# changelog

author: CKI KWF Bot <cki-ci-bot+kwf-gitlab-com@redhat.com> [6.12.0-167.el10]
changelog:
  - Add CONFIG_HTMDUMP (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add documentation for H_HTM debugfs interface (Mamatha Inamdar) [RHEL-102163]
  - docs: powerpc: Add htm.rst to table of contents (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm capabilities support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm flags support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm setup support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm info support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm status support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm start support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm configure support to htmdump module (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries/htmdump: Add htm_hcall_wrapper to integrate other htm operations (Mamatha Inamdar) [RHEL-102163]
  - powerpc: Document details on H_HTM hcall (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries: Export hardware trace macro dump via debugfs (Mamatha Inamdar) [RHEL-102163]
  - powerpc/pseries: Macros and wrapper functions for H_HTM call (Mamatha Inamdar) [RHEL-102163]
  - scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Xuemin Li) [RHEL-126194]
  - platform/x86/intel/pmt: support BMG crashlog (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: use a version struct (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: refactor base parameter (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: add register access helpers (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: decouple sysfs and namespace (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: correct types (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: re-order trigger logic (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: use guard(mutex) (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: mutex clean up (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: white space cleanup (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: fix a crashlog NULL pointer access (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: fix build dependency for kunit test (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/discovery: fix format string warning (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/discovery: Fix size_t specifiers for 32-bit (Steve Best) [RHEL-119042]
  - redhat/configs: disable CONFIG_INTEL_PMT_KUNIT_TEST (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: KUNIT test for PMT Enhanced Discovery API (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/telemetry: Add API to retrieve telemetry regions by feature (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt/discovery: Get telemetry attributes (Steve Best) [RHEL-119042]
  - platform/x86/intel/tpmi: Get OOBMSM CPU mapping from TPMI (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Set OOBMSM to CPU mapping (Steve Best) [RHEL-119042]
  - platform/x86/intel/tpmi: Relocate platform info to intel_vsec.h (Steve Best) [RHEL-119042]
  - MAINTAINERS: adjust file entry in INTEL TPMI DRIVER (Steve Best) [RHEL-119042]
  - platform/x86: intel: Add 'intel' prefix to the modules automatically (Steve Best) [RHEL-119042]
  - platform/x86/intel/pmt: Add PMT Discovery driver (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add new Discovery feature (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add Diamond Rapids support (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Skip driverless features (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Skip absent features during initialization (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add device links to enforce dependencies (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Create wrapper to walk PCI config space (Steve Best) [RHEL-119042]
  - platform/x86/intel/vsec: Add private data for per-device data (Steve Best) [RHEL-119042]
  - blk-mq: fix elevator depth_updated method (Ming Lei) [RHEL-124151]
  - lib/sbitmap: make sbitmap_get_shallow() internal (Ming Lei) [RHEL-124151]
  - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap (Ming Lei) [RHEL-124151]
  - x86/amd_node: Fix AMD root device caching (Steve Best) [RHEL-127698]
  - x86/amd_node: Add support for debugfs access to SMN registers (Steve Best) [RHEL-127698]
  - x86/amd_node: Add SMN offsets to exclusive region access (Steve Best) [RHEL-127698]
  - x86/cpu: Add/fix core comments for {Panther,Nova} Lake (Steve Best) [RHEL-127483]
  - x86/cpu: Rename and move CPU model entry for Diamond Rapids (Steve Best) [RHEL-127483]
  - tools/power turbostat: Fix incorrect sorting of PMT telemetry (Steve Best) [RHEL-127383]
  - efi: Explain OVMF acronym in OVMF_DEBUG_LOG help text (Lenny Szubowicz) [RHEL-100104]
  - efi: add API doc entry for ovmf_debug_log (Lenny Szubowicz) [RHEL-100104]
  - efi: add ovmf debug log driver (Lenny Szubowicz) [RHEL-100104]
  - redhat/configs: Enable CONFIG_OVMF_DEBUG_LOG in RHEL (Lenny Szubowicz) [RHEL-100104]
  - redhat/configs: enable Branch Record Buffer Extension for arm (Marcin Juszkiewicz) [RHEL-122953]
  - perf/dwc_pcie: Fix use of uninitialized variable (Marcin Juszkiewicz) [RHEL-122953]
  - perf: riscv: skip empty batches in counter start (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Fix CMN S3 DTM offset (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Prevent overflow in PERF_IDX2OFF() (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-40081}
  - drivers/perf: riscv: Remove redundant ternary operators (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Factor out PMCCNTR_EL0 use conditions (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Add support for FEAT_SPE_EFT extended filtering (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Expose event filter (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Support FEAT_SPEv1p4 filters (Marcin Juszkiewicz) [RHEL-122953]
  - perf/dwc_pcie: Support counting multiple lane events in parallel (Marcin Juszkiewicz) [RHEL-122953]
  - drivers: perf: use us_to_ktime() where appropriate (Marcin Juszkiewicz) [RHEL-122953]
  - perf: imx_perf: add support for i.MX94 platform (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Export PMU event info function (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Implement PMU event info function (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Add raw event v2 support (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Add SBI v3.0 flag (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-ni: Support sharing IRQs within an NI instance (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-ni: Consolidate CPU affinity handling (Marcin Juszkiewicz) [RHEL-122953]
  - perf/cxlpmu: Remove unintended newline from IRQ name format string (Marcin Juszkiewicz) [RHEL-122953]
  - perf/cxlpmu: Fix devm_kcalloc() argument order in cxl_pmu_probe() (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_spe: Relax period restriction (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Add support for the Branch Record Buffer Extension (BRBE) (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm: Add missing .suppress_bind_attrs (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Reduce stack usage during discovery (Marcin Juszkiewicz) [RHEL-122953]
  - perf: imx9_perf: make the read-only array mask static const (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Broaden module description for wider interconnect support (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-ni: Set initial IRQ affinity (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Add CMN S3 ACPI binding (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Initialise cmn->cpu earlier (Marcin Juszkiewicz) [RHEL-122953]
  - perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create() (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-38295}
  - perf/arm-cmn: Fix REQ2/SNP2 mixup (Marcin Juszkiewicz) [RHEL-122953]
  - perf: Do not enable by default during compile testing (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm-ni: Fix missing platform_set_drvdata() (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-38318}
  - perf: arm-ni: Unregister PMUs on probe failure (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-38168}
  - perf/arm-cmn: Remove CMN-600 DTC domain special case (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Fix missing io.h include (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Add PMEVFILT2R support (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Generalise event filtering (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm_cspmu: Move register definitons to header (Marcin Juszkiewicz) [RHEL-122953]
  - perf/dwc_pcie: fix duplicate pci_dev devices (Marcin Juszkiewicz) [RHEL-122953] {CVE-2025-37746}
  - perf/dwc_pcie: fix some unreleased resources (Marcin Juszkiewicz) [RHEL-122953]
  - perf/arm-cmn: Minor event type housekeeping (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Don't disable counter in armv8pmu_enable_event() (Marcin Juszkiewicz) [RHEL-122953]
  - perf: arm_pmuv3: Add support for ARM Rainier PMU (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Do not allow invalid raw event config (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Return error for default case (Marcin Juszkiewicz) [RHEL-122953]
  - drivers/perf: riscv: Fix Platform firmware event data (Marcin Juszkiewicz) [RHEL-122953]
  - drivers perf: remove unused field pmu_node (Marcin Juszkiewicz) [RHEL-122953]
  - arm64: sysreg: Add new PMSFCR_EL1 fields and PMSDSFR_EL1 register (Marcin Juszkiewicz) [RHEL-122953]
  - HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-102875]
  - redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
  - redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
  - platform/x86/intel/hid: Add Wildcat Lake support (Steve Best) [RHEL-95646]
  - platform/x86/intel: hid: Add Pantherlake support (Steve Best) [RHEL-95646]
  - platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet (Steve Best) [RHEL-95646]
  - intel-hid: fix volume buttons on Thinkpad X12 Detachable Tablet Gen 1 (Steve Best) [RHEL-95646]
  - selftests: bonding: add ipsec offload test (Hangbin Liu) [RHEL-97042]
  - selftests: bonding: add vlan over bond testing (Hangbin Liu) [RHEL-97042]
  - selftests: bonding: add test for LACP actor port priority (Hangbin Liu) [RHEL-97042]
  - bonding: support aggregator selection based on port priority (Hangbin Liu) [RHEL-97042]
  - bonding: fix NULL pointer dereference in actor_port_prio setting (Hangbin Liu) [RHEL-97042]
  - bonding: add support for per-port LACP actor priority (Hangbin Liu) [RHEL-97042]
  - HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124612] {CVE-2025-39806}
  - ext4: fail unaligned direct IO write with EINVAL (Brian Foster) [RHEL-121230]
  - iomap: Fix broken data integrity guarantees for O_SYNC writes (Brian Foster) [RHEL-121230]
  - iomap: build the writeback code without CONFIG_BLOCK (Brian Foster) [RHEL-121230]
  - iomap: add read_folio_range() handler for buffered writes (Brian Foster) [RHEL-121230]
  - iomap: improve argument passing to iomap_read_folio_sync (Brian Foster) [RHEL-121230]
  - iomap: replace iomap_folio_ops with iomap_write_ops (Brian Foster) [RHEL-121230]
  - iomap: export iomap_writeback_folio (Brian Foster) [RHEL-121230]
  - iomap: move folio_unlock out of iomap_writeback_folio (Brian Foster) [RHEL-121230]
  - iomap: rename iomap_writepage_map to iomap_writeback_folio (Brian Foster) [RHEL-121230]
  - iomap: move all ioend handling to ioend.c (Brian Foster) [RHEL-121230]
  - iomap: add public helpers for uptodate state manipulation (Brian Foster) [RHEL-121230]
  - iomap: hide ioends from the generic writeback code (Brian Foster) [RHEL-121230]
  - iomap: refactor the writeback interface (Brian Foster) [RHEL-121230]
  - iomap: cleanup the pending writeback tracking in iomap_writepage_map_blocks (Brian Foster) [RHEL-121230]
  - iomap: pass more arguments using the iomap writeback context (Brian Foster) [RHEL-121230]
  - iomap: header diet (Brian Foster) [RHEL-121230]
  - iomap: avoid unnecessary ifs_set_range_uptodate() with locks (Brian Foster) [RHEL-121230]
  - iomap: rework iomap_write_begin() to return folio offset and length (Brian Foster) [RHEL-121230]
  - iomap: push non-large folio check into get folio path (Brian Foster) [RHEL-121230]
  - iomap: helper to trim pos/bytes to within folio (Brian Foster) [RHEL-121230]
  - iomap: drop pos param from __iomap_[get|put]_folio() (Brian Foster) [RHEL-121230]
  - iomap: drop unnecessary pos param from iomap_write_[begin|end] (Brian Foster) [RHEL-121230]
  - iomap: resample iter->pos after iomap_write_begin() calls (Brian Foster) [RHEL-121230]
  - iomap: trace: Add missing flags to [IOMAP_|IOMAP_F_]FLAGS_STRINGS (Brian Foster) [RHEL-121230]
  - iomap: skip unnecessary ifs_block_is_uptodate check (Brian Foster) [RHEL-121230]
  - iomap: Fix conflicting values of iomap flags (Brian Foster) [RHEL-121230]
  - iomap: rework IOMAP atomic flags (Brian Foster) [RHEL-121230]
  - iomap: comment on atomic write checks in iomap_dio_bio_iter() (Brian Foster) [RHEL-121230]
  - iomap: inline iomap_dio_bio_opflags() (Brian Foster) [RHEL-121230]
  - iomap: fix inline data on buffered read (Brian Foster) [RHEL-121230]
  - iomap: Lift blocksize restriction on atomic writes (Brian Foster) [RHEL-121230]
  - iomap: Support SW-based atomic writes (Brian Foster) [RHEL-121230]
  - iomap: Rename IOMAP_ATOMIC -> IOMAP_ATOMIC_HW (Brian Foster) [RHEL-121230]
  - iomap: introduce a full map advance helper (Brian Foster) [RHEL-121230]
  - iomap: rename iomap_iter processed field to status (Brian Foster) [RHEL-121230]
  - iomap: remove unnecessary advance from iomap_iter() (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on pte and pmd faults (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on dedupe range (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on unshare range (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter on zero range (Brian Foster) [RHEL-121230]
  - dax: push advance down into dax_iomap_iter() for read and write (Brian Foster) [RHEL-121230]
  - dax: advance the iomap_iter in the read/write path (Brian Foster) [RHEL-121230]
  - iomap: convert misc simple ops to incremental advance (Brian Foster) [RHEL-121230]
  - iomap: advance the iter on direct I/O (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on buffered read (Brian Foster) [RHEL-121230]
  - iomap: Minor code simplification in iomap_dio_bio_iter() (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on zero range (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on unshare range (Brian Foster) [RHEL-121230]
  - iomap: advance the iter directly on buffered writes (Brian Foster) [RHEL-121230]
  - iomap: support incremental iomap_iter advances (Brian Foster) [RHEL-121230]
  - iomap: export iomap_iter_advance() and return remaining length (Brian Foster) [RHEL-121230]
  - iomap: lift iter termination logic from iomap_iter_advance() (Brian Foster) [RHEL-121230]
  - iomap: lift error code check out of iomap_iter_advance() (Brian Foster) [RHEL-121230]
  - iomap: refactor iomap_iter() length check and tracepoint (Brian Foster) [RHEL-121230]
  - iomap: split out iomap check and reset logic from iter advance (Brian Foster) [RHEL-121230]
  - iomap: factor out iomap length helper (Brian Foster) [RHEL-121230]
  - iomap: pass private data to iomap_truncate_page (Brian Foster) [RHEL-121230]
  - iomap: pass private data to iomap_zero_range (Brian Foster) [RHEL-121230]
  - iomap: pass private data to iomap_page_mkwrite (Brian Foster) [RHEL-121230]
  - iomap: add a io_private field to struct iomap_ioend (Brian Foster) [RHEL-121230]
  - iomap: optionally use ioends for direct I/O (Brian Foster) [RHEL-121230]
  - iomap: factor out a iomap_dio_done helper (Brian Foster) [RHEL-121230]
  - iomap: move common ioend code to ioend.c (Brian Foster) [RHEL-121230]
  - iomap: split bios to zone append limits in the submission handlers (Brian Foster) [RHEL-121230]
  - iomap: add a IOMAP_F_ANON_WRITE flag (Brian Foster) [RHEL-121230]
  - iomap: simplify io_flags and io_type in struct iomap_ioend (Brian Foster) [RHEL-121230]
  - iomap: allow the file system to submit the writeback bios (Brian Foster) [RHEL-121230]
  - wifi: libertas: cap SSID len in lbs_associate() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cw1200: cap SSID length in cw1200_do_join() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix reporting of all valid links in sta_set_sinfo() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: call kfree without a NULL check (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Make CONNECTION_MONITOR optional for MLO sta (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: avoid bit operation on key flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Add missing platform IDs for quirk table (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix peer lookup in ath12k_dp_mon_rx_deliver_msdu() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: avoid circular locking dependency in ser_state_run() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: avoid possible TX wait initialization race (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: fix use-after-free in rtw89_core_tx_kick_off_and_wait() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: fix leak in rtw89_core_send_nullfunc() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix overflow warning on num_pwr_levels (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: initialize eirp_power before use (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: simplify return value handling of cfg80211_get_radio_idx_by_chan() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: fix return value in cfg80211_get_radio_idx_by_chan() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: consider links for validating SCAN_FLAG_AP in scan request during MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39937}
  - wifi: iwlwifi: pcie: fix byte count table for some devices (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: completely disable per-link stats for now (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: virt_wifi: Fix page fault on connect (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Fix "no buffer space available" error in nl80211_get_station() for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix 130/1030 configs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix WMI TLV header misalignment (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix missing station power save configuration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: wilc1000: avoid buffer overflow in WID string configuration (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39952}
  - wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (Jose Ignacio Tornos Martinez) [RHEL-114889 RHEL-117582] {CVE-2025-39849}
  - wifi: ath11k: fix group data packet drops during rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Set EMLSR support flag in MLO flags for EML-capable stations (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: cfg: add back more lost PCI IDs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix byte count table for old devices (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: cfg: restore some 1000 series configs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mwifiex: Initialize the chan_stats array to zero (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39891}
  - wifi: mac80211: do not permit 40 MHz EHT operation on 5/6 GHz (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: uefi: check DSM item validity (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: acpi: check DSM func validity (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: if scratch is ~0U, consider it a failure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-114889 RHEL-123069] {CVE-2025-39918}
  - wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7915: fix list corruption after hardware restart (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39862}
  - wifi: mt76: mt7996: add missing check for rx wcid entries (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39919}
  - wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: fix crash on some tx status reports (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: use the correct vif link for scanning/roc (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: disable beacons when going offchannel (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: prevent non-offchannel mgmt tx during scan/roc (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: skip EHT MLD TLV on non-MLD and pass conn_state for sta_cmd (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925u: use connac3 tx aggr check in tx complete (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix the wrong bss cleanup for SAP (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix locking in mt7925_change_vif_links() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7921: don't disconnect when CSA to DFS chan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: increase scan_ies_len for S1G (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39957}
  - wifi: mac80211: fix incorrect type for ret (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39863}
  - wifi: cfg80211: fix use-after-free in cmp_bss() (Jose Ignacio Tornos Martinez) [RHEL-114889 RHEL-122877] {CVE-2025-39864}
  - wifi: rt2x00: fix CRC_CCITT dependency (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2800: select CONFIG_RT2X00_LIB as needed (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - selftests/tc-testing: Check backlog stats in gso_skb case (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - net/sched: Fix backlog accounting in qdisc_dequeue_internal (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39677}
  - wifi: Fix typos (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmsmac: Use str_true_false() helper (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX failure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Remove yet more unused functions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Remove more unused functions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Remove unused functions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Revert "wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: check validity of the FW API range (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: don't export symbols that we shouldn't (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: use spec link id and not FW link id (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: decode EOF bit for AMPDUs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Remove support for rx OMI bandwidth reduction (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: stop supporting iwl_omi_send_status_notif ver 1 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove SC2F firmware support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: Remove NAN support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: disable certain features for fips_enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: support channel survey collection for ACS scans (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: disable RX aggregation if requested (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - dt-bindings: net: wireless: rt2800: add SOC Wifi (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - MIPS: dts: ralink: mt7620a: add wifi (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2x00: soc: modernize probe (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2800: move 2x00soc to 2800soc (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2800soc: allow loading from OF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2x00: remove mod_name from platform_driver (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rt2x00: add COMPILE_TEST (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix WARN_ON for monitor mode on some devices (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38642}
  - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix unassigned variable access (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't require cipher and keylen in gtk rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: Set num_sub_specs before looping through sub_specs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm/fw: Avoid -Wflex-array-member-not-at-end warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Fix typo "ransport" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix cmd length when sending WOWLAN_TSC_RSC_PARAM (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Correct tid cleanup when tid setup fails (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39750}
  - wifi: ath12k: bring DFS support back for WCN7850 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Prefer {} to {0} in initializers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Prefer {} to {0} in initializers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: Prefer {} to {0} in initializers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: report link ID for unexpected frames (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: determine missing link_id in ieee80211_rx_for_interface() based on frequency (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: support CYW54591 PCIE device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: reject HTC bit for management frames (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove ieee80211_remove_key (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Advertise encapsulation/decapsulation offload support to mac80211 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix TX status reporting to mac80211 when offload is enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix the handling of TX packets in Ethernet mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to parse max ext2 wmi service bit (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix endianness handling while accessing wmi service bit (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Don't call fq_flow_idx() for management frames (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Do not schedule stopped TXQs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38643}
  - wifi: mac80211: support returning the S1G short beacon skb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: support initialising current S1G short beacon index (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: support initialising an S1G short beaconing BSS (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: support configuring an S1G short beaconing BSS (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: Add support for the SDIO 43751 device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: wilc1000: Use min() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mwifiex: Use max_t() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcm80211: Use min() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: Fix typo "notifer" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: reject TDLS operations when station is not associated (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38644}
  - wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: extend connection monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: extend beacon monitoring for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Add link iteration macro for link data with rcu_dereference (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix macro scoping in for_each_link_data (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: remove wrong scan request n_channels (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtlwifi: Use min()/max() to improve code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Lower the timeout in rtw89_fwdl_check_path_ready_ax() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: check path range before using in rtw89_fw_h2c_rf_ps_info() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: purge obsoleted scan events with software sequence number (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: dynamically update EHT preamble puncturing (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mac: reduce PPDU status length for WiFi 6 chips (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: trigger TX stuck if FIFO full (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39732}
  - wifi: ath12k: remove unneeded semicolon in ath12k_mac_parse_tx_pwr_env() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Validate peer_id before searching for peer (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Fix botched indexing conversion (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: fix double free for link_sinfo in nl80211_station_dump() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: fix off channel operation allowed check for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211_hwsim: Update comments in header (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: parse unsolicited broadcast probe response data (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: parse attribute to update unsolicited probe response template (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't use TPE data from assoc response (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: simplify __ieee80211_rx_h_amsdu() loop (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't mark keys for inactive links as uploaded (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: only assign chanctx in reconfig (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211_hwsim: Declare support for AP scanning (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: clean up cipher suite handling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't send keys to driver when fips_enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Fix interface type validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove ieee80211_link_unreserve_chanctx() return value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't unreserve never reserved chanctx (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: make VHT opmode NSS ignore a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: remove scan request n_channels counted_by (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw88: Fix macid assigned to TDLS station (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw88: enable TX reports for the management queue (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: implement RFK multi-channel handling and support chanctx up to 2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852bt: implement RFK multi-channel handling and support chanctx up to 2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852bt: configure FW version for SCAN_OFFLOAD_EXTRA_OP feature (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: tweak tx wake notify matching condition (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: update SER L2 type default value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: introduce fw feature group and redefine CRASH_TRIGGER (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: check LPS H2C command complete by C2H reg instead of done ack (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: solve GO's TBTT change and TBTT too close to NoA issue (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: extend HW scan of WiFi 7 chips for extra OP chan when concurrency (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: when MCC stop forcing to stay at GO role (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: enlarge GO NoA duration to cover channel switching time (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: add DIG suspend/resume flow when scan and connection (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mcc: add H2C command to support different PD level in MCC (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: support 6 GHz VLP policy via ACPI DSM (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: support regulatory rules via ACPI DSM and parse rule of regd_UK (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: update field definition to specific country in UNII-4 conf (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: regd/acpi: support country CA by BIT(1) in 6 GHz SP conf (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove support of several iwl_ppag_table_cmd versions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove support of version 4 of iwl_wowlan_rsc_tsc_params_cmd (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove support of versions 4 and 5 of iwl_alive_ntf (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove support for iwl_mcc_update_resp versions (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Revert "wifi: iwlwifi: mld: allow EMLSR with 2.4 GHz when BT is ON" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Revert "wifi: iwlwifi: mld: add kunit test for emlsr with bt on" (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: support iwl_omi_send_status_notif version 2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove support for iwl_geo_tx_power_profiles_cmd version 4 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove an unused struct (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove support for REDUCE_TX_POWER_CMD ver 9 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for REDUCE_TX_POWER_CMD ver 6 and 7 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: Add dump handler to iwl_mvm (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm/mld: use average RSSI for beacons (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove extra link ID (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove IWL_MVM_ESR_EXIT_FAIL_ENTRY (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to enqueue management frame at MLD level (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Enable memory profile selection for QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Refactor macros to use memory profile-based values (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Remove redundant TID calculation for QCN9274 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add a table of parameters entries impacting memory consumption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: support average ack rssi in station dump (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add support for accepting raw DSM tables by firmware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: don't WARN on bad firmware input (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: don't remove all keys in mcast rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: don't remove all keys in mcast rekey (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: always set the key idx in gtk_seq (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: set gtk id also in older FWs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fix HE/EHT capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add iwl_trans_is_dead() API (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add iwl_trans_device_enabled() API (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add suppress_cmd_error_once() API (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: restrict puncturing disable to FM (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove regulatory puncturing setup (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: update expected range response notification version (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: update the P2P device mac before starting the GO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: fix scan request validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix packets received in WBM error ring with REO LUT enabled (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: fix scan request validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: add a missing include (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: trans: remove retake_ownership parameter from sw_reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: assign a FW API range for GF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: assign a FW API range for HR (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: accept new devices for MVM-only configs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: inform me when op mode leaving (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: simplify iwl_poll_bits_mask return value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_status_v9 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_status_v12 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add a reference to iwl_wowlan_info_notif_v3 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_info_notif_v2 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump minimum API version for SO/MA/TY (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: assign a FW API range for JF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: handle non-overlapping API ranges (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: allow beacon protection keys to be installed in hardware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: set RX_FLAG_SKIP_MONITOR in WBM error path (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: pack HTT pdev rate stats structs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: update unsupported bandwidth flags in reg rules (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add the virtual monitor after reconfig complete (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: always initialize sdata::key_list (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: don't complete management TX on SAE commit (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: implement dot11ExtendedRegInfoSupport (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: send extended MLD capa/ops if AP has it (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: copy first_part into HW scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: add a flag for the first part of a scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove DISALLOW_PUNCTURING_5GHZ code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: only verify part of Extended MLD Capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: nl80211: make nl80211_check_scan_flags() type safe (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: hide scan internals (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix deactivated link CSA (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add mandatory bitrate support for 6 GHz (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: remove spurious blank line (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: verify state before connection (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Fix uninitialized variable with __free() in ieee80211_ml_epcs() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: avoid weird state in error path (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove support for iwl_wowlan_info_notif_v4 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump minimum API version in BZ (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove unneeded argument (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: remove MLO GTK rekey code (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: rename iwl_pci_gen1_2_probe() argument (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: match discrete/integrated to fix some names (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: remove Intel driver load message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm/mld: make PHC messages debug messages (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: trans: remove iwl_trans_init (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie move common probe logic (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump FW API to 102 for BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: Move txcmd size/align calculation to callers (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie move gen1_2 probe to gen1_2/trans.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: use PNVM data embedded in .ucode files (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Add an helper function for polling bits (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix rx link assignment for non-MLO stations (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: move away from using a fake platform device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add num_stations counter for each interface (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: properly set bit for pdev mask for firmware PPDU_STATS request (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Block radio bring-up in FTM mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: advertise NL80211_FEATURE_TX_POWER_INSERTION support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add support for Tx Power insertion in RRM action frame (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fetch tx_retry and tx_failed from htt_ppdu_stats_user_cmpltn_common_tlv (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: correctly update bw for ofdma packets (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add EHT support for TX rate (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add link support for multi-link in arsta (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fill link station statistics for MLO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7921s: Introduce SDIO WiFi/BT combo module card reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt792x: improve monitor interface handling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt792x: Limit the concurrent STA and SoftAP to operate on the same channel (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38541}
