# changelog

author: Nathan Scott <nathans@redhat.com> - 0.11.8-1
changelog:
  - Update to latest upstream version.
  - Update spec file and resolve a build issue (BZ 2113091).
  - Switch to SPDX licensing.


author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.34-1
changelog:
  - Update to 2.0.34 (rhbz#2105023)
  - Resolve issues found by rpmdiff
    - add a patch to fix getaddrinfo detection to avoid using gethostbyname
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
  - Conditional Perl & Python module build, by default disabled


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-4
changelog:
  - wla-Disable-automatic-log-collector.patch [RHEL-35963]
  - Resolves: RHEL-35963
    ([Azure][WALA] Consider to disable Log collector [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.9.1.1-6
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [RHEL-40966]
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [RHEL-40966]
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [RHEL-40966]
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [RHEL-40966]
  - Resolves: RHEL-40966
    ([Azure][WALA][RHEL-10] Provisioning failed if no ifcfg-eth0)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Radovan Sroka <rsroka@redhat.com> - 0.18.4-1
changelog:
  - aide-0.18.4 is available
  Resolves: rhbz#1910486
  - Please port your pcre dependency to pcre2. Pcre has been deprecated
  Resolves: rhbz#2128267


author: Jaroslav Kysela <perex@perex.cz> - 1.2.7.1-4
changelog:
  - Enable avtp plugin - Peter Robinson <pbrobinson@fedoraproject.org>
  - Enable a52 and lavrate plugins - Yaakov Selkowitz <yselkowi@redhat.com>
  - Remove or soften excess dependendencies - Yaakov Selkowitz <yselkowi@redhat.com>
  - CI test & RHEL cleanups


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231030-1
changelog:
  - Update to upstream 20231030 release
  - Update firmware file for Intel Bluetooth AX203/AX210/AX211/
  - Update firmware file for Intel Bluetooth Magnetor AX101/AX201/AX211
  - rtl_nic: update firmware of RTL8156B
  - Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - i915: Update MTL DMC to v2.17
  - amdgpu: update various firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231111-1
changelog:
  - Update to upstream 20231111 release
  - Move AMD SEV and TEE firmware to amd-ucode package
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Update firmware file for Intel Bluetooth AX101/AX203/AX210/AX211/BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8851b: update fw to v0.29.41.3


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231211-1
changelog:
  - Update to upstream 20231211 release
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - Add a COPYOPTS variable
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - Update firmware for MT7921/MT7922 Bluetooth device
  - Update firmware for MT7921/MT7922 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qcm2290/qrb4210 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - Add firmware for Cirrus CS35L41 for HP G11 Laptops/2024 ASUS Zenbook Laptops
  - add firmware for mt7988 internal 2.5G ethernet phy
  - Update firmware for Magnetor Intel Bluetooth AX101/AX203/AX211
  - Update firmware for SolarF Intel Bluetooth AX101/AX203/AX211
  - Update firmware for Solar Intel Bluetooth AX101/AX203/AX210/AX211


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Update to upstream 20240115
  - Split out Intel/Cirrus audio firmware, ISP firmware, NXP/TI WiFi Firmware
  - Intel Bluetooth: Update firmware file for AX101/AX203/AX210/AX211
  - Cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - Cirrus: Add firmware for CS35L41 for various Dell laptops
  - update firmware for qat_4xxx devices
  - update firmware for w1u_uart
  - Cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312/DCN314
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - Add firmware for Mediatek WiFi/bluetooth chip (MT7925)
  - ASoC: tas2781/tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ath11k: Updates for WCN6855/WCN6750/IPQ8074
  - ath10k: Updates to WCN3990/QCA9888/QCA4019/QCA6174
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - Cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022/2023 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8550/SM8650 QRD


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240624-4
changelog:
  - linux-firmware ships encrypted zip files (named *.ncf) [rhel-10.0.beta] (RHEL-32183)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  Resolves: RHEL-32183


author: Brian Stinson <bstinson@redhat.com> - 40.21-4
changelog:
  - Backport PR #5494 which re-enables copying resolv.conf into the target system to allow resolving dns names in %post
    Resolves: RHEL-26651


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.2-1
changelog:
  - network: guard team devices configuration from kickstart by capabilities
    (rvykydal)
  - network gui: use Capabilites API to guard adding of team device (rvykydal)
  - network: add Capabilities property to API (rvykydal)
  - Do not include teamd on RHEL (rvykydal)
    Resolves: RHEL-33892
  - Update translations from Weblate for rhel-10


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.3-1
changelog:
  - Update translations from Weblate for rhel-10 (github-actions)
  - Add release note for NVMe-oF (vslavik)
    Related: RHEL-27200
  - Add a NVMe-FC tab to the Advanced Storage screen (vslavik)
    Resolves: RHEL-27200
  - Update the .glade file for the Advanced Storage screen (vponcova)
    Related: RHEL-27200
  - Filter out NVMe over Fibre Channel from local disks (vslavik)
    Resolves: RHEL-27200
  - Install nvme-cli on boot.iso (vslavik)
    Resolves: RHEL-27200
  - Add release note for new ping command in Dracut (jkonecny)
    Related: RHEL-32760
  - Add ping tool to Dracut (jkonecny)
    Resolves: RHEL-32760


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.4-1
changelog:
  - Do not require libreport on RHEL 10 (mkolman)
    Resolves: RHEL-35676
  - Update translations from Weblate for rhel-10 (github-actions)
  - Update translations from Weblate for rhel-10 (github-actions)


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.5-1
changelog:
  - Adjust to freerdp and GNOME package changes (mkolman)
    Resolves: RHEL-38407
  - Replace VNC support with GNOME remote desktop (mkolman)
    Resolves: RHEL-38407
  - Rebuild Ask VNC spoke (mkolman)
    Resolves: RHEL-38407
  - Update translations from Weblate for rhel-10 (github-actions)
  - Add RDP boot options & deprecate VNC boot options (mkolman)
    Resolves: RHEL-38407
  - Introduce GNOME remote desktop support (mkolman)
    Resolves: RHEL-38407
  - Rename usevnc flag & similar variables (mkolman)
    Resolves: RHEL-38407
  - Add unit tests for GkKeyboardManager and its API in localization module
    (rvykydal)
    Resolves: RHEL-38399
  - Drop the X.Org server dependency (jexposit)
    Resolves: RHEL-38399
  - Drop xrdb (jexposit)
    Resolves: RHEL-38399
  - Drop xrandr (jexposit)
    Resolves: RHEL-38399
  - Drop libxklavier (jexposit)
    Resolves: RHEL-38399
  - Use GNOME Kiosk's API in LayoutIndicator (jexposit)
    Resolves: RHEL-38399
  - Setup gdbus-codegen (jexposit)
    Resolves: RHEL-38399
  - Use GNOME Kiosk's API in XklWrapper (jexposit)
    Resolves: RHEL-38399
  - Add GNOME Kiosk keyboard manager class (jexposit)
    Resolves: RHEL-38399


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.7-1
changelog:
  - pykickstart: Use RHEL10 kickstart commands (bcl)
    Related: RHEL-36831
  - Fix starting anaconda on z/VM and LPAR s390x (jstodola)
    Resolves: RHEL-45516
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-38998
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-38389


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.8-1
changelog:
  - The RPM tooling generates the compiled python so having automake do it is
    redundant (kkoukiou)
    Resolves: RHEL-46593


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 12.46-1
changelog:
  - Annocheck: Improve detection of -mbranch-protection option.  (RHEL-526)
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - Built By: Add more lang types.


author: Nick Clifton <nickc@redhat.com> - 12.47-1
changelog:
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.


author: Nick Clifton <nickc@redhat.com> - 12.52-1
changelog:
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.


author: Nick Clifton <nickc@redhat.com> - 12.53-1
changelog:
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.54-1
changelog:
  - Spec File: Add annobin plugin document directory to the files section.  (#2279779)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239) (RHEL-37267)


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Highlights:
    - Support for GECOS, street, smb and idp attributes in ipauser module
    - Support for indirect maps in ipaautomountmap module
    - Update of user_auth_type choices in ipaconfig and ipauser modules
    - Update of auth_ind choices in ipahost and ipaservice modules
    - Upstream test and environment enhancements
    - Documentation updates


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Highlights:
    - New idoverridegroup management module.
    - New idoverrideuser management module.
    - New idview management module.
    - New idp management module.
    - Bug fixes and CI improvements.


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Highlights:
    - Fix ipaserver deployment on CentOS 8 Stream
    - Fix ipaclient deployment with automount
    - Fix ipaclient OTP error reporting
    - Add missing support for renaming groups and users
    - Idempotency fixes in several modules


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-2
changelog:
  - The package now provides the Ansible collection freeipa.ansible_freeipa
  - New build requires for ansible-core and python
  - The tests are part of the collection, new provides and obsoletes for the
    -tests sub package


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35566
  - New inventory plugin
    Resolves: RHEL-38947
  - Enable batch command as backend
    Resolves: RHEL-38944
  - New collection sub package
    Resolves: RHEL-38930


author: Thomas Woerner <twoerner@redhat.com> - 1.13.2-1
changelog:
  - Update to version 1.13.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.2
    Resolves: RHEL-35566
  - Convert input certificates
    Resolves: RHEL-44616
  - Fix rolesdeployment with IPA 4.12
    Resolves: RHEL-40870


author: Maxwell G <gotmax@e.email> - 2.2.7-2
changelog:
  - BuildRequire ansible-packaging on Fedora
  - Resolves: rhbz#2126889
  - Fix inverted conditionals and build/install the collection using ansible-galaxy
  - Keep ansible-lint disabled for now
  - Remove unnecessary macros
  - Exclude files with galaxy.yml build_ignore


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.0.0.20240502-5
changelog:
  - Fix some compiler warnings
  - src-main/context.c: Fix warning[-Waddress] &ce->str will always evaluate
    as 'true'
  - mkworddic/mkdic.c: Fix warning[-Wformat-overflow=] '%s' directive
    argument is null


author: Jerry James <loganjerry@gmail.com> - 1.2-34
changelog:
  - Build with log4j support in non-bootstrap mode
  - Convert the License tag to SPDX
  - Update the project URL


author: Neal Gompa <ngompa@fedoraproject.org> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Clean up some pre-1.0 scriptlet cruft
  - Resolves: RHEL-31497 (Backport latest bulid from Fedora 40)


author: Alessandro Astone <ales.astone@gmail.com> - 1.0.2-2
changelog:
  - Backport patch to fix installing swcatalog
  - Resolves: RHEL-31497 (Backport latest build from Fedora 40)


author: Luboš Uhliarik <luhliari@redhat.com> - 1.6.3-10
changelog:
  - add LMDB support and use it on Fedora >= 40
  - Resolves: #1779267 - Remove libdb dependency from apr-util


author: Joe Orton <jorton@redhat.com> - 1.6.3-18
changelog:
  - drop ENGINE support from apr_crypto (RHEL-33728)
  - fix (harmless) gcc snprintf warning in testbuckets.c


author: Richard W.M. Jones <rjones@redhat.com> - 1.14.1-1
changelog:
  - New upstream version 1.14.1
  - Use github tarballs again.
  - New binary augprint.
  - New bash-completions subpackage.


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-4
changelog:
  - Add back with-files-access-provider
  - Remove outdated scriptlets
  - Group merging added to nsswitch.conf group in all profiles
  - myhostname is put right before dns module in nsswitch.conf hosts (rhbz#2257197)
  - Internal packaging changes


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:5.1.9-7
changelog:
  - RHEL-39412 - Remove autofs dependency on libnsl2
    - remove BuildRequires: libnsl2-devel.
  - Resolves: RHEL-39412


author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Christian Krause <chkr@fedoraproject.org> - 0.8-18
changelog:
  - Install glade file for avahi-discover-standalone unconditionally
    (fixes #2036073 and #2126721)
  - Install desktop files for bssh and bvnc unconditionally


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Michael Jeanson <mjeanson@efficios.com> - 1.5.11-1
changelog:
  - New upstream release
  - Drop patches merged upstream
  - Add builddep on python3-setuptools for Python 3.12+


author: Jens Petersen <petersen@redhat.com> - 0.1-4
changelog:
  - revert default to normal green (not bright/bold)
  - set prompt_color_force to override interactive terminal checks
  - drop bold from red error code


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jerome Marchand <jmarchan@redhat.com> - 0.29.1-1
changelog:
  - Rebase to the latest release version (#2253688)
  - Enable libbpf-tools on s390x (#2249458)
  - Misc 0.29.1 fixes


author: Jerome Marchand <jmarchan@redhat.com> - 0.30.1-1
changelog:
  - Rebase to the latest version (RHEL-32379)
  - Really prevent the loading of compromised headers (CVE-2024-2314)
  - Add python3-pyelftools dependency
  - Exclude unsupported tools


author: Nick Clifton <nickc@redhat.com> - 2.41-43
changelog:
  - Do not enable '-z separate code' by default - allow packages to choose to do it.
  - Add fix for discarded section counting for AArcch64 DT_RELR relocs.  (RHEL-42765)


author: Arjun Shankar <arjun@redhat.com> - 3.8.2-6
changelog:
  - Analyse bison sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222079)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.8.2-1
changelog:
  - tests: Ignore new pylint false positive with pylint 3.0 (vtrefny)
  - pylint: Use 'exit' instead of 'do_exit' for pylint.lint.Run (vtrefny)
  - Revert "When creating a shared LVM VG skip pvcreate" (vtrefny)
  - Revert "Force command line based libblockdev LVM plugin" (vtrefny)
  - ci: Bump actions/checkout from v2/3 to v4 (vtrefny)
  - spec: Add libblockdev-nvme as weak dependency (vtrefny)
  - Always require NVMe plugin (vtrefny)
  - Enable LVM logging only in debug mode (vtrefny)
  - nvme: Require additional rpms for dracut (tbzatek)
  - Force command line based libblockdev LVM plugin (vtrefny)
  - When creating a shared LVM VG skip pvcreate (vtrefny)
  - Add support for creating shared LVM setups (vtrefny)
  - nvme: Align HostNQN and HostID format to TP4126 (tbzatek)
  - README: Fix typo (vtrefny)
  - README: Update Debian dependencies for libblockdev 3.0 (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.9.0-1
changelog:
  - Fix getting default LVM cache metadata size from libblockdev (vtrefny)
  - Fix checking for segment type for cache pools (vtrefny)
  - tests: Enable GFS2 tests (vtrefny)
  - tests: Move 'test_labels' to unit tests (vtrefny)
  - Add a new function to check if a filesystem is empty (vtrefny)
  - tests: Wait for array resync in MD tests (vtrefny)
  - misc: Vagrantfile update (vtrefny)
  - tests: Add a simple unit test for the NVMe module (vtrefny)
  - tests: Add a test case with multiple devices with the same name (vtrefny)
  - tests: Add basic unit tests for device_id (vtrefny)
  - tests: Add a simple test for DeviceTree.get_device_by_device_id (vtrefny)
  - Use get_device_by_device_id instead of _by_name in populator (vtrefny)
  - Add a function to get a device by device ID (vtrefny)
  - Add "device ID" that could be used as a unique device identifier (vtrefny)
  - Fix adding new members to array with redundancy (vtrefny)
  - Correctly set md_uuid when adding/removing member to/from array (vtrefny)
  - tests: Add storage test case for MD RAID (vtrefny)
  - Remove unused pylintcodediff helper script (vtrefny)
  - tests: Add a simple unit test for Btrfs (vtrefny)
  - Generate UUID for newly created btrfs volumes (vtrefny)
  - nvme: Retrieve HostNQN from a first active fabrics connection (tbzatek)
  - ci: Set custom release number for Packit (vtrefny)
  - Support partitioning of hybrid boot disks (vponcova)
  - Fix checking PV free space when removing it from a VG (#2232328) (vtrefny)
  - tests: run_tests script enhancements (vtrefny)
  - Add a BTRFS example (vtrefny)
  - tests: Add a storage test case for BTRFS (vtrefny)
  - Remove support for NVDIMM namespaces (vtrefny)
  - Fix passing extra mkfs arguments to libblockdev (vtrefny)
  - ci: Add a GH action to run blivet-gui test suite on PRs (vtrefny)
  - ci: Add a Dockerfile for building a CI container (vtrefny)
  - ci: Allow installing only build dependencies without test deps (vtrefny)
  - Fix failing tests when running as a non-root user (vtrefny)
  - Add flag to control LVM devices file support (vtrefny)
  - Use libblockdev to check for kernel modules availability (vtrefny)
  - Use libblockdev to remove filesystems instead of calling wipefs (vtrefny)
  - swap: Use libblockdev to check label and UUID format (vtrefny)
  - fs_test: Enable NTFS test case (vtrefny)
  - availability: Remove the unused "lvmdevices" application (vtrefny)
  - availability: Cleanup applications (vtrefny)
  - Remove support for Apple HFS format (vtrefny)
  - Fix raising FormatCreateError in FS._create (vtrefny)
  - Use libblockdev for filesystem mount operation (vtrefny)
  - Use os.statvfs instead of df to get tmpfs size (vtrefny)
  - Use libblockdev to create supported filesystems (vtrefny)
  - Use libblockdev for reading filesystem label (vtrefny)
  - Use libblockdev for getting filesystem info and size (vtrefny)
  - Use libblockdev for filesystem resizing (vtrefny)
  - Use libblockdev for setting and checking filesystem label and UUID (vtrefny)
  - swap: Simplify creating swap with UUID (vtrefny)
  - Use libblockdev for the filesystem sync operation (vtrefny)
  - Add libblockdev filesystem plugin to the list of required plugins (vtrefny)
  - availability: Remove unused "mlabel" application (vtrefny)
  - availability: Simplify checks for LVM VDO and shared LVM support (vtrefny)
  - availability: Do not check e2fsprogs version (vtrefny)
  - Remove JFS support (vtrefny)
  - Remove support for ReiserFS (vtrefny)
  - ci: Update default branch for Packit to 3.9-devel/release (vtrefny)
  - fcoe/iscsi: Use libblockdev to load modules instead of modprobe (vtrefny)
  - Added missing fstab object to SwapSpace (japokorn)
  - misc: Update test dependencies ansible playbook (vtrefny)
  - misc: Simplify the makebumpver script (vtrefny)
  - Do not fail when kpartx is not available (vtrefny)
  - Move kpartx dependency from DMDevice to MultipathDevice (vtrefny)
  - ci: Update default branch for Packit to 3.9-devel/release (vtrefny)
  - Include btrfs volumes names/labels in DeviceTreeBase.names (vtrefny)
  - fixed fstab.read issue (japokorn)
  - Added support for user defined values in fstab (japokorn)
  - Incorporated review comments (japokorn)
  - Fstab support (japokorn)
  - add udev-builtin-path_id property to zfcp-attached SCSI disks (maier)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-1
changelog:
  - Added support for PV grow (japokorn)
  - misc: Add stratis-cli and stratisd to test dependencies (vtrefny)
  - tests: Add a base class for stratis tests (vtrefny)
  - Add a Stratis example with pool encryption using Clevis/Tang (vtrefny)
  - Clear VG UUID from PVs after removing the PV (#2278058) (vtrefny)
  - Use longer timeout for Stratis DBus calls (vtrefny)
  - safe-dbus: Allow using custom timeouts for the DBus calls (vtrefny)
  - Catch JSONDecodeError when parsing Stratis Clevis info (vtrefny)
  - Add support for unlocking locked Stratis pools with Clevis (vtrefny)
  - Add support for creating encrypted Stratis pool with Clevis (vtrefny)
  - Round Stratis Filesystem size down to the nearest sector (vtrefny)
  - Make sure to include stderr when gathering output of stratis tools (vtrefny)
  - Add support for adding new members to existing Stratis pool (vtrefny)
  - Base StratisPoolDevice on ContainerDevice instead of StorageDevice (vtrefny)
  - Ignore invalid/empty UUIDs for NVMe namespaces (vtrefny)
  - lvm: Use more generic exception for inconsistent PV sector sizes (vtrefny)
  - Do not allow creating stratis pools with different sector sizes (vtrefny)
  - availability: Fix starting DBus services (vtrefny)
  - fstab: Use 'mount_type' when writing filesystem type to fstab (vtrefny)
  - Add basic support for BitLocker devices (vtrefny)
  - nvme: Skip startup/write when NVMe plugin isn't available (vtrefny)
  - Fix scanning partitions on RAID arrays (#2269133) (vtrefny)
  - Add a test case with DDF BIOS RAID array (vtrefny)
  - tests: Try to get distro and version from /etc/os-release (vtrefny)
  - availability: Fix checking for DBus service availability (vtrefny)
  - ci: Update packit configuration for 3.10-devel (vtrefny)
  - Remove vim formatting comments (vtrefny)
  - tests: Do not ignore entire test files in pylint (vtrefny)
  - tests: Do not try to import mock and patch from mock (vtrefny)
  - Remove util.stringize and unicodeize functions (vtrefny)
  - Remove Python SIX usage (vtrefny)
  - Remove unused flags and do not read flags from boot command line (vtrefny)


author: Sandro Bonazzola <sbonazzo@redhat.com> - 5.70-2
changelog:
  - Fix access modes for /etc/bluetooth and /var/lib/bluetooth as expected
    by bluetooth.service.
  - Resolves: fedora#2144504


author: Peter Robinson <pbrobinson@fedoraproject.org> - 5.70-3
changelog:
  - Fix some input devices disconnecting right after connecting
  - Explicitly enable Bluetooth BAP/BASS/CSIP/MCP/MICP/VCP profiles


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.19-7
changelog:
  - Update IANA numbers
  - Apply patch from CentOS Stream, never applied upstream:
    Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)
  - Apply patches from Debian, never applied upstream:
    - fix tsol buffer overflow,
      https://sourceforge.net/p/ipmitool/mailman/message/24405281/
    - fix non-analog sensor readings, https://sourceforge.net/p/ipmitool/bugs/490/
  - Update /var/run to /run in ipmievd.service that systemd warns about (#2100475)


author: Patrick Palka <ppalka@redhat.com> - 1.83.0-0
changelog:
  - Rebase to 1.83.0
  - See https://fedoraproject.org/wiki/Changes/F40Boost183
  - Drop patch for accumulators library that has since been applied upstream.
  - Fix spurious Boost.Regex test failures.


author: Viktor Malik <vmalik@redhat.com> - 0.21.1-1
changelog:
  - Rebased to version 0.21.1
  - Resolves: RHEL-36076
  - Rebuilt for LLVM 18
  - Resolves: RHEL-27729
  - Enable gating
  - Resolves: RHEL-45249


author: Jindrich Novy <jnovy@redhat.com> - 2:1.36.0-1
changelog:
  - buildah-1.36.0-1.el10
  - update to https://github.com/containers/buildah/releases/tag/v1.36.0
  - Resolves: RHEL-30618


author: Arjun Shankar <arjun@redhat.com> - 2.0.20230521-2
changelog:
  - Analyse byacc sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222081)


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-2
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Adam Samalik <asamalik@redhat.com> - 10.0-0.8
changelog:
  - Add a re-signed centosofficial keys using SHA256
  - Drop old unused keys
  - Enable signature checks in repos


author: Carl George <carl@redhat.com> - 10.0-0.12
changelog:
  - Add distcore macro to allow dist overrides that don't mask distprefix, distsuffix, or bootstrap macros
  - Resolves: RHEL-38900


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-3
changelog:
  - drop default chrony.keys config (#2104918)
  - add chronyd-restricted service for minimal NTP client configurations
  - convert license tag to SPDX


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-4
changelog:
  - ci-Report-full-specific-version-with-cloud-init-version.patch [RHEL-34764]
  - Resolves: RHEL-34764
    ([RHEL-10] cloud-init should report full version with "cloud-init --version" )


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-5
changelog:
  - ci-feat-Set-RH-ssh-key-permissions-when-no-ssh_keys-gro.patch [RHEL-36456]
  - Resolves: RHEL-36456
    ([RHEL-10] Group ssh_keys is missing and ssh host key permission is changed in rhel-10)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-6
changelog:
  - ci-.distro-spec-remove-dependency-on-net-tools.patch [RHEL-39345]
  - Resolves: RHEL-39345
    ([RHEL-10] Remove dependency on net-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-7
changelog:
  - ci-Add-back-dependency-on-python3-configobj.patch [RHEL-39347]
  - Resolves: RHEL-39347
    ([RHEL-10] Requires dependency python3-configobj)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-8
changelog:
  - ci-.distro-spec-add-missing-dependencies-for-cloud-init.patch [RHEL-41010]
  - Resolves: RHEL-41010
    ([RHEL-10] Add missing Requires dependency in cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-10
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-44334]
  - ci-fix-jsonschema-Add-missing-sudo-definition-5418.patch [RHEL-44338]
  - ci-doc-update-examples-to-reflect-alternative-ways-to-p.patch [RHEL-44338]
  - ci-Update-pylint-version-to-support-python-3.12-5338.patch [RHEL-44599]
  - Resolves: RHEL-44334
    ([RHEL-10] cloud-init fails to configure DNS search domains)
  - Resolves: RHEL-44338
    ([RHEL-10] fix `SUDO` configuration schema for users and groups)
  - Resolves: RHEL-44599
    ([rhel-10] fix pylint error and support python 3.12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-11
changelog:
  - ci-Deprecate-the-users-ssh-authorized-keys-property-516.patch [RHEL-45263]
  - ci-docs-Add-deprecated-system_info-to-schema-5168.patch [RHEL-45263]
  - ci-fix-schema-permit-deprecated-hyphenated-keys-under-u.patch [RHEL-45263]
  - Resolves: RHEL-45263
    (Deprecate the users ssh-authorized-keys property and permit deprecated hyphenated keys under users key [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-12
changelog:
  - ci-Support-metalink-in-yum-repository-config-5444.patch [RHEL-44918]
  - ci-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-IPv6-ad.patch [RHEL-35562]
  - Resolves: RHEL-44918
    ([RFE] Support metalink in yum repository config [rhel-10])
  - Resolves: RHEL-35562
    ([RHEL-10] It leaves the ipv6 networking config as blank in NM keyfile when config dhcp ipv6 with customization spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-13
changelog:
  - ci-fix-add-schema-rules-for-baseurl-and-metalink-in-yum.patch [RHEL-46874]
  - Resolves: RHEL-46874
    (Suggest to update schema to support metalink [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.33-9
changelog:
  - cu-Drop-obsolete-gdisk-soft-dependency.patch [RHEL-36095]
  - Resolves: RHEL-36095
    (Remove cloud-utils-growpart dependency on obsolete gdisk)


author: Packit <hello@packit.dev> - 314-1
changelog:
  - Diagnostic reports: Fix command injection vulnerability with crafted report names
  - Storage: Improvements to read-only encrypted filesystems


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 311-1
changelog:
  - Allow pasting multiple SSH keys at once in Create VM dialog
  - Fix detaching host device for running VMs


author: Packit <hello@packit.dev> - 89-1
changelog:
  - Use binary http channel for podman socket for non-UTF-8 robustness
  - Stop using obsolete cockpit.utf8_{de,en}coder() API
  - Fix tests for CentOS/RHEL 10


author: Packit <hello@packit.dev> - 14-1
changelog:
  - Upgrade to PatternFly 5 Alpha
  - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684
  - package.json: Pin down versions of @patternfly/react-{styles,icons}
  - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225
  - Makefile: Fix watch dependencies
  - Update release.yml
  - Automate the release process


author: Packit <hello@packit.dev> - 15-1
changelog:
  - Config: Update to authselect with-tlog feature
  - stylelint: handle stylelint-scss deprecation
  - Add ruff configuration
  - package.json: drop flowtype plugin
  - package.json: drop po2json
  - package.json: document the required nodejs version
  - fmf: Plumb through $TEST_* variables for unexpected messages
  - tests: Use mc for testPlayBinary
  - package.json: drop deprecated eslint-plugin-standard
  - Revert "build: add support for /pybridge scenario"
  - Player: Stop making the Terminal object state
  - build.js: support flags
  - packaging: Update spec License: to SPDX format
  - build.js: Fix LINT env variable check
  - Tests: Allow charset journal messages
  - Update to the new root creation function
  - package.json: Bump stylelint to 15
  - test: add check for sssd config id_provider proxy
  - Tests: Allow invalid non-UTF8 journal messages
  - Add xterm-canvas-addon dependency for rendering
  - Minor Eslint fixes
  - Tests: Update data list to PF5 for testAppMenu
  - Update org.cockpit-project.session-recording.metainfo.xml
  - Makefile: bump our test/common dependency
  - patternfly-5-overrides should be auto-imported by the page.scss file
  - Drop obsolete pf-m-redhat-font class


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.11-1
changelog:
  - conmon-2.1.11-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.11
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.12-1
changelog:
  - conmon-2.1.12-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.12
  - Related: RHEL-34195


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Kamil Dudka <kdudka@redhat.com> - 9.2-3
changelog:
  - copy: fix --reflink=auto to fallback in more cases (#2180056)
  - cksum: fix reporting of failed checks (#2180056)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.13
changelog:
  - update from trunk
    - PRs analyzer/109251, analyzer/110902, analyzer/110928, analyzer/111305,
  	analyzer/111441, analyzer/112974, analyzer/112975, analyzer/113505,
  	analyzer/113619, analyzer/114286, analyzer/114408, analyzer/114473,
  	bootstrap/114369, c++/59465, c++/100557, c++/110323, c++/111918,
  	c++/112631, c++/112724, c++/114349, c++/114439, c/109619, c/114364,
  	fortran/30802, fortran/55978, fortran/101135, fortran/103715,
  	fortran/107426, fortran/111781, fortran/114475, ipa/108802,
  	ipa/114254, libfortran/107031, libgcc/111731, libgcc/114397,
  	libstdc++/101228, libstdc++/113841, libstdc++/114316,
  	libstdc++/114359, libstdc++/114367, libstdc++/114394,
  	libstdc++/114400, libstdc++/114401, middle-end/111151,
  	middle-end/111632, middle-end/111683, middle-end/113396,
  	middle-end/114347, middle-end/114348, middle-end/114480,
  	modula2/113836, modula2/114296, modula2/114380, modula2/114418,
  	modula2/114422, modula2/114443, modula2/114444, modula2/114478,
  	rtl-optimization/101523, rtl-optimization/112415, sanitizer/111736,
  	target/99829, target/111822, target/112651, target/114049,
  	target/114150, target/114175, target/114194, target/114272,
  	target/114323, target/114334, target/114352, target/114407,
  	target/114431, testsuite/114320, testsuite/114486,
  	tree-optimization/96147, tree-optimization/109925,
  	tree-optimization/111736, tree-optimization/113727,
  	tree-optimization/114057, tree-optimization/114151,
  	tree-optimization/114322, tree-optimization/114329,
  	tree-optimization/114365, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114405,
  	tree-optimization/114425, tree-optimization/114433,
  	tree-optimization/114464, tree-optimization/114469,
  	tree-optimization/114471


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.14
changelog:
  - update from trunk
    - PRs analyzer/114588, bootstrap/106472, c++/91079, c++/99377, c++/100667,
  	c++/103825, c++/104040, c++/111132, c++/114377, c++/114462,
  	c++/114479, c++/114537, c++/114561, c++/114562, c++/114572,
  	c++/114580, c/114361, debug/114608, fortran/36337, fortran/50410,
  	fortran/106999, fortran/110987, fortran/112407, fortran/113885,
  	fortran/113956, fortran/114474, fortran/114535, gcov-profile/113765,
  	gcov-profile/114115, gcov-profile/114601, ipa/111571, ipa/113359,
  	ipa/113907, ipa/113964, libquadmath/114533, libquadmath/114623,
  	libstdc++/104606, libstdc++/114519, libstdc++/114633, lto/114655,
  	middle-end/114552, middle-end/114599, middle-end/114604,
  	middle-end/114627, middle-end/114628, modula2/114517,
  	modula2/114520, modula2/114548, modula2/114565, modula2/114617,
  	modula2/114648, rtl-optimization/112560, rtl-optimization/114415,
  	target/88309, target/101865, target/112919, target/113233,
  	target/113986, target/114577, target/114587, target/114590,
  	target/114603, target/114607, testsuite/114034, testsuite/114036,
  	testsuite/114307, testsuite/114614, testsuite/114642,
  	testsuite/114662, tree-optimization/112303,
  	tree-optimization/114115, tree-optimization/114480,
  	tree-optimization/114485, tree-optimization/114551,
  	tree-optimization/114555, tree-optimization/114557,
  	tree-optimization/114566, tree-optimization/114624
    - don't emit VEX encoded AES-NI instructions when just -maes and not -mavx
      is enabled (#2272758, PR target/114576)
    - fix s390* peephole2 to check mode of constant pool entries and for
      64-bit extraction from 128-bit constant pool entry extract the correct
      half of the value (#2273618, PR target/114605)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.15
changelog:
  - update from trunk
    - PRs analyzer/114472, c++/114303, c++/114409, debug/112878,
  	fortran/106500, middle-end/110027, middle-end/114681, target/114639,
  	tree-optimization/109596, tree-optimization/114672
    - fix symbol version of std::__basic_file<char>::native_handle() const
      (PR libstdc++/114692)
    - emit -Whardened warning even for -fhardened -fcf-protection=none
      (#2273610, PR target/114606)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.16
changelog:
  - update from trunk and releases/gcc-14 branch
    - GCC 14.1.0-rc1
    - PRs c++/93595, c++/99426, c++/106820, c++/107457, c++/109966, c++/111284,
  	c++/113141, c++/114078, c++/114393, c++/114426, c++/114600,
  	c++/114634, c++/114691, c++/114706, c++/114709, c++/114784,
  	c++/114795, c++/114888, c/92880, c/114780, d/111650, fortran/89462,
  	fortran/93678, fortran/102597, fortran/103471, fortran/103496,
  	fortran/113793, fortran/114739, fortran/114825, fortran/114959,
  	gcov-profile/114715, gcov-profile/114720, libgcc/114689,
  	libgcc/114755, libgcc/114762, libstdc++/93672, libstdc++/113386,
  	libstdc++/114750, libstdc++/114770, libstdc++/114803,
  	libstdc++/114863, lto/113208, lto/114574, middle-end/112938,
  	middle-end/114753, modula2/112893, modula2/114745, modula2/114807,
  	modula2/114811, modula2/114836, other/114738, preprocessor/114748,
  	rtl-optimization/114768, sanitizer/114687, sanitizer/114743,
  	target/110621, target/112431, target/112432, target/114416,
  	target/114668, target/114676, target/114696, target/114714,
  	target/114741, target/114752, target/114783, target/114794,
  	target/114810, target/114837, target/114861, target/114885,
  	testsuite/113706, testsuite/114744, testsuite/114768,
  	tree-optimization/114403, tree-optimization/114666,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114769,
  	tree-optimization/114787, tree-optimization/114792,
  	tree-optimization/114799, tree-optimization/114832,
  	tree-optimization/114883
  - switch to --with-arch_64=x86-64-v3 for latest RHEL
  - remove obsolete reason for not shipping *.gch* files


author: Marek Polacek <polacek@redhat.com>
changelog:
  - enable hardening and configure with --enable-host-pie --enable-host-bind-now
    on RHEL
  - don't require rocm-runtime on RHEL


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Parag Nemade <pnemade AT redhat DOT com> - 2.9.7-30
changelog:
  - As -dicts subpackage installs files under %{_libdir} path it should not be noarch
  - this fixes FTBFS on F37+


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Tao Liu <ltao@redhat.com> - 1.6.4-6
changelog:
  - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now"
  - add gating.yaml


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.2-1
changelog:
  - Update to 1.0.2
  - Drop support for DRPM in Fedora 39 and higher
  - Don't allow building without zstd
  - Fixes for PyPI wheel
  - Fix building on EL9
  - Adjust printf formats for 64bit time_t on 32bit systems


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.3-1
changelog:
  - Update to 1.0.3
  - Set compression level 10 for zstd and zck
  - Introduce new --no-pretty option to reduce metadata size
  - Use gzip compression by default when --compatibility is specified
  - Default changelog limit restored for --compatibility
  - Use epoch-friendly sub-package interdependencies
  - Enable sqlite shared cache on connection level
  - Fix const-correctness with libxml2-2.12.0
  - Allow specifying zck compression only


author: Jan Kolarik <jkolarik@redhat.com> - 1.0.4-1
changelog:
  - Update to 1.0.4 (RHEL-38831)
  - Extend the --compatibility flag to cover other defaults
  - mergerepo_c and modifyrepo_c now make "pretty" indented xml
  - Fix building due to bash-completion repackaging


author: Jindrich Novy <jnovy@redhat.com> - 1.14.4-1
changelog:
  - crun-1.14.4-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.14.4
  - Resolves: RHEL-34649 RHEL-30621


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240201-1.git9f501f3
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.git0375239
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: stop linting at check-time, relying on upstream CI instead
  - packaging: drop stale workarounds
  - libreswan: do not use up pfs= / ikev2= keywords for default behaviour


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240320-1.git58e3d95
changelog:
  - modules/FEDORA32, FEDORA38, TEST-FEDORA39: drop
  - openssl: mark liboqsprovider groups optional with ?
  - TEST-PQ: add more group and sign values, marked experimental
  - TEST-FEDORA41: add a new policy with __openssl_block_sha1_signatures = 1
  - TEST-PQ: also enable sntrup761x25519-sha512@openssh.com


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240515-1.gita24a14b
changelog:
  - gnutls: use tls-session-hash option, enforcing EMS in FIPS mode
  - gnutls: DTLS 0.9 is controllable again
  - gnutls: remove extraneous newline
  - openssh: remove support for old names of RequiredRSASize


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240521-1.gitf71d135
changelog:
  - nss: unconditionally include p11-kit-proxy
  - TEST-PQ: update algorithm list, mark all PQ algorithms experimental


