per-process (Mamatha Inamdar) [RHEL-52762]
  - powerpc/ptrace: Expose DEXCR and HDEXCR registers to ptrace (Mamatha Inamdar) [RHEL-52762]
  - selftests/powerpc/dexcr: Add -no-pie to hashchk tests (Mamatha Inamdar) [RHEL-52762]
  - net/smc: fix illegal rmb_desc access in SMC-D connection dump (Steve Best) [RHEL-27748] {CVE-2024-26615}
  - ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev() (CKI Backport Bot) [RHEL-60232]
  - ipv6: prevent possible UAF in ip6_xmit() (CKI Backport Bot) [RHEL-60232]
  - ipv6: fix possible UAF in ip6_finish_output2() (CKI Backport Bot) [RHEL-60232]
  - ipv6: prevent UAF in ip6_send_skb() (CKI Backport Bot) [RHEL-60232]
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (CKI Backport Bot) [RHEL-60232]
  - ipv6: sr: restruct ifdefines (CKI Backport Bot) [RHEL-60232]
  - ipv6: fib: hide unused 'pn' variable (CKI Backport Bot) [RHEL-60232]
  - ipv6: lower "link become ready"'s level message (CKI Backport Bot) [RHEL-60232]
  - KVM: selftests: Make monitor_mwait require MONITOR/MWAIT feature (Maxim Levitsky) [RHEL-17448]
  - proc: fix dentry/inode overinstantiating under /proc/${pid}/net (Joel Savitz) [RHEL-57703]
  - remoteproc: k3-r5: Delay notification of wakeup event (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Fix error handling when power-up failed (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Acquire mailbox handle during probe routine (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Acquire mailbox handle during probe routine (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Use devm_rproc_alloc() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Fix log levels where appropriate (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Fix IPC-only mode detection (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Jump to error handling labels in start/stop errors (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Wait for core0 power-up before powering up core1 (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use devm_rproc_add() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use devm_ioremap_wc() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Add devm action to release tsp (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use devm_kzalloc() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use devm_ti_sci_get_by_phandle() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use devm_kcalloc() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Add devm action to release reserved memory (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use devm_rproc_alloc() helper (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Convert to platform remove callback returning void (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Use symbolic error codes in error messages (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-dsp: Suppress duplicate error message in .remove() (Jared Kangas) [RHEL-60788]
  - remoteproc: Explicitly include correct DT includes (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Use separate compatible string for TI AM62x SoC family (Jared Kangas) [RHEL-60788]
  - dt-bindings: remoteproc: ti: Add new compatible for AM62 SoC family (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Simplify cluster mode setting usage (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-c7x: Add support for C7xv DSP on AM62A SoC (Jared Kangas) [RHEL-60788]
  - remoteproc: k3-r5: Fix refcount leak in k3_r5_cluster_of_init (Jared Kangas) [RHEL-60788]
  - dt-bindings: remoteproc: k3-dsp: Update bindings for J721S2 SoCs (Jared Kangas) [RHEL-60788]
  - dt-bindings: remoteproc: k3-r5f: Update bindings for J721S2 SoCs (Jared Kangas) [RHEL-60788]
  - scsi: target: Remove unused declarations (Maurizio Lombardi) [RHEL-58872]
  - scsi: target: Remove unused list 'device_list' (Maurizio Lombardi) [RHEL-58872]
  - scsi: target: iscsi: Remove unused variable xfer_len (Maurizio Lombardi) [RHEL-58872]
  - scsi: target: tcm_loop: Make tcm_loop_lld_bus const (Maurizio Lombardi) [RHEL-58872]
  - x86/mm/ident_map: Use gbpages only where full GB page should be mapped. (Chris von Recklinghausen) [RHEL-26268]
  - arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (Mark Langsdorf) [RHEL-60765] {CVE-2024-46822}
  - arm64: acpi: Move get_cpu_for_acpi_id() to a header (Mark Langsdorf) [RHEL-60765] {CVE-2024-46822}
  - mei: me: add arrow lake point S DID (Steve Best) [RHEL-61378]
  - powerpc/pseries/iommu: Split Dynamic DMA Window to be used in Hybrid mode (Mamatha Inamdar) [RHEL-53185]
  - intel_idle: fix ACPI _CST matching for newer Xeon platforms (David Arcari) [RHEL-60894]
  - devlink: extend devlink_param *set pointer (Petr Oros) [RHEL-59901]
  - bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave() (Hangbin Liu) [RHEL-60229]
  - net: bonding: correctly annotate RCU in bond_should_notify_peers() (Hangbin Liu) [RHEL-60229]
  - driver core: auxiliary bus: Fix documentation of auxiliary_device (Ivan Vecera) [RHEL-61175]
  - driver core: auxiliary bus: show auxiliary device IRQs (Ivan Vecera) [RHEL-61175]
  - gfs2: Randomize GLF_VERIFY_DELETE work delay (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Use mod_delayed_work in gfs2_queue_try_to_evict (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Update to the evict / remote delete documentation (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Call gfs2_queue_verify_delete from gfs2_evict_inode (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Clean up delete work processing (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Minor delete_work_func cleanup (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Return enum evict_behavior from gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Rename dinode_demise to evict_behavior (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Rename GIF_{DEFERRED -> DEFER}_DELETE (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Faster gfs2_upgrade_iopen_glock wakeups (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Fix unlinked inode cleanup (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Allow immediate GLF_VERIFY_DELETE work (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Initialize gl_no_formal_ino earlier (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: make timeout values more explicit (Wolfram Sang) [RHEL-60945]
  - gfs2: Simplify function gfs2_upgrade_iopen_glock (Andreas Gruenbacher) [RHEL-60945]
  - gfs2: Rename SDF_DEACTIVATING to SDF_KILL (Andreas Gruenbacher) [RHEL-60945]
  - md/raid1: set max_sectors during early return from choose_slow_rdev() (Nigel Croxon) [RHEL-61196]
  - md: Add new_level sysfs interface (Nigel Croxon) [RHEL-61196]
  - md: Report failed arrays as broken in mdstat (Nigel Croxon) [RHEL-61196]
  - md/raid5: rename wait_for_overlap to wait_for_reshape (Nigel Croxon) [RHEL-61196]
  - md/raid5: only add to wq if reshape is in progress (Nigel Croxon) [RHEL-61196]
  - md/raid5: Improve performance for sequential IO (Nigel Croxon) [RHEL-61196]
  - md/raid5: use wait_on_bit() for R5_Overlap (Nigel Croxon) [RHEL-61196]
  - md: Remove flush handling (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: make in memory structure internal (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_enabled() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_wait_behind_writes() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_free() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_set_pages() into struct bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_copy_from_slot() into struct bitmap_operation. (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge get_bitmap_from_slot() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_resize() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: pass in mddev directly for md_bitmap_resize() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_daemon_work() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge bitmap_unplug() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_unplug_async() into md_bitmap_unplug() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_sync_with_cluster() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_cond_end_sync() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_close_sync() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_end_sync() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: remove the parameter 'aborted' for md_bitmap_end_sync() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_start_sync() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_endwrite() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_startwrite() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_dirty_bits() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge bitmap_write_all() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: remove md_bitmap_setallbits() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_status() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_update_sb() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: make md_bitmap_print_sb() internal (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_flush() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_destroy() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_load() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: merge md_bitmap_create() into bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: simplify md_bitmap_create() + md_bitmap_load() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: introduce struct bitmap_operations (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: add a new helper md_bitmap_set_pages() (Nigel Croxon) [RHEL-61196]
  - md/md-cluster: use helper md_bitmap_get_stats() to get pages in resize_bitmaps() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: add 'behind_writes' and 'behind_wait' into struct md_bitmap_stats (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: add 'file_pages' into struct md_bitmap_stats (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: add 'sync_size' into struct md_bitmap_stats (Nigel Croxon) [RHEL-61196]
  - md/md-cluster: fix spares warnings for __le64 (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: add 'events_cleared' into struct md_bitmap_stats (Nigel Croxon) [RHEL-61196]
  - md: use new helper md_bitmap_get_stats() in update_array_info() (Nigel Croxon) [RHEL-61196]
  - md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats() (Nigel Croxon) [RHEL-61196]
  - md/raid1: use md_bitmap_wait_behind_writes() in raid1_read_request() (Nigel Croxon) [RHEL-61196]
  - md/raid1: Clean up local variable 'b' from raid1_read_request() (Nigel Croxon) [RHEL-61196]
  - md: Don't flush sync_work in md_write_start() (Nigel Croxon) [RHEL-61196]
  - md/raid1: Fix data corruption for degraded array with slow disk (Nigel Croxon) [RHEL-61196]
  - md: convert comma to semicolon (Nigel Croxon) [RHEL-61196]
  - md/raid1: factor out helpers to choose the best rdev from read_balance() (Nigel Croxon) [RHEL-61196]
  - md/raid1: factor out the code to manage sequential IO (Nigel Croxon) [RHEL-61196]
  - md/raid1: factor out choose_bb_rdev() from read_balance() (Nigel Croxon) [RHEL-61196]
  - md/raid1: factor out choose_slow_rdev() from read_balance() (Nigel Croxon) [RHEL-61196]
  - md/raid1: factor out read_first_rdev() from read_balance() (Nigel Croxon) [RHEL-61196]
  - md/raid1-10: factor out a new helper raid1_should_read_first() (Nigel Croxon) [RHEL-61196]
  - md/raid1: fix choose next idle in read_balance() (Nigel Croxon) [RHEL-61196]
  - md/raid1: record nonrot rdevs while adding/removing rdevs to conf (Nigel Croxon) [RHEL-61196]
  - powerpc: Implement arch_within_stack_frames (Mamatha Inamdar) [RHEL-52737]
  - l2tp: fix lockdep splat (Guillaume Nault) [RHEL-59687]
  - net l2tp: drop flow hash on forward (Guillaume Nault) [RHEL-59687]
  - selftests: udpgro: no need to load xdp for gro (Hangbin Liu) [RHEL-53858]
  - selftests: udpgro: report error when receive failed (Hangbin Liu) [RHEL-53858]
  - PCI/AER: Disable AER service on suspend (Lenny Szubowicz) [RHEL-22265]
  - Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor (Bastien Nocera) [RHEL-17584]
  - Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID (CKI Backport Bot) [RHEL-17584]
  - mpls: Reduce skb re-allocations due to skb_cow() (Guillaume Nault) [RHEL-55145]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-519.el9]
changelog:
  - xsk: fix batch alloc API on non-coherent systems (Felix Maurer) [RHEL-58954]
  - redhat: ignore rpminspect runpath report on selftests/bpf/cpuv4/urandom_read (Viktor Malik) [RHEL-59932]
  - ceph: fix cap ref leak via netfs init_request (Patrick Donnelly) [RHEL-61459]
  - cpufreq/amd-pstate: Catch failures for amd_pstate_epp_update_limit() (David Arcari) [RHEL-61470]
  - cpufreq/amd-pstate: Remove warning for X86_FEATURE_CPPC on certain Zen models (David Arcari) [RHEL-61470]
  - cpufreq/amd-pstate-ut: Don't check for highest perf matching on prefcore (David Arcari) [RHEL-61470]
  - cpufreq/amd-pstate: Use topology_logical_package_id() instead of logical_die_id() (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: Fix uninitialized variable in amd_pstate_cpu_boost_update() (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: Cap the CPPC.max_perf to nominal_perf if CPB is off (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: initialize core precision boost state (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: Don't create attributes when registration fails (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: auto-load pstate driver by default (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: enable shared memory type CPPC by default (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: switch boot_cpu_has() to cpu_feature_enabled() (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: add debug message while CPPC is supported and disabled by SBIOS (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: show CPPC debug message if CPPC is not supported (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: remove unused variable nominal_freq (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: optimize the initial frequency values verification (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: Allow users to write 'default' EPP string (David Arcari) [RHEL-61470]
  - cpufreq: amd-pstate: change cpu freq transition delay for some models (David Arcari) [RHEL-61470]
  - cpufreq: acpi: move MSR_K7_HWCR_CPB_DIS_BIT into msr-index.h (David Arcari) [RHEL-61470]
  - x86/cpufeatures: Add AMD FAST CPPC feature flag (David Arcari) [RHEL-61470]
  - smb: client: stop flooding dmesg in smb2_calc_signature() (Paulo Alcantara) [RHEL-61193]
  - smb: client: print failed session logoffs with FYI (Paulo Alcantara) [RHEL-61193]
  - smb: client: propagate error from cifs_construct_tcon() (Paulo Alcantara) [RHEL-61193]
  - smb: client: fix DFS failover in multiuser mounts (Paulo Alcantara) [RHEL-61193]
  - smb: client: fix DFS interlink failover (Paulo Alcantara) [RHEL-61193]
  - smb: client: improve purging of cached referrals (Paulo Alcantara) [RHEL-61193]
  - smb: client: avoid unnecessary reconnects when refreshing referrals (Paulo Alcantara) [RHEL-61193]
  - smb: use LIST_HEAD() to simplify code (Paulo Alcantara) [RHEL-61193]
  - cifs: convert to use ERR_CAST() (Paulo Alcantara) [RHEL-61193]
  - driver core: mark async_driver as a const * (Michal Schmidt) [RHEL-59894]
  - driver core: make driver_detach() take a const * (Michal Schmidt) [RHEL-59894]
  - driver core: make device_release_driver_internal() take a const * (Michal Schmidt) [RHEL-59894]
  - driver core: driver: mark driver_add/remove_groups constant (Michal Schmidt) [RHEL-59894]
  - driver core: platform: fix ups for constant struct device_driver (Michal Schmidt) [RHEL-59894]
  - auxbus: make to_auxiliary_drv accept and return a constant pointer (Michal Schmidt) [RHEL-59894]
  - queue_api: define queue api (Michal Schmidt) [RHEL-59892]
  - mei: me: add lunar lake point M DID (David Arcari) [RHEL-61610]
  - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (CKI Backport Bot) [RHEL-59361] {CVE-2024-46756}
  - hwmon: (lm95234) Fix underflows seen when writing limit attributes (CKI Backport Bot) [RHEL-59369] {CVE-2024-46758}
  - net: remove dev_base_lock (Ivan Vecera) [RHEL-59100]
  - net: remove dev_base_lock from register_netdevice() and friends. (Ivan Vecera) [RHEL-59100]
  - net: remove dev_base_lock from do_setlink() (Ivan Vecera) [RHEL-59100]
  - net: add netdev_set_operstate() helper (Ivan Vecera) [RHEL-59100]
  - net: remove stale mentions of dev_base_lock in comments (Ivan Vecera) [RHEL-59100]
  - net-sysfs: convert netstat_show() to RCU (Ivan Vecera) [RHEL-59100]
  - net-sysfs: convert dev->operstate reads to lockless ones (Ivan Vecera) [RHEL-59100]
  - net-sysfs: use dev_addr_sem to remove races in address_show() (Ivan Vecera) [RHEL-59100]
  - net-sysfs: convert netdev_show() to RCU (Ivan Vecera) [RHEL-59100]
  - net: convert dev->reg_state to u8 (Ivan Vecera) [RHEL-59100]
  - dev: annotate accesses to dev->link (Ivan Vecera) [RHEL-59100]
  - ip_tunnel: annotate data-races around t->parms.link (Ivan Vecera) [RHEL-59100]
  - net: annotate data-races around dev->name_assign_type (Ivan Vecera) [RHEL-59100]
  - net: sysfs: fix locking in carrier read (Ivan Vecera) [RHEL-59100]
  - net: core: synchronize link-watch when carrier is queried (Ivan Vecera) [RHEL-59100]
  - net-sysfs: Convert to use sysfs_emit() APIs (Ivan Vecera) [RHEL-59100]
  - Bluetooth: l2cap: Don't double set the HCI_CONN_MGMT_CONNECTED bit (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init() (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: ISO: Handle PA sync when no BIGInfo reports are generated (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: ISO: Clean up returns values in iso_connect_ind() (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: ISO: Make iso_get_sock_listen generic (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: ISO: Reassemble PA data for bcast sink (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: ISO: Add hcon for listening bis sk (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - Bluetooth: hci_event: Fix not indicating new connection for BIG Sync (Bastien Nocera) [RHEL-41144] {CVE-2024-36968}
  - redhat/configs: enable GPIO expander drivers (Rupinderjit Singh) [RHEL-21124]
  - redhat/configs: enable GPIO expander drivers (Rupinderjit Singh) [RHEL-21124]
  - redhat/configs: enable GPIO expander drivers (Rupinderjit Singh) [RHEL-21124]
  - redhat/configs: enable GPIO expander drivers (Rupinderjit Singh) [RHEL-21124]
  - redhat/configs: enable GPIO expander drivers (Rupinderjit Singh) [RHEL-21124]
  - redhat/configs: enable GPIO expander drivers (Rupinderjit Singh) [RHEL-21124]
  - redhat/configs: enable IMX7ULP watchdog timer (Rupinderjit Singh) [RHEL-21092]
  - sock_map: avoid race between sock_map_close and sk_psock_put (CKI Backport Bot) [RHEL-47670] {CVE-2024-39500}
  - Bluetooth: Fix usage of __hci_cmd_sync_status (Bastien Nocera) [RHEL-51202] {CVE-2024-41062}
  - Bluetooth: L2CAP: Fix deadlock (Bastien Nocera) [RHEL-51202] {CVE-2024-41062}
  - bluetooth/l2cap: sync sock recv cb and release (Bastien Nocera) [RHEL-51202] {CVE-2024-41062}
  - Bluetooth: compute LE flow credits based on recvbuf space (Bastien Nocera) [RHEL-51202] {CVE-2024-41062}
  - redhat/configs: enable Arm SCMI support (Rupinderjit Singh) [RHEL-21190]
  - xdp: Remove WARN() from __xdp_reg_mem_model() (CKI Backport Bot) [RHEL-51584] {CVE-2024-42082}
  - flow_offload: add encapsulation control flag helpers (CKI Backport Bot) [RHEL-60636]
  - net: nexthop: Initialize all fields in dumped nexthops (Guillaume Nault) [RHEL-61380]
  - ipv4: Fix incorrect source address in Record Route option (Guillaume Nault) [RHEL-61380]
  - ipv4: Fix incorrect TOS in fibmatch route get reply (Guillaume Nault) [RHEL-61380]
  - ipv4: Fix incorrect TOS in route get reply (Guillaume Nault) [RHEL-61380]
  - ipv4: fix source address selection with route leak (Guillaume Nault) [RHEL-61380]
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Guillaume Nault) [RHEL-61380]
  - ipv4: check for NULL idev in ip_route_use_hint() (Guillaume Nault) [RHEL-61380]
  - ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr (Guillaume Nault) [RHEL-61380]
  - ipv4: ignore dst hint for multipath routes (Guillaume Nault) [RHEL-61380]
  - ipv4: annotate data-races around fi->fib_dead (Guillaume Nault) [RHEL-61380]
  - cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Set asymmetric CPU capacity on hybrid systems (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Support Granite Rapids and Sierra Forest OOB mode (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Support highest performance change interrupt (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Replace boot_cpu_has() (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (Steve Best) [RHEL-60024]
  - cpufreq: intel_pstate: Switch to new Intel CPU model defines (Steve Best) [RHEL-60024]
  - x86/cpufeatures: Add HWP highest perf change feature flag (Steve Best) [RHEL-60024]
  - x86/sched: Add basic support for CPU capacity scaling (Steve Best) [RHEL-60024]
  - slab: introduce kvmalloc_array_node() and kvcalloc_node() (CKI Backport Bot) [RHEL-61721]
  - mei: me: add arrow lake point H DID (Steve Best) [RHEL-61570]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-520.el9]
changelog:
  - md: md-faulty: switch to new queue limit API (Ming Lei) [RHEL-56837]
  - md: md-linear: switch to new queue limit API (Ming Lei) [RHEL-56837]
  - block: rsxx: switch to new queue limit API (Ming Lei) [RHEL-56837]
  - scsi: sd: Don't check if a write for REQ_ATOMIC (Ming Lei) [RHEL-56837]
  - scsi: block: Don't check REQ_ATOMIC for reads (Ming Lei) [RHEL-56837]
  - block: Fix elv_iosched_local_module handling of "none" scheduler (Ming Lei) [RHEL-56837]
  - lib/sbitmap: define swap_lock as raw_spinlock_t (Ming Lei) [RHEL-56837]
  - dm: always manage discard support in terms of max_hw_discard_sectors (Ming Lei) [RHEL-56837]
  - dm-crypt: stop constraining max_segment_size to PAGE_SIZE (Ming Lei) [RHEL-56837]
  - nvme: set BLK_FEAT_ZONED for ZNS multipath disks (Ming Lei) [RHEL-56837]
  - scsi: sd: Move sd_read_cpr() out of the q->limits_lock region (Ming Lei) [RHEL-56837]
  - nvdimm/pmem: Set dax flag for all 'PFN_MAP' cases (Ming Lei) [RHEL-56837]
  - ata: pata_macio: Fix DMA table overflow (Ming Lei) [RHEL-56837]
  - ata: pata_macio: Fix max_segment_size with PAGE_SIZE == 64K (Ming Lei) [RHEL-56837]
  - mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE (Ming Lei) [RHEL-56837]
  - signalfd: fix error return code (Ming Lei) [RHEL-56837]
  - scsi: ipr: Remove several unused variables (Ming Lei) [RHEL-56837]
  - nvme: don't create a multipath node for zero capacity devices (Ming Lei) [RHEL-56837]
  - scsi: bsg: Pass dev to blk_mq_alloc_queue() (Ming Lei) [RHEL-56837]
  - block: don't reject too large max_user_sectors in blk_validate_limits (Ming Lei) [RHEL-56837]
  - nbd: correct the maximum value for discard sectors (Ming Lei) [RHEL-56837]
  - block: Prevent deadlocks when switching elevators (Ming Lei) [RHEL-56837]
  - bio-integrity: don't restrict the size of integrity metadata (Ming Lei) [RHEL-56837]
  - block: fix detection of unsupported WRITE SAME in blkdev_issue_write_zeroes (Ming Lei) [RHEL-56837]
  - block: Drop NULL check in bdev_write_zeroes_sectors() (Ming Lei) [RHEL-56837]
  - block: Read max write zeroes once for __blkdev_issue_write_zeroes() (Ming Lei) [RHEL-56837]
  - block: Fix lockdep warning in blk_mq_mark_tag_wait (Ming Lei) [RHEL-56837]
  - blk-throttle: remove more latency dead-code (Ming Lei) [RHEL-56837]
  - block: don't free the integrity payload in bio_integrity_unmap_free_user (Ming Lei) [RHEL-56837]
  - block: don't free submitter owned integrity payload on I/O completion (Ming Lei) [RHEL-56837]
  - block: call bio_integrity_unmap_free_user from blk_rq_unmap_user (Ming Lei) [RHEL-56837]
  - block: don't call bio_uninit from bio_endio (Ming Lei) [RHEL-56837]
  - block: also return bio_integrity_payload * from stubs (Ming Lei) [RHEL-56837]
  - block: split integrity support out of bio.h (Ming Lei) [RHEL-56837]
  - block: unmap and free user mapped integrity via submitter (Ming Lei) [RHEL-56837]
  - nvme/io_uring: use helper for polled completions (Ming Lei) [RHEL-56837]
  - io_uring/cmd: document some uring_cmd related helpers (Ming Lei) [RHEL-56837]
  - io_uring/cmd: fix tw <-> issue_flags conversion (Ming Lei) [RHEL-56837]
  - io_uring/cmd: kill one issue_flags to tw conversion (Ming Lei) [RHEL-56837]
  - io_uring/cmd: move io_uring_try_cancel_uring_cmd() (Ming Lei) [RHEL-56837]
  - blk-cgroup: move congestion_count to struct blkcg (Ming Lei) [RHEL-56837]
  - sbitmap: fix io hung due to race on sbitmap_word::cleared (Ming Lei) [RHEL-56837]
  - block: avoid polling configuration errors (Ming Lei) [RHEL-56837]
  - block: Catch possible entries missing from rqf_name[] (Ming Lei) [RHEL-56837]
  - block: Simplify definition of RQF_NAME() (Ming Lei) [RHEL-56837]
  - block: Use enum to define RQF_x bit indexes (Ming Lei) [RHEL-56837]
  - block: Catch possible entries missing from cmd_flag_name[] (Ming Lei) [RHEL-56837]
  - block: Catch possible entries missing from alloc_policy_name[] (Ming Lei) [RHEL-56837]
  - block: Catch possible entries missing from hctx_flag_name[] (Ming Lei) [RHEL-56837]
  - block: Catch possible entries missing from hctx_state_name[] (Ming Lei) [RHEL-56837]
  - block: Catch possible entries missing from blk_queue_flag_name[] (Ming Lei) [RHEL-56837]
  - block: Make QUEUE_FLAG_x as an enum (Ming Lei) [RHEL-56837]
  - block: Relocate BLK_MQ_MAX_DEPTH (Ming Lei) [RHEL-56837]
  - block: Relocate BLK_MQ_CPU_WORK_BATCH (Ming Lei) [RHEL-56837]
  - block: remove QUEUE_FLAG_STOPPED (Ming Lei) [RHEL-56837]
  - block: Add missing entry to hctx_flag_name[] (Ming Lei) [RHEL-56837]
  - block: Add zone write plugging entry to rqf_name[] (Ming Lei) [RHEL-56837]
  - block: Add missing entries from cmd_flag_name[] (Ming Lei) [RHEL-56837]
  - floppy: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - loop: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - xen/blkback: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - block/rnbd: Constify struct kobj_type (Ming Lei) [RHEL-56837]
  - block: take offset into account in blk_bvec_map_sg again (Ming Lei) [RHEL-56837]
  - block: fix get_max_segment_size() warning (Ming Lei) [RHEL-56837]
  - loop: Don't bother validating blocksize (Ming Lei) [RHEL-56837]
  - virtio_blk: Don't bother validating blocksize (Ming Lei) [RHEL-56837]
  - null_blk: Don't bother validating blocksize (Ming Lei) [RHEL-56837]
  - block: Validate logical block size in blk_validate_limits() (Ming Lei) [RHEL-56837]
  - virtio_blk: Fix default logical block size fallback (Ming Lei) [RHEL-56837]
  - block: pass a phys_addr_t to get_max_segment_size (Ming Lei) [RHEL-56837]
  - block: add a bvec_phys helper (Ming Lei) [RHEL-56837]
  - blk-lib: check for kill signal in ioctl BLKZEROOUT (Ming Lei) [RHEL-56837]
  - block: limit the Write Zeroes to manually writing zeroes fallback (Ming Lei) [RHEL-56837]
  - block: refacto blkdev_issue_zeroout (Ming Lei) [RHEL-56837]
  - block: move read-only and supported checks into (__)blkdev_issue_zeroout (Ming Lei) [RHEL-56837]
  - block: remove the LBA alignment check in __blkdev_issue_zeroout (Ming Lei) [RHEL-56837]
  - block: factor out a blk_write_zeroes_limit helper (Ming Lei) [RHEL-56837]
  - block: Remove blk_alloc_zone_bitmap() (Ming Lei) [RHEL-56837]
  - block: Remove REQ_OP_ZONE_RESET_ALL emulation (Ming Lei) [RHEL-56837]
  - block: remove gfp_flags from blkdev_zone_mgmt (Ming Lei) [RHEL-56837]
  - dm: dm-zoned: guard blkdev_zone_mgmt with noio scope (Ming Lei) [RHEL-56837]
  - zonefs: pass GFP_KERNEL to blkdev_zone_mgmt() call (Ming Lei) [RHEL-56837]
  - dm: handle REQ_OP_ZONE_RESET_ALL (Ming Lei) [RHEL-56837]
  - dm: Refactor is_abnormal_io() (Ming Lei) [RHEL-56837]
  - null_blk: Introduce the zone_full parameter (Ming Lei) [RHEL-56837]
  - loop: remove the unused inode variable in loop_configure (Ming Lei) [RHEL-56837]
  - block: reuse original bio_vec array for integrity during clone (Ming Lei) [RHEL-56837]
  - null_blk: don't initialize static 'g_virt_boundary' to false (Ming Lei) [RHEL-56837]
  - block: t10-pi: Return correct ref tag when queue has no integrity profile (Ming Lei) [RHEL-56837]
  - xen-blkfront: fix sector_size propagation to the block layer (Ming Lei) [RHEL-56837]
  - null_blk: Fix description of the fua parameter (Ming Lei) [RHEL-56837]
  - block/mq-deadline: Fix the tag reservation code (Ming Lei) [RHEL-56837]
  - block: Call .limit_depth() after .hctx has been set (Ming Lei) [RHEL-56837]