  - wifi: mt76: Get rid of dma_sync_single_for_device() for MMIO devices (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Move num_sta accounting in mt7996_mac_sta_{add,remove}_links (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Add MLO support to mt7996_tx_check_aggr() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Fix valid_links bitmask in mt7996_mac_sta_{add,remove} (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38599}
  - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Do not set wcid.sta to 1 in mt7996_mac_sta_event() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Rely on for_each_sta_active_link() in mt7996_mcu_sta_mld_setup_tlv() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7996: Fix secondary link lookup in mt7996_mcu_sta_mld_setup_tlv() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: fix vif link allocation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: fix queue assignment for deauth packets (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: add a wrapper for wcid access with validation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7921: prevent decap offload config before STA initialization (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38450}
  - wifi: mt76: mt7925: fix incorrect scan probe IE handling for hw_scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix the wrong config for tx interrupt (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Remove RCU section in mt7996_mac_sta_rc_work() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Move RCU section in mt7996_mcu_add_rate_ctrl_fixed() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Move RCU section in mt7996_mcu_set_fixed_field() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: Assume __mt76_connac_mcu_alloc_sta_req runs in atomic context (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: prevent A-MSDU attacks in mesh networks (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38512}
  - wifi: rt2x00: fix remove callback type mismatch (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: reject VHT opmode for unsupported channel widths (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38509}
  - wifi: mwifiex: discard erroneous disassoc frames on STA interface (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38505}
  - wifi: mac80211: fix non-transmitted BSSID profile search (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: clear frame buffer to never leak stack (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: correctly identify S1G short beacon (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Enable the new rtw89_8852bu module (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8852bu.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: Add rtw8852b_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: Add rtw8852b_dle_mem_usb3 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852b: Fix rtw8852b_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8852bx: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: enter power save mode aggressively (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Enable the new USB modules (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8851bu.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add usb.{c,h} (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add some definitions for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Fix rtw89_mac_power_switch() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: Modify rtw8851b_pwr_{on,off}_func() for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Hide some errors when the device is unplugged (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add extra TX headroom for USB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Disable deep power saving for USB/SDIO (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8851b_hfc_param_ini_usb (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Add rtw8851b_dle_mem_usb{2,3} (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Make hfc_param_ini in rtw89_chip_info an array (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: Make dle_mem in rtw89_chip_info an array (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: Accept USB devices and load their MAC address (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: rfk: update IQK to 0x14 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: rfk: update DPK to 0x11 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: update NCTL 0xB (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: adjust ADC setting for RF calibration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: set ADC bandwidth select according to calibration value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: 8851b: rfk: extend DPK path_ok type to u8 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw88: coex: Use bitwise instead of arithmetic operator for flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38600}
  - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7915: mcu: lower default timeout (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mt76: mt7915: mcu: increase eeprom command timeout (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38656}
  - wifi: ath12k: add extended NSS bandwidth support for 160 MHz (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add support for 160 MHz bandwidth (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: clean up 80P80 support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: add support for setting fixed HE rate/GI/LTF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: generate rx and tx mcs maps for supported HE mcs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: move HE MCS mapper to a separate function (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: push EHT MU-MIMO params to hardware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: push HE MU-MIMO params to hardware (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: shutdown driver when hardware is unreliable (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-39746}
  - wifi: cfg80211: fix S1G beacon head validation in nl80211 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: fix locking on invalid TOP reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix timeout while waiting for regulatory update during interface creation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: Fix Spelling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to RTT stats (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support to TDMA and MLO stats (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add support for transmit histogram stats (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Clear auth flag only for actual association in security mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix dest ring-buffer corruption when ring is full (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix source ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: use plain access for descriptor length (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: fix dest ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix dest ring-buffer corruption when ring is full (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix source ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: use plain accesses for monitor descriptor (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: use plain access for descriptor length (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix dest ring-buffer corruption (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Send WMI_VDEV_SET_TPC_POWER_CMD for AP vdev (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add memset and update default rate value in wmi tx completion (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Fix station association with MBSSID Non-TX BSS (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: use real noise floor instead of default value (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: handle WMI event for real noise floor calculation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Make read-only const array svc_id static const (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: fix suspend use-after-free after probe failure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: clear initialized flag for deinit-ed srng lists (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38601}
  - dt-bindings: net: wireless: ath11k-pci: describe firmware-name property (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: support usercase-specific firmware overrides (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - dt-bindings: net: wireless: ath9k: add WIFI bindings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: ahb: replace id_table with of (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: ahb: reorder includes (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: ahb: reorder declarations (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: Add missing check for alloc_ordered_workqueue (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38602}
  - wifi: iwlwifi: Fix memory leak in iwl_mvm_init() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: api: delete repeated words (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: remove unused no_sleep_autoadjust declaration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: Fix comment typo (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: use DECLARE_BITMAP macro (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - iwlwifi: fw: simplify the iwl_fw_dbg_collect_trig() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: ftm: fix switch end indentation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: move _iwl_trans_set_bits_mask utilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: make iwl_mld_add_all_rekeys void (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: move iwl_trans_pcie_write_mem to iwl-trans.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: move iwl_trans_pcie_dump_regs() to utils.c (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: advertise support for TTLM changes (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Block EMLSR when scanning on P2P Device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: use the correct struct size for tracing (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: support RZL platform device ID (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add HE 1024QAM for <242-tone RU for PE (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: make FSEQ version a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: convert to use secs_to_jiffies() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fw: make PNVM version a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: make PHY config a debug message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: fix kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mei: fix kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: fix kernel-doc warnings (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: dvm: fix some kernel-doc issues (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: defer MLO scan after link activation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: fix last_mlo_scan_time type (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: remove special FW error resume handling (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: add timer host wakeup debugfs (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: phy periph read - flow modification (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: Add dump handler to iwl_mld (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: add support for the devcoredump (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: abort D3 handshake on error (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: reinit device properly during TOP reset (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mld: fix misspelling of 'established' (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: Remove unused cfg parameter from iwl_nvm_get_regdom_bw_flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: move dBm averaging function into utils (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: initiate TOP reset if requested (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: pcie: move generation specific files to a folder (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: enable antenna selection for AX210 family (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: parse VLP AP not allowed nvm channel flag (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: bump minimum API version in BZ/SC/DR (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support for S1G aggregation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support for storing station S1G capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: handle station association response with S1G (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: support configuration of S1G station capabilities (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Set RTS threshold on per-radio basis (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Report per-radio RTS threshold to userspace (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add Support to Set RTS Threshold for each Radio (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211/mac80211: Add support to get radio index (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add link_sta_statistics ops to fill link station statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: correct RX stats packet increment for multi-link (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: extend support to fill link level sinfo structure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: clear sinfo->filled for MLO station statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support to accumulate removed link statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: allocate memory for link_station info structure (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: add statistics for providing overview for MLO station (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: extend to embed link level statistics in NL message (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: add link_station_info structure to support MLO statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: add support towards MLO handling of station statistics (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: finish link init before RCU publish (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: update radar_required in channel context after channel switch (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: brcmfmac: don't allow arp/nd offload to be enabled if ap mode exists (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: iwlwifi: mvm: assume '1' as the default mac_config_cmd version (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`. (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: fix beacon interval calculation overflow (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: report boottime of receiving beacon and probe response (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: avoid NULL dereference when RX problematic packet on unsupported 6 GHz band (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38646}
  - wifi: rtw89: correct length for IE18/19 PHY report and IE parser (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: update EDCCA report for subband 40M/80M/sub-20M (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: mac: differentiate mem_page_size by chip generation (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Update Wi-Fi/Bluetooth coexistence version to 9.0.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: RTL8852B coexistence Wi-Fi firmware support for v0.29.122.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Update Bluetooth slot length when Wi-Fi is scanning (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware issue (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Assign priority table before entering power save (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Update scoreboard to avoid Bluetooth re-link fail (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Get Bluetooth desired version by WiFi firmware version (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: RTL8922A add Wi-Fi firmware support for v0.35.71.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Query Bluetooth TX power when firmware support (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Enable outsource info H2C command (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: rtw89: coex: Add v1 Bluetooth AFH handshake for WiFi 7 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38605}
  - wifi: ath12k: Fix double budget decrement while reaping monitor ring (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0 (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath11k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath10k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath9k: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath: Add missing include of export.h (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: remove monitor handling from ath12k_dp_rx_deliver_msdu() (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: install pairwise key first (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: avoid bit operation on key flags (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: handle regulatory hints during mac registration (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: update channel list in worker when wait flag is set (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: combine channel list for split-phy devices in single-wiphy (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Split scan request for split band device (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Prepare ahvif scan link for parallel scan (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: disable pdev for non supported country (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss (Jose Ignacio Tornos Martinez) [RHEL-114889] {CVE-2025-38606}
  - wifi: brcmfmac: Make read-only array cfg_offset static const (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add support for link reconfiguration negotiation offload to driver (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Improve the documentation for NL80211_CMD_ASSOC_MLO_RECONF (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mwifiex: enable host mlme on sdio W8997 chipsets (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Allow scan on a radio while operating on DFS on another radio (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: mac80211: Allow DFS/CSA on a radio if scan is ongoing on another radio (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: cfg80211: Add utility API to get radio index from channel (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - wifi: ieee80211: add Radio Measurement action fields (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - config: wifi: disable new unsupported configuration options (Jose Ignacio Tornos Martinez) [RHEL-114889]
  - PM: hibernate: shrink shmem pages after dev_pm_ops.prepare() (Anusha Srivatsa) [RHEL-116879]
  - redhat/configs: Add new configs from DRM 6.17 backport (Anusha Srivatsa) [RHEL-116879]
  - Revert "mm: rename call_mmap/mmap_prepare to vfs_mmap/mmap_prepare" (Anusha Srivatsa) [RHEL-116879]
  - Revert "mm: remove callers of pfn_t functionality" (Anusha Srivatsa) [RHEL-116879]
  - Merge DRM changes from upstream v6.16..v6.17 (Anusha Srivatsa) [RHEL-116879]
  - iommufd/selftest: Fix ioctl return value in _test_cmd_trigger_vevents() (Eder Zulian) [RHEL-116573]
  - lib/scatterlist: Add SG_MITER_LOCAL and use it (Eder Zulian) [RHEL-116573]
  - PCI: Fix driver_managed_dma check (Eder Zulian) [RHEL-116573]
  - iommu/selftest: prevent use of uninitialized variable (Eder Zulian) [RHEL-116573]
  - dma: kmsan: export kmsan_handle_dma() for modules (Eder Zulian) [RHEL-116573]
  - gpu: host1x: Do not assume that a NULL domain means no DMA IOMMU (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: debugfs: Fix legacy mode page table dump logic (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Disallow dirty tracking if incoherent page walk (Eder Zulian) [RHEL-116573 RHEL-125486] {CVE-2025-40058}
  - iommufd: Register iommufd mock devices with fwspec (Eder Zulian) [RHEL-116573]
  - dma-mapping: fix direction in dma_alloc direction traces (Eder Zulian) [RHEL-116573]
  - KVM: PPC: Enable CAP_SPAPR_TCE_VFIO on pSeries KVM guests (Eder Zulian) [RHEL-116573]
  - redhat/configs: Enable CONFIG_X86_POSTED_MSI (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Update the fail_nth limit (Eder Zulian) [RHEL-116573]
  - iommufd: WARN if an object is aborted with an elevated refcount (Eder Zulian) [RHEL-116573]
  - iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-116573 RHEL-123791] {CVE-2025-39966}
  - iommufd: Fix refcounting race during mmap (Eder Zulian) [RHEL-116573]
  - iommu/amd/pgtbl: Fix possible race while increase page table level (Eder Zulian) [RHEL-116573] {CVE-2025-39961}
  - iommu/amd: Fix alias device DTE setting (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page() (Eder Zulian) [RHEL-116573]
  - iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() (Eder Zulian) [RHEL-116573]
  - dma-debug: don't enforce dma mapping check on noncoherent allocations (Eder Zulian) [RHEL-116573]
  - dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted (Eder Zulian) [RHEL-116573]
  - iommufd: Fix spelling errors in iommufd.rst (Eder Zulian) [RHEL-116573]
  - iommufd: viommu: free memory allocated by kvcalloc() using kvfree() (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Fix smmu_domain->nr_ats_masters decrement (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Fix missing cpu_to_le64 at lvcmdq_err_map (Eder Zulian) [RHEL-116573]
  - iommu/amd: Avoid stack buffer overflow from kernel cmdline (Eder Zulian) [RHEL-116573] {CVE-2025-38676}
  - iommu/arm-smmu-v3: Replace vsmmu_size/type with get_viommu_size (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Do not bother impl_ops if IOMMU_VIOMMU_TYPE_ARM_SMMUV3 (Eder Zulian) [RHEL-116573]
  - iommufd: Rename some shortterm-related identifiers (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for vdevice tombstone (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Explicitly skip tests for inapplicable variant (Eder Zulian) [RHEL-116573]
  - iommufd/vdevice: Remove struct device reference from struct vdevice (Eder Zulian) [RHEL-116573]
  - iommufd: Destroy vdevice on idevice destroy (Eder Zulian) [RHEL-116573]
  - iommufd: Add a pre_destroy() op for objects (Eder Zulian) [RHEL-116573]
  - iommufd: Add iommufd_object_tombstone_user() helper (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Roll back to use iommufd_object_alloc() for vdevice (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Test reserved regions near ULONG_MAX (Eder Zulian) [RHEL-116573]
  - iommufd: Prevent ALIGN() overflow (Eder Zulian) [RHEL-116573] {CVE-2025-38688}
  - iommu/tegra241-cmdqv: import IOMMUFD module namespace (Eder Zulian) [RHEL-116573]
  - iommufd: Do not allow _iommufd_object_alloc_ucmd if abort op is set (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Add IOMMU_VEVENTQ_TYPE_TEGRA241_CMDQV support (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Add user-space use support (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Do not statically map LVCMDQs (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Simplify deinit flow in tegra241_cmdqv_remove_vintf() (Eder Zulian) [RHEL-116573]
  - iommu/tegra241-cmdqv: Use request_threaded_irq (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3-iommufd: Add hw_info to impl_ops (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3-iommufd: Add vsmmu_size/type and vsmmu_init impl ops (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Update hw_info coverage for an input data_type (Eder Zulian) [RHEL-116573]
  - iommufd: Allow an input data_type via iommu_hw_info (Eder Zulian) [RHEL-116573]
  - iommu: Allow an input type in hw_info op (Eder Zulian) [RHEL-116573]
  - Documentation: userspace-api: iommufd: Update HW QUEUE (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for the new mmap interface (Eder Zulian) [RHEL-116573]
  - iommufd: Add mmap interface (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for IOMMUFD_CMD_HW_QUEUE_ALLOC (Eder Zulian) [RHEL-116573]
  - iommufd/driver: Add iommufd_hw_queue_depend/undepend() helpers (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Add IOMMUFD_CMD_HW_QUEUE_ALLOC ioctl (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Introduce IOMMUFD_OBJ_HW_QUEUE and its related struct (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Add driver-defined vDEVICE support (Eder Zulian) [RHEL-116573]
  - iommufd/access: Bypass access->ops->unmap for internal use (Eder Zulian) [RHEL-116573]
  - iommufd/access: Add internal APIs for HW queue to use (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add coverage for viommu data (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Support user_data in mock_viommu_alloc (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Allow driver-specific user data for a vIOMMU object (Eder Zulian) [RHEL-116573]
  - iommu: Pass in a driver-level user data structure to viommu_init op (Eder Zulian) [RHEL-116573]
  - iommu: Add iommu_copy_struct_to_user helper (Eder Zulian) [RHEL-116573]
  - iommu: Use enum iommu_hw_info_type for type in hw_info op (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Explicitly define vdev->virt_id (Eder Zulian) [RHEL-116573]
  - iommufd: Correct virt_id kdoc at struct iommu_vdevice_alloc (Eder Zulian) [RHEL-116573]
  - iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range (Eder Zulian) [RHEL-116573]
  - iommufd: Apply the new iommufd_object_alloc_ucmd helper (Eder Zulian) [RHEL-116573]
  - iommufd: Introduce iommufd_object_alloc_ucmd helper (Eder Zulian) [RHEL-116573]
  - iommufd: Move _iommufd_object_alloc out of driver.c (Eder Zulian) [RHEL-116573]
  - iommu: Deprecate viommu_alloc op (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Replace arm_vsmmu_alloc with arm_vsmmu_init (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Replace mock_viommu_alloc with mock_viommu_init (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Drop parent domain from mock_iommu_domain_nested (Eder Zulian) [RHEL-116573]
  - iommufd/viommu: Support get_viommu_size and viommu_init ops (Eder Zulian) [RHEL-116573]
  - iommu: Introduce get_viommu_size and viommu_init ops (Eder Zulian) [RHEL-116573]
  - iommufd: Return EOPNOTSUPP for failures due to driver bugs (Eder Zulian) [RHEL-116573]
  - iommufd: Use enum iommu_veventq_type for type in struct iommufd_veventq (Eder Zulian) [RHEL-116573]
  - iommufd: Use enum iommu_viommu_type for type in struct iommufd_viommu (Eder Zulian) [RHEL-116573]
  - iommufd: Drop unused ictx in struct iommufd_vdevice (Eder Zulian) [RHEL-116573]
  - iommufd: Apply obvious cosmetic fixes (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu: disable PRR on SM8250 (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Revert vmaster in the error path (Eder Zulian) [RHEL-116573]
  - iommu/io-pgtable-arm: Remove unused macro iopte_prot (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible (Eder Zulian) [RHEL-116573] {CVE-2025-39739}
  - iommu/amd: Fix geometry.aperture_end for V2 tables (Eder Zulian) [RHEL-116573]
  - iommu/amd: Wrap debugfs ABI testing symbols snippets in literal code blocks (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add documentation for AMD IOMMU debugfs support (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IRT Table (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump device table (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add support for device id user input (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IOMMU command buffer (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IOMMU Capability registers (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add debugfs support to dump IOMMU MMIO registers (Eder Zulian) [RHEL-116573]
  - iommu/amd: Refactor AMD IOMMU debugfs initial setup (Eder Zulian) [RHEL-116573]
  - iommu/amd: Enable PASID and ATS capabilities in the correct order (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs (Eder Zulian) [RHEL-116573] {CVE-2025-38594}
  - iommu/vt-d: Make iotlb_sync_map a static property of dmar_domain (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Split paging_domain_compatible() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Split intel_iommu_enforce_cache_coherency() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Create unique domain ops for each stage (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Split intel_iommu_domain_alloc_paging_flags() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Do not wipe out the page table NID when devices detach (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Fold domain_exit() into intel_iommu_domain_free() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Lift the __pa to domain_setup_first_level/intel_svm_set_dev_pasid() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Remove the CONFIG_X86 wrapping from iommu init hook (Eder Zulian) [RHEL-116573]
  - iommu/intel: Convert to msi_create_parent_irq_domain() helper (Eder Zulian) [RHEL-116573]
  - iommu/amd: Convert to msi_create_parent_irq_domain() helper (Eder Zulian) [RHEL-116573]
  - iommu: Remove ops->pgsize_bitmap (Eder Zulian) [RHEL-116573]
  - iommu: Remove iommu_ops pgsize_bitmap from simple drivers (Eder Zulian) [RHEL-116573]
  - iommu: Remove ops.pgsize_bitmap from drivers that don't use it (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu: Remove iommu_ops pgsize_bitmap (Eder Zulian) [RHEL-116573]
  - qiommu/arm-smmu-v3: Remove iommu_ops pgsize_bitmap (Eder Zulian) [RHEL-116573]
  - dmaengine: idxd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Eder Zulian) [RHEL-116573]
  - dma-contiguous: hornor the cma address limit setup by user (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Fix build warnings due to uninitialized mfd (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add asserts testing global mfd (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Add missing close(mfd) in memfd_mmap() (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Fix iommufd_dirty_tracking with large hugepage sizes (Eder Zulian) [RHEL-116573]
  - iommu/tegra: Fix incorrect size calculation (Eder Zulian) [RHEL-116573]
  - scatterlist: fix extraneous '@'-sign kernel-doc notation (Eder Zulian) [RHEL-116573]
  - scatterlist: inline sg_next() (Eder Zulian) [RHEL-116573]
  - iommu: Clear the freelist after iommu_put_pages_list() (Eder Zulian) [RHEL-116573]
  - iommu: make inclusion of amd directory conditional (Eder Zulian) [RHEL-116573]
  - iommu: make inclusion of intel directory conditional (Eder Zulian) [RHEL-116573]
  - iommu: Cleanup comments for dev_enable/disable_feat (Eder Zulian) [RHEL-116573]
  - iommu: Hide ops.domain_alloc behind CONFIG_FSL_PAMU (Eder Zulian) [RHEL-116573]
  - iommu: Do not call domain_alloc() in iommu_sva_domain_alloc() (Eder Zulian) [RHEL-116573]
  - iommu/virtio: Move to domain_alloc_paging() (Eder Zulian) [RHEL-116573]
  - iommu: Add domain_alloc_identity() (Eder Zulian) [RHEL-116573]
  - iommu/virtio: Break out bypass identity support into a global static (Eder Zulian) [RHEL-116573]
  - iommu: Remove iommu_dev_enable/disable_feature() (Eder Zulian) [RHEL-116573]
  - iommufd: Remove unnecessary IOMMU_DEV_FEAT_IOPF (Eder Zulian) [RHEL-116573]
  - iommufd/selftest: Put iopf enablement in domain attach path (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Put iopf enablement in domain attach path (Eder Zulian) [RHEL-116573]
  - iommu: Remove IOMMU_DEV_FEAT_SVA (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-v3: Put iopf enablement in the domain attach path (Eder Zulian) [RHEL-116573]
  - iommu: Split out and tidy up Arm Kconfig (Eder Zulian) [RHEL-116573]
  - iommu: Avoid introducing more races (Eder Zulian) [RHEL-116573]
  - iommu/vtd: Remove iommu_alloc_pages_node() (Eder Zulian) [RHEL-116573]
  - iommu/amd: Use iommu_alloc_pages_node_sz() for the IRT (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_alloc_page_node() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_alloc_page/pages() (Eder Zulian) [RHEL-116573]
  - iommu: Update various drivers to pass in lg2sz instead of order to iommu pages (Eder Zulian) [RHEL-116573]
  - iommu/amd: Use roundup_pow_two() instead of get_order() (Eder Zulian) [RHEL-116573]
  - iommu/amd: Change rlookup, irq_lookup, and alias to use kvalloc() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Allow sub page sizes to be passed into the allocator (Eder Zulian) [RHEL-116573]
  - iommu/pages: Move the __GFP_HIGHMEM checks into the common code (Eder Zulian) [RHEL-116573]
  - iommu/pages: Move from struct page to struct ioptdesc and folio (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_put_pages_list_old and the _Generic (Eder Zulian) [RHEL-116573]
  - iommu: Change iommu_iotlb_gather to use iommu_page_list (Eder Zulian) [RHEL-116573]
  - iommu/amd: Convert to use struct iommu_pages_list (Eder Zulian) [RHEL-116573]
  - iommu/pages: Formalize the freelist API (Eder Zulian) [RHEL-116573]
  - iommu/pages: De-inline the substantial functions (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove iommu_free_page() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove the order argument to iommu_free_pages() (Eder Zulian) [RHEL-116573]
  - iommu/pages: Make iommu_put_pages_list() work with high order allocations (Eder Zulian) [RHEL-116573]
  - iommu/pages: Remove __iommu_alloc_pages()/__iommu_free_pages() (Eder Zulian) [RHEL-116573]
  - iommu/tegra: Do not use struct page as the handle for pts (Eder Zulian) [RHEL-116573]
  - iommu/terga: Do not use struct page as the handle for as->pd memory (Eder Zulian) [RHEL-116573]
  - iommu/amd: Add support for HTRangeIgnore feature (Eder Zulian) [RHEL-116573]
  - iommu/amd: Ensure GA log notifier callbacks finish running before module unload (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Change dmar_ats_supported() to return boolean (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Eliminate pci_physfn() in dmar_find_matched_satc_unit() (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Replace spin_lock with mutex to protect domain ida (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Use ida to manage domain id (Eder Zulian) [RHEL-116573]
  - iommu/vt-d: Restore WO permissions on second-level paging entries (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Add SAR2130P MDSS compatible (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Make set_stall work when the device is on (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu: Move handing of RESUME to the context fault handler (Eder Zulian) [RHEL-116573]
  - iommu/arm-smmu-qcom: Enable threaded IRQ for Adreno SMMUv2/MMU500 (Eder Zulian) [RHEL-116573]
  - iommu/io-pgtable-arm: Add quirk to quiet WARN_ON() (Eder Zulian) [RHEL-116573]