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240522-1.git77963ab
changelog:
  - Switch to a version based on Fedora 41 crypto-policies
    (20240521-1.gitf71d135.fc41),
    thus replace the changelog below with Fedora changelog
  - Shape up RHEL-10: remove GOST-ONLY policy and GOST subpolicy
  - Shape up RHEL-10: remove NEXT policy
  - Shape up RHEL-10: remove BSI policy
  - Shape up RHEL-10: remove TEST-FEDORA41 policy
  - Shape up RHEL-10: remove NO-SHA1 subpolicy
  - Shape up RHEL-10: remove SHA1 subpolicy
  - Shape up RHEL-10: remove TEST-PQ policy
  - Shape up RHEL-10: disable CAMELLIA in all policies...
  - Shape up RHEL-10: drop FFDHE-1024 from LEGACY
  - Shape up RHEL-10: DEFAULT: remove Fedora-only DSA-SHA1 RPM enablement
  - Shape up RHEL-10: remove Fedora-specific __openssl_block_sha1_signatures...
  - Shape up RHEL-10: disable 3DES in LEGACY
  - Shape up RHEL-10: disable DSA
  - Shape up RHEL-10: mark LEGACY as 80-bit security (@tomato42)
  - Shape up RHEL-10: require TLSv1.2/DTLSv1.2 in all policies
  - Shape up RHEL-10: requre 2048 bit params in LEGACY
  - Shape up RHEL-10: FUTURE: disable CBC ciphers for all but krb5
  - Shape up RHEL-10: disable DHE-DSS even in LEGACY
  - Shape up RHEL-10: gnutls: explicit ECDSA-SECPNNNR1-SHANNN + reorder
  - Shape up RHEL-10: openssh: disable DHE-FFDHE-1024-SHA1 server config hack
  - Shape up RHEL-10: FIPS: disable SHA-1 HMAC in FIPS policy
  - Shape up RHEL-10: FIPS: disable CBC ciphers except in Kerberos
  - Shape up RHEL-10: policies/modules: update AD-SUPPORT away from RC4/MD5
  - Shape up RHEL-10: drop DNSSEC SHA-1 exception from DEFAULT


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Pavol Zacik <pzacik@redhat.com> - 1:2.4.9-1
changelog:
  - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
  - RHEL-25804 Rebase CUPS to next upstream version - 2.4.9


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-4
changelog:
  - 2253985 - cups-browsed crashes when remote CUPS queue found by DNS-SD is not able to response on IPP Get-Printer-Attributes
  - fix several issues reported by openscanhub


author: Jan Macku <jamacku@redhat.com> - 8.3.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38039 - HTTP headers eat all memory


author: Jan Macku <jamacku@redhat.com> - 8.4.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38545 - SOCKS5 heap buffer overflow
      CVE-2023-38546 - cookie injection with none file


author: Jan Macku <jamacku@redhat.com> - 8.5.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-46218 - cookie mixed case PSL bypass
      CVE-2023-46219 - HSTS long file name clears contents


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Martin Osvald <mosvald@redhat.com> - 3.8.3-1
changelog:
  - Fix CVE-2024-34055
  - Fix wrong symlinks to imtest utilities
  - Convert to %autorelease and %autochangelog


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Akira TAGOH <tagoh@redhat.com> - 4.0-5
changelog:
  - Simplified sub-packages and dependencies for CJK.
  - Update serif font to google-noto-serif-gurmukhi-vf-fonts for Punjabi.
    the original serif font for Punjabi, google-noto-naskh-arabic-vf-fonts was
    figured out for Punjabi(Pakistan). but we don't have langpacks-pa_pk.
    So updating based on Punjabi(Indic).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-1
changelog:
  - Update source to upstream version 0.9.7
    * Previous patches 0001-0040 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0041-0053 are now patches 0001-0013
  - Remove /usr/lib/modules-load.d/multipath.conf
    * has been replaced with modprobe@dm_multipath.service unit Wants.


author: Paul Donohue <git@PaulSD.com> - 0.9.7-2
changelog:
  - Modify 0006-RH-add-mpathconf.patch
  - Modify 0008-RH-reset-default-find_mutipaths-value-to-off.patch
    * Fix find_multipaths values in docs and mpathconf


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-5
changelog:
  - Add 0014-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
    * Fix auto_resize code to avoid a segfault
  - Add 0015-multipathd-fix-auto-resize-configuration.patch
    * Fix auto_resize default value


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Jan Kolarik <jkolarik@redhat.com> - 4.19.0-1
changelog:
  - Update to 4.19.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora by default
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - cli: Add a hint for user on transaction file dependency failure
  - cli: Setup filelists metadata for commands that need them
  - util: Add function for detecting file in specs
  - Fix failing API unit test on rawhide (RhBug:2261066)
  - automatic: Use add_security_filters, not _update_security_filters


author: Evan Goode <egoode@redhat.com> - 4.19.1-1
changelog:
  - Update to 4.19.1 (RHEL-38831)
  - Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme`
  - Drop dnf obsoletion temporarily
  - doc: Update FAQ entry on filelists
  - build: Adapt to changes in Fedora packaging of bash-completion
  - Support RPMTRANS_FLAG_DEPLOOPS
  - Add all candidates for reinstall to solver (RHEL-33545)
  - Fix handling installonly packages reasons
  - Remove confusing sentence from documentation
  - Remove "leaf" word from documentation
  - Update documentation of history userinstalled command
  - Onboard packit tests
  - doc: Makecache with timer tries only one mirror
  - ELN: Don't obsolete DNF with DNF5 yet
  - bash-completion: Complete dnf command only if we own it
  - bash-completion: Prepare ownerships for dnf5 switch


author: Jan Kolarik <jkolarik@redhat.com> - 4.20.0-1
changelog:
  - Update to 4.20.0 (RHEL-38831)
  - repoquery: Fix loading filelists when -f is used (RhBug:2276012)
  - remove: --duplicates and --oldinstallonly exit with 0 when nothing to do (RHEL-37552)
  - spec: Do not add user site-packages directory to sys.path (RHEL-26646)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.20.0-2
changelog:
  - Disable downloading filelists by default (RHEL-12355)
  - Fix dnf upgrade-minimal documentation in dnf(8) manual (RHEL-39892)
  - Fix dnf remove-n, install-n, and autoremove-n commands to only match package
    names (RHEL-5747)


author: Evan Goode <egoode@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0 (RHEL-38831)
  - Added pre-transaction plugin
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
    (RHEL-35577)


author: Jan Kolarik <jkolarik@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0 (RHEL-38831)
  - docs: Documentation of needs-restarting boot time (RHEL-35577)
  - man: Prepare pages for dnf5 switch
  - spec: Prepare for switch of dnf5 in Rawhide


author: Petr Pisar <ppisar@redhat.com> - 4.7.0-5
changelog:
  - Remove debug plugin (i.e. dnf debug-dump and and debug-restore commands)
    (RHEL-23706)
  - Enable leaves and show-leaves plugins (RHEL-44922)


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Ondrej Sloup <osloup@redhat.com> - 1.0-83
changelog:
  - Use %patch -P N instead of deprecated %patchN
  - Use RPM macros in the spec file for paths
  - Add comments, improve the structure
  - Unify paths in patch files
  - Simplify install script


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.5.2-1
changelog:
  - Rebase to PKI 11.5.2
  - CVE-2023-4727 pki-core: dogtag ca: token authentication bypass vulnerability


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Pavel Valena <pvalena@redhat.com> - 101-1
changelog:
  - Update to dracut 101.
  - Remove network-legacy module.
  - Additional fixes on top of rebase (see patches).


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-8
changelog:
  - dtc-Properly-harden-built-packages.patch [RHEL-33493]
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.7.0-10
changelog:
  - Fix missing dynamic tags for aarch64 python3 pylibfdt
  - Resolves: RHEL-33493
    (Annocheck FAIL: bind-now (dtc))


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-1
changelog:
  - New release: v1.24
  - Add support to BTF_KIND_ENUM64.
  - Support multithreaded BTF encoding.
  - Encode char type as signed in BTF.
  - Introduce --lang and --lang_exclude to pahole.
  - Introduce --compile to pahole.
  - Don't segfault when processing bogus files.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.24-3
changelog:
  - Backport the DW_TAG_unspecified_type support while 1.25 gets ready wrt optimized functions support


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.25-1
changelog:
  - New release: v1.25
  - Support for DW_TAG_unspecified_type more generally.
  - Make sure struct member offsets are in ascending order. Rust BTF needs this.
  - Support C atomic types (DW_TAG_atomic_type).
  - Initial support for DW_TAG_LLVM_annotation, used for BTF type tags, for __rcu, __user, etc
  - Exclude functions with the same name (static functions in different CUs), inconsistent prototypes or not following calling convention.
  - Allow generation of BTF for optimized functions, those that end with a .isra*, .constprop*.
  - Support 'pahole --lang=/--lang_exclude=asm'
  - Support --compile from DWARF in addition to from BTF.
  - Exclude RUST CUs in 'btfdiff', as those are not yet being BTF encoded.


author: Viktor Malik <vmalik@redhat.com> - 1.27-1
changelog:
  - Resolves: RHEL-45148
  - Add gating.yaml
  - Add "Provides: pahole"
  - New release: v1.26
  - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
  - Print number of holes, bit holes and bit paddings in class member types.
  - Introduce --contains_enumerator=ENUMERATOR_NAME:
  - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
  - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
  - Fix loading DW_TAG_subroutine_type generated by the Go compiler.
  - Fix loading of 32-bit signed enums from BTF.
  - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
  - Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
  - Do type expansion to cover "private" types and enumerations in btfdiff.
  - New release: v1.27
  - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
  - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
  - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
  - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
  - Fix hole discovery with inheritance in C++.


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Erico Nunes <ernunes@redhat.com> - 9.0.0-4
changelog:
  - Split xdriinfo into its own package
  - Remove xdriinfo additional source build and autotools dependencies


author: Aaron Merey <amerey@redhat.com> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2
  - Add elfutils-0.191-profile-empty-urls.patch
  - Add elfutils-0.191-riscv-flatten.patch
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static


author: Aaron Merey <amerey@redhat.com> - 0.191-3
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 5.3.0-2
changelog:
  - Install module initialization script for fish as configuration snippet for
    this shell via alternatives (#2196379)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 1.51.1-6
changelog:
  - Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c
    Resolves: CVE-2023-49990
  - Fixed buffer underflow in CountVowelPosition function at synthdata.c
    Resolves: CVE-2023-49991
  - Fixed buffer overflow in RemoveEnding at dictionary.c
    Resolves: CVE-2023-49992
  - Fixed buffer overflow in ReadClause function at readclause.c
    Resolves: CVE-2023-49993
  - Fixed floating point exception in PeaksToHarmspect at wavegen.c
    Resolves: CVE-2023-49994


author: Milan Crha <mcrha@redhat.com> - 3.52.0-1
changelog:
  - Resolves: RHEL-30204 (Backport Fedora 40 changes)
  - Update to 3.52.0
  - Add patch to allow reconfiguring the dbus-prefix without rebuilding;
    this is needed to make EDS work with the new Flatpak infrastructure.
  - Remove support _eds_dbus_services_prefix - this was only used by
    F38 and earlier Flatpak builds.


author: Trent Piepho <tpiepho@gmail.com> - 3.3.10-6
changelog:
  - Enable AVX2 on x86-86
  - Enable NEON on aarch64
  - Clean up precision list
  - Fix for OpenMPI build with < 4 processors
  - Fix building with no enabled MPI types
  - Enable single precision Altivec on PPC
  - Enable CNTVCT_EL0 support on ARMv8


author: Fedora Release Engineering <releng@fedoraproject.org> - 3.3.10-10
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix i686 build by disabling openmpi
  - Fix "The file FFTW3LibraryDepends.cmake is missing" in autotools build
    https://github.com/FFTW/fftw3/issues/130#issuecomment-1902748460 (#2193075)
  - Disable mpich on s390x to fix the build


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Martin Osvald <mosvald@redhat.com> - 3.18-1
changelog:
  - Filesystem has a dependency on /bin/sh (#1306489)
  - Add /usr/share/X11/fonts/ to default filesystem (#2107447)
  - Remove obsolete and forbidden Group tag
  - Own zsh and fish completions directories (rhbz#1312594)
  - Improve directory creation to avoid 'Argument list too long' error


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-14
changelog:
  - Analyse flex sources for license information
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2
    (#2222083)


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Zdenek Dohnal <zdohnal@redhat.com> - 4.0-77.20230810
changelog:
  - update to foomatic-db-4.0-20230810
  - fix xargs in %prep to work with files with spaces
  - fix rpm warnings about patch macros
  - SPDX migration


author: Ondrej Holy <oholy@redhat.com> - 2:3.5.1-1
changelog:
  - Update to 3.5.1 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Michal Ruprich <mruprich@redhat.com> - 9.1-3
changelog:
  - Resolves: RHEL-32502 - frr fails to start: SELinux is preventing watchfrr from create access on the sock_file


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Keith Seitz <keiths@redhat.com>
changelog:
  - Backport "gdb: s390: Add arch14 record/replay support"
    (Andreas Arnez, RHEL-36225)
  - Backport "Add support for Power11 options"
    (Peter Bergner, RHEL-36518)
  - Backport "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (many authors, RHEL-36527)


author: Guinevere Larsen <blarsen@redhat.com>
changelog:
  - Backport series Infcalls from B/P conditions in multi-threaded inferiors
    (Andrew Burgess, RHEL-13298)


author: Keith Seitz <keiths@redhat.com> - 14.2-1.el10
changelog:
  - Rebase to gdb-14.2 and update all bug references:
    RHEL-39326 "better support for $pc not saved"
    RHEL-39325 "Infcalls from B/P conditions in multi-threaded inferiors"
    RHEL-39324 "gdb: s390: Add arch14 record/replay support"
    RHEL-24764 "Add support for Power11 options"
    RHEL-34213 "Sync x86 disassembler with (proposed) gdb-15.1 release."
    (Keith Seitz, RHEL-33256)


author: Daan De Meyer <daan.j.demeyer@gmail.com> - 2.7.0-3
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-9
changelog:
  - RHEL-38835 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-44771 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths


author: Zdenek Dohnal <zdohnal@redhat.com> - 10.02.1-12
changelog:
  - RHEL-46149 CVE-2024-29509 ghostscript: heap buffer overflow via the PDFPassword parameter
  - RHEL-46131 CVE-2024-29508 ghostscript: heap pointer leak in pdf_base_font_alloc()
  - RHEL-46112 CVE-2024-29507 ghostscript: stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters
  - RHEL-46076 CVE-2024-29506 ghostscript: stack-based buffer overflow in the pdfi_apply_filter()
  - RHEL-44727 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Robert-André Mauchin <zebob.m@gmail.com> - 3.1.2-4
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
    CVE-2022-27191, CVE-2022-29526, CVE-2022-30629


author: Arjun Shankar <arjun@redhat.com> - 2.39-7
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 5d070d12b3a52bc44dd1b71743abc4b6243862ae:
  - x86: Expand the comment on when REP STOSB is used on memset
  - x86: Do not prefer ERMS for memset on Zen3+
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - Add tst-gnu2-tls2mod1 to test-internal-extras
  - elf: Enable TLS descriptor tests on aarch64
  - arm: Update _dl_tlsdesc_dynamic to preserve caller-saved registers (BZ 31372)
  - Ignore undefined symbols for -mtls-dialect=gnu2
  - x86-64: Allocate state buffer space for RDI, RSI and RBX
  - x86-64: Update _dl_tlsdesc_dynamic to preserve AMX registers
  - x86: Update _dl_tlsdesc_dynamic to preserve caller-saved registers
  - x86-64: Save APX registers in ld.so trampoline
  - LoongArch: Correct {__ieee754, _}_scalb -> {__ieee754, _}_scalbf
  - powerpc: Placeholder and infrastructure/build support to add Power11 related changes.
  - powerpc: Add HWCAP3/HWCAP4 data to TCB for Power Architecture.


author: Florian Weimer <fweimer@redhat.com> - 2.39-8
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 31da30f23cddd36db29d5b6a1c7619361b271fb4:
  - iconv: ISO-2022-CN-EXT: fix out-of-bound writes when writing escape sequence (CVE-2024-2961)
  - x86_64: Exclude SSE, AVX and FMA4 variants in libm multiarch
  - Apply the Makefile sorting fix
  - powerpc: Fix ld.so address determination for PCREL mode (bug 31640)
  - x86-64: Simplify minimum ISA check ifdef conditional with if
  - x86-64: Don't use SSE resolvers for ISA level 3 or above
  - AArch64: Check kernel version for SVE ifuncs
  - aarch64: fix check for SVE support in assembler
  - aarch64/fpu: Sync libmvec routines from 2.39 and before with AOR
  - i386: Use generic memrchr in libc (bug 31316)


author: Florian Weimer <fweimer@redhat.com> - 2.39-9
changelog:
  - nscd is currently not build, so the security fixes below are not relevant.
  - Sync with upstream branch release/2.39/master,
    commit fd658f026f25cf59e8db243bc3b3e09cd5a20ba0:
  - elf: Also compile dl-misc.os with $(rtld-early-cflags)
  - CVE-2024-33601, CVE-2024-33602: nscd: netgroup: Use two buffers in addgetnetgrentX (bug 31680)
  - CVE-2024-33600: nscd: Avoid null pointer crashes after notfound response (bug 31678)
  - CVE-2024-33600: nscd: Do not send missing not-found response in addgetnetgrentX (bug 31678)
  - CVE-2024-33599: nscd: Stack-based buffer overflow in netgroup cache (bug 31677)
  - x86: Define MINIMUM_X86_ISA_LEVEL in config.h [BZ #31676]
  - i386: ulp update for SSE2 --disable-multi-arch configurations
  - nptl: Fix tst-cancel30 on kernels without ppoll_time64 support


author: Florian Weimer <fweimer@redhat.com> - 2.39-11
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 97bb89668d7171164975f3dc895e38343a2f3a95:
  - Force DT_RPATH for --enable-hardcoded-path-in-tests
  - elf: Only process multiple tunable once (BZ 31686)
  - Add a test to check for duplicate definitions in the static library
  - i686: Fix multiple definitions of __memmove_chk and __memset_chk
  - i586: Fix multiple definitions of __memcpy_chk and __mempcpy_chk
  - time: Allow later version licensing.
  - nscd: Use time_t for return type of addgetnetgrentX
  - login: structs utmp, utmpx, lastlog _TIME_BITS independence (bug 30701)
  - login: Check default sizes of structs utmp, utmpx, lastlog


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Dhanuka Warusadura <dhanuka@gnome.org> - 42.1-6
changelog:
  - ssh-agent: update build instructions to disable ssh component
  - Introduced conditional builds based on ssh component required or not


author: Tomas Popela <tpopela@redhat.com> - 3.49.0-2
changelog:
  - Don't require WebKitGTK anymore as GOA now spawns your default web browser
    instead of using the web view
  - Remove the RHEL patch for dropping Google Photos support as it has
    been dropped upstream.


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Florian Müllner <fmuellner@redhat.com> - 46.3.1-2
changelog:
  - Only use RH branding on RHEL and use the system icon instead of a custom
    asset to avoid including trademarked assets on non-RHEL installs.


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Kalev Lember <klember@redhat.com> - 45.0-5
changelog:
  - Drop downstream patch that downgraded pretty_env_logger dep to 0.4
  - Don't use both meson and cargo for building
  - Migrate to SPDX license


author: Archana <aravinda@redhat.com> - 1.22.2-6
changelog:
  - Corrected golang.spec to use --no-backup-if-mismatch to avoid creating
    .orig files - Resolves: RHEL-34671


author: Parag Nemade <pnemade AT redhat DOT com> - 1:1.002-0.15.20130214
changelog:
  - Un-retire this package in F38+ (#2162532)
  - Update as per suggestions given in rename package review (#2166813)


author: Akira TAGOH <tagoh@redhat.com> - 20200215-15
changelog:
  - Drop the font unification which causes a lot of problems.
    Resolves: rhbz#2186711, rhbz#2144373, rhbz#2096153, rhbz#517789


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-vf-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Akira TAGOH <tagoh@redhat.com> - 1:2.004-5
changelog:
  - Drop Conflict: google-noto-sans-cjk-fonts to get them installed together.
    fontconfig basically estimate same score for both but static font still has
    a priority because of path name. This works as a workaround for some issues
    related to variable fonts.
    Resolves: rhbz #2240646


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-11
changelog:
  - internalize scons (RHEL-14750)
  - add missing IPv6 support
  - add note about limited Red Hat support
  - drop unneeded API-compatibility patch
  - fix busy wait when reading from gpsd socket
  - fix some issues reported by coverity and shellcheck


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-14
changelog:
  - fix annobin coverage (RHEL-33496)
  - add conflicts for gpsd-minimal (RHEL-33651)
  - drop compat subpackage (RHEL-33651)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1:3.25-15
changelog:
  - fix icon path in desktop files (RHEL-34158)
  - replace gpsd-minimal conflicts with obsoletes (RHEL-33651)


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-17
changelog:
  - Allows for postgreSQL datasource in selinux policy
  - grafana-cli wrapper script now allows for the gid to be 0


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.0.0-4
changelog:
  - install plugin in /usr/share and create symlink from /var using
    systemd-tmpfiles to work on rpm-ostree based distributions
  - drop makefile in favor of create_bundles.sh script
  - replace plugin id patch with sed to catch future usages of the new
    upstream plugin ids


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Sam Feifer <sfeifer@redhat.com> 5.1.1-4
changelog:
  - Move location of plugin from /usr/share/... to /usr/libexec/... because there is a binary executable


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Packit <hello@packit.dev> - 0.15.3-1
changelog:
  - Release 0.15.3 (Paul Whalen)
  - packit: add koji, bodhi jobs, upstream url (Paul Whalen)
  - packit.yaml: Fix deprecated and renamed keys. (Paul Whalen)
  - greenboot: fix exit status with unknown argument (Paul Whalen)
  - greenboot-grub2-set-counter.service: ensure /boot is mounted (Adam Williamson)
  - check-fallbback: ShellCheck fix (Micah Abbott)
  - greenboot-grub2-set-counter: ShellCheck fix (Micah Abbott)
  - greenboot-status: fix or statements to default to true (Micah Abbott)
  - update_platforms_check: quote array for ShellCheck fix (Micah Abbott)
  - watchdog.sh: ShellCheck fixes (Micah Abbott)
  - add shellcheck GH action (Micah Abbott)
  - Revert "disable DefaultDependencies to fix cycle error" (Antonio Murdaca)
  - Revert "Add greenboot-service-monitor.service for service health checking" (Antonio Murdaca)


author: Packit <hello@packit.dev> - 0.15.4-1
changelog:
  - Release v0.15.4 (Paul Whalen)
  - checks: update assignment of platform URLs var (Micah Abbott)
  - Revert "update_platforms_check: quote array for ShellCheck fix" (Micah Abbott)
  - Update README.md (alcir)


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.23.0-1
changelog:
  - Rebase to version 1.23.0
  - Several files were removed from groff package
  - Several files were added to groff package


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-109
changelog:
  - Linker: added --no-warn-rwx-segments as build will fail after
  ld.bfd default options have been changed.
  https://fedoraproject.org/wiki/Changes/Linker_Error_On_Security_Issues


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-116
changelog:
  - grub-core/commands: add flag to only search root dev
  - Resolves: #2223437
  - Resolves: #2224951
  - Resolves: #2258096
  - Resolves: CVE-2023-4001


author: Leo Sandoval <lsandova@redhat.com> - 2.06-118
changelog:
  - xfs: include the 'directory extent parsing patch', otherwise
  XFS-formatted partitions do not boot. This change effectively
  reverts 2.06-115
  - Resolves: #2259266


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Zdenek Dohnal <zdohnal@redhat.com> - 5.3.4-11
changelog:
  - GTK2 is not in CentOS Stream 10, dont ship libs-ui subpackage there
  - Add other licenses to License tag and use SPDX identifiers to comply with FPG


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Rahul Sundaram <sundaram@fedoraproject.org> - 2.4.58-7
changelog:
  - Update Systemd security settings as part of https://fedoraproject.org/wiki/Changes/SystemdSecurityHardening
  - updated httpd.service(5) (Joe Orton)


author: Joe Orton <jorton@redhat.com> - 2.4.59-3.1
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20180807-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218154 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20190319-1
changelog:
  - Use new upstream which provide more wordlist
  - Update to new SPDX license
  - Resolves:rhbz#2218155 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20070116-32
changelog:
  - Use new source archive generated using Farsi aspell dictionary
  - Resolves:rhbz#2218158 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20040505-31
changelog:
  - Use new source archive generated using Manx aspell dictionary
  - Resolves:rhbz#2218159 - Drop dependency on aspell


author: Parag Nemade <pnemade AT redhat DOT com> - 0.20090415-29
changelog:
  - Use new source archive generated using Kirghiz aspell dictionary
  - Resolves:rhbz#2218161 - Drop dependency on aspell


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.46.20220731git
changelog:
  - hpvd-Add-support-for-patching-hyperv-daemons.patch [RHEL-40107 RHEL-40679]
  - hpvd-Do-not-set-NM_CONTROLLED-no.patch [RHEL-40107 RHEL-40679]
  - hpvd-Add-vmbus_testing-tool-build-files.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [RHEL-40107 RHEL-40679]
  - hpvd-Use-filename-for-connection-profile.patch [RHEL-40107 RHEL-40679]
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [RHEL-40107 RHEL-40679]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [RHEL-40107 RHEL-40679]
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Support-for-keyfile-based-connectio.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Some-small-fixes-for-handling-NM-ke.patch [RHEL-40107 RHEL-40679]
  - hpvd-hv-hv_kvp_daemon-Handle-IPv4-and-Ipv6-combination-fo.patch [RHEL-40107 RHEL-40679]
  - hpvd-Changes-for-adding-keyfile-support-in-RHEL-specific-.patch [RHEL-40107 RHEL-40679]
  - hpvd-Remove-hyperv_fcopy_daemon-as-the-c10s-kernel-does-n.patch [RHEL-40107 RHEL-40679]
  - Resolves: RHEL-40107
    ([Hyper-V][RHEL10] Request to update hypervkvpd related file /usr/libexec/hypervkvpd/hv_set_ifconfig same as RHEL 9.5 hv_set_ifconfig file.)
  - Resolves: RHEL-40679
    ([Hyper-V][RHEL10] Request to update hyperv-daemons vmbus_testing, hv_kvp_daemon.c, hv_vss_daemon.c files as same as RHEL 9.5)


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.30-8
changelog:
  - adobe-source-code-pro-fonts is no longer available in CI
  - dnf and git do not work in CI after systemd-oomd-defaults is installed


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.4.27-1
changelog:
  - Update to 1.4.27
  - Prefer commit to "return FALSE;" for space, and other keys
    where the msymbol name is exactly one character, add a
    sleep for Return.  This is to avoid ordering problems in
    mutter.
    (Resolves: https://github.com/ibus/ibus-m17n/issues/72)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.28-1
changelog:
  - Update to 1.4.28
  - Translation update from Weblate (Russian (ru), new, 100%)
  - Build against gtk3 by default (Resolves:
    https://github.com/ibus/ibus-m17n/issues/73)


author: Mike FABIAN <mfabian@redhat.com> - 1.4.29-1
changelog:
  - Update to 1.4.29
  - Translation update from Weblate (Malayalam (ml), new, 100%, Swedish (sv)
    100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - New option commit_invalid_mode: Choose what happens when a
    character not in valid input characters is typed
    (Resolves: github-mike-fabian-issue#133)
  - Translation update from Weblate (de 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Fix mypy warnings
  - Return empty program_name and window_title in get_active_window_xprop()
    when xprop results are unexpected (Resolves: rhbz#2215466)
  - Translation update from Weblate (si 10.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.3-1
changelog:
  - Update to 1.17.3
  - Support several backends for playing sounds
    Resolves: rhbz#2237674 https://bugzilla.redhat.com/show_bug.cgi?id=2237674
  - Update Unihan_Variants.txt and regenerate engine/chinese_variants.py to Unicode Version 15.1.0


author: Mike FABIAN <mfabian@redhat.com> - 1.17.4-1
changelog:
  - Update to 1.17.4
  - Fix compose support for ibus >= 1.5.28
    (Resolves: https://github.com/mike-fabian/ibus-table/issues/145)
  - Translation update from Weblate (New language, Russian, (ru) 80%)
  - Use “<developer><name>…</name></developer>” in ibus-table.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - Add tones to Jyutping.txt table
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6)
    Tonal markers according to
    https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers
    were added:
    1. v: High level, e.g. siv → 詩; High level checked, e.g. sikv → 色
    2. x: Medium rising, e.g. six → 史
    3. q: Medium level, e.g. siq→ 試; Medium level checked, e.g. sekq → 錫
    4. vv: Low falling, e.g. sivv → 時
    5. xx: Low rising, e.g. sixx → 市
    6. qq: Low level, e.g. siqq→ 事; Low level checked, e.g. sikqq → 食


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Improve punctuation support in cangjie5.txt, cangjie3.txt, cangjie-big.txt,
    quick5.txt, quick3.txt, quick-classic.txt
    (Resolves: https://github.com/kaio/ibus-table/issues/73)
  - Remove obsolete patch: Make-build-outside-of-the-source-tree-possible.patch


author: Mike FABIAN <mfabian@redhat.com> - 1.8.11-1
changelog:
  - Update to 1.8.11
  - Improve punctuation support in jyutping.txt, cantonese.txt, cantonhk.txt, cantonyale.txt
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/7)
  - Improve “improve_jyutping.py” to allow comments in the table
  - Update of jyutping.txt for Unicode 15.0.0 final release


author: Mike FABIAN <mfabian@redhat.com> - 1.8.12-1
changelog:
  - Update to 1.8.12
  - appdata.xml files are now included upstream, remove from the .spec file
  - Migrate license tags to SPDX format


author: Mike FABIAN <mfabian@redhat.com> - 2.24.12-1
changelog:
  - Update to 2.24.12
  - Improve handling of punctuation marks when writing (French) French
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/480)
  - fix build on rawhide, in the check section of the spec file use `export
    XDG_DATA_DIRS=/tmp:%{_datadir}` instead of just `export
    XDG_DATA_DIRS=/tmp`, otherwise enchant2 fails.


author: Mike FABIAN <mfabian@redhat.com> - 2.25.0-1
changelog:
  - Update to 2.25.0
  - Add new combobox option “Record mode” (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/470)
  - Improve handling of “:” for fr_CA and add fr_CH to use the same rules as
    fr_FR (Related: https://github.com/mike-fabian/ibus-typing-
    booster/issues/480)
  - Translation update from Weblate (bn 100%, de 100%, fr 100%, ja 99%,
    ka 100%, sv 100%, tr 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.1-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.1
  - Make it possible to use keys with Unicode keysyms in keybindings
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/497)
  - Add hack to make space handling for punctuation work for kate and kwrite
    (https://github.com/mike-fabian/ibus-typing-booster/issues/496)
  - Translation update from Weblate (pl 99.5%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.3-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.3
  - Add a feature to insert or remove RLM or LRM markers to change the
    direction of a line of bidi text (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/500)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.4-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.4
  - Pass key which triggered cancel command to application if
    self._min_char_complete == 0 and there are no candidates (Resolves:
    https://github.com/mike-fabian/ibus-typing-booster/issues/505)
  - Update emoji annotations from CLDR
  - Translation update from Weblate (ka 100%)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.6-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.6
  - If Shift+something is pressed and then released, do not swallow the
    release of the Shift key (Resolves: https://github.com/mike-fabian/ibus-
    typing-booster/issues/504)
  - Decrease grid_row_spacing from 5 to 1 pixels to make the setup tool still
    fit on a 1024x768 pixel screen


author: Mike FABIAN <mfabian@redhat.com> - 2.25.7-1
changelog:
  - Resolves: RHEL-31506 Release 2.25.7
  - Don’t use forward_key_event() on Gnome Wayland if the key might be a
    keyboard shortcut using a modifier (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/507)


author: Mike FABIAN <mfabian@redhat.com> - 2.25.9-1
changelog:
  - Resolves: RHEL-36638 Update to 2.25.9 and Remove dependency on Xvfb from
    CI tests
  - Translation update from Weblate (cs 100%)
  - Update emoji annotations from CLDR
  - Drop Python < 3.6 support
  - Fix test_0_gtk.py: typing booster now avoids clearing the input in
    do_reset() when the preedit is empty
  - Remove dependency on Xvfb from ibus-typing-booster.spec
  - Support compose sequences containing ASCII keys written as <U00XX> code
    points (Resolves: https://github.com/mike-fabian/ibus-typing-
    booster/issues/510)
  - Translation update from Weblate (pt 91.3%)


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-14
changelog:
  - updated License field (https://src.fedoraproject.org/rpms/icoutils/pull-request/2)
  - updated %patch to new syntax


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 7.0.2-2
changelog:
  - Fix possible use of an undefined value as an ARRAY reference in ParserNonXS.pm
    (causes FTBFS of a2ps)
    Resolves: #2171433


author: Jan Macku <jamacku@redhat.com> - 10.17-1
changelog:
  - service: Exit when `/etc/init.d` is missing
  - ci: Update workflows to run on main branch
  - ci: remove differential-shellcheck configs
  - doc: Use main branch in links
  - dependabot: Monthly updates
  - ci(Mergify): configuration update
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Georgian)
  - ci: Update `packit.yml`
  - ci: Update Github workflows & add Dependabot
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Drop unnecessary obsoletes


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Jan Macku <jamacku@redhat.com> - 10.20-1
changelog:
  - Translated using Weblate (Georgian)
  - Add -r to while read as per shellcheck
  - Fix splitting spaces in paths from statetab files
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - Translated using Weblate (Portuguese (Brazil))
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - build(deps): bump actions/checkout from 3 to 4
  - Translated using Weblate (Hungarian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (Korean)


author: Jan Macku <jamacku@redhat.com> - 10.21-1
changelog:
  - fedora: don't build network-scripts rpm in f40+ (2/2)
  - ci: trigger copr build on every push to main branch
  - ifup-routes: print warning when ADDRESS0 entry is missing
  - fedora: don't build network-scripts rpm in f40+


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.11.0-7
changelog:
  - ipalib: fix the IPACertificate validity dates (python 3.12 compatibility)
  - Handle PKI revocation response differences in JSON API
  - Allow removal of minimal length from a custom password policy


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.11.1-2
changelog:
  - Rebuild against Samba 4.20rc1
  - Fix memory leak in Kerberos KDC driver
  - Fix possible crash in IPA command line tool when accessing Kerberos credentials
  - Compatibility fix for Python Cryptography 42.0.0
  - NetBIOS defaults fix
  - Fix default host keytab retrieval permissions