  - nvme: don't set io_opt if NOWS is zero (Ming Lei) [RHEL-56837]
  - block: don't reduce max_sectors based on io_opt (Ming Lei) [RHEL-56837]
  - block: remove a duplicate io_min check in blk_validate_limits (Ming Lei) [RHEL-56837]
  - blk-wbt: don't throttle swap writes in direct reclaim (Ming Lei) [RHEL-56837]
  - block: pass a gendisk to the queue_sysfs_entry methods (Ming Lei) [RHEL-56837]
  - block: add helper macros to de-duplicate the queue sysfs attributes (Ming Lei) [RHEL-56837]
  - block: simplify queue_logical_block_size (Ming Lei) [RHEL-56837]
  - blk-throttle: fix lower control under super low iops limit (Ming Lei) [RHEL-56837]
  - rnbd-cnt: don't set QUEUE_FLAG_SAME_FORCE (Ming Lei) [RHEL-56837]
  - rnbd: don't set QUEUE_FLAG_SAME_COMP (Ming Lei) [RHEL-56837]
  - mpt3sas_scsih: don't set QUEUE_FLAG_NOMERGES (Ming Lei) [RHEL-56837]
  - megaraid_sas: don't set QUEUE_FLAG_NOMERGES (Ming Lei) [RHEL-56837]
  - loop: don't set QUEUE_FLAG_NOMERGES (Ming Lei) [RHEL-56837]
  - block: check bio alignment in blk_mq_submit_bio (Ming Lei) [RHEL-56837]
  - block: Add ioprio to block_rq tracepoint (Ming Lei) [RHEL-56837]
  - block: remove bio_integrity_process (Ming Lei) [RHEL-56837]
  - block: switch on bio operation in bio_integrity_prep (Ming Lei) [RHEL-56837]
  - block: remove allocation failure warnings in bio_integrity_prep (Ming Lei) [RHEL-56837]
  - block: simplify adding the payload in bio_integrity_prep (Ming Lei) [RHEL-56837]
  - block: only zero non-PI metadata tuples in bio_integrity_prep (Ming Lei) [RHEL-56837]
  - loop: Fix a race between loop detach and loop open (Ming Lei) [RHEL-56837]
  - block: Delete blk_queue_flag_test_and_set() (Ming Lei) [RHEL-56837]
  - block: clean up the check in blkdev_iomap_begin() (Ming Lei) [RHEL-56837]
  - block: use the right type for stub rq_integrity_vec() (Ming Lei) [RHEL-56837]
  - block: move dma_pad_mask into queue_limits (Ming Lei) [RHEL-56837]
  - block: remove the fallback case in queue_dma_alignment (Ming Lei) [RHEL-56837]
  - block: remove disk_update_readahead (Ming Lei) [RHEL-56837]
  - block: conding style fixup for blk_queue_max_guaranteed_bio (Ming Lei) [RHEL-56837]
  - block: convert features and flags to __bitwise types (Ming Lei) [RHEL-56837]
  - block: rename BLK_FEAT_MISALIGNED (Ming Lei) [RHEL-56837]
  - block: correctly report cache type (Ming Lei) [RHEL-56837]
  - md: set md-specific flags for all queue limits (Ming Lei) [RHEL-56837]
  - block: change rq_integrity_vec to respect the iterator (Ming Lei) [RHEL-56837]
  - block: fix the blk_queue_nonrot polarity (Ming Lei) [RHEL-56837]
  - brd: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - cdrom: Add missing MODULE_DESCRIPTION() (Ming Lei) [RHEL-56837]
  - block: Fix blk_validate_atomic_write_limits() build for arm32 (Ming Lei) [RHEL-56837]
  - block: Cleanup block device zone helpers (Ming Lei) [RHEL-56837]
  - block: Define bdev_nr_zones() as an inline function (Ming Lei) [RHEL-56837]
  - null_blk: Do not set disk->nr_zones (Ming Lei) [RHEL-56837]
  - nvme: Atomic write support (Ming Lei) [RHEL-56837]
  - scsi: scsi_debug: Atomic write support (Ming Lei) [RHEL-56837]
  - scsi: sd: Atomic write support (Ming Lei) [RHEL-56837]
  - block: Add fops atomic write support (Ming Lei) [RHEL-56837]
  - block: Add atomic write support for statx (Ming Lei) [RHEL-56837]
  - block: Add core atomic write support (Ming Lei) [RHEL-56837]
  - fs: Add initial atomic write support info to statx (Ming Lei) [RHEL-56837]
  - fs: Initial atomic write support (Ming Lei) [RHEL-56837]
  - block: Generalize chunk_sectors support as boundary support (Ming Lei) [RHEL-56837]
  - block: Pass blk_queue_get_max_sectors() a request pointer (Ming Lei) [RHEL-56837]
  - block: move the raid_partial_stripes_expensive flag into the features field (Ming Lei) [RHEL-56837]
  - block: remove the discard_alignment flag (Ming Lei) [RHEL-56837]
  - block: move the misaligned flag into the features field (Ming Lei) [RHEL-56837]
  - block: renumber and rename the cache disabled flag (Ming Lei) [RHEL-56837]
  - block: fix spelling and grammar for in writeback_cache_control.rst (Ming Lei) [RHEL-56837]
  - block: remove the unused blk_bounce enum (Ming Lei) [RHEL-56837]
  - block: move the bounce flag into the features field (Ming Lei) [RHEL-56837]
  - block: move the skip_tagset_quiesce flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the pci_p2pdma flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the zone_resetall flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the zoned flag into the features field (Ming Lei) [RHEL-56837]
  - block: move the poll flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the dax flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the nowait flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the synchronous flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the stable_writes flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the io_stat flag setting to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the add_random flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move the nonrot flag to queue_limits (Ming Lei) [RHEL-56837]
  - block: move cache control settings out of queue->flags (Ming Lei) [RHEL-56837]
  - block: remove blk_flush_policy (Ming Lei) [RHEL-56837]
  - block: freeze the queue in queue_attr_store (Ming Lei) [RHEL-56837]
  - nbd: move setting the cache control flags to __nbd_set_size (Ming Lei) [RHEL-56837]
  - virtio_blk: remove virtblk_update_cache_mode (Ming Lei) [RHEL-56837]
  - loop: fold loop_update_rotational into loop_reconfigure_limits (Ming Lei) [RHEL-56837]
  - loop: also use the default block size from an underlying block device (Ming Lei) [RHEL-56837]
  - loop: regularize upgrading the block size for direct I/O (Ming Lei) [RHEL-56837]
  - loop: always update discard settings in loop_reconfigure_limits (Ming Lei) [RHEL-56837]
  - loop: stop using loop_reconfigure_limits in __loop_clr_fd (Ming Lei) [RHEL-56837]
  - sd: move zone limits setup out of sd_read_block_characteristics (Ming Lei) [RHEL-56837]
  - sd: remove sd_is_zoned (Ming Lei) [RHEL-56837]
  - xen-blkfront: don't disable cache flushes when they fail (Ming Lei) [RHEL-56837]
  - z2ram: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - ataflop: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - amiflop: add missing MODULE_DESCRIPTION() macro (Ming Lei) [RHEL-56837]
  - block, bfq: remove blkg_path() (Ming Lei) [RHEL-56837]
  - block: cleanup flag_{show,store} (Ming Lei) [RHEL-56837]
  - block: BFQ: Refactor bfq_exit_icq() to silence sparse warning (Ming Lei) [RHEL-56837]
  - block: Drop locking annotation for limits_lock (Ming Lei) [RHEL-56837]
  - bdev: make blockdev_mnt static (Ming Lei) [RHEL-56837]
  - dm: Remove unused macro DM_ZONE_INVALID_WP_OFST (Ming Lei) [RHEL-56837]
  - dm: Improve zone resource limits handling (Ming Lei) [RHEL-56837]
  - dm: Call dm_revalidate_zones() after setting the queue limits (Ming Lei) [RHEL-56837]
  - block: Improve checks on zone resource limits (Ming Lei) [RHEL-56837]
  - block: move integrity information into queue_limits (Ming Lei) [RHEL-56837]
  - nvme-multipath: don't inherit LBA-related fields for the multipath node (Ming Lei) [RHEL-56837]
  - nvme: split nvme_update_zone_info (Ming Lei) [RHEL-56837]
  - block: invert the BLK_INTEGRITY_{GENERATE,VERIFY} flags (Ming Lei) [RHEL-56837]
  - block: bypass the STABLE_WRITES flag for protection information (Ming Lei) [RHEL-56837]
  - block: don't require stable pages for non-PI metadata (Ming Lei) [RHEL-56837]
  - block: use kstrtoul in flag_store (Ming Lei) [RHEL-56837]
  - block: factor out flag_{store,show} helper for integrity (Ming Lei) [RHEL-56837]
  - block: remove the blk_flush_integrity call in blk_integrity_unregister (Ming Lei) [RHEL-56837]
  - block: remove the blk_integrity_profile structure (Ming Lei) [RHEL-56837]
  - dm-integrity: use the nop integrity profile (Ming Lei) [RHEL-56837]
  - block: add special APIs for run-time disabling of discard and friends (Ming Lei) [RHEL-56837]
  - block: remove unused queue limits API (Ming Lei) [RHEL-56837]
  - sr: convert to the atomic queue limits API (Ming Lei) [RHEL-56837]
  - sd: convert to the atomic queue limits API (Ming Lei) [RHEL-56837]
  - sd: cleanup zoned queue limits initialization (Ming Lei) [RHEL-56837]
  - sd: factor out a sd_discard_mode helper (Ming Lei) [RHEL-56837]
  - sd: simplify the disable case in sd_config_discard (Ming Lei) [RHEL-56837]
  - sd: add a sd_disable_write_same helper (Ming Lei) [RHEL-56837]
  - sd: add a sd_disable_discard helper (Ming Lei) [RHEL-56837]
  - sd: simplify the ZBC case in provisioning_mode_store (Ming Lei) [RHEL-56837]
  - block: take io_opt and io_min into account for max_sectors (Ming Lei) [RHEL-56837]
  - rbd: increase io_opt again (Ming Lei) [RHEL-56837]
  - ubd: untagle discard vs write zeroes not support handling (Ming Lei) [RHEL-56837]
  - ubd: refactor the interrupt handler (Ming Lei) [RHEL-56837]
  - nbd: Remove __force casts (Ming Lei) [RHEL-56837]
  - block: Optimize disk zone resource cleanup (Ming Lei) [RHEL-56837]
  - block: sed-opal: avoid possible wrong address reference in read_sed_opal_key() (Ming Lei) [RHEL-56837]
  - loop: Disable fallocate() zero and discard if not supported (Ming Lei) [RHEL-56837]
  - blk-throttle: Fix incorrect display of io.max (Ming Lei) [RHEL-56837]
  - block: Fix zone write plugging handling of devices with a runt zone (Ming Lei) [RHEL-56837]
  - block: Fix validation of zoned device with a runt zone (Ming Lei) [RHEL-56837]
  - null_blk: Do not allow runt zone with zone capacity smaller then zone size (Ming Lei) [RHEL-56837]
  - block: check for max_hw_sectors underflow (Ming Lei) [RHEL-56837]
  - block: stack max_user_sectors (Ming Lei) [RHEL-56837]
  - sd: also set max_user_sectors when setting max_sectors (Ming Lei) [RHEL-56837]
  - null_blk: Print correct max open zones limit in null_init_zoned_dev() (Ming Lei) [RHEL-56837]
  - block: delete redundant function declaration (Ming Lei) [RHEL-56837]
  - dm: make dm_set_zones_restrictions work on the queue limits (Ming Lei) [RHEL-56837]
  - dm: use queue_limits_set (Ming Lei) [RHEL-56837]
  - dm: remove dm_check_zoned (Ming Lei) [RHEL-56837]
  - dm: move setting zoned_enabled to dm_table_set_restrictions (Ming Lei) [RHEL-56837]
  - block: remove blk_queue_max_integrity_segments (Ming Lei) [RHEL-56837]
  - dm-integrity: set max_integrity_segments in dm_integrity_io_hints (Ming Lei) [RHEL-56837]
  - nvdimm/btt: always set max_integrity_segments (Ming Lei) [RHEL-56837]
  - nvdimm: remove nd_integrity_init (Ming Lei) [RHEL-56837]
  - scsi: block: Remove now unused queue limits helpers (Ming Lei) [RHEL-56837]
  - scsi: uas: Switch to using ->device_configure to configure queue limits (Ming Lei) [RHEL-56837]
  - scsi: mpi3mr: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: mpi3mr: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: libata: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: hisi_sas: Call hisi_sas_slave_configure() from slave_configure_v3_hw() (Ming Lei) [RHEL-56837]
  - scsi: pata_macio: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: sata_nv: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: usb-storage: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: pmcraid: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: ipr: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: hptiop: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: sbp2: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: mpt3sas: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: megaraid_sas: Switch to using ->device_configure (Ming Lei) [RHEL-56837]
  - scsi: core: Add a device_configure method to the host template (Ming Lei) [RHEL-56837]
  - scsi: core: Use the atomic queue limits API in scsi_add_lun() (Ming Lei) [RHEL-56837]
  - scsi: ufs: ufs-exynos: Move setting the the DMA alignment to the init method (Ming Lei) [RHEL-56837]
  - scsi: core: Add a dma_alignment field to the host and host template (Ming Lei) [RHEL-56837]
  - scsi: core: Add a no_highmem flag to struct Scsi_Host (Ming Lei) [RHEL-56837]
  - scsi: scsi_transport_fc: Add a max_bsg_segments field to struct fc_function_template (Ming Lei) [RHEL-56837]
  - scsi: core: Initialize scsi midlayer limits before allocating the queue (Ming Lei) [RHEL-56837]
  - scsi: mpi3mr: Pass queue_limits to bsg_setup_queue() (Ming Lei) [RHEL-56837]
  - scsi: bsg: Pass queue_limits to bsg_setup_queue() (Ming Lei) [RHEL-56837]
  - scsi: block: Add a helper to cancel atomic queue limit updates (Ming Lei) [RHEL-56837]
  - ata: libata: Cleanup inline DMA helper functions (Ming Lei) [RHEL-56837]
  - ata: libata-eh: Reduce "disable device" message verbosity (Ming Lei) [RHEL-56837]
  - ata: libata-eh: Improve reset error messages (Ming Lei) [RHEL-56837]
  - ata: libata-sata: Improve ata_sas_slave_configure() (Ming Lei) [RHEL-56837]
  - ata: libata-core: Do not resume runtime suspended ports (Ming Lei) [RHEL-56837]
  - ata: libata-core: Do not poweroff runtime suspended ports (Ming Lei) [RHEL-56837]
  - ata: libata-core: Remove ata_port_resume_async() (Ming Lei) [RHEL-56837]
  - ata: libata-core: Remove ata_port_suspend_async() (Ming Lei) [RHEL-56837]
  - ata: libata-core: Detach a port devices on shutdown (Ming Lei) [RHEL-56837]
  - ata: libata-core: Synchronize ata_port_detach() with hotplug (Ming Lei) [RHEL-56837]
  - ata: libata-scsi: Cleanup ata_scsi_start_stop_xlat() (Ming Lei) [RHEL-56837]
  - scsi: ipr: Remove SATA support (Ming Lei) [RHEL-56837]
  - blk-throttle: remove unused struct 'avg_latency_bucket' (Ming Lei) [RHEL-56837]
  - block: fix lost bio for plug enabled bio based device (Ming Lei) [RHEL-56837]
  - block: t10-pi: add MODULE_DESCRIPTION() (Ming Lei) [RHEL-56837]
  - cdrom: rearrange last_media_change check to avoid unintentional overflow (Ming Lei) [RHEL-56837]
  - nbd: Fix signal handling (Ming Lei) [RHEL-56837]
  - nbd: Remove a local variable from nbd_send_cmd() (Ming Lei) [RHEL-56837]
  - nbd: Improve the documentation of the locking assumptions (Ming Lei) [RHEL-56837]
  - nbd: Remove superfluous casts (Ming Lei) [RHEL-56837]
  - nbd: Use NULL to represent a pointer (Ming Lei) [RHEL-56837]
  - null_blk: Fix two sparse warnings (Ming Lei) [RHEL-56837]
  - brd: implement discard support (Ming Lei) [RHEL-56837]
  - blk-throttle: delay initialization until configuration (Ming Lei) [RHEL-56837]
  - blk-throttle: remove CONFIG_BLK_DEV_THROTTLING_LOW (Ming Lei) [RHEL-56837]
  - block: add plug while submitting IO (Ming Lei) [RHEL-56837]
  - blk-lib: check for kill signal in ioctl BLKDISCARD (Ming Lei) [RHEL-56837]
  - block: add a bio_await_chain helper (Ming Lei) [RHEL-56837]
  - block: add a blk_alloc_discard_bio helper (Ming Lei) [RHEL-56837]
  - block: add a bio_chain_and_submit helper (Ming Lei) [RHEL-56837]
  - block: move discard checks into the ioctl handler (Ming Lei) [RHEL-56837]
  - block: remove the discard_granularity check in __blkdev_issue_discard (Ming Lei) [RHEL-56837]
  - block/ioctl: prefer different overflow check (Ming Lei) [RHEL-56837]
  - null_blk: Fix the WARNING: modpost: missing MODULE_DESCRIPTION() (Ming Lei) [RHEL-56837]
  - block: fix and simplify blkdevparts= cmdline parsing (Ming Lei) [RHEL-56837]
  - block: add a partscan sysfs attribute for disks (Ming Lei) [RHEL-56837]
  - block: add a disk_has_partscan helper (Ming Lei) [RHEL-56837]
  - block: Cleanup blk_revalidate_zone_cb() (Ming Lei) [RHEL-56837]
  - block: Simplify zone write plug BIO abort (Ming Lei) [RHEL-56837]
  - block: Simplify blk_zone_write_plug_bio_endio() (Ming Lei) [RHEL-56837]
  - block: Improve zone write request completion handling (Ming Lei) [RHEL-56837]
  - block: Improve blk_zone_write_plug_bio_merged() (Ming Lei) [RHEL-56837]
  - block: Fix handling of non-empty flush write requests to zones (Ming Lei) [RHEL-56837]
  - block: Fix flush request sector restore (Ming Lei) [RHEL-56837]
  - block: Do not remove zone write plugs still in use (Ming Lei) [RHEL-56837]
  - block: Unhash a zone write plug only if needed (Ming Lei) [RHEL-56837]
  - block: Hold a reference on zone write plugs to schedule submission (Ming Lei) [RHEL-56837]
  - block: Fix reference counting for zone write plugs in error state (Ming Lei) [RHEL-56837]
  - block: Fix zone write plug initialization from blk_revalidate_zone_cb() (Ming Lei) [RHEL-56837]
  - block: Exclude conventional zones when faking max open limit (Ming Lei) [RHEL-56837]
  - dm: Check that a zoned table leads to a valid mapped device (Ming Lei) [RHEL-56837]
  - sbitmap: use READ_ONCE to access map->word (Ming Lei) [RHEL-56837]
  - null_blk: Fix missing mutex_destroy() at module removal (Ming Lei) [RHEL-56837]
  - block: check if zone_wplugs_hash exists in queue_zone_wplugs_show (Ming Lei) [RHEL-56837]
  - block: use a per disk workqueue for zone write plugging (Ming Lei) [RHEL-56837]
  - block/mq-deadline: Remove some unused functions (Ming Lei) [RHEL-56837]
  - null_blk: Simplify null_zone_write() (Ming Lei) [RHEL-56837]
  - null_blk: Do zone resource management only if necessary (Ming Lei) [RHEL-56837]
  - null_blk: Have all null_handle_xxx() return a blk_status_t (Ming Lei) [RHEL-56837]
  - block: Do not special-case plugging of zone write operations (Ming Lei) [RHEL-56837]
  - block: Do not force select mq-deadline with CONFIG_BLK_DEV_ZONED (Ming Lei) [RHEL-56837]
  - block: Remove zone write locking (Ming Lei) [RHEL-56837]
  - block: Replace zone_wlock debugfs entry with zone_wplugs entry (Ming Lei) [RHEL-56837]
  - block: Move zone related debugfs attribute to blk-zoned.c (Ming Lei) [RHEL-56837]
  - block: Do not check zone type in blk_check_zone_append() (Ming Lei) [RHEL-56837]
  - block: Remove elevator required features (Ming Lei) [RHEL-56837]
  - block: mq-deadline: Remove support for zone write locking (Ming Lei) [RHEL-56837]
  - block: Simplify blk_revalidate_disk_zones() interface (Ming Lei) [RHEL-56837]
  - block: Remove BLK_STS_ZONE_RESOURCE (Ming Lei) [RHEL-56837]
  - nvmet: zns: Do not reference the gendisk conv_zones_bitmap (Ming Lei) [RHEL-56837]
  - null_blk: Introduce fua attribute (Ming Lei) [RHEL-56837]
  - null_blk: Introduce zone_append_max_sectors attribute (Ming Lei) [RHEL-56837]
  - null_blk: Do not request ELEVATOR_F_ZBD_SEQ_WRITE elevator feature (Ming Lei) [RHEL-56837]
  - scsi: sd: Use the block layer zone append emulation (Ming Lei) [RHEL-56837]
  - dm: Use the block layer zone append emulation (Ming Lei) [RHEL-56837]
  - block: Allow BIO-based drivers to use blk_revalidate_disk_zones() (Ming Lei) [RHEL-56837]
  - block: Implement zone append emulation (Ming Lei) [RHEL-56837]
  - block: Allow zero value of max_zone_append_sectors queue limit (Ming Lei) [RHEL-56837]
  - block: Fake max open zones limit when there is no limit (Ming Lei) [RHEL-56837]
  - block: Introduce zone write plugging (Ming Lei) [RHEL-56837]
  - block: Remember zone capacity when revalidating zones (Ming Lei) [RHEL-56837]
  - block: Allow using bio_attempt_back_merge() internally (Ming Lei) [RHEL-56837]
  - block: Introduce bio_straddles_zones() and bio_offset_from_zone_start() (Ming Lei) [RHEL-56837]
  - block: Introduce blk_zone_update_request_bio() (Ming Lei) [RHEL-56837]
  - block: Remove req_bio_endio() (Ming Lei) [RHEL-56837]
  - block: Restore sector of flush requests (Ming Lei) [RHEL-56837]
  - block: Call blkdev_dio_unaligned() from blkdev_direct_IO() (Ming Lei) [RHEL-56837]
  - blk-cgroup: use group allocation/free of per-cpu counters API (Ming Lei) [RHEL-56837]
  - pcpcntr: add group allocation/free (Ming Lei) [RHEL-56837]
  - dm: use bio_list_merge_init (Ming Lei) [RHEL-56837]
  - blk-cgroup: use bio_list_merge_init (Ming Lei) [RHEL-56837]
  - block: add a bio_list_merge_init helper (Ming Lei) [RHEL-56837]
  - blk-throttle: Only use seq_printf() in tg_prfill_limit() (Ming Lei) [RHEL-56837]
  - brd: Remove use of page->index (Ming Lei) [RHEL-56837]
  - signalfd: convert to ->read_iter() (Ming Lei) [RHEL-56837]
  - userfaultfd: convert to ->read_iter() (Ming Lei) [RHEL-56837]
  - timerfd: convert to ->read_iter() (Ming Lei) [RHEL-56837]
  - new helper: copy_to_iter_full() (Ming Lei) [RHEL-56837]
  - nvme-multipath: use atomic queue limits API for stacking limits (Ming Lei) [RHEL-56837]
  - nvme-multipath: pass queue_limits to blk_alloc_disk (Ming Lei) [RHEL-56837]
  - nvme: use the atomic queue limits update API (Ming Lei) [RHEL-56837]
  - nvme: cleanup nvme_configure_metadata (Ming Lei) [RHEL-56837]
  - nvme: don't query identify data in configure_metadata (Ming Lei) [RHEL-56837]
  - nvme: split out a nvme_identify_ns_nvm helper (Ming Lei) [RHEL-56837]
  - nvme: move common logic into nvme_update_ns_info (Ming Lei) [RHEL-56837]
  - nvme: move setting the write cache flags out of nvme_set_queue_limits (Ming Lei) [RHEL-56837]
  - nvme: move a few things out of nvme_update_disk_info (Ming Lei) [RHEL-56837]
  - nvme: don't use nvme_update_disk_info for the multipath disk (Ming Lei) [RHEL-56837]
  - nvme: move blk_integrity_unregister into nvme_init_integrity (Ming Lei) [RHEL-56837]
  - nvme: cleanup the nvme_init_integrity calling conventions (Ming Lei) [RHEL-56837]
  - nvme: move max_integrity_segments handling out of nvme_init_integrity (Ming Lei) [RHEL-56837]
  - nvme: remove nvme_revalidate_zones (Ming Lei) [RHEL-56837]
  - nvme: move NVME_QUIRK_DEALLOCATE_ZEROES out of nvme_config_discard (Ming Lei) [RHEL-56837]
  - nvme: set max_hw_sectors unconditionally (Ming Lei) [RHEL-56837]
  - Revert "dm: use queue_limits_set" (Ming Lei) [RHEL-56837]
  - block: Do not force full zone append completion in req_bio_endio() (Ming Lei) [RHEL-56837]
  - block: set default max segment size in case of virt_boundary (Ming Lei) [RHEL-56837]
  - blk-iocost: do not WARN if iocg was already offlined (Ming Lei) [RHEL-56837]
  - block: propagate partition scanning errors to the BLKRRPART ioctl (Ming Lei) [RHEL-56837]
  - block: fix that blk_time_get_ns() doesn't update time after schedule (Ming Lei) [RHEL-56837]
  - block: allow device to have both virt_boundary_mask and max segment size (Ming Lei) [RHEL-56837]
  - blk-iocost: avoid out of bounds shift (Ming Lei) [RHEL-56837]
  - nullblk: Fix cleanup order in null_add_dev() error path (Ming Lei) [RHEL-56837]
  - block: Make blk_rq_set_mixed_merge() static (Ming Lei) [RHEL-56837]
  - Revert "blk-lib: check for kill signal" (Ming Lei) [RHEL-56837]
  - Revert "block/mq-deadline: use correct way to throttling write requests" (Ming Lei) [RHEL-56837]
  - block: limit block time caching to in_task() context (Ming Lei) [RHEL-56837]
  - block: partitions: only define function mac_fix_string for CONFIG_PPC_PMAC (Ming Lei) [RHEL-56837]
  - block/swim: Convert to platform remove callback returning void (Ming Lei) [RHEL-56837]
  - cdrom: gdrom: Convert to platform remove callback returning void (Ming Lei) [RHEL-56837]
  - block: remove disk_stack_limits (Ming Lei) [RHEL-56837]
  - md: remove mddev->queue (Ming Lei) [RHEL-56837]
  - md: don't initialize queue limits (Ming Lei) [RHEL-56837]
  - md/raid10: use the atomic queue limit update APIs (Ming Lei) [RHEL-56837]
  - md/raid5: use the atomic queue limit update APIs (Ming Lei) [RHEL-56837]
  - md/raid1: use the atomic queue limit update APIs (Ming Lei) [RHEL-56837]
  - md/raid0: use the atomic queue limit update APIs (Ming Lei) [RHEL-56837]
  - md: add queue limit helpers (Ming Lei) [RHEL-56837]
  - virtio_blk: Do not use disk_set_max_open/active_zones() (Ming Lei) [RHEL-56837]
  - aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts (Ming Lei) [RHEL-56837]
  - block: move capacity validation to blkpg_do_ioctl() (Ming Lei) [RHEL-56837]
  - drbd: atomically update queue limits in drbd_reconsider_queue_parameters (Ming Lei) [RHEL-56837]
  - drbd: split out a drbd_discard_supported helper (Ming Lei) [RHEL-56837]
  - drbd: don't set max_write_zeroes_sectors in decide_on_discard_support (Ming Lei) [RHEL-56837]
  - drbd: merge drbd_setup_queue_param into drbd_reconsider_queue_parameters (Ming Lei) [RHEL-56837]
  - drbd: refactor the backing dev max_segments calculation (Ming Lei) [RHEL-56837]
  - drbd: refactor drbd_reconsider_queue_parameters (Ming Lei) [RHEL-56837]
  - drbd: pass the max_hw_sectors limit to blk_alloc_disk (Ming Lei) [RHEL-56837]
  - sed-opal: Remove the ret variable from the function (Ming Lei) [RHEL-56837]
  - sed-opal: Remove unnecessary ‘0’ values from ret (Ming Lei) [RHEL-56837]
  - sed-opal: Remove unnecessary ‘0’ values from err (Ming Lei) [RHEL-56837]
  - sed-opal: Remove unnecessary ‘0’ values from error (Ming Lei) [RHEL-56837]
  - block: make block_class constant (Ming Lei) [RHEL-56837]
  - dasd: use the atomic queue limits API (Ming Lei) [RHEL-56837]
  - dasd: move queue setup to common code (Ming Lei) [RHEL-56837]
  - dasd: cleamup dasd_state_basic_to_ready (Ming Lei) [RHEL-56837]
  - nbd: use the atomic queue limits API in nbd_set_size (Ming Lei) [RHEL-56837]
  - nbd: freeze the queue for queue limits updates (Ming Lei) [RHEL-56837]
  - nbd: don't clear discard_sectors in nbd_config_put (Ming Lei) [RHEL-56837]
  - pktcdvd: don't set max_hw_sectors on the underlying device (Ming Lei) [RHEL-56837]
  - dm: use queue_limits_set (Ming Lei) [RHEL-56837]
  - block: add a queue_limits_stack_bdev helper (Ming Lei) [RHEL-56837]
  - block: add a queue_limits_set helper (Ming Lei) [RHEL-56837]
  - ubd: open the backing files in ubd_add (Ming Lei) [RHEL-56837]
  - ubd: remove the queue pointer in struct ubd (Ming Lei) [RHEL-56837]
  - ubd: move set_disk_ro to ubd_add (Ming Lei) [RHEL-56837]
  - ubd: move setting the variable queue limits to ubd_add (Ming Lei) [RHEL-56837]
  - ubd: move setting the nonrot flag to ubd_add (Ming Lei) [RHEL-56837]
  - ubd: remove ubd_disk_register (Ming Lei) [RHEL-56837]
  - ubd: remove the ubd_gendisk array (Ming Lei) [RHEL-56837]
  - xen-blkfront: atomically update queue limits (Ming Lei) [RHEL-56837]
  - xen-blkfront: don't redundantly set max_sements in blkif_recover (Ming Lei) [RHEL-56837]
  - xen-blkfront: rely on the default discard granularity (Ming Lei) [RHEL-56837]
  - xen-blkfront: set max_discard/secure erase limits to UINT_MAX (Ming Lei) [RHEL-56837]
  - bdev: remove SLAB_MEM_SPREAD flag usage (Ming Lei) [RHEL-56837]
  - block/blk-mq: Don't complete locally if capacities are different (Ming Lei) [RHEL-56837]
  - sched: Add a new function to compare if two cpus have the same capacity (Ming Lei) [RHEL-56837]
  - blk-lib: check for kill signal (Ming Lei) [RHEL-56837]
  - block: io wait hang check helper (Ming Lei) [RHEL-56837]
  - block: cleanup __blkdev_issue_write_zeroes (Ming Lei) [RHEL-56837]
  - block: blkdev_issue_secure_erase loop style (Ming Lei) [RHEL-56837]
  - block: Do not include rbtree.h in blk-zoned.c (Ming Lei) [RHEL-56837]
  - block: Clear zone limits for a non-zoned stacked queue (Ming Lei) [RHEL-56837]
  - null_blk: Delete nullb.{queue_depth, nr_queues} (Ming Lei) [RHEL-56837]
  - pktcdvd: set queue limits at disk allocation time (Ming Lei) [RHEL-56837]
  - pktcdvd: stop setting q->queuedata (Ming Lei) [RHEL-56837]
  - block: fix virt_boundary handling in blk_validate_limits (Ming Lei) [RHEL-56837]
  - null_blk: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - null_blk: remove null_gendisk_register (Ming Lei) [RHEL-56837]
  - null_blk: refactor tag_set setup (Ming Lei) [RHEL-56837]
  - null_blk: initialize the tag_set timeout in null_init_tag_set (Ming Lei) [RHEL-56837]
  - null_blk: remove the bio based I/O path (Ming Lei) [RHEL-56837]
  - mmc: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - scm_blk: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - ubiblock: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - mtd_blkdevs: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - mspro_block: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - ms_block: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - gdrom: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - sunvdc: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - rnbd-clt: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - rbd: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - ps3disk: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - nbd: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - mtip: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - floppy: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - aoe: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - ubd: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - dcssblk: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - pmem: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - btt: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - zram: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - n64cart: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - brd: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - nfblock: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - block: pass a queue_limits argument to blk_alloc_disk (Ming Lei) [RHEL-56837]