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-17
changelog:
  - Support storing of __crc_* symbols in sections other than .rodata.
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-19
changelog:
  - Capture local __crc_* symbols for "Provides: kernel()".
  - Add support for XZ compression for the symvers file.
  - Fix "Provides: kernel()" generation when both __kcrctab and __kcrctab_gpl
    are present.
  - Fix regression for "Provides:" generation in cases when modversions are stored
    in a section that is over 64K in size.
  - Speedup and cleanup changes in find-provides.ksyms and find-requires.ksyms.
  - Fix regex usage in kmod.attr. (Denys Vlasenko)
  - Implement modalias "Provides:" grouping. (Denys Vlasenko)
  - Speedup and cleanup changes in modalias.prov and kmod.attr. (Denys Vlasenko)


author: Tomas Halman <thalman@redhat.com> - 1.3-1
changelog:
  - Rebase to version 1.3
  - Resolves: RHEL-59677 - khci won't work with Quarkus-based Keycloak due to missing /auth path


author: Marek Safarik <msafarik@redhat.com> - 7.12.1-16
changelog:
  - Added manpages for keylime services and the tenant
  - Added support for ECC attestation
  - Fixed man page RST formatting for rst2man compatibility


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45387 RHEL-45378
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-47284
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-47287
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-47285
  - Make TCP waiting time configurable
    Resolves: RHEL-47278


author: Julien Rische <jrische@redhat.com> - 1.21.3-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55427
  - Fix various issues detected by static analysis
    Resolves: RHEL-45165
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-56070


author: Julien Rische <jrische@redhat.com> - 1.21.3-6
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74373
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56058
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-71881


author: Julien Rische <jrische@redhat.com> - 1.21.3-8
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88705
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88047
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-74295


author: Mike FABIAN <mfabian@redhat.com> - 0.0.63-1
changelog:
  - Update to 0.0.63
  - Add more translations from CLDR
  - Get translation changes from CLDR
  - Japanese: prefer anthy over kkc
    (Thanks to adam Williamson: https://github.com/mike-fabian/langtable/pull/17)
  - Use skipTerritory also in list_keyboards(), list_consolefonts(), and list_timezones()
    (Resolves: https://github.com/mike-fabian/langtable/issues/18)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.64-1
changelog:
  - Update to 0.0.64
  - Add new public functions list_all_{languages,locales,keyboards,territories,timezones,scripts,input_methods,console_fonts}
    (See also the discussion at: https://gitlab.gnome.org/GNOME/gnome-desktop/-/merge_requests/159)


author: Mike FABIAN <mfabian@redhat.com> - 0.0.65-1
changelog:
  - Update to 0.0.65
  - Add wuu, tok, glk, gbm, ssy
  - Remove aa_ER.UTF-8@saaho
  - Add kv_RU.UTF-8, chr_RU.UTF-8
  - Add EU, EZ
  - Improve README and Makefile (Resolves: https://github.com/mike-
    fabian/langtable/issues/19)
  - Add more translations from CLDR
  - Get translation changes from CLDR


author: Parag Nemade <pnemade AT fedoraproject DOT org> - 2.015-16
changelog:
  - Convert to new fonts packaging guidelines
  - Migrate to SPDX license expression
  - Drop very very old obsoletes for google-lato-fonts
  - Add gating CI tests in Fedora


author: Petr Menšík <pemensik@redhat.com> - 1.8.3-15
changelog:
  - Remove unneeded openssl/engine.h causing build failures
  - Explicitly disable openssl engine (RHEL-33736)


author: Michal Ruprich <mruprich@redhat.com> - 4.9.2-20
changelog:
  - Adding a timeout for TLS close
  - Resolves: RHEL-113472 - "cannot seek on data source" in TLS lftp sessions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: José Expósito <jexposit@redhat.com> - 1.8.7-4
changelog:
  - Fix XTS test XCopyColormapAndFree/5 hangs
    Resolves: https://issues.redhat.com/browse/RHEL-40132
  - Fix RHEL SAST Automation errors
    Resolves: https://issues.redhat.com/browse/RHEL-34918


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-6
changelog:
  - Fix passing size for pvresize over DBus
    Resolves: RHEL-45872
  - Upstream kernel VDO support
    Resolves: RHEL-31953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.8-21
changelog:
  - New version - 2.8 (Vojtech Trefny)
  - ci: Do not use release descriptions for Packit builds (Vojtech Trefny)
  - Do not hardcode pylint executable name in Makefile (Vojtech Trefny)
  - Remove unused test dependencies variables from Makefile (Vojtech Trefny)
  - docs: Remove information about Python 2 support (Vojtech Trefny)
  - Various docstring fixes (Vojtech Trefny)
  - Replace C++ style comments with C style (Vojtech Trefny)
  - Make use of error optional (Vojtech Trefny)
  - spec: Fix source archive URL (Vojtech Trefny)
  - ci: Add Packit automation for downstream builds (Vojtech Trefny)
  - spec: Bump release to 21 for Packit daily builds (Vojtech Trefny)
  - ci: Use Packit for daily builds in Copr (Vojtech Trefny)
  - ci: Remove GitHub action for RPM builds (Vojtech Trefny)
  - ci: Add Packit configuration for RPM builds on pull requests (Vojtech Trefny)
  - configure.ac: Remove invalid email address for bug reports (Vojtech Trefny)
  - ci: Update chroots for RPM builds (Vojtech Trefny)
  - Translated using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - Added translation using Weblate (Kazakh) (Baurzhan Muftakhidinov)
  - misc: Remove "warn: false" from Ansible "command" (Vojtech Trefny)
  - Translated using Weblate (Georgian) (Temuri Doghonadze)
  - spec: Change license string to the SPDX format required by Fedora (Vojtech Trefny)
  - Added translation using Weblate (Georgian) (Temuri Doghonadze)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Update Fedora versions for RPM build tests (Vojtech Trefny)
  - ci: Rename csmock.Dockerfile to ci.Dockerfile (Vojtech Trefny)
  - ci: Update the csmock GitHub actions configuration (Vojtech Trefny)
  - ci: Run rpmbuild tests in GitHub actions (Vojtech Trefny)
  - Add a GitHub action for running csmock static analysis (Vojtech Trefny)
  - README: Remove the Travis CI badge (Vojtech Trefny)
  - Sync spec with downstream (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.9-21
changelog:
  - New version - 2.9 (Vojtech Trefny)
  - build: Exit before AC_OUTPUT on error (Tomas Bzatek)
  - tests: fix locale tests on musl (triallax)
  - Update translation files (Weblate)
  - Translated using Weblate (Korean) (김인수)
  - ci: Manually prepare spec file for Packit (Vojtech Trefny)


author: Packit <hello@packit.dev> - 2.10-1
changelog:
  - New version - 2.10 (Vojtech Trefny)
  - Rename 'master' branch to 'main' (Vojtech Trefny)
  - remove dependency on python3-six and python2 crumbs (Alexandre Detiste)
  - ci: Bump actions/checkout from v3 to v4 (Vojtech Trefny)
  - Squashed 'translation-canary/' changes from 4d4e65b..5bb8125 (Vojtech Trefny)
  - dist: Fix release number in spec (Vojtech Trefny)


author: Hans de Goede <hdegoede@redhat.com> - 0.3.1-3
changelog:
  - Add patches to fix pipewire keeping UVC cameras open all the time causing
    significant laptop battery drain:
    https://gitlab.freedesktop.org/pipeawire/pipewire/-/issues/2669


author: Kate Hsuan <hpa@redhat.com> - 0.3.2-2
changelog:
  - Disable lc-compliance
  - Removed the gtest dependency from the libcamera-tools package
  - Resolves: RHEL-73503


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Anderson Toshiyuki Sasaki <ansasaki@redhat.com> - 2.69-4
changelog:
  - Add manpages for pam_cap and capability.conf (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Fix incompatibility of the build with go 1.22 (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Reenable PIE in the captree tool (by Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com>)
  - Use sbindir location provided by rpm (by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>)
  - Include hardening flags by setting CGO_CFLAGS=CFLAGS and CGO_LDFLAGS=LDFLAGS


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-6
changelog:
  - RHEL-26148 - fix grayscale/color raster printing via AirPrint
  - RHEL-29726 Backport fix for typo influencing image filtering from CMYK to CMY


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60322 CVE-2024-47076 libcupsfilters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes


author: Pavel Cahyna <pcahyna@redhat.com> - 6.1.3-8
changelog:
  - migrated to SPDX license, originally from Fedora by <msuchy>
  - Correct License: some files are GPL 2 or GPL 3, but not later


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Attila Lakatos <alakatos@redhat.com> - 1.2304.0-1
changelog:
  - Rebase to 1.2304.0 (new release number scheme, now like rsyslog)
  Resolves: rhbz#2183193
  - Address CVE-2020-12762
  Resolves: rhbz#2203170


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-1
changelog:
  - Rebase to libguestfs 1.52.2 (along the stable branch)
  - Remove dependency on syslinux packages
    resolves: RHEL-50565


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.52.2-4
changelog:
  - Synchronize patches with RHEL 9.5
    resolves: RHEL-56325
  - appliance/init: Don't set impossible "noop" disk scheduler
    resolves: RHEL-56157


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.54.0-5
changelog:
  - Rebase to libguestfs 1.54.0
    resolves: RHEL-56810
  - Fix osinfo for Windows Server 2025
    resolves: RHEL-62989
  - Replace Jansson with json-c
    resolves: RHEL-65293
  - Remove squashfs-tools on RHEL
    resolves: RHEL-68937
  - Fix perl-Sys-Guestfs debuginfo
    resolves: RHEL-68973