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
  - Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests


author: Julien Rische <jrische@redhat.com> - 4.12.1-1
changelog:
  - Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Rob Crittenden <rcritten@redhat.com> - 0.16-2
changelog:
  - Don't fail if a service name cannot be looked up in LDAP
  - Disable the ipa-ods-exporter service check


author: Chris Kelley <ckelley@redhat.com> - 2.15.3-1
changelog:
  - [maven-release-plugin] prepare release jackson-annotations-2.15.3 (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Packit <hello@packit.dev> - 2.16.0-1
changelog:
  - [maven-release-plugin] prepare release jackson-annotations-2.16.0 (Tatu Saloranta)
  - Prepare for 2.16.0 release (Tatu Saloranta)
  - Improve JavaDoc of `@JsonProperty.required` (#239) (Kim, Joo Hyuk)
  - Bump the github-actions group with 1 update (#238) (dependabot[bot])
  - Back to snapshot dep (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)
  - Resolves rhbz#2249892


author: Marco Fargetta <mfargett@redhat.com> - 2.16.1-1
changelog:
  - [maven-release-plugin] prepare release jackson-annotations-2.16.1 (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Chris Kelley <ckelley@redhat.com> - 2.15.3-1
changelog:
  - [maven-release-plugin] prepare release jackson-core-2.15.3 (Tatu Saloranta)
  - Prepare for 2.15.3 release (Tatu Saloranta)
  - Update release notes wrt #1111 (Tatu Saloranta)
  - Call the right filterFinishArray/Object from FilteringParserDelegate (#1111) (Dai MIKURUBE)
  - Update Maven wrapper version (Tatu Saloranta)
  - Further tweaking of release notes (Tatu Saloranta)
  - Add ref to #943 in release-notes/VERSION-2.x (Tatu Saloranta)
  - 2.15.3-SNAPSHOT (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Packit <hello@packit.dev> - 2.16.0-1
changelog:
  - [maven-release-plugin] prepare release jackson-core-2.16.0 (Tatu Saloranta)
  - Prepare for 2.16.0 release (Tatu Saloranta)
  - Make JacksonFeatureSet java.io.Serializable (Tatu Saloranta)
  - Update release notes wrt #1136 (Tatu Saloranta)
  - Change error mesage to mention -INF (#1136) (PJ Fanning)
  - Bump the github-actions group with 2 updates (#1134) (dependabot[bot])
  - Add missing name-length check in a test (Tatu Saloranta)
  - Unit test cleanup (Tatu Saloranta)
  - Maximum Property name length affects input/read (#1130) (PJ Fanning)
  - Bump the github-actions group with 2 updates (#1129) (dependabot[bot])
  - Back to snapshot deps (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)
  - Resolves rhbz#2249923


author: Marco Fargetta <mfargett@redhat.com> - 2.16.1-1
changelog:
  - [maven-release-plugin] prepare release jackson-core-2.16.1 (Tatu Saloranta)
  - Prepare for 2.16.1 release (Tatu Saloranta)
  - Minor test improvements (Tatu Saloranta)
  - Minor tweaking post-merge wrt #1175 (Tatu Saloranta)
  - Add failing tests for #1173: parse error location (#1175) (Paul Bunyan)
  - Backport #1168 in 2.16(.1) (Tatu Saloranta)
  - Update release notes wrt #1161 backport (Tatu Saloranta)
  - fastdoubleparser 1.0.0 (#1163) (#1166) (PJ Fanning)
  - Update release notes wrt #1161 (Tatu Saloranta)
  - fastdoubleparser 1.0.0 (#1163) (#1165) (PJ Fanning)
  - Tiny import clean up (Tatu Saloranta)
  - update javadoc to highlight that this class is for internal jackson use (#1156) (PJ Fanning)
  - Test code clean up: pro-actively replace to-be-deprecated methods to non-deprecated ones (wrt 2.17) (Tatu Saloranta)
  - Fix #1146: add missing `JsonParserDelegate` overrides (#1147) (Tatu Saloranta)
  - Update version scorecard check runs for (Tatu Saloranta)
  - Fix #1141: prevent NPE in Version.equals() (#1142) (Tatu Saloranta)
  - Fix typo in VERSION-2.x (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Chris Kelley <ckelley@redhat.com> - 2.15.3-1
changelog:
  - [maven-release-plugin] prepare release jackson-databind-2.15.3 (Tatu Saloranta)
  - Prepare for 2.15.3 release (Tatu Saloranta)
  - Minor refactoring wrt #4149 (Tatu Saloranta)
  - Create TestMixedCollections.java (#4149) (PJ Fanning)
  - Update release notes wrt #4121 (Tatu Saloranta)
  - Preserve the original component type in merging to the array (#4121) (Yury Molchan)
  - Introduce more efficient Form-Based GitHub Issue Templates (#4042) (Kim, Joo Hyuk)
  - Improve JavaDoc and Test for config ACCEPT_EMPTY_STRING_AS_NULL_OBJECT wrt special cases (#4012) (Kim, Joo Hyuk)
  - Update Maven wrapper version (Tatu Saloranta)
  - Minor javadoc improvement (Tatu Saloranta)
  - Update release notes wrt #3968 fix (Tatu Saloranta)
  - Ignore ConstructorDetector.SingleArgConstructor.PROPERTIES preference for Records. (#3969) (Sim Yih Tsern)
  - to 2.15.3-SNAPSHOT (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Chris Kelley <ckelley@redhat.com> - 2.16.0-1
changelog:
  - [maven-release-plugin] prepare release jackson-databind-2.16.0 (Tatu Saloranta)
  - Prepare for 2.16.0 release (Tatu Saloranta)
  - Post-commit fixes to #1770 (Tatu Saloranta)
  - issue-1770 - big number not returned as DecimalNode (#4191) (PJ Fanning)
  - minor test comment improvement (Tatu Saloranta)
  - Remove a test for closed issue; no plans to change behavior currently, no benefit from failing test. (Tatu Saloranta)
  - Update release notes wrt #4185 (Tatu Saloranta)
  - Fix for 4185 (#4189) (Kim, Joo Hyuk)
  - test cleanup (Tatu Saloranta)
  - Fix #4184: setCurrentValue() for empty POJO called at wrong time (#4186) (Tatu Saloranta)
  - Bump the github-actions group with 2 updates (#4183) (dependabot[bot])
  - DeserializationContext changed to allow null (#4179) (wrongwrong)
  - Minor clean up (Tatu Saloranta)
  - Exception when deserialization of private `record` with default constructor (fix for #4175) (#4178) (Kim, Joo Hyuk)
  - Move test for #4175 under failing/ for 2.16 (as it's failing) (Tatu Saloranta)
  - Add test for #4715 in 2.15 (passing) (Tatu Saloranta)
  - Update release notes wrt #1172 (Tatu Saloranta)
  - Test `JsonView` works with `JsonCreator` (#4173) (Kim, Joo Hyuk)
  - Minor test improvement (Tatu Saloranta)
  - Create win.yml for windows CI (#4172) (PJ Fanning)
  - Bump the github-actions group with 2 updates (#4171) (dependabot[bot])
  - Try fixing #4168 wrt linefeed diff (#4170) (Tatu Saloranta)
  - Back to snapshot dep (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Marco Fargetta <mfargett@redhat.com> - 2.16.1-1
changelog:
  - [maven-release-plugin] prepare release jackson-databind-2.16.1 (Tatu Saloranta)
  - Prepare for 2.16.1 release (Tatu Saloranta)
  - Add passing test to close #3277 (#4259) (Kim, Joo Hyuk)
  - Add failing test for #4218 (Tatu Saloranta)
  - Post-merge clean up for #4229 (Tatu Saloranta)
  - Fix regression from #4008,  optimize `ObjectNode.findValue(s)` and `findParent(s)` (#4230) (Kim, Joo Hyuk)
  - Minor update to release notes wrt #3133 (Tatu Saloranta)
  - Update release notes wrt #3133 fix (Tatu Saloranta)
  - Add now-passing test for #3133 (#4231) (Kim, Joo Hyuk)
  - Fix #4200: use annotations for delegating `@JsonCreator` (#4228) (Tatu Saloranta)
  - Tiny cleanup to eliminate bit of dead code (Tatu Saloranta)
  - Minor tweak post #4216 (Tatu Saloranta)
  - Allow primitive array deserializer to be captured by `DeserializerModifier` (#4219) (Kim, Joo Hyuk)
  - typo fix (release notes) (Tatu Saloranta)
  - Back to snapshot deps (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Chris Kelley <ckelley@redhat.com> - 2.15.3-1
changelog:
  - [maven-release-plugin] prepare release jackson-jaxrs-providers-2.15.3 (Tatu Saloranta)
  - Prepare for 2.15.3 release (Tatu Saloranta)
  - 2.15.3-SNAPSHOT (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Packit <hello@packit.dev> - 2.16.0-1
changelog:
  - [maven-release-plugin] prepare release jackson-jaxrs-providers-2.16.0 (Tatu Saloranta)
  - Prepare for 2.16.0 release (Tatu Saloranta)
  - Back to snapshot dep (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)
  - Resolves rhbz#2249955


author: Marco Fargetta <mfargett@redhat.com> - 2.16.1-1
changelog:
  - [maven-release-plugin] prepare release jackson-jaxrs-providers-2.16.1 (Tatu Saloranta)
  - Prepare for 2.16.1 release (Tatu Saloranta)
  - Fix #178: replace LRUMap with one from jackson-databind (#179) (Tatu Saloranta)
  - Back to snapshot deps (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Chris Kelley <ckelley@redhat.com> - 2.15.3-1
changelog:
  - [maven-release-plugin] prepare release jackson-modules-base-2.15.3 (Tatu Saloranta)
  - Prepare for 2.15.3 release (Tatu Saloranta)
  - Udpate Maven wrapper version (Tatu Saloranta)
  - 2.15.3-SNAPSHOT (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Packit <hello@packit.dev> - 2.16.0-1
changelog:
  - [maven-release-plugin] prepare release jackson-modules-base-2.16.0 (Tatu Saloranta)
  - Prepare for 2.16.0 release (Tatu Saloranta)
  - Updated doc. Added missing test accessor. (eranl)
  - Minor test improvement to android module (Tatu Saloranta)
  - Update release notes wrt #227 (Tatu Saloranta)
  - Updated doc. Moved failing tests to 'failing' package. Added test for differing generic parameter types. Pruned BaseTest and BaseMapTest. Added comment about '-parameters' compiler option. (eranl)
  - Addressed review comments With the goal of maximizing consistency with built-in record support, I copied and "desugared" some unit tests from https://github.com/FasterXML/jackson-databind/tree/2.16/src/test-jdk17/java/com/fasterxml/jackson/databind/records. A few of the test cases are failing, and I marked them with a "Failing" comment and a "notest" name prefix. I'm hoping for guidance about whether and how I should fix them. Fixed handling of getters Added support for injected values Added use of constructor parameter names Skip module if class already has a withArgsCreator (eranl)
  - Add jackson-core dependency, animal-sniffer-maven-plugin, per review comments (eranl)
  - Add Android Record Module (eranl)
  - Move now passing #223 test to non-failing package (Tatu Saloranta)
  - Fix #223: apply check for default (interface) method in all applicable places (Tatu Saloranta)
  - Add test for #223: passes for Blackbird, fails for Afterburner (Tatu Saloranta)
  - Test #30 simplification for blackbird too (Tatu Saloranta)
  - Simplify test for #30 since Java 8 baseline for Jackson 2.x (Tatu Saloranta)
  - Remove maven-wrapper.jar (Tatu Saloranta)
  - Back to snapshot dep (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)
  - Resolves rhbz#2249935


author: Marco Fargetta <mfargett@redhat.com> - 2.16.1-1
changelog:
  - [maven-release-plugin] prepare release jackson-modules-base-2.16.1 (Tatu Saloranta)
  - Prepare for 2.16.1 release (Tatu Saloranta)
  - Fix #231: change OSGi dep of "activation" package to jakarta (from javax) (Tatu Saloranta)
  - Back to snapshot deps (Tatu Saloranta)
  - [maven-release-plugin] prepare for next development iteration (Tatu Saloranta)


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.7.0.7-5
changelog:
  - rebuilding aginst new portables:
  - - returned lost nss.fips.cfg
  - - enabled all crypto
  - - added and applied, on demand, patch2003 jdk8305995-footprint_regression_from_jdk_8224957


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.9.0.9-2
changelog:
  - proeprly filing debugsources pkg
    by addedd symlinks restructuring the structure for original build sources
  - according to logs, some are still missing
    probably generated during the build, and thus not existing in prep,
    when the sources subpkg is created after patching


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.0.0.35-2.rolling
changelog:
  - adapted to new path in sources
  - repacked alt-java from misc subpkg
  - adapted alt-java to grep correctly prctl
  - removed no longer prepared nss.cfg


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.1.0.12-2.rolling
changelog:
  - added setup and thus enabled debuginfo strip
  - note, that debugsources are now empty. Symlink from full sourcess to build/jdk21.build or build/vcstag is needed


author: Martin Osvald <mosvald@redhat.com> - 2.4.0-1
changelog:
  - New version 2.4.0
  - Migrated to SPDX license
  - Do not export CXXFLAGS with -std=gnu++11 to stop boost warning messages


author: Martin Osvald <mosvald@redhat.com> - 2.4.0-4
changelog:
  - Rebuilt for log4cplus 2.1.0
  - kea.spec: do not use %{name} to allow different package name
  - kea.spec: do not use glob on %{_libdir}, %{_mandir} and %{_sbindir}
    to conform with packaging guidelines


author: Martin Osvald <mosvald@redhat.com> - 2.4.0-6
changelog:
  - Various spec file improvements
  - Remove _hardened_build variable as it is no longer needed
  - Clean up numbering of sources
  - Further %{name} changes to allow different package name
  - Move documentation into sub-package
  - Move tpmfiles.d configuration into separate file
  - Start using %autorelease and %autochangelog
  - Remove %license COPYING for devel due to lib dependency


author: Jan Stancek <jstancek@redhat.com> [6.10.0-0.rc2.8.el10]
changelog:
  - redhat: regenerate test-data (Jan Stancek) [RHEL-29722]
  - redhat: rpminspect.yaml: more tests to ignore selftests (Jan Stancek)
  - gitlab-ci: add initial version (Michael Hofmann)
  - redhat/Makefile.variables: don't set DISTRO (Jan Stancek) [RHEL-29722]
  - redhat/Makefile.variables: set PATCHLIST_URL to none (Jan Stancek) [RHEL-29722]
  - redhat/kernel.spec.template: fix with_realtime (Jan Stancek) [RHEL-29722]
  - remove ARK .gitlab-ci.yml (Jan Stancek)
  - redhat: update rpminspect with c9s one (Jan Stancek)
  - redhat: remove fedora configs and files (Jan Stancek)
  - redhat: init RHEL10.0 beta variables and dist tag (Jan Stancek) [RHEL-29722]
  - redhat: enable changes to build rt variants (Clark Williams)
  - Add localversion for -RT release (Thomas Gleixner)
  - sysfs: Add /sys/kernel/realtime entry (Clark Williams)
  - riscv: allow to enable RT (Jisheng Zhang)
  - riscv: add PREEMPT_AUTO support (Jisheng Zhang)
  - POWERPC: Allow to enable RT (Sebastian Andrzej Siewior)
  - powerpc/stackprotector: work around stack-guard init from atomic (Sebastian Andrzej Siewior)
  - powerpc/kvm: Disable in-kernel MPIC emulation for PREEMPT_RT (Bogdan Purcareata)
  - powerpc/pseries: Select the generic memory allocator. (Sebastian Andrzej Siewior)
  - powerpc/pseries/iommu: Use a locallock instead local_irq_save() (Sebastian Andrzej Siewior)
  - powerpc: traps: Use PREEMPT_RT (Sebastian Andrzej Siewior)
  - ARM64: Allow to enable RT (Sebastian Andrzej Siewior)
  - ARM: Allow to enable RT (Sebastian Andrzej Siewior)
  - ARM: vfp: Move sending signals outside of vfp_lock()ed section. (Sebastian Andrzej Siewior)
  - ARM: vfp: Use vfp_lock() in vfp_support_entry(). (Sebastian Andrzej Siewior)
  - ARM: vfp: Use vfp_lock() in vfp_sync_hwstate(). (Sebastian Andrzej Siewior)
  - ARM: vfp: Provide vfp_lock() for VFP locking. (Sebastian Andrzej Siewior)
  - arm: Disable FAST_GUP on PREEMPT_RT if HIGHPTE is also enabled. (Sebastian Andrzej Siewior)
  - ARM: enable irq in translation/section permission fault handlers (Yadi.hu)
  - arm: Disable jump-label on PREEMPT_RT. (Thomas Gleixner)
  - sched: define TIF_ALLOW_RESCHED (Thomas Gleixner)
  - Revert "drm/i915: Depend on !PREEMPT_RT." (Sebastian Andrzej Siewior)
  - drm/i915/guc: Consider also RCU depth in busy loop. (Sebastian Andrzej Siewior)
  - drm/i915: Drop the irqs_disabled() check (Sebastian Andrzej Siewior)
  - drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() + spin_lock() (Sebastian Andrzej Siewior)
  - drm/i915/gt: Queue and wait for the irq_work item. (Sebastian Andrzej Siewior)
  - drm/i915: Disable tracing points on PREEMPT_RT (Sebastian Andrzej Siewior)
  - drm/i915: Don't check for atomic context on PREEMPT_RT (Sebastian Andrzej Siewior)
  - drm/i915: Don't disable interrupts on PREEMPT_RT during atomic updates (Mike Galbraith)
  - drm/i915: Use preempt_disable/enable_rt() where recommended (Mike Galbraith)
  - printk: Avoid false positive lockdep report for legacy printing (John Ogness)
  - printk: Provide threadprintk boot argument (John Ogness)
  - printk: Add kthread for all legacy consoles (John Ogness)
  - serial: 8250: Revert "drop lockdep annotation from serial8250_clear_IER()" (John Ogness)
  - serial: 8250: Switch to nbcon console (John Ogness)
  - printk: nbcon: Provide function to reacquire ownership (John Ogness)
  - tty: sysfs: Add nbcon support for 'active' (John Ogness)
  - proc: Add nbcon support for /proc/consoles (John Ogness)
  - proc: consoles: Add notation to c_start/c_stop (John Ogness)
  - printk: nbcon: Show replay message on takeover (John Ogness)
  - printk: Provide helper for message prepending (John Ogness)
  - printk: nbcon: Start printing threads (John Ogness)
  - printk: nbcon: Stop threads on shutdown/reboot (John Ogness)
  - printk: nbcon: Add printer thread wakeups (Thomas Gleixner)
  - printk: nbcon: Add context to console_is_usable() (John Ogness)
  - printk: Atomic print in printk context on shutdown (John Ogness)
  - printk: nbcon: Introduce printing kthreads (Thomas Gleixner)
  - lockdep: Mark emergency sections in lockdep splats (John Ogness)
  - rcu: Mark emergency sections in rcu stalls (John Ogness)
  - panic: Mark emergency section in oops (John Ogness)
  - panic: Mark emergency section in warn (Thomas Gleixner)
  - printk: nbcon: Implement emergency sections (Thomas Gleixner)
  - printk: Coordinate direct printing in panic (John Ogness)
  - printk: Track nbcon consoles (John Ogness)
  - printk: Avoid console_lock dance if no legacy or boot consoles (John Ogness)
  - printk: nbcon: Add unsafe flushing on panic (John Ogness)
  - printk: nbcon: Use nbcon consoles in console_flush_all() (John Ogness)
  - printk: Track registered boot consoles (John Ogness)
  - printk: nbcon: Provide function to flush using write_atomic() (Thomas Gleixner)
  - printk: nbcon: Add helper to assign priority based on CPU state (John Ogness)
  - printk: Add @flags argument for console_is_usable() (John Ogness)
  - printk: Let console_is_usable() handle nbcon (John Ogness)
  - printk: Make console_is_usable() available to nbcon (John Ogness)
  - printk: nbcon: Do not rely on proxy headers (John Ogness)
  - serial: core: Implement processing in port->lock wrapper (John Ogness)
  - nbcon: Provide functions for drivers to acquire console for non-printing (John Ogness)
  - console: Improve console_srcu_read_flags() comments (John Ogness)
  - serial: core: Introduce wrapper to set @uart_port->cons (John Ogness)
  - serial: core: Provide low-level functions to lock port (John Ogness)
  - printk: nbcon: Use driver synchronization while (un)registering (John Ogness)
  - printk: nbcon: Add callbacks to synchronize with driver (John Ogness)
  - printk: nbcon: Add detailed doc for write_atomic() (John Ogness)
  - printk: Check printk_deferred_enter()/_exit() usage (Sebastian Andrzej Siewior)
  - printk: nbcon: Remove return value for write_atomic() (John Ogness)
  - printk: Properly deal with nbcon consoles on seq init (Petr Mladek)
  - printk: Add notation to console_srcu locking (John Ogness)
  - time: Allow to preempt after a callback. (Sebastian Andrzej Siewior)
  - softirq: Add function to preempt serving softirqs. (Sebastian Andrzej Siewior)
  - sched/core: Provide a method to check if a task is PI-boosted. (Sebastian Andrzej Siewior)
  - zram: Replace bit spinlocks with spinlock_t for PREEMPT_RT. (Mike Galbraith)
  - softirq: Wake ktimers thread also in softirq. (Junxiao Chang)
  - tick: Fix timer storm since introduction of timersd (Frederic Weisbecker)
  - rcutorture: Also force sched priority to timersd on boosting test. (Frederic Weisbecker)
  - softirq: Use a dedicated thread for timer wakeups. (Sebastian Andrzej Siewior)
  - sched/rt: Don't try push tasks if there are none. (Sebastian Andrzej Siewior)
  - x86: Enable RT also on 32bit (Sebastian Andrzej Siewior)
  - x86: Allow to enable RT (Sebastian Andrzej Siewior)
  - memcg: Remove the lockdep assert from __mod_objcg_mlstate(). (Sebastian Andrzej Siewior)
  - pinctrl: renesas: rzg2l: Use spin_{lock,unlock}_irq{save,restore} (Claudiu Beznea)
  - drm/ttm/tests: Let ttm_bo_test consider different ww_mutex implementation. (Sebastian Andrzej Siewior)
  - perf: Split __perf_pending_irq() out of perf_pending_irq() (Sebastian Andrzej Siewior)
  - perf: Remove perf_swevent_get_recursion_context() from perf_pending_task(). (Sebastian Andrzej Siewior)
  - perf: Enqueue SIGTRAP always via task_work. (Sebastian Andrzej Siewior)
  - perf: Move irq_work_queue() where the event is prepared. (Sebastian Andrzej Siewior)
  - Turn on CONFIG_MFD_QCOM_PM8008 for Fedora aarch64 (Justin M. Forbes)


author: Patrick Talbert <ptalbert@redhat.com> [6.10.0-0.rc2.9.el10]
changelog:
  - v6.10-rc2-rt3 (Sebastian Andrzej Siewior)
  - printk: Update the printk series. (Sebastian Andrzej Siewior)
  - tcp: move inet_twsk_schedule helper out of header (Florian Westphal)
  - net: tcp: un-pin the tw_timer (Florian Westphal)
  - net: tcp/dccp: prepare for tw_timer un-pinning (Valentin Schneider)
  - net: Move per-CPU flush-lists to bpf_net_context on PREEMPT_RT. (Sebastian Andrzej Siewior)
  - net: Reference bpf_redirect_info via task_struct on PREEMPT_RT. (Sebastian Andrzej Siewior)
  - net: Use nested-BH locking for bpf_scratchpad. (Sebastian Andrzej Siewior)
  - seg6: Use nested-BH locking for seg6_bpf_srh_states. (Sebastian Andrzej Siewior)
  - lwt: Don't disable migration prio invoking BPF. (Sebastian Andrzej Siewior)
  - dev: Use nested-BH locking for softnet_data.process_queue. (Sebastian Andrzej Siewior)
  - dev: Remove PREEMPT_RT ifdefs from backlog_lock.*(). (Sebastian Andrzej Siewior)
  - net: softnet_data: Make xmit.recursion per task. (Sebastian Andrzej Siewior)
  - netfilter: br_netfilter: Use nested-BH locking for brnf_frag_data_storage. (Sebastian Andrzej Siewior)
  - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Sebastian Andrzej Siewior)
  - net/tcp_sigpool: Use nested-BH locking for sigpool_scratch. (Sebastian Andrzej Siewior)
  - net: Use nested-BH locking for napi_alloc_cache. (Sebastian Andrzej Siewior)
  - net: Use __napi_alloc_frag_align() instead of open coding it. (Sebastian Andrzej Siewior)
  - locking/local_lock: Add local nested BH locking infrastructure. (Sebastian Andrzej Siewior)
  - locking/local_lock: Introduce guard definition for local_lock. (Sebastian Andrzej Siewior)
  - thermal: trip: Trigger trip down notifications when trips involved in mitigation become invalid (Rafael J. Wysocki)
  - thermal: core: Introduce thermal_trip_crossed() (Rafael J. Wysocki)
  - thermal/debugfs: Allow tze_seq_show() to print statistics for invalid trips (Rafael J. Wysocki)
  - thermal/debugfs: Print initial trip temperature and hysteresis in tze_seq_show() (Rafael J. Wysocki)
  - PNP: Hide pnp_bus_type from the non-PNP code (Andy Shevchenko)
  - PNP: Make dev_is_pnp() to be a function and export it for modules (Andy Shevchenko)
  - ACPI: APEI: EINJ: Fix einj_dev release leak (Dan Williams)
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Armin Wolf)
  - ACPI: EC: Abort address space access upon error (Armin Wolf)
  - ACPI: AC: Properly notify powermanagement core about changes (Thomas Weißschuh)
  - cpufreq: intel_pstate: Fix unchecked HWP MSR access (Srinivas Pandruvada)
  - cpufreq: amd-pstate: Fix the inconsistency in max frequency units (Dhananjay Ugwekar)
  - cpufreq: amd-pstate: remove global header file (Arnd Bergmann)
  - tools/power/cpupower: Fix Pstate frequency reporting on AMD Family 1Ah CPUs (Dhananjay Ugwekar)
  - btrfs: ensure fast fsync waits for ordered extents after a write failure (Filipe Manana)
  - bcachefs: Fix trans->locked assert (Kent Overstreet)
  - bcachefs: Rereplicate now moves data off of durability=0 devices (Kent Overstreet)
  - bcachefs: Fix GFP_KERNEL allocation in break_cycle() (Kent Overstreet)
  - i2c: Remove I2C_CLASS_SPD (Heiner Kallweit)
  - i2c: synquacer: Remove a clk reference from struct synquacer_i2c (Christophe JAILLET)
  - tpm: Switch to new Intel CPU model defines (Tony Luck)
  - tpm_tis: Do *not* flush uninitialized work (Jan Beulich)
  - KVM: x86/mmu: Don't save mmu_invalidate_seq after checking private attr (Tao Su)
  - KVM: arm64: Ensure that SME controls are disabled in protected mode (Fuad Tabba)
  - KVM: arm64: Refactor CPACR trap bit setting/clearing to use ELx format (Fuad Tabba)
  - KVM: arm64: Consolidate initializing the host data's fpsimd_state/sve in pKVM (Fuad Tabba)
  - KVM: arm64: Eagerly restore host fpsimd/sve state in pKVM (Fuad Tabba)
  - KVM: arm64: Allocate memory mapped at hyp for host sve state in pKVM (Fuad Tabba)
  - KVM: arm64: Specialize handling of host fpsimd state on trap (Fuad Tabba)
  - KVM: arm64: Abstract set/clear of CPTR_EL2 bits behind helper (Fuad Tabba)
  - KVM: arm64: Fix prototype for __sve_save_state/__sve_restore_state (Fuad Tabba)
  - KVM: arm64: Reintroduce __sve_save_state (Fuad Tabba)
  - KVM: arm64: nv: Expose BTI and CSV_frac to a guest hypervisor (Marc Zyngier)
  - KVM: arm64: nv: Fix relative priorities of exceptions generated by ERETAx (Marc Zyngier)
  - KVM: arm64: AArch32: Fix spurious trapping of conditional instructions (Marc Zyngier)
  - KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode (Marc Zyngier)
  - KVM: arm64: Fix AArch32 register narrowing on userspace write (Marc Zyngier)
  - RISC-V: KVM: Fix incorrect reg_subtype labels in kvm_riscv_vcpu_set_reg_isa_ext function (Quan Zhou)
  - RISC-V: KVM: No need to use mask when hart-index-bit is 0 (Yong-Xuan Wang)
  - KVM: x86: Drop support for hand tuning APIC timer advancement from userspace (Sean Christopherson)
  - KVM: SEV-ES: Delegate LBR virtualization to the processor (Ravi Bangoria)
  - KVM: SEV-ES: Disallow SEV-ES guests when X86_FEATURE_LBRV is absent (Ravi Bangoria)
  - KVM: SEV-ES: Prevent MSR access post VMSA encryption (Nikunj A Dadhania)
  - KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked (Sean Christopherson)
  - KVM: x86: Force KVM_WERROR if the global WERROR is enabled (Sean Christopherson)
  - KVM: x86: Disable KVM_INTEL_PROVE_VE by default (Sean Christopherson)
  - KVM: VMX: Enumerate EPT Violation #VE support in /proc/cpuinfo (Sean Christopherson)
  - KVM: x86/mmu: Print SPTEs on unexpected #VE (Sean Christopherson)
  - KVM: VMX: Dump VMCS on unexpected #VE (Sean Christopherson)
  - KVM: x86/mmu: Add sanity checks that KVM doesn't create EPT #VE SPTEs (Sean Christopherson)
  - KVM: nVMX: Always handle #VEs in L0 (never forward #VEs from L2 to L1) (Sean Christopherson)
  - KVM: nVMX: Initialize #VE info page for vmcs02 when proving #VE support (Sean Christopherson)
  - KVM: VMX: Don't kill the VM on an unexpected #VE (Sean Christopherson)
  - KVM: x86/mmu: Use SHADOW_NONPRESENT_VALUE for atomic zap in TDP MMU (Isaku Yamahata)
  - of: property: Fix fw_devlink handling of interrupt-map (Marc Zyngier)
  - of/irq: Factor out parsing of interrupt-map parent phandle+args from of_irq_parse_raw() (Rob Herring (Arm))
  - dt-bindings: arm: stm32: st,mlahb: Drop spurious "reg" property from example (Rob Herring (Arm))
  - dt-bindings: arm: sunxi: Fix incorrect '-' usage (Rob Herring (Arm))
  - of: of_test: add MODULE_DESCRIPTION() (Jeff Johnson)
  - redhat: add missing UKI_secureboot_cert hunk (Patrick Talbert)
  - v6.10-rc2-rt2 (Sebastian Andrzej Siewior)
  - selftests/futex: don't pass a const char* to asprintf(3) (John Hubbard)
  - selftests/futex: don't redefine .PHONY targets (all, clean) (John Hubbard)
  - selftests/tracing: Fix event filter test to retry up to 10 times (Masami Hiramatsu (Google))
  - selftests/futex: pass _GNU_SOURCE without a value to the compiler (John Hubbard)
  - selftests/overlayfs: Fix build error on ppc64 (Michael Ellerman)
  - selftests/openat2: Fix build warnings on ppc64 (Michael Ellerman)
  - selftests: cachestat: Fix build warnings on ppc64 (Michael Ellerman)
  - tracing/selftests: Fix kprobe event name test for .isra. functions (Steven Rostedt (Google))
  - selftests/ftrace: Update required config (Masami Hiramatsu (Google))
  - selftests/ftrace: Fix to check required event file (Masami Hiramatsu (Google))
  - kselftest/alsa: Ensure _GNU_SOURCE is defined (Mark Brown)
  - redhat/kernel.spec: keep extra modules in original directories (Jan Stancek)
  - cxl/region: Fix memregion leaks in devm_cxl_add_region() (Li Zhijian)
  - cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c (Dave Jiang)
  - LoongArch: Fix GMAC's phy-mode definitions in dts (Huacai Chen)
  - LoongArch: Override higher address bits in JUMP_VIRT_ADDR (Jiaxun Yang)
  - LoongArch: Fix entry point in kernel image header (Jiaxun Yang)
  - LoongArch: Add all CPUs enabled by fdt to NUMA node 0 (Jiaxun Yang)
  - LoongArch: Fix built-in DTB detection (Jiaxun Yang)
  - LoongArch: Remove CONFIG_ACPI_TABLE_UPGRADE in platform_init() (Tiezhu Yang)
  - redhat/configs: Move CONFIG_BLK_CGROUP_IOCOST=y to common/generic (Waiman Long)
  - Linux v6.10.0-0.rc2


author: Patrick Talbert <ptalbert@redhat.com> [6.10.0-0.rc2.10.el10]
changelog:
  - clk: sifive: Do not register clkdevs for PRCI clocks (Samuel Holland)
  - cifs: Don't advance the I/O iterator before terminating subrequest (David Howells)
  - smb: client: fix deadlock in smb2_find_smb_tcon() (Enzo Matsumiya)
  - HID: Ignore battery for ELAN touchscreens 2F2C and 4116 (Louis Dalibard)
  - HID: i2c-hid: elan: fix reset suspend current leakage (Johan Hovold)
  - dt-bindings: HID: i2c-hid: elan: add 'no-reset-on-power-off' property (Johan Hovold)
  - dt-bindings: HID: i2c-hid: elan: add Elan eKTH5015M (Johan Hovold)
  - dt-bindings: HID: i2c-hid: add dedicated Ilitek ILI2901 schema (Johan Hovold)
  - input: Add support for "Do Not Disturb" (Aseda Aboagye)
  - input: Add event code for accessibility key (Aseda Aboagye)
  - hid: asus: asus_report_fixup: fix potential read out of bounds (Andrew Ballance)
  - HID: logitech-hidpp: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - HID: intel-ish-hid: fix endian-conversion (Arnd Bergmann)
  - HID: nintendo: Fix an error handling path in nintendo_hid_probe() (Christophe JAILLET)
  - HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() (José Expósito)
  - HID: core: remove unnecessary WARN_ON() in implement() (Nikita Zhandarovich)
  - HID: nvidia-shield: Add missing check for input_ff_create_memless (Chen Ni)
  - HID: intel-ish-hid: Fix build error for COMPILE_TEST (Zhang Lixu)
  - modpost: do not warn about missing MODULE_DESCRIPTION() for vmlinux.o (Masahiro Yamada)
  - kbuild: explicitly run mksysmap as sed script from link-vmlinux.sh (Richard Acayan)
  - kconfig: remove wrong expr_trans_bool() (Masahiro Yamada)
  - kconfig: doc: document behavior of 'select' and 'imply' followed by 'if' (Masahiro Yamada)
  - kconfig: doc: fix a typo in the note about 'imply' (Masahiro Yamada)
  - kconfig: gconf: give a proper initial state to the Save button (Masahiro Yamada)
  - kconfig: remove unneeded code for user-supplied values being out of range (Masahiro Yamada)
  - media: intel/ipu6: add csi2 port sanity check in notifier bound (Bingbu Cao)
  - media: intel/ipu6: update the maximum supported csi2 port number to 6 (Bingbu Cao)
  - media: mei: csi: Warn less verbosely of a missing device fwnode (Sakari Ailus)
  - media: mei: csi: Put the IPU device reference (Sakari Ailus)
  - media: intel/ipu6: fix the buffer flags caused by wrong parentheses (Bingbu Cao)
  - media: intel/ipu6: Fix an error handling path in isys_probe() (Christophe JAILLET)
  - media: intel/ipu6: Move isys_remove() close to isys_probe() (Christophe JAILLET)
  - media: intel/ipu6: Fix some redundant resources freeing in ipu6_pci_remove() (Christophe JAILLET)
  - media: Documentation: v4l: Fix ACTIVE route flag (Sakari Ailus)
  - media: mgb4: Fix double debugfs remove (Martin Tůma)
  - irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update() (Hagar Hemdan)
  - irqchip/sifive-plic: Chain to parent IRQ after handlers are ready (Samuel Holland)
  - irqchip/riscv-intc: Prevent memory leak when riscv_intc_init_common() fails (Sunil V L)
  - x86/amd_nb: Check for invalid SMN reads (Yazen Ghannam)
  - x86/kexec: Fix bug with call depth tracking (David Kaplan)
  - perf/core: Fix missing wakeup when waiting for context reference (Haifeng Xu)
  - locking/atomic: scripts: fix ${atomic}_sub_and_test() kerneldoc (Carlos Llamas)
  - redhat/configs: fedora: Enable some drivers for IPU6 support (Hans de Goede)
  - nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors (Ryusuke Konishi)
  - mm: fix xyz_noprof functions calling profiled functions (Suren Baghdasaryan)
  - codetag: avoid race at alloc_slab_obj_exts (Thadeu Lima de Souza Cascardo)
  - mm/hugetlb: do not call vma_add_reservation upon ENOMEM (Oscar Salvador)
  - mm/ksm: fix ksm_zero_pages accounting (Chengming Zhou)
  - mm/ksm: fix ksm_pages_scanned accounting (Chengming Zhou)
  - kmsan: do not wipe out origin when doing partial unpoisoning (Alexander Potapenko)
  - vmalloc: check CONFIG_EXECMEM in is_vmalloc_or_module_addr() (Cong Wang)
  - mm: page_alloc: fix highatomic typing in multi-block buddies (Johannes Weiner)
  - nilfs2: fix potential kernel bug due to lack of writeback flag waiting (Ryusuke Konishi)
  - memcg: remove the lockdep assert from __mod_objcg_mlstate() (Sebastian Andrzej Siewior)
  - mm: arm64: fix the out-of-bounds issue in contpte_clear_young_dirty_ptes (Barry Song)
  - mm: huge_mm: fix undefined reference to `mthp_stats' for CONFIG_SYSFS=n (Barry Song)
  - mm: drop the 'anon_' prefix for swap-out mTHP counters (Baolin Wang)
  - gpio: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type (Matthias Schiffer)
  - gpio: tqmx86: store IRQ trigger type and unmask status separately (Matthias Schiffer)
  - gpio: tqmx86: introduce shadow register for GPIO output value (Matthias Schiffer)
  - gpio: tqmx86: fix typo in Kconfig label (Gregor Herburger)
  - nvme: fix nvme_pr_* status code parsing (Weiwen Hu)
  - nvme-fabrics: use reserved tag for reg read/write command (Chunguang Xu)
  - null_blk: fix validation of block size (Andreas Hindborg)
  - io_uring: fix possible deadlock in io_register_iowq_max_workers() (Hagar Hemdan)
  - io_uring/io-wq: avoid garbage value of 'match' in io_wq_enqueue() (Su Hui)
  - io_uring/napi: fix timeout calculation (Jens Axboe)
  - io_uring: check for non-NULL file pointer in io_file_can_poll() (Jens Axboe)
  - btrfs: protect folio::private when attaching extent buffer folios (Qu Wenruo)
  - btrfs: fix leak of qgroup extent records after transaction abort (Filipe Manana)
  - btrfs: fix crash on racing fsync and size-extending write into prealloc (Omar Sandoval)
  - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (Chuck Lever)
  - Revert "riscv: mm: accelerate pagefault when badaccess" (Palmer Dabbelt)
  - riscv: fix overlap of allocated page and PTR_ERR (Nam Cao)
  - KVM: s390x: selftests: Add shared zeropage test (David Hildenbrand)
  - s390/crash: Do not use VM info if os_info does not have it (Alexander Gordeev)
  - arm64/io: add constant-argument check (Arnd Bergmann)
  - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (Wei Li)
  - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (Suma Hegde)
  - platform/x86: dell-smbios: Simplify error handling (Armin Wolf)
  - platform/x86: dell-smbios: Fix wrong token data in sysfs (Armin Wolf)
  - platform/x86: yt2-1380: add CONFIG_EXTCON dependency (Arnd Bergmann)
  - platform/x86: touchscreen_dmi: Use 2-argument strscpy() (Andy Shevchenko)
  - platform/x86: touchscreen_dmi: Drop "silead,max-fingers" property (Hans de Goede)
  - Input: silead - Always support 10 fingers (Hans de Goede)
  - iommu/amd: Fix Invalid wait context issue (Vasant Hegde)
  - iommu/amd: Check EFR[EPHSup] bit before enabling PPR (Vasant Hegde)
  - iommu/amd: Fix workqueue name (Vasant Hegde)
  - iommu: Return right value in iommu_sva_bind_device() (Lu Baolu)
  - iommu/dma: Fix domain init (Robin Murphy)
  - iommu/amd: Fix sysfs leak in iommu init (Kun(llfl))
  - ata: pata_macio: Fix max_segment_size with PAGE_SIZE == 64K (Michael Ellerman)
  - drm/komeda: remove unused struct 'gamma_curve_segment' (Dr. David Alan Gilbert)
  - drm/vmwgfx: Don't memcmp equivalent pointers (Ian Forbes)
  - drm/vmwgfx: remove unused struct 'vmw_stdu_dma' (Dr. David Alan Gilbert)
  - drm/vmwgfx: Don't destroy Screen Target when CRTC is enabled but inactive (Ian Forbes)
  - drm/vmwgfx: Standardize use of kibibytes when logging (Ian Forbes)
  - drm/vmwgfx: Remove STDU logic from generic mode_valid function (Ian Forbes)
  - drm/vmwgfx: 3D disabled should not effect STDU memory limits (Ian Forbes)
  - drm/vmwgfx: Filter modes which exceed graphics memory (Ian Forbes)
  - drm/panel: sitronix-st7789v: Add check for of_drm_get_panel_orientation (Chen Ni)
  - drm/amdgpu/pptable: Fix UBSAN array-index-out-of-bounds (Tasos Sahanidis)
  - drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms (Mario Limonciello)
  - drm/xe/pf: Update the LMTT when freeing VF GT config (Michal Wajdeczko)
  - scsi: ufs: mcq: Fix error output and clean up ufshcd_mcq_abort() (Chanwoo Lee)
  - scsi: core: Handle devices which return an unusually large VPD page count (Martin K. Petersen)
  - scsi: mpt3sas: Add missing kerneldoc parameter descriptions (Deming Wang)
  - scsi: qedf: Set qed_slowpath_params to zero before use (Saurav Kashyap)
  - scsi: qedf: Wait for stag work during unload (Saurav Kashyap)
  - scsi: qedf: Don't process stag work during unload and recovery (Saurav Kashyap)
  - scsi: sr: Fix unintentional arithmetic wraparound (Justin Stitt)
  - scsi: core: alua: I/O errors for ALUA state transitions (Martin Wilck)
  - scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add() (Nathan Chancellor)
  - PCI: Revert the cfg_access_lock lockdep mechanism (Dan Williams)
  - selftests: net: lib: set 'i' as local (Matthieu Baerts (NGI0))
  - selftests: net: lib: avoid error removing empty netns name (Matthieu Baerts (NGI0))
  - selftests: net: lib: support errexit with busywait (Matthieu Baerts (NGI0))
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (Su Hui)
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Eric Dumazet)
  - af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill(). (Kuniyuki Iwashima)
  - af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen(). (Kuniyuki Iwashima)
  - af_unix: Use skb_queue_empty_lockless() in unix_release_sock(). (Kuniyuki Iwashima)
  - af_unix: Use unix_recvq_full_lockless() in unix_stream_connect(). (Kuniyuki Iwashima)
  - af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen. (Kuniyuki Iwashima)
  - af_unix: Annotate data-races around sk->sk_sndbuf. (Kuniyuki Iwashima)
  - af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG. (Kuniyuki Iwashima)
  - af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb(). (Kuniyuki Iwashima)
  - af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg(). (Kuniyuki Iwashima)
  - af_unix: Annotate data-race of sk->sk_state in unix_accept(). (Kuniyuki Iwashima)
  - af_unix: Annotate data-race of sk->sk_state in unix_stream_connect(). (Kuniyuki Iwashima)
  - af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll(). (Kuniyuki Iwashima)
  - af_unix: Annotate data-race of sk->sk_state in unix_inq_len(). (Kuniyuki Iwashima)
  - af_unix: Annodate data-races around sk->sk_state for writers. (Kuniyuki Iwashima)
  - af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer. (Kuniyuki Iwashima)
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Aleksandr Mishin)
  - igc: Fix Energy Efficient Ethernet support declaration (Sasha Neftin)
  - ice: map XDP queues to vectors in ice_vsi_map_rings_to_vectors() (Larysa Zaremba)
  - ice: add flag to distinguish reset from .ndo_bpf in XDP rings config (Larysa Zaremba)
  - ice: remove af_xdp_zc_qps bitmap (Larysa Zaremba)
  - ice: fix reads from NVM Shadow RAM on E830 and E825-C devices (Jacob Keller)
  - ice: fix iteration of TLVs in Preserved Fields Area (Jacob Keller)
  - Revert "xsk: Document ability to redirect to any socket bound to the same umem" (Magnus Karlsson)
  - Revert "xsk: Support redirect to any socket bound to the same umem" (Magnus Karlsson)
  - bpf: Set run context for rawtp test_run callback (Jiri Olsa)
  - bpf: Fix a potential use-after-free in bpf_link_free() (Cong Wang)
  - bpf, devmap: Remove unnecessary if check in for loop (Thorsten Blum)
  - libbpf: don't close(-1) in multi-uprobe feature detector (Andrii Nakryiko)
  - bpf: Fix bpf_session_cookie BTF_ID in special_kfunc_set list (Jiri Olsa)
  - selftests/bpf: fix inet_csk_accept prototype in test_sk_storage_tracing.c (Andrii Nakryiko)
  - ptp: Fix error message on failed pin verification (Karol Kolacinski)
  - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (Eric Dumazet)
  - net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (Aleksandr Mishin)
  - net/mlx5: Always stop health timer during driver removal (Shay Drory)
  - net/mlx5: Stop waiting for PCI if pci channel is offline (Moshe Shemesh)
  - net: ethernet: mtk_eth_soc: handle dma buffer size soc specific (Frank Wunderlich)
  - rtnetlink: make the "split" NLM_DONE handling generic (Jakub Kicinski)
  - mptcp: count CLOSE-WAIT sockets for MPTCP_MIB_CURRESTAB (Jason Xing)
  - tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB (Jason Xing)
  - selftests: hsr: add missing config for CONFIG_BRIDGE (Hangbin Liu)
  - vxlan: Fix regression when dropping packets due to invalid src addresses (Daniel Borkmann)
  - net: sched: sch_multiq: fix possible OOB write in multiq_tune() (Hangyu Hua)
  - ionic: fix kernel panic in XDP_TX action (Taehee Yoo)
  - net: phy: Micrel KSZ8061: fix errata solution not taking effect problem (Tristram Ha)
  - net/smc: avoid overwriting when adjusting sock bufsizes (Wen Gu)
  - octeontx2-af: Always allocate PF entries from low prioriy zone (Subbaraya Sundeep)
  - net: tls: fix marking packets as decrypted (Jakub Kicinski)
  - wifi: rtlwifi: Ignore IEEE80211_CONF_CHANGE_RETRY_LIMITS (Bitterblue Smith)
  - wifi: mt76: mt7615: add missing chanctx ops (Johannes Berg)
  - wifi: wilc1000: document SRCU usage instead of SRCU (Alexis Lothoré)
  - Revert "wifi: wilc1000: set atomic flag on kmemdup in srcu critical section" (Alexis Lothoré)
  - Revert "wifi: wilc1000: convert list management to RCU" (Alexis Lothoré)
  - wifi: ath11k: move power type check to ASSOC stage when connecting to 6 GHz AP (Baochen Qiang)
  - wifi: ath11k: fix WCN6750 firmware crash caused by 17 num_vdevs (Carl Huang)
  - wifi: ath10k: fix QCOM_RPROC_COMMON dependency (Dmitry Baryshkov)
  - wifi: ath11k: Fix error path in ath11k_pcic_ext_irq_config (Breno Leitao)
  - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (Dmitry Antipov)
  - wifi: mac80211: correctly parse Spatial Reuse Parameter Set element (Lingbo Kong)
  - wifi: mac80211: fix Spatial Reuse element size check (Lingbo Kong)
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: Fix scan abort handling with HW rfkill (Ilan Peer)
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (Miri Korenblit)
  - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (Ayala Beker)
  - wifi: iwlwifi: mvm: handle BA session teardown in RF-kill (Johannes Berg)
  - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (Yedidya Benshimol)
  - wifi: iwlwifi: mvm: remove stale STA link data during restart (Benjamin Berg)
  - wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef (Shahar S Matityahu)
  - wifi: iwlwifi: mvm: set properly mac header (Mordechay Goodstein)
  - wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64 (Johannes Berg)
  - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (Yedidya Benshimol)
  - wifi: iwlwifi: mvm: fix a crash on 7265 (Emmanuel Grumbach)
  - wifi: iwlwifi: mvm: always set the TWT IE offset (Shaul Triebitz)
  - wifi: iwlwifi: mvm: don't initialize csa_work twice (Miri Korenblit)
  - wifi: mac80211: pass proper link id for channel switch started notification (Aditya Kumar Singh)
  - wifi: cfg80211: fix 6 GHz scan request building (Johannes Berg)
  - wifi: mac80211: handle tasklet frames before stopping (Johannes Berg)
  - wifi: mac80211: apply mcast rate only if interface is up (Johannes Berg)
  - wifi: cfg80211: pmsr: use correct nla_get_uX functions (Lin Ma)
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (Remi Pommarel)
  - wifi: cfg80211: fully move wiphy work to unbound workqueue (Johannes Berg)
  - wifi: cfg80211: validate HE operation element parsing (Johannes Berg)
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (Remi Pommarel)
  - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (Nicolas Escande)
  - wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects (Nicolas Escande)
  - lib/test_rhashtable: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - net: dst_cache: add two DEBUG_NET warnings (Eric Dumazet)
  - ila: block BH in ila_output() (Eric Dumazet)
  - ipv6: sr: block BH in seg6_output_core() and seg6_input_core() (Eric Dumazet)
  - net: ipv6: rpl_iptunnel: block BH in rpl_output() and rpl_input() (Eric Dumazet)
  - ipv6: ioam: block BH from ioam6_output() (Eric Dumazet)
  - vmxnet3: disable rx data ring on dma allocation failure (Matthias Stocker)
  - net: phy: micrel: fix KSZ9477 PHY issues after suspend/resume (Tristram Ha)
  - net/tcp: Don't consider TCP_CLOSE in TCP_AO_ESTABLISHED (Dmitry Safonov)
  - net/ncsi: Fix the multi thread manner of NCSI driver (DelphineCCChiu)
  - net: rps: fix error when CONFIG_RFS_ACCEL is off (Jason Xing)
  - ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put() (Duoming Zhou)
  - ax25: Fix refcount imbalance on inbound connections (Lars Kellogg-Stedman)
  - virtio_net: fix a spurious deadlock issue (Heng Qi)
  - virtio_net: fix possible dim status unrecoverable (Heng Qi)
  - ethtool: init tsinfo stats if requested (Vadim Fedorenko)
  - MAINTAINERS: remove Peter Geis (Peter Geis)
  - virtio_net: fix missing lock protection on control_buf access (Heng Qi)
  - tomoyo: update project links (Tetsuo Handa)
  - efi: Add missing __nocfi annotations to runtime wrappers (Ard Biesheuvel)
  - efi: pstore: Return proper errors on UEFI failures (Guilherme G. Piccoli)
  - efi/libstub: zboot.lds: Discard .discard sections (Nathan Chancellor)