  - loop: use the atomic queue limits update API (Ming Lei) [RHEL-56837]
  - loop: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - loop: cleanup loop_config_discard (Ming Lei) [RHEL-56837]
  - virtio_blk: pass queue_limits to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - virtio_blk: split virtblk_probe (Ming Lei) [RHEL-56837]
  - block: pass a queue_limits argument to blk_mq_alloc_disk (Ming Lei) [RHEL-56837]
  - block: pass a queue_limits argument to blk_mq_init_queue (Ming Lei) [RHEL-56837]
  - block: pass a queue_limits argument to blk_alloc_queue (Ming Lei) [RHEL-56837]
  - block: use queue_limits_commit_update in queue_discard_max_store (Ming Lei) [RHEL-56837]
  - block: add a max_user_discard_sectors queue limit (Ming Lei) [RHEL-56837]
  - block: use queue_limits_commit_update in queue_max_sectors_store (Ming Lei) [RHEL-56837]
  - block: add an API to atomically update queue limits (Ming Lei) [RHEL-56837]
  - block: decouple blk_set_stacking_limits from blk_set_default_limits (Ming Lei) [RHEL-56837]
  - block: refactor disk_update_readahead (Ming Lei) [RHEL-56837]
  - block: move max_{open,active}_zones to struct queue_limits (Ming Lei) [RHEL-56837]
  - drbd: fix function cast warnings in state machine (Ming Lei) [RHEL-56837]
  - nvme: allow integrity when PI is not in first bytes (Ming Lei) [RHEL-56837]
  - block: support PI at non-zero offset within metadata (Ming Lei) [RHEL-56837]
  - block: refactor guard helpers (Ming Lei) [RHEL-56837]
  - null_blk: add configfs variable shared_tags (Ming Lei) [RHEL-56837]
  - block: Simplify the allocation of slab caches (Ming Lei) [RHEL-56837]
  - block: optimise in irq bio put caching (Ming Lei) [RHEL-56837]
  - block: extend bio caching to task context (Ming Lei) [RHEL-56837]
  - blk-throttle: Eliminate redundant checks for data direction (Ming Lei) [RHEL-56837]
  - block: update cached timestamp post schedule/preemption (Ming Lei) [RHEL-56837]
  - block: cache current nsec time in struct blk_plug (Ming Lei) [RHEL-56837]
  - block: add blk_time_get_ns() and blk_time_get() helpers (Ming Lei) [RHEL-56837]
  - block: move cgroup time handling code into blk.h (Ming Lei) [RHEL-56837]
  - blk-mq: special case cached requests less (Ming Lei) [RHEL-56837]
  - blk-mq: introduce a blk_mq_peek_cached_request helper (Ming Lei) [RHEL-56837]
  - blk-mq: move blk_mq_attempt_bio_merge out blk_mq_get_new_requests (Ming Lei) [RHEL-56837]
  - Documentation: block: ioprio: Update schedulers (Ming Lei) [RHEL-56837]
  - blk-mq: Remove the hctx 'run' debugfs attribute (Ming Lei) [RHEL-56837]
  - block: Fix iterating over an empty bio with bio_for_each_folio_all (Ming Lei) [RHEL-56837]
  - virtio_blk: remove duplicate check if queue is broken in virtblk_done (Ming Lei) [RHEL-56837]
  - sbitmap: remove stale comment in sbq_calc_wake_batch (Ming Lei) [RHEL-56837]
  - block: Correct a documentation comment in blk-cgroup.c (Ming Lei) [RHEL-56837]
  - null_blk: Remove usage of the deprecated ida_simple_xx() API (Ming Lei) [RHEL-56837]
  - block: ensure we hold a queue reference when using queue limits (Ming Lei) [RHEL-56837]
  - blk-mq: rename blk_mq_can_use_cached_rq (Ming Lei) [RHEL-56837]
  - block: print symbolic error name instead of error code (Ming Lei) [RHEL-56837]
  - block: fix partial zone append completion handling in req_bio_endio() (Ming Lei) [RHEL-56837]
  - block/iocost: silence warning on 'last_period' potentially being unused (Ming Lei) [RHEL-56837]
  - block: make __get_task_ioprio() easier to read (Ming Lei) [RHEL-56837]
  - block: move __get_task_ioprio() into header file (Ming Lei) [RHEL-56837]
  - block: make blkcg_punt_bio_submit optional (Ming Lei) [RHEL-56837]
  - block: async_bio_lock does not need to be bh-safe (Ming Lei) [RHEL-56837]
  - btrfs, block: move REQ_CGROUP_PUNT to btrfs (Ming Lei) [RHEL-56837]
  - btrfs, mm: remove the punt_to_cgroup field in struct writeback_control (Ming Lei) [RHEL-56837]
  - scsi: block: Improve checks in blk_revalidate_disk_zones() (Ming Lei) [RHEL-56837]
  - scsi: block: nullblk: Set zone limits before revalidating zones (Ming Lei) [RHEL-56837]
  - sched: Show PF_flag holes (Ming Lei) [RHEL-56837]
  - scsi: ufs: core: Move the 4K alignment code into the Exynos driver (Ming Lei) [RHEL-56837]
  - iov_iter: Fix iov_iter_extract_pages() with zero-sized entries (Ming Lei) [RHEL-56837]
  - lib/scatterlist: Fix to calculate the last_pg properly (Ming Lei) [RHEL-56837]
  - lib/scatterlist: Fix to merge contiguous pages into the last SG properly (Ming Lei) [RHEL-56837]
  - virtio_pmem: add the missing REQ_OP_WRITE for flush bio (Ming Lei) [RHEL-56837]
  - block: bio-integrity: fix kcalloc() arguments order (Ming Lei) [RHEL-56837]
  - io_uring: remove uring_cmd cookie (Ming Lei) [RHEL-56837]
  - iouring: remove IORING_URING_CMD_POLLED (Ming Lei) [RHEL-56837]
  - nvme: use bio_integrity_map_user (Ming Lei) [RHEL-56837]
  - nvme: optimise io_uring passthrough completion (Ming Lei) [RHEL-56837]
  - block: bio-integrity: directly map user buffers (Ming Lei) [RHEL-56837]
  - iov_iter: Add a function to extract a page list from an iterator (Ming Lei) [RHEL-56837]
  - iov_iter: Define flags to qualify page extraction. (Ming Lei) [RHEL-56837]
  - ABI: sysfs-bus-pci: add documentation for p2pmem allocate (Ming Lei) [RHEL-56837]
  - block: set FOLL_PCI_P2PDMA in bio_map_user_iov() (Ming Lei) [RHEL-56837]
  - block: set FOLL_PCI_P2PDMA in __bio_iov_iter_get_pages() (Ming Lei) [RHEL-56837]
  - lib/scatterlist: add check when merging zone device pages (Ming Lei) [RHEL-56837]
  - block: add check when merging zone device pages (Ming Lei) [RHEL-56837]
  - iov_iter: introduce iov_iter_get_pages_[alloc_]flags() (Ming Lei) [RHEL-56837]
  - block: add a sanity check for non-write flush/fua bios (Ming Lei) [RHEL-56837]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-521.el9]
changelog:
  - ice: stop calling pci_disable_device() as we use pcim (Myron Stowe) [RHEL-59033]
  - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (Myron Stowe) [RHEL-59033]
  - PCI: Fix potential deadlock in pcim_intx() (Myron Stowe) [RHEL-59033]
  - PCI: controller: Add missing MODULE_DESCRIPTION() macros (Myron Stowe) [RHEL-59033]
  - PCI: Add missing MODULE_DESCRIPTION() macros (Myron Stowe) [RHEL-59033]
  - PCI/PM: Switch to new Intel CPU model defines (Myron Stowe) [RHEL-59033]
  - PCI: Use array for .id_table consistently (Myron Stowe) [RHEL-59033]
  - ACPI: PCI: Remove unused struct 'acpi_handle_node' (Myron Stowe) [RHEL-59033]
  - PCI: switchtec: Make switchtec_class constant (Myron Stowe) [RHEL-59033]
  - PCI: vmd: Create domain symlink before pci_bus_add_devices() (Myron Stowe) [RHEL-59033]
  - PCI: tegra: Remove unused struct 'tegra_pcie_soc' (Myron Stowe) [RHEL-59033]
  - PCI: tegra194: Set EP alignment restriction for inbound ATU (Myron Stowe) [RHEL-59033]
  - PCI: dw-rockchip: Refactor the driver to prepare for EP mode (Myron Stowe) [RHEL-59033]
  - PCI: dw-rockchip: Add rockchip_pcie_get_ltssm() helper (Myron Stowe) [RHEL-59033]
  - PCI: dw-rockchip: Fix weird indentation (Myron Stowe) [RHEL-59033]
  - PCI: dw-rockchip: Fix initial PERST# GPIO value (Myron Stowe) [RHEL-59033]
  - PCI: dw-rockchip: Add error messages in .probe() error paths (Myron Stowe) [RHEL-59033]
  - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (Myron Stowe) [RHEL-59033]
  - PCI: rockchip-host: Wait 100ms after reset before starting configuration (Myron Stowe) [RHEL-59033]
  - PCI: rockchip-host: Fix rockchip_pcie_host_init_port() PERST# handling (Myron Stowe) [RHEL-59033]
  - PCI: rcar-gen4: Add support for R-Car V4H (Myron Stowe) [RHEL-59033]
  - PCI: rcar-gen4: Add .ltssm_control() for other SoC support (Myron Stowe) [RHEL-59033]
  - PCI: rcar-gen4: Add struct rcar_gen4_pcie_drvdata (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Add PCIE_PORT_{FORCE,LANE_SKEW} macros (Myron Stowe) [RHEL-59033]
  - PCI: rcar: Demote WARN() to dev_warn_ratelimited() in rcar_pcie_wakeup() (Myron Stowe) [RHEL-59033]
  - PCI: loongson: Enable MSI in LS7A Root Complex (Myron Stowe) [RHEL-59033]
  - PCI: ls-gen4: Make struct mobiveil_rp_ops constant (Myron Stowe) [RHEL-59033]
  - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (Myron Stowe) [RHEL-59033]
  - PCI: keystone: Don't enable BAR 0 for AM654x (Myron Stowe) [RHEL-59033]
  - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() (Myron Stowe) [RHEL-59033]
  - PCI: exynos: Adapt to use bulk clock APIs (Myron Stowe) [RHEL-59033]
  - PCI: dra7xx: Fix dra7xx_pcie_cpu_addr_fixup() parameter name (Myron Stowe) [RHEL-59033]
  - PCI: artpec6: Fix artpec6_pcie_cpu_addr_fixup() parameter name (Myron Stowe) [RHEL-59033]
  - PCI: al: Check IORESOURCE_BUS existence during probe (Myron Stowe) [RHEL-59033]
  - PCI: dwc: ep: Enforce DWC specific 64-bit BAR limitation (Myron Stowe) [RHEL-59033]
  - PCI: layerscape-ep: Use the generic dw_pcie_ep_linkdown() API to handle Link Down event (Myron Stowe) [RHEL-59033]
  - PCI: qcom-ep: Use the generic dw_pcie_ep_linkdown() API to handle Link Down event (Myron Stowe) [RHEL-59033]
  - PCI: dwc: ep: Remove dw_pcie_ep_init_notify() wrapper (Myron Stowe) [RHEL-59033]
  - PCI: dwc: ep: Add a generic dw_pcie_ep_linkdown() API to handle Link Down event (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Add generic MSG TLP support for sending PME_Turn_Off when system suspend (Myron Stowe) [RHEL-59033]
  - PCI: Add PCIE_MSG_CODE_PME_TURN_OFF message macro (Myron Stowe) [RHEL-59033]
  - PCI: Add PCIE_MSG_CODE_ASSERT_INTx message macros (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Add outbound MSG TLPs support (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Consolidate args of dw_pcie_prog_outbound_atu() into a structure (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Fix index 0 incorrectly being interpreted as a free ATU slot (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Use msleep() in dw_pcie_wait_for_link() (Myron Stowe) [RHEL-59033]
  - PCI: kirin: Convert to use agnostic GPIO API (Myron Stowe) [RHEL-59033]
  - PCI: kirin: Convert kirin_pcie_parse_port() to scoped iterator (Myron Stowe) [RHEL-59033]
  - PCI: imx6: Convert to use agnostic GPIO API (Myron Stowe) [RHEL-59033]
  - PCI: dwc: Remove unused of_gpio.h inclusion (Myron Stowe) [RHEL-59033]
  - PCI: aardvark: Remove unused of_gpio.h inclusion (Myron Stowe) [RHEL-59033]
  - PCI: dra7xx: Add missing chained IRQ header inclusion (Myron Stowe) [RHEL-59033]
  - Documentation: PCI: pci-endpoint: Fix EPF ops list (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Remove unused pci_endpoint_test_bar_{readl,writel} functions (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Document policy about adding pci_device_id (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Refactor dma_set_mask_and_coherent() logic (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Use memcpy_toio()/memcpy_fromio() for BAR tests (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Add support for Rockchip rk3588 (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Fix error handling in epf_ntb_epc_cleanup() (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Clean up error handling in vpci_scan_bus() (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Make pci_epc_class struct constant (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Introduce 'epc_deinit' event and notify the EPF drivers (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: pci-epf-test: Handle Link Down event (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: pci-epf-{mhi/test}: Move DMA initialization to EPC init callback (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: pci-epf-test: Refactor pci_epf_test_unbind() function (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Rename BME to Bus Master Enable (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Rename core_init() callback in 'struct pci_epc_event_ops' to epc_init() (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: pci-epf-test: Use 'msix_capable' flag directly in pci_epf_test_alloc_space() (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in pci_epf_test_core_init() (Myron Stowe) [RHEL-59033]
  - PCI: endpoint: Remove unused field in struct pci_epf_group (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: qcom: x1e80100: Make the MHI reg region mandatory (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: generic: Add ats-supported property (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: mediatek,mt7621-pcie: Add PCIe host topology ASCII graph (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: qcom: Add OPP table (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: xilinx-cpm: Fix overlapping of bridge register and 32-bit BAR addresses (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: rockchip: Add DesignWare based PCIe Endpoint controller (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: rockchip-dw-pcie: Fix description of legacy IRQ (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: rockchip-dw-pcie: Prepare for Endpoint mode support (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: snps,dw-pcie-ep: Add tx_int{a,b,c,d} legacy IRQs (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: snps,dw-pcie-ep: Add vendor specific interrupt-names (Myron Stowe) [RHEL-59033]
  - dt-bindings: PCI: snps,dw-pcie-ep: Add vendor specific reg-name (Myron Stowe) [RHEL-59033]
  - PCI: Relax bridge window tail sizing rules (Myron Stowe) [RHEL-59033]
  - PCI: Make minimum bridge window alignment reference more obvious (Myron Stowe) [RHEL-59033]
  - PCI: Fix resource double counting on remove & rescan (Myron Stowe) [RHEL-59033]
  - resource: Export find_resource_space() (Myron Stowe) [RHEL-59033]
  - resource: Handle simple alignment inside __find_resource_space() (Myron Stowe) [RHEL-59033]
  - resource: Use typedef for alignf callback (Myron Stowe) [RHEL-59033]
  - resource: Document find_resource_space() and resource_constraint (Myron Stowe) [RHEL-59033]
  - resource: Rename find_resource() to find_resource_space() (Myron Stowe) [RHEL-59033]
  - PCI: Warn on missing cfg_access_lock during secondary bus reset (Myron Stowe) [RHEL-59033]
  - PCI/DPC: Disable DPC service on suspend (Myron Stowe) [RHEL-59033]
  - PCI: Use preserve_config in place of pci_flags (Myron Stowe) [RHEL-59033]
  - PCI: Unify ACPI and DT 'preserve config' support (Myron Stowe) [RHEL-59033]
  - PCI: of: Add of_pci_preserve_config() for per-host bridge support (Myron Stowe) [RHEL-59033]
  - PCI: Move PRESERVE_BOOT_CONFIG _DSM evaluation to pci_register_host_bridge() (Myron Stowe) [RHEL-59033]
  - drm/vboxvideo: fix mapping leaks (Myron Stowe) [RHEL-59033]
  - PCI: Add managed pcim_iomap_range() (Myron Stowe) [RHEL-59033]
  - PCI: Remove legacy pcim_release() (Myron Stowe) [RHEL-59033]
  - PCI: Fix devres regression in pci_intx() (Myron Stowe) [RHEL-59033]
  - PCI: Add managed pcim_intx() (Myron Stowe) [RHEL-59033]
  - PCI: Give pcim_set_mwi() its own devres cleanup callback (Myron Stowe) [RHEL-59033]
  - PCI: Move struct pci_devres.pinned bit to struct pci_dev (Myron Stowe) [RHEL-59033]
  - PCI: Remove struct pci_devres.enabled status bit (Myron Stowe) [RHEL-59033]
  - PCI: Document hybrid devres hazards (Myron Stowe) [RHEL-59033]
  - PCI: Add managed pcim_request_region() (Myron Stowe) [RHEL-59033]
  - PCI: Deprecate pcim_iomap_table(), pcim_iomap_regions_request_all() (Myron Stowe) [RHEL-59033]
  - PCI: Add managed partial-BAR request and map infrastructure (Myron Stowe) [RHEL-59033]
  - PCI: Add devres helpers for iomap table (Myron Stowe) [RHEL-59033]
  - PCI: Add and use devres helper for bit masks (Myron Stowe) [RHEL-59033]
  - resource: add walk_system_ram_res_rev() (Myron Stowe) [RHEL-59033]
  - kernel/resource: Increment by align value in get_free_mem_region() (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support (Myron Stowe) [RHEL-59033]
  - resource: Unify next_resource() and next_resource_skip_children() (Myron Stowe) [RHEL-59033]
  - resource: Reuse for_each_resource() macro (Myron Stowe) [RHEL-59033]
  - PCI: move OF status = "disabled" detection to dev->match_driver (Myron Stowe) [RHEL-59033]
  - PCI: Use of_property_present() for testing DT property presence (Myron Stowe) [RHEL-59033]
  - resource: Replace printk(KERN_WARNING) by pr_warn(), printk() by pr_info() (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (Myron Stowe) [RHEL-59033]
  - misc: pci_endpoint_test: Aggregate params checking for xfer (Myron Stowe) [RHEL-59033]
  - resource: add define macro for register address resources (Myron Stowe) [RHEL-59033]
  - kernel/resource: fix kfree() of bootmem memory again (Myron Stowe) [RHEL-59033]
  - PCI: of: Allow matching of an interrupt-map local to a PCI device (Myron Stowe) [RHEL-59033]
  - RDMA: Remove unnecessary ternary operators (Kamal Heib) [RHEL-52273]
  - RDMA/qedr: Remove a duplicate assignment in qedr_create_gsi_qp() (Kamal Heib) [RHEL-52273]
  - RDMA/irdma: Annotate flexible array with __counted_by() in struct irdma_qvlist_info (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Remove duplicate assignment (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Add AE for too many RNRS (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Set the CQ read threshold for GEN 1 (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Validate max_send_wr and max_recv_wr (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Avoid free the non-cqp_request scratch (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Fix support for 64k pages (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Ensure iWarp QP queue memory is OS paged aligned (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Add wait for suspend on SQD (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Do not modify to SQD on error (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Use crypto_shash_digest() in irdma_ieq_check_mpacrc() (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Add support to re-register a memory region (Kamal Heib) [RHEL-49824]
  - RDMA/irdma: Replace deprecated strncpy (Kamal Heib) [RHEL-49824]
  - ibmvnic: Inspect header requirements before using scrq direct (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Perform tx CSO during send scrq direct (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Only record tx completed bytes once per handler (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Introduce send sub-crq direct (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Remove duplicate memory barriers in tx (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Reduce memcpys in tx descriptor generation (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Use header len helper functions on tx (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Only replenish rx pool when resources are getting low (Mamatha Inamdar) [RHEL-53368]
  - ibmvnic: Return error code on TX scrq flush fail (Mamatha Inamdar) [RHEL-53368]
  - ethtool: check device is present when getting link settings (Michal Schmidt) [RHEL-57750]
  - net: ethtool: Allow write mechanism of LPL and both LPL and EPL (Michal Schmidt) [RHEL-57750]
  - ethtool: Fix context creation with no parameters (Michal Schmidt) [RHEL-57750]
  - net: ethtool: fix off-by-one error in max RSS context IDs (Michal Schmidt) [RHEL-57750]
  - ethtool: fix the state of additional contexts with old API (Michal Schmidt) [RHEL-57750]
  - ethtool: fix setting key and resetting indir at once (Michal Schmidt) [RHEL-57750]
  - ethtool: rss: echo the context number back (Michal Schmidt) [RHEL-57750]
  - netlink: specs: correct the spec of ethtool (Michal Schmidt) [RHEL-57750]
  - net: Add struct kernel_ethtool_ts_info (Michal Schmidt) [RHEL-57750]
  - net: Change the API of PHY default timestamp to MAC (Michal Schmidt) [RHEL-57750]
  - net: phy: bcm54811: New link mode for BroadR-Reach (Michal Schmidt) [RHEL-57750]
  - net: ethtool: pse-pd: Fix possible null-deref (Michal Schmidt) [RHEL-57750]
  - net: ethtool: Monotonically increase the message sequence number (Michal Schmidt) [RHEL-57750]
  - net: ethtool: let drivers declare max size of RSS indir table and key (Michal Schmidt) [RHEL-57750]
  - net: ethtool: let drivers remove lost RSS contexts (Michal Schmidt) [RHEL-57750]
  - net: ethtool: Fix RSS setting (Michal Schmidt) [RHEL-57750]
  - ethtool: use the rss context XArray in ring deactivation safety-check (Michal Schmidt) [RHEL-57750]
  - ethtool: fail closed if we can't get max channel used in indirection tables (Michal Schmidt) [RHEL-57750]
  - ethtool: netlink: do not return SQI value if link is down (Michal Schmidt) [RHEL-57750]
  - netlink: specs: Expand the PSE netlink command with C33 pw-limit attributes (Michal Schmidt) [RHEL-57750]
  - net: ethtool: Add new power limit get and set features (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Add new power limit get and set c33 features (Michal Schmidt) [RHEL-57750]
  - netlink: specs: Expand the PSE netlink command with C33 new features (Michal Schmidt) [RHEL-57750]
  - net: ethtool: pse-pd: Expand C33 PSE status with class, power and extended state (Michal Schmidt) [RHEL-57750]
  - ethtool: move firmware flashing flag to struct ethtool_netdev_state (Michal Schmidt) [RHEL-57750]
  - net: ethtool: fix compat with old RSS context API (Michal Schmidt) [RHEL-57750]
  - net: ethtool: Fix the panic caused by dev being null when dumping coalesce (Michal Schmidt) [RHEL-57750]
  - net: ethtool: use the tracking array for get_rxfh on custom RSS contexts (Michal Schmidt) [RHEL-57750]
  - net: ethtool: add a mutex protecting RSS contexts (Michal Schmidt) [RHEL-57750]
  - net: ethtool: add an extack parameter to new rxfh_context APIs (Michal Schmidt) [RHEL-57750]
  - net: ethtool: let the core choose RSS context IDs (Michal Schmidt) [RHEL-57750]
  - net: ethtool: record custom RSS contexts in the XArray (Michal Schmidt) [RHEL-57750]
  - net: ethtool: attach an XArray of custom RSS contexts to a netdevice (Michal Schmidt) [RHEL-57750]
  - net: move ethtool-related netdev state into its own struct (Michal Schmidt) [RHEL-57750]
  - ethtool: Add ability to flash transceiver modules' firmware (Michal Schmidt) [RHEL-57750]
  - ethtool: cmis_fw_update: add a layer for supporting firmware update using CDB (Michal Schmidt) [RHEL-57750]
  - ethtool: cmis_cdb: Add a layer for supporting CDB commands (Michal Schmidt) [RHEL-57750]
  - net: sfp: Add more extended compliance codes (Michal Schmidt) [RHEL-57750]
  - ethtool: Veto some operations during firmware flashing process (Michal Schmidt) [RHEL-57750]
  - net: no longer acquire RTNL in threaded_show() (Michal Schmidt) [RHEL-57750]
  - ethtool: Add flashing transceiver modules' firmware notifications ability (Michal Schmidt) [RHEL-57750]
  - ethtool: Add an interface for flashing transceiver modules' firmware (Michal Schmidt) [RHEL-57750]
  - ethtool: Add ethtool operation to write to a transceiver module EEPROM (Michal Schmidt) [RHEL-57750]
  - ethtool: provide customized dim profile management (Michal Schmidt) [RHEL-57750]
  - netlink: specs: Fix pse-set command attributes (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP (Michal Schmidt) [RHEL-57750]
  - netlink: introduce type-checking attribute iteration (Michal Schmidt) [RHEL-57750]
  - linux/dim: move useful macros to .h file (Michal Schmidt) [RHEL-57750]
  - dim: initialize all struct fields (Michal Schmidt) [RHEL-57750]
  - net: ethtool: remove unused struct 'cable_test_tdr_req_info' (Michal Schmidt) [RHEL-57750]
  - ethtool: init tsinfo stats if requested (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Use regulator framework within PSE framework (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Add support for setup_pi_matrix callback (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Add support for PSE PIs (Michal Schmidt) [RHEL-57750]
  - netlink: specs: Expand the pse netlink command with PoE interface (Michal Schmidt) [RHEL-57750]
  - netlink: specs: Modify pse attribute prefix (Michal Schmidt) [RHEL-57750]
  - net: ethtool: pse-pd: Expand pse commands with the PSE PoE interface (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Introduce PSE types enumeration (Michal Schmidt) [RHEL-57750]
  - ethtool: Expand Ethernet Power Equipment with c33 (PoE) alongside PoDL (Michal Schmidt) [RHEL-57750]
  - net: pse-pd: Rectify and adapt the naming of admin_cotrol member of struct pse_control_config (Michal Schmidt) [RHEL-57750]
  - ethtool: update tsinfo statistics attribute docs with correct type (Michal Schmidt) [RHEL-57750]
  - tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation (Michal Schmidt) [RHEL-57750]
  - netlink: specs: ethtool: define header-flags as an enum (Michal Schmidt) [RHEL-57750]
  - ethtool: add interface to read Tx hardware timestamping statistics (Michal Schmidt) [RHEL-57750]
  - netlink: specs: define ethtool header flags (Michal Schmidt) [RHEL-57750]
  - tools: ynl: ethtool.py: Make tool invokable from any CWD (Michal Schmidt) [RHEL-57750]
  - net: ethtool: Add impedance mismatch result code to cable test (Michal Schmidt) [RHEL-57750]
  - ethtool: remove ethtool_eee_use_linkmodes (Michal Schmidt) [RHEL-57750]
  - ethtool: Add GTP RSS hash options to ethtool.h (Michal Schmidt) [RHEL-57750]
  - ethtool: ignore unused/unreliable fields in set_eee op (Michal Schmidt) [RHEL-57750]
  - tg3: copy only needed fields from userspace-provided EEE data (Michal Schmidt) [RHEL-57750]
  - net: ethtool: eee: Remove legacy _u32 from keee (Michal Schmidt) [RHEL-57750]
  - net: intel: i40e/igc: Remove setting Autoneg in EEE capabilities (Michal Schmidt) [RHEL-57750]
  - tg3: fix bug caused by uninitialized variable (Michal Schmidt) [RHEL-57750]
  - tg3: convert EEE handling to use linkmode bitmaps (Michal Schmidt) [RHEL-57750]
  - net: qlogic: qede: Use linkmode helpers for EEE (Michal Schmidt) [RHEL-57750]
  - net: intel: e1000e: Use linkmode helpers for EEE (Michal Schmidt) [RHEL-57750]
  - net: ethernet: ixgbe: Convert EEE to use linkmodes (Michal Schmidt) [RHEL-57750]
  - net: usb: ax88179_178a: Use linkmode helpers for EEE (Michal Schmidt) [RHEL-57750]
  - net: usb: r8152: Use linkmode helpers for EEE (Michal Schmidt) [RHEL-57750]
  - r8152: select CRC32 and CRYPTO/CRYPTO_HASH/CRYPTO_SHA256 (Michal Schmidt) [RHEL-57750]
  - bnxt: convert EEE handling to use linkmode bitmaps (Michal Schmidt) [RHEL-57750]
  - bnx2x: convert EEE handling to use linkmode bitmaps (Michal Schmidt) [RHEL-57750]
  - net: atlantic: convert EEE handling to use linkmode bitmaps (Michal Schmidt) [RHEL-57750]
  - net: ethtool: avoid rebuilds on UTS_RELEASE change (Michal Schmidt) [RHEL-57750]
  - ethtool: do not use rtnl in ethnl_default_dumpit() (Michal Schmidt) [RHEL-57750]
  - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (Kamal Heib) [RHEL-56247]
  - RDMA/core: Introduce "name_assign_type" for an IB device (Kamal Heib) [RHEL-56247]
  - RDMA: Fix netdev tracker in ib_device_set_netdev (Kamal Heib) [RHEL-56247]
  - RDMA/nldev: Add support to dump device type and parent device if exists (Kamal Heib) [RHEL-56247]
  - RDMA/nldev: Add support to add/delete a sub IB device through netlink (Kamal Heib) [RHEL-56247]
  - RDMA/core: Create GSI QP only when CM is supported (Kamal Heib) [RHEL-56247]
  - RDMA: Set type of rdma_ah to IB for a SMI sub device (Kamal Heib) [RHEL-56247]
  - RDMA/core: Support IB sub device with type "SMI" (Kamal Heib) [RHEL-56247]
  - RDMA/core: Create "issm*" device nodes only when SMI is supported (Kamal Heib) [RHEL-56247]
  - RDMA/device: Return error earlier if port in not valid (Kamal Heib) [RHEL-56247]
  - RDMA: Pass entire uverbs attr bundle to create cq function (Kamal Heib) [RHEL-56247]
  - IB/isert: remove the handling of last WQE reached event (Kamal Heib) [RHEL-56247]
  - IB/core: add support for draining Shared receive queues (Kamal Heib) [RHEL-56247]
  - RDMA/cache: Release GID table even if leak is detected (Kamal Heib) [RHEL-56247]
  - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (Kamal Heib) [RHEL-56247]
  - RDMA/iwcm: Simplify cm_work_handler() (Kamal Heib) [RHEL-56247]
  - RDMA/iwcm: Simplify cm_event_handler() (Kamal Heib) [RHEL-56247]
  - RDMA/iwcm: Change the return type of iwcm_deref_id() (Kamal Heib) [RHEL-56247]
  - RDMA/iwcm: Use list_first_entry() where appropriate (Kamal Heib) [RHEL-56247]
  - RDMA/cma: Fix kmemleak in rdma_core observed during blktests nvme/rdma use siw (Kamal Heib) [RHEL-56247]
  - RDMA/IPoIB: Fix format truncation compilation errors (Kamal Heib) [RHEL-56247]
  - RDMA/core: Remove NULL check before dev_{put, hold} (Kamal Heib) [RHEL-56247]