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.56.1-3
changelog:
  - Rebase to libguestfs 1.56.1
    resolves: RHEL-81733
  - Include host kernel information in libguestfs debugging output
    resolves: RHEL-83026
  - Fix virt-v2v conversion of split /usr Ubuntu 22+
    resolves: RHEL-87622
  - Remove dependencies on oUnit, flex, bison, file-devel
  - Remove zfs-fuse (not used in RHEL)
  - Fix gating test
  - Fix inspection with duplicated root mountpoint
    resolves: RHEL-90170
  - Add btrfs-scrub-full API
    resolves: RHEL-91936
  - Add e2fsck forceno flag
    resolves: RHEL-92599
  - Capture and raise qemu-img stderr
    resolves: RHEL-92239
  - Ignore btrfs snapshots of roots
    resolves: RHEL-93109
  - Add /etc/fstab, lsblk and blkid to verbose output
    resolves: RHEL-106490
  - Fix conversion of SLES15 with encrypted btrfs filesystem
    resolves: RHEL-93584
  - Add guestfs_setfiles API
    resolves: RHEL-108832
  - Ignore blank disks in Windows drive mapping
    resolves: RHEL-109258


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.57.6-2
changelog:
  - Rebase to libguestfs 1.57.6
    resolves: RHEL-111240
  - Synchronize spec file with Fedora
  - Add new libguestfs ntfs_chmod API
    resolves: RHEL-113833
  - Use setfiles -A option if available to reduce memory usage
    resolves: RHEL-114292
  - Add -cpu max when testing for KVM via QMP
    resolves: RHEL-121076
  - Require passt
    resolves: RHEL-122315
  - Add AV and GPOs to inspection info
    resolves: RHEL-125846


author: Richard W.M. Jones <rjones@redhat.com> - 10.0-2
changelog:
  - Import package into CentOS Stream 10
  - Remove resolves refs to work around check-gitbz bug (RHELBLD-14966)
  - Add gating tests
  - Set ExclusiveArch/ExcludeArch to the same as for libguestfs


author: Tomas Popela <tpopela@redhat.com> - 1.0.5-19
changelog:
  - Disable python support. This package is only in RHEL 10, because
    tracker-miners requires it and it doesn't need the Python bits.
  - Resolves: RHEL-52843


author: Pavel Filipenský <pfilipensky@samba.org> - 0:4.22.4-104
changelog:
  - resolves: RHEL-101759 - Fix DC discovery after Windows netlogon hardening
    (follow-up, main fix is in samba-4.22.2-103.el10)


author: Jerry James <loganjerry@gmail.com> - 3.28.0-1
changelog:
  - Update to 3.28.0
  - Install internal.h for MuseScore
  - Drop ancient obsoletes
  - Build the python package with dist-info
  - Add tables subpackage for the noarch data
  - Complete and correct SPDX migration
  - Remove need for chrpath
  - Minor spec file cleanups


author: Richard W.M. Jones <rjones@redhat.com> - 1.20.2-2
changelog:
  - Rebase to libnbd 1.20.2
  - Fix multiple flaws in TLS server certificate checking
    resolves: RHEL-49802
  - Print full NBD error from server
    resolves: RHEL-50667


author: Richard W.M. Jones <rjones@redhat.com> - 1.22.2-2
changelog:
  - Rebase to libnbd 1.22.2
  - Synch spec file with Fedora Rawhide.
    resolves: RHEL-78831
  - Fix nbdinfo with dark theme
    resolves: RHEL-7119
  - Add nbdcopy --blkhash option
    resolves: RHEL-85513
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104019


author: Richard W.M. Jones <rjones@redhat.com> - 1.23.11-1
changelog:
  - Rebase to libnbd 1.23.11
    resolves: RHEL-111243
  - Synch spec file with Fedora
  - Fix unsanitized hostnames in nbd+ssh URIs allow remote execution
    resolves: RHEL-129296


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-0
changelog:
  - Updated to the latest release: nfs-utils-2-8-2 (RHEL-67786)
    Resolves: RHEL-65826
    Resolves: RHEL-67041
    Resolves: RHEL-67168
    Resolves: RHEL-67786
    Resolves: RHEL-68575


author: Scott Mayhew <smayhew@redhat.com> 2.8.2-3
changelog:
  - fix ownership of /var/lib/nfs/statd/state (RHEL-77913)
  - /var/lib/nfs/{etab,rmtab} should not be marked as config files (RHEL-77912)


author: Scott Mayhew <smayhew@redhat.com> 2.8.3-0
changelog:
  - Updated to nfs-utils-2-8-3 plus additional fixes from 2-8-4-rc1 (RHEL-88768)
    Resolves: RHEL-71286
    Resolves: RHEL-82418
    Resolves: RHEL-82557
    Resolves: RHEL-85409
    Resolves: RHEL-85413
    Resolves: RHEL-88768


author: Phil Sutter <psutter@redhat.com> [1.3.0-2.el10]
changelog:
  - utils: Drop asterisk from end of NFTA_DEVICE_PREFIX strings (Phil Sutter) [RHEL-108860]
  - utils: Add helpers for interface name wildcards (Phil Sutter) [RHEL-108860]


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Tomas Popela <tpopela@redhat.com> - 0.8.3-5
changelog:
  - Drop the requirement on docbook5-style-xsl as it will be removed from RHEL.
    As it was used to build the man page, add the man page in the native format.
  - Resolves: RHEL-45565


author: Dmitry Belyavskiy - 0.10.1-1
changelog:
  - Rebase to 0.10.1 version (CVE-2024-36405)
    Resolves: RHEL-40699
  - Use dlopen for OpenSSL algos implementation
    Resolves: RHEL-46598
  - Correct license naming
    Resolves: RHEL-45265


author: José Expósito <jexposit@redhat.com> - 0.16-13
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29742


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.0.0-9
changelog:
  - RHEL-60335 CVE-2024-47175 libppd: remote command injection via attacker controlled data in PPD file


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Remi Collet <remi@remirepo.net> - 0.12.0-1
changelog:
  - update to 0.12.0
  - add patch to not install the static library, from
    https://github.com/alanxz/rabbitmq-c/pull/749
  - add patch to fix version in pkgconfig file, from
    https://github.com/alanxz/rabbitmq-c/pull/751


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1 (RHEL-38831)
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (RHEL-35699)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Petr Pisar <ppisar@redhat.com> - 1.18.0-2
changelog:
  - Use librpmio instead of gpgme for handling PGP keys (RHEL-47106)
  - Fix a memory leak in select_next_target() (RHEL-35699)


author: Romain Geissler <romain.geissler@amadeus.com> - 0.21.2-8
changelog:
  - Backport packaging of mock service from Fedora in order to consume it in EPEL
    Resolves: RHEL-81780


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - setexecfilecon: Remove useless rc check (RHEL-35586)
  - matchpathcon: RESOURCE_LEAK: Variable "con" (RHEL-35584)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Check that sym_index is within bounds (RHEL-34823)
  - cil: Initialize avtab_datum on declaration (RHEL-34810)
  - mls: Do not destroy context on memory error (RHEL-34810)
  - cil/cil_post: Initialize tmp on declaration (RHEL-34810)
  - Initialize "strs" on declaration (RHEL-34810)


author: Than Ngo <than@redhat.com> - 1.1.19-13
changelog:
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    Resolves: RHEL-86305


author: Michal Hlavinka <mhlavink@redhat.com> - 1.1.0-7
changelog:
  - update license tag format (SPDX migration) for https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.0-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-4976 - [RFE] Continue searching other PKCS#11 tokens if certificates are not found
  - Resolves: RHEL-87200 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack
  - Resolves: RHEL-25593 - Improve sssd-simple man page description
  - Resolves: RHEL-14752 - [RFE] Add IPA subdomain support to allow IPA-IPA trust
  - Resolves: RHEL-92569 - SSSD LDAPU1 Mapping braces problem
  - Resolves: RHEL-4981 - p11_child currently has an infinite timeout
  - Resolves: RHEL-5042 - IDM homedir %o is not working, returns /home/domain/user instead of AD POSIX unixHomeDir
  - Resolves: RHEL-13086 - [RFE] Anonymous bind requests on RootDSE
  - Resolves: RHEL-45824 - SSSD unable to enumerate LDAP groups if LDAP server contains any group with # character in their names


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-1
changelog:
  - Resolves: RHEL-95058 - Rebase SSSD for RHEL 10.1
  - Resolves: RHEL-77184 - AD user in external group is not cleared when expiring the cache


author: Alexey Tikhonov <atikhono@redhat.com> - 2.11.1-2
changelog:
  - Related: RHEL-77184 - AD user in external group is not cleared when expiring the cache
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.1-3
changelog:
  - Use a SPDX license tag
  - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder
  - udiskslinuxmanager: Fix use after free
  - tests: Fix targetcli_config.json


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.90-4
changelog:
  - Rebase to upstream 2.10.90 (pre-)release
  - lvm2: Try opening for unused device detection harder (RHEL-39935)


author: Tomas Bzatek <tbzatek@redhat.com> - 2.11.0-1
changelog:
  - Version 2.11.0 (RHEL-114981)
  - tests: Rework nvme revision check (RHEL-90572)
  - tests: Adapt for missing fstab and crypttab (RHEL-78987)


author: Kate Hsuan <hpa@redhat.com> - 1.0.28-1
changelog:
  - Update to the upstream version 1.0.28
  - Update to the upstream version 1.0.28
  - Fix automake-1.17 issue since the release was based on automake-1.17


author: Jiri Denemark <jdenemar@redhat.com> - 11.2.0-1
changelog:
  - Rebased to libvirt-11.2.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-7035, RHEL-24046, RHEL-40077, RHEL-58151, RHEL-68043
      RHEL-71883, RHEL-72994, RHEL-77552, RHEL-80166, RHEL-80533
      RHEL-80688, RHEL-81731, RHEL-81890, RHEL-83148, RHEL-84257
      RHEL-84688
  - cpu_map: Install Ampere-1 ARM CPU models (RHEL-71662)


author: Jiri Denemark <jdenemar@redhat.com> - 11.3.0-1
changelog:
  - Rebased to libvirt-11.3.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-27172, RHEL-79088, RHEL-82411, RHEL-84257, RHEL-85320
      RHEL-85414, RHEL-85672, RHEL-86523, RHEL-86776, RHEL-86778


author: Jiri Denemark <jdenemar@redhat.com> - 11.4.0-1
changelog:
  - Rebased to libvirt-11.4.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-79460, RHEL-84783, RHEL-85414, RHEL-86952, RHEL-87177
      RHEL-88747, RHEL-89414, RHEL-90160, RHEL-90625, RHEL-92510


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-1
changelog:
  - Rebased to libvirt-11.5.0 (RHEL-71662)
  - The rebase also fixes the following bugs:
      RHEL-86592, RHEL-93775, RHEL-95749, RHEL-100109


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-2
changelog:
  - virSystemdCreateMachine: Document @maxthreds (RHEL-95361)
  - cgroup: Unexport 'virDomainCgroupInitCgroup' (RHEL-95361)
  - qemu: conf: Store 'autoShutdown' config in virDomainDriverAutoShutdownConfig (RHEL-95361)
  - hypervisor: domain: Extract logic for auto shutdown to virDomainDriverAutoShutdownActive (RHEL-95361)
  - virSystemdCreateMachine: Add flag to invert machined unit dependencies (RHEL-95361)
  - cgroup: Plumb the 'daemonDomainShutdown' parameter of 'virSystemdCreateMachine' to drivers (RHEL-95361)
  - qemu: Fix auto-shutdown of qemu VMs by the qemu driver (RHEL-95361)
  - hypervisor: Split out individual steps out of virDomainDriverAutoShutdown (RHEL-95196)
  - virDomainDriverAutoShutdownDoSave: Don't attempt to save transient VMs (RHEL-95196)
  - virDomainDriverAutoShutdown: Refactor selection logic for VMs (RHEL-95196)
  - tls: Don't require 'keyEncipherment' to be enabled altoghther (RHEL-100711)
  - kbase: tlscerts: Drop 'encryption_key' feature request (RHEL-100711)
  - tests: virnettls*test: Drop use of GNUTLS_KEY_KEY_ENCIPHERMENT (RHEL-100711)
  - qemu_tpm: Rename qemuTPMHasSharedStorage -> qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Extract per-TPM functionality from qemuTPMDomainHasSharedStorage (RHEL-80155)
  - qemu_tpm: Only warn about missing locking feature on shared filesystems (RHEL-80155)


author: Jiri Denemark <jdenemar@redhat.com> - 11.5.0-4
changelog:
  - qemu: fix order of VNC TLS config entries (RHEL-104382)
  - qemu: sanitize blank lines in config file (RHEL-104382)
  - qemu: add ability to set TLS priority string with QEMU (RHEL-104382)


author: Jiri Denemark <jdenemar@redhat.com> - 11.7.0-1
changelog:
  - Rebased to libvirt-11.7.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-72006, RHEL-110191


author: Jiri Denemark <jdenemar@redhat.com> - 11.8.0-1
changelog:
  - Rebased to libvirt-11.8.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-7038, RHEL-50320, RHEL-62032, RHEL-79806, RHEL-113574
      RHEL-116690


author: Jiri Denemark <jdenemar@redhat.com> - 11.9.0-1
changelog:
  - Rebased to libvirt-11.9.0 (RHEL-104238)
  - The rebase also fixes the following bugs:
      RHEL-87522, RHEL-95818, RHEL-122932


author: Ville-Pekka Vainio <vpvainio@iki.fi> - 4.3.2-1
changelog:
  - New upstream release
  - Update C++ standard from C++11 to C++14
  - Compilation fixes for recent versions of GCC
  - Small fixes to Finnish grammar checker


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.7.2-10
changelog:
  - Support added for post-quantum cryptography
    Resolves: RHEL-93091
  - Remove deprecated path from systemd service file
    Resolves: RHEL-101169


author: Toke Høiland-Jørgensen <toke@redhat.com> 1.5.7-1
changelog:
  - Upstream version bump
  - Add annocheck exceptions for BPF objects (Felix)
  - Re-enable debug builds (Felix)
  - Add libcap-ng-devel to BuildDepends


author: David King <dking@redhat.com> - 2.12.5-6
changelog:
  - Fix CVE-2025-6021 (RHEL-96495)
  - Fix CVE-2025-49794 (RHEL-96395)
  - Fix CVE-2025-49795 (RHEL-96408)
  - Fix CVE-2025-49796 (RHEL-96421)


author: Joerg Schmidbauer <jschmidb@de.ibm.com> - 1.2.0
changelog:
  - Support for get/set intermediate iv for CBC and XTS
  - Support for internal iv for GCM
  - Exploit KBLOB2PROTK3 ioctl for clear AES and EC keys
  - Fix AES EP11 version 6 key support for generate and import_clear


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-1
changelog:
  - update to 4.3 (RHEL-54718)
  - add holdover support to ts2phc (RHEL-54716)
  - rework NMEA delay patch to fix PPS edge rejection (RHEL-54719)
  - fix ts2phc to reset NMEA parser after RMC message (RHEL-54724)
  - fix ts2phc to correctly handle leap seconds (RHEL-54721)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-1
changelog:
  - update to 4.4 (RHEL-58210)
  - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60055)
  - support static sink clocks in phc2sys automatic mode (RHEL-69145)
  - don't require -O option without -a and -w in phc2sys (RHEL-69699)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.4-3
changelog:
  - add experimental option for external PPS in ts2phc automatic mode
    (RHEL-89605)
  - add command to set external grandmaster properties (RHEL-91310)
  - refresh link status on faults (RHEL-89811)


author: Brian C. Lane <bcl@redhat.com> 40.5.4-1
changelog:
  - tito: Add tito to container's test-packages (bcl)
    Related: RHEL-31830
  - creator: Fix pylint error in run_creator (bcl)
    Related: RHEL-31830
  - livemedia-creator: Check for BIOS vs. UEFI qemu support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Enable s390x virt support (bcl)
    Related: RHEL-31830
  - livemedia-creator: Make use of virtio devices more generic (bcl)
    Related: RHEL-31830
  - Set requirement on lorax-templates-rhel for prefixdevname change (bcl)
    Related: RHEL-30010


author: Brian C. Lane <bcl@redhat.com> 40.5.5-1
changelog:
  - templates: Synchronize generic templates with lorax-templates-rhel (bcl)
    Related: RHEL-35396
  - docs: Update livemedia-creator documentation for RHEL 10 (bcl)
    Related: RHEL-31853
  - livemedia-creator: The --make-tar option requires tar (bcl)
    Related: RHEL-31853
  - docs: Update example kickstarts for RHEL/CentOS (bcl)
    Resolves: RHEL-31853
  - lorax: Change default rootfs size to 3GiB (bcl)
    Resolves: RHEL-32504


author: Brian C. Lane <bcl@redhat.com> 40.5.6-1
changelog:
  - New lorax documentation - 40.5.6 (bcl)
    Related: RHEL-48606
  - ltmpl: Remove * from docstring (bcl)
    Related: RHEL-48606
  - docs: Update intersphinx and add _static dir (bcl)
    Related: RHEL-48606
  - docs: Document --rootfs-type options (bcl)
    Related: RHEL-48606
  - erofs: Use dedupe and all-fragments options (bcl)
    Related: RHEL-48606
  - imgutils: mkfs.erofs options should come first (bcl)
    Related: RHEL-48606
  - Accept but ignore the old --squashfs-only argument (awilliam)
    Related: RHEL-48606
  - Add compression.erofs section to lorax.conf (bcl)
    Resolves: RHEL-48606
  - Add erofs and erofs-ext4 support to --rootfs-type (bcl)
    Related: RHEL-48606
  - Replace squashfs_only with rootfs_type (bcl)
    Related: RHEL-48606
  - imgutils: Add mkerofs function and test (bcl)
    Related: RHEL-48606
  - runtime-postinstall: Make sure blacklist_exceptions has been removed (jstodola)
    Resolves: RHEL-53721


author: Brian C. Lane <bcl@redhat.com> 40.5.7-1
changelog:
  - templates: Sync template changes from lorax-templates-rhel (bcl)
    Resolves: RHEL-54713
  - tests: Add a test to make sure redhat-release-eula isn't included (bcl)
    Related: RHEL-54381


author: Brian C. Lane <bcl@redhat.com> 40.5.8-1
changelog:
  - tests: Fix mkksiso unit test (bcl)
    Related: RHEL-61778
  - pylint: Print astroid version (bcl)
    Related: RHEL-61778
  - Extend help for --updates and --ks parameters (jkonecny)
    Related: RHEL-61778
  - Fix --updates the updates image wasn't loaded (jkonecny)
    Resolves: RHEL-61778
  - Implement --replace also for S390 (sebastian.stark)
    Related: RHEL-61778
  - mkksiso: option --replace to replace arbitrary text in boot config.  (sebastian.stark)
    Related: RHEL-61778
  - livemedia: Add isomd5sum (bcl)
    Resolves: RHEL-58896


author: Brian C. Lane <bcl@redhat.com> 40.5.9-1
changelog:
  - tests: Swap nomodeset for inst.text in mkksiso test data (bcl)
    Related: RHEL-66603
  - templates: Change nomodeset / basic graphics to use inst.text (bcl)
    Resolves: RHEL-66603
  - templates: Drop nomodeset / basic graphics menu from live configs (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.10-1
changelog:
  - erofs: Change the erofs compression default to zstd (bcl)
    Related: RHEL-48606
  - Revert "tests: Swap nomodeset for inst.text in mkksiso test data" (bcl)
    Related: RHEL-66603
  - Revert "templates: Change nomodeset / basic graphics to use inst.text" (bcl)
    Related: RHEL-66603
  - Revert "templates: Drop nomodeset / basic graphics menu from live configs" (bcl)
    Related: RHEL-66603


author: Brian C. Lane <bcl@redhat.com> 40.5.11-1
changelog:
  - erofs: Make smaller lzma erofs images by default (bcl)
    Related: RHEL-48606
  - Revert "erofs: Change the erofs compression default to zstd" (bcl)
    Related: RHEL-48606


author: Brian C. Lane <bcl@redhat.com> 40.5.12-1
changelog:
  - mkksiso: Fix rebuilding the efiboot.img on some systems (bcl)
    Resolves: RHEL-83202
  - livemedia-creator: Set 0755 permission on / cpio overlay (bcl)
    Resolves: RHEL-83519


author: Brian C. Lane <bcl@redhat.com> - 10.0-53
changelog:
  - runtime-cleanup: fonttosfnt no longer installed (bcl)
    Resolves: RHEL-54717
  - Use the same page args in all the per-arch templates (bcl)
    Resolves: RHEL-54535
  - Remove manual /root/lorax-packages.log creation (bcl)
    Resolves: RHEL-54534
  - Remove libuser.conf (bcl)
    Resolves: RHEL-54533


author: Brian C. Lane <bcl@redhat.com> - 10.0-55
changelog:
  - SERIAL: Bump to 54 to match spec change for mass rebuild (bcl)
    Related: RHEL-67586
  - tests: Fix the repos used for the test (bcl)
    Related: RHEL-67586
  - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl)
    Resolves: RHEL-67586


author: Brian C. Lane <bcl@redhat.com> - 10.1-1
changelog:
  - Bump release version to 10.1 (bcl)
    Related: RHEL-91929
  - Add a boot menu for fips=1 (bcl)
    Resolves: RHEL-91929


author: Brian C. Lane <bcl@redhat.com> - 10.1-3
changelog:
  - config_files: Do not remove `chcon` in runtime cleanup (ppolawsk)
    Resolves: RHEL-102872
  - runtime-postinstall: allow pipewire to run as root (awilliam)
    Resolves: RHEL-102419
  - runtime-cleanup: Do not clean up rpm binaries (bcl)
    Resolves: RHEL-101695


author: Brian C. Lane <bcl@redhat.com> - 10.2-1
changelog:
  - Do not remove SELinux from the runtime (ppolawsk)
    Resolves: RHEL-126547
  - Bump release version to 10.2 (bcl)
    Related: RHEL-126547