author: Jan Stancek <jstancek@redhat.com> [6.10.0-0.rc4.11.el10]
changelog:
  - v6.10-rc4-rt6 (Sebastian Andrzej Siewior)
  - Linux 6.10-rc4 (Linus Torvalds)
  - parisc: Try to fix random segmentation faults in package builds (John David Anglin)
  - i2c: designware: Fix the functionality flags of the slave-only interface (Jean Delvare)
  - i2c: at91: Fix the functionality flags of the slave-only interface (Jean Delvare)
  - USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages (Alan Stern)
  - xhci: Handle TD clearing for multiple streams case (Hector Martin)
  - xhci: Apply broken streams quirk to Etron EJ188 xHCI host (Kuangyi Chiang)
  - xhci: Apply reset resume quirk to Etron EJ188 xHCI host (Kuangyi Chiang)
  - xhci: Set correct transferred length for cancelled bulk transfers (Mathias Nyman)
  - thunderbolt: debugfs: Fix margin debugfs node creation condition (Aapo Vienamo)
  - usb-storage: alauda: Check whether the media is initialized (Shichao Lai)
  - usb: typec: ucsi: Ack also failed Get Error commands (Heikki Krogerus)
  - kcov, usb: disable interrupts in kcov_remote_start_usb_softirq (Andrey Konovalov)
  - dt-bindings: usb: realtek,rts5411: Add missing "additionalProperties" on child nodes (Rob Herring (Arm))
  - usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state (Kyle Tso)
  - usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps (Amit Sunil Dhamne)
  - USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected (John Ernberg)
  - usb: typec: ucsi: glink: increase max ports for x1e80100 (Johan Hovold)
  - Revert "usb: chipidea: move ci_ulpi_init after the phy initialization" (Peter Chen)
  - serial: drop debugging WARN_ON_ONCE() from uart_write() (Tetsuo Handa)
  - serial: sc16is7xx: re-add Kconfig SPI or I2C dependency (Hugo Villeneuve)
  - serial: sc16is7xx: rename Kconfig CONFIG_SERIAL_SC16IS7XX_CORE (Hugo Villeneuve)
  - serial: port: Don't block system suspend even if bytes are left to xmit (Douglas Anderson)
  - serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level (Doug Brown)
  - serial: 8250_dw: Revert "Move definitions to the shared header" (Andy Shevchenko)
  - serial: 8250_dw: Don't use struct dw8250_data outside of 8250_dw (Andy Shevchenko)
  - tty: n_tty: Fix buffer offsets when lookahead is used (Ilpo Järvinen)
  - staging: vchiq_debugfs: Fix NPD in vchiq_dump_state (Stefan Wahren)
  - drivers: core: synchronize really_probe() and dev_uevent() (Dirk Behme)
  - sysfs: Unbreak the build around sysfs_bin_attr_simple_read() (Lukas Wunner)
  - driver core: remove devm_device_add_groups() (Greg Kroah-Hartman)
  - .editorconfig: remove trim_trailing_whitespace option (Greg Kroah-Hartman)
  - iio: inkern: fix channel read regression (Johan Hovold)
  - iio: imu: inv_mpu6050: stabilized timestamping in interrupt (Jean-Baptiste Maneyrol)
  - iio: adc: ad7173: Fix sampling frequency setting (Dumitru Ceclan)
  - iio: adc: ad7173: Clear append status bit (Dumitru Ceclan)
  - iio: imu: inv_icm42600: delete unneeded update watermark call (Jean-Baptiste Maneyrol)
  - iio: imu: inv_icm42600: stabilized timestamp in interrupt (Jean-Baptiste Maneyrol)
  - iio: invensense: fix odr switching to same value (Jean-Baptiste Maneyrol)
  - iio: adc: ad7173: Remove index from temp channel (Dumitru Ceclan)
  - iio: adc: ad7173: Add ad7173_device_info names (Dumitru Ceclan)
  - iio: adc: ad7173: fix buffers enablement for ad7176-2 (Dumitru Ceclan)
  - iio: temperature: mlx90635: Fix ERR_PTR dereference in mlx90635_probe() (Harshit Mogalapalli)
  - iio: imu: bmi323: Fix trigger notification in case of error (Vasileios Amoiridis)
  - iio: dac: ad5592r: fix temperature channel scaling value (Marc Ferland)
  - iio: pressure: bmp280: Fix BMP580 temperature reading (Adam Rizkalla)
  - dt-bindings: iio: dac: fix ad354xr output range (Angelo Dureghello)
  - iio: adc: ad9467: fix scan type sign (David Lechner)
  - jfs: xattr: fix buffer overflow for invalid xattr (Greg Kroah-Hartman)
  - misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe() (Yongzhi Liu)
  - misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe() (Yongzhi Liu)
  - parport: amiga: Mark driver struct with __refdata to prevent section mismatch (Uwe Kleine-König)
  - mei: vsc: Fix wrong invocation of ACPI SID method (Hans de Goede)
  - mei: vsc: Don't stop/restart mei device during system suspend/resume (Wentong Wu)
  - mei: me: release irq in mei_me_pci_resume error path (Tomas Winkler)
  - mei: demote client disconnect warning on suspend to debug (Alexander Usyskin)
  - ata: libata-scsi: Set the RMB bit only for removable media devices (Damien Le Moal)
  - RAS/AMD/ATL: Use system settings for MI300 DRAM to normalized address translation (Yazen Ghannam)
  - RAS/AMD/ATL: Fix MI300 bank hash (Yazen Ghannam)
  - firewire: core: record card index in bus_reset_handle tracepoints event (Takashi Sakamoto)
  - firewire: core: record card index in tracepoinrts events derived from bus_reset_arrange_template (Takashi Sakamoto)
  - firewire: core: record card index in async_phy_inbound tracepoints event (Takashi Sakamoto)
  - firewire: core: record card index in async_phy_outbound_complete tracepoints event (Takashi Sakamoto)
  - firewire: core: record card index in async_phy_outbound_initiate tracepoints event (Takashi Sakamoto)
  - firewire: core: record card index in tracepoinrts events derived from async_inbound_template (Takashi Sakamoto)
  - firewire: core: record card index in tracepoinrts events derived from async_outbound_initiate_template (Takashi Sakamoto)
  - firewire: core: record card index in tracepoinrts events derived from async_outbound_complete_template (Takashi Sakamoto)
  - firewire: fix website URL in Kconfig (Takashi Sakamoto)
  - leds: class: Revert: "If no default trigger is given, make hw_control trigger the default trigger" (Hans de Goede)
  - Enable ALSA (CONFIG_SND) on aarch64 (Charles Mirabile) [RHEL-40411]
  - redhat: Remove DIST_BRANCH variable (Eder Zulian)
  - xfs: make sure sb_fdblocks is non-negative (Wengang Wang)
  - ksmbd: fix missing use of get_write in in smb2_set_ea() (Namjae Jeon)
  - ksmbd: move leading slash check to smb2_get_name() (Namjae Jeon)
  - x86/boot: Don't add the EFI stub to targets, again (Benjamin Segall)
  - x86/uaccess: Fix missed zeroing of ia32 u64 get_user() range checking (Kees Cook)
  - tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device() (Oleg Nesterov)
  - s390/mm: Restore mapping of kernel image using large pages (Alexander Gordeev)
  - s390/mm: Allow large pages only for aligned physical addresses (Alexander Gordeev)
  - s390: Update defconfigs (Heiko Carstens)
  - drm/xe: move disable_c6 call (Riana Tauro)
  - drm/xe: flush engine buffers before signalling user fence on all engines (Andrzej Hajda)
  - drm/xe/pf: Assert LMEM provisioning is done only on DGFX (Michal Wajdeczko)
  - drm/xe/xe_gt_idle: use GT forcewake domain assertion (Riana Tauro)
  - MAINTAINERS: Update Xe driver maintainers (Thomas Hellström)
  - MAINTAINERS: update Xe driver maintainers (Oded Gabbay)
  - drm/exynos/vidi: fix memory leak in .get_modes() (Jani Nikula)
  - drm/exynos: dp: drop driver owner initialization (Krzysztof Kozlowski)
  - drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found (Marek Szyprowski)
  - arm/komeda: Remove all CONFIG_DEBUG_FS conditional compilations (pengfuyuan)
  - drm/mediatek: Call drm_atomic_helper_shutdown() at shutdown time (Douglas Anderson)
  - drm: renesas: shmobile: Call drm_atomic_helper_shutdown() at shutdown time (Douglas Anderson)
  - drm/nouveau: remove unused struct 'init_exec' (Dr. David Alan Gilbert)
  - drm/nouveau: don't attempt to schedule hpd_work on headless cards (Vasily Khoruzhick)
  - drm/amdgpu: Fix the BO release clear memory warning (Arunpravin Paneer Selvam)
  - drm/bridge/panel: Fix runtime warning on panel bridge release (Adam Miotk)
  - drm/komeda: check for error-valued pointer (Amjad Ouled-Ameur)
  - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (Tobias Jakobi)
  - drm: have config DRM_WERROR depend on !WERROR (Jani Nikula)
  - vfio/pci: Insert full vma on mmap'd MMIO fault (Alex Williamson)
  - vfio/pci: Use unmap_mapping_range() (Alex Williamson)
  - vfio: Create vfio_fs_type with inode per device (Alex Williamson)
  - loop: Disable fallocate() zero and discard if not supported (Cyril Hrubis)
  - nvme: fix namespace removal list (Keith Busch)
  - nvmet: always initialize cqe.result (Daniel Wagner)
  - nvmet-passthru: propagate status from id override functions (Daniel Wagner)
  - nvme: avoid double free special payload (Chunguang Xu)
  - nbd: Remove __force casts (Christoph Hellwig)
  - block: unmap and free user mapped integrity via submitter (Anuj Gupta)
  - block: fix request.queuelist usage in flush (Chengming Zhou)
  - block: Optimize disk zone resource cleanup (Damien Le Moal)
  - block: sed-opal: avoid possible wrong address reference in read_sed_opal_key() (Su Hui)
  - io_uring: fix cancellation overwriting req->flags (Pavel Begunkov)
  - io_uring/rsrc: don't lock while !TASK_RUNNING (Pavel Begunkov)
  - scsi: mpi3mr: Fix ATA NCQ priority support (Damien Le Moal)
  - scsi: ufs: core: Quiesce request queues before checking pending cmds (Ziqi Chen)
  - scsi: core: Disable CDL by default (Damien Le Moal)
  - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (Breno Leitao)
  - scsi: sd: Use READ(16) when reading block zero on large capacity disks (Martin K. Petersen)
  - iommu/amd: Fix panic accessing amd_iommu_enable_faulting (Dimitri Sivanich)
  - cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo() (Rafael J. Wysocki)
  - ACPI: x86: Force StorageD3Enable on more products (Mario Limonciello)
  - ACPI: EC: Evaluate orphan _REG under EC device (Rafael J. Wysocki)
  - thermal: gov_step_wise: Restore passive polling management (Rafael J. Wysocki)
  - thermal: ACPI: Invalidate trip points with temperature of 0 or below (Rafael J. Wysocki)
  - thermal: core: Do not fail cdev registration because of invalid initial state (Rafael J. Wysocki)
  - bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (Aleksandr Mishin)
  - af_unix: Read with MSG_PEEK loops if the first unread byte is OOB (Rao Shoaib)
  - bnxt_en: Cap the size of HWRM_PORT_PHY_QCFG forwarded response (Michael Chan)
  - gve: Clear napi->skb before dev_kfree_skb_any() (Ziwei Xiao)
  - ionic: fix use after netif_napi_del() (Taehee Yoo)
  - Revert "igc: fix a log entry using uninitialized netdev" (Sasha Neftin)
  - net: bridge: mst: fix suspicious rcu usage in br_mst_set_state (Nikolay Aleksandrov)
  - net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state (Nikolay Aleksandrov)
  - net/ipv6: Fix the RT cache flush via sysctl using a previous delay (Petr Pavlu)
  - netfilter: Use flowlabel flow key when re-routing mangled packets (Florian Westphal)
  - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type (Jozsef Kadlecsik)
  - netfilter: nft_inner: validate mandatory meta and payload (Davide Ornaghi)
  - net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters (Xiaolei Wang)
  - gve: ignore nonrelevant GSO type bits when processing TSO headers (Joshua Washington)
  - Bluetooth: fix connection setup in l2cap_connect (Pauli Virtanen)
  - Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ (Luiz Augusto von Dentz)
  - Bluetooth: hci_sync: Fix not using correct handle (Luiz Augusto von Dentz)
  - net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP (Kory Maincent)
  - tcp: use signed arithmetic in tcp_rtx_probe0_timed_out() (Eric Dumazet)
  - mailmap: map Geliang's new email address (Geliang Tang)
  - mptcp: pm: update add_addr counters after connect (YonglongLi)
  - mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID (YonglongLi)
  - mptcp: ensure snd_una is properly initialized on connect (Paolo Abeni)
  - net/sched: initialize noop_qdisc owner (Johannes Berg)
  - net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets (Gal Pressman)
  - geneve: Fix incorrect inner network header offset when innerprotoinherit is set (Gal Pressman)
  - net dsa: qca8k: fix usages of device_get_named_child_node() (Andy Shevchenko)
  - tcp: fix race in tcp_v6_syn_recv_sock() (Eric Dumazet)
  - netdevsim: fix backwards compatibility in nsim_get_iflink() (David Wei)
  - net: stmmac: dwmac-qcom-ethqos: Configure host DMA width (Sagar Cheluvegowda)
  - liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (Aleksandr Mishin)
  - net: hns3: add cond_resched() to hns3 ring buffer init process (Jie Wang)
  - net: hns3: fix kernel crash problem in concurrent scenario (Yonglong Liu)
  - dt-bindings: net: dp8386x: Add MIT license along with GPL-2.0 (Udit Kumar)
  - net: sfp: Always call `sfp_sm_mod_remove()` on remove (Csókás, Bence)
  - NFS: add barriers when testing for NFS_FSDATA_BLOCKED (NeilBrown)
  - SUNRPC: return proper error from gss_wrap_req_priv (Chen Hanxiao)
  - NFSv4.1 enforce rootpath check in fs_location query (Olga Kornievskaia)
  - NFS: abort nfs_atomic_open_v23 if name is too long. (NeilBrown)
  - nfs: don't invalidate dentries on transient errors (Scott Mayhew)
  - nfs: Avoid flushing many pages with NFS_FILE_SYNC (Jan Kara)
  - nfs: propagate readlink errors in nfs_symlink_filler (Sagi Grimberg)
  - MAINTAINERS: Change email address for Trond Myklebust (Trond Myklebust)
  - NFSv4: Fix memory leak in nfs4_set_security_label (Dmitry Mastykin)
  - x86/mm/numa: Use NUMA_NO_NODE when calling memblock_set_node() (Jan Beulich)
  - memblock: make memblock_set_node() also warn about use of MAX_NUMNODES (Jan Beulich)
  - v6.10-rc3-rt5 (Sebastian Andrzej Siewior)
  - locking: Introduce nested-BH locking, v6 (Sebastian Andrzej Siewior)
  - ARM: 9405/1: ftrace: Don't assume stack frames are contiguous in memory (Ard Biesheuvel)
  - clkdev: don't fail clkdev_alloc() if over-sized (Russell King (Oracle))
  - bcachefs: Fix rcu_read_lock() leak in drop_extra_replicas (Kent Overstreet)
  - bcachefs: Add missing bch_inode_info.ei_flags init (Kent Overstreet)
  - bcachefs: Add missing synchronize_srcu_expedited() call when shutting down (Kent Overstreet)
  - bcachefs: Check for invalid bucket from bucket_gen(), gc_bucket() (Kent Overstreet)
  - bcachefs: Replace bucket_valid() asserts in bucket lookup with proper checks (Kent Overstreet)
  - bcachefs: Fix snapshot_create_lock lock ordering (Kent Overstreet)
  - bcachefs: Fix refcount leak in check_fix_ptrs() (Kent Overstreet)
  - bcachefs: Leave a buffer in the btree key cache to avoid lock thrashing (Kent Overstreet)
  - bcachefs: Fix reporting of freed objects from key cache shrinker (Kent Overstreet)
  - bcachefs: set sb->s_shrinker->seeks = 0 (Kent Overstreet)
  - bcachefs: increase key cache shrinker batch size (Kent Overstreet)
  - bcachefs: Enable automatic shrinking for rhashtables (Kent Overstreet)
  - bcachefs: fix the display format for show-super (Hongbo Li)
  - bcachefs: fix stack frame size in fsck.c (Kent Overstreet)
  - bcachefs: Delete incorrect BTREE_ID_NR assertion (Kent Overstreet)
  - bcachefs: Fix incorrect error handling found_btree_node_is_readable() (Kent Overstreet)
  - bcachefs: Split out btree_write_submit_wq (Kent Overstreet)
  - mailmap: Add my outdated addresses to the map file (Andy Shevchenko)
  - v6.10-rc3-rt4 (Sebastian Andrzej Siewior)
  - iomap: Fix iomap_adjust_read_range for plen calculation (Ritesh Harjani (IBM))
  - iomap: keep on increasing i_size in iomap_write_end() (Zhang Yi)
  - cachefiles: remove unneeded include of <linux/fdtable.h> (Gao Xiang)
  - fs/file: fix the check in find_next_fd() (Yuntao Wang)
  - cachefiles: make on-demand read killable (Baokun Li)
  - cachefiles: flush all requests after setting CACHEFILES_DEAD (Baokun Li)
  - cachefiles: Set object to close if ondemand_id < 0 in copen (Zizhi Wo)
  - cachefiles: defer exposing anon_fd until after copy_to_user() succeeds (Baokun Li)
  - cachefiles: never get a new anonymous fd if ondemand_id is valid (Baokun Li)
  - cachefiles: add spin_lock for cachefiles_ondemand_info (Baokun Li)
  - cachefiles: add consistency check for copen/cread (Baokun Li)
  - cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read() (Baokun Li)
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read() (Baokun Li)
  - cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd() (Baokun Li)
  - cachefiles: remove requests from xarray during flushing requests (Baokun Li)
  - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (Baokun Li)
  - statx: Update offset commentary for struct statx (John Garry)
  - netfs: fix kernel doc for nets_wait_for_outstanding_io() (Christian Brauner)
  - debugfs: continue to ignore unknown mount options (Christian Brauner)
  - gitlab-ci: merge ark-latest before tagging cki-gating (Michael Hofmann)
  - gitlab-ci: do not merge ark-latest for gating pipelines for Rawhide (Michael Hofmann)
  - disable CONFIG_KVM_INTEL_PROVE_VE (Paolo Bonzini)
  - redhat: remove the merge subtrees script (Derek Barbosa)
  - redhat: rhdocs: delete .get_maintainer.conf (Derek Barbosa)
  - redhat: rhdocs: Remove the rhdocs directory (Derek Barbosa)
  - redhat/configs: Disable CONFIG_QLA3XXX (Kamal Heib) [RHEL-36646]
  - Linux 6.10-rc3 (Linus Torvalds)
  - perf bpf: Fix handling of minimal vmlinux.h file when interrupting the build (Namhyung Kim)
  - Revert "perf record: Reduce memory for recording PERF_RECORD_LOST_SAMPLES event" (Arnaldo Carvalho de Melo)
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools headers uapi: Sync linux/stat.h with the kernel sources to pick STATX_SUBVOL (Arnaldo Carvalho de Melo)
  - tools headers UAPI: Update i915_drm.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools headers UAPI: Sync kvm headers with the kernel sources (Arnaldo Carvalho de Melo)
  - tools arch x86: Sync the msr-index.h copy with the kernel sources (Arnaldo Carvalho de Melo)
  - tools headers: Update the syscall tables and unistd.h, mostly to support the new 'mseal' syscall (Arnaldo Carvalho de Melo)
  - perf trace beauty: Update the arch/x86/include/asm/irq_vectors.h copy with the kernel sources to pick POSTED_MSI_NOTIFICATION (Arnaldo Carvalho de Melo)
  - perf beauty: Update copy of linux/socket.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools headers UAPI: Sync fcntl.h with the kernel sources to pick F_DUPFD_QUERY (Arnaldo Carvalho de Melo)
  - tools headers UAPI: Sync linux/prctl.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools include UAPI: Sync linux/stat.h with the kernel sources (Arnaldo Carvalho de Melo)
  - EDAC/igen6: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - EDAC/amd64: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - Linux v6.10.0-0.rc4