  - RDMA/ipoib: Remove NULL check before dev_{put, hold} (Kamal Heib) [RHEL-56247]
  - RDMA/core: Add an option to display driver-specific QPs in the rdmatool (Kamal Heib) [RHEL-56247]
  - IB/core: Implement a limit on UMAD receive List (Kamal Heib) [RHEL-56247]
  - RDMA/restrack: Fix potential invalid address access (Kamal Heib) [RHEL-56247]
  - RDMA/cm: Print the old state when cm_destroy_id gets timeout (Kamal Heib) [RHEL-56247]
  - RDMA/cm: add timeout to cm_destroy_id wait (Kamal Heib) [RHEL-56247]
  - RDMA/uverbs: Avoid -Wflex-array-member-not-at-end warnings (Kamal Heib) [RHEL-56247]
  - RDMA/uverbs: Remove flexible arrays from struct *_filter (Kamal Heib) [RHEL-56247]
  - RDMA/device: Fix a race between mad_client and cm_client init (Kamal Heib) [RHEL-56247]
  - RDMA/srpt: fix function pointer cast warnings (Kamal Heib) [RHEL-56247]
  - RDMA/ipoib: Print symbolic error name instead of error code (Kamal Heib) [RHEL-56247]
  - IB/iser: Prevent invalidating wrong MR (Kamal Heib) [RHEL-56247]
  - IB/iser: iscsi_iser.h: fix kernel-doc warning and spellos (Kamal Heib) [RHEL-56247]
  - RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz (Kamal Heib) [RHEL-56247]
  - RDMA/IPoIB: Add tx timeout work to recover queue stop situation (Kamal Heib) [RHEL-56247]
  - RDMA/core: Remove NULL check before dev_{put, hold} (Kamal Heib) [RHEL-56247]
  - RDMA/core: Add support to set privileged QKEY parameter (Kamal Heib) [RHEL-56247]
  - RDMA/core: Fix a couple of obvious typos in comments (Kamal Heib) [RHEL-56247]
  - IB/srp: Annotate struct srp_fr_pool with __counted_by (Kamal Heib) [RHEL-56247]
  - RDMA/core: Annotate struct ib_pkey_cache with __counted_by (Kamal Heib) [RHEL-56247]
  - RDMA: Annotate struct rdma_hw_stats with __counted_by (Kamal Heib) [RHEL-56247]
  - RDMA/core: Add support to dump SRQ resource in RAW format (Kamal Heib) [RHEL-56247]
  - RDMA/core: Add dedicated SRQ resource tracker function (Kamal Heib) [RHEL-56247]
  - RDMA/core: Fix repeated words in comments (Kamal Heib) [RHEL-56247]
  - IB: Use capital "OR" for multiple licenses in SPDX (Kamal Heib) [RHEL-56247]
  - IB/core: Add more speed parsing in ib_get_width_and_speed() (Kamal Heib) [RHEL-56247]
  - RDMA Remove unused function declarations (Kamal Heib) [RHEL-56247]
  - RDMA: Make all 'class' structures const (Kamal Heib) [RHEL-56247]
  - RDMA: Remove unnecessary ternary operators (Kamal Heib) [RHEL-56247]
  - scsi: infiniband: srpt: Remove default fabric ops callouts (Kamal Heib) [RHEL-56247]
  - treewide: use get_random_u32_inclusive() when possible (Kamal Heib) [RHEL-56247]
  - treewide: use get_random_u32_below() instead of deprecated function (Kamal Heib) [RHEL-56247]
  - iommu/hyper-v: Use helper instead of directly accessing affinity (Jerry Snitselaar) [RHEL-55466]
  - iommu: Do not return 0 from map_pages if it doesn't do anything (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Do not allow creating areas without READ or WRITE (Jerry Snitselaar) [RHEL-55466]
  - iommu: Handle iommu faults for a bad iopf setup (Jerry Snitselaar) [RHEL-55466]
  - iommu: Remove unused declaration iommu_sva_unbind_gpasid() (Jerry Snitselaar) [RHEL-55466]
  - MAINTAINERS: Update IOMMU tree location (Jerry Snitselaar) [RHEL-55466]
  - iommu/vt-d: Fix incorrect domain ID in context flush helper (Jerry Snitselaar) [RHEL-54189]
  - arm64: Properly clean up iommu-dma remnants (Jerry Snitselaar) [RHEL-55466]
  - iommu: Restore lost return in iommu_report_device_fault() (Jerry Snitselaar) [RHEL-57229] {CVE-2024-44994}
  - iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace() (Jerry Snitselaar) [RHEL-55466]
  - iommufd/selftest: Make dirty_ops static (Jerry Snitselaar) [RHEL-55466]
  - iommufd: merge commit fixup for pfn_reader_user_init (Jerry Snitselaar) [RHEL-55466]
  - Documentation/core-api: correct reference to SWIOTLB_DYNAMIC (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Use atomic_long_try_cmpxchg() in incr_user_locked_vm() (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Put constants for all the uAPI enums (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Fix error pointer checking (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Add check on user response code (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Remove IOMMUFD_PAGE_RESP_FAILURE (Jerry Snitselaar) [RHEL-55199]
  - iommufd: Require drivers to supply the cache_invalidate_user ops (Jerry Snitselaar) [RHEL-55466]
  - iommufd/selftest: Add coverage for IOPF test (Jerry Snitselaar) [RHEL-55199]
  - iommufd/selftest: Add IOPF support for mock device (Jerry Snitselaar) [RHEL-55199]
  - iommufd: Associate fault object with iommufd_hw_pgtable (Jerry Snitselaar) [RHEL-55199]
  - iommufd: Fault-capable hwpt attach/detach/replace (Jerry Snitselaar) [RHEL-55199]
  - iommufd: Add iommufd fault object (Jerry Snitselaar) [RHEL-55199]
  - iommufd: Add fault and response message definitions (Jerry Snitselaar) [RHEL-55199]
  - iommu: Extend domain attach group with handle support (Jerry Snitselaar) [RHEL-55199]
  - iommu: Add attach handle to struct iopf_group (Jerry Snitselaar) [RHEL-55199]
  - iommu: Remove sva handle list (Jerry Snitselaar) [RHEL-55199]
  - iommu: Introduce domain attachment handle (Jerry Snitselaar) [RHEL-55199]
  - iommu: Move IOMMU_DIRTY_NO_CLEAR define (Jerry Snitselaar) [RHEL-55200]
  - iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping (Jerry Snitselaar) [RHEL-55200]
  - iommu/arm-smmu-v3: Add support for dirty tracking in domain alloc (Jerry Snitselaar) [RHEL-55200]
  - iommu/arm-smmu-v3: Add feature detection for HTTU (Jerry Snitselaar) [RHEL-55200]
  - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (Jerry Snitselaar) [RHEL-55200]
  - iommu/arm-smmu-v3: Add support for domain_alloc_user fn (Jerry Snitselaar) [RHEL-55200]
  - Patch:  iommu-io-pgtable-arm-Add-read_and_clear_dirty-support Author: Jerry Snitselaar <jsnitsel@redhat.com> Date:   2024-08-12 22:33:00 -0700 (Jerry Snitselaar) [RHEL-55200]
  - iommu/arm-smmu-v3: add missing MODULE_DESCRIPTION() macro (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-v3: Shrink the strtab l1_desc array (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-v3: Do not zero the strtab twice (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-v3: Allow setting a S1 domain to a PASID (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Allow a PASID to be set when RID is IDENTITY/BLOCKED (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Test the STE S1DSS functionality (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Allow IDENTITY/BLOCKED to be set while PASID is used (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Put the SVA mmu notifier in the smmu_domain (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Keep track of arm_smmu_master_domain for SVA (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Make SVA allocate a normal arm_smmu_domain (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Thread SSID through the arm_smmu_attach_*() interface (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Do not use master->sva_enable to restrict attaches (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Add ssid to struct arm_smmu_master_domain (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Make changing domains be hitless for ATS (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Make smmu_domain->devices into an allocated list (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Start building a generic PASID layer (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Convert to domain_alloc_sva() (Jerry Snitselaar) [RHEL-36247]
  - iommu/arm-smmu-v3: Use *-y instead of *-objs in Makefile (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-v3: Avoid uninitialized asid in case of error (Jerry Snitselaar) [RHEL-55448]
  - iommu: arm-smmu: Fix Tegra workaround for PAGE_SIZE mappings (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom: Register the TBU driver in qcom_smmu_impl_init (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom: record reason for deferring probe (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu: Pretty-print context fault related regs (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom-debug: Do not print for handled faults (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu: Add CB prefix to register bitfields (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom: Don't build debug features as a kernel module (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom: Use the custom fault handler on more platforms (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom: Use a custom context fault handler for sdm845 (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu: Allow using a threaded handler for context interrupts (Jerry Snitselaar) [RHEL-55448]
  - iommu/arm-smmu-qcom-debug: Add support for TBUs (Jerry Snitselaar) [RHEL-55448]
  - iommu/vt-d: Fix identity map bounds in si_domain_init() (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Fix aligned pages in calculate_psi_aligned_address() (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Limit max address mask to MAX_AGAW_PFN_WIDTH (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Refactor PCI PRI enabling/disabling callbacks (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Add helper to flush caches for context change (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Add helper to allocate paging domain (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Downgrade warning for pre-enabled IR (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Remove control over Execute-Requested requests (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Remove comment for def_domain_type (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Handle volatile descriptor status read (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Use try_cmpxchg64() in intel_pasid_get_entry() (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Remove struct intel_svm (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Remove intel_svm_dev (Jerry Snitselaar) [RHEL-55450]
  - iommu/vt-d: Fix missed device TLB cache tag (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Use cache helpers in arch_invalidate_secondary_tlbs (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Use cache_tag_flush_range() in cache_invalidate_user (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Cleanup use of iommu_flush_iotlb_psi() (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Use cache_tag_flush_range_np() in iotlb_sync_map (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Use cache_tag_flush_range() in tlb_sync (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Use cache_tag_flush_all() in flush_iotlb_all (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Add trace events for cache tag interface (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Add cache tag invalidation helpers (Jerry Snitselaar) [RHEL-54189]
  - iommu/vt-d: Add cache tag assignment interface (Jerry Snitselaar) [RHEL-54189]
  - iommu/amd: Convert comma to semicolon (Jerry Snitselaar) [RHEL-55450]
  - iommu/amd: Use try_cmpxchg64() in v2_alloc_pte() (Jerry Snitselaar) [RHEL-55450]
  - iommu/amd: Change log message severity (Jerry Snitselaar) [RHEL-55450]
  - iommu/amd: Do not enable SNP when V2 page table is enabled (Jerry Snitselaar) [RHEL-55450]
  - iommu: account IOMMU allocated memory (Jerry Snitselaar) [RHEL-54186]
  - iommu: observability of the IOMMU allocations (Jerry Snitselaar) [RHEL-54186]
  - iommu/tegra-smmu: use page allocation function provided by iommu-pages.h (Jerry Snitselaar) [RHEL-54186]
  - iommu/io-pgtable-arm: use page allocation function provided by iommu-pages.h (Jerry Snitselaar) [RHEL-54186]
  - iommu/amd: use page allocation function provided by iommu-pages.h (Jerry Snitselaar) [RHEL-54186]
  - iommu/dma: use iommu_put_pages_list() to releae freelist (Jerry Snitselaar) [RHEL-54186]
  - iommu/vt-d: add wrapper functions for page allocations (Jerry Snitselaar) [RHEL-54186]
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Jerry Snitselaar) [RHEL-55466]
  - swiotlb: fix kernel-doc description for swiotlb_del_transient (Jerry Snitselaar) [RHEL-55466]
  - swiotlb: reduce swiotlb pool lookups (Jerry Snitselaar) [RHEL-55466]
  - change alloc_pages name in dma_map_ops to avoid name conflicts (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: benchmark: Don't starve others when doing the test (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: benchmark: handle NUMA_NO_NODE correctly (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: benchmark: fix node id validation (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: benchmark: fix up kthread-related error handling (Jerry Snitselaar) [RHEL-55466]
  - wifi: ath11k: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-55466]
  - wifi: ath10k: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-55466]
  - RDMA/usnic: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-55466]
  - vhost-vdpa: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-55466]
  - vfio/type1: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-55466]
  - iommufd: Use iommu_paging_domain_alloc() (Jerry Snitselaar) [RHEL-55466]
  - iommu: Add iommu_paging_domain_alloc() interface (Jerry Snitselaar) [RHEL-55466]
  - arm64: dts: fvp: Enable PCIe ATS for Base RevC FVP (Jerry Snitselaar) [RHEL-55448]
  - iommu/of: Support ats-supported device-tree property (Jerry Snitselaar) [RHEL-55466]
  - dt-bindings: PCI: generic: Add ats-supported property (Jerry Snitselaar) [RHEL-55448]
  - iommu: Remove iommu_fwspec ops (Jerry Snitselaar) [RHEL-55466]
  - OF: Simplify of_iommu_configure() (Jerry Snitselaar) [RHEL-55466]
  - ACPI: Retire acpi_iommu_fwspec_ops() (Jerry Snitselaar) [RHEL-55466]
  - iommu: Resolve fwspec ops automatically (Jerry Snitselaar) [RHEL-55466]
  - iommu/tegra-smmu: Pass correct fwnode to iommu_fwspec_init() (Jerry Snitselaar) [RHEL-55466]
  - iommu/iova: Add missing MODULE_DESCRIPTION() macro (Jerry Snitselaar) [RHEL-55466]
  - iommu/dma: Prune redundant pgprot arguments (Jerry Snitselaar) [RHEL-55466]
  - iommu/dma: Fix domain init (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: Simplify arch_setup_dma_ops() (Jerry Snitselaar) [RHEL-55466]
  - iommu/dma: Centralise iommu_setup_dma_ops() (Jerry Snitselaar) [RHEL-55466]
  - iommu/dma: Make limit checks self-contained (Jerry Snitselaar) [RHEL-55466]
  - dma-mapping: Add helpers for dma_range_map bounds (Jerry Snitselaar) [RHEL-55466]
  - OF: Simplify DMA range calculations (Jerry Snitselaar) [RHEL-55466]
  - OF: Retire dma-ranges mask workaround (Jerry Snitselaar) [RHEL-55466]
  - selftests/dma:remove unused variable (Jerry Snitselaar) [RHEL-55466]
  - Documentation/core-api: add swiotlb documentation (Jerry Snitselaar) [RHEL-55466]
  - iommu: virtio: drop owner assignment (Jerry Snitselaar) [RHEL-55466]
  - iommu: Make iommu_sva_domain_alloc() static (Jerry Snitselaar) [RHEL-55466]
  - kthread: add kthread_stop_put (Jerry Snitselaar) [RHEL-55466]
  - uapi: Add missing _UAPI prefix to <asm-generic/types.h> include guard (Waiman Long) [RHEL-50732]
  - hugetlb_encode.h: fix undefined behaviour (34 << 26) (Waiman Long) [RHEL-50732]
  - Revert "fw loader: Remove the now superfluous sentinel element from ctl_table array" (Eric Chanudet) [RHEL-50129]
  - net: add debugging checks in skb_attempt_defer_free() (Wander Lairson Costa) [RHEL-9145]
  - net: optimize ____napi_schedule() to avoid extra NET_RX_SOFTIRQ (Wander Lairson Costa) [RHEL-9145]
  - net: call skb_defer_free_flush() before each napi_poll() (Wander Lairson Costa) [RHEL-9145]
  - net: do not consume a cacheline for system_page_pool (Wander Lairson Costa) [RHEL-9145]
  - tcp: drop skb dst in tcp_rcv_established() (Wander Lairson Costa) [RHEL-9145]
  - net: make sure net_rx_action() calls skb_defer_free_flush() (Wander Lairson Costa) [RHEL-9145]
  - net: call skb_defer_free_flush() from __napi_busy_loop() (Wander Lairson Costa) [RHEL-9145]
  - net: do not provide hard irq safety for sd->defer_lock (Wander Lairson Costa) [RHEL-9145]
  - net: avoid irqsave in skb_defer_free_flush (Wander Lairson Costa) [RHEL-9145]
  - net: avoid strange behavior with skb_defer_max == 1 (Wander Lairson Costa) [RHEL-9145]
  - net: add skb_defer_max sysctl (Wander Lairson Costa) [RHEL-9145]
  - net: use napi_consume_skb() in skb_defer_free_flush() (Wander Lairson Costa) [RHEL-9145]
  - net: Rename rps_lock to backlog_lock. (Wander Lairson Costa) [RHEL-9145]
  - net: Use backlog-NAPI to clean up the defer_list. (Wander Lairson Costa) [RHEL-9145]
  - net: Allow to use SMP threads for backlog NAPI. (Wander Lairson Costa) [RHEL-9145]
  - net: Remove conditional threaded-NAPI wakeup based on task state. (Wander Lairson Costa) [RHEL-9145]
  - net: add generic percpu page_pool allocator (Wander Lairson Costa) [RHEL-9145]
  - net: optimize napi_threaded_poll() vs RPS/RFS (Wander Lairson Costa) [RHEL-9145]
  - net: make napi_threaded_poll() aware of sd->defer_list (Wander Lairson Costa) [RHEL-9145]
  - net: optimize napi_schedule_rps() (Wander Lairson Costa) [RHEL-9145]
  - net: add softnet_data.in_net_rx_action (Wander Lairson Costa) [RHEL-9145]
  - net: napi_schedule_rps() cleanup (Wander Lairson Costa) [RHEL-9145]
  - net: fix possible race in skb_attempt_defer_free() (Wander Lairson Costa) [RHEL-9145]
  - net: generalize skb freeing deferral to per-cpu lists (Wander Lairson Costa) [RHEL-9145]
  - net/tls: Fix another skb memory leak when running kTLS traffic (Wander Lairson Costa) [RHEL-9145]
  - net/tls: Fix skb memory leak when running kTLS traffic (Wander Lairson Costa) [RHEL-9145]
  - tcp: do not call tcp_cleanup_rbuf() if we have a backlog (Wander Lairson Costa) [RHEL-9145]
  - tcp: Add a stub for sk_defer_free_flush() (Wander Lairson Costa) [RHEL-9145]
  - tcp: add a missing sk_defer_free_flush() in tcp_splice_read() (Wander Lairson Costa) [RHEL-9145]
  - net: Flush deferred skb free on socket destroy (Wander Lairson Costa) [RHEL-9145]
  - tcp: defer skb freeing after socket lock is released (Wander Lairson Costa) [RHEL-9145]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-522.el9]
changelog:
  - tcp: fix mptcp DSS corruption due to large pmtu xmit (Paolo Abeni) [RHEL-55470]
  - mptcp: handle consistently DSS corruption (Paolo Abeni) [RHEL-55470]
  - redhat: spec: add drivers/net to kselftest package (Ivan Vecera) [RHEL-57764]
  - netdevsim: fix backwards compatibility in nsim_get_iflink() (Ivan Vecera) [RHEL-57764]
  - testing: net-drv: use stats64 for testing (Ivan Vecera) [RHEL-57764]
  - net: selftest: add test for netdev netlink queue-get API (Ivan Vecera) [RHEL-57764]
  - netdevsim: add NAPI support (Ivan Vecera) [RHEL-57764]
  - selftests: net: py: check process exit code in bkg() and background cmd() (Ivan Vecera) [RHEL-57764]
  - selftests: drv-net: add require_XYZ() helpers for validating env (Ivan Vecera) [RHEL-57764]
  - selftests: drv-net: add a TCP ping test case (and useful helpers) (Ivan Vecera) [RHEL-57764]
  - selftests: net: support matching cases by name prefix (Ivan Vecera) [RHEL-57764]
  - selftests: drv-net: add a trivial ping test (Ivan Vecera) [RHEL-57764]
  - selftests: drv-net: construct environment for running tests which require an endpoint (Ivan Vecera) [RHEL-57764]
  - selftests: drv-net: factor out parsing of the env (Ivan Vecera) [RHEL-57764]
  - selftests: drv-net: define endpoint structures (Ivan Vecera) [RHEL-57764]
  - selftests: net: set the exit code correctly in Python tests (Ivan Vecera) [RHEL-57764]
  - selftests: net: fix counting totals when some checks fail (Ivan Vecera) [RHEL-57764]
  - net: netdevsim: select PAGE_POOL in Kconfig (Ivan Vecera) [RHEL-57764]
  - selftests: net: exercise page pool reporting via netlink (Ivan Vecera) [RHEL-57764]
  - selftests: net: support use of NetdevSimDev under "with" in python (Ivan Vecera) [RHEL-57764]
  - selftests: net: print full exception on failure (Ivan Vecera) [RHEL-57764]
  - selftests: net: print report check location in python tests (Ivan Vecera) [RHEL-57764]
  - tools: ynl: don't return None for dumps (Ivan Vecera) [RHEL-57764]
  - net: netdevsim: add some fake page pool use (Ivan Vecera) [RHEL-57764]
  - selftests: net: reuse common code in bpf_offload (Ivan Vecera) [RHEL-57764]
  - testing: net-drv: add a driver test for stats reporting (Ivan Vecera) [RHEL-57764]
  - selftests: drivers: add scaffolding for Netlink tests in Python (Ivan Vecera) [RHEL-57764]
  - netdevsim: report stats by default, like a real device (Ivan Vecera) [RHEL-57764]
  - selftests: nl_netdev: add a trivial Netlink netdev test (Ivan Vecera) [RHEL-57764]
  - selftests: net: add scaffolding for Netlink tests in Python (Ivan Vecera) [RHEL-57764]
  - selftests: netdevsim: set test timeout to 10 minutes (Ivan Vecera) [RHEL-57764]
  - selftests: netdevsim: add a config file (Ivan Vecera) [RHEL-57764]
  - selftests: Introduce Makefile variable to list shared bash scripts (Ivan Vecera) [RHEL-57764]
  - tools/net/ynl: Report netlink errors without stacktrace (Ivan Vecera) [RHEL-57764]
  - tools/net/ynl: Add --output-json arg to ynl cli (Ivan Vecera) [RHEL-57764]
  - netdev_features: remove NETIF_F_ALL_FCOE (Michal Schmidt) [RHEL-59091]
  - netdev_features: convert NETIF_F_FCOE_MTU to dev->fcoe_mtu (Michal Schmidt) [RHEL-59091]
  - netdev_features: convert NETIF_F_NETNS_LOCAL to dev->netns_local (Michal Schmidt) [RHEL-59091]
  - netdev_features: convert NETIF_F_LLTX to dev->lltx (Michal Schmidt) [RHEL-59091]
  - netdevice: convert private flags > BIT(31) to bitfields (Michal Schmidt) [RHEL-59091]
  - RDMA/cxgb4: Added NULL check for lookup_atid (Kamal Heib) [RHEL-61394]
  - RDMA/cxgb4: Remove unused declarations (Kamal Heib) [RHEL-61394]
  - RDMA/cxgb4: use dma_mmap_coherent() for mapping non-contiguous memory (Kamal Heib) [RHEL-61394]
  - RDMA/cxgb4: Delete unused c4iw_ep_redirect prototype (Kamal Heib) [RHEL-61394]
  - RDMA/cxgb4: Check skb value for failure to allocate (Kamal Heib) [RHEL-61394]
  - RDMA/cxgb4: Set sq_sig_type correctly (Kamal Heib) [RHEL-61394]
  - crypto: qat - remove unused adf_devmgr_get_first (Vladis Dronov) [RHEL-52749]
  - crypto: qat/qat_4xxx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-52749]
  - crypto: qat/qat_420xx - fix off by one in uof_get_name() (Vladis Dronov) [RHEL-52749]
  - crypto: qat - remove check after debugfs_create_dir() (Vladis Dronov) [RHEL-52749]
  - crypto: qat - Remove trailing space after \n newline (Vladis Dronov) [RHEL-52749]
  - crypto: qat - fix "Full Going True" macro definition (Vladis Dronov) [RHEL-52749]
  - crypto: qat - Use static_assert() to check struct sizes (Vladis Dronov) [RHEL-52749]
  - crypto: qat - allow disabling SR-IOV VFs (Vladis Dronov) [RHEL-52749]
  - crypto: qat - ensure correct order in VF restarting handler (Vladis Dronov) [RHEL-52749]
  - crypto: qat - fix recovery flow for VFs (Vladis Dronov) [RHEL-52749]
  - crypto: qat - disable IOV in adf_dev_stop() (Vladis Dronov) [RHEL-52749]
  - crypto: qat - preserve ADF_GENERAL_SEC (Vladis Dronov) [RHEL-52749]
  - crypto: qat - fix unintentional re-enabling of error interrupts (Vladis Dronov) [RHEL-52749]
  - crypto: qat - extend scope of lock in adf_cfg_add_key_value_param() (Vladis Dronov) [RHEL-52749]
  - Documentation: qat: fix auto_reset attribute details (Vladis Dronov) [RHEL-52749]
  - crypto: qat - initialize user_input.lock for rate_limiting (Vladis Dronov) [RHEL-52749]
  - crypto: qat - make adf_ctl_class constant (Vladis Dronov) [RHEL-52749]
  - crypto: qat - Fix typo (Vladis Dronov) [RHEL-52749]
  - crypto: qat - fix linking errors when PCI_IOV is disabled (Vladis Dronov) [RHEL-52749]
  - attr: block mode changes of symlinks (CKI Backport Bot) [RHEL-60822]
  - selftests: netfilter: Fix nft_audit.sh for newer nft binaries (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: prevent nf_skb_duplicated corruption (Florian Westphal) [RHEL-60554]
  - selftests: netfilter: add test case for recent mismatch bug (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: annotate data-races around element expiration (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: store new sets in dedicated list (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: Keep deleted flowtable hooks until after RCU (Florian Westphal) [RHEL-60554]
  - netfilter: nft_dynset: annotate data-races around set timeout (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: reject expiration higher than timeout (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: reject element expiration with no timeout (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire (Florian Westphal) [RHEL-60554]
  - netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level() (Florian Westphal) [RHEL-60554]
  - netfilter: nft_socket: make cgroupsv2 matching work with namespaces (Florian Westphal) [RHEL-60554]
  - netfilter: nft_socket: fix sk refcount leaks (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: restore IP sanity checks for netdev/egress (Florian Westphal) [RHEL-60554]
  - netfilter: flowtable: validate vlan header (Florian Westphal) [RHEL-60554]
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Florian Westphal) [RHEL-60554]
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: Introduce nf_tables_getobj_single (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: Audit log dump reset after the fact (Florian Westphal) [RHEL-60554]
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal) [RHEL-60554]
  - netfilter: nft_set_pipapo_avx2: disable softinterrupts (Florian Westphal) [RHEL-60554]
  - netfilter: nf_set_pipapo: fix initial map fill (Florian Westphal) [RHEL-60554]
  - netfilter: ctnetlink: use helper function to calculate expect ID (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: rise cap on SELinux secmark context (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal) [RHEL-60554]
  - netfilter: nft_payload: restore vlan q-in-q match support (Florian Westphal) [RHEL-60554]
  - netfilter: nft_payload: skbuff vlan metadata mangle support (Florian Westphal) [RHEL-60554]
  - netfilter: nft_payload: rebuild vlan header on h_proto access (Florian Westphal) [RHEL-60554]
  - netfilter: nft_payload: rebuild vlan header when needed (Florian Westphal) [RHEL-60554]
  - netfilter: nft_payload: move struct nft_payload_set definition where it belongs (Florian Westphal) [RHEL-60554]
  - netfilter: nf_tables: add and use BE register load-store helpers (Florian Westphal) [RHEL-60554]
  - wireguard: send: annotate intentional data race in checking empty queue (CKI Backport Bot) [RHEL-60227]
  - wireguard: queueing: annotate intentional data race in cpu round robin (CKI Backport Bot) [RHEL-60227]
  - dpll: extend lock_status_get() op by status error and expose to user (Petr Oros) [RHEL-59895]
  - dpll: extend uapi by lock status error attribute (Petr Oros) [RHEL-59895]
  - platform/x86/intel-uncore-freq: Add efficiency latency control to sysfs interface (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Add support for efficiency latency control (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Do not present separate package-die domain (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Use generic helpers for current frequency (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Rename the sysfs helper macro names (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Get rid of uncore_read_freq driver API (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Use uncore_index with read_control_freq (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Get rid of magic min_max argument (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Get rid of magic values (David Arcari) [RHEL-46062]
  - platform/x86/intel-uncore-freq: Re-arrange bit masks (David Arcari) [RHEL-46062]
  - platform/x86: intel-uncore-freq: Switch to new Intel CPU model defines (David Arcari) [RHEL-46062]
  - selftests: forwarding: router_mpath_hash: Add a new selftest (Ivan Vecera) [RHEL-59087]
  - selftests: forwarding: lib: Split sysctl_save() out of sysctl_set() (Ivan Vecera) [RHEL-59087]
  - net: ipv4: Add a sysctl to set multipath hash seed (Ivan Vecera) [RHEL-59087]
  - net: ipv4,ipv6: Pass multipath hash computation through a helper (Ivan Vecera) [RHEL-59087]
  - Enable cryptographic curve25519 config flag for PowerPC (Mamatha Inamdar) [RHEL-52758]
  - crypto: vmx - Improved AES/XTS performance of 6-way unrolling for ppc (Mamatha Inamdar) [RHEL-52758]
  - crypto: ppc/curve25519 - Low-level primitives for ppc64le (Mamatha Inamdar) [RHEL-52758]
  - crypto: ppc/curve25519 - Core functions for ppc64le (Mamatha Inamdar) [RHEL-52758]
  - crypto: ppc/curve25519 - Update Kconfig and Makefile for ppc64le (Mamatha Inamdar) [RHEL-52758]