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9.0-dev.12.1
changelog:
  - %{gpgverify} sources
  - remove upstreamed patches
  - update to new upstream release
  - use compressed man pages


author: Thomas E. Dickey <dickey@invisible-island.net> - 2.9.0-3
changelog:
  - add brotli build-dependency
  - restore formerly-empty sample files
  - remove a couple of obsolete workarounds for installing


author: Mike FABIAN <mfabian@redhat.com> - 1.8.1-1
changelog:
  - Update to 1.8.1
  - Remove inscript2-20210820.tar.gz because it is now included upstream
  - Remove m17n-db-1.8.0-ml-mozhi-savannah-bug-59681.patch because it is included upstream
  - Remove unicode.mim because the improvement is included upstream


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Remove bn-national-jatiya input method (included upstream)
  - Remove si-sayura input method (included upstream)
  - Remove mr-gamabhana input method (included upstream)
  - Update German translations (100%)
  - Remove m17n-db-1.8.0-inscript2-mni-sat.patch (included upstream)
  - Remove m17n-db-1.6.5-number_pad_itrans-222634.patch
    This patch is not needed, numbers are typed in language representation
    when using the number pad with numlock on even without this patch.
    (I.e. the problem reported in https://bugzilla.redhat.com/show_bug.cgi?id=222634
     is still fixed)
  - Add icon for hu-rovas-post input method
  - Remove m17n-db-1.6.5-kn-itrans_key-summary_bug228806.patch
    (See: https://git.savannah.nongnu.org/cgit/m17n/m17n-db.git/commit/?id=f10cfe21d49afbef40bdc681ff70563b6154eac0
    after these upstream changes to kn-itrans, the summary added by the patch is wrong)
  - Remove m17n-db-1.6.5-bn-itrans-bug182227.patch
    (This patch removed mappings which are "not in ITRANS Bengali table", nevertheless
     these mappings might be useful to some users, better keep them for the time being)
  - Remove m17n-db-1.6.5-kn-inscript-ZWNJ-bug440007.patch (included upstream)
  - Remove m17n-db-1.7.0-fix-e-o-mappings.patch (included upstream)
  - Remvove fix for ld mapping in MIM/bo-ewts.mim (include upstream)
    (See: https://bugzilla.redhat.com/show_bug.cgi?id=1487512)
  - MIM/bo-ewts.mim: remove whitespace in rn and brn mapping


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - kok-inscript2-deva, mr-inscript, mr-inscript2: Fix digit 0
  - ta-vutam: Change the header comment to a description
  - mr-gamabhana: icon resized to 48x48
  - latn1-pre: add icon
  - ar-translit: add icon
  - ath-phonetic: add icon
  - bla-phonetic: add icon
  - cr-western: add icon
  - iu-phonetic: add icon
  - nsk-phonetic: add icon
  - oj-phonetic: add icon
  - uk-kbd: add icon
  - eo-vi-sistemo: add icon
  - Rename the .mim files of some eo input methods to improve search for the icons
  - Workarounds for doxygen


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - New input methods from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    sa-vedic-itrans, dra-iso-15919-itrans, hi-brahmi-itrans, ks-sharada-itrans,
    mr-modi-itrans, sa-brahmi-itrans, sa-grantha-itrans, sa-iso-15919-itrans,
    sa-sharada-itrans, sa-inscript, sa-iast-vedic
  - hi-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com>
  - ne-trad-ttf: Update from author,  Santosh Pradhan <sapradhan8@gmail.com>
  - ja-trycode: Add icon.
  - ks-inscript: Add icon.
  - mai-inscript: Add icon.
  - ml-enhanced-inscript: Add icon.
  - mr-itrans: Add icon.
  - hi-remington: Add icon.
  - mr-typewriter: Add icon.
  - mr-phonetic: Add icon.
  - ne-rom-translit: Add icon.
  - zh-pinyin-yi: Add icon.
  - unicode: Add icon.
  - da-post: Add icon.
  - bo-ewts: Add icon.
  - bo-tcrc: Add icon.
  - kn-typewriter: Add icon.
  - grc-mizuochi: Add icon.
  - fr-azerty: Add icon.
  - hi-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-optitransv2: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - sa-itrans: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
  - kn-itrans: Updates from "विश्वासो वासुकिजः (Vishvas Vasuki)" <vishvas.vasuki@gmail.com> and some extra bug fixes.
  - lsymbol: Some additions from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)" and
    some more improvements: Use emoji presentation when possible, better grouping in groups of 6, better description
  - math-latex: Updates from https://github.com/indic-transliteration/m17n-db-indic "विश्वासो वासुकिजः (Vishvas Vasuki)"
    New option "with-backslash-prefix".
  - ks-kbd: Fix typo in description, add icon.
  - ug-kbd: Add icon.
  - tai-sonla-kbd.png: Add icon.
  - mni-inscript2-mtei.png: Add icon.
  - sat-inscript2-olck.png: Add icon.
  - or-phonetic.png: Add icon.
  - sa-harvard-kyoto.png: Add icon.
  - pa-anmollipi.png: Add icon.
  - pa-remington.png: Add icon.
  - si-singlish.png: Add icon.
  - ta-lk-renganathan.png: Add icon.
  - te-rts.png: Add icon.
  - vi-han.png: Add icon.
  - vi-nomvni: Make existing icon work.
  - vi-nomtelex: Make existing icon work.
  - lsymbol: Add icon.
  - ssymbol: Add icon.


author: Mike FABIAN <mfabian@redhat.com> - 1.8.5-1
changelog:
  - Update to 1.8.5
  - new-newa-traditional-extended: New input method by Swornim Nakarmi <svarnim.nakahmi1.618@gmail.com>
  - ml-pn-c: New input method for Malayalam by Ajith R <ajithramayyan at yahoo dot co dot in>
  - en-pn-eqf: This is a slightly modified version of the QWERTY English layout to be used along with the ml-pn-c input method


author: Mike FABIAN <mfabian@redhat.com> - 1.8.2-1
changelog:
  - Update to 1.8.2
  - Fix parallel builds by switching from absolute to relative paths
    (Resolves: https://savannah.nongnu.org/bugs/index.php?61377)
  - enable parallel builds in the spec file

  - Update to 1.8.1
  - Remove m17n-lib-c99.patch (included upstream)
  - Remove Fix-segmentation-fault-when-using-ibus-m17n-with-vi-telex-in-gedit-in-wayland.patch
    (included upstream)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Fixes to be able to create m17n-docs-1.8.3: Fix doxygen tags, change all EUC-JP files to UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 1.8.4-1
changelog:
  - Update to 1.8.4
  - Fixes “typedef in m17n-core.h causing error when compiling with C++ code”
    (Resolves: https://savannah.nongnu.org/bugs/index.php?64566)


author: DJ Delorie <dj@redhat.com> - 1:4.4.1-3
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Michal Schorm <mschorm@redhat.com> - 3.1.20-2
changelog:
  - Fix minimal required version of mariadb-connector-c as per:
    https://mariadb.com/kb/en/mariadb-connector-odbc-3-1-20-release-notes/


author: Jindrich Novy <jnovy@redhat.com> - 1:4.8.31-1
changelog:
  - update to 4.8.31
  - drop upstreamed python3 patch
  - rename fish -> shell
  - drop obsolete smb option


author: Xiao Ni <xni@redhat.com> - 4.4-1
changelog:
  - Update to mdadm 4.4 and latest upstream
  - Resolves: RHEL-86676, RHEL-72803, RHEL-88793, RHEL-88791


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.0-3
changelog:
  - Rebuild for fixed frame pointer compiler flags in Rust RPM macros.
  - Slightly modernize Rust packaging (drop ExclusiveArch, __cargo_skip_build).


author: Alex Williamson <alex.williamson@redhat.com> - 1.3.0-1
changelog:
  - New upstream release: https://github.com/mdevctl/mdevctl/releases/tag/v1.3.0
  - Note upstream moved default script location from /etc/mdevctl.d/scripts.d
    to /usr/lib/mdevctl/scripts.d.  Both locations are currently supported, the
    new locations is recommended.


author: Kairui Song <ryncsn@gmail.com> - 0.2.5-1
changelog:
  - Update to upstream latest release.
  - Fix crash when wrong reporter type is used.
  - Fix a few tracing error.


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.0.0-1
changelog:
  - RHEL-83547 - Rebase mingw-qemu-ga-win to QEMU 10.0.0 
  - RHEL-96980 - mingw-qga: Drop mingw-pixman build deps
  - RHEL-98947 - [mingw-qemu-ga-win] MSI installer ignore VSS installation result 
  - RHEL-11824 - [QGA] VSS installation retry, if previously VSS service was not un-registered correctly


author: Kostiantyn Kostiuk <kkostiuk@redhat.com> 110.1.0-1
changelog:
  - RHEL-111001 Rebase mingw-qemu-ga-win to QEMU 10.1.0
  - RHEL-107458 [mingw-qemu-ga-win] QAPI error desc does not contain Windows error
  - RHEL-107446 QGA VSS wasn't removed if the QGA installation fail and quit
  - RHEL-107215 Fix don't daemonize before channel is initialized patch for Windows behavior


author: Tomas Korbar <tkorbar@redhat.com> - 1.14.3-3
changelog:
  - Fix building with gcc 14
  - incompatible-pointer-types warnings became errors, but they've
  been present for a long time and posed no threat, thus revert
  the behaviour
  - Resolves: rhbz#2259155


author: Joe Orton <jorton@redhat.com> - 1.14.5-2
changelog:
  - update to 1.14.5 (#2331047)
  - use %autosetup
  - enable tests by default again
  - conditionalize Ruby tests (Yaakov Selkowitz)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-1
changelog:
  - new version 2.0.29
  - Resolves: RHEL-45807 - mod_http2: DoS by null pointer in websocket over
    HTTP/2 (CVE-2024-36387)


author: Luboš Uhliarik <luhliari@redhat.com> - 2.0.29-3
changelog:
  - Resolves: RHEL-106263 - CVE-2025-49630 httpd: untrusted input from a client
    causes an assertion to fail in the Apache mod_proxy_http2 module


author: Sokratis Zappis <szappis@redhat.com> - 1.3.20-1
changelog:
  - Rebase mod_proxy_cluster to upstream 1.3.20.Final tag
  - Related: RHEL-55407 - Rebase mod_proxy_cluster to upstream 1.3.20.Final release


author: Miro Hrončok <mhroncok@redhat.com> - 2.5.1-6
changelog:
  - Split libmpdec++ into a mpdecimal++ subpackage
  - This prevents packages only using the libmpdec library from transitively depending on libstdc++


author: Charalampos Stratakis <cstratak@redhat.com> - 2.5.1-11
changelog:
  - Fix bind-now annocheck failure by passing the proper LDFLAGS to the C++ library
  Resolves: RHEL-33509


author: Cristian Le <cristian.le@mpsd.mpg.de> - 4.1.2-13
changelog:
  - Added CMAKE_PREFIX_PATH to the module file to unsure that CMake projects
    find the available MPI enabled packages, libraries, executables, etc.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.17.10-11
changelog:
  - Remove redundand restorecon call, redirect safe to ignore output
    to /dev/null, mark module directory to avoid rpm verification
    Resolves: RHEL-67894


author: Packit <hello@packit.dev> - 1.0.9-1
changelog:
  - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm)
  - Resolves rhbz#2250360


author: Richard W.M. Jones <rjones@redhat.com> - 1.40.0-2
changelog:
  - Rebase to nbdkit 1.40.0
    related: RHEL-49594
  - Send the last error to the NBD client
    resolves: RHEL-50666


author: Richard W.M. Jones <rjones@redhat.com> - 1.44.1-2
changelog:
  - Rebase to nbdkit 1.44.1
    resolves: RHEL-78830, RHEL-101180
  - Synch the spec file with Fedora Rawhide.
  - nbdkit-ondemand-plugin moves into a new subpackage.
  - New nbdkit-count-filter & nbdkit-time-limit-filter.
  - Remove nbdkit-cacheextents-filter.
  - Add extra system call checking and debugging to nbdkit-file-plugin
    resolves: RHEL-85515
  - Allow nbdkit-file-plugin to zero and trim block devices
    resolves: RHEL-89371
  - vddk: Pre-cache the extents for readonly connections
    resolves: RHEL-94825
  - Log filename, offset and count in nbdkit-file-plugin error messages
    resolves: RHEL-95364
  - vddk: Improve statistics
    related: RHEL-94825
  - CVE-2025-47711 denial of service attack by client sending maximum size block
    status
  - CVE-2025-47712 denial of service attack by client sending large unaligned
    size block status
    resolves: RHEL-95819
  - Add support for VDDK 9.0.0.0
    resolves: RHEL-99467
  - server: Fix .zero fallback path
    resolves: RHEL-101636


author: Richard W.M. Jones <rjones@redhat.com> - 1.45.12-1
changelog:
  - Rebase to nbdkit 1.45.12
    resolves: RHEL-111242
  - Synchronize spec file with Fedora.
  - vddk: Don't use FNM_PATHNAME when matching export parameter
    resolves: RHEL-122755


author: Florian Weimer <fweimer@redhat.com> - 11.02.00-5
changelog:
  - GCC 14 compatibility fixes:
    Drop netpbm-cmuwtopbm.patch to fix an out-of-bounds stack write (#2259450)
    Stub out unused converter/other/jpeg2000/libjasper_compat.c (#2259448)


author: Phil Sutter <psutter@redhat.com> [1.1.1-1.el10]
changelog:
  - monitor: Recognize flowtable add/del events (Phil Sutter) [RHEL-65346]
  - tests: py: Fix for storing payload into missing file (Phil Sutter) [RHEL-65346]
  - json: Support typeof in set and map types (Phil Sutter) [RHEL-65346]
  - json: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - doc: extend description of fib expression (Phil Sutter) [RHEL-65346]
  - tests: monitor: fix up test case breakage (Phil Sutter) [RHEL-65346]
  - src: fix extended netlink error reporting with large set elements (Phil Sutter) [RHEL-65346]
  - rule: netlink attribute offset is uint32_t for struct nlerr_loc (Phil Sutter) [RHEL-65346]
  - mnl: update cmd_add_loc() to take struct nlmsghdr (Phil Sutter) [RHEL-65346]
  - mnl: rename to mnl_seqnum_alloc() to mnl_seqnum_inc() (Phil Sutter) [RHEL-65346]
  - src: collapse set element commands from parser (Phil Sutter) [RHEL-65346]
  - libnftables-json: fix raw payload expression documentation (Phil Sutter) [RHEL-65346]
  - tests: shell: fix spurious dump failure in vmap timeout test (Phil Sutter) [RHEL-65346]
  - Rebase onto version 1.1.1 (Phil Sutter) [RHEL-65346]


author: Phil Sutter <psutter@redhat.com> [1.1.1-5.el10]
changelog:
  - src: add conntrack information to trace monitor mode (Phil Sutter) [RHEL-102994]
  - src: split monitor trace code into new trace.c (Phil Sutter) [RHEL-102994]


author: Phil Sutter <psutter@redhat.com> [1.1.1-6.el10]
changelog:
  - Makefile: Fix for 'make CFLAGS=...' (Phil Sutter) [RHEL-108851]
  - table: Embed creating nft version into userdata (Phil Sutter) [RHEL-108851]
  - doc: nft.8: Minor NAT STATEMENTS section review (Phil Sutter) [RHEL-106743]
  - trace: Fix for memleak in trace_alloc_list() error path (Phil Sutter) [RHEL-111205]


author: Phil Sutter <psutter@redhat.com> [1.1.5-1.el10]
changelog:
  - doc: libnftables-json: Describe RULESET object (Phil Sutter) [RHEL-121194]
  - doc: don't suggest to disable GSO (Phil Sutter) [RHEL-121194]
  - build: don't install ancillary files without systemd service file (Phil Sutter) [RHEL-121194]
  - tests: shell: fix typo in vmap_timeout test script (Phil Sutter) [RHEL-121194]
  - tests: py: inet/osf.t: Fix element ordering in JSON equivalents (Phil Sutter) [RHEL-121194]
  - tests: py: any/ct.t.json.output: Drop leftover entry (Phil Sutter) [RHEL-121194]
  - tests: py: any/tcpopt.t.json: Fix JSON equivalent (Phil Sutter) [RHEL-121194]
  - optimize: Fix verdict expression comparison (Phil Sutter) [RHEL-121194]
  - datatype: Fix boolean type on Big Endian (Phil Sutter) [RHEL-121194]
  - src: parser_json: fix format string bugs (Phil Sutter) [RHEL-121194]
  - doc: fix tcpdump example (Phil Sutter) [RHEL-121194]
  - libnftables: do not re-add default include directory in include search path (Phil Sutter) [RHEL-121194]
  - monitor: Inform JSON printer when reporting an object delete event (Phil Sutter) [RHEL-121194]
  - tests: shell: skip two bitwise tests if multi-register support isn't available (Phil Sutter) [RHEL-121194]
  - tests: monitor: Fix regex collecting expected echo output (Phil Sutter) [RHEL-121194]
  - monitor: Quote device names in chain declarations, too (Phil Sutter) [RHEL-121194]
  - tools: gitignore nftables.service file (Phil Sutter) [RHEL-121194]
  - parser_bison: remove leftover utf-8 character in error (Phil Sutter) [RHEL-121194]
  - Rebase onto version 1.1.5 (Phil Sutter) [RHEL-121194]


author: Joe Orton <jorton@redhat.com> - 2:1.26.2-2
changelog:
  - Add systemd instantiated service nginx@.service, allowing e.g. "systemctl
    start nginx@foobar.service" to start an instance of nginx using
    /etc/nginx/foobar.conf as the configuration.


author: Martin Osvald <mosvald@redhat.com> - 4:7.92-1
changelog:
  - Downgrade Nmap to 7.92 to fix NPSL licensing issue
  - nmap.spec: fix missing versioned Obsoletes and add ncat to Provides


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Support reapply on mac-ref interface. RHEL-86035
  - Support refer route next-hop-interface by mac. RHEL-80547


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91250
  - Support nmpolicy against down iface. RHEL-86240
  - Support removal VLAN connection with empty ifname. RHEL-92916


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-37922
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-1415
  - Support matching by PCI adress. RHEL-80116
  - Apply dispatch changes first. RHEL-94840
  - Fix SRIOV VF reference. RHEL-91588
  - Fix deleting with `fail_over_mac` bond. RHEL-102600


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-106135
  - Fix setting DNS only with search or option. RHEL-102333


author: Mingyu Shi <mshi@redhat.com> - 2.2.50-1
changelog:
  - Upgrade to 2.2.50
  - Support MAC referring for VLAN in gen_conf.
  - Introduce state: ignore for route.
  - Support PCI address matching in gen_conf.
  - Support MacSec interface in gen_conf.