author: Jan Stancek <jstancek@redhat.com> [6.10.0-0.rc5.12.el10]
changelog:
  - redhat: kernel.spec: add missing sound/soc/sof/sof-audio.h to kernel-devel package (Jaroslav Kysela)
  - Linux 6.10-rc5 (Linus Torvalds)
  - i2c: ocores: set IACK bit after core is enabled (Grygorii Tertychnyi)
  - dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema (Krzysztof Kozlowski)
  - dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema (Krzysztof Kozlowski)
  - docs: i2c: summary: be clearer with 'controller/target' and 'adapter/client' pairs (Wolfram Sang)
  - docs: i2c: summary: document 'local' and 'remote' targets (Wolfram Sang)
  - docs: i2c: summary: document use of inclusive language (Wolfram Sang)
  - docs: i2c: summary: update speed mode description (Wolfram Sang)
  - docs: i2c: summary: update I2C specification link (Wolfram Sang)
  - docs: i2c: summary: start sentences consistently. (Wolfram Sang)
  - i2c: Add nop fwnode operations (Sakari Ailus)
  - cifs: Move the 'pid' from the subreq to the req (David Howells)
  - cifs: Only pick a channel once per read request (David Howells)
  - cifs: Defer read completion (David Howells)
  - cifs: fix typo in module parameter enable_gcm_256 (Steve French)
  - cifs: drop the incorrect assertion in cifs_swap_rw() (Barry Song)
  - memblock: use numa_valid_node() helper to check for invalid node ID (Mike Rapoport (IBM))
  - mips: fix compat_sys_lseek syscall (Arnd Bergmann)
  - MIPS: mipsmtregs: Fix target register for MFTC0 (Jiaxun Yang)
  - x86/resctrl: Don't try to free nonexistent RMIDs (Dave Martin)
  - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (Alexey Makhalov)
  - KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (Michael Ellerman)
  - powerpc/crypto: Add generated P8 asm to .gitignore (Nathan Lynch)
  - rust: avoid unused import warning in `rusttest` (Miguel Ojeda)
  - regulator: axp20x: AXP717: fix LDO supply rails and off-by-ones (Andre Przywara)
  - regulator: bd71815: fix ramp values (Kalle Niemi)
  - regulator: core: Fix modpost error "regulator_get_regmap" undefined (Biju Das)
  - regulator: tps6594-regulator: Fix the number of irqs for TPS65224 and TPS6594 (Thomas Richard)
  - spi: spi-imx: imx51: revert burst length calculation back to bits_per_word (Marc Kleine-Budde)
  - spi: Fix SPI slave probe failure (Amit Kumar Mahapatra)
  - spi: Fix OCTAL mode support (Patrice Chotard)
  - spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4 (Patrice Chotard)
  - spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup() (Patrice Chotard)
  - spi: cs42l43: Drop cs35l56 SPI speed down to 11MHz (Charles Keepax)
  - spi: cs42l43: Correct SPI root clock speed (Charles Keepax)
  - NFSD: grab nfsd_mutex in nfsd_nl_rpc_status_get_dumpit() (Lorenzo Bianconi)
  - nfsd: fix oops when reading pool_stats before server is started (Jeff Layton)
  - xfs: fix unlink vs cluster buffer instantiation race (Dave Chinner)
  - bcachefs: Move the ei_flags setting to after initialization (Youling Tang)
  - bcachefs: Fix a UAF after write_super() (Kent Overstreet)
  - bcachefs: Use bch2_print_string_as_lines for long err (Kent Overstreet)
  - bcachefs: Fix I_NEW warning in race path in bch2_inode_insert() (Kent Overstreet)
  - bcachefs: Replace bare EEXIST with private error codes (Kent Overstreet)
  - bcachefs: Fix missing alloc_data_type_set() (Kent Overstreet)
  - closures: Change BUG_ON() to WARN_ON() (Kent Overstreet)
  - bcachefs: fix alignment of VMA for memory mapped files on THP (Youling Tang)
  - bcachefs: Fix safe errors by default (Kent Overstreet)
  - bcachefs: Fix bch2_trans_put() (Kent Overstreet)
  - bcachefs: set_worker_desc() for delete_dead_snapshots (Kent Overstreet)
  - bcachefs: Fix bch2_sb_downgrade_update() (Kent Overstreet)
  - bcachefs: Handle cached data LRU wraparound (Kent Overstreet)
  - bcachefs: Guard against overflowing LRU_TIME_BITS (Kent Overstreet)
  - bcachefs: delete_dead_snapshots() doesn't need to go RW (Kent Overstreet)
  - bcachefs: Fix early init error path in journal code (Kent Overstreet)
  - bcachefs: Check for invalid btree IDs (Kent Overstreet)
  - bcachefs: Fix btree ID bitmasks (Kent Overstreet)
  - bcachefs: Fix shift overflow in read_one_super() (Kent Overstreet)
  - bcachefs: Fix a locking bug in the do_discard_fast() path (Kent Overstreet)
  - bcachefs: Fix array-index-out-of-bounds (Kent Overstreet)
  - bcachefs: Fix initialization order for srcu barrier (Kent Overstreet)
  - ata: ahci: Do not enable LPM if no LPM states are supported by the HBA (Niklas Cassel)
  - pwm: stm32: Fix error message to not describe the previous error path (Uwe Kleine-König)
  - pwm: stm32: Fix calculation of prescaler (Uwe Kleine-König)
  - pwm: stm32: Refuse too small period requests (Uwe Kleine-König)
  - firmware: psci: Fix return value from psci_system_suspend() (Sudeep Holla)
  - riscv: dts: sophgo: disable write-protection for milkv duo (Haylen Chu)
  - arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (Frank Li)
  - arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin (Max Krummenacher)
  - arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property (Fabio Estevam)
  - arm64: dts: freescale: imx8mp-venice-gw73xx-2x: fix BT shutdown GPIO (Tim Harvey)
  - arm: dts: imx53-qsb-hdmi: Disable panel instead of deleting node (Liu Ying)
  - arm64: dts: imx8mp: Fix TC9595 input clock on DH i.MX8M Plus DHCOM SoM (Marek Vasut)
  - arm64: dts: freescale: imx8mm-verdin: Fix GPU speed (Joao Paulo Goncalves)
  - LoongArch: KVM: Remove an unneeded semicolon (Yang Li)
  - LoongArch: Fix multiple hardware watchpoint issues (Hui Li)
  - LoongArch: Trigger user-space watchpoints correctly (Hui Li)
  - LoongArch: Fix watchpoint setting error (Hui Li)
  - LoongArch: Only allow OBJTOOL & ORC unwinder if toolchain supports -mthin-add-sub (Xi Ruoyao)
  - KVM: selftests: Fix RISC-V compilation (Andrew Jones)
  - KVM: Stop processing *all* memslots when "null" mmu_notifier handler is found (Babu Moger)
  - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (Breno Leitao)
  - KVM: selftests: x86: Prioritize getting max_gfn from GuestPhysBits (Tao Su)
  - KVM: selftests: Fix shift of 32 bit unsigned int more than 32 bits (Colin Ian King)
  - KVM: SEV-ES: Fix svm_get_msr()/svm_set_msr() for KVM_SEV_ES_INIT guests (Michael Roth)
  - KVM: arm64: FFA: Release hyp rx buffer (Vincent Donnefort)
  - KVM: arm64: Disassociate vcpus from redistributor region on teardown (Marc Zyngier)
  - KVM: Discard zero mask with function kvm_dirty_ring_reset (Bibo Mao)
  - virt: guest_memfd: fix reference leak on hwpoisoned page (Paolo Bonzini)
  - kvm: do not account temporary allocations to kmem (Alexey Dobriyan)
  - MAINTAINERS: Drop Wanpeng Li as a Reviewer for KVM Paravirt support (Sean Christopherson)
  - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (Sean Christopherson)
  - scsi: usb: uas: Do not query the IO Advice Hints Grouping mode page for USB/UAS devices (Bart Van Assche)
  - scsi: core: Introduce the BLIST_SKIP_IO_HINTS flag (Bart Van Assche)
  - scsi: ufs: core: Free memory allocated for model before reinit (Joel Slebodnick)
  - drm/xe/vf: Don't touch GuC irq registers if using memory irqs (Michal Wajdeczko)
  - drm/amdgpu: init TA fw for psp v14 (Likun Gao)
  - drm/amdgpu: cleanup MES11 command submission (Christian König)
  - drm/amdgpu: fix UBSAN warning in kv_dpm.c (Alex Deucher)
  - drm/radeon: fix UBSAN warning in kv_dpm.c (Alex Deucher)
  - drm/amd/display: Disable CONFIG_DRM_AMD_DC_FP for RISC-V with clang (Nathan Chancellor)
  - drm/amd/display: Attempt to avoid empty TUs when endpoint is DPIA (Michael Strauss)
  - drm/amd/display: change dram_clock_latency to 34us for dcn35 (Paul Hsieh)
  - drm/amd/display: Change dram_clock_latency to 34us for dcn351 (Daniel Miess)
  - drm/amdgpu: revert "take runtime pm reference when we attach a buffer" v2 (Christian König)
  - drm/amdgpu: Indicate CU havest info to CP (Harish Kasiviswanathan)
  - drm/amd/display: prevent register access while in IPS (Hamza Mahfooz)
  - drm/amdgpu: fix locking scope when flushing tlb (Yunxiang Li)
  - drm/amd/display: Remove redundant idle optimization check (Roman Li)
  - drm/i915/mso: using joiner is not possible with eDP MSO (Jani Nikula)
  - ovl: fix encoding fid for lower only root (Miklos Szeredi)
  - ovl: fix copy-up in tmpfile (Miklos Szeredi)
  - io_uring/rsrc: fix incorrect assignment of iter->nr_segs in io_import_fixed (Chenliang Li)
  - RDMA/mana_ib: Ignore optional access flags for MRs (Konstantin Taranov)
  - RDMA/mlx5: Add check for srq max_sge attribute (Patrisious Haddad)
  - RDMA/mlx5: Fix unwind flow as part of mlx5_ib_stage_init_init (Yishai Hadas)
  - RDMA/mlx5: Ensure created mkeys always have a populated rb_key (Jason Gunthorpe)
  - RDMA/mlx5: Follow rb_key.ats when creating new mkeys (Jason Gunthorpe)
  - RDMA/mlx5: Remove extra unlock on error path (Jason Gunthorpe)
  - RDMA/rxe: Fix responder length checking for UD request packets (Honggang LI)
  - RDMA/rxe: Fix data copy for IB_SEND_INLINE (Honggang LI)
  - RDMA/bnxt_re: Fix the max msix vectors macro (Selvin Xavier)
  - ALSA: hda: Use imply for suggesting CONFIG_SERIAL_MULTI_INSTANTIATE (Takashi Iwai)
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14AHP9 (Pablo Caño)
  - ACPI: mipi-disco-img: Switch to new Intel CPU model defines (Hans de Goede)
  - ACPI: scan: Ignore camera graph port nodes on all Dell Tiger, Alder and Raptor Lake models (Hans de Goede)
  - ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." (Raju Rangoju)
  - thermal: int340x: processor_thermal: Support shared interrupts (Srinivas Pandruvada)
  - thermal/drivers/mediatek/lvts_thermal: Return error in case of invalid efuse data (Julien Panis)
  - thermal/drivers/mediatek/lvts_thermal: Remove filtered mode for mt8188 (Julien Panis)
  - thermal: core: Change PM notifier priority to the minimum (Rafael J. Wysocki)
  - thermal: core: Synchronize suspend-prepare and post-suspend actions (Rafael J. Wysocki)
  - dmaengine: ioatdma: Fix missing kmem_cache_destroy() (Nikita Shubin)
  - dt-bindings: dma: fsl-edma: fix dma-channels constraints (Krzysztof Kozlowski)
  - dmaengine: fsl-edma: avoid linking both modules (Arnd Bergmann)
  - dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe() (Nikita Shubin)
  - dmaengine: ioatdma: Fix error path in ioat3_dma_probe() (Nikita Shubin)
  - dmaengine: ioatdma: Fix leaking on version mismatch (Nikita Shubin)
  - dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id() (Siddharth Vadapalli)
  - dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list (Li RongQing)
  - dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr() (Louis Chauvet)
  - phy: qcom: qmp-combo: Switch from V6 to V6 N4 register offsets (Abel Vesa)
  - phy: qcom-qmp: pcs: Add missing v6 N4 register offsets (Abel Vesa)
  - phy: qcom-qmp: qserdes-txrx: Add missing registers offsets (Abel Vesa)
  - soundwire: fix usages of device_get_named_child_node() (Pierre-Louis Bossart)
  - redhat/kernel.spec: fix attributes of symvers file (Jan Stancek)
  - redhat: add filtermods rule for iommu tests (Jan Stancek)
  - btrfs: zoned: allocate dummy checksums for zoned NODATASUM writes (Johannes Thumshirn)
  - btrfs: retry block group reclaim without infinite loop (Boris Burkov)
  - net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings (Oliver Neukum)
  - selftests: virtio_net: add forgotten config options (Jiri Pirko)
  - bnxt_en: Restore PTP tx_avail count in case of skb_pad() error (Pavan Chebbi)
  - bnxt_en: Set TSO max segs on devices with limits (Michael Chan)
  - bnxt_en: Update firmware interface to 1.10.3.44 (Michael Chan)
  - net: stmmac: Assign configured channel value to EXTTS event (Oleksij Rempel)
  - selftests: add selftest for the SRv6 End.DX6 behavior with netfilter (Jianguo Wu)
  - selftests: add selftest for the SRv6 End.DX4 behavior with netfilter (Jianguo Wu)
  - netfilter: move the sysctl nf_hooks_lwtunnel into the netfilter core (Jianguo Wu)
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Jianguo Wu)
  - netfilter: ipset: Fix suspicious rcu_dereference_protected() (Jozsef Kadlecsik)
  - net: do not leave a dangling sk pointer, when socket creation fails (Ignat Korchagin)
  - net/tcp_ao: Don't leak ao_info on error-path (Dmitry Safonov)
  - ice: Fix VSI list rule with ICE_SW_LKUP_LAST type (Marcin Szycik)
  - ipv6: bring NLM_DONE out to a separate recv() again (Jakub Kicinski)
  - selftests: openvswitch: Set value to nla flags. (Adrian Moreno)
  - octeontx2-pf: Fix linking objects into multiple modules (Geetha sowjanya)
  - octeontx2-pf: Add error handling to VLAN unoffload handling (Simon Horman)
  - virtio_net: fixing XDP for fully checksummed packets handling (Heng Qi)
  - virtio_net: checksum offloading handling fix (Heng Qi)
  - net: usb: ax88179_178a: improve reset check (Jose Ignacio Tornos Martinez)
  - net: stmmac: No need to calculate speed divider when offload is disabled (Xiaolei Wang)
  - net: phy: dp83tg720: get master/slave configuration in link down state (Oleksij Rempel)
  - net: phy: dp83tg720: wake up PHYs in managed mode (Oleksij Rempel)
  - selftests: openvswitch: Use bash as interpreter (Simon Horman)
  - ptp: fix integer overflow in max_vclocks_store (Dan Carpenter)
  - sched: act_ct: add netns into the key of tcf_ct_flow_table (Xin Long)
  - tipc: force a dst refcount before doing decryption (Xin Long)
  - net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc() (David Ruth)
  - net: phy: mxl-gpy: Remove interrupt mask clearing from config_init (Raju Lakkaraju)
  - net: lan743x: Support WOL at both the PHY and MAC appropriately (Raju Lakkaraju)
  - net: lan743x: disable WOL upon resume to restore full data path operation (Raju Lakkaraju)
  - qca_spi: Make interrupt remembering atomic (Stefan Wahren)
  - netns: Make get_net_ns() handle zero refcount net (Yue Haibing)
  - xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (Eric Dumazet)
  - ipv6: prevent possible NULL dereference in rt6_probe() (Eric Dumazet)
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Eric Dumazet)
  - selftests: mptcp: userspace_pm: fixed subtest names (Matthieu Baerts (NGI0))
  - tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack() (Eric Dumazet)
  - netrom: Fix a memory leak in nr_heartbeat_expiry() (Gavrilov Ilia)
  - ice: implement AQ download pkg retry (Wojciech Drewek)
  - ice: fix 200G link speed message log (Paul Greenwalt)
  - ice: avoid IRQ collision to fix init failure on ACPI S3 resume (En-Wei Wu)
  - netdev-genl: fix error codes when outputting XDP features (Jakub Kicinski)
  - bpf: Harden __bpf_kfunc tag against linker kfunc removal (Tony Ambardar)
  - compiler_types.h: Define __retain for __attribute__((__retain__)) (Tony Ambardar)
  - bpf: Avoid splat in pskb_pull_reason (Florian Westphal)
  - bpf: fix UML x86_64 compile failure (Maciej Żenczykowski)
  - selftests/bpf: Add test coverage for reg_set_min_max handling (Daniel Borkmann)
  - bpf: Reduce stack consumption in check_stack_write_fixed_off (Daniel Borkmann)
  - bpf: Fix reg_set_min_max corruption of fake_reg (Daniel Borkmann)
  - MAINTAINERS: mailmap: Update Stanislav's email address (Stanislav Fomichev)
  - wifi: mac80211: fix monitor channel with chanctx emulation (Johannes Berg)
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (Kenton Groombridge)
  - wifi: mac80211: Recalc offload when monitor stop (Remi Pommarel)
  - wifi: iwlwifi: scan: correctly check if PSC listen period is needed (Ayala Beker)
  - wifi: iwlwifi: mvm: fix ROC version check (Shaul Triebitz)
  - wifi: iwlwifi: mvm: unlock mvm mutex (Shaul Triebitz)
  - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (Dmitry Antipov)
  - wifi: cfg80211: wext: set ssids=NULL for passive scans (Johannes Berg)
  - cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options (Ondrej Mosnacek)
  - cipso: fix total option length computation (Ondrej Mosnacek)
  - net: mvpp2: use slab_build_skb for oversized frames (Aryan Srivastava)
  - ALSA: hda: cs35l56: Select SERIAL_MULTI_INSTANTIATE (Simon Trimmer)
  - ALSA: hda/realtek: Add more codec ID to no shutup pins list (Kailang Yang)
  - sound/oss/dmasound: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ARP8 (Gergely Meszaros)
  - ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM (Ajrat Makhmutov)
  - ALSA: hda: tas2781: Component should be unbound before deconstruction (Simon Trimmer)
  - ALSA: hda: cs35l41: Component should be unbound before deconstruction (Simon Trimmer)
  - ALSA: hda: cs35l56: Component should be unbound before deconstruction (Simon Trimmer)
  - ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option (Peter Ujfalusi)
  - ALSA: hda/realtek: Support Lenovo Thinkbook 13x Gen 4 (Stefan Binding)
  - ALSA: hda/realtek: Support Lenovo Thinkbook 16P Gen 5 (Stefan Binding)
  - ALSA: hda: cs35l41: Support Lenovo Thinkbook 13x Gen 4 (Stefan Binding)
  - ALSA: hda: cs35l41: Support Lenovo Thinkbook 16P Gen 5 (Stefan Binding)
  - ALSA: hda/realtek: Remove Framework Laptop 16 from quirks (Dustin L. Howett)
  - ALSA: hda/realtek: Limit mic boost on N14AP7 (Edson Juliano Drosdeck)
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11. (Andy Chi)
  - ALSA: seq: ump: Fix missing System Reset message handling (Takashi Iwai)
  - ALSA: hda: cs35l41: Possible null pointer dereference in cs35l41_hda_unbind() (Simon Trimmer)
  - ALSA: hda: cs35l56: Fix lifecycle of codec pointer (Simon Trimmer)
  - mfd: axp20x: AXP717: Fix missing IRQ status registers range (Andre Przywara)
  - fedora: arm: Enable basic support for S32G-VNP-RDB3 board (Enric Balletbo i Serra)
  - v6.10-rc4-rt7 (Sebastian Andrzej Siewior)
  - i915: Update the _WAIT_FOR_ATOMIC_CHECK() comment. (Sebastian Andrzej Siewior)
  - net: Update the BH series to v8. (Sebastian Andrzej Siewior)
  - tracing: Build event generation tests only as modules (Masami Hiramatsu (Google))
  - Revert "MIPS: pci: lantiq: restore reset gpio polarity" (Thomas Bogendoerfer)
  - mips: bmips: BCM6358: make sure CBR is correctly set (Christian Marangi)
  - MIPS: pci: lantiq: restore reset gpio polarity (Martin Schiller)
  - MIPS: Routerboard 532: Fix vendor retry check code (Ilpo Järvinen)
  - selftests/fchmodat2: fix clang build failure due to -static-libasan (John Hubbard)
  - selftests/openat2: fix clang build failures: -static-libasan, LOCAL_HDRS (John Hubbard)
  - selftests: seccomp: fix format-zero-length warnings (Amer Al Shanawany)
  - selftests: filesystems: fix warn_unused_result build warnings (Amer Al Shanawany)
  - cpumask: limit FORCE_NR_CPUS to just the UP case (Linus Torvalds)
  - efi/arm64: Fix kmemleak false positive in arm64_efi_rt_init() (Waiman Long)
  - efi/x86: Free EFI memory map only when installing a new one. (Ard Biesheuvel)
  - efi/arm: Disable LPAE PAN when calling EFI runtime services (Ard Biesheuvel)
  - ima: Avoid blocking in RCU read-side critical section (GUO Zihua)
  - redhat: make bnx2xx drivers unmaintained in rhel-10 (John Meneghini) [RHEL-36646 RHEL-41231]
  - Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default" (Linus Torvalds)
  - kcov: don't lose track of remote references during softirqs (Aleksandr Nogikh)
  - mm: shmem: fix getting incorrect lruvec when replacing a shmem folio (Baolin Wang)
  - mm/debug_vm_pgtable: drop RANDOM_ORVALUE trick (Peter Xu)
  - mm: fix possible OOB in numa_rebuild_large_mapping() (Kefeng Wang)
  - mm/migrate: fix kernel BUG at mm/compaction.c:2761! (Hugh Dickins)
  - selftests: mm: make map_fixed_noreplace test names stable (Mark Brown)
  - mm/memfd: add documentation for MFD_NOEXEC_SEAL MFD_EXEC (Jeff Xu)
  - mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default (Rafael Aquini)
  - gcov: add support for GCC 14 (Peter Oberparleiter)
  - zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING (Oleg Nesterov)
  - mm: huge_memory: fix misused mapping_large_folio_support() for anon folios (Ran Xiaokai)
  - lib/alloc_tag: fix RCU imbalance in pgalloc_tag_get() (Suren Baghdasaryan)
  - lib/alloc_tag: do not register sysctl interface when CONFIG_SYSCTL=n (Suren Baghdasaryan)
  - MAINTAINERS: remove Lorenzo as vmalloc reviewer (Lorenzo Stoakes)
  - Revert "mm: init_mlocked_on_free_v3" (David Hildenbrand)
  - mm/page_table_check: fix crash on ZONE_DEVICE (Peter Xu)
  - gcc: disable '-Warray-bounds' for gcc-9 (Yury Norov)
  - ocfs2: fix NULL pointer dereference in ocfs2_abort_trigger() (Joseph Qi)
  - ocfs2: fix NULL pointer dereference in ocfs2_journal_dirty() (Joseph Qi)
  - MAINTAINERS: Update entries for Kees Cook (Kees Cook)
  - kunit/overflow: Adjust for __counted_by with DEFINE_RAW_FLEX() (Kees Cook)
  - yama: document function parameter (Christian Göttsche)
  - mm/util: Swap kmemdup_array() arguments (Jean-Philippe Brucker)
  - Drivers: hv: Cosmetic changes for hv.c and balloon.c (Aditya Nagesh)
  - Documentation: hyperv: Improve synic and interrupt handling description (Michael Kelley)
  - Documentation: hyperv: Update spelling and fix typo (Michael Kelley)
  - tools: hv: suppress the invalid warning for packed member alignment (Saurabh Sengar)
  - hv_balloon: Enable hot-add for memblock sizes > 128 MiB (Michael Kelley)
  - hv_balloon: Use kernel macros to simplify open coded sequences (Michael Kelley)
  - redhat/configs: Disable CONFIG_NFP (Kamal Heib) [RHEL-36647]
  - Enable CONFIG_PWRSEQ_{SIMPLIE,EMMC} on aarch64 (Charles Mirabile)
  - Fix SERIAL_SC16IS7XX configs for Fedora (Justin M. Forbes)


author: Patrick Talbert <ptalbert@redhat.com> [6.10.0-0.rc6.13.el10]
changelog:
  - scsi: libsas: Fix exp-attached device scan after probe failure scanned in again after probe failed (Xingui Yang)
  - scsi: scsi_debug: Fix create target debugfs failure (Ming Lei)
  - cxl: documentation: add missing files to cxl driver-api (Yao Xingtao)
  - cxl/region: check interleave capability (Yao Xingtao)
  - cxl/region: Avoid null pointer dereference in region lookup (Alison Schofield)
  - cxl/mem: Fix no cxl_nvd during pmem region auto-assembling (Li Ming)
  - btrfs: fix adding block group to a reclaim list and the unused list during reclaim (Naohiro Aota)
  - syscalls: fix sys_fanotify_mark prototype (Arnd Bergmann)
  - arm64: dts: rockchip: Add sound-dai-cells for RK3368 (Alex Bee)
  - arm64: dts: rockchip: Fix the i2c address of es8316 on Cool Pi 4B (Andy Yan)
  - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (FUKAUMI Naoki)
  - arm64: dts: rockchip: make poweroff(8) work on Radxa ROCK 5A (FUKAUMI Naoki)
  - Revert "arm64: dts: rockchip: remove redundant cd-gpios from rk3588 sdmmc nodes" (FUKAUMI Naoki)
  - ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node (Johan Jonker)
  - arm64: dts: rockchip: Fix the value of `dlg,jack-det-rate` mismatch on rk3399-gru (Hsin-Te Yuan)
  - arm64: dts: rockchip: set correct pwm0 pinctrl on rk3588-tiger (Heiko Stuebner)
  - arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s (Jonas Karlman)
  - arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s (Jonas Karlman)
  - arm64: dts: rockchip: Fix rk3308 codec@ff560000 reset-names (Jonas Karlman)
  - arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B (Dragan Simic)
  - tee: optee: ffa: Fix missing-field-initializers warning (Mark-PK Tsai)
  - drivers/soc/litex: drop obsolete dependency on COMPILE_TEST (Jean Delvare)
  - reset: hisilicon: hi6220: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - reset: gpio: Fix missing gpiolib dependency for GPIO reset controller (Mark Brown)
  - MAINTAINERS: thead: update Maintainer (Jisheng Zhang)
  - riscv: dts: starfive: Set EMMC vqmmc maximum voltage to 3.3V on JH7110 boards (Shengyu Qu)
  - riscv: dts: canaan: Disable I/O devices unless used (Geert Uytterhoeven)
  - riscv: dts: canaan: Clean up serial aliases (Geert Uytterhoeven)
  - mtd: rawnand: rockchip: ensure NVDDR timings are rejected (Val Packett)
  - mtd: rawnand: Bypass a couple of sanity checks during NAND identification (Miquel Raynal)
  - mtd: rawnand: Fix the nand_read_data_op() early check (Miquel Raynal)
  - mtd: rawnand: Ensure ECC configuration is propagated to upper layers (Miquel Raynal)
  - netfs: Fix netfs_page_mkwrite() to flush conflicting data, not wait (David Howells)
  - netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid (David Howells)
  - netfs: Delete some xarray-wangling functions that aren't used (David Howells)
  - netfs: Fix early issue of write op on partial write to folio tail (David Howells)
  - netfs: Fix io_uring based write-through (David Howells)
  - vfs: generate FS_CREATE before FS_OPEN when ->atomic_open used. (NeilBrown)
  - fsnotify: Do not generate events for O_PATH file descriptors (Jan Kara)
  - fs: don't misleadingly warn during thaw operations (Christian Brauner)
  - redhat: Add cgroup kselftests to kernel-selftests-internal (Waiman Long) [RHEL-43556]
  - Revert "redhat/configs: Disable CONFIG_INFINIBAND_HFI1 and CONFIG_INFINIBAND_RDMAVT" (Kamal Heib)
  - Remove new for GITLAB_TOKEN (Don Zickus)
  - Set Fedora configs for 6.10 (Justin M. Forbes)
  - Fedora: minor driver updates (Peter Robinson)
  - v6.10-rc6-rt10 (Sebastian Andrzej Siewior)
  - Linux 6.10-rc6 (Linus Torvalds)
  - ata: ahci: Clean up sysfs file on error (Niklas Cassel)
  - ata: libata-core: Fix double free on error (Niklas Cassel)
  - ata,scsi: libata-core: Do not leak memory for ata_port struct members (Niklas Cassel)
  - ata: libata-core: Fix null pointer dereference on error (Niklas Cassel)
  - ata: libata-core: Add ATA_HORKAGE_NOLPM for all Crucial BX SSD1 models (Niklas Cassel)
  - kbuild: scripts/gdb: bring the "abspath" back (Joel Granados)
  - kbuild: Use $(obj)/%.cc to fix host C++ module builds (Nicolas Schier)
  - kbuild: rpm-pkg: fix build error with CONFIG_MODULES=n (Masahiro Yamada)
  - kbuild: Fix build target deb-pkg: ln: failed to create hard link (Thayne Harbaugh)
  - kbuild: doc: Update default INSTALL_MOD_DIR from extra to updates (Mark-PK Tsai)
  - kbuild: Install dtb files as 0644 in Makefile.dtbinst (Dragan Simic)
  - x86-32: fix cmpxchg8b_emu build error with clang (Linus Torvalds)
  - counter: ti-eqep: enable clock at probe (David Lechner)
  - iio: chemical: bme680: Fix sensor data read operation (Vasileios Amoiridis)
  - iio: chemical: bme680: Fix overflows in compensate() functions (Vasileios Amoiridis)
  - iio: chemical: bme680: Fix calibration data variable (Vasileios Amoiridis)
  - iio: chemical: bme680: Fix pressure value output (Vasileios Amoiridis)
  - iio: humidity: hdc3020: fix hysteresis representation (Dimitri Fedrau)
  - iio: dac: fix ad9739a random config compile error (Ke Sun)
  - iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF (Alexander Sverdlin)
  - iio: adc: ad7266: Fix variable checking bug (Fernando Yang)
  - iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask (Sean Anderson)
  - staging: vchiq_debugfs: Fix build if CONFIG_DEBUG_FS is not set (Bernhard Rosenkränzer)
  - staging: vc04_services: vchiq_arm: Fix initialisation check (Kieran Bingham)
  - Revert "printk: Save console options for add_preferred_console_match()" (Greg Kroah-Hartman)
  - Revert "printk: Don't try to parse DEVNAME:0.0 console options" (Greg Kroah-Hartman)
  - Revert "printk: Flag register_console() if console is set on command line" (Greg Kroah-Hartman)
  - Revert "serial: core: Add support for DEVNAME:0.0 style naming for kernel console" (Greg Kroah-Hartman)
  - Revert "serial: core: Handle serial console options" (Greg Kroah-Hartman)
  - Revert "serial: 8250: Add preferred console in serial8250_isa_init_ports()" (Greg Kroah-Hartman)
  - Revert "Documentation: kernel-parameters: Add DEVNAME:0.0 format for serial ports" (Greg Kroah-Hartman)
  - Revert "serial: 8250: Fix add preferred console for serial8250_isa_init_ports()" (Greg Kroah-Hartman)
  - Revert "serial: core: Fix ifdef for serial base console functions" (Greg Kroah-Hartman)
  - serial: bcm63xx-uart: fix tx after conversion to uart_port_tx_limited() (Jonas Gorski)
  - serial: core: introduce uart_port_tx_limited_flags() (Jonas Gorski)
  - Revert "serial: core: only stop transmit when HW fifo is empty" (Doug Brown)
  - serial: imx: set receiver level before starting uart (Stefan Eichenberger)
  - tty: mcf: MCF54418 has 10 UARTS (Jean-Michel Hautbois)
  - serial: 8250_omap: Implementation of Errata i2310 (Udit Kumar)
  - tty: serial: 8250: Fix port count mismatch with the device (Crescent Hsieh)
  - usb: dwc3: core: Workaround for CSR read timeout (Jos Wang)
  - Revert "usb: gadget: u_ether: Replace netif_stop_queue with netif_device_detach" (Ferry Toth)
  - Revert "usb: gadget: u_ether: Re-attach netif device to mirror detachment" (Ferry Toth)
  - usb: gadget: aspeed_udc: fix device address configuration (Jeremy Kerr)
  - usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock (Meng Li)
  - usb: typec: ucsi: glink: fix child node release in probe function (Javier Carrasco)
  - usb: musb: da8xx: fix a resource leak in probe() (Dan Carpenter)
  - usb: typec: ucsi_acpi: Add LG Gram quirk (Diogo Ivo)
  - usb: ucsi: stm32: fix command completion handling (Fabrice Gasnier)
  - usb: atm: cxacru: fix endpoint checking in cxacru_bind() (Nikita Zhandarovich)
  - usb: gadget: printer: fix races against disable (Oliver Neukum)
  - usb: gadget: printer: SS+ support (Oliver Neukum)
  - cpu: Fix broken cmdline "nosmp" and "maxcpus=0" (Huacai Chen)
  - cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked() (Yuntao Wang)
  - PCI/MSI: Fix UAF in msi_capability_init (Mostafa Saleh)
  - irqchip/loongson-liointc: Set different ISRs for different cores (Huacai Chen)
  - irqchip/loongson-eiointc: Use early_cpu_to_node() instead of cpu_to_node() (Huacai Chen)
  - hrtimer: Prevent queuing of hrtimer without a function callback (Phil Chang)
  - watchdog: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - watchdog: lenovo_se10_wdt: add HAS_IOPORT dependency (Arnd Bergmann)
  - redhat/configs: Remove obsolete x86 CPU mitigations config files (Waiman Long)
  - redhat/configs: increase CONFIG_DEFAULT_MMAP_MIN_ADDR from 32K to 64K for aarch64 (Brian Masney)
  - redhat/configs: Re-enable CONFIG_KEXEC for Fedora (Philipp Rudo)
  - media: ipu-bridge: Add HIDs from out of tree IPU6 driver ipu-bridge copy (Hans de Goede)
  - media: ipu-bridge: Sort ipu_supported_sensors[] array by ACPI HID (Hans de Goede)
  - disable LR_WPAN for RHEL10 (Chris von Recklinghausen) [RHEL-40251]
  - SUNRPC: Fix backchannel reply, again (Chuck Lever)
  - xfs: honor init_xattrs in xfs_init_new_inode for !ATTR fs (Darrick J. Wong)
  - xfs: fix direction in XFS_IOC_EXCHANGE_RANGE (Darrick J. Wong)
  - xfs: allow unlinked symlinks and dirs with zero size (Darrick J. Wong)
  - xfs: restrict when we try to align cow fork delalloc to cowextsz hints (Darrick J. Wong)
  - xfs: fix freeing speculative preallocations for preallocated files (Christoph Hellwig)
  - i2c: testunit: discard write requests while old command is running (Wolfram Sang)
  - i2c: testunit: don't erase registers after STOP (Wolfram Sang)
  - i2c: viai2c: turn common code into a proper module (Arnd Bergmann)
  - platform/x86: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - platform/x86/intel: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - platform/x86/siemens: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - platform/x86: lg-laptop: Use ACPI device handle when evaluating WMAB/WMBB (Armin Wolf)
  - platform/x86: lg-laptop: Change ACPI device id (Armin Wolf)
  - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (Armin Wolf)
  - platform/x86: wireless-hotkey: Add support for LG Airplane Button (Armin Wolf)
  - platform/mellanox: nvsw-sn2201: Add check for platform_device_add_resources (Chen Ni)
  - mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro() (Adrian Hunter)
  - mmc: sdhci: Do not invert write-protect twice (Adrian Hunter)
  - Revert "mmc: moxart-mmc: Use sg_miter for PIO" (Linus Walleij)
  - mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard (Kamal Dasu)
  - mmc: sdhci-pci-o2micro: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos (Ilpo Järvinen)
  - riscv: stacktrace: convert arch_stack_walk() to noinstr (Andy Chiu)
  - riscv: patch: Flush the icache right after patching to avoid illegal insns (Alexandre Ghiti)
  - RISC-V: fix vector insn load/store width mask (Jesse Taube)
  - tty: mxser: Remove __counted_by from mxser_board.ports[] (Nathan Chancellor)
  - randomize_kstack: Remove non-functional per-arch entropy filtering (Kees Cook)
  - string: kunit: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - x86: stop playing stack games in profile_pc() (Linus Torvalds)
  - Revert "nfsd: fix oops when reading pool_stats before server is started" (NeilBrown)
  - nfsd: initialise nfsd_info.mutex early. (NeilBrown)
  - bcachefs: Fix kmalloc bug in __snapshot_t_mut (Pei Li)
  - bcachefs: Discard, invalidate workers are now per device (Kent Overstreet)
  - bcachefs: Fix shift-out-of-bounds in bch2_blacklist_entries_gc (Pei Li)
  - bcachefs: slab-use-after-free Read in bch2_sb_errors_from_cpu (Pei Li)
  - bcachefs: Add missing bch2_journal_do_writes() call (Kent Overstreet)
  - bcachefs: Fix null ptr deref in journal_pins_to_text() (Kent Overstreet)
  - bcachefs: Add missing recalc_capacity() call (Kent Overstreet)
  - bcachefs: Fix btree_trans list ordering (Kent Overstreet)
  - bcachefs: Fix race between trans_put() and btree_transactions_read() (Kent Overstreet)
  - closures: closure_get_not_zero(), closure_return_sync() (Kent Overstreet)
  - bcachefs: Make btree_deadlock_to_text() clearer (Kent Overstreet)
  - bcachefs: fix seqmutex_relock() (Kent Overstreet)
  - bcachefs: Fix freeing of error pointers (Kent Overstreet)
  - nvmet-fc: Remove __counted_by from nvmet_fc_tgt_queue.fod[] (Nathan Chancellor)
  - nvmet: make 'tsas' attribute idempotent for RDMA (Hannes Reinecke)
  - nvme: fixup comment for nvme RDMA Provider Type (Hannes Reinecke)
  - nvme-apple: add missing MODULE_DESCRIPTION() (Jeff Johnson)
  - nvmet: do not return 'reserved' for empty TSAS values (Hannes Reinecke)
  - nvme: fix NVME_NS_DEAC may incorrectly identifying the disk as EXT_LBA. (Boyang Yu)
  - MAINTAINERS: Update IOMMU tree location (Joerg Roedel)
  - iommu/amd: Fix GT feature enablement again (Vasant Hegde)
  - iommu/vt-d: Fix missed device TLB cache tag (Lu Baolu)
  - iommu/amd: Invalidate cache before removing device from domain list (Vasant Hegde)
  - gpiolib: cdev: Ignore reconfiguration without direction (Kent Gibson)
  - gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1) (Kent Gibson)
  - gpio: graniterapids: Add missing raw_spinlock_init() (Aapo Vienamo)
  - gpio: davinci: Validate the obtained number of IRQs (Aleksandr Mishin)
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (Ian Ray)
  - arm64: Clear the initial ID map correctly before remapping (Zenghui Yu)
  - arm64: mm: Permit PTE SW bits to change in live mappings (Ryan Roberts)
  - tools/power turbostat: Add local build_bug.h header for snapshot target (Patryk Wlazlyn)
  - tools/power turbostat: Fix unc freq columns not showing with '-q' or '-l' (Adam Hawley)
  - tools/power turbostat: option '-n' is ambiguous (David Arcari)
  - Turn on USB_SERIAL_F81232 for Fedora (Justin M. Forbes)
  - crypto: qat - fix linking errors when PCI_IOV is disabled (Xin Zeng)
  - drm/drm_file: Fix pid refcounting race (Jann Horn)
  - drm/i915/gt: Fix potential UAF by revoke of fence registers (Janusz Krzysztofik)
  - drm/amdgpu: Don't show false warning for reg list (Lijo Lazar)
  - drm/amdgpu: avoid using null object of framebuffer (Julia Zhang)
  - drm/amd/display: Send DP_TOTAL_LTTPR_CNT during detection if LTTPR is present (Michael Strauss)
  - drm/amdgpu: Fix pci state save during mode-1 reset (Lijo Lazar)
  - drm/amdgpu/atomfirmware: fix parsing of vram_info (Alex Deucher)
  - drm/amd/swsmu: add MALL init support workaround for smu_v14_0_1 (Li Ma)
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (Ma Ke)
  - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (Ma Ke)
  - drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA (Liu Ying)
  - drm/fbdev-dma: Only set smem_start is enable per module option (Thomas Zimmermann)
  - cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing (Rafael J. Wysocki)
  - thermal: gov_step_wise: Go straight to instance->lower when mitigation is over (Rafael J. Wysocki)
  - io_uring: signal SQPOLL task_work with TWA_SIGNAL_NO_IPI (Jens Axboe)
  - io_uring: remove dead struct io_submit_state member (Jens Axboe)
  - s390/boot: Do not adjust GOT entries for undef weak sym (Jens Remus)
  - s390/sclp: Fix sclp_init() cleanup on failure (Heiko Carstens)
  - s390/virtio_ccw: Fix config change notifications (Halil Pasic)
  - s390/pci: Add missing virt_to_phys() for directed DIBV (Niklas Schnelle)
  - kallsyms: rework symbol lookup return codes (Arnd Bergmann)
  - linux/syscalls.h: add missing __user annotations (Arnd Bergmann)
  - syscalls: mmap(): use unsigned offset type consistently (Arnd Bergmann)
  - s390: remove native mmap2() syscall (Arnd Bergmann)
  - hexagon: fix fadvise64_64 calling conventions (Arnd Bergmann)
  - csky, hexagon: fix broken sys_sync_file_range (Arnd Bergmann)
  - sh: rework sync_file_range ABI (Arnd Bergmann)
  - powerpc: restore some missing spu syscalls (Arnd Bergmann)
  - parisc: use generic sys_fanotify_mark implementation (Arnd Bergmann)
  - parisc: use correct compat recv/recvfrom syscalls (Arnd Bergmann)
  - sparc: fix compat recv/recvfrom syscalls (Arnd Bergmann)
  - sparc: fix old compat_sys_select() (Arnd Bergmann)
  - syscalls: fix compat_sys_io_pgetevents_time64 usage (Arnd Bergmann)
  - ftruncate: pass a signed offset (Arnd Bergmann)
  - btrfs: qgroup: fix quota root leak after quota disable failure (Filipe Manana)
  - btrfs: scrub: handle RST lookup error correctly (Qu Wenruo)
  - btrfs: zoned: fix initial free space detection (Naohiro Aota)
  - btrfs: use NOFS context when getting inodes during logging and log replay (Filipe Manana)
  - netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (Pablo Neira Ayuso)
  - netfilter: fix undefined reference to 'netfilter_lwtunnel_*' when CONFIG_SYSCTL=n (Jianguo Wu)
  - net: mana: Fix possible double free in error handling path (Ma Ke)
  - selftest: af_unix: Check SIOCATMARK after every send()/recv() in msg_oob.c. (Kuniyuki Iwashima)
  - af_unix: Fix wrong ioctl(SIOCATMARK) when consumed OOB skb is at the head. (Kuniyuki Iwashima)
  - selftest: af_unix: Check EPOLLPRI after every send()/recv() in msg_oob.c (Kuniyuki Iwashima)
  - selftest: af_unix: Check SIGURG after every send() in msg_oob.c (Kuniyuki Iwashima)
  - selftest: af_unix: Add SO_OOBINLINE test cases in msg_oob.c (Kuniyuki Iwashima)
  - af_unix: Don't stop recv() at consumed ex-OOB skb. (Kuniyuki Iwashima)
  - selftest: af_unix: Add non-TCP-compliant test cases in msg_oob.c. (Kuniyuki Iwashima)
  - af_unix: Don't stop recv(MSG_DONTWAIT) if consumed OOB skb is at the head. (Kuniyuki Iwashima)
  - af_unix: Stop recv(MSG_PEEK) at consumed OOB skb. (Kuniyuki Iwashima)
  - selftest: af_unix: Add msg_oob.c. (Kuniyuki Iwashima)
  - selftest: af_unix: Remove test_unix_oob.c. (Kuniyuki Iwashima)
  - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (Yunseong Kim)
  - net: usb: qmi_wwan: add Telit FN912 compositions (Daniele Palmas)
  - tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO (Neal Cardwell)
  - ionic: use dev_consume_skb_any outside of napi (Shannon Nelson)
  - net: dsa: microchip: fix wrong register write when masking interrupt (Tristram Ha)
  - Fix race for duplicate reqsk on identical SYN (luoxuanqiang)
  - ibmvnic: Add tx check to prevent skb leak (Nick Child)
  - xdp: Remove WARN() from __xdp_reg_mem_model() (Daniil Dulov)
  - selftests/bpf: Add tests for may_goto with negative offset. (Alexei Starovoitov)
  - bpf: Fix may_goto with negative offset. (Alexei Starovoitov)
  - selftests/bpf: Add more ring buffer test coverage (Daniel Borkmann)
  - bpf: Fix overrunning reservations in ringbuf (Daniel Borkmann)
  - selftests/bpf: Tests with may_goto and jumps to the 1st insn (Alexei Starovoitov)
  - bpf: Fix the corner case with may_goto and jump to the 1st insn. (Alexei Starovoitov)
  - bpf: Update BPF LSM maintainer list (Matt Bobrowski)
  - bpf: Fix remap of arena. (Alexei Starovoitov)
  - selftests/bpf: Add a few tests to cover (Yonghong Song)
  - bpf: Add missed var_off setting in coerce_subreg_to_size_sx() (Yonghong Song)
  - bpf: Add missed var_off setting in set_sext32_default_val() (Yonghong Song)
  - net: usb: ax88179_178a: improve link status logs (Jose Ignacio Tornos Martinez)
  - octeontx2-pf: Fix coverity and klockwork issues in octeon PF driver (Ratheesh Kannoth)
  - ice: Rebuild TC queues on VSI queue reconfiguration (Jan Sokolowski)
  - dt-bindings: net: fman: remove ptp-timer from required list (Frank Li)
  - net: dsa: microchip: monitor potential faults in half-duplex mode (Enguerrand de Ribaucourt)
  - net: dsa: microchip: use collision based back pressure mode (Enguerrand de Ribaucourt)
  - net: phy: micrel: add Microchip KSZ 9477 to the device table (Enguerrand de Ribaucourt)
  - netlink: specs: Fix pse-set command attributes (Kory Maincent)
  - ibmvnic: Free any outstanding tx skbs during scrq reset (Nick Child)
  - Revert "batman-adv: prefer kfree_rcu() over call_rcu() with free-only callbacks" (Linus Lüssing)
  - batman-adv: Don't accept TT entries for out-of-spec VIDs (Sven Eckelmann)
  - can: mcp251xfd: fix infinite loop when xmit fails (Vitor Soares)
  - can: kvaser_usb: fix return value for hif_usb_send_regout (Chen Ni)
  - net: can: j1939: recover socket queue on CAN bus error during BAM transmission (Oleksij Rempel)
  - net: can: j1939: Initialize unused data in j1939_send_one() (Shigeru Yoshida)
  - net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new (Oleksij Rempel)
  - vxlan: Pull inner IP header in vxlan_xmit_one(). (Guillaume Nault)
  - mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems (Ido Schimmel)
  - mlxsw: pci: Fix driver initialization with Spectrum-4 (Ido Schimmel)
  - selftest: af_unix: Add Kconfig file. (Kuniyuki Iwashima)
  - net: remove drivers@pensando.io from MAINTAINERS (Shannon Nelson)
  - net: add softirq safety to netdev_rename_lock (Eric Dumazet)
  - ionic: fix kernel panic due to multi-buffer handling (Taehee Yoo)
  - net: pse-pd: Kconfig: Fix missing firmware loader config select (Kory Maincent)
  - bonding: fix incorrect software timestamping report (Hangbin Liu)
  - net: mvpp2: fill-in dev_port attribute (Aryan Srivastava)
  - openvswitch: get related ct labels from its master if it is not confirmed (Xin Long)
  - net: dsa: microchip: fix initial port flush problem (Tristram Ha)
  - ASoC: rt5645: fix issue of random interrupt from push-button (Jack Yu)
  - ASoC: amd: yc: Fix non-functional mic on ASUS M5602RA (Vyacheslav Frantsishko)
  - ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link (Chen-Yu Tsai)
  - ASoC: fsl-asoc-card: set priv->pdev before using it (Elinor Montmasson)
  - ASoC: amd: acp: move chip->flag variable assignment (Vijendar Mukunda)
  - ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe() (Vijendar Mukunda)
  - ASoC: amd: acp: add a null check for chip_pdev structure (Vijendar Mukunda)
  - ASoC: Intel: soc-acpi: mtl: fix speaker no sound on Dell SKU 0C64 (Shuming Fan)
  - ASoC: q6apm-lpass-dai: close graph on prepare errors (Srinivas Kandagatla)
  - ASoC: cs35l56: Disconnect ASP1 TX sources when ASP1 DAI is hooked up (Richard Fitzgerald)
  - ASoC: topology: Fix route memory corruption (Amadeusz Sławiński)
  - ASoC: rt722-sdca-sdw: add debounce time for type detection (Jack Yu)
  - ASoC: SOF: sof-audio: Skip unprepare for in-use widgets on error rollback (Peter Ujfalusi)
  - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (Jai Luthra)
  - ALSA: dmaengine: Synchronize dma channel after drop() (Jai Luthra)
  - ASoC: ti: omap-hdmi: Fix too long driver name (Primoz Fiser)
  - ASoC: topology: Clean up route loading (Amadeusz Sławiński)
  - ASoC: topology: Do not assign fields that are already set (Amadeusz Sławiński)
  - ASoC: Intel: avs: Fix route override (Amadeusz Sławiński)
  - ASoC: topology: Fix references to freed memory (Amadeusz Sławiński)
  - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (Thomas GENTY)
  - ASoC: atmel: atmel-classd: Re-add dai_link->platform to fix card init (Andrei Simion)
  - ASoC: mediatek: mt8183-da7219-max98357: Fix kcontrol name collision (Hsin-Te Yuan)
  - ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk (Alibek Omarov)
  - ASoC: SOF: Intel: hda-dai: remove skip_tlv label (Bard Liao)
  - ASoC: SOF: Intel: hda-dai: skip tlv for dspless mode (Bard Liao)
  - ASoC: codecs: ES8326: Solve headphone detection issue (Zhang Yi)
  - ASoC: cs42l43: Increase default type detect time and button delay (Maciej Strozek)
  - ASoC: qcom: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - ASoC: rt722-sdca-sdw: add silence detection register as volatile (Jack Yu)
  - ASoC: fsl: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - ASoC: mxs: add missing MODULE_DESCRIPTION() macro (Jeff Johnson)
  - MAINTAINERS: copy linux-arm-msm for sound/qcom changes (Dmitry Baryshkov)
  - ALSA: seq: Fix missing MSB in MIDI2 SPP conversion (Takashi Iwai)
  - ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665 G11. (Dirk Su)
  - ALSA: hda/realtek: Fix conflicting quirk for PCI SSID 17aa:3820 (Takashi Iwai)
  - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (Shengjiu Wang)
  - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (Aivaz Latypov)
  - ALSA: PCM: Allow resume only for suspended streams (Takashi Iwai)
  - ALSA: seq: Fix missing channel at encoding RPN/NRPN MIDI2 messages (Takashi Iwai)
  - mm/memory: don't require head page for do_set_pmd() (Andrew Bresticker)
  - mm/page_alloc: Separate THP PCP into movable and non-movable categories (yangge)
  - nfs: drop the incorrect assertion in nfs_swap_rw() (Christoph Hellwig)
  - mm/migrate: make migrate_pages_batch() stats consistent (Zi Yan)
  - MAINTAINERS: TPM DEVICE DRIVER: update the W-tag (Jarkko Sakkinen)
  - selftests/mm:fix test_prctl_fork_exec return failure (aigourensheng)
  - mm: convert page type macros to enum (Stephen Brennan)
  - ocfs2: fix DIO failure due to insufficient transaction credits (Jan Kara)
  - kasan: fix bad call to unpoison_slab_object (Andrey Konovalov)
  - mm: handle profiling for fake memory allocations during compaction (Suren Baghdasaryan)
  - mm/slab: fix 'variable obj_exts set but not used' warning (Suren Baghdasaryan)
  - /proc/pid/smaps: add mseal info for vma (Jeff Xu)
  - mm: fix incorrect vbq reference in purge_fragmented_block (Zhaoyang Huang)
  - redhat/scripts/filtermods.py: show all parent/child kmods in report (Jan Stancek)
  - redhat/kernel.spec: capture filtermods.py return code (Jan Stancek)
  - redhat/kernel.spec: fix run of mod-denylist (Jan Stancek)
  - gitlab-ci: remove unused RHMAINTAINERS variable (Michael Hofmann)
  - gitlab-ci: use environments for jobs that need access to push/gitlab secrets (Michael Hofmann)
  - gitlab-ci: default to os-build for all maintenance jobs (Michael Hofmann)
  - gitlab-ci: use the common git repo setup cki-gating as well (Michael Hofmann)
  - gitlab-ci: help maintenance jobs to cope with missing private key (Michael Hofmann)
  - gitlab-ci: use a common git repo setup for all maintenance jobs (Michael Hofmann)
  - gitlab-ci: move repo setup script into script template holder (Michael Hofmann)
  - gitlab-ci: move maintenance job DIST variable into common template (Michael Hofmann)
  - gitlab-ci: move maintenance job rules into common template (Michael Hofmann)
  - gitlab-ci: move maintenance job retry field into common template (Michael Hofmann)
  - gitlab-ci: provide common non-secret schedule trigger variables (Michael Hofmann)
  - gitlab-ci: rename .scheduled_setup to .git_setup (Michael Hofmann)
  - gitlab-ci: move script snippets into separate template (Michael Hofmann)
  - gitlab-ci: rename maintenance jobs (Michael Hofmann)
  - gitlab-ci: introduce job template for maintenance jobs (Michael Hofmann)
  - v6.10-rc5-rt9 (Sebastian Andrzej Siewior)
  - perf: Update the perf series (Sebastian Andrzej Siewior)
  - net: Update the BH series to v9. (Sebastian Andrzej Siewior)
  - zram: Update the series. (Sebastian Andrzej Siewior)
  - prinkt/nbcon: Add a scheduling point to nbcon_kthread_func(). (Sebastian Andrzej Siewior)
  - v6.10-rc5-rt8 (Sebastian Andrzej Siewior)
  - workqueue: Increase worker desc's length to 32 (Wenchao Hao)
  - workqueue: Refactor worker ID formatting and make wq_worker_comm() use full ID string (Tejun Heo)
  - Input: ads7846 - use spi_device_id table (Alexander Stein)
  - Input: xpad - add support for ASUS ROG RAIKIRI PRO (Luke D. Jones)
  - Input: ili210x - fix ili251x_read_touch_data() return value (John Keeping)
  - Input: i8042 - add Ayaneo Kun to i8042 quirk table (Tobias Jakobi)
  - Input: elantech - fix touchpad state on resume for Lenovo N24 (Jonathan Denose)
  - pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set (Huang-Huang Bao)
  - pinctrl: rockchip: use dedicated pinctrl type for RK3328 (Huang-Huang Bao)
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins (Huang-Huang Bao)
  - pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins (Huang-Huang Bao)
  - pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER (Hagar Hemdan)
  - pinctrl: bcm2835: Fix permissions of persist_gpio_outputs (Stefan Wahren)
  - pinctrl: tps6594: add missing support for LP8764 PMIC (Thomas Richard)
  - dt-bindings: pinctrl: qcom,pmic-gpio: drop pm8008 (Johan Hovold)
  - pinctrl: qcom: spmi-gpio: drop broken pm8008 support (Johan Hovold)
  - pinctrl: renesas: rzg2l: Use spin_{lock,unlock}_irq{save,restore} (Claudiu Beznea)
  - Turn on KASAN_HW_TAGS for Fedora aarch64 debug kernels (Justin M. Forbes)
  - Linux v6.10.0-0.rc6