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-2
changelog:
  - Rebuild with openssl3, presumably in a buildroot with xmlsec1
    linked against openssl3
  - Resolves: rhbz#1962052 - lasso: Port to OpenSSL 3.0


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-4
changelog:
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-5
changelog:
  - Don't run configure twice
  - Resolves: rhbz#1935987 - lasso implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-7
changelog:
  - Fix dead code issue
  - Resolves: rhbz#1966606: CVE-2021-28091 lasso: XML signature wrapping
                            vulnerability when parsing SAML responses


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-6
changelog:
  - Resolves: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Jakub Hrozek <jhrozek@redhat.com> - 2.7.0-9
changelog:
  - Bump the test timeout again
  - Related: rhbz#1984822 - lasso: FTBFS in test suite due to short test
                             timeout (potentially OpenSSL-related)


author: Petr Menšík <pemensik@redhat.com> - 1.7.1-2
changelog:
  - Use make_build and make_install macro instead of make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Lescak <rlescak@redhat.com> - 1.7.1-9
changelog:
  - Fix for CVE-2020-19860 ldns: heap overread vulnerability (#2051211)
  - Added also patch for deprecated distutils Python module used in build


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Dodji Seketeli <dodji@redhat.com> - 1.8.1-1
changelog:
  - Update to upsteram fixes up to libabigail-1.8.1
    This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning
  -Resolves: rhbz#1901016


author: Dodji Seketeli <dodji@redhat.com> - 2.1-1
changelog:
  - Update to upstream 2.1 release.
  - Remove the now useless text about getting the source from git.
  - Update the license reference.
  - Resolves: rhbz#1944096


author: Dodji Seketeli <dodji@redhat.com> - 2.3-1
changelog:
  - Update to upstream 2.3
  - Remove the dos2unix surgery as it's now useless
  - Update for the soname bump
  - Resolves: RHELPLAN-154803


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to upstream 2.4
  - Use SPDX licensing naming
  - Build BTF support
  - Add BuildRequires: libbpf-devel
  - Update for SONAME bump
  - Show details about the check and check-self-targets targets
    separatly.
  - Resolves: RHEL-12491


author: Dodji Seketeli <dodji@redhat.com> - 2.4-2
changelog:
  - Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16614
  - Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
    Resolves: https://issues.redhat.com/browse/RHEL-16629
  - Add git as a build requirement as we need git to apply the patches
    aboves that apply binaries.
  - Use %autosetup to handle applying the patches using git.
  - autoreconf after the patches touched at least one Makefile.am file.


author: Dodji Seketeli <dodji@redhat.com> - 2.5-1
changelog:
  - Update to upstream 2.5 tarball
  - Drop patches (as they are now upstream):
    0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
    0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  - Add BuildRequires: python3-devel
  - Remove BuildRequires: %{_bindir}/python3


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Richard Hughes <richard@hughsie.com> 0.7.18-5
changelog:
  - Backport a patch from upstream to fix handling unknown tags in AppStream metadata
  - Resolves: #RHEL-28856


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-1
changelog:
  - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1)


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.3.0 base"


author: Stefan Hajnoczi <stefanha@redhat.com> - 1.2.2-2
changelog:
  - Remove 
  %setup       -q


  /usr/bin/git init -q
  /usr/bin/git config user.name "rpm-build"
  /usr/bin/git config user.email "<rpm-build>"
  /usr/bin/git config gc.auto 0
  /usr/bin/git add --force .
  /usr/bin/git commit -q --allow-empty -a\
  	--author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base"


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Lukas Hrazky <lhrazky@redhat.com> - 0.69.0-1
changelog:
  - Update to 0.69.0
  - Expose librepo max_downloads_per_mirror configuration
  - Fix listing a repository without cpeid (RhBug:2066334)
  - Gracefully handle failure to open repo primary file
  - context: Fix doc dnf_context_install/remove/update/distrosync
  - context: dnf_context_remove accepts `<package-spec>` as dnf, unify code
  - dnf-context: Disconnect signal handler before dropping file monitor ref


author: Jaroslav Rohel <jrohel@redhat.com> - 0.69.0-7
changelog:
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838, RHEL-12123)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279, RHEL-6304)
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474, RHEL-12124)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-9
changelog:
  - Grow memory if applying a query after increasing a number of available
    packages (RHEL-27657)
  - Fix a memory leak in get_best_solution() (RHEL-26226)
  - Fix destructing libdnf::TransactionItem from a base class (RHEL-26240)


author: Petr Pisar <ppisar@redhat.com> - 0.69.0-11
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-1454)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Michal Schmidt <mschmidt@redhat.com> - 1.15.1-1
changelog:
  - Update to upstream release 1.15.1
  - Disable LTO on x86_64 due to memory issues (copied from Fedora)
  - Resolves: rhbz#2040454


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Karel Zak <kzak@redhat.com> 2.37.4-10
changelog:
  - fix #2165981 - fstrim -av fails to trim root filesystem on Red Hat Coreos
  - fix #2141970 - add --cont-clock feature for libuuid and uuidd
  - fix #2133385 - uuidd returns time-based UUIDs when asked for random UUIDs.
  - fix #2156946 - agetty does not handle the \l sequence in /etc/issue correctly
  - fix #2166653 - last(1) should be more robust with work with strings
  - fix #2120246 - use {_tmpfilesdir} also in install section
  - fix #2134143 - publish libsmartcols-devel subpackages to C9S yum repos


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.46.1-1
changelog:
  - Rebase to new stable branch version 1.46.1
    resolves: rhbz#2011711
  - Add --enable-appliance-format-auto
  - Add support for Kylin
  - Document lazy-counters setting cannot be changed in XFS version 5
    resolves: rhbz#2025944, rhbz#1995391, rhbz#2024022
  - Require libvirt-daemon-driver-storage-core
    resolves: rhbz#2018358
  - Fix usage of strerror_r which caused corrupted error messages
    resolves: rhbz#2030396


author: Laszlo Ersek <lersek@redhat.com> - 1:1.46.1-2
changelog:
  - Add detection support for Rocky Linux
    resolves: rhbz#2030709
  - Resolve conflict between manual and libvirt-assigned PCI addresses
    resolves: rhbz#2034160


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-2
changelog:
  - Rebase to new stable branch version 1.48.4
    resolves: rhbz#2059285
  - Disable 5-level page tables when using -cpu max
    resolves: rhbz#2084568
  - SELinux relabelling should not stop on ext4 immutable bits
    resolves: rhbz#1794518
  - Ignore "iface" in add-drive variants
    resolves: rhbz#1844341
  - Lift protocol limit on guestfs_readdir()
    resolves: rhbz#1674392
  - Check return values from librpm calls (2089623)
  - Document limitations of encrypted RBD disks
    resolves: rhbz#2033247
  - Fix lvm-set-filter failed in guestfish with the latest lvm2 package
    resolves: rhbz#1965941
  - Enable PHP bindings
    resolves: rhbz#2097718
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2101281
  - Add clevis-luks to BRs, required for Clevis & Tang
    related: rhbz#1809453
  - Add zstd support to guestfs_file_architecture
    resolves: rhbz#2117004


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.48.4-4
changelog:
  - New API: guestfs_inspect_get_build_id
  - Add support for detecting Windows >= 10, returned through osinfo
    resolves: rhbz#2012658


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-4
changelog:
  - Rebase libguestfs to 1.50.1
    resolves: rhbz#2168625
  - Use q35 machine type for libguestfs appliance
    resolves: rhbz#2168578
  - Run SELinux relabelling in parallel [for virt-v2v]
    resolves: rhbz#2190276


author: Laszlo Ersek <lersek@redhat.com> - 1:1.50.1-5
changelog:
  - let "guestfish -i" recognize "--key /dev/mapper/VG-LV:key:password"
  - reenable quickcheck; we now use "-cpu max" (upstream 30f74f38bd6e)
    resolves: rhbz#2209279


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.50.1-7
changelog:
  - Add --key all:... selector
    resolves: RHEL-19367
  - Add miscellaneous other upstream fixes since 1.50.1


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-2
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56809
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62935


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Robert Scheck <robert@fedoraproject.org> 1.5.2-5
changelog:
  - Don't ship API docs twice (devel and doc subpackages)
  - Reworked spec file to build libisoburn1 for RHEL >= 8