author: Gris Ge <fge@redhat.com> - 2.2.56-1
changelog:
  - Upgrade to 2.2.56
  - Allow using VRF name to specify route table. RHEL-119046
  - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-53956
  - Applying desired state with static DNS with static IP will touch `br-ex`
    even not mentioned. RHEL-125548
  - Align with libreswan default values. RHEL-26350
  - Support rightca ipsec option. RHEL-114237
  - Fix error when changing existing HSR interface. RHEL-100773


author: Andrei Radchenko <aradchen@redhat.com> - 2023.10-11
changelog:
  - Add test case for symlinked dependencies bug fix
  - added test/symlinked scenario
  - verifies nodejs.req correctly generates requirements for symlinked deps
  - added mock 'external' packages to support this test


author: Jan Staněk <jstanek@redhat.com> - 1:24.4.1-2
changelog:
  - Make package buildable in centos-stream
  - Remove tests that have issues with kojistream network
  - Temporarily use vendor copies of dependencies not up-to-date enough in
    the system


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 3.101.0-13
changelog:
  - fix the "Allow RSA-OAEP in FIPS mode" patch for the declaration after switch statement
  - fix changelog message for 3.101.0-11


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Andreas Schneider <asn@redhat.com> - 1.1.13-1
changelog:
  - Update to version 1.1.13
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.13/CHANGELOG


author: Andreas Schneider <asn@redhat.com> - 1.1.15-1
changelog:
  - Update to version 1.1.15
    https://gitlab.com/cwrap/nss_wrapper/-/blob/nss_wrapper-1.1.15/CHANGELOG
  - Fix building with cmocka >= 1.1.6


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.5-42.20150602git
changelog:
  - recognize the -m option
  - modernize the specfile
      - use recommended systemd macros
      - fix manual pages installation
      - sort file list and BuildRequires
      - use modern make macros
      - simplify %install section


author: Jerry James <loganjerry@gmail.com> - 9-1
changelog:
  - Update OCaml native arches for OCaml 5.1
  - Remove the Python file and some macros (now in ocaml-rpm-macros)
  - Add %ocaml_pkg macro for common declarations


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.34.7-7
changelog:
  - Provide a switch to restore pre-CVE-2020-10737 behavior
  - Always set the home directory permissions according to HOME_MODE


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-36292]
  - Resolves: RHEL-36292
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-3
changelog:
  - ovt-Drop-now-unneeded-gdk-pixbuf-xlib-dependency.patch [RHEL-40732]
  - Resolves: RHEL-40732
    (Drop unneeded gdk-pixbuf-xlib dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.1 [RHEL-45549]
  - Resolves: RHEL-45549
    ([ESXi][RHEL10] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63092]
  - Resolves: RHEL-63092
    ([ESXi][RHEL10] open-vm-tools version 12.5.0 has been released - please rebase)


author: Bo Yang <boyang@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99156]
  - Resolves: RHEL-99156
    ([ESXi][RHEL10] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-2
changelog:
  - ovt-Handle-new-cloud-init-error-code-and-status.patch [RHEL-99781]
  - ovt-Address-CVE-2025-41244.patch [RHEL-117382]
  - Resolves: RHEL-99781
    (Cloud-init receives TERM signal from PID 1 in the middle of running user data [rhel-10])
  - Resolves: RHEL-117382
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-10.2])


author: Bo Yang <boyang@redhat.com> - 13.0.5-1
changelog:
  - Rebase to 13.0.5 [RHEL-118504]
  - Resolves: RHEL-118504
    ([ESXi][RHEL10] open-vm-tools version 13.0.5 has been released - please rebase)


author: Than Ngo <than@redhat.com> - 3.24.0-5
changelog:
  - Use systemd-sysusers
  - Modifie the unit file to change file ownership
  - opencryptoki doesn't work in image mode
    Resolves: RHEL-77146


author: Than Ngo <than@redhat.com> - 3.24.0-7
changelog:
  - Resolves: RHEL-80632, tokens are deleted on reboot
  - Related: RHEL-77146, opencryptoki doesn't work in image mode


author: Than Ngo <than@redhat.com> - 3.25.0-1
changelog:
  - Resolves: RHEL-85376, ep11 token: PKCS #11 3.0 - support SHA3
  - Resolves: RHEL-90589, CCA token: basic support of AES-GCM
  - Resolves: RHEL-72964, cca token support cipher keys
  - Resolves: RHEL-72968, Support for CKM_RSA_AES_KEY_WRAP for cca, ica and soft tokens
  - Resolves: RHEL-73343, Upgrade openCryptoki to latest version
  - Resolves: RHEL-75144, p11kmip: a tool to import/export PKCS #11 keys from to a KMIP server
  - Resolves: RHEL-75761, ep11 token: import and export of secure key objects
  - Resolves: RHEL-85374, cca token: Support ECDH to derive AES keys


author: Than Ngo <than@redhat.com> - 3.25.0-2
changelog:
  - Related: RHEL-73343, Fix detection of EC curve not supported by OpenSSL-3.5.x
  - Related: RHEL-77146, Fix the image mode issue again as bootc expects to use /run/lock


author: Than Ngo <than@redhat.com> - 3.25.0-3
changelog:
  - Fix incorrect effective group id of pkcsslotd daemon
  - Fix covscan findings
    Resolves: RHEL-104598


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.1.10-5
changelog:
  - Fix fortification issues leading to crash in FreeIPA setup
    Upstream PR: https://github.com/opendnssec/opendnssec/pull/842


author: Rafael Jeffman <rjeffman@redhat.com> - 2.1.14-1
changelog:
  - Rebase to stable version 2.1.14
    Resolves: RHEL-75904
  - Use systemd-sysusers to create users
    Resolves: RHEL-4896


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-2
changelog:
  - Remove libslapi from the main package (RHEL-35581)
  - Add "servers" conditional which includes libslapi


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71052)
  - Avoid SSL context cleanup during library destruction (RHEL-68424)


author: Veronika Hanulikova <vhanulik@redhat.com> - 0.26.1-1
changelog:
  - Rebase to new upstream release (RHEL-71523)
  - Separate OpenSC into libraries and binaries (RHEL-73314)


author: Michal Ambroz <rebus _AT seznam.cz> - 1:1.3.9-7
changelog:
  - add conditionals to be able to rebuild with opendbx/apt even on EPEL+RHEL
  - cosmetics: rename patches, add comments, use buildroot macro instead of env
  - add explicit build requirement to python3-setuptools, needed for 3.13+


author: Jan Černý <jcerny@redhat.com> - 1:1.4.0-1
changelog:
  - Update to the latest upstream release (RHEL-53981)
  - Remove openscap-devel, openscap-engine-sce-devel and openscap-python3 subpackages


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-8
changelog:
  - OpenSSH should not use its own implementation of MLKEM
    Resolves: RHEL-58252
  - Correct processing of Compression directive
    Resolves: RHEL-68346
  - Supress systemd warning
    Resolves: RHEL-84816


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-9
changelog:
  - CVE-2025-32728: Fix logic error in DisableForwarding option
    Resolves: RHEL-86819
  - Provide better error for non-supported private keys
    Resolves: RHEL-68124
  - Ignore bad hostkeys in known_hosts file
    Resolves: RHEL-83644


author: Zoltan Fridrich <zfridric@redhat.com> - 9.9p1-15
changelog:
  - Fix implicit destination path selection when source path ends with ".."
    Resolves: RHEL-118406
  - Canonicalize username when matching a user
    Resolves: RHEL-101440


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-5
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80811
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-94614


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-1
changelog:
  - Rebasing to OpenSSL 3.5.1
    Resolves: RHEL-90350
    Resolves: RHEL-95613
    Resolves: RHEL-97796
    Resolves: RHEL-99353
    Resolves: RHEL-100168


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80811


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-101548
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-105010


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95182
  - Build tests in check and without LTO
    Resolves: RHEL-111634


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-5
changelog:
  - Fix globally disabled LTO
    Related: RHEL-111634
  - Initialize reserved and unused memory in aes-s390x.pl
    Resolves: RHEL-107479


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-78944


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Fix reversion of previous dependency updates post golang update
    Resolves: RHEL-79109


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify pre-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-76915


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-84025


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Update addresses CVE-2025-29786
    Resolves: RHEL-84153


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-84160


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-9
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85035


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90009


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0 Add systemd-journal group to Requires Bump go-
    tpm-keyfiles Resolves: RHEL-119363


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.1-12
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
  - Fix build in all arches, copied from Debian
  - Run autoreconf to make sure that autotools are updated
  - Clean up some trailing white spaces


author: Lukas Tyrychtr <ltyrycht@redhat.com> - 46.1-2
changelog:
  - Explicitly depend on speech-dispatcher, restoring the previous behavior before it split its libs into a separate package


author: Chris Lumens <clumens@redhat.com> - 3.0.0-2
changelog:
  - Rebase on upstream 3.0.0-rc1
  - Default globally-unique to true when clone-node-max > 1
  - Fix regression in crm_resource master resource handling
  - Related: RHEL-61383
  - Resolves: RHEL-56675
  - Resolves: RHEL-60534


author: Chris Lumens <clumens@redhat.com> - 3.0.0-3
changelog:
  - Rebase on upstream 3.0.0-rc2
  - Support X.509 certificates for Pacemaker Remote connections and remote
    CIB administration
  - Fix ability to do rolling upgrades (regression introduced in 3.0.0-rc1)
  - Fix memory leaks in daemons (regressions introduced in 3.0.0-rc1)
  - Ensure ACLs remain valid after CIB upgrades (regression introduced in
    3.0.0-rc1)
  - Related: RHEL-61383
  - Resolves: RHEL-7600


author: Chris Lumens <clumens@redhat.com> - 3.0.0-4
changelog:
  - Rebase on upstream 3.0.0-rc3
  - Log warnings if XSL transforms cannot preserve previous behavior
  - Ensure XSL transforms do not invalidate ACLs
  - Remove build dependency on inkscape
  - Resolves: RHEL-62096
  - Resolves: RHEL-62722


author: Chris Lumens <clumens@redhat.com> - 3.0.0-5
changelog:
  - Rebase on upstream 3.0.0 final release
  - Raise minimum GnuTLS dependency to 3.4.6
  - Move logrotate script back to pacemaker-cli package
  - Clear warnings and errors when resetting scheduler object
  - Resolves: RHEL-61383


author: Chris Lumens <clumens@redhat.com> - 3.0.1-1
changelog:
  - Rebase on upstream 3.0.1-rc1
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Split large IPC messages into multiple smaller ones
  - Related: RHEL-86085
  - Resolves: RHEL-71181
  - Resolves: RHEL-86146
  - Resolves: RHEL-86144


author: Chris Lumens <clumens@redhat.com> - 3.0.1-4
changelog:
  - Fix promoting instances of a cloned resource
  - Handle large timeouts correctly in crm_resource --wait
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-120932
  - Resolves: RHEL-86148
  - Resolves: RHEL-114895


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.5-8
changelog:
  - Make sure redhat-package-notes spec is skipped if _package_note_flags is
    undefined (rbhz#2184553)


author: Sudip Shil <sshil@redhat.com> - 6.0-7
changelog:
  - Convert to new fonts packaging guidelines and SPDX license
  - Update the fonts package
  - https://fedoraproject.org/wiki/Changes/New_Fonts_Packaging


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-2
changelog:
  - Fix static analyzer detected issues. Resolves: RHEL-36475
  - pam_env: fixes for NULL environment variables


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.6.1-6
changelog:
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-65223


author: Brian C. Lane <bcl@redhat.com> - 3.5-11
changelog:
  - parted: Fix ending sector location when using kibi IEC suffix (bcl)
  - tests: Fix formatting and snprintf warnings in tests. (bcl)
  - ui: Add checks for prompt being NULL (bcl)
  - strlist: Handle realloc error in wchar_to_str (bcl)
  - libparted: Fix potential NULL dereference in ped_disk_next_partition (bcl)
  - filesys: Check for null from close_fn (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.5.28-1
changelog:
  - Upstream 3.5.28 Alpha release
  - Dropped all patches included in new upstream release
  - Bumped minor version on libparted.so and libparted-fs-resize.so


author: Brian C. Lane <bcl@redhat.com> - 3.6-7
changelog:
  - tests: Add test for dvh with a bad checksum (bcl)
    Related: RHEL-73220
  - libparted: Fix dvh disklabel unhandled exception (bcl)
    Related: RHEL-73220
  - tests: Add test for SUN disklabel handling (bcl)
    Related: RHEL-73220
  - libparted: Fix sun disklabel unhandled exception (bcl)
    Resolves: RHEL-73220


author: Michal Hlavinka <mhlavink@redhat.com> - 3.13.0-1
changelog:
  - updated to 3.13, adds support for cxl1.1 device link status information (#RHEL-29153)
  - add riscv64 build support (#RHEL-40383)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Make pcp-zeroconf start enabled services once again (RHEL-93182)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories
  - Backport some more fixes to the OpenMetrics PMDA
  - Fix a multilib regression in PCP header files


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.0-509
changelog:
  - 5.40.0 bump (see <https://metacpan.org/release/HAARG/perl-5.40.0/view/pod/perldelta.pod)
  - Subpackage Term-Table
  - Subpackage Test-Suite2


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.1-512
changelog:
  - Resolves: RHEL-75798
  - 5.40.1 bump (see <https://metacpan.org/release/SHAY/perl-5.40.1/view/pod/perldelta.pod>)
  - Add config.over to make build od perl reproducible
  - Removed unnecessary conversion
  - Add new systemtap-sdt-dtrace to build deps


author: Jitka Plesnikova <jplesnik@redhat.com> - 4:5.40.2-513
changelog:
  - 5.40.2 bump (see <https://metacpan.org/release/SHAY/perl-5.40.2/view/pod/perldelta.pod>)
  - Resolves: RHEL-87186


author: Paul Howarth <paul@city-fan.org> - 0.018-1
changelog:
  - Update to 0.018
    - Fix version requirement for CPAN::Meta::Prereqs
    - Move issue tracker to GitHub


author: Paul Howarth <paul@city-fan.org> - 2.07-32
changelog:
  - Package tidy-up
    - Use author-independent source URL
    - Fix "warning: missing braces around initializer [-Wmissing-braces]"
    - Avoid deprecated patch syntax
    - Simplify find command using -empty
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.114-1
changelog:
  - Update to 0.114
    - Data::OptList now requires perl v5.12.0
    - Tests no longer add "-T" to shebang, so do not invoke taint mode


author: Packit <hello@packit.dev> - 6.93-1
changelog:
  - Release: v6.93 (Sullivan Beck)
  - Checkpoint: v6.93 (Sullivan Beck)
  - Remove Travis (Sullivan Beck)
  - Initial checkin of next release cycle: 6.93 (Sullivan Beck)


author: Paul Howarth <paul@city-fan.org> - 1.006000-1
changelog:
  - Update to 1.006000
    - Introduced lexical exporter support on Perl 5.11.2+ using the Lexical::Var
      module
    - Refactored the Perl 5.37.2+ lexical exporter support


author: Paul Howarth <paul@city-fan.org> - 1.006001-1
changelog:
  - Update to 1.006001
    Documentation
    - Don't mention Alt::Lexical::Var::ButSupportModernPerl in manual
    Packaging
    - No longer dynamically recommend Alt::Lexical::Var::ButSupportModernPerl


author: Paul Howarth <paul@city-fan.org> - 1.006002-1
changelog:
  - Update to 1.006002
    Documentation
    - Link to Exporter::Almighty in pod
    - Update copyright dates
    Packaging
    - Set homepage in metadata to https://exportertiny.github.io


author: Michal Josef Špaček <mspacek@redhat.com> - 6.01-34
changelog:
  - Package tests
  - Patch for remove warning in test
  - Simplify build and install phases
  - Update license to SPDX format


author: Paul Howarth <paul@city-fan.org> - 2.205-1
changelog:
  - Update to 2.205
    - Add perl 5.38 to CI matrix
    - Add on workflow_dispatch
    - Add some OO examples


author: Paul Howarth <paul@city-fan.org> - 2.081-1
changelog:
  - Update to 2.081
    - New function set_msg_callback for user defined callback on each SSL message
    - Showcase function in example/ssl_client.pl and example/ssl_server.pl for
      computing JA3S/JA3 fingerprints
    - Fix tracing added in 2.076 to no longer include SSL3_RT_HEADER (noise)


author: Paul Howarth <paul@city-fan.org> - 2.082-1
changelog:
  - Update to 2.082
    - SSL_version default now TLS 1.2+ since TLS 1.1 and lower are deprecated
      (GH#122)
    - Fix output of alert string when debugging (GH#132)
    - Improve regex for hostname validation (GH#130, GH#126)
    - Add can_ciphersuites subroutine for feature checking (GH#127)
    - Utils::CERT_create - die if unexpected arguments are given instead of
      ignoring these
  - Avoid use of deprecated patch syntax


author: Paul Howarth <paul@city-fan.org> - 2.083-1
changelog:
  - Update to 2.083
    - Fix t/protocol_version.t for OpenSSL versions that don't support SECLEVEL
      (regression from GH#122)


author: Paul Howarth <paul@city-fan.org> - 2.084-1
changelog:
  - Update to 2.084
    - Various fixes for edge cases and build: GH#136, GH#141, GH#142, GH#143,
      GH#145
    - Update documentation to reflect default SSL_version


author: Paul Howarth <paul@city-fan.org> - 2.085-1
changelog:
  - Update to 2.085
    - Fix test that failed due to behavior changes in OpenSSL 3.2 (GH#147)
    - Update PublicSuffix
    - Add examples for TLS JA3/JA4 fingerprinting to tls_fingerprint/


author: Paul Howarth <paul@city-fan.org> - 0.430-9
changelog:
  - Disable extra test in RHEL builds (based on
    https://src.fedoraproject.org/rpms/perl-List-MoreUtils-XS/pull-request/1)
  - Silence build-time warnings about missing bundled modules


author: Paul Howarth <paul@city-fan.org> - 2:0.42.34-1
changelog:
  - 0.4234 bump
  - Use author-independent source URL
  - Fix permissions verbosely
  - Make %files list more explicit


author: Michal Josef Špaček <mspacek@redhat.com> - 6.0.1-42
changelog:
  - Add patch to add tests for other USM scenarios
  - Add patch to rewrite from Digest::SHA1 to Digest::SHA
  - Add patch to rewrite usage of HMAC with same dependencies
  - Add patch to split test files for better readability
  - Improve patch for switch from Socket6 to Socket
  - Package tests
  - Rename patch to better name with source dist version


author: Paul Howarth <paul@city-fan.org> - 1.94-1
changelog:
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list


author: Michal Josef Špaček <mspacek@redhat.com> - 2.014-9
changelog:
  - Fix running of tests in perl-Net-Server-tests subpackage
    Resolves: RHEL-65278
  - Sync OpenSSL Engine patch with upstream


author: Paul Howarth <paul@city-fan.org> - 0.104003-1
changelog:
  - Update to 0.104003 (rhbz#2208530)
    - Add Artistic 1.0 Perl license and make Perl license use it
    - Remove extra "59" from LGPL-2.1
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 0.104004-1
changelog:
  - Update to 0.104004 (rhbz#2209461)
    - Rename Perl Artistic License to avoid confusion in detecting license


author: Paul Howarth <paul@city-fan.org> - 0.991-1
changelog:
  - Update to 0.991
    - Make the requirement for perl v5.12.0 explicit; previously, it was only
      implicit because of prerequisites


author: Paul Howarth <paul@city-fan.org> - 0.929-1
changelog:
  - Update to 0.929 (rhbz#2157199)
    - Update packaging and metadata
  - Use SPDX-format license tag
  - Use %license
  - Fix permissions verbosely
  - Simplify find command using -delete
  - Drop redundant buildroot cleaning in %install section


author: Paul Howarth <paul@city-fan.org> - 1.31-1
changelog:
  - Update to 1.31 (rhbz#2255994)
    - Update docs to recommend YAML::PP
  - Package description updated as per upstream documentation


author: Filip Janus <fjanus@redhat.com> - 1.4.8-5
changelog:
  - Add postgresql_default macro to be able to decide which version of extension
    is the default one in the repository


author: Remi Collet <remi@remirepo.net> - 1:1.10.13-5
changelog:
  - fix PHP 8.2 deprecations using patch from
    https://github.com/pear/pear-core/pull/124
  - use SPDX license IDs