author: Patrick Talbert <ptalbert@redhat.com> [6.10.0-0.rc7.14.el10]
changelog:
  - ksmbd: discard write access to the directory open (Hobin Woo)
  - ksmbd: return FILE_DEVICE_DISK instead of super magic (Namjae Jeon)
  - selftests/vDSO: remove duplicate compiler invocations from Makefile (John Hubbard)
  - selftests/vDSO: remove partially duplicated "all:" target in Makefile (John Hubbard)
  - selftests/vDSO: fix clang build errors and warnings (John Hubbard)
  - selftest/timerns: fix clang build failures for abs() calls (John Hubbard)
  - s390/mm: Add NULL pointer check to crst_table_free() base_crst_free() (Heiko Carstens)
  - not upstream: drop openssl ENGINE API usage (Jan Stancek)
  - perf dsos: When adding a dso into sorted dsos maintain the sort order (Ian Rogers)
  - perf comm str: Avoid sort during insert (Ian Rogers)
  - Also remove the zfcpdump BASE_SMALL config (Justin M. Forbes)
  - Linux 6.10-rc7 (Linus Torvalds)
  - clk: qcom: gcc-ipq9574: Add BRANCH_HALT_VOTED flag (Md Sadre Alam)
  - clk: qcom: apss-ipq-pll: remove 'config_ctl_hi_val' from Stromer pll configs (Gabor Juhos)
  - clk: qcom: clk-alpha-pll: set ALPHA_EN bit for Stromer Plus PLLs (Gabor Juhos)
  - clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents (Luca Weiss)
  - clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg (Pin-yen Lin)
  - clk: sunxi-ng: common: Don't call hw_to_ccu_common on hw without common (Frank Oltmanns)
  - selftests/powerpc: Fix build with USERCFLAGS set (Michael Ellerman)
  - powerpc/pseries: Fix scv instruction crash with kexec (Nicholas Piggin)
  - powerpc/eeh: avoid possible crash when edev->pdev changes (Ganesh Goudar)
  - powerpc/pseries: Whitelist dtl slub object for copying to userspace (Anjali K)
  - powerpc/64s: Fix unnecessary copy to 0 when kernel is booted at address 0 (Jinglin Wen)
  - cifs: Fix read-performance regression by dropping readahead expansion (David Howells)
  - i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr (Piotr Wojtaszczyk)
  - v6.10-rc6-rt11 (Sebastian Andrzej Siewior)
  - perf: Update the perf series (Sebastian Andrzej Siewior)
  - seg6: Ensure that seg6_bpf_srh_states can only be accessed from input_action_end_bpf() (Sebastian Andrzej Siewior)
  - tun: Assign missing bpf_net_context. (Sebastian Andrzej Siewior)
  - net: Move flush list retrieval to where it is used. (Sebastian Andrzej Siewior)
  - net: Optimize xdp_do_flush() with bpf_net_context infos. (Sebastian Andrzej Siewior)
  - net: Remove task_struct::bpf_net_context init on fork. (Sebastian Andrzej Siewior)
  - ima: fix wrong zero-assignment during securityfs dentry remove (Enrico Bravi)
  - CREDITS: Add Synopsys DesignWare eDMA driver for Gustavo Pimentel (Bjorn Helgaas)
  - MAINTAINERS: Orphan Synopsys DesignWare xData traffic generator (Bjorn Helgaas)
  - riscv: kexec: Avoid deadlock in kexec crash path (Song Shuai)
  - riscv: stacktrace: fix usage of ftrace_graph_ret_addr() (Puranjay Mohan)
  - riscv: selftests: Fix vsetivli args for clang (Charlie Jenkins)
  - perf: RISC-V: Check standard event availability (Samuel Holland)
  - drivers/perf: riscv: Reset the counter to hpmevent mapping while starting cpus (Samuel Holland)
  - drivers/perf: riscv: Do not update the event data if uptodate (Atish Patra)
  - documentation: Fix riscv cmodx example (Charlie Jenkins)
  - drm/amdgpu/atomfirmware: silence UBSAN warning (Alex Deucher)
  - drm/radeon: check bo_va->bo is non-NULL before using it (Pierre-Eric Pelloux-Prayer)
  - drm/amd/display: Fix array-index-out-of-bounds in dml2/FCLKChangeSupport (Roman Li)
  - drm/amd/display: Update efficiency bandwidth for dcn351 (Fangzhi Zuo)
  - drm/amd/display: Fix refresh rate range for some panel (Tom Chung)
  - drm/amd/display: Account for cursor prefetch BW in DML1 mode support (Alvin Lee)
  - drm/amd/display: Add refresh rate range check (Tom Chung)
  - drm/amd/display: Reset freesync config before update new state (Tom Chung)
  - drm/ttm: Always take the bo delayed cleanup path for imported bos (Thomas Hellström)
  - drm/fbdev-generic: Fix framebuffer on big endian devices (Thomas Huth)
  - drm/panthor: Fix sync-only jobs (Boris Brezillon)
  - drm/panthor: Don't check the array stride on empty uobj arrays (Boris Brezillon)
  - drm: panel-orientation-quirks: Add labels for both Valve Steam Deck revisions (Matthew Schwartz)
  - drm: panel-orientation-quirks: Add quirk for Valve Galileo (John Schoenick)
  - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (Ma Ke)
  - firmware: sysfb: Fix reference count of sysfb parent device (Thomas Zimmermann)
  - drm/xe/mcr: Avoid clobbering DSS steering (Matt Roper)
  - drm/xe: fix error handling in xe_migrate_update_pgtables (Matthew Auld)
  - drm/i915/display: For MTL+ platforms skip mg dp programming (Imre Deak)
  - gpiolib: of: add polarity quirk for TSC2005 (Dmitry Torokhov)
  - gpio: mmio: do not calculate bgpio_bits via "ngpios" (Shiji Yang)
  - gpiolib: of: fix lookup quirk for MIPS Lantiq (Dmitry Torokhov)
  - tpm: Address !chip->auth in tpm_buf_append_hmac_session*() (Jarkko Sakkinen)
  - tpm: Address !chip->auth in tpm_buf_append_name() (Jarkko Sakkinen)
  - tpm: Address !chip->auth in tpm2_*_auth_session() (Jarkko Sakkinen)
  - KVM: s390: fix LPSWEY handling (Christian Borntraeger)
  - btrfs: fix folio refcount in __alloc_dummy_extent_buffer() (Boris Burkov)
  - btrfs: fix folio refcount in btrfs_do_encoded_write() (Boris Burkov)
  - btrfs: fix uninitialized return value in the ref-verify tool (Filipe Manana)
  - btrfs: always do the basic checks for btrfs_qgroup_inherit structure (Qu Wenruo)
  - btrfs: zoned: fix calc_available_free_space() for zoned mode (Naohiro Aota)
  - bnxt_en: Fix the resource check condition for RSS contexts (Pavan Chebbi)
  - mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file (Aleksandr Mishin)
  - wifi: iwlwifi: mvm: check vif for NULL/ERR_PTR before dereference (Miri Korenblit)
  - wifi: iwlwifi: mvm: avoid link lookup in statistics (Johannes Berg)
  - wifi: iwlwifi: mvm: don't wake up rx_sync_waitq upon RFKILL (Emmanuel Grumbach)
  - wifi: iwlwifi: properly set WIPHY_FLAG_SUPPORTS_EXT_KEK_KCK (Daniel Gabay)
  - wifi: wilc1000: fix ies_len type in connect path (Jozef Hopko)
  - wifi: mac80211: fix BSS_CHANGED_UNSOL_BCAST_PROBE_RESP (Johannes Berg)
  - netfilter: nf_tables: unconditionally flush pending work before notifier (Florian Westphal)
  - inet_diag: Initialize pad field in struct inet_diag_req_v2 (Shigeru Yoshida)
  - tcp: Don't flag tcp_sk(sk)->rx_opt.saw_unknown for TCP AO. (Kuniyuki Iwashima)
  - selftests: make order checking verbose in msg_zerocopy selftest (Zijian Zhang)
  - selftests: fix OOM in msg_zerocopy selftest (Zijian Zhang)
  - ice: use proper macro for testing bit (Petr Oros)
  - ice: Reject pin requests with unsupported flags (Jacob Keller)
  - ice: Don't process extts if PTP is disabled (Jacob Keller)
  - ice: Fix improper extts handling (Milena Olech)
  - selftest: af_unix: Add test case for backtrack after finalising SCC. (Kuniyuki Iwashima)
  - af_unix: Fix uninit-value in __unix_walk_scc() (Shigeru Yoshida)
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (Sam Sun)
  - net: rswitch: Avoid use-after-free in rswitch_poll() (Radu Rendec)
  - net: stmmac: enable HW-accelerated VLAN stripping for gmac4 only (Furong Xu)
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (Dave Jiang)
  - net: phy: aquantia: add missing include guards (Bartosz Golaszewski)
  - net: txgbe: free isb resources at the right time (Jiawen Wu)
  - net: txgbe: add extra handle for MSI/INTx into thread irq handle (Jiawen Wu)
  - net: txgbe: remove separate irq request for MSI and INTx (Jiawen Wu)
  - net: txgbe: initialize num_q_vectors for MSI/INTx interrupts (Jiawen Wu)
  - net: stmmac: dwmac-qcom-ethqos: fix error array size (Yijie Yang)
  - net: allow skb_datagram_iter to be called from any context (Sagi Grimberg)
  - e1000e: Fix S0ix residency on corporate systems (Dima Ruinskiy)
  - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (Jimmy Assarsson)
  - Bluetooth: L2CAP: Fix deadlock (Luiz Augusto von Dentz)
  - bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX (Pavel Skripkin)
  - Bluetooth: ISO: Check socket flag instead of hcon (Iulia Tanasescu)
  - bluetooth/l2cap: sync sock recv cb and release (Edward Adam Davis)
  - Bluetooth: Ignore too large handle values in BIG (Edward Adam Davis)
  - Bluetooth: btnxpuart: Enable Power Save feature on startup (Neeraj Sanjay Kale)
  - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (Tetsuo Handa)
  - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (Zijun Hu)
  - Bluetooth: hci_event: Fix setting of unicast qos interval (Luiz Augusto von Dentz)
  - Bluetooth: btintel_pcie: Fix REVERSE_INULL issue reported by coverity (Vijay Satija)
  - Bluetooth: hci_bcm4377: Fix msgid release (Hector Martin)
  - Bluetooth: Add quirk to ignore reserved PHY bits in LE Extended Adv Report (Sven Peter)
  - tcp_metrics: validate source addr length (Jakub Kicinski)
  - bnx2x: Fix multiple UBSAN array-index-out-of-bounds (Ghadi Elie Rahme)
  - net: mac802154: Fix racy device stats updates by DEV_STATS_INC() and DEV_STATS_ADD() (Yunshui Jiang)
  - mac802154: fix time calculation in ieee802154_configure_durations() (Dmitry Antipov)
  - net/mlx5e: Approximate IPsec per-SA payload data bytes count (Leon Romanovsky)
  - net/mlx5e: Present succeeded IPsec SA bytes and packet (Leon Romanovsky)
  - net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup() (Jianbo Liu)
  - net/mlx5: E-switch, Create ingress ACL when needed (Chris Mi)
  - net/mlx5: Use max_num_eqs_24b when setting max_io_eqs (Daniel Jurgens)
  - net/mlx5: Use max_num_eqs_24b capability if set (Daniel Jurgens)
  - net/mlx5: IFC updates for changing max EQs (Daniel Jurgens)
  - UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open() (Neal Cardwell)
  - net: phy: phy_device: Fix PHY LED blinking code comment (Marek Vasut)
  - MAINTAINERS: wifi: update ath.git location (Kalle Valo)
  - MAINTAINERS: Remembering Larry Finger (Kalle Valo)
  - wifi: mac80211: disable softirqs for queued frame handling (Johannes Berg)
  - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (Eric Dumazet)
  - wifi: wlcore: fix wlcore AP mode (Russell King (Oracle))
  - s390/dasd: Fix invalid dereferencing of indirect CCW data pointer (Stefan Haberland)
  - s390/vfio_ccw: Fix target addresses of TIC CCWs (Eric Farman)
  - s390: Update defconfigs (Heiko Carstens)
  - platform/x86: toshiba_acpi: Fix quickstart quirk handling (Armin Wolf)
  - selftests/harness: Fix tests timeout and race condition (Mickaël Salaün)
  - nilfs2: fix incorrect inode allocation from reserved inodes (Ryusuke Konishi)
  - nilfs2: add missing check for inode numbers on directory entries (Ryusuke Konishi)
  - nilfs2: fix inode number range checks (Ryusuke Konishi)
  - mm: avoid overflows in dirty throttling logic (Jan Kara)
  - Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again" (Jan Kara)
  - mm: optimize the redundant loop of mm_update_owner_next() (Jinliang Zheng)
  - tracing: Have memmapped ring buffer use ioctl of "R" range 0x20-2F (Steven Rostedt (Google))
  - io_uring/net: don't clear msg_inq before io_recv_buf_select() needs it (Jens Axboe)
  - media: ivsc: Depend on IPU_BRIDGE or not IPU_BRIDGE (Sakari Ailus)
  - media: intel/ipu6: Fix a null pointer dereference in ipu6_isys_query_stream_by_source (Hao Ge)
  - media: ipu6: Use the ISYS auxdev device as the V4L2 device's device (Sakari Ailus)
  - selftests/resctrl: Fix non-contiguous CBM for AMD (Babu Moger)
  - afs: Convert comma to semicolon (Chen Ni)
  - fs: better handle deep ancestor chains in is_subdir() (Christian Brauner)
  - filelock: Remove locks reliably when fcntl/close race is detected (Jann Horn)
  - erofs: ensure m_llen is reset to 0 if metadata is invalid (Gao Xiang)
  - erofs: convert to use super_set_uuid to support for FS_IOC_GETFSUUID (Huang Xiaojia)
  - erofs: fix possible memory leak in z_erofs_gbuf_exit() (Sandeep Dhavale)
  - Linux v6.10.0-0.rc7


author: Jan Stancek <jstancek@redhat.com> [6.10.0-15.el10]
changelog:
  - libbpf: keep FD_CLOEXEC flag when dup()'ing FD (Viktor Malik) [RHEL-44675]
  - redhat/configs: Enable CONFIG_VMWARE_VMCI/CONFIG_VMWARE_VMCI_VSOCKETS for RHEL (Vitaly Kuznetsov)
  - Linux 6.10 (Linus Torvalds)
  - fortify: fix warnings in fortify tests with KASAN (Masahiro Yamada)
  - kbuild: rpm-pkg: avoid the warnings with dtb's listed twice (Jose Ignacio Tornos Martinez)
  - kbuild: Make ld-version.sh more robust against version string changes (Nathan Chancellor)
  - sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath (John Stultz)
  - sched/deadline: Fix task_struct reference leak (Wander Lairson Costa)
  - Revert "sched/fair: Make sure to try to detach at least one movable task" (Josh Don)
  - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (Alexandre Chartre)
  - i2c: rcar: ensure Gen3+ reset does not disturb local targets (Wolfram Sang)
  - i2c: rcar: clear NO_RXDMA flag after resetting (Wolfram Sang)
  - i2c: rcar: bring hardware to known state when probing (Wolfram Sang)
  - i2c: testunit: avoid re-issued work after read message (Wolfram Sang)
  - i2c: mark HostNotify target address as used (Wolfram Sang)
  - i2c: testunit: correct Kconfig description (Wolfram Sang)
  - MAINTAINERS: VIRTIO I2C loses a maintainer, gains a reviewer (Wolfram Sang)
  - MAINTAINERS: delete entries for Thor Thayer (Wolfram Sang)
  - cifs: fix setting SecurityFlags to true (Steve French)
  - Consolidate configs to common for 6.10 (Justin M. Forbes)
  - bnxt_en: Fix crash in bnxt_get_max_rss_ctx_ring() (Michael Chan)
  - octeontx2-af: fix issue with IPv4 match for RSS (Satheesh Paul)
  - octeontx2-af: fix issue with IPv6 ext match for RSS (Kiran Kumar K)
  - octeontx2-af: fix detection of IP layer (Michal Mazur)
  - octeontx2-af: fix a issue with cpt_lf_alloc mailbox (Srujana Challa)
  - octeontx2-af: replace cpt slot with lf id on reg write (Nithin Dabilpuram)
  - i40e: fix: remove needless retries of NVM update (Aleksandr Loktionov)
  - net: ethtool: Fix RSS setting (Saeed Mahameed)
  - btrfs: avoid races when tracking progress for extent map shrinking (Filipe Manana)
  - btrfs: stop extent map shrinker if reschedule is needed (Filipe Manana)
  - btrfs: use delayed iput during extent map shrinking (Filipe Manana)
  - libceph: fix crush_choose_firstn() kernel-doc warnings (Jeff Johnson)
  - libceph: suppress crush_choose_indep() kernel-doc warnings (Jeff Johnson)
  - libceph: fix race between delayed_work() and ceph_monc_stop() (Ilya Dryomov)
  - pmdomain: qcom: rpmhpd: Skip retention level for Power Domains (Taniya Das)
  - mmc: davinci_mmc: Prevent transmitted data size from exceeding sgm's length (Bastien Curutchet)
  - mmc: sdhci: Fix max_seg_size for 64KiB PAGE_SIZE (Adrian Hunter)
  - MAINTAINERS: Update FREESCALE SOC DRIVERS and QUICC ENGINE LIBRARY (Christophe Leroy)
  - MAINTAINERS: Add more maintainers for omaps (Tony Lindgren)
  - ARM: davinci: Convert comma to semicolon (Chen Ni)
  - MAINTAINERS: Move myself from SPRD Maintainer to Reviewer (Chunyan Zhang)
  - arm64: dts: allwinner: Fix PMIC interrupt number (Andre Przywara)
  - Revert "dt-bindings: cache: qcom,llcc: correct QDU1000 reg entries" (Komal Bajaj)
  - soc: qcom: pmic_glink: disable UCSI on sc8280xp (Johan Hovold)
  - arm64: defconfig: enable Elan i2c-hid driver (Johan Hovold)
  - arm64: dts: qcom: qdu1000: Fix LLCC reg property (Komal Bajaj)
  - arm64: dts: qcom: sm6115: add iommu for sdhc_1 (Caleb Connolly)
  - arm64: dts: qcom: x1e80100-crd: fix DAI used for headset recording (Krzysztof Kozlowski)
  - arm64: dts: qcom: x1e80100-crd: fix WCD audio codec TX port mapping (Krzysztof Kozlowski)
  - arm64: dts: qcom: sc8280xp-crd: use external pull up for touch reset (Johan Hovold)
  - arm64: dts: qcom: sc8280xp-x13s: fix touchscreen power on (Johan Hovold)
  - arm64: dts: qcom: x1e80100: Fix PCIe 6a reg offsets and add MHI (Abel Vesa)
  - arm64: dts: qcom: sa8775p: Correct IRQ number of EL2 non-secure physical timer (Cong Zhang)
  - arm64: dts: qcom: sc8280xp: Set status = "reserved" on PSHOLD (Konrad Dybcio)
  - arm64: dts: qcom: x1e80100-*: Allocate some CMA buffers (Konrad Dybcio)
  - arm64: dts: qcom: sc8180x: Fix LLCC reg property again (Bjorn Andersson)
  - mei: vsc: Fix spelling error (Wentong Wu)
  - mei: vsc: Enhance SPI transfer of IVSC ROM (Wentong Wu)
  - mei: vsc: Utilize the appropriate byte order swap function (Wentong Wu)
  - mei: vsc: Prevent timeout error with added delay post-firmware download (Wentong Wu)
  - mei: vsc: Enhance IVSC chipset stability during warm reboot (Wentong Wu)
  - nvmem: core: limit cell sysfs permissions to main attribute ones (Thomas Weißschuh)
  - nvmem: core: only change name to fram for current attribute (Thomas Weißschuh)
  - nvmem: meson-efuse: Fix return value of nvmem callbacks (Joy Chakraborty)
  - nvmem: rmem: Fix return value of rmem_read() (Joy Chakraborty)
  - misc: microchip: pci1xxxx: Fix return value of nvmem callbacks (Joy Chakraborty)
  - hpet: Support 32-bit userspace (He Zhe)
  - misc: fastrpc: Restrict untrusted app to attach to privileged PD (Ekansh Gupta)
  - misc: fastrpc: Fix ownership reassignment of remote heap (Ekansh Gupta)
  - misc: fastrpc: Fix memory leak in audio daemon attach operation (Ekansh Gupta)
  - misc: fastrpc: Avoid updating PD type for capability request (Ekansh Gupta)
  - misc: fastrpc: Copy the complete capability structure to user (Ekansh Gupta)
  - misc: fastrpc: Fix DSP capabilities request (Ekansh Gupta)
  - iio: light: apds9306: Fix error handing (Mudit Sharma)
  - iio: trigger: Fix condition for own trigger (João Paulo Gonçalves)
  - serial: qcom-geni: do not kill the machine on fifo underrun (Johan Hovold)
  - serial: qcom-geni: fix hard lockup on buffer flush (Johan Hovold)
  - serial: qcom-geni: fix soft lockup on sw flow control and suspend (Johan Hovold)
  - serial: imx: ensure RTS signal is not left active after shutdown (Rasmus Villemoes)
  - tty: serial: ma35d1: Add a NULL check for of_node (Jacky Huang)
  - serial: 8250_omap: Fix Errata i2310 with RX FIFO level check (Udit Kumar)
  - serial: imx: only set receiver level if it is zero (Stefan Eichenberger)
  - USB: serial: mos7840: fix crash on resume (Dmitry Smirnov)
  - USB: serial: option: add Rolling RW350-GL variants (Vanillan Wang)
  - USB: serial: option: add support for Foxconn T99W651 (Slark Xiao)
  - USB: serial: option: add Netprisma LCUK54 series modules (Mank Wang)
  - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (Lee Jones)
  - usb: dwc3: pci: add support for the Intel Panther Lake (Heikki Krogerus)
  - usb: core: add missing of_node_put() in usb_of_has_devices_or_graph (Javier Carrasco)
  - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (WangYuli)
  - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (Alan Stern)
  - xhci: always resume roothubs if xHC was reset during resume (Mathias Nyman)
  - USB: serial: option: add Telit generic core-dump composition (Daniele Palmas)
  - USB: serial: option: add Fibocom FM350-GL (Bjørn Mork)
  - USB: serial: option: add Telit FN912 rmnet compositions (Daniele Palmas)
  - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (Richard Fitzgerald)
  - ASoC: SOF: Intel: hda-pcm: Limit the maximum number of periods by MAX_BDL_ENTRIES (Peter Ujfalusi)
  - ASoC: rt711-sdw: add missing readable registers (Bard Liao)
  - ASoC: SOF: Intel: hda: fix null deref on system suspend entry (Kai Vehmanen)
  - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (Richard Fitzgerald)
  - firmware: cs_dsp: Validate payload length before processing block (Richard Fitzgerald)
  - firmware: cs_dsp: Return error if block header overflows file (Richard Fitzgerald)
  - firmware: cs_dsp: Fix overflow checking of wmfw header (Richard Fitzgerald)
  - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 (Nazar Bilinskyi)
  - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (Edson Juliano Drosdeck)
  - ALSA: hda: cs35l41: Fix swapped l/r audio channels for Lenovo ThinBook 13x Gen4 (Dmitry Savin)
  - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU (Michał Kopeć)
  - bcachefs: bch2_gc_btree() should not use btree_root_lock (Kent Overstreet)
  - bcachefs: Set PF_MEMALLOC_NOFS when trans->locked (Kent Overstreet)
  - bcachefs; Use trans_unlock_long() when waiting on allocator (Kent Overstreet)
  - Revert "bcachefs: Mark bch_inode_info as SLAB_ACCOUNT" (Kent Overstreet)
  - bcachefs: fix scheduling while atomic in break_cycle() (Kent Overstreet)
  - bcachefs: Fix RCU splat (Kent Overstreet)
  - redhat/configs: Enable CONFIG_PTP_1588_CLOCK_MOCK in kernel-modules-internal (Davide Caratti)
  - fedora: enabled XE GPU drivers on all arches (Peter Robinson)
  - Flip SND_SOC_CS35L56_SPI from off to module for RHEL (Justin M. Forbes)
  - Flip DIMLIB from built-in to module for RHEL (Justin M. Forbes)
  - dm vdo: replace max_discard_sectors with max_hw_discard_sectors (Bruce Johnston)
  - spi: mux: set ctlr->bits_per_word_mask (David Lechner)
  - spi: add defer_optimize_message controller flag (David Lechner)
  - spi: don't unoptimize message in spi_async() (David Lechner)
  - spi: omap2-mcspi: Revert multi mode support (Mark Brown)
  - spi: davinci: Unset POWERDOWN bit when releasing resources (Bastien Curutchet)
  - spi: axi-spi-engine: fix sleep calculation (David Lechner)
  - spi: imx: Don't expect DMA for i.MX{25,35,50,51,53} cspi devices (Uwe Kleine-König)
  - netfilter: nf_tables: prefer nft_chain_validate (Florian Westphal)
  - netfilter: nfnetlink_queue: drop bogus WARN_ON (Florian Westphal)
  - selftests/bpf: Add timer lockup selftest (Kumar Kartikeya Dwivedi)
  - bpf: Defer work in bpf_timer_cancel_and_free (Kumar Kartikeya Dwivedi)
  - bpf: Fail bpf_timer_cancel when callback is being cancelled (Kumar Kartikeya Dwivedi)
  - bpf: fix order of args in call to bpf_map_kvcalloc (Mohammad Shehar Yaar Tausif)
  - net, sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket (Daniel Borkmann)
  - net/sched: Fix UAF when resolving a clash (Chengen Du)
  - net: ks8851: Fix potential TX stall after interface reopen (Ronald Wahl)
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (Kuniyuki Iwashima)
  - ethtool: netlink: do not return SQI value if link is down (Oleksij Rempel)
  - ppp: reject claimed-as-LCP but actually malformed packets (Dmitry Antipov)
  - net: ethernet: mtk-star-emac: set mac_managed_pm when probing (Jian Hui Lee)
  - e1000e: fix force smbus during suspend flow (Vitaly Lifshits)
  - tcp: avoid too many retransmit packets (Eric Dumazet)
  - net: ethernet: lantiq_etop: fix double free in detach (Aleksander Jan Bajkowski)
  - i40e: Fix XDP program unloading while removing the driver (Michal Kubiak)
  - net: fix rc7's __skb_datagram_iter() (Hugh Dickins)
  - skmsg: Skip zero length skb in sk_msg_recvmsg (Geliang Tang)
  - selftests/bpf: Extend tcx tests to cover late tcx_entry release (Daniel Borkmann)
  - bpf: Fix too early release of tcx_entry (Daniel Borkmann)
  - net: ks8851: Fix deadlock with the SPI chip variant (Ronald Wahl)
  - octeontx2-af: Fix incorrect value output on error path in rvu_check_rsrc_availability() (Aleksandr Mishin)
  - bnxt: fix crashes when reducing ring count with active RSS contexts (Jakub Kicinski)
  - net: phy: microchip: lan87xx: reinit PHY after cable test (Oleksij Rempel)
  - docs: networking: devlink: capitalise length value (Chris Packham)
  - tcp: fix incorrect undo caused by DSACK of TLP retransmit (Neal Cardwell)
  - wireguard: send: annotate intentional data race in checking empty queue (Jason A. Donenfeld)
  - wireguard: queueing: annotate intentional data race in cpu round robin (Jason A. Donenfeld)
  - wireguard: allowedips: avoid unaligned 64-bit memory accesses (Helge Deller)
  - wireguard: selftests: use acpi=off instead of -no-acpi for recent QEMU (Jason A. Donenfeld)
  - net: bcmasp: Fix error code in probe() (Dan Carpenter)
  - dsa: lan9303: Fix mapping between DSA port number and PHY address (Christian Eggers)
  - minixfs: Fix minixfs_rename with HIGHMEM (Matthew Wilcox (Oracle))
  - hfsplus: fix uninit-value in copy_name (Edward Adam Davis)
  - vfs: don't mod negative dentry count when on shrinker list (Brian Foster)
  - filelock: fix potential use-after-free in posix_lock_inode (Jeff Layton)
  - cachefiles: add missing lock protection when polling (Jingbo Xu)
  - cachefiles: cyclic allocation of msg_id to avoid reuse (Baokun Li)
  - cachefiles: wait for ondemand_object_worker to finish when dropping object (Hou Tao)
  - cachefiles: cancel all requests for the object that is being dropped (Baokun Li)
  - cachefiles: stop sending new request when dropping object (Baokun Li)
  - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (Baokun Li)
  - cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (Baokun Li)
  - cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (Baokun Li)
  - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (Baokun Li)
  - netfs: Switch debug logging to pr_debug() (Uwe Kleine-König)
  - mm/hugetlb: fix kernel NULL pointer dereference when migrating hugetlb folio (Miaohe Lin)
  - mm/hugetlb: fix potential race in __update_and_free_hugetlb_folio() (Miaohe Lin)
  - filemap: replace pte_offset_map() with pte_offset_map_nolock() (ZhangPeng)
  - arch/xtensa: always_inline get_current() and current_thread_info() (Suren Baghdasaryan)
  - sched.h: always_inline alloc_tag_{save|restore} to fix modpost warnings (Suren Baghdasaryan)
  - MAINTAINERS: mailmap: update Lorenzo Stoakes's email address (Lorenzo Stoakes)
  - mm: fix crashes from deferred split racing folio migration (Hugh Dickins)
  - lib/build_OID_registry: avoid non-destructive substitution for Perl < 5.13.2 compat (Paul Menzel)
  - mm: gup: stop abusing try_grab_folio (Yang Shi)
  - nilfs2: fix kernel bug on rename operation of broken directory (Ryusuke Konishi)
  - mm/hugetlb_vmemmap: fix race with speculative PFN walkers (Yu Zhao)
  - cachestat: do not flush stats in recency check (Nhat Pham)
  - mm/shmem: disable PMD-sized page cache if needed (Gavin Shan)
  - mm/filemap: skip to create PMD-sized page cache if needed (Gavin Shan)
  - mm/readahead: limit page cache size in page_cache_ra_order() (Gavin Shan)
  - mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray (Gavin Shan)
  - mm/damon/core: merge regions aggressively when max_nr_regions is unmet (SeongJae Park)
  - Fix userfaultfd_api to return EINVAL as expected (Audra Mitchell)
  - mm: vmalloc: check if a hash-index is in cpu_possible_mask (Uladzislau Rezki (Sony))
  - mm: prevent derefencing NULL ptr in pfn_section_valid() (Waiman Long)
  - mm: page_ref: remove folio_try_get_rcu() (Yang Shi)
  - scsi: sd: Do not repeat the starting disk message (Damien Le Moal)
  - scsi: ufs: core: Fix ufshcd_abort_one racing issue (Peter Wang)
  - scsi: ufs: core: Fix ufshcd_clear_cmd racing issue (Peter Wang)
  - vfio/pci: Init the count variable in collecting hot-reset devices (Yi Liu)
  - bcachefs: Add missing bch2_trans_begin() (Kent Overstreet)
  - bcachefs: Fix missing error check in journal_entry_btree_keys_validate() (Kent Overstreet)
  - bcachefs: Warn on attempting a move with no replicas (Kent Overstreet)
  - bcachefs: bch2_data_update_to_text() (Kent Overstreet)
  - bcachefs: Log mount failure error code (Kent Overstreet)
  - bcachefs: Fix undefined behaviour in eytzinger1_first() (Kent Overstreet)
  - bcachefs: Mark bch_inode_info as SLAB_ACCOUNT (Youling Tang)
  - bcachefs: Fix bch2_inode_insert() race path for tmpfiles (Kent Overstreet)
  - closures: fix closure_sync + closure debugging (Kent Overstreet)
  - bcachefs: Fix journal getting stuck on a flush commit (Kent Overstreet)
  - bcachefs: io clock: run timer fns under clock lock (Kent Overstreet)
  - bcachefs: Repair fragmentation_lru in alloc_write_key() (Kent Overstreet)
  - bcachefs: add check for missing fragmentation in check_alloc_to_lru_ref() (Kent Overstreet)
  - bcachefs: bch2_btree_write_buffer_maybe_flush() (Kent Overstreet)
  - bcachefs: Add missing printbuf_tabstops_reset() calls (Kent Overstreet)
  - bcachefs: Fix loop restart in bch2_btree_transactions_read() (Kent Overstreet)
  - bcachefs: Fix bch2_read_retry_nodecode() (Kent Overstreet)
  - bcachefs: Don't use the new_fs() bucket alloc path on an initialized fs (Kent Overstreet)
  - bcachefs: Fix shift greater than integer size (Kent Overstreet)
  - bcachefs: Change bch2_fs_journal_stop() BUG_ON() to warning (Kent Overstreet)
  - bcachefs: Delete old faulty bch2_trans_unlock() call (Kent Overstreet)
  - bcachefs: Switch online_reserved shutdown assert to WARN() (Kent Overstreet)
  - platform/x86: toshiba_acpi: Fix array out-of-bounds access (Armin Wolf)
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Kuan-Wei Chiu)
  - cpufreq: ACPI: Mark boost policy as enabled when setting boost (Mario Limonciello)
  - cpufreq: Allow drivers to advertise boost enabled (Mario Limonciello)
  - thermal: core: Fix list sorting in __thermal_zone_device_update() (Rafael J. Wysocki)
  - thermal: core: Call monitor_thermal_zone() if zone temperature is invalid (Rafael J. Wysocki)
  - thermal: gov_power_allocator: Return early in manage if trip_max is NULL (Nícolas F. R. A. Prado)
  - of/irq: Disable "interrupt-map" parsing for PASEMI Nemo (Marc Zyngier)
  - Linux v6.10.0