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.18-1
changelog:
  - New upstream release
  - Add ability to change crypto configuration at runtime without
    restarting knet and without packet drop
  - Add compatibility support for openssl 3.0
  - Add functional testing framework and new test cases
  - Minor build fixes
  - Fix BuildRequires to use libqb doxygen2man vs internal copy


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Michal Ruprich <mruprich@redhat.com> - 1.4.3-1
changelog:
  - Update to 1.4.3
  - Resolves: #1758843 - libmaxminddb-devel i686 can't be installed in parallel to x86_64
  - Fix for CVE-2020-28241


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Remi Collet <remi@remirepo.net> - 1.1.0-2
changelog:
  - remove internal AES implementation and use libcrypto
    https://github.com/awesomized/libmemcached/pull/114
  - fix build ussing upstream patch to update catch version


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Richard W.M. Jones <rjones@redhat.com> - 1.8.2-2
changelog:
  - Fix nbdcopy progress bar.
  - Add nbdinfo --map --totals and --can/--is options.
    resolves: rhbz#1950630


author: Richard W.M. Jones <rjones@redhat.com> - 1.10.5-1
changelog:
  - Rebase to new stable branch version 1.10.5
    resolves: rhbz#2011708
  - Map uint32_t to OCaml int64 to avoid signedness problems
    resolves: rhbz#2040610
  - CVE-2022-0485 nbdcopy destination image corruption
  - New upstream API to control initialization of pread buffer
    resolves: rhbz#2046194


author: Richard W.M. Jones <rjones@redhat.com> - 1.12.6-1
changelog:
  - Rebase to new stable branch version 1.12.6
    resolves: rhbz#2059288
  - New tool: nbddump
  - nbdcopy: Use preferred block size for copying
    related: rhbz#2047660
  - Fix remote TLS failures
    resolves: rhbz#2111524
    (and 2111813)


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
    resolves: RHEL-31883
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49801
  - Print full NBD error from server
    resolves: RHEL-50665


author: Adrian Reber <areber@redhat.com> - 1.2-5
changelog:
  - Repack tarball to remove problematic license from unused code
  - Apply fixes for warnings found by gcc -fanalyzer


author: Adrian Reber <areber@redhat.com> - 1.2-7
changelog:
  - Apply upstream patch to fix 3 findings from static application security testing
    Resolves: RHEL-27656


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.0-102
changelog:
  - resolves: RHEL-2109  - Support Certificate Auto Enrollment in Samba
  - resolves: RHEL-22157 - Fix root cert import for samba-gpupdate


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.1-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.1
  - resolves: RHEL-26337 - Fix site lookup for samba-gpupdate
  - resolves: RHEL-5846 - Fix warning messages while upgrading libwbclient


author: Pavel Filipenský <pfilipen@redhat.com> - 4.20.2-1
changelog:
  - related: RHEL-33645 - Update to version 4.20.2
  - resolves: RHEL-45841 - Fix KDC IP address lookup in case of trusted domain
  - resolves: RHEL-23814 - Fix smbclient to enumerate the printers


author: Phil Sutter <psutter@redhat.com> - 1.0.9-1
changelog:
  - expect/conntrack: Avoid spurious covscan overrun warning
  - conntrack: fix build with kernel 5.15 and musl
  - New version 1.0.9


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Steve Dickson <steved@redhat.com> 2.5.4-16
changelog:
  - nfsd.man: Explain that setting nfsv4=n turns off all v4 versions (bz 2042362)
  - mount.nfs: fix NULL pointer derefernce in nfs_parse_square_bracket (bz 2136807)


author: Steve Dickson <steved@redhat.com> 2.5.4-19
changelog:
  - Don't allow junction tests to trigger automounts (bz 2148353)
  - Fix typo in man page nfs.conf.man (bz 2203092)


author: Steve Dickson <steved@redhat.com> 2.5.4-21
changelog:
  - gssd: fix handling DNS lookup failure (RHEL-15035)
  - gssd: handle KRB5_AP_ERR_BAD_INTEGRITY errors (RHEL-15034)


author: Steve Dickson <steved@redhat.com> 2.5.4-22
changelog:
  - nfsmount.conf: Fix typo of the attribute name (RHEL-7904)
  - Update to support for the NFS RPC-with-TLS (RHEL-14754)


author: Steve Dickson <steved@redhat.com> 2.5.4-23
changelog:
  - Typos and documentation fixes (RHEL-22654)
  - blkmapd: fix coredump in bl_add_disk (RHEL-7941)
  - rpcdebug: avoid buffer underflow (RHEL-7931)


author: Phil Sutter <psutter@redhat.com> [1.2.6-1.el9]
changelog:
  - set: Do not leave free'd expr_list elements in place (Phil Sutter) [RHEL-14149]
  - Rebase onto version 1.2.6 (Phil Sutter) [RHEL-14149]


author: Phil Sutter <psutter@redhat.com> [1.2.6-3.el9]
changelog:
  - tests: Fix objref test case (Phil Sutter) [RHEL-28515]
  - expr: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - obj: Respect data_len when setting attributes (Phil Sutter) [RHEL-28515]
  - utils: Introduce and use nftnl_set_str_attr() (Phil Sutter) [RHEL-28515]
  - obj: Enforce attr_policy compliance in nftnl_obj_set_data() (Phil Sutter) [RHEL-28515]
  - obj: Introduce struct obj_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - obj: Call obj_ops::set with legal attributes only (Phil Sutter) [RHEL-28515]
  - obj: Repurpose struct obj_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - obj: Return value on setters (Phil Sutter) [RHEL-28515]
  - object: getters take const struct (Phil Sutter) [RHEL-28515]
  - utils: Fix for wrong variable use in nftnl_assert_validate() (Phil Sutter) [RHEL-28515]
  - obj: synproxy: Use memcpy() to handle potentially unaligned data (Phil Sutter) [RHEL-28515]
  - obj: Do not call nftnl_obj_set_data() with zero data_len (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_OWNER, too (Phil Sutter) [RHEL-28515]
  - set: Validate NFTNL_SET_ID, too (Phil Sutter) [RHEL-28515]
  - obj: Validate NFTNL_OBJ_TYPE, too (Phil Sutter) [RHEL-28515]
  - flowtable: Validate NFTNL_FLOWTABLE_SIZE, too (Phil Sutter) [RHEL-28515]
  - table: Validate NFTNL_TABLE_USE, too (Phil Sutter) [RHEL-28515]
  - chain: Validate NFTNL_CHAIN_USE, too (Phil Sutter) [RHEL-28515]
  - expr: Enforce attr_policy compliance in nftnl_expr_set() (Phil Sutter) [RHEL-28515]
  - expr: Introduce struct expr_ops::attr_policy (Phil Sutter) [RHEL-28515]
  - include: Sync nf_log.h with kernel headers (Phil Sutter) [RHEL-28515]
  - expr: Call expr_ops::set with legal types only (Phil Sutter) [RHEL-28515]
  - expr: Repurpose struct expr_ops::max_attr field (Phil Sutter) [RHEL-28515]
  - udata: incorrect userdata buffer size validation (Phil Sutter) [RHEL-28515]
  - obj: ct_timeout: setter checks for timeout array boundaries (Phil Sutter) [RHEL-28515]
  - set_elem: use nftnl_data_cpy() in NFTNL_SET_ELEM_{KEY,KEY_END,DATA} (Phil Sutter) [RHEL-28515]
  - set: buffer overflow in NFTNL_SET_DESC_CONCAT setter (Phil Sutter) [RHEL-28515]
  - expr: fix buffer overflows in data value setters (Phil Sutter) [RHEL-28515]


author: Thomas Haller <thaller@redhat.com> - 1.8.28-1
changelog:
  - Update to 1.8.28 release
  - move org.gnome.nm-applet.gschema.xml from network-manager-applet to here.
  - introduce wireless security dialogs


author: Ana Cabral <acabral@redhat.com> - 1.8.36-1
changelog:
  - Update to 1.8.36 release  (rh #2066742)
  - Include OWE wireless security (rh #2066737)
  - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512)


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Remi Collet <remi@remirepo.net> - 0.11.0-1
changelog:
  - update to 0.11.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/665


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Lukas Hrazky <lhrazky@redhat.com> - 1.14.5-1
changelog:
  - Update to 1.14.5
  - Detailed error message when using non-existing TMPDIR (RhBug:2019993)
  - Make error messages about repodata and rpm mismatch more user friendly


author: Petr Pisar <ppisar@redhat.com> - 0.0.3-8
changelog:
  - Correct a License tag to LGPLv2+ (RHEL-16103)
  - Fix relocating certificate paths to /etc/rhsm-host (RHEL-14224)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.3.1-3
changelog:
  - Fix CVE-2020-29129 CVE-2020-29130 out-of-bounds access while processing ARP/NCSI packets
    rhbz#1902232


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 4.4.0-3
changelog:
  - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    Resolves: rhbz#1970826 rhbz#1970839 rhbz#1970857 rhbz#1970847


author: Michal Hlavinka <mhlavink@redhat.com> - 1.0.31-6
changelog:
  - a crafted wav file could cause heap buffer overflow that allowed an arbitrary code execution(#1985029)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Matej Mužila <mmuzila@redhat.com> 4.4.0-2
changelog:
  - Update to version 4.4.0
  - Resolves: CVE-2022-0561 CVE-2022-0562 CVE-2022-22844 CVE-2022-0865
    CVE-2022-0891 CVE-2022-0924 CVE-2022-0909 CVE-2022-0908 CVE-2022-1354
    CVE-2022-1355


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-8
changelog:
  - iscsi: CHAP auth algorithm selection fixes (#2188916)
  - tests: Use stronger passphrases for LUKS tests (#2188750,#2188752)
  - integration-test: Fix scsi_debug cd drive read-only detection (#2211191)
  - lvm2: Improve uevent processing (#2031673)
  - tests: Mark test_job.UdisksJobTest.test_job as unstable (#2148844)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-11
changelog:
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block()


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.2-4
changelog:
  - Fix a couple of issues found by Coverity (#1938890)
  - Ignore systemd "Extended Boot Loader" GPT partition


author: Tomas Bzatek <tbzatek@redhat.com> - 2.9.4-1
changelog:
  - Version 2.9.4 (#2010363)
  - CVE-2021-3802: Harden the default mount options for ext filesystems (#2004423)
  - Fix double free on daemon exit (unaligned fastbin chunk) (#2001549)


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Jiri Denemark <jdenemar@redhat.com> - 9.5.0-6
changelog:
  - tests: Use DO_TEST_CAPS_*_ABI_UPDATE() for ppc64 (rhbz#2196178)
  - tests: Switch to firmware autoselection for hvf (rhbz#2196178)
  - tests: Use virt-4.0 machine type for aarch64 (rhbz#2196178)
  - tests: Consistently use /path/to/guest_VARS.fd (rhbz#2196178)
  - tests: Turn abi-update.xml into a symlink (rhbz#2196178)
  - tests: Rename firmware-auto-efi-nvram-path (rhbz#2196178)
  - qemu: Fix return value for qemuFirmwareFillDomainLegacy() (rhbz#2196178)
  - qemu: Fix lookup against stateless/combined pflash (rhbz#2196178)
  - tests: Add some more DO_TEST*ABI_UPDATE* macros (rhbz#2196178)
  - tests: Add more tests for firmware selection (rhbz#2196178)
  - tests: Update firmware descriptor files (rhbz#2196178)
  - tests: Drop tags from BIOS firmware descriptor (rhbz#2196178)
  - tests: Include microvm in firmwaretest (rhbz#2196178)
  - qemu: Don't overwrite NVRAM template for legacy firmware (rhbz#2196178)
  - qemu: Generate NVRAM path in more cases (rhbz#2196178)
  - qemu: Filter firmware based on loader.readonly (rhbz#2196178)
  - qemu: Match NVRAM template extension for new domains (rhbz#2196178)
  - conf: Don't default to raw format for loader/NVRAM (rhbz#2196178)
  - tests: Rename firmware-auto-efi-format-loader-qcow2-nvram-path (rhbz#2196178)
  - tests: Reintroduce firmware-auto-efi-format-mismatch (rhbz#2196178)
  - rpm: Reorder scriptlets (rhbz#2210058)
  - rpm: Reduce use of with_modular_daemons (rhbz#2210058)
  - rpm: Remove custom libvirtd restart logic (rhbz#2210058)
  - rpm: Introduce new macros for handling of systemd units (rhbz#2210058)
  - rpm: Switch to new macros for handling of systemd units (rhbz#2210058)
  - rpm: Delete unused macros (rhbz#2210058)


author: Jiri Denemark <jdenemar@redhat.com> - 9.9.0-1
changelog:
  - Rebased to libvirt-9.9.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-7525, rhbz#RHEL-7570, rhbz#RHEL-7542, rhbz#RHEL-7568, rhbz#RHEL-7545
      rhbz#RHEL-3231, rhbz#RHEL-7382, rhbz#RHEL-7345, rhbz#RHEL-1717, rhbz#RHEL-7528
      rhbz#RHEL-1833, rhbz#RHEL-7569, rhbz#RHEL-4432, rhbz#RHEL-974, rhbz#RHEL-4994
      rhbz#RHEL-7419


author: Jiri Denemark <jdenemar@redhat.com> - 9.10.0-1
changelog:
  - Rebased to libvirt-9.10.0 (rhbz#RHEL-15267)
  - The rebase also fixes the following bugs:
      rhbz#RHEL-16878, rhbz#RHEL-14611, rhbz#RHEL-7384, rhbz#RHEL-16870, rhbz#RHEL-18439
      rhbz#RHEL-16751, rhbz#RHEL-4452, rhbz#RHEL-17841, rhbz#RHEL-15288, rhbz#RHEL-7040


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-1
changelog:
  - Rebased to libvirt-10.0.0 (RHEL-15267)
  - The rebase also fixes the following bugs:
      RHEL-18782, RHEL-735, RHEL-18165, RHEL-4607, RHEL-700
      RHEL-7100, RHEL-15480, RHEL-7416, RHEL-20609, RHEL-7570
      RHEL-20444, RHEL-17596, RHEL-7569


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-2
changelog:
  - tests: Add hostcpudata for machine with CPU clusters (RHEL-7043)
  - conf: Report CPU clusters in capabilities XML (RHEL-7043)
  - conf: Allow specifying CPU clusters (RHEL-7043)
  - qemu: Introduce QEMU_CAPS_SMP_CLUSTERS (RHEL-7043)
  - qemu: Use CPU clusters for guests (RHEL-7043)
  - tests: Add test case for CPU clusters (RHEL-7043)
  - qemu: Make monitor aware of CPU clusters (RHEL-7043)
  - tests: Verify handling of CPU clusters in QMP data (RHEL-7043)
  - build: Make daemons depend on generated *_protocol.[ch] (RHEL-15267)
  - domain_validate: Check for domain address conflicts fully (RHEL-4452)
  - qemu_hotplug: Don't lose 'created' flag in qemuDomainChangeNet() (RHEL-22714)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-3
changelog:
  - remote_driver: Restore special behavior of remoteDomainGetBlockIoTune() (RHEL-22800)
  - conf: Introduce dynamicMemslots attribute for virtio-mem (RHEL-15316)
  - qemu_capabilities: Add QEMU_CAPS_DEVICE_VIRTIO_MEM_PCI_DYNAMIC_MEMSLOTS capability (RHEL-15316)
  - qemu_validate: Check capability for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_command: Generate cmd line for virtio-mem dynamicMemslots (RHEL-15316)
  - qemu_snapshot: fix detection if non-leaf snapshot isn't in active chain (RHEL-23212)
  - qemu_snapshot: create: refactor external snapshot detection (RHEL-22797)
  - qemu_snapshot: create: don't require disk-only flag for offline external snapshot (RHEL-22797)
  - remoteDispatchAuthPolkit: Fix lock ordering deadlock if client closes connection during auth (RHEL-20337)
  - util: virtportallocator: Add VIR_DEBUG statements for port allocations and release (RHEL-21543)
  - qemu: migration: Properly handle reservation of manually specified NBD port (RHEL-21543)
  - qemuMigrationDstStartNBDServer: Refactor cleanup (RHEL-21543)
  - virPCIVPDResourceIsValidTextValue: Adjust comment to reflect actual code (RHEL-22314)
  - util: pcivpd: Refactor virPCIVPDResourceIsValidTextValue (RHEL-22314)
  - virNodeDeviceCapVPDFormatCustom*: Escape unsanitized strings (RHEL-22314)
  - virNodeDeviceCapVPDFormat: Properly escape system-originated strings (RHEL-22314)
  - schema: nodedev: Adjust allowed characters in 'vpdFieldValueFormat' (RHEL-22314)
  - tests: Test the previously mishandled PCI VPD characters (RHEL-22314)
  - Don't overwrite error message from 'virXPathNodeSet' (RHEL-22314)
  - tests: virpcivpdtest: Remove 'testVirPCIVPDReadVPDBytes' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDReadVPDBytes' (RHEL-22314)
  - util: pcivpd: Unexport virPCIVPDParseVPDLargeResourceFields (RHEL-22314)
  - tests: virpcivpd: Remove 'testVirPCIVPDParseVPDStringResource' case (RHEL-22314)
  - util: virpcivpd: Unexport 'virPCIVPDParseVPDLargeResourceString' (RHEL-22314)
  - virPCIVPDResourceGetKeywordPrefix: Fix logging (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceCustomUpsertValue (RHEL-22314)
  - conf: virNodeDeviceCapVPDParse*: Remove pointless NULL checks (RHEL-22314)
  - virpcivpdtest: testPCIVPDResourceBasic: Remove tests for uninitialized 'ro'/'rw' section (RHEL-22314)
  - util: virPCIVPDResourceUpdateKeyword: Remove impossible checks (RHEL-22314)
  - conf: node_device: Refactor 'virNodeDeviceCapVPDParseCustomFields' to fix error reporting (RHEL-22314)
  - virNodeDeviceCapVPDParseXML: Fix error reporting (RHEL-22314)
  - util: virpcivpd: Remove return value from virPCIVPDResourceUpdateKeyword (RHEL-22314)
  - virPCIDeviceHasVPD: Refactor "debug" messages (RHEL-22314)
  - virPCIDeviceGetVPD: Fix multiple error handling bugs (RHEL-22314)
  - virPCIDeviceGetVPD: Handle errors in callers (RHEL-22314)
  - virPCIVPDReadVPDBytes: Refactor error handling (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceString: Properly report errors (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Merge logic conditions (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Remove impossible 'default' switch case (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor processing of read data (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Refactor return logic (RHEL-22314)
  - virPCIVPDParseVPDLargeResourceFields: Report proper errors (RHEL-22314)
  - virPCIVPDParse: Do reasonable error reporting (RHEL-22314)
  - virt-admin: Add warning when connection to default daemon fails (RHEL-23170)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-4
changelog:
  - Set stubDriverName from hostdev driver model attribute during pci device setup (RHEL-25858)
  - qemuMigrationDstPrepareStorage: Use 'switch' statement to include all storage types (RHEL-24825)
  - qemuMigrationDstPrepareStorage: Properly consider path for 'vdpa' devices (RHEL-24825)
  - domain_validate: Account for NVDIMM label size properly when checking for memory conflicts (RHEL-4452)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-5
changelog:
  - cpu: x86: Add support for adding features to existing CPU models (RHEL-25995)
  - qemu: domain: Check arch in qemuDomainMakeCPUMigratable (RHEL-25995)
  - conf: cpu: Introduce virCPUDefListFeatures (RHEL-25995)
  - qemu: domain: Drop added features from migratable CPU (RHEL-25995)
  - Add vmx-* features to Broadwell* (RHEL-25995)
  - Add vmx-* features to Cascadelake* (RHEL-25995)
  - Add vmx-* features to Conroe (RHEL-25995)
  - Add vmx-* features to Cooperlake (RHEL-25995)
  - Add vmx-* features to core{,2}duo (RHEL-25995)
  - Add vmx-* features to Haswell* (RHEL-25995)
  - Add vmx-* features to Icelake* (RHEL-25995)
  - Add vmx-* features to IvyBridge* (RHEL-25995)
  - Add vmx-* features to kvm* (RHEL-25995)
  - Add vmx-* features to Nehalem* (RHEL-25995)
  - Add vmx-* features to Penryn (RHEL-25995)
  - Add vmx-* features to SandyBridge* (RHEL-25995)
  - Add vmx-* features to SapphireRapids (RHEL-25995)
  - Add vmx-* features to Skylake* (RHEL-25995)
  - Add vmx-* features to Snowridge (RHEL-25995)
  - Add vmx-* features to Westmere* (RHEL-25995)


author: Jiri Denemark <jdenemar@redhat.com> - 10.0.0-7
changelog:
  - qemu: virtiofs: do not crash if cgroups are missing
  - qemu: virtiofs: set correct label when creating the socket
  - qemu: virtiofs: error out if getting the group or user name fails
  - Fix off-by-one error in udevListInterfacesByStatus (CVE-2024-1441)
  - remote: check for negative array lengths before allocation (CVE-2024-2494)
  - qemu: Fix migration with custom XML (RHEL-30622)


author: Jiri Denemark <jdenemar@redhat.com> - 10.3.0-1
changelog:
  - Rebased to libvirt-10.3.0 (RHEL-29642)
  - The rebase also fixes the following bugs:
      RHEL-25993, RHEL-7101, RHEL-7461, RHEL-16333, RHEL-7343
      RHEL-28808, RHEL-32880, RHEL-35879, RHEL-34112, RHEL-30373
      RHEL-23416, RHEL-23608, RHEL-26276, RHEL-22728


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-7489)
  - The rebase also fixes the following bugs:
      RHEL-29642, RHEL-30373, RHEL-32182, RHEL-33044, RHEL-33082
      RHEL-34615, RHEL-35948, RHEL-36565, RHEL-36721, RHEL-39271
      RHEL-39400


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-1
changelog:
  - Rebased to libvirt-10.5.0 (RHEL-21381)
  - The rebase also fixes the following bugs:
      RHEL-23833, RHEL-29642, RHEL-37542, RHEL-39969, RHEL-40899
      RHEL-43309


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-2
changelog:
  - vmx: Do not require all ID data for VMWare Distributed Switch (RHEL-46099)
  - tests: vhostuser: add virtiofsd json descriptor (RHEL-7108, RHEL-40135)
  - tests: qemuxmlconf: adjust test case to new virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: fill capabilities for virtiofsd (RHEL-7108, RHEL-40135)
  - qemu: do not use deprecated options for new virtiofsd (RHEL-7108)
  - qemu: migration: allow migration for virtiofs (RHEL-40135)
  - virt-host-validate: Drop extra "PASS" (RHEL-46868)
  - qemu: Don't leave beingDestroyed=true on inactive domain (RHEL-43309)


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - qemu: virtiofs: cache: use 'never' instead of 'none' (RHEL-50329)
  - qemu_domain: Strip <acpi/> from s390(x) definitions (RHEL-49516)
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390 (RHEL-49516)
  - vsh: Allow vshReadlineInit() to be called multiple times (RHEL-53560)


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-1
changelog:
  - Rebased to libvirt-10.8.0 (RHEL-50574)
  - The rebase also fixes the following bugs:
      RHEL-688, RHEL-7122, RHEL-19379, RHEL-22166, RHEL-24746
      RHEL-28827, RHEL-45200, RHEL-45952, RHEL-53964, RHEL-54550
      RHEL-56611, RHEL-58446


author: Jiri Denemark <jdenemar@redhat.com> - 10.8.0-2
changelog:
  - Revert "network: *un*set the firewalld zone while shutting down a network" (RHEL-61576)
  - Revert "network: support setting firewalld zone for bridge device of open networks" (RHEL-61576)
  - network: call network(Add|Remove)FirewallRules() for forward mode='open' (RHEL-61576)
  - network: a different way of supporting firewalld zone for mode='open' networks (RHEL-61576)
  - network: a different implementation of *un*setting firewalld zone when network is destroyed (RHEL-61576)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-2
changelog:
  - domain_conf: Format <defaultiothread/> more often (rhbz#2059511)
  - domain_conf: Format iothread IDs more often (rhbz#2059511)
  - qemu: Make IOThread changing more robust (rhbz#2059511)
  - qemuDomainSetIOThreadParams: Accept VIR_DOMAIN_AFFECT_CONFIG flag (rhbz#2059511)
  - virsh: Implement --config for iothreadset (rhbz#2059511)
  - docs: Document TPM portion of domcaps (rhbz#2103119)
  - virtpm: Introduce TPM-1.2 and TPM-2.0 capabilieis (rhbz#2103119)
  - domcaps: Introduce TPM backendVersion (rhbz#2103119)
  - qemu: Report supported TPM version in domcaps (rhbz#2103119)
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (rhbz#2105231)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-3
changelog:
  - qemu: introduce capability QEMU_CAPS_MIGRATION_BLOCKED_REASONS (rhbz#2092833)
  - qemu: new function to retrieve migration blocker reasons from QEMU (rhbz#2092833)
  - qemu: query QEMU for migration blockers before our own harcoded checks (rhbz#2092833)
  - qemu: remove hardcoded migration fail for vDPA devices if we can ask QEMU (rhbz#2092833)
  - qemu_migration: Use EnterMonitorAsync in qemuDomainGetMigrationBlockers (rhbz#2092833)
  - qemu: don't try to query QEMU about migration blockers during offline migration (rhbz#2092833)
  - qemu_migration: Acquire correct job in qemuMigrationSrcIsAllowed (rhbz#2092833)
  - virsh: Require --xpath for *dumpxml (rhbz#2103524)
  - qemu: skip hardcoded hostdev migration check if QEMU can do it for us (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-4
changelog:
  - qemu: Pass migration flags to qemuMigrationParamsApply (rhbz#2111070)
  - qemu_migration_params: Replace qemuMigrationParamTypes array (rhbz#2111070)
  - qemu_migration: Pass migParams to qemuMigrationSrcResume (rhbz#2111070)
  - qemu_migration: Apply max-postcopy-bandwidth on post-copy resume (rhbz#2111070)
  - qemu: Always assume support for QEMU_CAPS_MIGRATION_PARAM_XBZRLE_CACHE_SIZE (rhbz#2107892)
  - qemu_migration: Store original migration params in status XML (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsApply (rhbz#2107892)
  - qemu_migration_params: Refactor qemuMigrationParamsReset (rhbz#2107892)
  - qemu_migration_params: Avoid deadlock in qemuMigrationParamsReset (rhbz#2107892)
  - qemu: Restore original memory locking limit on reconnect (rhbz#2107424)
  - qemu: Properly release job in qemuDomainSaveInternal (rhbz#1497907)
  - qemu: don't call qemuMigrationSrcIsAllowedHostdev() from qemuMigrationDstPrepareFresh() (rhbz#1497907)


author: Jiri Denemark <jdenemar@redhat.com> - 8.7.0-1
changelog:
  - Rebased to libvirt-8.7.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2084046, rhbz#2108483, rhbz#2123371, rhbz#2101633, rhbz#1988211
      rhbz#2086677, rhbz#2103132, rhbz#2078805, rhbz#2111301, rhbz#2094641


author: Jiri Denemark <jdenemar@redhat.com> - 8.8.0-1
changelog:
  - Rebased to libvirt-8.8.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2122534, rhbz#2121262, rhbz#2130089, rhbz#2121276, rhbz#2121627
      rhbz#2125111, rhbz#2129239, rhbz#1964855, rhbz#2114866