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Remi Collet <remi@remirepo.net> - 2.0.3-12
changelog:
  - fix incompatible pointer types using patch from
    https://github.com/php/pecl-processing-rrd/pull/4
  - build out of sources tree


author: Remi Collet <remi@remirepo.net> - 5.1.25-2
changelog:
  - cleanup spec file, remove ZTS stuff and very old Obsoletes
  - add pie Provides
  - refresh configuration for new option and new default values


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.2.7-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
  - Fix GCC-14 new errors (https://github.com/openpmix/openpmix/pull/3245)


author: Sérgio Basto <sergio@serjux.com> - 4.2.8-1
changelog:
  - Update pmix to 4.2.8
  - Exclude ix86, configure: abort in 32-bit environments
    https://github.com/openpmix/openpmix/pull/2892
    and Open MPI v5.0.x does not support 32 bit
    https://github.com/open-mpi/ompi/issues/11248


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh [rhel-10.0]"
  - Resolves: RHEL-82776


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Jindrich Novy <jnovy@redhat.com> - 6:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-85826


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald"
  - Related: RHEL-109790


author: Jindrich Novy <jnovy@redhat.com> - 7:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL10.1 packaging"
  - Related: RHEL-80817


author: Vit Mojzis <vmojzis@redhat.com> - 3.9-2
changelog:
  - semanage: Reset active value when deleting boolean customizations (RHEL-111421)
  - setfiles: Add -A option to disable SELINUX_RESTORECON_ADD_ASSOC (RHEL-111505)


author: Jan Rybar <jrybar@redhat.com> - 125-4
changelog:
  - changing log level via dbus is now restricted to root
  - backport of https://github.com/polkit-org/polkit/commit/5a4ba7dfdcc3f
  - Resolves: RHEL-90807


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.8.4-1
changelog:
  - New version
    Resolves: rhbz#2255641
  - Fixed SMTP smuggling vulnerability
    Resolves: CVE-2023-51764


author: Filip Janus <fjanus@redhat.com> - 1.9.7-4.Final
changelog:
  - Add macro postgresql_default to be able set up default version in distro
  - Add symbol postgres-decoderbufs-any


author: Filip Janus <fjanus@redhat.com> - 16.10-2
changelog:
  - Add OpenSSL support to upgrade_configure function
  - This ensures upgrade server is compiled with OpenSSL support
  - Required for SSL/TLS connections during database upgrades


author: Filip Janus <fjanus@redhat.com> - 16.10-3
changelog:
  - Add tmpfiles.d configuration for PostgreSQL 16
  - Ensures proper directory permissions for /var/lib/pgsql


author: Than Ngo <than@redhat.com> - 1.3.12-7
changelog:
  - Add, multipath - drmgr support
  - Fix, SMT state is not honored when new CPUs are added dynamically
  Resolves: RHEL-62938


author: Than Ngo <than@redhat.com> - 2.7.10-1
changelog:
  - Update to 2.7.10
    * Aadd support for multiple platform dumps
    * Add support for light path diagnostics for rtas events
    * Enable correct display of model and system-id for IPS Power systems
    * Fix call home feature for nvmf devices
    * Fix crash in rtas_errd due to invalid -f option values
    * Fix build warnings with GCC-15
  Resolves: RHEL-65188


author: Brian C. Lane <bcl@redhat.com> - 3.52.4-1
changelog:
  - timezone: Remove the --isUtc, --nontp, and --ntpserver arguments (bcl)
    Related: RHEL-34009
  - packages: Remove the old camel case arguments on RHEL10 (bcl)
    Resolves: RHEL-34009
  - nvdimm: Remove support for the nvdimm command on RHEL10 (bcl)
    Related: RHEL-34009


author: Brian C. Lane <bcl@redhat.com> - 3.52.6-1
changelog:
  - doc/versionremoved: Update VersionChange import for Sphinx 8.0.0 (bcl)
    Related: RHEL-61426
  - workflow: Use python 3.12.7 for testing (bcl)
    Related: RHEL-61426
  - options: adjust to behavior change in upstream _parse_optional (awilliam)
    Resolves: RHEL-61426


author: Brian C. Lane <bcl@redhat.com> - 3.52.7-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61435


author: Brian C. Lane <bcl@redhat.com> - 3.52.8-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61435
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76502


author: Brian C. Lane <bcl@redhat.com> - 3.52.9-1
changelog:
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-80086
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-80086


author: Brian C. Lane <bcl@redhat.com> - 3.52.10-1
changelog:
  - pylint: Ignore files in .git (bcl)
    Related: RHEL-96217
  - Add support for RDP (jkonecny)
    Resolves: RHEL-96217


author: Brian C. Lane <bcl@redhat.com> - 3.52.11-1
changelog:
  - Add support for new bootc kickstart command (ppolawsk)
    Resolves: RHEL-132612
    Related: RHEL-58215


author: Ondřej Sloup <osloup@redhat.com> - 5.0.0~b1-1
changelog:
  - Rebase to the newest version, test the beta (rhbz#2235122)
  - This release drops Python 2 and adds Python 3.12 support


author: Ondrej Sloup <osloup@redhat.com> - 5.0.0~b4-1
changelog:
  - Rebase to the newest version, test the beta (Related: rhbz#2235401)
  - Remove the hotfix (move of pyodbc.py) as it is fixed in upstream


author: Ondrej Sloup <osloup@redhat.com> - 5.1.0-1
changelog:
  - Rebase to the newest version (Related: rhbz#2262845)
  - Update license tag to the SPDX format (MIT-0)


author: Miro Hrončok <miro@hroncok.cz> - 1.17.0-1
changelog:
  - Add the -M flag to %pyproject_save_files
  - The flag can be used to indicate no Python modules should be saved


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.0-1
changelog:
  - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists
  - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42
  - Requires tox-current-env >= 0.0.16


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.3-1
changelog:
  - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields
  - That field is deprecated and should include importable module names, not distribution packages
  - Related: rhbz#2378463


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.4-1
changelog:
  - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires
  - Fixes: rhbz#2391290
  - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir
  - Works around https://github.com/rpm-software-management/rpm/issues/3890
  - Speed %pyproject_save_files up significantly


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.5-1
changelog:
  - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content
  - That way, accidentally unpackaged files within are reported as errors
  - %pyproject_save_files: Also save top level typing stub files (.pyi)


author: Vendula Poncova <vponcova@redhat.com> - 1.7-1
changelog:
  - CI: Use dnf instead of yum to install CentOS packages (vponcova)
  - Documentation: Improve the installation instruction (vponcova)
  - Remove untracked files from the git repository interactively (vponcova)
  - UnixFD: Document the support for Unix file descriptors (vponcova)
  - Documentation: Clean up examples in the documentation (vponcova)
  - Documentation: Simplify the README.md file (vponcova)
  - Documentation: Fix bullet point lists (vponcova)
  - Documentation: Simplify the hostname example (vponcova)
  - CI: Run tests for all supported Python version (vponcova)
  - UnixFD: Handle DBus signals with Unix file descriptors (vponcova)
  - UnixFD: Add tests for DBus properties with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests of DBus calls with Unix file descriptors (vponcova)
  - UnixFD: Clean up tests for swapping Unix file descriptors (vponcova)
  - UnixFD: Clean up `GLibClientUnix` and `GLibServerUnix` (vponcova)
  - UnixFD: Process results of client calls in the low-level library (vponcova)
  - UnixFD: Move the support for Unix file descriptors to dasbus.unix (vponcova)
  - CI: Always pull the latest container image (vponcova)
  - CI: Disable the unhashable-member warning (vponcova)
  - Revert "Don't use pylint from pip on Fedora Rawhide" (vponcova)
  - UnixFD: Move the unit tests to a new file (vponcova)
  - UnixFD: Manage the testing bus on set up and tear down (vponcova)
  - UnixFD: Don't add arguments to the DBusTestCase.setUp method (vponcova)
  - UnixFD: Create a new testing DBus interface (vponcova)
  - UnixFD: Fix the indentation in unit tests (vponcova)
  - Add unit tests for variants with variant types (vponcova)
  - Simplify the code for replacing values of the UnixFD type (vponcova)
  - Add classes for unpacking and unwrapping a variant (vponcova)
  - Don't use pylint from pip on Fedora Rawhide (vponcova)
  - UnixFD: Rename a parameter to server_arguments (vponcova)
  - UnixFD: Revert a change in GLibClient._async_call_finish (vponcova)
  - Raise TimeoutError if a DBus call times out (vponcova)
  - Fix pylint tests in CentOS Stream 8 (vponcova)
  - Fix the ENV instruction in Dockerfiles (vponcova)
  - Fix pylint issues (vponcova)
  - run forked tests using subprocess, instead of multiprocessing (wdouglass)
  - use mutable list for return value in fd_test_async make fd getters more explicit (wdouglass)
  - Add test case for method call only returning fd (jlyda)
  - Always use call_with_unix_fd_list* to properly handle returned fds (jlyda)
  - fix some lint discovered errors (wdouglass)
  - seperate unixfd functionality, to better support systems that don't have them (wdouglass)
  - Remove note in documentation about unsupported Unix file descriptors (wdouglass)
  - Add a test for UnixFD transfer (wdouglass)
  - Allow UnixFDs to be replaced and passed into Gio (wdouglass)
  - Fix rpm lint warnings for OpenSUSE 15.3 (christopher.m.cantalupo)
  - Extend the .coveragerc file (vponcova)
  - Disable builds for Fedora ELN on commits (vponcova)
  - Test Debian with Travis (vponcova)
  - Test Ubuntu with Travis (vponcova)
  - Test CentOS Stream 9 with Travis (vponcova)
  - Use CentOS Stream 8 for testing (vponcova)
  - add remove dbus object function on bus and update tests (matthewcaswell)
  - properly measure coverage across multiprocess test cases (wdouglass)
  - Move handle typing tests into a new class (and a new file) (wdouglass)
  - Add another test for a crazy data type, fix a bug discovered via the test (wdouglass)
  - Add functions for generating/consuming fdlists with variants (wdouglass)
  - Provide a language argument for the code blocks (seahawk1986)
  - Change the type of 'h' glib objects from 'File' to 'UnixFD' (wdouglass)
  - Allow to run tests in a container (vponcova)
  - Add C0209 to the ignore list for pylint (tjoslin)
  - Use the latest distro in Travis CI (vponcova)
  - Always update the container (vponcova)
  - Document limitations of the DBus specification generator (vponcova)


author: Packit <hello@packit.dev> - 1.9.0-1
changelog:
  - Optimize some repo metastuff and prepare v1.9.0 (#364) (nir0s)
  - Actions(deps): Bump actions/setup-python from 4 to 5 (#363) (dependabot[bot])
  - Test on modern versions of CPython and PyPy and macOS (#362) (Christian Clauss)
  - Actions(deps): Bump actions/checkout from 3 to 4 (#361) (dependabot[bot])
  - Refactor `distro.info()` method to return an `InfoDict` (#360) (SCC/楊志璿)
  - Ignore the file '/etc/ec2_version' (Pritam Kulkarni)
  - Add Debian Testing to the tests (#356) (Harshula Jayasuriya)
  - Ignore the file '/etc/board-release' (#353) (Pedro Lamas)
  - Add support for ALT Linux Server 10.1 distribution (#354) (Alexander Stepchenko)
  - Run Python 3.6 on Ubuntu 20.04 for CI and bump isort (#355) (Samuel FORESTIER)
  - Update archlinux resource for tests (Saltaformajo)
  - Resolves rhbz#2255740


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.5-1
changelog:
  - Update to 3.1.5
  - Security fix for CVE-2024-56201
  - Security fix for CVE-2024-56326
  Resolves: RHEL-73095


author: Julien Rische <jrische@redhat.com> - 1.1.0-1
changelog:
  - New upstream version (1.1.0)
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-113652
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-113656


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-5
changelog:
  - Reduce the type safety as a workaround for build failures in Fedora 40+
  - Fixes: rhbz#2261034
  - Fixes: rhbz#2256232


author: Miro Hrončok <miro@hroncok.cz> - 5.1.0-7
changelog:
  - Revert "Reduce the type safety as a workaround for build failures in
    Fedora 40+"
  - The workaround has been moved to Cython


author: Martin Kolman <mkolman@redhat.com> - 0.51-1
changelog:
  - SPDX compatible License: line (mkolman)
  - setup.py: switch from distutils to setuptools (tim.orling@konsulko.com)
  - Improve formatting and data in setup.py (vslavik)


author: John Eckersberg <jeckersb@redhat.com> - 0.10.1-1
changelog:
  - New upstream release 0.10.1 (rhbz#2256342)
  - Remove patch for Python 3.13 compatibility (merged upstream in 0.10.0)
  - Add new depencency on furo
  - Include missing THANKS file (https://github.com/netaddr/netaddr/pull/345)


author: Miro Hrončok <mhroncok@redhat.com> - 23.3.1-5
changelog:
  - Switched to autogenerated BuildRequires for test dependencies,
    which removed some that were no longer necessary


author: Charalampos Stratakis <cstratak@redhat.com> - 23.3.2-2
changelog:
  - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
  - Require Python with tarfile filters
  - Resolves: RHEL-25820


author: Miro Hrončok <mhroncok@redhat.com> - 2.28.2-7
changelog:
  - Do not package requests[security] and requests[socks] on RHEL
  - Make the package build even when urllib3 won't pull in pysocks


author: Lumír Balhar <lbalhar@redhat.com> - 2.32.3-1
changelog:
  - Update to 2.32.3
  - Fix for CVE-2024-35195
  Resolves: RHEL-37604
  - Add support for IPv6 CIDR in no_proxy setting
  Resolves: RHEL-32523


author: Miro Hrončok <mhroncok@redhat.com> - 2.32.4-1
changelog:
  - Update to 2.32.4
  - Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
  Resolves: RHEL-105460


author: Miro Hrončok <mhroncok@redhat.com> - 14-3
changelog:
  - Avoid needless pkg_resources import in pythonbundles.py
  - Ignore environment markers in pythonbundles.py


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Jiri Konecny <jkonecny@redhat.com> - 1.9.0-5
changelog:
  - Migrate to SPDX license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1#Detailed_Description


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64877, RHEL-70450


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-90555


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98060, RHEL-98047, RHEL-97813, RHEL-98062, RHEL-98180


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-13
changelog:
  - Make %_passwd_path and %_group_path into lists (RHEL-78693)
  - Fix memory leak in rpmspec --shell (RHEL-55284)
  - Fix memory leak in rpmsign (RHEL-82284)
  - Fix command references in rpmsign(8) man page (RHEL-73173)
  - Fix exit code regression on update failure (RHEL-87384)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-14
changelog:
  - Store configurable digest(s) on packages in rpmdb (RHEL-84062)
  - Fix command references in rpmsign(8) man page, take II (RHEL-73173)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-15
changelog:
  - Add support for spec local file attributes and generators (RHEL-84057)
  - Ensure binary and source headers are identified as such (RHEL-87383)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-18
changelog:
  - Add support for multiple OpenPGP signatures per package (RHEL-100571)
  - Add support for OpenPGP v6 signature pre-salting (RHEL-100571)
  - Add support for PQC algorithms from RFC-9580 (RHEL-100571)
  - Add --list and --erase commands to rpmkeys(8) (RHEL-105421)
  - Fix regression on dynamic subpackage RPMTAG_SOURCERPM missing (RHEL-102023)


author: Michal Domonkos <mdomonko@redhat.com> - 4.19.1.1-21
changelog:
  - Fix pre/post/meta/etc. qualifiers for weak dependencies (RHEL-101936)
  - Fix redundant rpmdb-migrate.service runs (RHEL-96510)


author: Lukas Tyrychtr <ltyrycht@redhat.com>
changelog:
  - Conditionalize the festival subpackage, we're not shipping Festival in RHEL 10
   Festival in RHEL 10)