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Julien Rische <jrische@redhat.com> - 1.20.1-8
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Karel Zak <kzak@redhat.com> - 2.40.2-3
changelog:
  - revert recent uuidd mode changes
  - rebase rhel specific patches
  - fix uuidd-tmpfiles.conf (upstream patch)
  - remove unused patches


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.2-1
changelog:
  - fs: Avoid excess logging in extract_e2fsck_progress (vtrefny)
  - loop: Report BD_LOOP_ERROR_DEVICE on empty loop devices (tbzatek)
  - lib: Silence the missing DEFAULT_CONF_DIR_PATH (tbzatek)
  - fs: Document that generic functions can mount filesystems (vtrefny)
  - fs: Use read-only mount where possible for generic FS functions (vtrefny)
  - docs: Fix test quotation (marecki)
  - fs: Fix unused error in extract_e2fsck_progress (vtrefny)
  - Use ntfsinfo instead of ntfscluster for faster bd_fs_ntfs_get_info (amubtdx)
  - Restrict list of exported symbols via -export-symbols-regex (biebl)
  - Fix formatting in NEWS.rst (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.3-1
changelog:
  - crypto: Correctly convert passphrases from Python to C (vtrefny)
  - tests: Minor NVMe HostNQN fixes (tbzatek)
  - nvme: Generate HostID when missing (tbzatek)
  - Always use "--fs ignore" with lvresize (mvollmer)
  - nvme: Use interim buffer for nvme_get_log_sanitize() (tbzatek)
  - fs: Fix memory leak (vtrefny)
  - fs: Fix leaking directories with temporary mounts (vtrefny)
  - tests: Specificy required versions when importing GLib and BlockDev introspection (biebl)
  - tests: Replace deprecated unittest assert calls (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.4-1
changelog:
  - tests: Fix "invalid escape sequence '\#'" warning from Python 3.12 (vtrefny)
  - tests: Fail early when recompilation fails in library_test (vtrefny)
  - lvm-dbus: Replace g_critical calls with bd_utils_log_format (vtrefny)
  - Use log function when calling a plugin function that is not loaded (vtrefny)
  - logging: Default to DEBUG log level if compiled with --enable-debug (vtrefny)
  - nvme: Rework memory allocation for device ioctls (tbzatek)
  - packit: Add configuration for downstream builds (vtrefny)
  - fs: correct btrfs set label description (jvanderwaa)
  - fs: Disable progress for ntfsresize (vtrefny)
  - part: Do not open disk read-write for read only operations (vtrefny)
  - ci: Bump actions/checkout from v3 to v4 (vtrefny)
  - plugins: btrfs: use g_autofree where possible for g_free (jvanderwaa)
  - plugins: use g_autofree for free'ing g_char's (jvanderwaa)
  - spec: Move obsoleted devel subpackages to libblockdev-devel (vtrefny)
  - spec: Obsolete vdo plugin packages (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-1
changelog:
  - tests: Skip some checks for btrfs errors with btrfs-progs 6.6.3 (vtrefny)
  - Fix missing progress initialization in bd_crypto_luks_add_key (vtrefny)
  - fs: Report reason for open() and ioctl() failures (tbzatek)
  - utils: Add expected printf string annotation (tbzatek)
  - lvm-dbus: Avoid using already-freed memory (tbzatek)
  - lvm-dbus: Fix leaking error (tbzatek)
  - python: Add a deepcopy function to our structs (vtrefny)
  - tests: Remove unreliable nvme attribute checks (tbzatek)
  - tests: Use BDPluginSpec constructor in LVM DBus plugin tests (vtrefny)
  - tests: Avoid setting up intermediary loop device for the nvme target (tbzatek)
  - tests: Default to /tmp for create_sparse_tempfile() (tbzatek)
  - part: Fix potential double free when getting parttype (vtrefny)
  - Mark NVDIMM plugin as deprecated since 3.1 (vtrefny)
  - tests: Remove some obsolete rules to skip tests (vtrefny)
  - fs: Add support for getting filesystem min size for NTFS and Ext (vtrefny)
  - fs: Fix allowed UUID for generic mkfs with VFAT (vtrefny)
  - fs: Add a generic function to check for fs info availability (vtrefny)
  - fs: Add a function to check label format for F2FS (vtrefny)
  - swap: Add support for checking label and UUID format (vtrefny)
  - ci: Remove the custom version command for Packit (vtrefny)
  - ci: Manually prepare spec file for Packit (vtrefny)
  - overrides: Remove unused 'sys' import (vtrefny)
  - Add BDPluginSpec constructor and use it in plugin_specs_from_names (vtrefny)
  - Sync spec with downstream (vtrefny)
  - ci: Add an action to compile libblockdev with different compilers (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-3
changelog:
  - Fix creating MD RAID arrays without specifying bitmap localtion
    Resolves: RHEL-31379
  - crypto: Fix double free in bd_crypto_luks_remove_key
    Resolves: RHEL-31489
  - tests: Fix running tests without ntfsprogs
    Resolves: RHEL-32875


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0~b4-1
changelog:
  - (fedora#2173137) - libcupsfilters-2.0b4 is available
  - introduce Epoch because I'm not careful reader of FPG...


author: Jan Kolarik <jkolarik@redhat.com> - 0.71.0-1
changelog:
  - Update to 0.71.0
  - PGP: Use new librepo PGP API, remove gpgme dependency
  - API: Basic support for OpenPGP public keys
  - Avoid using GNU extensions in the dependency splitter regex
  - filterAdvisory: match installed_solvables sort with lower_bound (RhBug:2212838)
  - Make code C++20 compatible


author: Jan Kolarik <jkolarik@redhat.com> - 0.72.0-1
changelog:
  - Update to 0.72.0
  - Avoid reinstalling installonly packages marked for ERASE (RhBug:2163474)
  - transaction: Save the reason for installing (RhBug:1733274)
  - hawkey.subject: get_best_selectors only obsoleters of latest (RhBug:2183279,2176263)
  - conf: Add limited shell-style variable expansion (RhBug:1789346)
  - conf: Add support for $releasever_major, $releasever_minor (RhBug:1789346)
  - repo: Don't download the repository if the local cache is up to date
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Include dist-info for python3-libdnf
  - bindings: Load all modules with RTLD_GLOBAL
  - Update translations


author: Fedora Release Engineering <releng@fedoraproject.org> - 0.73.0-1
changelog:
  - Update to 0.73.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - goal: Method for detecting file dependency problems


author: Evan Goode <egoode@redhat.com> - 0.73.1-1
changelog:
  - Update to 0.73.1 (RHEL-38831)
  - Fix https://issues.redhat.com/browse/RHEL-27657 (RHEL-32935)
  - subject-py: Fix memory leak (RHEL-32924)
  - MergedTransaction: Calculate RPM difference between two same versions as
    no-op (RHEL-33541)
  - Onboard packit tests
  - Add virtual destructor to TransactionItem (RHEL-32943)


author: Petr Pisar <ppisar@redhat.com> - 0.73.1-2
changelog:
  - Fix reinstalling packages which conflicts with themselves in
    dnf_transaction_commit() (RHEL-32919)
  - Fix an invalid memory access when dropping an item in MergedTransaction
    class (RHEL-33541)


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.0-5
changelog:
  - Use curl instead of wget, since wget2 is broken
    (https://gitlab.com/gnuwget/wget2/-/issues/652)
  - Remove yajl daemon dep and replace with jansson.


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.1-1
changelog:
  - New stable branch version 1.52.1
  - Remove lua, perl, ruby, php and gobject bindings in RHEL
  - Remove gdisk dependency for RHEL
    resolves: RHEL-35998


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Steve Dickson <steved@redhat.com> 2.6.3-1.rc3
changelog:
  - Updated to the latest RC release: nfs-utils-2-6-4-rc3
  - Fixed a regression in the junction code (bz 2213669)


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: Phil Sutter <psutter@redhat.com> - 1.2.6-1
changelog:
  - Drop outdated libnftables provides, it might clash with the new
    nftables-provided libnftables at some point in future
  - Backport one late fix from upstream
  - new version 1.2.6


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0~rc1-2
changelog:
  - 2192912 - [Utax, Kyocera, Brother] pdftops hacks are not applied due missing manufacturer in printer-make-and-model


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Paul Wouters <paul.wouters@aiven.io - 1.4.5-1
changelog:
  - Resolves: rhbz#2154991 libpwquality fails to build with Python 3.12: ModuleNotFoundError: No module named 'distutils'
  - Resolves: rhbz#2006063 RFE: Support running without cracklib-dicts installed
  - Cleanup and remove python2/3 conditional macros


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Packit <hello@packit.dev> - 2.17.11-1
changelog:
  - Release version 2.17.11 (Michal Srb)
  - spec: Add missing requires for python3-libreport (Michal Srb)
  - Build URL with urllib.parse.urljoin() (Michal Srb)
  - Add XDG_ACTIVATION_TOKEN to the list of ignored words (Michal Srb)
  - Attachments are minor updates in Bugzilla (Michal Srb)
  - Retry Bugzilla search queries with delays (Michal Srb)
  - Fix "NameError: name 'ticket' is not defined" exception (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Paul Wouters <paul.wouters@aiven.io> - 4.12-1
changelog:
  - Update to 4.12 for CVE-2023-38710, CVE-2023-38711 and CVE-2023-38712
  - Resolves: rhbz#2230225 libreswan-4.12 is available


author: Paul Wouters <paul.wouters@aiven.io> - 4.12-2
changelog:
  - Remove ipsec show and ipsec verify sub commands (not very useful, causes python requirement)
  - Patch for handling libcap-ng return values and fix capng_apply() call


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Pavel Březina <pbrezina@redhat.com> - 2.9.4-1
changelog:
  - Rebase to SSSD 2.9.4
  - Files provider suport remove (rhbz#2253183)
  - i686 support removed (rhbz#2069738)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-2
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-1
changelog:
  - Version 2.10.1
  - Default to ntfs-3g for stability reasons (#2182206)
  - Use Recommends: for filesystem tools (#2169848)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-29893)
  - The rebase also fixes the following bugs:
      RHEL-30177, RHEL-35244, RHEL-39024


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-4
changelog:
  - update selinux policy (RHEL-29728)
  - limit unicast message rate per address and grant duration (RHEL-29738)
  - allow old syntax of SET SUBSCRIBE_EVENTS_NP command (RHEL-29738)
  - fix loading and reloading of leapfile (RHEL-29738)
  - fix ts2phc to handle large NMEA delay (RHEL-29737)


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Martin Osvald <mosvald@redhat.com> - 2.1.1-1
changelog:
  - New version 2.1.1 (rhbz#2250290)
  - Fix incorrect upstream URL and SourceX (rhbz#2249526)
  - SPDX migration


author: Kamil Dudka <kdudka@redhat.com> - 3.20.1-1
changelog:
  - new upstream version 3.20.1, which fixes the following security issue:
      CVE-2022-1348 - potential DoS from unprivileged users via the state file


author: Brian C. Lane <bcl@redhat.com> 39.2-1
changelog:
  - pylint: Ignore false positive from pylint on rawhide (bcl@redhat.com)
  - tests: Fix image_minimizer test dnf usage (bcl@redhat.com)
  - tests: Fix HFS test to work with new get_file_magic output (bcl@redhat.com)
  - ltmpl: Use ProcMount while running the dnf transaction (bcl@redhat.com)
  - imgutils: Split part DracutChroot into ProcMount (bcl@redhat.com)
  - runtime-postinstall: Remove libuser.conf (bcl@redhat.com)
  - runtime-install: exclude renamed iwl firmware packages (awilliam@redhat.com)
  - test_minimizer: dnf5 wants --use-host-config (bcl@redhat.com)
  - Install nvme-cli tool and remove machine specific nvme files (bcl@redhat.com)
  - Revert "Add blacklist_exceptions to multipath.conf" (jstodola@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 39.4-1
changelog:
  - Exclude more obsoleted libertas firmware packages (awilliam@redhat.com)
  - Revert "test_minimizer: dnf5 wants --use-host-config" (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 39.5-1
changelog:
  - Explicitly pull in more filesystem packages (awilliam@redhat.com)
  - runtime-postinstall: Turn off lvm monitoring (bcl@redhat.com)
  - runtime-cleanup.tmpl: fix typo 'gschadow' (chris.riches@nutanix.com)
  - runtime-cleanup: Change how logo pixmaps is cleaned up (bcl@redhat.com)
  - runtime-install: only pull in qcom-firmware on aarch64 (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 40.0-1
changelog:
  - Remove some unneccessary storage packages from runtime-install (vtrefny@redhat.com)
  - Do not install polkit-gnome for blivet-gui (vtrefny@redhat.com)
  - docs: Update the quickstart example command (vtrefny@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 40.5.1-1
changelog:
  - New lorax documentation - 40.5.1 (bcl@redhat.com)
    Resolves: RHEL-30615
  - Dockerfile.test: Use Fedora 40 for test image (bcl@redhat.com)
  - Change macboot default to false (bcl@redhat.com)
  - Change defaults to Red Hat Enterprise Linux 10 (bcl@redhat.com)
  - runtime-cleanup: wget2-wget has replaced wget (yselkowi@redhat.com)
  - Added example of how to use livemedia-creator in github actions, and still
    build in fedora. (cjshowalter@alaska.edu)
  - Require lorax-templates-rhel when building for ELN, CentOS Stream and RHEL (sgallagh@redhat.com)
  - workflows: Switch to actions/checkout@v4 (bcl@redhat.com)
  - New lorax documentation - 40.5 (bcl@redhat.com)
  - maint: Switch default platform to F40 (bcl@redhat.com)
  - runtime-cleanup: Update to cleanup more (akira@tagoh.org)
  - runtime-install: Update font packages (akira@tagoh.org)
  - mkksiso: Add support for adding an anaconda updates.img (jkonecny@redhat.com)
  - runtime-install: drop kdump-anaconda-addon (awilliam@redhat.com)
  - s390: Escape volid before using it (bcl@redhat.com)
  - aarch64: Escape volid before using it (bcl@redhat.com)
  - runtime-install: drop retired pcmciautils (awilliam@redhat.com)
  - runtime-install: Drop unneeded packages libmlx4, systemd-sysv, and systemd-units (bcl@redhat.com)
  - runtime-install: wget2-wget has replaced wget (awilliam@redhat.com)
  - runtime-cleanup: anaconda's new interface needs stdbuf (kkoukiou@redhat.com)
  - test-in-podman: Fix problem running in github actions (bcl@redhat.com)
  - test: Add pigz to test-packages (bcl@redhat.com)
  - Adjust runtime-postinstall.tmpl for systemd config files move (zbyszek@in.waw.pl)


author: Brian C. Lane <bcl@redhat.com> 40.5.3-1
changelog:
  - tito: Add RHEL tagger with support for rhbz and RHEL (bcl)
    Related: RHEL-31830
  - livemedia-creator: Use /usr/libexec/qemu-kvm on supported arches (bcl)
    Related: RHEL-31830
  - spec: edk2-aarch64 has the UEFI firmware on aarch64 (bcl)
    Related: RHEL-31830
  - Add prefixdevname to Anaconda image (msekleta)
    Related: RHEL-30010
  - spec: exclude the files section for lmc-virt on ppc64le (bcl)
    Resolves: RHEL-31830


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian Stinson <bstinson@redhat.com> - 10.0-43
changelog:
  - Remove shim-ia32 from the installed packages since we don't produce shim-ia32
    any more. (bstinson) Rerelease


author: Parag Nemade <pnemade AT redhat DOT com> - 10.0-44
changelog:
  - Resolves: RHEL-32728 (pnemade)
  - runtime-install: Update font packages
  - runtime-cleanup: Update font packages


author: Brian C. Lane <bcl@redhat.com> - 10.0-45
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-22656
  - Makefile: Fix clog target (bcl)
    Related: RHEL-22656
  - aarch64: Replace spaces and escape characters in isolabel with '-' (bcl)
    Resolves: RHEL-22656
  - s390: Replace spaces and escape characters in isolabel with '-' (bcl)
    Resolves: RHEL-22658
  - ppc: Remove unused ppc templates and config files (bcl)
    Resolves: RHEL-35394
  - Drop gdisk from the boot.iso (bcl)
    Resolves: RHEL-38339
  - tests: Name the test iso RHEL 10 instead of 9
    Resolves: RHEL-38199
  - Add prefixdevname to Anaconda image
    Related: RHEL-30010
  - spec: Update URL to point to gitlab project
    Resolves: RHEL-32959


author: Brian C. Lane <bcl@redhat.com> - 10.0-47
changelog:
  - Makefile: Add PREV support for clog (bcl)
    Related: RHEL-40021
  - git-changelog: Change line length limit to 120 (bcl)
    Related: RHEL-40021
  - README: Update README with note about PREV= (bcl)
    Related: RHEL-40021
  - Remove libvisual from runtime-cleanup as it's being removed from RHEL 10 (tpopela)
    Resolves: RHEL-39949
  - tests: Do not use fedora.repo for the test build (bcl)
    Resolves: RHEL-40021
  - Drop libreport from templates (mkolman)
    Resolves: RHEL-39794


author: Brian C. Lane <bcl@redhat.com> - 10.0-49
changelog:
  - SERIAL: Bump to 48 to match spec change for mass rebuild (bcl)
  - firmware: Exclude installation of audio firmware (bcl)
    Related: RHEL-44311
  - tests: Replace $stream with 10-stream (bcl)
    Related: RHEL-44311
  - runtime-install: Only install qcom-firmware on aarch64 (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to brcmfmac-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to intel-audio-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: Cleanup firmware moved to dvb-firmware (bcl)
    Related: RHEL-44311
  - runtime-cleanup: qcom firmware is now in the qcom-firmware package (bcl)
    Related: RHEL-44311
  - Drop Tiger VNC from templates (mkolman)
    Resolves: RHEL-38741


author: Michael Jeanson <mjeanson@efficios.com> - 2.13.5-1
changelog:
  - New upstream release
  - Add builddep on python3-setuptools in prevision of python 3.12 removing distutils


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Filip Janus <fjanus@redhat.com> - 3:10.11.6-2
changelog:
  - Apply demodularization
  - the default stream builds mariadb.rpm
  - the non-default stream builds mariadbXX.XX.rpm


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Lukas Javorsky <ljavorsk@redhat.com> - 8.0.36-3
changelog:
  - Apply demodularization
  - the default stream builds mysql.rpm
  - the non-default stream builds mysqlX.XX.rpm


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-4
changelog:
  - Resolves: #2224582 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting external
    program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.0-22234872.
    - Fix for CVE-2023-20900 - a SAML token signature bypass vulnerability.
    - Fix for CVE-2023-20867 - an Authentication Bypass vulnerability.
    - Linux quiesced snapshots have been updated to avoid intermittent hangs
      of the vmtoolsd process.
      - File systems prefrozen by custom quiescing scripts must be listed on the
        "excludedFileSystems" setting in the "vmbackup" section of the tools.conf
        file.
      - A tools.conf configuration setting is available to temporaily direct
        Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
        of ignoring file systems already frozen.
    - A number of Coverity reported issues have been addressed.
    - A number of GitHub issues and pull requests have been handled.


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30345]
  - Resolves: [RHEL-30345]
    ([ESXi][RHEL10]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Than Ngo <than@redhat.com> - 3.21.0-3
changelog:
  - drop p11_kit_support
  - fix handling of user name
  - fix user confirmation prompt behavior when stdin is closed


author: Than Ngo <than@redhat.com> - 3.21.0-5
changelog:
  - p11sak tool: slot option does not accept argument 0 for slot index 0
  - p11sak fails as soon as there reside non-key objects


author: Than Ngo <than@redhat.com> - 3.23.0-1
changelog:
  - 3.23.0
     * EP11: Add support for FIPS-session mode
     * Updates to harden against RSA timing attacks
     * Bug fixes


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.3p1-13
changelog:
  - Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224)
  - https://github.com/openssh-gsskex/openssh-gsskex/pull/19


author: Daniel Milnes <daniel@daniel-milnes.uk> - 9.6p1-1
changelog:
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - Disallow SHA1 at SECLEVEL2 in OpenSSL
    Resolves: RHEL-39962
  - SHA-1 signature shouldn't work in normal mode
    Resolves: RHEL-36677


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Packit <hello@packit.dev> - 103-1
changelog:
  Changes with 103
  ----------------
    * Update snapshots to 20240101 (#1520)
      * Author: SchutzBot, Reviewers: Tomáš Hozza
    * github: run tests on push again (#1517)
      * Author: Achilleas Koutsou, Reviewers: Michael Vogt, Simon de Vlieger, Tom Gundersen
    * mounts: support mounting partitions (#1501)
      * Author: Dusty Mabe, Reviewers: Michael Vogt
    * osbuild: allow to export a tree without preserving the ownership (less tests) (#1512)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * test: add more output when ensure_mtime() assert fails (#1518)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * test: fix running on debian hosts (#1522)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    * test: include tests in `make lint` and fix issues (#1521)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * test: rename TestFileSystemMountService->FakeFileSystemMountService (#1513)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger

  — Somewhere on the Internet, 2024-01-03


author: Packit <hello@packit.dev> - 104-1
changelog:
  Changes with 104
  ----------------
    * HMS-3235: Skopeo source storage location (#1504)
      * Author: Gianluca Zuccarelli, Reviewers: Achilleas Koutsou
    * add --break for requesting a debug shell (#1532)
      * Author: Dusty Mabe, Reviewers: Brian C. Lane, Michael Vogt, Tomáš Hozza
    * create org.osbuild.bootupd stage (#1519)
      * Author: Dusty Mabe, Reviewers: Achilleas Koutsou
    * minor updates for fedora-coreos-container manifest (#1533)
      * Author: Dusty Mabe, Reviewers: Simon de Vlieger
    * osbuild: test OSBUILD_EXPORT_FORCE_NO_PRESERVE_OWNER (#1511)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * stages(container-deploy): ensure `/var/tmp` is available (#1531)
      * Author: Michael Vogt, Reviewers: Ondřej Budai
    * stages(grub2): allow pulling efi binaries from alternative efi roots (#1529)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * stages,util: add org.osbuild.selinux tests and small functional tweaks (#1526)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * stages/org.osbuild.ostree.config: support bls-append-except-default (#1534)
      * Author: Luke Yang, Reviewers: Dusty Mabe
    * stages: add new `org.osbuild.container-deploy` stage (#1509)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * test: fix new mount tests under rhel8 (#1537)
      * Author: Michael Vogt, Reviewers: Paweł Poławski, Tomáš Hozza
    * tools/osbuild-mpp: run _process_format() for mpp-embed dict (#1528)
      * Author: Dusty Mabe, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-01-16


author: Packit <hello@packit.dev> - 105-1
changelog:
  Changes with 105
  ----------------
    * move source parallelization into sources (#1549)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane
    * osbuild-depsolve-dnf5: Add libdnf5 based depsolving for Fedora 40 (#1530)
      * Author: Brian C. Lane, Reviewers: Simon de Vlieger
    * osbuild: add "mypy-strict" check (#1476)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * osbuild: error when {Device,Mount} is modified after creation (#1516)
      * Author: Michael Vogt, Reviewers: Brian C. Lane
    * schutzbot: add dustymabe SSH key to team_ssh_keys (#1546)
      * Author: Dusty Mabe, Reviewers: Achilleas Koutsou
    * stages(container-deploy): add new `exclude` option (#1552)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * stages/org.osbuild.mkfs.ext4: add ext4 options (#1538)
      * Author: Luke Yang, Reviewers: Dusty Mabe
    * stages/ostree.aleph: don't manipulate image name from origin (#1548)
      * Author: Dusty Mabe, Reviewers: Luke Yang
    * test: add new testutil.assert_jsonschema_error_contains() helper (#1543)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * test: check that `mkfs.fat` has the `-g` option in `test_fat` (#1540)
      * Author: Michael Vogt, Reviewers: Paweł Poławski
    * test: export schemas in testing_libdir_fixture (#1539)
      * Author: Michael Vogt, Reviewers: Paweł Poławski
    * test: fix `test_libc_futimes_works` (#1541)
      * Author: Michael Vogt, Reviewers: Paweł Poławski
    * test: fix test_schema_validation_containers_storage_conf (#1542)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * tests/CI: Add RHEL 9.3 and 8.9 GA to pipeline (#1536)
      * Author: tkoscieln, Reviewers: Jakub Rusz

  — Somewhere on the Internet, 2024-01-31


author: Packit <hello@packit.dev> - 106-1
changelog:
  Changes with 106
  ----------------
    * CI: update terraform SHA (#1559)
      * Author: Jakub Rusz, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * stages/org.osbuild.cloud-init: fix dump format of `datasource_list` key (#1556)
      * Author: Tomáš Hozza, Reviewers: Michael Vogt
    * test: drop `-k` from `-k stages/test` test matrix (#1564)
      * Author: Michael Vogt, Reviewers: Dusty Mabe, Tomáš Hozza

  — Somewhere on the Internet, 2024-01-31


author: Packit <hello@packit.dev> - 96-1
changelog:
  Changes with 96
  ----------------
    * .gitlab-ci.yml: upgade neetle early to workaround RHEL-17890 (#3847)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * README: remove IRC in favour of matrix channel (#3844)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * Worker status heartbeat (#3766)
      * Author: Sanne Raymaekers, Reviewers: Nobody
    * build(deps): bump actions/github-script from 6 to 7 (#3806)
      * Author: dependabot[bot], Reviewers: Nobody
    * build(deps): bump the go-deps group with 5 updates (#3837)
      * Author: dependabot[bot], Reviewers: Achilleas Koutsou
    * cloudapi/v2: fix verbiage of customizations (#3839)
      * Author: Sanne Raymaekers, Reviewers: Diaa Sami
    * rpmbuild: add fedora-40 (#3838)
      * Author: Jakub Rusz, Reviewers: Alexander Todorov
    * test: fix ansible playbook conditional statements error (#3845)
      * Author: Xiaofeng Wang, Reviewers: Achilleas Koutsou
    * test: remove persistent log checking on minimal raw test (#3836)
      * Author: Xiaofeng Wang, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2023-12-13


author: Packit <hello@packit.dev> - 98-1
changelog:
  Changes with 98
  ----------------
    * Update snapshots to 20240101 (#3876)
      * Author: SchutzBot, Reviewers: Jakub Rusz
    * build(deps): bump the go-deps group with 5 updates (#3877)
      * Author: dependabot[bot], Reviewers: Ondřej Budai
    * schutzbot: add my "mvogt" SSH key (#3882)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2024-01-10


author: Packit <hello@packit.dev> - 99-1
changelog:
  Changes with 99
  ----------------
    * Add a tool script to help check for unused runners (#3614)
      * Author: Brian C. Lane, Reviewers: Tomáš Hozza
    * Bump azure (#3853)
      * Author: Sanne Raymaekers, Reviewers: Ondřej Budai
    * COMPOSER-2096: Add blueprint support to cloudapi & local access to cloudapi service (#3757)
      * Author: Brian C. Lane, Reviewers: Sanne Raymaekers
    * Fedora worker images (#3902)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * Invert wrong boolean condition in filesystem test (#3889)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Remove oscap.sh firewalld rules workaround (#3905)
      * Author: Alexander Todorov, Reviewers: Tomáš Hozza
    * Update test runners to Fedora 39 (#3820)
      * Author: Alexander Todorov, Reviewers: Achilleas Koutsou, Michael Vogt, Ondřej Budai, Tomáš Hozza
    * edge: add iot-simplified-installer image type (#3900)
      * Author: djach7, Reviewers: Achilleas Koutsou
    * image-info: update for new "partition" option in mounts.Mount (#3883)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * tools/build-rpms: fix getting the osbuild commit from Schutzfile (#3897)
      * Author: Sanne Raymaekers, Reviewers: Achilleas Koutsou, Simon Steinbeiß
    * tools/fedora-worker-packer: fix packer only/except (#3910)
      * Author: Sanne Raymaekers, Reviewers: Tomáš Hozza

  — Somewhere on the Internet, 2024-01-24


author: Packit <hello@packit.dev> - 100-1
changelog:
  Changes with 100
  ----------------
    * CI: update terraform SHA (#3919)
      * Author: Jakub Rusz, Reviewers: Achilleas Koutsou
    * Cloud API: Add Fedora IoT bootable container (#3916)
      * Author: Achilleas Koutsou, Reviewers: Ondřej Budai
    * DEPLOYING/HACKING.md: Consistently use inline refs (#3930)
      * Author: Simon Steinbeiß, Reviewers: Tomáš Hozza
    * HACKING/DEPLOYING.md: Markdown syntax fixes (#3929)
      * Author: Simon Steinbeiß, Reviewers: Ondřej Budai
    * Update osbuild/images to v0.35.0 (#3932)
      * Author: Tomáš Hozza, Reviewers: Sanne Raymaekers
    * Use dot to separate distro major and minor version and replace distro registry with factory (#3887)
      * Author: Tomáš Hozza, Reviewers: Achilleas Koutsou
    * build(deps): bump actions/setup-go from 4 to 5 (#3842)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump actions/upload-artifact from 3 to 4 (#3855)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * build(deps): bump the go-deps group with 10 updates (#3923)
      * Author: dependabot[bot], Reviewers: Tomáš Hozza
    * pkg/jobqueue: fix worker status update query (#3922)
      * Author: Sanne Raymaekers, Reviewers: Diaa Sami, Gianluca Zuccarelli
    * templates/dashboards: add community stage service to orgs (#3931)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß
    * templates/packer: deal with unbound variables (#3920)
      * Author: Sanne Raymaekers, Reviewers: Simon Steinbeiß
    * test: remove workarounds for fixed bugs (#3933)
      * Author: Xiaofeng Wang, Reviewers: Jakub Rusz
    * tests/CI: Add RHEL 9.3 and 8.9 GA to pipeline (#3892)
      * Author: tkoscieln, Reviewers: Alexander Todorov, Jakub Rusz

  — Somewhere on the Internet, 2024-02-07


author: Colin Walters <walters@verbum.org> - 2023.7-4
changelog:
  - Enable composefs only on fedora/rhel10 to fix COPR builds
    which pull from this dist-git
  - Exclude x86 on FedoraELN since composefs is
  - Always disable soup to re-sync with ostree upstream logic


author: Colin Walters <walters@verbum.org> - 2023.8-4
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/3129/commits/a1c1c0b500
    d23ff129adbfe9486a067788b24969 To aid https://github.com/coreos/fedora-
    coreos-config/pull/2783


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.42-1
changelog:
  - Rebase to version 10.42
  - RISC-V is JIT enabled according to the https://github.com/PCRE2Project/pcre2/issues/14


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.0-498
changelog:
  - 5.38.0 bump (see <https://metacpan.org/pod/release/RJBS/perl-5.38.0/pod/perldelta.pod>
    or release notes


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.38.2-503
changelog:
  - 5.38.2 bump (see <https://metacpan.org/release/PEVANS/perl-5.38.2/view/pod/perldelta.pod>
    or release notes


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.142-1
changelog:
  - Update to 2.142
    - confess() replaced with croak(): fewer stack traces
    - Broke the version range handling into the Range class
    - Note: this version now requires perl v5.10 rather than v5.6
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.004003-1
changelog:
  - Update to 1.004003
    Bug Fixes
    - If exporting non-CODE items that happen to have the same name as exported
      CODE items, their export was quietly being blocked; these exports should
      now work (GH#9)
    - Using ! with a tag now works; it was previously documented as working but
      not implemented (GH#8)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.92-7
changelog:
  - Update test suite to handle potential unavailability of sha1 algorithm
    https://github.com/radiator-software/p5-net-ssleay/pull/433
  - Avoid deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 3:1.302196-1
changelog:
  - Update to 1.302196
    - Raise error on missing Hub ID, which should never happen (GH#882)
    - Fix handling of VSTRING and LVALUE refs in is_deeply() (GH#918)
    - Merge several documentation fixes (GH#910, GH#911, GH#912)


author: Paul Howarth <paul@city-fan.org> - 3:1.302197-1
changelog:
  - Update to 1.302197
    - Add ability to attach timestamps to trace objects via API or environment
      variable


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Paul Howarth <paul@city-fan.org> - 1:0.239-1
changelog:
  - Update to 0.239
    - Harden against changes to require error messages: the '@INC contains' may
      change in a future release of perl; this hardens the test to be insensitive
      to the exact words chosen (https://github.com/Perl/perl5/pull/20547)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1:0.240-1
changelog:
  - Update to 0.240
    - Use Test::More::isnt() instead of Test::More::isn't in tests, which is
      deprecated, as ' isn't allowed as package separator in an upcoming version
      of Perl (GH#13)


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Wim Taymans <wtaymans@redhat.com> - 1.0.7-3
changelog:
  - Use new webrtc-audio-processing-1 package
  - Add patch to remove deprecated engine.h include
  - Resolves: RHEL-28928


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 5:5.0.3-1
changelog:
  - podman-5.0.3-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.0.3
  - Resolves: RHEL-35439


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.0-1
changelog:
  - podman-5.1.0-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.0
  - Resolves: RHEL-32374 RHEL-26633 RHEL-26105 RHEL-24715


author: Jindrich Novy <jnovy@redhat.com> - 5:5.1.1-1
changelog:
  - podman-5.1.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.1.1
  - Related: RHEL-34195


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-7
changelog:
  - python: improve format strings for proper localization
  - python: Drop hard formating from localized strings
  - sepolicy: port to dnf4 python API (rhbz#2209404)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.beta
changelog:
  - Initial build of postgresql 16
  - Remove pdf documentation
  - Fix linter issues (patchx -> patch x)
  - Remove postmaster symbol since it was deprecated see:
  	https://www.postgresql.org/docs/current/app-postmaster.html
  - Provide new symbol postgresql-unit