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-1
changelog:
  - Rebased to libvirt-8.9.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2074559, rhbz#2134009, rhbz#1777212, rhbz#2013523, rhbz#2114866
      rhbz#1964855


author: Jiri Denemark <jdenemar@redhat.com> - 8.9.0-2
changelog:
  - RHEL: rpminspect: Disable abidiff inspection (rhbz#2124466)
  - spec: Fix python3-libvirt requirement in client-qemu package (rhbz#2124466)


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-1
changelog:
  - Rebased to libvirt-8.10.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2128993, rhbz#2143235, rhbz#2143840, rhbz#1874163, rhbz#2000075
      rhbz#2143838, rhbz#2104919, rhbz#2072204, rhbz#2137298


author: Jiri Denemark <jdenemar@redhat.com> - 8.10.0-2
changelog:
  - qemu_process: Document qemuProcessPrepare{Domain,Host}() order (rhbz#2150760)
  - qemu_extdevice: Init paths in qemuExtDevicesPrepareDomain() (rhbz#2150760)
  - qemu_extdevice: Expose qemuExtDevicesInitPaths() (rhbz#2150760)
  - qemu: Init ext devices paths on reconnect (rhbz#2150760)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-1
changelog:
  - Rebased to libvirt-9.0.0 (rhbz#2124466)
  - The rebase also fixes the following bugs:
      rhbz#2151064, rhbz#1874163, rhbz#2130192, rhbz#2111948, rhbz#1824722
      rhbz#2150455, rhbz#2063723, rhbz#1717611, rhbz#2160448, rhbz#2151869
      rhbz#2040272, rhbz#2144738, rhbz#2159851, rhbz#2156289, rhbz#2033879
      rhbz#1820437, rhbz#2151202


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-2
changelog:
  - vircgroupv2: fix cpu.weight limits check (rhbz#2037998)
  - domain_validate: drop cpu.shares cgroup check (rhbz#2037998)
  - docs: document correct cpu shares limits with both cgroups v1 and v2 (rhbz#2037998)
  - qemu_interface: Fix managed='no' case when creating an ethernet interface (rhbz#2144738)
  - conf: clarify some external TPM error messages (rhbz#2063723)
  - qemu: hotplug: Remove legacy quirk for 'dimm' address generation (rhbz#2158701)
  - qemu: alias: Remove 'oldAlias' argument of qemuAssignDeviceMemoryAlias (rhbz#2158701)
  - qemu: Remove 'memAliasOrderMismatch' field from VM private data (rhbz#2158701)
  - rpc: Fix error message in virNetServerSetClientLimits (rhbz#2033879)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-3
changelog:
  - src: Don't use virReportSystemError() on virProcessGetStatInfo() failure (rhbz#2148266)
  - qemu: Provide virDomainGetCPUStats() implementation for session connection (rhbz#2148266)
  - virsh: Make domif-setlink work more than once (rhbz#2165466)
  - qemu_fd: Remove declaration for 'qemuFDPassNewDirect' (rhbz#2040272)
  - qemuStorageSourcePrivateDataFormat: Rename 'tmp' to 'objectsChildBuf' (rhbz#2040272)
  - qemu: command: Handle FD passing commandline via qemuBuildBlockStorageSourceAttachDataCommandline (rhbz#2040272)
  - qemuFDPassTransferCommand: Mark that FD was passed (rhbz#2040272)
  - qemu: fd: Add helpers allowing storing FD set data in status XML (rhbz#2040272)
  - qemu: domain: Store fdset ID for disks passed to qemu via FD (rhbz#2040272)
  - qemu: block: Properly handle FD-passed disk hot-(un-)plug (rhbz#2040272)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-4
changelog:
  - qemuProcessStop: Fix detection of outgoing migration for external devices (rhbz#2161557)
  - qemuExtTPMStop: Restore TPM state label more often (rhbz#2161557)
  - qemuProcessLaunch: Tighten rules for external devices wrt incoming migration (rhbz#2161557)
  - qemu_process: Produce better debug message wrt domain namespaces (rhbz#2167302)
  - qemu_namespace: Deal with nested mounts when umount()-ing /dev (rhbz#2167302)
  - qemuProcessRefreshDisks: Don't skip filling of disk information if tray state didn't change (rhbz#2166411)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-5
changelog:
  - qemu_extdevice: Do cleanup host only for VIR_DOMAIN_TPM_TYPE_EMULATOR (rhbz#2168762)
  - qemu: blockjob: Handle 'pending' blockjob state only when we need it (rhbz#2168769)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-6
changelog:
  - rpc: client: Don't check return value of virNetMessageNew (rhbz#2145188)
  - rpc: Don't warn about "max_client_requests" in single-threaded daemons (rhbz#2145188)


author: Jiri Denemark <jdenemar@redhat.com> - 9.0.0-7
changelog:
  - qemu_snapshot: remove memory snapshot when deleting external snapshot (rhbz#2170826)
  - qemu_snapshot: refactor qemuSnapshotDeleteExternalPrepare (rhbz#2170826)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.12.1-2
changelog:
  - Drop libwacom-show-stylus, it's a debugging tool that requires extra
    dependencies that we shouldn't pull in everywhere (#2044710)


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Wolfgang Ulbrich <fedora@raveit.de> - 40.0-2
changelog:
  - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74
  - fixes rhbz #1971048
  - and https://github.com/mate-desktop/mate-panel/issues/1230


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.6.8-17
changelog:
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update flags, enable LTO
  - Remove RANDFILE and increase default bits in ssleay.conf


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Neal Gompa <ngompa@centosproject.org> - 0.3.10-1
changelog:
  - New upstream release
  - Fix dumping and exporting multiple files from the CLI
  - Watch files before loading them into the builder
  - Fix potential double free when filtering by language
  - Fix the crash for when the root tree has no children
  - Fix the crash when getting the element for the [empty] root
  - Install xb-tool into bindir
  - Ensure reproducible results when importing a node
  - Ignore all hidden files when using _WATCH_DIRECTORY
  - Show the value bindings when using XB_SILO_PROFILE_FLAG_XPATH
  - Ensure _IS_TOKENIZED is set if tokens are added manually
  - Ensure we never add too many tokens to the silo
  - Put tail after the node when exporting XbBuilderNode
  - Remove the G_ALIGNOF checks to fix compile with old GLib versions
  - Add a flag to require the XbBuilderSource to have no siblings
  - Add iterator for XbNode attributes and children
  - Allow removing XbBuilderNode text
  - Allow stripping builder node inner text
  - Resolves: rhbz#2134794


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Remi Collet <remi@remirepo.net> - 1.7.2-1
changelog:
  - update to 1.7.2
  - fix installation layout using merged patch from
    https://github.com/nih-at/libzip/pull/190


author: Rex Dieter <rdieter@fedoraproject.org> - 1.7.3-2
changelog:
  - use %cmake_build, %cmake_install, 
    cd "aarch64-redhat-linux-gnu" 
    /usr/bin/ctest --output-on-failure --force-new-ctest-process -j32  
    cd -


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Michal Schorm <mschorm@redhat.com> - 3.1.9-5
changelog:
  - Revert the CMake change regarding the in-source builds for now
  - %cmake macro covers the %{set_build_flags}, so they are not needed
    That also means, the debug buildchnages to the build flags must be done AFTER the
    %cmake macro was used.
  - %cmake macro also covers the CMAKE_INSTALL_PREFIX="%{_prefix}" option
  - Default to %cmake commands instead fo %make commands
  - Update the WITH_UNITTEST macro to the one upstream use now
  - Introduce macro to enable / disable testusite (and building of the *-test subpackage)


author: Michal Schorm <mschorm@redhat.com> - 0.996-3.4
changelog:
  - Bump version for package rebuild
    We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo
  - Resolves: #2182069


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Sandro Mani <manisandro@gmail.com> - 115-1
changelog:
  - Add -fstack-protector to LDFLAGS (since we carry -D_FORTIFY_SOURCE=2 in cflags, see https://sourceforge.net/p/mingw-w64/bugs/818/)


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-1
changelog:
  - Import into RHEL
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jan Vcelak <jvcelak@fedoraproject.org>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jeff Law <law@redhat.com>
        Lukas Zachar <lzachar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tom Stellard <tstellar@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-3
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Gerd Pokorra <gp@zimt.uni-siegen.de> - 0.5.13-6
changelog:
  - updating line in /usr/lib/tmpfiles.d/munge.conf: /var/run/munge → /run/munge
  - add license tag
  - add requires logrotate


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5.13-8
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Ray Strode <rstrode@redhat.com> - 40.9-18
changelog:
  - Don't allow applications on other workspaces to steal
    focus, unless their timestamps are pristine
    Resolves: RHEL-29537


author: Jonas Ådahl <jadahl@redhat.com>) - 40.9-20
changelog:
  - Fix positioning when using always-on-top windows
    Resolves: RHEL-45998
  - Improve handling of always-on-visible-workspace windows
    Resolves: RHEL-45366


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.23-1
changelog:
  - Update to MySQL 8.0.23
  - Created mysql-fix-includes-robin-hood.patch
  - Created mysql-main-cast.patch


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.30-1
changelog:
  - Update to MySQL 8.0.30
  - Remove patches now upstream:
    chain certs, OpenSSL 3, s390 and robin hood
  - Add a new plugin


author: Lars Tangvald <lars.tangvald@oracle.com> - 8.0.34-1
changelog:
  - Update to MySQL 8.0.34
  - Add patch from upstream bug#110569
  - Add patch to fix binlog format issue
  - Use --skip-combinations over --binlog-format=mixed
  - Add alignment patch upstream bug#110752


author: Richard W.M. Jones <rjones@redhat.com> - 1.28.5-1
changelog:
  - Rebase to new stable branch version 1.28.5
    resolves: rhbz#2011709
  - Move nbdkit-null-plugin to nbdkit-server package
    resolves: rhbz#2021154
  - Add asynchronous support in nbdkit-vddk-plugin
  - Drop obsolete documentation related to thread model in vddk plugin
    resolves: rhbz#2018463
  - Switch to xorriso (instead of genisoimage)
  - Distribute README.VDDK in nbdkit-vddk-plugin subpackage
  - Fix nbdkit-cow-filter cow-block-size=4096
  - file: Fix implementation of cache=none for writes
    resolves: rhbz#2029751
  - vddk: Implement VMDK creation


author: Richard W.M. Jones <rjones@redhat.com> - 1.30.8-1
changelog:
  - Rebase to new stable branch version 1.30.8
    resolves: rhbz#2059289
  - Add automatic provides generator and subpackage nbdkit-srpm-macros
    resolves: rhbz#2059291
  - New filters: blocksize-policy, protect, retry-request
  - Fix license of bash-completion subpackage
  - vddk: Fix use of uninitialized memory when computing block size
    resolves: rhbz#2066655
  - Skip vsock tests unless the vsock_loopback module is loaded
    resolves: rhbz#2069558
  - Add support for ssh create remote file.
  - Suppress excess messages from nbdkit-nbd-plugin
    resolves: rhbz#2083498
  - Suppress incorrect VDDK error when converting guests from vCenter
    resolves: rhbz#2083617
  - Backport new readahead filter from 1.32.
  - Backport new LUKS filter from 1.32.
  - Backport new scan filter from 1.32.
  - Add new Python binding for nbdkit_parse_size from 1.32
  - Add new rate filter burstiness setting from 1.32
  - vddk: Suppress new VDDK "phone home" messages
    resolves: rhbz#2104720
  - vddk: Clearer error message when thumbprint is wrong
    resolves: rhbz#1905772
  - Fix memory allocator=malloc,mlock=true
    resolves: rhbz#2044432
  - Fix multiple Coverity problems
  - Fix bounds error in nbdkit-checkwrite-filter
    resolves: rhbz#2108545


author: Richard W.M. Jones <rjones@redhat.com> - 1.32.5-4
changelog:
  - Rebase to new stable branch version 1.32.5
    resolves: rhbz#2135765
  - Move stats filter to new subpackage.
  - Improve error message when PasswordAuthentication is set to 'no'
    resolves: rhbz#2158300
  - luks: Avoid crash when image does not contain a LUKS header
    resolves: rhbz#2159581
  - curl: Enable multi-conn for read-only connections
    resolves: rhbz#2166686


author: Richard W.M. Jones <rjones@redhat.com> - 1.34.2-1
changelog:
  - Rebase to 1.34.2
    resolves: rhbz#2168629
  - Backport nbdkit-curl-plugin "multi" interface support
    resolves: rhbz#2228131


author: Richard W.M. Jones <rjones@redhat.com> - 1.36.2-1
changelog:
  - Rebase to 1.36.2
    resolves: RHEL-14475
  - partition: Suggest alternate partition-sectorsize
    resolves: RHEL-19815


author: Richard W.M. Jones <rjones@redhat.com> - 1.38.3-1
changelog:
  - Rebase to 1.38.3 (along stable branch)
  - Send the last error to the NBD client
    resolves: RHEL-50664


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Phil Sutter <psutter@redhat.com> [1.0.4-8.el9]
changelog:
  - monitor: Sanitize startup race condition (Phil Sutter) [2130721]
  - evaluate: set eval ctx for add/update statements with integer constants (Phil Sutter) [2094894]
  - src: allow anon set concatenation with ether and vlan (Phil Sutter) [2094887]
  - evaluate: search stacked header list for matching payload dep (Phil Sutter) [2094887]
  - netlink_delinearize: also postprocess OP_AND in set element context (Phil Sutter) [2094887]
  - tests: add a test case for ether and vlan listing (Phil Sutter) [2094887]
  - debug: dump the l2 protocol stack (Phil Sutter) [2094887]
  - proto: track full stack of seen l2 protocols, not just cumulative offset (Phil Sutter) [2094887]
  - netlink_delinearize: postprocess binary ands in concatenations (Phil Sutter) [2094887]
  - netlink_delinearize: allow postprocessing on concatenated elements (Phil Sutter) [2094887]
  - intervals: check for EXPR_F_REMOVE in case of element mismatch (Phil Sutter) [2115627]
  - intervals: fix crash when trying to remove element in empty set (Phil Sutter) [2115627]
  - scanner: don't pop active flex scanner scope (Phil Sutter) [2113874]
  - parser: add missing synproxy scope closure (Phil Sutter) [2113874]
  - tests/py: Add a test for failing ipsec after counter (Phil Sutter) [2113874]
  - doc: Document limitations of ipsec expression with xfrm_interface (Phil Sutter) [1806431]


author: Phil Sutter <psutter@redhat.com> [1.0.4-9.el9]
changelog:
  - tests: add a test case for map update from packet path with concat (Phil Sutter) [2094894]
  - netlink_linearize: fix timeout with map updates (Phil Sutter) [2094894]
  - netlink_delinearize: fix decoding of concat data element (Phil Sutter) [2094894]


author: Phil Sutter <psutter@redhat.com> [1.0.4-10.el9]
changelog:
  - netlink_delinearize: Sanitize concat data element decoding (Phil Sutter) [2160049]
  - optimize: Clarify chain_optimize() array allocations (Phil Sutter) [2160049]
  - optimize: Do not return garbage from stack (Phil Sutter) [2160049]
  - netlink: Fix for potential NULL-pointer deref (Phil Sutter) [2160049]
  - meta: parse_iso_date() returns boolean (Phil Sutter) [2160049]
  - mnl: dump_nf_hooks() leaks memory in error path (Phil Sutter) [2160049]
  - owner: Fix potential array out of bounds access (Phil Sutter) [2160049]


author: Phil Sutter <psutter@redhat.com> [1.0.4-11.el9]
changelog:
  - rule: check address family in set collapse (Phil Sutter) [RHEL-5908]
  - spec: Rename variables to avoid a clash (Phil Sutter) [INTERNAL]


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.9-1.el9]
changelog:
  - spec: Utilize pyproject-rpm-macros for the python sub-package (Phil Sutter) [RHEL-14191]
  - Rebase onto version 1.0.9 (Phil Sutter) [RHEL-14191]


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-5
changelog:
  - Add -mod-devel subpackage for building external nginx modules
    Resolves: rhbz#1991720 (Neal Gompa)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-10
changelog:
  - Resolves: #1975747 - CVE-2021-3618 nginx: ALPACA: Application Layer Protocol
    Confusion - Analyzing and Mitigating Cracks in TLS Authentication


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Than Ngo <than@redhat.com> - 3.19.0-1
changelog:
  - Resolves: #2126294, opencryptoki fails after generating > 500 RSA keys
  - Resolves: #2110314, rebase to 3.19.0
  - Resolves: #2110989, openCryptoki key generation with expected MKVP only on CCA and EP11 tokens
  - Resolves: #2110476, openCryptoki ep11 token: master key consistency
  - Resolves: #2018458, openCryptoki ep11 token: vendor specific key derivation


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - Resolves: #2110497, concurrent MK rotation for cca token
  - Resolves: #2110498, concurrent MK rotation for ep11 token
  - Resolves: #2110499, ep11 token: PKCS #11 3.0 - support AES_XTS
  - Resolves: #2111010, cca token: protected key support 
  - Resolves: #2160061, rebase to 3.21.0
  - Resolves: #2160105, pkcsslotd hardening
  - Resolves: #2160107, p11sak support Dilithium and Kyber keys
  - Resolves: #2160109, ica and soft tokens: PKCS #11 3.0 - support AES_XTS


author: Than Ngo <than@redhat.com> - 3.21.0-8
changelog:
  - Resolves: #2222592, p11sak tool: slot option does not accept argument 0 for slot index 0
  - Resolves: #2222596, p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.22.0-2
changelog:
  - timing side-channel in handling of RSA PKCS#1 v1.5 padded ciphertexts (Marvin)
  Resolves: RHEL-22792


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - Resolves: RHEL-23671, ep11 token: support protected keys for extractable keys
  - Resolves: RHEL-23672, ep11 token support for FIPS 2021-session bound EP11 keys
  - Resolves: RHEL-23673, update to 3.23.0


author: Than Ngo <than@redhat.com> - 3.24.0-1
changelog:
  - Resolves: RHEL-50064, update to 3.24.0
  - Resolves: RHEL-50063, opencryptoki CCA Token support for x86_64 and ppc64le
  - Resolves: RHEL-50058, openCryptoki CCA token support of Dilithium
  - Resolves: RHEL-50056, openCryptoki cca token SHA3 support
  - Resolves: RHEL-50057, openCryptoki cca token RSA OAEP v2.1 support


author: Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
changelog:
  - Added some linker hardening flags to pass annocheck
    Related: rhbz#2031802

    * Tue Dec 14 2021 Michael Petlan <mpetlan@redhat.com> - 1.0.0-5
  - Added gating
    Related: rhbz#2031794


author: Michael Petlan <mpetlan@redhat.com> - 1.2.0-2
changelog:
  - Update to upstream 1.2.0 -- fix opencsd_tag
    Related: rhbz#2041578

    * Fri Jan 21 2022 Michael Petlan <mpetlan@redhat.com> - 1.2.0-1
  - Update to upstream 1.2.0
    Related: rhbz#2041578


author: Ondřej Sloup <osloup@redhat.com> - 1.3.2-71
changelog:
  - Add %verify to ignore modified socket file after install
  - Remove unused OpenSP-1.5 from sources
    Related: rhbz#2193429


author: Ondrej Sloup <osloup@redhat.com> - 1.3.2-72
changelog:
  - Add an environment variable to prevent gating from complaining about rpaths  (rhbz#2193429)
    Related: RHEL-11772


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Paul Howarth <paul@city-fan.org> - 7.17-1
changelog:
  - Update to 7.17
    - Work around antique openssl version in RHEL-7 by formatting dh parameters
      differently
    - Add t/13_weaken.t


author: Petr Pisar <ppisar@redhat.com> - 7.17-6
changelog:
  - Conditionalize POE support
  - Conditionalize Tk support
  - Conditionalize Glib support
  - Conditionalize Event support


author: Paul Howarth <paul@city-fan.org> - 2.13-1
changelog:
  - Update to 2.13
    - Bypass prototypes when testing for lvalue attribute
    - Fixed a class name in tests to avoid conflicting with a core module


author: Paul Howarth <paul@city-fan.org> - 1.6-1
changelog:
  - Update to 1.6
    - Fixed confusing Changes entry about Perl's licensing terms (CPAN RT#132843)
    - Added optional Changes testing (skipped unless AUTHOR_TESTING)
    - Reformatted Changes file as per CPAN::Changes::Spec
    - Added optional POD coverage testing (skipped unless AUTHOR_TESTING)
    - Added optional Perl::Critic testing (skipped unless AUTHOR_TESTING)
    - Made code Perl::Critic clean
    - Added optional POD testing (skipped unless AUTHOR_TESTING)
    - Included GitHub repository URLs in metadata now that source code has been
      uploaded to GitHub (as of version 1.5)
    - Included META.json file in addition to META.yml
    - Set minimum required ExtUtils::MakeMaker version to 6.64 to ensure that all
      parameters used are supported, to save jumping through hoops to support
      earlier versions (this should not be a problem since ExtUtils::MakeMaker
      6.64 is easily installed into Perl 5.8.1 and above, that being the whole
      point of the new choice of minimum supported Perl version)
    - Set minimum required Perl version to 5.8.1; this is in line with the
      minimum requirement of the "Perl Toolchain"
    - Corrected typo in a comment (CPAN RT#86336)
  - Use author-independent source URL
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Package Artistic, Copying and LICENCE licence files


author: Emmanuel Seyman <emmanuel@seyman.fr> - 0.318-1
changelog:
  - Update to 0.318
  - Add perl(File::Slurper) as a dependency
  - Use /usr/bin/perl instead of perl
  - Use %{make_install} instead of make pure_install
  - Use %{make_build} instead of make


author: Paul Howarth <paul@city-fan.org> - 2:1.52-1
changelog:
  - Update to 1.52
    - Added a $dt->is_between($dt1, $dt2) method (based on GH#97)
    - Simplify the calculation of leap seconds in XS (GH#91); this is a little
      more efficient for most use cases (anything with future or recent past
      datetimes)


author: Paul Howarth <paul@city-fan.org> - 0.8200-4
changelog:
  - Fix License: tag to reflect content of actual shipped files, not just what
    the LICENSE file says (#1600504, CPAN RT#125832)


author: Paul Howarth <paul@city-fan.org> - 1:1.77-1
changelog:
  - Update to 1.77
    - When the parsed string contained an invalid time zone offset (parsed with
      "%z") like "-9999", the error handling set in the parser's constructor was
      ignored and an exception was always thrown (GH#25)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1:1.78-1
changelog:
  - Update to 1.78
    - Fix tests for new failure caused by locale data changes in DateTime::Locale
      1.29 (GH#28)
    - Added a warning about using locale-specific patterns; some of these patterns
      can change quite a bit as the locale data is updated, so using them for
      parsing does not produce stable results across time - this is what caused
      the test failures that this release fixes


author: Michal Josef Spacek <mspacek@redhat.com> - 1:1.79-1
changelog:
  - Update to 1.79
    - Fix too-strict type checking for time zones: this module now uses the same
      check as DateTime itself, which allows for things that don't subclass
      DateTime::TimeZone as long as they provide the same API (GH#30) (rhbz#1964546)


author: Paul Howarth <paul@city-fan.org> - 0.11-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Drop support for building with Test::More < 0.88
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license where possible


author: Paul Howarth <paul@city-fan.org> - 0.3.4-1
changelog:
  - Update to 0.3.4
    - Now at https://github.com/shlomif/perl-file-find-object
    - tidyall
    - Add *~ files to MANIFEST.SKIP (GH#1)


author: Paul Howarth <paul@city-fan.org> - 0.3.5-1
changelog:
  - Update to 0.3.5
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.14-1
changelog:
  - Update to 1.14
    - Remove MAP_TARGET from Makefile.PL (CPAN RT#91590)
    - Fix for Solaris setuid when root running as other user (CPAN RT#88271)
    - Add strict/warnings to Tty.pm
    - Fix pod errors
    - Typo: s/dependend/dependent/
    - Prevent spurious warning from get_winsize()
    - Fix usage of setsid
    - Github actions testing; Windows is off of course
    - Make README.md
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.14-5
changelog:
  - Fix FTBFS due to false detection of strlcpy() and _getpty()
    https://github.com/toddr/IO-Tty/pull/24
  - Modernize spec using %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 1.15-1
changelog:
  - Update to 1.15
    - Skip winsize test on Solaris and QNX NTO (GH#22)
    - Make function tests more robust (GH#24)
    - Work around a header name collision on util.h; this is breaking on recent
      OSX (GH#26)


author: Paul Howarth <paul@city-fan.org> - 1.16-1
changelog:
  - Update to 1.16
    - Switch to GitHub for issue tracker
    - Switch to testsuite CI workflow
    - Tidy