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - Add temporary fix for failing perl test
  - plperl_warning.patch
  - Related: https://bugzilla.redhat.com/show_bug.cgi?id=2238686


author: Filip Janus <fjanus@redhat.com> - 16.0-2
changelog:
  - Remove unused beta macro from spec
  - add support for setting default PG stream using
    postgresql_default macro


author: Filip Janus <fjanus@redhat.com> - 16.1-2
changelog:
  - Add symbol any to ensure conflict with othere postgresql streams
  - sympol postgresql is now used only for setting the default version
    of postgresql in the repository
  - It was done due to dnf feature. more about it:
    https://github.com/rpm-software-management/dnf5/issues/620


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.19.6-3
changelog:
  - Remove unnecessary explicit pkgconfig dependencies
  - Remove an obsolete workaround for failing Java tests
  - Remove conditionals for retired 32-bit ARM architecture
  - Remove a slow-test workaround on s390x
  - Reduce macro indirection in the spec file


author: Brian C. Lane <bcl@redhat.com> - 3.52-1
changelog:
  - Deprecate %packages --instLangs and --excludeWeakdeps kickstart options (vponcova)
  - Deprecate timezone --isUtc, --ntpservers and --nontp kickstart options (vponcova)
  - Fix the assert_removed check in the unit tests (vponcova)
  - Remove the repo --ignoregroups kickstart option in Fedora 40 (vponcova)
  - Remove the logging --level kickstart option in Fedora 40 (vponcova)
  - Remove the method kickstart command in Fedora 40 (vponcova)
  - Remove the autostep kickstart command in Fedora 40 (vponcova)
  - requirements: Add setuptools (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.52.1-1
changelog:
  - New release: 3.52.1 (bcl)
    Resolves: RHEL-30566
  - docs: Generate RHEL10 docs (bcl)
  - Makefile: Use .z for scratch builds too (bcl)
  - rhel10: autopart on RHEL does not support --type=btrfs (bcl)
  - rhel10: Add test for btrfs command deprecation (bcl)
  - rhel10: Add missing rhsm and syspurpose commands (bcl)
  - Update RHEL 9 handler (bcl)
  - Update RHEL 10 handler classes (bcl)
  - tox.ini: Only test with Python 3.12 to speed things up (bcl)
  - Add RHEL 10 handler (RHEL-30566) (bcl)
  - Use .z version for new builds, start with 3.52.0 (bcl)
  - workflow: Use python 3.12.2 for tests (bcl)
  - workflow: Bump checkout and setup-python actions to new versions (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.52.2-1
changelog:
  - Switch DEFAULT_VERSION to RHEL10 (bcl)
    Resolves: RHEL-30566
  - Add a DEFAULT_VERSION variable to version.py (bcl)
  - Deprecate network team options on RHEL 10 (rvykydal)


author: Brian C. Lane <bcl@redhat.com> - 3.52.3-1
changelog:
  - btrfs: Remove support for the btrfs command on RHEL10 (bcl)
    Resolves: RHEL-34009
  - Deprecate modularity on RHEL 10 (marusak.matej)
    Resolves: RHEL-34829


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Jindrich Novy <jnovy@redhat.com> - 3:5.0.0-1
changelog:
  - python-podman-5.0.0-1.el10
  - update to https://github.com/containers/podman-py/releases/tag/v5.0.0
  - Related: RHEL-34195


author: Ondrej Sloup <osloup@redhat.com> - 2.9.6-4
changelog:
  - Update license and use SPDX formula according to fedora-license-data
  - https://gitlab.com/fedora/legal/fedora-license-data/-/issues/153


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Miro Hrončok <mhroncok@redhat.com> - 3.12.2-3
changelog:
  - Fix tests for XMLPullParser with Expat 2.6.0
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Panu Matilainen <pmatilai@redhat.com> - 4.18.92-3
changelog:
  - Fix regression on uncompressing 7zip compressed sources (#2229984)
  - Fix a conflict with pre-existing scl-utils %_root_prefix macro (#2233454)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.0-2
changelog:
  - Ensure central package ops log via rpm-plugin-audit recommends (#1476926)
  - Own our Python module directory (#2248555)
  - Fix sysusers.d generator barfing on legit content (#2246236)


author: Petr Lautrbach <lautrbach@redhat.com> - 4.4.2-4
changelog:
  - Disable/remove neverallow options in sediff.
  - Improve man pages
  - seinfoflow: Add -r option to get flows into the source type.
  - seinfoflow.1: Remove references to sepolgen permission map.
  - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy.
  - SELinuxPolicy: Add explicit cast for libspol message


author: Pino Toscano <ptoscano@redhat.com> 1.29.32-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - utils: import pkg_resources only when needed (ptoscano@redhat.com)
  - ENT-5536: Fix FileMonitor tests (mhorky@redhat.com)
  - Alter import of rhsm.config functions (mhorky@redhat.com)
  - Handle tests in containers better (mhorky@redhat.com)
  - Call parent methods in DBusServerStubProvider (mhorky@redhat.com)
  - Base D-Bus tests on SubManFixture (mhorky@redhat.com)
  - ENT-5532: Call rhsm-package-profile-uploader with --force-upload
    (jhnidek@redhat.com)
  - 2108549: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - Resolved issues in PR feedback (jajerome@redhat.com)
  - Updated request handling in connection.py (jajerome@redhat.com)
  - Resolve issues from PR review (jajerome@redhat.com)
  - Removed fixme since activateMachine() is still used (jajerome@redhat.com)
  - Black/flake8 fixes (jajerome@redhat.com)
  - FIXME: renamed default argument to not shadow inbuilt type
    (jajerome@redhat.com)
  - FIXME: removed Restlib and using only BaseRestLib (jajerome@redhat.com)
  - FIXME: updated unregisterConsumer() to return True if status code is 204
    (jajerome@redhat.com)
  - FIXME: changed unbindBySerial/unbindByPoolId to return bool
    (jajerome@redhat.com)
  - FIXME: changed default value of facts in updateConsumerFacts()
    (jajerome@redhat.com)
  - FIXME: sanitized email/lang variables in activateMachine()
    (jajerome@redhat.com)
  - FIXME: made email argument required in activatemachine()
    (jajerome@redhat.com)
  - FIXME: changed default value of serials argument to None
    (jajerome@redhat.com)
  - FIXME: removed unused username/password arguments (jajerome@redhat.com)
  - FIXME: raise exceptions where sanitizing guest Id returns None
    (jajerome@redhat.com)
  - FIXME: renamed response argument to result in validateResponse()
    (jajerome@redhat.com)
  - FIXME: rename info argument to params in _request() (jajerome@redhat.com)
  - FIXME: added error message when redeeming subscription fails
    (jajerome@redhat.com)
  - FIXME: removed unused UEPConnection class methods (jajerome@redhat.com)
  - Fixed profile tests setting Package release numbers as int instead of str
    (jajerome@redhat.com)
  - FIXME: changed epoch data type to str in Package class (jajerome@redhat.com)
  - FIXME: added null-checks for stdout/stderr wrapper (jajerome@redhat.com)
  - FIXME: re-iterated a fix is not needed for urlparse (jajerome@redhat.com)
  - FIXME: added exception messages to parse_url() (jajerome@redhat.com)
  - FIXME: changed  lists to tuples in StatusSpinnerStyle class
    (jajerome@redhat.com)
  - FIXME: fixed type hints for _normalize_string() (jajerome@redhat.com)
  - FIXME: use super() instead of class name (jajerome@redhat.com)
  - FIXME: fixed strings not being translated in is_log_level_valid()
    (jajerome@redhat.com)
  - FIXME: resolved improper use of tempfile in save() (jajerome@redhat.com)
  - FIXME: fixed config_file argument not being used in save()
    (jajerome@redhat.com)
  - FIXME: updated default value for files_name argument in read()
    (jajerome@redhat.com)
  - FIXME: fixed minor typo in bogus() (jajerome@redhat.com)
  - FIXME: changed read() to return self instead of None (jajerome@redhat.com)
  - FIXME: set default argument 'facts' to None in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: renamed argument 'type' to 'consumer_type' in registerConsumer()
    (jajerome@redhat.com)
  - FIXME: ping() resolved in rhsm/connection.py (jajerome@redhat.com)
  - Remove test dependency 'mock' (mhorky@redhat.com)
  - Fix failures of D-Bus' Register tests (mhorky@redhat.com)
  - Mark D-Bus tests (mhorky@redhat.com)
  - 2131789: Outsource uploading DNF profile to rhsmcertd (jhnidek@redhat.com)
  - Catch generic OSError during HTTPSConnection.connect() (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (French) (vincent.lefebvre59@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Fix formatting of proxy errors w/o errno (ptoscano@redhat.com)
  - Catch also CertificateLoadingError for identity cert loading
    (ptoscano@redhat.com)
  - ENT-4286: Additional fix for exception handling (jajerome@redhat.com)
  - Remove D-Bus env vars from container and CI files (mhorky@redhat.com)
  - 2121350: Implement "force" register option in rhsm dbus python binding
    (jajerome@redhat.com)
  - Show locals in pytest output (mhorky@redhat.com)
  - Improve formatting of CertificateLoadingError (ptoscano@redhat.com)
  - Raise a new CertificateLoadingError on X.509 loading failures
    (ptoscano@redhat.com)
  - Improve formatting of UnknownContentException (ptoscano@redhat.com)
  - connection: improve the internal UnknownContentException
    (ptoscano@redhat.com)
  - utils: add terminal_printable_content (ptoscano@redhat.com)
  - connection: rename NetworkException to UnknownContentException
    (ptoscano@redhat.com)
  - Improve formatting of ProxyException (ptoscano@redhat.com)
  - connection: improve the internal ProxyException (ptoscano@redhat.com)
  - Improve formatting of socket.gaierror (ptoscano@redhat.com)
  - Improve formatting of ConnectionError (ptoscano@redhat.com)
  - Improve formatting of BadCertificateException (ptoscano@redhat.com)
  - connection: extend BadCertificateException w/ SSL exception
    (ptoscano@redhat.com)
  - connection: drop dead code (ptoscano@redhat.com)
  - ENT-4286: Simplify exception reporting with system_exit()
    (jajerome@redhat.com)
  - 2136694: Clear progress messages properly (mhorky@redhat.com)
  - rhsmcertd reads default_log_level from rhsm.conf (jhnidek@redhat.com)
  - 2097679: Additional fix for non-interactive parameters (jajerome@redhat.com)
  - 2097679: Fixed script hang in non-interactive execution (jajerome@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.33-1
changelog:
  - Translated using Weblate (French) (ljanda@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Japanese) (ljanda@redhat.com)
  - Translated using Weblate (French) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (jsefler@redhat.com)
  - ENT-5542: Build package using GitHub Actions (mhorky@redhat.com)
  - Test libdnf plugin using GitHub Actions (mhorky@redhat.com)
  - libdnf: fix return value of findProductId() (ptoscano@redhat.com)
  - ENT-5541: Publish PR coverage (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Kannada) (jsefler@redhat.com)
  - Translated using Weblate (Spanish) (ptoscano@redhat.com)
  - Simplify test setup for D-Bus fact collection (mhorky@redhat.com)
  - ENT-3759: Test on GitHub Actions (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.34-1
changelog:
  - Update TESTING.md (mhorky@redhat.com)
  - Improved debug print of http traffic, when proxy is used (jhnidek@redhat.com)
  - ENT-5544: Remove Jenkins jobs, Containers (mhorky@redhat.com)
  - ENT-5549: Remove unused code from entcertlib (mhorky@redhat.com)
  - ENT-5549: Fix issues found when type-hinting (mhorky@redhat.com)
  - ENT-5549: Fix return code handling of CLI (mhorky@redhat.com)
  - ENT-5549: Fix found type hint issues (mhorky@redhat.com)
  - ENT-5549: Fix object instantiation in EntitlementDirectory
    (mhorky@redhat.com)
  - ENT-5549: Refactor ProductDirectory (mhorky@redhat.com)
  - ENT-5549: Change internal implementation for some Cache methods
    (mhorky@redhat.com)
  - ENT-5549: Clean up _sync_with_server arguments of cache objects
    (mhorky@redhat.com)
  - ENT-5549: Remove 'autoheal' argument from Action clients (mhorky@redhat.com)
  - Refactored code a little bit (jhnidek@redhat.com)
  - 2093291: Make locking more reliable (jhnidek@redhat.com)
  - test: add simple test for 2178610 (ptoscano@redhat.com)
  - Small improvement of debugging of http traffic (jhnidek@redhat.com)
  - 2093883: Fix issue with race condition in rhsm.service (jhnidek@redhat.com)
  - 2178610: do not collect unentitled products in SCA mode (ptoscano@redhat.com)
  - 2174297: register: do a simple strip() on environment(s) input
    (ptoscano@redhat.com)
  - Stop subclassing 'object' (ptoscano@redhat.com)
  - Remove pytest arguments for CentOS 9 Stream image (mhorky@redhat.com)
  - tests: Install dnf-plugins-core every time (mhorky@redhat.com)
  - 2169251: connection: restore UEPConnection.getJob() (ptoscano@redhat.com)
  - ENT-5106: Type-hint subscription_manager/ files (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.35-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Clean up tests using Cloud What detectors properly (mhorky@redhat.com)
  - spec: Obsolete subscription-manager-migration (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Typo fixes (ptoscano@redhat.com)
  - Avoid string puzzle (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - 2189664: cache: fix SyspurposeComplianceStatusCache on failed load
    (ptoscano@redhat.com)
  - dbus: don't catch exceptions in DomainSocketServer.run()
    (ptoscano@redhat.com)
  - cli: directly exit on InvalidCLIOptionError (ptoscano@redhat.com)
  - Revert "ENT-5549: Fix return code handling of CLI" (ptoscano@redhat.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Update .git-blame-ignore-revs (mhorky@redhat.com)
  - Format code with black==23.3.0 (mhorky@redhat.com)
  - ENT-5535: Update black to version 23.3.0 (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.36-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-5581: Update messaging around the "container mode" (mhorky@redhat.com)
  - Remove 'dbus' marker for pytest (mhorky@redhat.com)
  - Rewrite D-Bus tests to be testable without pytest-forked (mhorky@redhat.com)
  - Drop further ethtool dependency mentions (mhorky@redhat.com)
  - tests: fix test_file_monitor without pyinotify (ptoscano@redhat.com)
  - tests: switch from imp to importlib (ptoscano@redhat.com)
  - Fix the order of user env var checking for translations.
    (tkuratom@redhat.com)
  - 2215974: Collect network facts using 'ip' (mhorky@redhat.com)
  - ENT-5582: Remove container detection envvar overwrite (mhorky@redhat.com)
  - ENT-5603: Explicitly check for provided entitlement certificates
    (mhorky@redhat.com)
  - fix test case (chambrid@redhat.com)
  - Collect GCP Project information as cloud facts (chambrid@redhat.com)
  - Collect Azure Subscription ID as a cloud fact (#3285) (chambrid@redhat.com)
  - ENT-5580: Disable the proper container detection (mhorky@redhat.com)
  - spec: convert License to SPDX (ptoscano@redhat.com)
  - 2093291: Make reading of cache file more reliable (jhnidek@redhat.com)
  - 2093291: Make code of DNF plugins testable (jhnidek@redhat.com)
  - spec: change subscription-manager dnf dep (ptoscano@redhat.com)
  - spec: update libdnf-plugin-subscription-manager deps (ptoscano@redhat.com)
  - tests: repair attach cases in SCA mode (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.37-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - 2225446: Hotfix of D-Bus policy (jhnidek@redhat.com)
  - TESTING: Update testing requirements (mhorky@redhat.com)
  - Use Fedora registry to pull container images (mhorky@redhat.com)
  - 2232316: dbus: check "force" again from the registration option
    (ptoscano@redhat.com)
  - dbus: run EntCertActionInvoker on PoolAttach (ptoscano@redhat.com)
  - ENT-5624: Properly translate error strings (mhorky@redhat.com)
  - Mock IOError for Insights fact collection tests (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.38-1
changelog:
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - ENT-5603: Fix a typo in a comment (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.39-1
changelog:
  - tito: drop bz requirement (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (jsefler@redhat.com)
  - RHEL-7206: Small change of message printed by dnf plugin (jhnidek@redhat.com)
  - CCT-118: Fix flake8 error E721 (mhorky@redhat.com)
  - Fix type hint in rhsm (mhorky@redhat.com)
  - Simplify autoregistration test setup (mhorky@redhat.com)
  - RHEL-9435: Get AWS metadata via IMDSv2 (mhorky@redhat.com)
  - Fixed inappropriate logical expression (ataf@openrefactory.com)
  - CCT-71: Try to ping server, when --proxy is used (jhnidek@redhat.com)
  - CCT-10: Ensure IPv6-based URLs are properly formatted (mhorky@redhat.com)
  - RPM: Avoid needless runtime requirement on python3-setuptools
    (miro@hroncok.cz)
  - cli: normalize hostname in error message (ptoscano@redhat.com)
  - connection: normalize hostname in ConnectionOSErrorException
    (ptoscano@redhat.com)
  - Improved printing of addresses and URLs (jhnidek@redhat.com)
  - Use username and password from --proxy=URL (jhnidek@redhat.com)
  - Use parse_url() from utils.py for parsing URL, when --proxy is used.
    (jhnidek@redhat.com)
  - 2225403: Parse URL properly (jhnidek@redhat.com)


author: Packit <hello@packit.dev> - 1.29.40-1
changelog:
  - Automatic commit of package [subscription-manager] release [1.29.40-1]. (Pino Toscano)
  - Translated using Weblate (Korean) (김인수)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (Jingge Chen)
  - spec: Add missing GLib dependency when building without DNF (Debarshi Ray)
  - Remove deprecated `locale.*()` functions (mhorky)
  - Remove version constraint of pytest (mhorky)
  - RHEL-15110: RegisterServer is stopped, when not needed (Jiri Hnidek)
  - RHEL-15110: Fix issue with registration using gsd-subman (Jiri Hnidek)
  - Fix an error in debug logging of cloud-what (mhorky)
  - ci: bump actions/upload-artifact from 3 to 4 (dependabot[bot])
  - Improve debug logging to make it faster to understand (mhorky)
  - Resolves rhbz#2258965


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Paul Wouters <paul.wouters@aiven.io - 1.17.1-1
changelog:
  - Resolved rhbz#2160397 unbound-1.17.1 is available (bugfix release)
  - Add support for building with redis


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-1
changelog:
  - Rebase to QEMU 8.2.0 [RHEL-14111]
  - Fix machine type compatibility [RHEL-17067 RHEL-17068]
  - Add 9.4.0 machine type [RHEL-17168 RHEL-19117 RHEL-19119]
  - Resolves: RHEL-14111
    (Rebase qemu-kvm to QEMU 8.2.0)
  - Resolves: RHEL-17067
    (Check/fix machine type compatibility for qemu-kvm 8.2.0 [s390x])
  - Resolves: RHEL-17068
    (Check/fix machine type compatibility for qemu-kvm 8.2.0 [x86_64])
  - Resolves: RHEL-17168
    (Introduce virt-rhel9.4.0 arm-virt machine type [aarch64])
  - Resolves: RHEL-19117
    (Introduce virt-rhel9.4.0 arm-virt machine type [x86_64])
  - Resolves: RHEL-19119
    (Introduce virt-rhel9.4.0 arm-virt machine type [s390x])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-1
changelog:
  - Rebase to QEMU 9.0.0 [RHEL-28852]
  - Resolves: RHEL-28852
    (Rebase qemu-kvm to QEMU 9.0.0 for RHEL 10.0 beta)
  - Resolves: RHEL-23771
    ([qemu-kvm] Disable passthrough of pmem device)
  - Resolves: RHEL-34024
    (Remove RDMA migration support
  - Resolves: RHEL-30366
    (Check/fix machine type compatibility for QEMU 9.0.0 [x86_64][rhel-10.0 Beta])
  - Resolves: RHEL-30367
    (Check/fix machine type compatibility for QEMU 9.0.0 [aarch64][rhel-10.0 Beta])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-2
changelog:
  - kvm-Enable-vhost-user-snd-pci-device.patch [RHEL-37563]
  - Resolves: RHEL-37563
    (Enable 'vhost-user-snd-pci' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-qtest-x86-numa-test-do-not-use-the-obsolete-pentium-.patch [RHEL-28972]
  - kvm-tests-qtest-libqtest-add-qtest_has_cpu_model-api.patch [RHEL-28972]
  - kvm-tests-qtest-x86-check-for-availability-of-older-cpu-.patch [RHEL-28972]
  - kvm-target-cpu-models-x86-Remove-the-existing-deprecated.patch [RHEL-28972]
  - kvm-x86-cpu-deprecate-cpu-models-that-do-not-support-x86.patch [RHEL-28971]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-36329]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-36329]
  - kvm-s390x-remove-deprecated-rhel-machine-types.patch [RHEL-39898]
  - kvm-s390x-select-correct-components-for-no-board-build.patch [RHEL-39898]
  - kvm-target-s390x-Add-a-CONFIG-switch-to-disable-legacy-C.patch [RHEL-39898]
  - kvm-target-s390x-cpu_models-Disable-everything-up-to-the.patch [RHEL-39898]
  - kvm-target-s390x-Revert-the-old-s390x-CPU-model-disablem.patch [RHEL-39898]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-43409 RHEL-43410]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-43409 RHEL-43410]
  - Resolves: RHEL-28972
    (x86: Remove the existing deprecated CPU models on RHEL10)
  - Resolves: RHEL-28971
    (Consider deprecating CPU models like "Nehalem" / "IvyBridge" on RHEL 10)
  - Resolves: RHEL-36329
    ([RHEL10.0.beta][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)
  - Resolves: RHEL-39898
    (s390: Remove the legacy CPU models on RHEL10)
  - Resolves: RHEL-43409
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-43410
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-46239]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-46239]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-46239]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-46239]
  - Resolves: RHEL-46239
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-10.0])


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added patch to fix -s option in hackbench
  - Added patch to prevent user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36745


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.6-14
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Backport PR 3061 to save LVM pool metadata volume size in disk layout
      and restore it
    - Backport PR 3058 to skip useless xfs mount options when mounting
      during recovery, prevents mount errors like "logbuf size must be greater
      than or equal to log stripe size"
    - Add patch to force removal of lvmdevices, prevents LVM problems after
      restoring to different disks/cloning. Upstream PR 3043
    - Add patch to start rsyslog and include NBU systemd units
    - Apply PR 3027 to ensure correct creation of the rescue environment
      when a file is shrinking while being read
    - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
    - Apply upstream patch for temp dir usage with LUKS to ensure
      that during recovery an encrypted disk can be unlocked using a keyfile
    - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
    - Correct a mistake done when backporting PR 2691
    - Backport PR2943 to fix s390x dasd formatting
    - Require s390utils-{core,base} on s390x
    - Apply PR2903 to protect against colons in pvdisplay output
    - Apply PR2873 to fix initrd regeneration on s390x
    - Apply PR2431 to migrate XFS configuration files
    - Exclude /etc/lvm/devices from the rescue system to work around a segfault
      in lvm pvcreate
    - Avoid stderr message about irrelevant broken links
    - Changes for NetBackup (NBU) 9.x support
    - Backport PR2831 - rsync URL refactoring
      fixes rsync OUTPUT_URL when different from BACKUP_URL
    - Apply PR2795 to detect changes in system files between backup
      and rescue image
    - Apply PR2808 to exclude dev/watchdog* from recovery system
    - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
      on stdin
    - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
    - Recommend dosfstools on x86_64, needed for EFI System Partition
    - Backport PR2825 to replace defunct mkinitrd with dracut
    - Apply PR2580 to load the nvram module in the rescue environment in order
      to be able to set the boot order on ppc64le LPARs
    - Backport PR2822 to include the true vi executable in rescue ramdisk
    - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
    - Apply PR2603 to ignore unused PV devices
    - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
    - Remove unneeded xorriso dep on s390x (no ISO image support there)
    - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
      options
    - Add patch for better handling of thin pools and other LV types not supported
      by vgcfgrestore
    - Sync spec changes and downstream patches from RHEL 8 rear-2.6-2
      - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
        Resolves: rhbz1993296
      - On POWER add bootlist & ofpathname to the list of required programs
        conditionally (bootlist only if running under PowerVM, ofpathname
        always except on PowerNV) - upstream PR2665, add them to package
        dependencies
        Resolves: rhbz1983013
      - Backport PR2608:
        Fix setting boot path in case of UEFI partition (ESP) on MD RAID
        Resolves: rhbz1945869
      - Backport PR2625
        Prevents accidental backup removal in case of errors
        Resolves: rhbz1958247
      - Fix rsync error and option handling
        Resolves: rhbz1930662
    - Put TMPDIR on /var/tmp by default, otherwise it may lack space
      RHBZ #1988420, upstream PR2664
    - Sync spec changes and downstream patches from RHEL 8
      - Require xorriso instead of genisoimage
      - Add S/390 support and forgotten dependency on the file utility
      - Backport upstream code related to LUKS2 support
      - Modify the cron command to avoid an e-mail with error message after
        ReaR is installed but not properly configured when the cron command
        is triggered for the first time
      - Changes for NetBackup (NBU) support, upstream PR2544
    - Add dependency on dhcp-client, RHBZ #1926451


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-8
changelog:
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!) chronologically
    from the latest:
    - Resolve libs for executable links in COPY_AS_IS, PR 3073
    - Skip invalid disk drives when saving layout PR 3047
    - Do not delete NetBackup logs in case of errors and save
      /usr/openv/netbackup/logs to the restored system after a successful recovery
    - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
      with NetBackup 10.2.0.1
    - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Alba Hita Catala <ahitacat@redhat.com> - 0.2.4-1
changelog:
  - Configure proxy for http connections (RHBZ#2227018)
  - Failling to get system profile is not an error but a warning (RHBZ#2227012)
  - Prevent message content being logged at any level (RHBZ#2227010)
  - Added bash completion (RHBZ#2145198)


author: Link Dupont <link@redhat.com> - 0.2.4-5
changelog:
  - Update embedded yggdrasil-worker-package-manager to 0.1.3 (RHEL-17179)
  - Update embedded yggdrasil to 0.2.4 (RHEL-17179)


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.20
changelog:
  - Resolves: RHEL-16964 : rhc - new rhc_insights.display_name parameter
  - Resolves: RHEL-16552 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes error handling


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.21
changelog:
  - Resolves: RHEL-16336 : bootloader - Create bootloader role (MVP)
    fix issue with path on arches other than x86_64, and EFI systems
  - Resolves: RHEL-3253 : RHEL for Edge support in system roles
    cockpit - fixed issue with test cleanup
    postgresql - fixed issue with test cleanup


author: Rich Megginson <rmeggins@redhat.com> - 1.76.2-0.1
changelog:
  - Fix ansible-test issues
    Ensure "WARNING: " is quoted in description string
    Package doc_fragments for vendored modules
    Fix wrong collection deprecation error
    undefine __brp_mangle_shebangs because ansible-test does not like shebangs in executable files
    ensure that any files removed during the build/install process are also removed
    from ignore files
  - Resolves: RHEL-34883 : ad_integration - fix: Sets domain name lower case in realmd.conf section header [rhel-10]
  - Resolves: RHEL-34881 : bootloader - bootloader role tests do not work on ostree [rhel-10]
  - Resolves: RHEL-34893 : ha_cluster - [RFE] ha_cluster_node_options allows per-node addresses and SBD options to be set [rhel-10]
  - Resolves: RHEL-34894 : ha_cluster - [RFE] make it easier to install cloud agents [rhel-10]
  - Resolves: RHEL-34898 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - ACL Support [rhel-10]
  - Resolves: RHEL-34892 : journald - feat: Add options for rate limit interval and burst [rhel-10]
  - Resolves: RHEL-34896 : network - Make sure that the network role CI is solid robust [rhel-10]
  - Resolves: RHEL-34888 : podman - fix: do not use become for changing hostdir ownership, and expose subuid/subgid info [rhel-10]
  - Resolves: RHEL-34889 : podman - fix: use correct user for cancel linger file name [rhel-10]
  - Resolves: RHEL-34890 : podman - podman role should support default credentials and per-unit credentials [rhel-10]
  - Resolves: RHEL-34879 : sshd - second SSHD service broken [rhel-10]
  - Resolves: RHEL-34908 : storage - [RHEL9]  storage role resize volume  failed [rhel-10]
  - Resolves: RHEL-34907 : storage - Running rhel-system-roles.storage w/ type: raid a second time, fails if existing RAID device has stratis installed on them. [rhel-10]
  - Resolves: RHEL-34895 : storage - rhel-system-role.storage is not idempotent [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.77.0-0.1
changelog:
  - Resolves: RHEL-34897 :  - package rhel-system-roles.noarch does not provide docs for ansible-doc [rhel-10]
  - Resolves: RHEL-34885 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - Utilization Support [rhel-10]
  - Resolves: RHEL-34886 : ha_cluster - Fix inconsistent approach for multiple `attributes.attrs` in `ha_cluster_node_options` [rhel-10]
  - Resolves: RHEL-34887 : network - Fix testing Failures due to connection.autoconnect-ports Unknown Property [rhel-10]
  - Resolves: RHEL-34884 : podman - feat: manage TLS cert/key files for registry connections and validate certs [rhel-10]
  - Resolves: RHEL-34890 : podman - podman role should support default credentials and per-unit credentials [rhel-10]
  - Resolves: RHEL-34891 : podman - podman role should support containers-auth.json [rhel-10]
  - Resolves: RHEL-34895 : storage - rhel-system-role.storage is not idempotent [rhel-10]


author: Sergei Petrosian <spetrosi@redhat.com> - 1.79.0-0.1
changelog:
  - Resolves: RHEL-38456 : logging - Setup imuxsock using rhel-system-roles.logging causing an error EL10
  - Resolves: RHEL-37551 : sudo - Add sudo system role EL10


author: Rich Megginson <rmeggins@redhat.com> - 1.79.0-0.2
changelog:
  - Resolves: RHEL-40759 : bootloader - fix: Set user.cfg path to /boot/grub2/ on EL 9 UEFI [rhel-10]
  - Resolves: RHEL-38456 : logging - Setup imuxsock using rhel-system-roles.logging causing an error EL10
    fix test
  - Resolves: RHEL-40760 : podman - grab name of network to remove from quadlet file
  - Resolves: RHEL-40795 : podman - Create podman secret when skip_existing=True and it does not exist [rhel-10]
  - Resolves: RHEL-40181 : ssh - feat: Add new configuration options and remove false positives in the test
  - Resolves: RHEL-40798 : storage - [RFE] manage stratis [rhel-10]
  - Resolves: RHEL-34895 : storage - rhel-system-role.storage is not idempotent [rhel-10]
  - Resolves: RHEL-40797 : storage - [RHEL9][RFE] resize LVM PVs [rhel-10]
  - Resolves: RHEL-40796 : storage - [RHEL8 ] var unused_disks get different sector size disks    [rhel-10]


author: Rich Megginson <rmeggins@redhat.com> - 1.79.0-0.3
changelog:
  - add patch for https://github.com/containers/ansible-podman-collections/pull/784
    this is blocking gating tests


author: Rich Megginson <rmeggins@redhat.com> - 1.82.0-0.1
changelog:
  - Resolves: RHEL-45944 : cockpit - cockpit install all wildcard match does not work in newer el9
  - Resolves: RHEL-45718 : nbde_client - feat: Allow initrd configuration to be skipped
  - Implements meta/main.yml el10 support in most roles


author: Rich Megginson <rmeggins@redhat.com> - 1.83.0-0.1
changelog:
  - Resolves: RHEL-46855 : postfix - feat: Added postfix_files feature as a simple means to add extra files/maps to config
  - Resolves: RHEL-48230 : snapshot - feat: rewrite snapshot.py as an Ansible module / add support for thin origins


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.0-5
changelog:
  - Filter out python-missing-require warnings,
    Fedora's style of Python requirements is not supported
  - Resolves: rhbz#2260169


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-1
changelog:
  - New version 3.2.5
  - Resolves: #2115430 - remote arbitrary files write inside the directories of connecting peers
  - Fix for CVE-2022-37434


author: Michal Ruprich <mruprich@redhat.com> - 3.2.6-2
changelog:
  - Resolves: #2128682 - rsync fail with "ERROR: rejecting unrequested file-list name..." depend of parameters order


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 40.10-1
changelog:
  - Allow chronyd-restricted read chronyd key files
  - Allow conntrackd_t to use bpf capability2
  - Allow systemd-networkd manage its runtime socket files
  - Allow init_t nnp domain transition to colord_t
  - Allow polkit status systemd services
  - nova: Fix duplicate declarations
  - Allow httpd work with PrivateTmp
  - Add interfaces for watching and reading ifconfig_var_run_t
  - Allow collectd read raw fixed disk device
  - Allow collectd read udev pid files
  - Set correct label on /etc/pki/pki-tomcat/kra
  - Allow systemd domains watch system dbus pid socket files
  - Allow certmonger read network sysctls
  - Allow mdadm list stratisd data directories
  - Allow syslog to run unconfined scripts conditionally
  - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
  - Allow qatlib set attributes of vfio device files


author: Zdenek Pytela <zpytela@redhat.com> - 40.11-1
changelog:
  - Replace init domtrans rule for confined users to allow exec init
  - Update dbus_role_template() to allow user service status
  - Allow polkit status all systemd services
  - Allow setroubleshootd create and use inherited io_uring
  - Allow load_policy read and write generic ptys
  - Allow gpg manage rpm cache
  - Allow login_userdomain name_bind to howl and xmsg udp ports
  - Allow rules for confined users logged in plasma
  - Label /dev/iommu with iommu_device_t
  - Remove duplicate file context entries in /run
  - Dontaudit getty and plymouth the checkpoint_restore capability
  - Allow su domains write login records
  - Revert "Allow su domains write login records"
  - Allow login_userdomain delete session dbusd tmp socket files
  - Allow unix dgram sendto between exim processes
  - Allow su domains write login records
  - Allow smbd_t to watch user_home_dir_t if samba_enable_home_dirs is on


author: Zdenek Pytela <zpytela@redhat.com> - 40.12-1
changelog:
  - Rename all /var/lock file context entries to /run/lock
  - Rename all /var/run file context entries to /run
  - Invert the "/var/run = /run" equivalency


author: Zdenek Pytela <zpytela@redhat.com> - 40.13-1
changelog:
  - Only allow confined user domains to login locally without unconfined_login
  - Add userdom_spec_domtrans_confined_admin_users interface
  - Only allow admindomain to execute shell via ssh with ssh_sysadm_login
  - Add userdom_spec_domtrans_admin_users interface
  - Move ssh dyntrans to unconfined inside unconfined_login tunable policy
  - Update ssh_role_template() for user ssh-agent type
  - Allow init to inherit system DBus file descriptors
  - Allow init to inherit fds from syslogd
  - Allow any domain to inherit fds from rpm-ostree
  - Update afterburn policy
  - Allow init_t nnp domain transition to abrtd_t


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.1-1
changelog:
  - Allow logwatch read logind sessions files
  Resolves: RHEL-30441
  - Allow sulogin relabel tty1
  Resolves: RHEL-30440
  - Dontaudit sulogin the checkpoint_restore capability
  Resolves: RHEL-30440
  - Allow postfix smtpd map aliases file
  Resolves: RHEL-35544
  - Ensure dbus communication is allowed bidirectionally
  Resolves: RHEL-35783
  - Allow various services read and write z90crypt device
  Resolves: RHEL-28539
  - Allow dhcpcd use unix_stream_socket
  Resolves: RHEL-33081
  - Allow xdm_t to watch and watch_reads mount_var_run_t
  Resolves: RHEL-36073
  - Allow plymouthd log during shutdown
  Resolves: RHEL-30455
  - Update rpm configuration for the /var/run equivalency change
  Resolves: RHEL-36094


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.2-1
changelog:
  - Allow all domains read and write z90crypt device
  Resolves: RHEL-28539
  - Allow dhcpc read /run/netns files
  Resolves: RHEL-39510
  - Allow bootupd search efivarfs dirs
  Resolves: RHEL-39514


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.3-1
changelog:
  - Allow virtqemud manage nfs files when virt_use_nfs boolean is on
  Resolves: RHEL-40205
  - Allow virt_driver_domain read files labeled unconfined_t
  Resolves: RHEL-40262
  - Allow virt_driver_domain dbus chat with policykit
  Resolves: RHEL-40346
  - Escape "interface" as a file name in a virt filetrans pattern
  Resolves: RHEL-34769
  - Allow setroubleshootd get attributes of all sysctls
  Resolves: RHEL-40923
  - Allow qemu-ga read vm sysctls
  Resolves: RHEL-40829
  - Allow sbd to trace processes in user namespace
  Resolves: RHEL-39989
  - Allow request-key execute scripts
  Resolves: RHEL-38920
  - Update policy for haproxyd
  Resolves: RHEL-40877


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.4-1
changelog:
  - Confine libvirt-dbus
  Resolves: RHEL-37822
  - Allow sssd create and use io_uring
  Resolves: RHEL-43448
  - Allow virtqemud the kill capability in user namespace
  Resolves: RHEL-44996
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-44191
  - Allow virtqemud read vm sysctls
  Resolves: RHEL-40938
  - Allow svirt_t read vm sysctls
  Resolves: RHEL-40938
  - Allow rshim get options of the netlink class for KOBJECT_UEVENT family
  Resolves: RHEL-40859
  - Allow systemd-hostnamed read the vsock device
  Resolves: RHEL-45309
  - Allow systemd (PID 1) manage systemd conf files
  Resolves: RHEL-45304
  - Allow journald read systemd config files and directories
  Resolves: RHEL-45304
  - Allow systemd_domain read systemd_conf_t dirs
  Resolves: RHEL-45304
  - Label systemd configuration files with systemd_conf_t
  Resolves: RHEL-45304
  - Allow dhcpcd the kill capability
  Resolves: RHEL-43417
  - Add support for libvirt hooks
  Resolves: RHEL-41168


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1
changelog:
  - Allow to create and delete socket files created by rhsm.service
  Resolves: RHEL-40857
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-40350
  - Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
  Resolves: RHEL-37822
  - Allow virtqemud read virt-dbus process state
  Resolves: RHEL-37822
  - Allow virtqemud run ssh client with a transition
  Resolves: RHEL-43215
  - Allow virtnetworkd exec shell when virt_hooks_unconfined is on
  Resolves: RHEL-41168
  - Allow NetworkManager the sys_ptrace capability in user namespace
  Resolves: RHEL-46717
  - Update keyutils policy
  Resolves: RHEL-38920
  - Allow ip the setexec permission
  Resolves: RHEL-41182


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