author: Paul Howarth <paul@city-fan.org> - 2.112-1
changelog:
  - Update to 2.112
    - Added the change log from any prior source that could be found, and
      formatted the log to fit metacpan.org loose standards
    - Change use vars qw() to our $whatever instead
    - Hide IO::WrapTie subclasses from PAUSE
    - Rebuild Makefile.PL to contain all of the prerequisites
    - Convert README to README.md
    - Fix the documentation in the main module, IO::Stringy to better indicate
      where to get info and how to use the module
    - Fix the dist's META information to indicate the original author and license
    - Add a LICENSE file
    - Add AppVeyor CI testing
    - Add Travis CI testing
    - Update t/IO_InnerFile.t to use Test::More and a proper TEMP file
      (CPAN RT#103895)
  - Use author-independent source URL
  - Simplify find command using -delete
  - Add Provides: for perl-IO-Stringy
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.113-1
changelog:
  - Update to 2.113
    - Get rid of use of Common and TBone in all tests
    - Convert to Dist::Zilla for authoring
    - Cleaned up some of the docs (needs more)


author: Paul Howarth <paul@city-fan.org> - 20200505.0-1
changelog:
  - Update to 20200505.0
    - Fix syntax errors in POD examples (GH#125)
    - Switch Readonly testing requirement to a recommends (GH#127)
    - Fix full_result to always return $? (GH#129)
    - kill_kill: Immediately KILL the child process as documented for Win32 (GH#136)
    - Switch to GitHub actions for CI testing
    - Re-structure shipped files into eg/
    - Move author tests into xt/ and test them separately


author: Paul Howarth <paul@city-fan.org> - 2.18-1
changelog:
  - Update to 2.18
    - Update with newest data
    - Mojo 6.0 changed types() into mapping()
    - Mojo 7.94 adds experimental file_type()
    - Mojo 7.94 adds experimental content_type()


author: Paul Howarth <paul@city-fan.org> - 0.39-1
changelog:
  - Update to 0.39
    - Updated distribution metadata and packaging
    - Configuration phase now uses ExtUtils::HasCompiler


author: Paul Howarth <paul@city-fan.org> - 0.112-1
changelog:
  - Update to 0.112
    - Another test fix on Windows, possibly due to a behavior change in
      Cwd::getdcwd


author: Paul Howarth <paul@city-fan.org> - 0.118-1
changelog:
  - Update to 0.118
    - Skip symlink tests on Windows by actually testing symlinks, as Perl 5.33.5
      adds notional support but it's not possible without elevated privileges


author: Paul Howarth <paul@city-fan.org> - 0.008-1
changelog:
  - Update to 0.008
    - Make unread by :crlf on top of :utf8_strict reliable
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.47-1
changelog:
  - Update to 0.47
    - Change Specio constraint object's stringification overloading to return the
      type name rather than the default Perl object stringification, which gives
      you something like
      "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
      special cased to return something you can print
    - All types now overload the 'eq' comparison operator: Moose expects types to
      be comparable in this manner when doing role summation (GH#18)


author: Paul Howarth <paul@city-fan.org> - 0.26-1
changelog:
  - Update to 0.26
    - %DB::sub is now populated correctly for sub names with wide characters or
      nulls (GH#9)
    - Better Perl 5.6 compatibility by lowering prereqs of core modules
    - Test for renaming lexical subs, which should work on Perl 5.22+ (GH#10)
    - Small internal changes to bring implementation in line with changes to
      Sub::Util
    - Fix "Undefined symbol "DPPP_my_croak_xs_usage"" error on some perls
      (CPAN RT#125158)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.130-1
changelog:
  - Update to 1.128
    - Allow 'use Test::Deep' while other modules use Test::Deep::NoTest (GH#76)
    - Added true/false optional imports (GH#41, GH#44)
    - Documentation fixes (GH#79)
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.016-1
changelog:
  - Update to 0.016
    - Add default descriptions to tests
    - Work on ancient Test::Builder code
  - Use author-independent source URL
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.11-1
changelog:
  - Update to 0.11
    - Re-packaging
  - Drop running of extra tests at package build time to avoid need for
    bootstrapping
  - Use %{make_build} and %{make_install}


author: Paul Howarth <paul@city-fan.org> - 0.027-1
changelog:
  - Update to 0.027
    - New :fail_on_warning feature, for more easily seeing where the surprising
      warning appeared during testing
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.029-1
changelog:
  - Update to 0.029
    - New :report_warnings feature, for printing all of the (unexpected) warning
      content when had_no_warnings() is called (GH#10)


author: Paul Howarth <paul@city-fan.org> - 0.030-1
changelog:
  - Update to 0.030
    - Fix tests that can fail when there is already an installed module named
      Foo::Bar::Baz (CPAN RT#132140)


author: Paul Howarth <paul@city-fan.org> - 1.01-1
changelog:
  - Update to 1.01
    - Implement Types::Serialiser::as_bool
    - Slight documentation tweaks
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.002-2
changelog:
  - Incorporate feedback from package review (#1776513)
    - BR: findutils
    - BR: perl(CPAN::Meta::Prereqs)
    - Need perl(ExtUtils::MakeMaker) >= 6.76
    - Add reference to upstream ticket about unnecessary build requirements
      https://github.com/atoomic/XString/issues/2
    - Add run-time dependency on perl(XSLoader)


author: Paul Howarth <paul@city-fan.org> - 0.005-1
changelog:
  - Update to 0.005
    - Fix cstring for Perl 5.32 (GH#6, GH#7)
    - Remove unneeded module dependencies (GH#2)
    - Add compatibility with Perl 5.8 (GH#9)


author: Jitka Plesnikova <jplesnik@redhat.com> - 1:0.81-1
changelog:
  - Update to 0.81
    - Breaking Change: Set $YAML::XS::LoadBlessed default to false to make it
      more secure


author: Paul Howarth <paul@city-fan.org> - 1:0.82-1
changelog:
  - Update to 0.82
    - Updated libyaml sources to 0.2.4; changes affecting YAML::XS are:
      - Output '...' at the stream end after a block scalar with trailing empty
        lines
      - Accept '%YAML 1.2' directives (they are ignored and do not change
        behaviour though)


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.29-1
changelog:
  - Update to 0.29
    - Switch from Test::Requires to Test::Needs
    - Report on the installed versions of more optional modules


author: Mat Booth <mat.booth@redhat.com> - 0.0.7-29
changelog:
  - Unecessary restriction on plexus-util, with the patch it's actually still
    source compatible with older versions


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-5567


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Petr Viktorin <pviktori@redhat.com> - 1.1-1
changelog:
  - Update to 1.1 to fix Python 3.8 compatibility in tests
    https://bugzilla.redhat.com/show_bug.cgi?id=1758446


author: Tomas Orsava <torsava@redhat.com> - 2.6.2-4
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Manually add Provides and Obsoletes for python39-pybind11-devel
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 2.6.2-6
changelog:
  - Introduce epoch to pybind11-devel to sort newer than python3.11-pybind11-devel
  - Resolves: RHEL-38108


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 0-55
changelog:
  - %pyproject_buildrequires: Generate BuildRequires for this package
    This package is already installed, but this way, the resulting SRPM explicitly BuildRequires it


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.0-1
changelog:
  - %pyproject_buildrequires: Add provisional -w flag for build backends without
    prepare_metadata_for_build_wheel hook
    When used, the wheel is built in %pyproject_buildrequires
    and information about runtime requires and extras is read from that wheel.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Charalampos Stratakis <cstratak@redhat.com> - 1:3.4.3-7
changelog:
  - Obsolete and provide the python-sphinx-locale package to fix the upgrade path
  Related: rhbz#1985219


author: Jerry James <loganjerry@gmail.com> - 0.5.0-1
changelog:
  - Version 0.5.0
  - Drop upstreamed -script patch
  - Do not even link to fonts; modify the CSS to point to system fonts
  - Remove all traces of html5shiv


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0-5
changelog:
  - Initial package for RHEL 9
  - Resolves: RHEL-12338
  - Fedora+EPEL contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Miro Hrončok <mhroncok@redhat.com> - 0.4.14-5
changelog:
  - Subpackages python2-greenlet, python2-greenlet-devel have been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-2
changelog:
  - Resolves: RHEL-14292 Backport latest test fixes in python3-ipatests
  - Resolves: RHEL-15443 Server install: failure to install with externally signed CA because of timezone issue
  - Resolves: RHEL-15444 Minimum length parameter in pwpolicy cannot be removed with empty string
  - Resolves: RHEL-14842 Upstream xmlrpc tests are failing in RHEL9.4


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-5
changelog:
  - Resolves: RHEL-12589 ipa: Invalid CSRF protection
  - Resolves: RHEL-19748 ipa hbac-test did not report that it hit an arbitrary search limit
  - Resolves: RHEL-21059 'DogtagCertsConfigCheck' fails, displaying the error message 'Malformed directive: ca.signing.certnickname=caSigningCert cert-pki-ca'
  - Resolves: RHEL-21804 ipa client 4.10.2 - Failed to obtain host TGT
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-21810 ipa-client-install --automount-location does not work
  - Resolves: RHEL-21811 Handle change in behavior of pki-server ca-config-show in pki 11.5.0
  - Resolves: RHEL-21812 Backport latest test fixes in ipa
  - Resolves: RHEL-21813 krb5kdc fails to start when pkinit and otp auth type is enabled in ipa
  - Resolves: RHEL-21815 IPA 389ds plugins need to have better logging and tracing
  - Resolves: RHEL-21937 Make sure a default NetBIOS name is set if not passed in by ADTrust instance constructor


author: 2024 Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-6
changelog:
  - Resolves: RHEL-23627 IPA stops working if HTTP/... service principal was created before FreeIPA 4.4.0 and never modified
  - Resolves: RHEL-23625 sidgen plugin does not ignore staged users
  - Resolves: RHEL-23621 session cookie can't be read
  - Resolves: RHEL-22372 Gating-DL1 test failure in test_integration/test_dns_locations.py::TestDNSLocations::()::test_ipa_ca_records
  - Resolves: RHEL-21809 CA less servers are failing to be added in topology segment for domain suffix
  - Resolves: RHEL-17996 Memory leak in IdM's KDC


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-7
changelog:
  - Resolves: RHEL-25260 tier-1-upstream-dns-locations failed on RHEL8.8 gating
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available
  - Resolves: RHEL-25815 Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-8
changelog:
  - Resolves: RHEL-12143 'ipa vault-add is failing with ipa: ERROR: an internal error has occurred in FIPS mode
  - Resolves: RHEL-25738 ipa-kdb: Cannot determine if PAC generator is available


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-9
changelog:
  - Resolves: RHEL-28258 vault fails on non-fips client if server is in FIPS mode
  - Resolves: RHEL-26154 ipa: freeipa: specially crafted HTTP requests potentially lead to DoS or data exposure


author: Florence Blanc-Renaud <flo@redhat.com> - 4.11.0-10
changelog:
  - Resolves: RHEL-23377 Enforce OTP for ldap bind (in some scenarios)
  - Resolves: RHEL-29745 Unable to re-add broken AD trust - NT_STATUS_INVALID_PARAMETER
  - Resolves: RHEL-30905 Backport latest test fixes in ipa


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39140 Rebase ipa to the latest 4.12 version for RHEL 9.5
  - Resolves: RHEL-34757 The change for preventing deletion of the admin user caused a regression in disable
  - Resolves: RHEL-30553 Depend on nfsv4-client-utils or nfs-utils
  - Resolves: RHEL-29762 IPA sidgen fails to create SID for manually set ID for a new range [rhel-9.5.0]
  - Resolves: RHEL-26261 Fix replica connection check for use with AD administrator
  - Resolves: RHEL-18062 ipa ca-show NAME --certificate-out=file creates empty file when NAME does not exist
  - Resolves: RHEL-12149 traceback in ipaserver/dcerpc.py
  - Resolves: RHEL-4810 [RFE] FreeIPA-to-FreeIPA migration
  - Resolves: RHEL-4807 [RFE] Support in IPA for HSM boxes


author: Julien Rische <jrische@redhat.com> - 4.12.0-4
changelog:
  - Resolves: RHEL-29928 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-29691 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-5
changelog:
  - Resolves: RHEL-37285 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-42703 PSKC.xml issues with ipa_otptoken_import.py
  - Resolves: RHEL-41194 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-39477 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46559 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-22188 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-6
changelog:
  - Resolves: RHEL-47292 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-47146 Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-46009 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-46003 ipa-migrate -V options fails to display version
  - Resolves: RHEL-45463 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-40890 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check
  - Resolves: RHEL-40661 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-7
changelog:
  - Resolves: RHEL-53500 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52306 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52300 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"
  - Resolves: RHEL-52222 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51944 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50804 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-27856 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54546 Covscan issues: Resource Leak
  - Resolves: RHEL-49602 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-40359 With unreachable AD, ipa trust returns an internal error


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Charalampos Stratakis <cstratak@redhat.com> - 6.2.2-2
changelog:
  - Disable tests and documentation generation on RHEL9 to avoid pulling in dependencies
  - Drop redundant build dependency on wcwidth (unused since 6.0.0rc1)


author: Dan Čermák <dan.cermak@cgc-instruments.com> - 0.7.1-5
changelog:
  - BuildRequire python3-setuptools besides python3-devel
    (see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/GCPGM34ZGEOVUHSBGZTRYR5XKHTIJ3T7/)


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.4-3
changelog:
  - Update runtime and buildtime dependencies
  - Remove sqlalchemy, whoosh and xapian dependencies from RHEL9


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-5
changelog:
  - Make the python-wheel-wheel subpackage versioned (python3-wheel-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 1:0.36.2-6
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 0.29.32-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        nbecker <ndbecker2@gmail.com>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomas Hrnciar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.10.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        jonathanspw <jonathan@almalinux.org>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.0.7-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alan Pevec <alan.pevec@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David King <amigadave@amigadave.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        José Abílio Oliveira Matos <jamatos@fedoraproject.org>
        José Matos <jamatos@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Terje Røsten <terje.rosten@ntnu.no>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        yatin <ykarel@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 7.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.8.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Davide Cavalca <dcavalca@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Javier Pena <jpena@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.5.2-1
changelog:
  - Initial import
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.29.35-2
changelog:
  - Initial package
  - Fedora contributions by:
        Alex Cobb <alex.cobb@smart.mit.edu>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <i.gnatenko.brain@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Neal D. Becker <ndbecker2@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        serge-sans-paille <sguelton@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Toshio くらとみ <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Mukundan Ragavan <nonamedotc@gmail.com>
        Tomas Hrcka <thrcka@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.1-1
changelog:
  - Initial package
  - Fedora contributions by:
       Lumir Balhar <lbalhar@redhat.com>
       Miro Hrončok <miro@hroncok.cz>
       Tomas Hrnciar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeroen van Meeuwen (Kolab Systems) <vanmeeuwen@kolabsys.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.2.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Jonathan <jonathan@knownhost.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Pavel Šimovec <psimovec@redhat.com>
        Susi Lehtola <jussilehtola@fedoraproject.org>
        Tom Stellard <tstellar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 7.4.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Viktorin <pviktori@redhat.com>
        Richard Shaw <hobbes1069@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Moschny <thm@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.7.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Christian Heimes <cheimes@redhat.com>
        Fabio Valentini <decathorpe@gmail.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Tomáš Hrnčiar <thrnciar@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Pavel Valena <pvalena@redhat.com> - 3.0.1-154
changelog:
  - Upgrade to Ruby 3.0.2.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix dependencies of gems with explicit source installed from a
    different source.
    Resolves: CVE-2020-36327
  - Pass ldflags to gem install via CONFIGURE_ARGS.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-160
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096347
  - OpenSSL test suite fixes due to disabled SHA1.
    Resolves: rbhz#2107696
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-160
changelog:
  - Bypass git submodule test failure on Git >= 2.38.1.
  - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b.
  - Fix for tzdata-2022g.
  - Fix File.utime test.


author: Jun Aruga <jaruga@redhat.com> - 3.0.4-161
changelog:
  - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS.
    Resolves: RHEL-12724
  - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters
    Related: RHEL-12724


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-162
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-35740
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-35741
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-35742
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-35743
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-35744
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-35746
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-35747


author: Pavel Valena <pvalena@redhat.com> - 3.10.1-7
changelog:
  - Re-add Requires: rubygem(rake), as it's needed for runtime.
    Resolves: rhbz#1982410
    Resolves: rhbz#1982419


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-5
changelog:
  - seabios-Disable-power-support.patch [bz#1951027]
  - Resolves: bz#1951027
    (SeaBios no longer needed for ppc64)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.14.0-7
changelog:
  - seabios-Drop-fedora-bits-they-are-not-tested-and-currently-f.patch [bz#2004169]
  - seabios-Disable-TPM-support.patch [bz#2004169]
  - Resolves: bz#2004169
    (seabios  implements and/or uses the deprecated SHA-1 algorithm by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.15.0-1
changelog:
  - Rebase to seabios to 1.15.0 [bz#2018393]
  - 0003-pci-let-firmware-reserve-IO-for-pcie-pci-bridge.patch [bz#2001732]
  - 0004-pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001732]
  - Resolves: bz#2018393
    ([rebase] update seabios to nov '21 release)
  - Resolves: bz#2001732
    ([virtual network][qemu-6.1.0-1] Fail to hotplug nic with rtl8139 driver)


author: Paweł Poławski <ppolawsk@redhat.com> - 1.16.0-1
changelog:
  - Rebase to upstream 1.16.0 release [bz#2066826]
  - Resolves: bz#2066826
    (rebase seabios to 1.16 release)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-2
changelog:
  - seabios-malloc-use-variable-for-ZoneHigh-size.patch [bz#2004662]
  - seabios-malloc-use-large-ZoneHigh-when-there-is-enough-memor.patch [bz#2004662]
  - Resolves: bz#2004662
    (RFE: "Unable to allocate resource at romfile_loader_allocate:87" when running very large VMs)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-3
changelog:
  - seabios-pci-refactor-the-pci_config_-functions.patch [bz#2086407]
  - seabios-reset-force-standard-PCI-configuration-access.patch [bz#2086407]
  - Resolves: bz#2086407
    (qemu reboot problem with seabios 1.16.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.0-4
changelog:
  - seabios-virtio-blk-use-larger-default-request-size.patch [bz#2108555]
  - Resolves: bz#2108555
    ([rhel.9.1] Loading a kernel/initrd is sometimes very slow)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-1
changelog:
  - Rebase to 1.16.3 [RHEL-19239]
  - Removed vgabios-qxl.bin [RHEL-383]
  - Resolves: RHEL-19239
    (Rebase seabios to 1.16.3)
  - Resolves: RHEL-383
    (remove vgabios-qxl.bin from seavgabios in rhel9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-2
changelog:
  - seabios-add-hwerr_printf-function-for-threads.patch [RHEL-7110]
  - seabios-display-error-message-for-blocksizes-512.patch [RHEL-7110]
  - Resolves: RHEL-7110
    ([seabios] Can't boot from a disk with 4K sector size)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 8.16.1-1
changelog:
  - New version
    Resolves: rhbz#1853885
  - Dropped smtp-session-reuse-fix, openssl-1.1.0-fix, openssl-1.1.0-ecdhe-fix,
    gethostbyname2, fix-covscan-issues, gcc-10-fix patches (not needed)
  - Dropped format-security patch (upstreamed)
  - Updated patches


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-4
changelog:
  - useradd: modify check ID range for system users. Resolves: #2004911
  - Fix release sources
  - Add subid requirement for subid-devel


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-7
changelog:
  - useradd: check if subid range exists for user. Resolves: #2179987
  - find_new_[gu]id: Skip over IDs that are reserved for legacy reasons. Resolves: #2179988


author: Tomas Korbar <tkorbar@redhat.com> - 1.2.0-11
changelog:
  - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
  - Resolves: CVE-2020-23903


author: Orion Poplawski <orion@nwra.com> - 5.4.0-1
changelog:
  - Update to 5.4.0
  - Use upstream shared library builds
  - Build with metis
  - Explicitly list libraries and soname versions


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Robert-André Mauchin <zebob.m@gmail.com> - 4.0.2-16
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Štěpán Horáček <shoracek@redhat.com> - 3.2.2-1
changelog:
  - Rebase to 3.2.2
  - Use systemd-sysusers to create user
    Resolves: CVE-2023-22745
    Resolves: rhbz#2095479
    Resolves: rhbz#2160307
    Resolves: rhbz#2162613


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Hans de Goede <hdegoede@redhat.com> - 1:3.2.7b-1
changelog:
  - New upstream release 3.2.7b
  - Add patch fixing CVE-2019-19746 (rhbz#1787040)
  - Add patch fixing CVE-2019-19797 (rhbz#1786726)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-7
changelog:
  - Fixed CVE-2020-21681 (#1998350)
  - Fixed CVE-2020-21683 (#1998594)
  - Fixed CVE-2020-21680 (#1998306)
  - Fixed CVE-2020-21684 (#2000747)
  - Fixed CVE-2020-21678 (#2000741)
  - Fixed CVE-2020-21676 (#2000751)
  - Fixed CVE-2020-21682 (#2000738)


author: Ondrej Dubaj <odubaj@redhat.com> - 1:3.2.7b-8
changelog:
  - Fixed CVE-2020-21529 (#2005518)
  - Fixed CVE-2020-21532 (#2006007)
  - Fixed CVE-2020-21531 (#2006002)


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Rebase to latest upstream: 0.13.0
  - Keeps usbredirserver binary (removed upstream)
    Related: rhbz#2135760


author: Victor Toso <victortoso@redhat.com> - 0.13.0-2
changelog:
  - Fixes 100% CPU usage when usbredirect used as TCP server
    Related: rhbz#2157520
  - Fixes USB redirection of identical devices
    Resolves: rhbz#2157520


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Ingvar Hagelund <ingvar@redpill-linpro.com> 6.5.1-2
changelog:
  - Pulled support for el6
  - Pulled support for sysvinit
  - aarch64 builds now with jemalloc again on el7


author: Luboš Uhliarik <luhliari@redhat.com> - 6.5.2-1
changelog:
  - new version 6.5.2
  - Resolves: #1984185 - Rebase varnish to 6.5.2
  - Resolves: #1982858 - CVE-2021-36740 varnish: HTTP/2 request smuggling attack
    via a large Content-Length header for a POST request


author: Tomas Korbar <tkorbar@redhat.com> - 6.6.2-5
changelog:
  - Add parameters h2_rst_allowance and h2_rst_allowance_period to mitigate CVE-2023-44487
  - Resolves: RHEL-12818


author: Luboš Uhliarik <luhliari@redhat.com> - 6.6.2-6
changelog:
  - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result
    in denial of service (CVE-2024-30156)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.64.2-1
changelog:
  - Update to 0.64.2
  - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174)
  - Fix the License fields and ship the correct license texts (#1973299)


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-4
changelog:
  - Resolves: #2152064 - CVE-2022-3190 wireshark: f5ethtrailer Infinite loop in legacy style dissector


author: Michal Ruprich <mruprich@redhat.com> - 1:3.4.10-5
changelog:
  - Resolves: #2210864 - Candump log file parser crash
    Resolves: #2210865 - VMS TCPIPtrace file parser crash
    Resolves: #2210868 - NetScaler file parser crash
    Resolves: #2210870 - RTPS dissector crash
    Resolves: #2210871 - IEEE C37.118 Synchrophasor dissector crash


author: Tomas Popela <tpopela@redhat.com> - 1.0.2-8
changelog:
  - Package woff2_decompress, woff2_compress and woff2_info in a tools subpackage.
    Thanks to Tomasz Gąsior <kontakt@tomaszgasior.pl>


author: Mat Booth <mat.booth@redhat.com> - 4.15-5
changelog:
  - Remove springframework conditionals, the deps are a long time removed from
    Fedora and this simplifies the spec a bit
  - Disable unused modules that can't build on JDK 11


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Peter Hutterer <peter.hutterer@redhat.com> 1.0.1-2
changelog:
  - xf86-input-libinput 1.0.1 (#1951879)
  - Fix the upstream source URL
  - Use autosetup instead of manual patch handling


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108157, rhbz#2108162


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-13
changelog:
  - Drop dependency on xorg-x11-font-utils, it was only there for one pkgconfig
    query for a variable that never changes value (#2148292)


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.20.11-14
changelog:
  - CVE fix for: CVE-2022-4283 (#2151801), CVE-2022-46340 (#2151776),
    CVE-2022-46341 (#2151781), CVE-2022-46342 (#2151788),
    CVE-2022-46343 (#2151791), CVE-2022-46344 (#2151798)


author: José Expósito <jexposit@redhat.com> - 1.20.11-22
changelog:
  - CVE fix for: CVE-2023-6377, CVE-2023-6478
    Resolves: https://issues.redhat.com/browse/RHEL-18322
    Resolves: https://issues.redhat.com/browse/RHEL-18329


author: José Expósito <jexposit@redhat.com> - 1.20.11-23
changelog:
  - CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408 and CVE-2024-0409
    Resolves: https://issues.redhat.com/browse/RHEL-21203
    Resolves: https://issues.redhat.com/browse/RHEL-20531
    Resolves: https://issues.redhat.com/browse/RHEL-20380
    Resolves: https://issues.redhat.com/browse/RHEL-20386
    Resolves: https://issues.redhat.com/browse/RHEL-21193
    Resolves: https://issues.redhat.com/browse/RHEL-21200


author: José Expósito <jexposit@redhat.com> - 1.20.11-25
changelog:
  - CVE fix for: CVE-2024-31080, CVE-2024-31081, CVE-2024-31082 and
    CVE-2024-31083
  - Add util-linux as a dependency of Xvfb
  - Fix compilation error on i686


author: Vladis Dronov <vdronov@redhat.com> - 0.8.2-1
changelog:
  - Update to version 0.8.2
  - Drop patch 1-fix-man-page-installation.patch
  - Use SPDX license identifiers


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-1
changelog:
  - Rebase to 0.13.71
  - Drop the CVE patches, they are now part of the upstream package
  - Build no longer requires python2
  - Resolves: 1807565


author: Jakub Martisko <jamartis@redhat.com> - 0.13.71-7
changelog:
  - Remove the doc/zzipdoc/{options,match}.py scritps from the original tar
  - Replace them with a current github version
  - The original version of the files contains autogenerated header with incompatible license
  - This build thus uses modified tar archive
  Resolves: rhbz#1982241