author: Pino Toscano <ptoscano@redhat.com> 1.30.2-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - feat: Create consumer cert & key owner by rhsm group (jhnidek@redhat.com)
  - feat: Add rhsm group during installation of subman RPM (jhnidek@redhat.com)
  - feat: dnf plugin - outsource uploading of profile to rhsmcertd.
    (jhnidek@redhat.com)
  - docs: remove references to removed commands (jajerome@redhat.com)
  - feat: Remove auto-attach command (jhnidek@redhat.com)
  - feat: Eliminate command 'remove' from subscription-manager
    (jvlcek@redhat.com)
  - feat: Remove attach from bash completion script (jhnidek@redhat.com)
  - feat: Remove references on auto-attach in man page (jhnidek@redhat.com)
  - feat: Removed attach service (jhnidek@redhat.com)
  - feat: Removed D-Bus methods related to attach (jhnidek@redhat.com)
  - feat: Removed attach command and CLI option related to attach
    (jhnidek@redhat.com)
  - feat: Remove 'addons' subcommand(s) (mhorky@redhat.com)
  - feat: Removed command "redeem" from subscription-manager (jhnidek@redhat.com)
  - Update the correct man page file. (jvlcek@redhat.com)
  - docs: Change reverse proxy to proxy in man page (jvlcek@redhat.com)
  - test(ci): Improve container pre-test script (mhorky@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.3-1
changelog:
  - Card ID: CCT-731 - integration tests for DBus Register method
    (jstavel@redhat.com)
  - chore: Remove the --token authentication (pkoprda@redhat.com)
  - chore: Remove artifacts of import (stomsa@redhat.com)
  - chore: Remove artifacts of redeem (stomsa@redhat.com)
  - chore: Remove artifacts of remove (stomsa@redhat.com)
  - chore: Remove artifacts of autoheal (glutexo@icloud.com)
  - chore: Remove artifacts of --auto-attach (glutexo@icloud.com)
  - chore: Remove artifacts of attach (stomsa@redhat.com)
  - fix: Added missing python packages (jhnidek@redhat.com)
  - fix: Fixed integration tests (jhnidek@redhat.com)
  - chore: Remove auto-assign CI job (mhorky@redhat.com)
  - feat: Add initial support for tmt (jhnidek@redhat.com)
  - fix: Renamed integration-tests to cockpit-tests (jhnidek@redhat.com)
  - Feat CCT-965: Include timezone in the logs In `subscription-
    manager/src/rhsm/logutil.py`i: (mgrunwal@redhat.com)
  - feat: remove content access mode cache (jajerome@redhat.com)
  - feat: add GetEnvironments method to DBus register (ryanverdile@gmail.com)
  - feat: Added basic configuration for Packit (jhnidek@redhat.com)
  - fix: drop "autoattachinterval" from the rhsmcertd defaults
    (ptoscano@redhat.com)
  - feat/cct-875: Options -i and --cert-interval were removed from rhsmcertd
    command autocompletion Options -i and --cert-interval were removed from
    rhsmcertd command autocompletion. (mgrunwal@mgrunwal-
    thinkpadp1gen3.rmtcz.csb)
  - feat/cct-874: Autocompletion for option --servicelevel removed Autocompletion
    for option --servicelevel (sub-man register --servicelevel) was removed.
    (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - fix: Handle Retry-After headers better for 429 responses (mhorky@redhat.com)
  - feat: Better automatic registration logging (mhorky@redhat.com)
  - refactor: Moved some definition of lists from list.py (jhnidek@redhat.com)
  - fix: Removed show_autosubscribe_output() method (jhnidek@redhat.com)
  - feat: Remove useless CLI options from list command (jhnidek@redhat.com)
  - fix: perform autoreg waiting when performing standard autoreg
    (ptoscano@redhat.com)
  - chore: move autoreg waiting code in own function (ptoscano@redhat.com)
  - feat: support registering specifying environments with activation keys
    (ryanverdile@gmail.com)
  - feat: Remove autoheal functionality from rhsmcertd (jvlcek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.4-1
changelog:
  - Revert "feat: Disable anonymous cloud registration temporarily"
    (ptoscano@redhat.com)
  - Revert "feat: forcefully switch automatic cloud registration to v1"
    (ptoscano@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Georgian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Update translation files (noreply@weblate.org)
  - spec: respect the %{_sbindir} of the distro (ptoscano@redhat.com)
  - build: make it possible to customize the 'sbin' install dir
    (ptoscano@redhat.com)
  - fix: Restart rhsm service after installation (pkoprda@redhat.com)
  - Drop pam_console leftovers (ptoscano@redhat.com)
  - Stop using usermode (ptoscano@redhat.com)
  - fix: Do not upload profile from DNF, when it is disabled in conf
    (jhnidek@redhat.com)
  - rhsmcertd: use ISO 8601 timestamps for the log file (ptoscano@redhat.com)
  - rhsmcertd: refactor timestamp function (ptoscano@redhat.com)
  - ci: temporarily install 'which' on CentOS Stream 10 (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ci: use official c10s container image (ptoscano@redhat.com)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - feat: Enable register with environment names and environment types
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.5-1
changelog:
  - fix: Disabling of content in D-Bus methods Register*() (jhnidek@redhat.com)
  - chore: logging.warn() -> logging.warning() (ptoscano@redhat.com)
  - Feat CCT-467: Add explanatory info about the source of overrides in repo-
    overrides command (mgrunwal@mgrunwal-thinkpadp1gen3.rmtcz.csb)
  - feat: Allow to call RegisterWithActivationKeys() with enable_content
    (jhnidek@redhat.com)
  - refactor: Small changes of _enable_content (jhnidek@redhat.com)
  - fix: It is possible to disable content using enable_content option
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.30.6-1
changelog:
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Japanese) (ptoscano@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - spec: Remove an unnecessary explicit dependency on json-c
    (debarshir@gnome.org)
  - spec: Require shared libraries with architecture-specific dependencies
    (debarshir@gnome.org)
  - Revert "ci: temporarily install 'which' on CentOS Stream 10"
    (ptoscano@redhat.com)
  - build: cockpit: fix installation of sub-man with newer Fedora
    (ptoscano@redhat.com)
  - spec: Require the base package with architecture-specific dependencies
    (debarshir@gnome.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - feat: drop the --ondate option of "status" (ptoscano@redhat.com)
  - feat: drop non-SCA support in status command (ptoscano@redhat.com)
  - tests: fix mocking of get_terminal_width() in TestColumnize
    (ptoscano@redhat.com)
  - feat: print compliance errors & syspurpose status only in entitlement mode
    (ptoscano@redhat.com)
  - feat: print "registered" as status when using SCA (ptoscano@redhat.com)
  - feat: print "not registered" on status when not registered
    (ptoscano@redhat.com)
  - tests: force syspurpose tests in test_status to non-SCA (ptoscano@redhat.com)
  - refactor: move determination of content access mode in own method
    (ptoscano@redhat.com)
  - tests: move StubIdentity to stubs (ptoscano@redhat.com)
  - tests: cleanup dead/broken bits in test_status (ptoscano@redhat.com)
  - chore: move banner printing to its own function (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.7-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Italian) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Translated using Weblate (Italian) (info@salvatorecocuzza.it)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (noreply-mt-weblate-
    translation-memory@weblate.org)
  - Translated using Weblate (Chinese (Traditional) (zh_TW)) (chzang55@gmail.com)
  - Translated using Weblate (Japanese) (mhorky@redhat.com)
  - Translated using Weblate (French) (leane.grasser@proton.me)
  - fix: Unit test should ignore locale, when generating test timestamp
    (jhnidek@redhat.com)
  - fix: Handle improperly closed connections (mhorky@redhat.com)
  - test: Added integration tests for activation keys (jstavel@redhat.com)
  - test: Integration tests for DBus Unregister call (jhnidek@redhat.com)
  - fix: Do not call removed bash script from tesh.sh (jhnidek@redhat.com)
  - spec: drop old libdnf-plugin-subscription-manager-debuginfo definition
    (ptoscano@redhat.com)
  - spec: switch from an own run_dir to _rundir (ptoscano@redhat.com)
  - spec: switch from python_sitelib to python3_sitelib (ptoscano@redhat.com)
  - spec: switch from python_sitearch to python3_sitearch (ptoscano@redhat.com)
  - spec: inline & drop rhsm_package_name (ptoscano@redhat.com)
  - spec: switch from __python to __python3 (ptoscano@redhat.com)
  - spec: inline & drop py_package_prefix (ptoscano@redhat.com)
  - spec: remove redundant check (ptoscano@redhat.com)
  - spec: deduplicate BuildRequires for use_dnf (ptoscano@redhat.com)
  - spec: drop old %post snippet for rhsmd (ptoscano@redhat.com)
  - spec: drop EL 8 bits (ptoscano@redhat.com)
  - ci: tweak the dependabot config for branches a bit (ptoscano@redhat.com)
  - feat: remove no more needed branding strings (ptoscano@redhat.com)
  - feat: drop ClassicCheck (ptoscano@redhat.com)
  - ci: track also active stable branches with dependabot for GitHub actions
    (ptoscano@redhat.com)
  - tests: update location of pytest-client-tools (ptoscano@redhat.com)
  - Handle URL params for AptRepoFiles (grigo@atix.de)
  - fix: Append two additional facts to the graylist (pkoprda@redhat.com)
  - refactor: Use class constant instead of variable graylist
    (pkoprda@redhat.com)
  - spec: Require subpackages from the same build as the base package
    (debarshir@gnome.org)
  - spec: Consolidate dependencies on the DNF & libdnf plugins in one place
    (debarshir@gnome.org)
  - spec: Fix grammar and spelling mistakes (debarshir@gnome.org)
  - build: use cmake pkg-config imported targets (ptoscano@redhat.com)
  - build: fix order of parameters for pkg_check_modules() (ptoscano@redhat.com)
  - build: drop manual setting of -std=c99 (ptoscano@redhat.com)
  - build: remove check for in source cmake builddir (ptoscano@redhat.com)
  - build: bump cmake required version to 3.20 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.8-1
changelog:
  - fix: Enable content during auto-registration v2 (jhnidek@redhat.com)
  - CCT-1490: blackified repolib.py (jstavel@redhat.com)
  - CCT-1473: new url for local candlepin image, fixed register test (#3580)
    (jstavel@redhat.com)
  - fix: Create consumer cert & key, when chown failed (jhnidek@redhat.com)
  - Skip to load default plugins on suse/sles (suttner@atix.de)
  - CCT-739: tests for GetUuid method (jstavel@redhat.com)
  - feat: Added warning to dnf4 plugin about skewed clock (jhnidek@redhat.com)
  - CCT-1081 FEAT Remove unused classes and functions - including
    Conduits/Slots/Hooks for pre/post_subscribe Remove "pre_subscribe" and
    "post_subscribe" plugin slots by removing classes SubscriptionConduit and
    PostSubscriptionConduit. (mgrunwal@redhat.com)
  - Fix upload profile if rhsmcertd is not running at all (suttner@atix.de)
  - chore: Drop get_status_for_icon (mhorky@redhat.com)
  - chore: Remove getCompliance method from connection.py (mhorky@redhat.com)
  - chore: Clean up compliance status of ComplianceManager (mhorky@redhat.com)
  - chore: Hardcode SCA-relevant values to ComplianceManager (mhorky@redhat.com)
  - chore: Drop HTTP call to /consumers/{uuid}/compliance (mhorky@redhat.com)
  - feat: adding sourcery config (jmolet@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.9-1
changelog:
  - feat: Call random.seed() at begining of auto-register (jhnidek@redhat.com)
  - feat: Better control over auto-reg waiting game (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.10-1
changelog:
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Translated using Weblate (Spanish) (fserrador@gmail.com)
  - Translated using Weblate (Spanish) (jsefler@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - fix: Wait random time before reaching IMDS server (jhnidek@redhat.com)
  - CCT-745: added properties for multi org environment (#3589)
    (jstavel@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.30.11-1
changelog:
  - fix: Do not send JSON document with empty signature (jhnidek@redhat.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (jhnidek@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Czech) (pavel.borecki@gmail.com)
  - Translated using Weblate (Czech) (noreply-mt-weblate-translation-
    memory@weblate.org)
  - Added translation using Weblate (Czech) (pavel.borecki@gmail.com)
  - chore: Make new black happy again (jhnidek@redhat.com)
  - chore: Increased log level of messages (jhnidek@redhat.com)
  - fix: Use IMDSv2 for signature first (jhnidek@redhat.com)
  - ci: bump actions/upload-artifact from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - chore: Removed getSyspurposeCompliance (jhnidek@redhat.com)
  - chore: Do not call candlepin from GetSyspurposeStatus (jhnidek@redhat.com)
  - chore: Removed SyspurposeComplianceStatusCache (jhnidek@redhat.com)
  - fix: Require findutils in .spec file (jhnidek@redhat.com)
  - feat: Try to cache candlepin server capabilities (jhnidek@redhat.com)
  - solved a conflict in utils.py (jstavel@redhat.com)
  - CCT-744: integration tests for DBus Config object (jstavel@redhat.com)
  - CCT-1029: tests for Register with environment option (jstavel@redhat.com)
  - chore: Small changes in integration-tests/test_syspurpose.py
    (jhnidek@redhat.com)
  - chore: Small fixes in test_register_get_orgs.py (jhnidek@redhat.com)
  - chore: Small fixes of integration-tests/test_register.py (jhnidek@redhat.com)
  - chore: Small tweaks of bash script of integration tests (jhnidek@redhat.com)
  - chore(doc): Improved README.md for integration tests (jhnidek@redhat.com)
  - CCT-743: rebased (jstavel@redhat.com)
  - CCT-1600: fix applied, unified settings.toml to use the same name of
    valid_fields.json (jstavel@redhat.com)
  - ci: bump actions/checkout from 4 to 5
    (49699333+dependabot[bot]@users.noreply.github.com)
  - CCT-742: integration tests for DBus Syspurpose object (jstavel@redhat.com)
  - CCT-1029: test for dbus method GetEnvironments (jstavel@redhat.com)
  - CCT-1097: added enable_content for registration tests (jstavel@redhat.com)
  - CCT-745: multi org credentials added (jstavel@redhat.com)


author: Jerry James <loganjerry@gmail.com> - 2021.11.0-1
changelog:
  - Rebase to version 2021.11.0
  - New -bind subpackage for the NUMA support library
  - Build with cmake
  - Minor spec file cleanups


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-54171)
  - Remove qat_contig_mem from upstream package
  - Build as an OpenSSL provider for RHEL-10


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20173)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40261)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73092, RHEL-50462)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-10
changelog:
  - kvm-Enable-uefi-variable-service-for-edk2.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-11
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-105440]
  - Resolves: RHEL-105440
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-10.1])


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.0.0-12
changelog:
  - kvm-RHEL-Pack-uefi-vars-module.patch [RHEL-102325]
  - Resolves: RHEL-102325
    ([qemu] enable variable service for edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-2
changelog:
  - kvm-e1000e-Prevent-crash-from-legacy-interrupt-firing-af.patch [RHEL-112882]
  - Resolves: RHEL-112882
    ([DEV Task]: Assertion `core->delayed_causes == 0' failed with e1000e NIC)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-3
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-119368]
  - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-116443]
  - kvm-target-i386-add-compatibility-property-for-arch_capa.patch [RHEL-120253]
  - kvm-target-i386-add-compatibility-property-for-pdcm-feat.patch [RHEL-120253]
  - Resolves: RHEL-119368
    ([rhel10] Backport "arm/kvm: report registers we failed to set")
  - Resolves: RHEL-116443
    (qemu crash after hot-unplug disk from the multifunction enabled bus,crash point PCIDevice *vf = dev->exp.sriov_pf.vf[i])
  - Resolves: RHEL-120253
    (Backport fixes for PDCM and ARCH_CAPABILITIES migration incompatibility)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-4
changelog:
  - kvm-qapi-machine-s390x-add-QAPI-event-SCLP_CPI_INFO_AVAI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-tests-functional-add-tests-for-SCLP-event-CPI.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-redhat-Add-new-rhel9.8.0-and-rhel10.2.0-machine-type.patch [RHEL-104009 RHEL-105823 RHEL-73008]
  - kvm-vfio-rename-field-to-num_initial_regions.patch [RHEL-118810]
  - kvm-vfio-only-check-region-info-cache-for-initial-region.patch [RHEL-118810]
  - kvm-arm-create-new-rhel-10.2-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-arm-create-new-rhel-9.8-specific-virt-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-10.2-specific-pc-q35-machine-typ.patch [RHEL-105826 RHEL-105828]
  - kvm-x86-create-new-rhel-9.8-specific-pc-q35-machine-type.patch [RHEL-105826 RHEL-105828]
  - kvm-rh-enable-CONFIG_USB_STORAGE_BOT.patch [RHEL-101929]
  - Resolves: RHEL-104009
    ([IBM 10.2 FEAT] KVM: Enhance machine type definition to include CPI and PCI passthru capabilities (qemu))
  - Resolves: RHEL-105823
    (Add new -rhel10.2.0 machine type to qemu-kvm [s390x])
  - Resolves: RHEL-73008
    ([IBM 10.2 FEAT] KVM: Implement Control Program Identification (qemu))
  - Resolves: RHEL-118810
    ([RHEL 10.2] Windows 11 VM fails to boot up with ramfb='on' with QEMU 10.1)
  - Resolves: RHEL-105826
    (Add new -rhel10.2.0 machine type to qemu-kvm [aarch64])
  - Resolves: RHEL-105828
    (Add new -rhel10.2.0 machine type to qemu-kvm [x86_64])
  - Resolves: RHEL-101929
    (enable 'usb-bot' device for proper support of USB CD-ROM drives via libvirt  )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120116]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120116]
  - kvm-vfio-Disable-VFIO-migration-with-MultiFD-support.patch [RHEL-126573]
  - kvm-hw-arm-virt-Use-ACPI-PCI-hotplug-by-default-from-10..patch [RHEL-67323]
  - kvm-hw-arm-smmu-common-Check-SMMU-has-PCIe-Root-Complex-.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Re-arrange-SMMUv3-IORT-build.patch [RHEL-73800]
  - kvm-hw-arm-virt-acpi-build-Update-IORT-for-multiple-smmu.patch [RHEL-73800]
  - kvm-hw-arm-virt-Factor-out-common-SMMUV3-dt-bindings-cod.patch [RHEL-73800]
  - kvm-hw-arm-virt-Add-an-SMMU_IO_LEN-macro.patch [RHEL-73800]
  - kvm-hw-pci-Introduce-pci_setup_iommu_per_bus-for-per-bus.patch [RHEL-73800]
  - kvm-hw-arm-virt-Allow-user-creatable-SMMUv3-dev-instanti.patch [RHEL-73800]
  - kvm-qemu-options.hx-Document-the-arm-smmuv3-device.patch [RHEL-73800]
  - kvm-bios-tables-test-Allow-for-smmuv3-test-data.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Add-tests-for-legacy-smmuv3-a.patch [RHEL-73800]
  - kvm-qtest-bios-tables-test-Update-tables-for-smmuv3-test.patch [RHEL-73800]
  - kvm-qtest-Do-not-run-bios-tables-test-on-aarch64.patch []
  - Resolves: RHEL-120116
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-10.2])
  - Resolves: RHEL-126573
    (VFIO migration using multifd should be disabled by default)
  - Resolves: RHEL-67323
    ([aarch64] Support ACPI based PCI hotplug on ARM)
  - Resolves: RHEL-73800
    (NVIDIA:Grace-Hopper:Backport support for user-creatable nested SMMUv3 - RHEL 10.1)


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-6
changelog:
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-126708]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-126708]
  - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-128085]
  - kvm-Fix-the-typo-of-vfio-pci-device-s-enable-migration-o.patch [RHEL-130704]
  - Resolves: RHEL-126708
    ([RHEL 10]snp guest fail to boot with hugepage)
  - Resolves: RHEL-128085
    (VM crashes during boot when virtio device is attached through vfio_ccw)
  - Resolves: RHEL-130704
    ([rhel10] Fix the typo under vfio-pci device's enable-migration option )


author: Miroslav Rezanina <mrezanin@redhat.com> - 10.1.0-7
changelog:
  - kvm-pcie_sriov-Fix-broken-MMIO-accesses-from-SR-IOV-VFs.patch [RHEL-120115]
  - kvm-arm-fix-oob-access-in-compat-handling.patch [RHEL-130478]
  - Resolves: RHEL-120115
    (The vf nic created using the IGB emulated nic can not obtain ip address )
  - Resolves: RHEL-130478
    (Migration from RHEL 10.2 to RHEL 10.1 with virt-rhel10.0.0 machine type fails on Grace)


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-7
changelog:
  - Sync with Fedora:
    - fix directory ownership
    - install cmake modules for plugins
    - depend on pkgconfig(egl) rather than mesa-libEGL-devel
    Resolves: RHEL-73681


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - QSsl: add support for ML-DSA signature algorithm
    Resolves: RHEL-97008


author: Jan Grulich <jgrulich@redhat.com> - 6.8.1-2
changelog:
  - Make -devel subpkg to require qtbase-private-devel for cmake >= 3.31.0
    Workaround for rhbz#2330219
    Resolves: RHEL-53982


author: Jan Grulich <jgrulich@redhat.com> - 6.10.1-1
changelog:
  - 6.10.1
    Resolves: RHEL-109197
  - Fix CVE-2025-11277 in bundled assimp library
    Resolves: RHEL-120979


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  - Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  - Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88470


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86705


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.7-10
changelog:
  - skip btrfs subvolumes when detecting ESP partitions
  - fix booting on UEFI systems with multiple CDROM devices
  - fix copying of console kernel cmdline parameters
  - Use git to apply patches in %prep
  - Sync with patches in CentOS Stream 9 (kudos to @pcahyna!):
    - Backport PR 3250 to fix useless warning that libsystemd-core requires
      additional libraries and ReaR recovery system needs additional libraries
    - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs://
      BACKUP/OUTPUT_URL
  - fix backup of btrfs subvolumes


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-11
changelog:
  - Generate /etc/rear/os.conf during build again, it is better than generating it
    in %post, but do not mark it as config file to allow it to be updated during
    package upgrade and avoid containing an old OS version information


author: Pavel Cahyna <pcahyna@redhat.com> - 2.7-12
changelog:
  - Remove doc/rear-release-notes.txt, it is CC-BY-ND-3.0, which is not an allowed
    license for documentation, and use a cleaned tarball (with the file removed)
    for build


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-1
changelog:
  - rebase to version 2.9 (rhbz#2343296)
  - drop upstreamed patches
  - remove obsolete patch for rhbz2119501
    - ReaR 2.7 and newer do not copy dangling symlinks in /lib/modules/*/
  - remove broken patch for rhbz1492177 (VERBOSE is a read-only var, so the script silently failed)
    - install correct packages using proper RPM dependencies instead
  - rebase remaining patches


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.9-3
changelog:
  - add dependency on grub2-tools-extra on EFI machines (RHEL-85421)
  - add initial support for aarch64 machines with UEFI (RHEL-84286)
  - enhance the 300_map_disks.sh script to also print the disk sizes (RHEL-106771)
  - support generation of ed25519 SSH host keys in the rescue image (RHEL-106770)
  - fix recovery of LUKS encrypted systems with multiple keyslots (RHEL-106762)
  - fix PPC PReP Boot detection on GPT layouts (RHEL-82098)
  - skip longhorn iscsi devices in disklayout.conf (RHEL-106561)
  - restore the pre-2.8 OUTPUT=IPL behaviour (RHEL-102563)


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-5
changelog:
  - Split packages for variable fonts.
  - Drop unnecessary/duplicate fonts from packages.
  - Worked around broken family name in variable fonts.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-8
changelog:
  - Use no VF in family name version of ttf for -vf packages.
  - Adjust properties in VF to avoid confusion.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-11
changelog:
  - Add a provide line of font(redhatdisplayvf), font(redhattextvf),
    and font(redhatmonovf) to each sub-packages for backward compatibility.
  - Fix invalid License field.


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-14
changelog:
  - Remove Italic variable fonts to workaround a crash issue
    and unexpected italic rendering.
    Resolves: RHEL-69430


author: Tomas Popela <tpopela@redhat,com> - 0.1-4
changelog:
  - Migrate to the new flatpak preinstall config format
  - Add collection id to rhel registry config file and reference it from
    preinstall config files
  - Use org.mozilla.Firefox (and not firefox) which is in RHEL


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 284-1
changelog:
  - Use --config=xxx for clang configs instead of two separate arguments to work
    around a bug in meson
  - Add clang link config file


author: Michal Domonkos <mdomonko@redhat.com> - 290-1
changelog:
  - Use upstream versions of find-provides/requires (RHEL-39760)
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-84703)


author: pkoprda <pkoprda@redhat.com> - 1.0.0-2
changelog:
  - rhc-playbook-verifier-v1.0.0-2
  - Removes rhc-playbook-signer subpackage from .spec file
  - Resolves: RHEL-115794


author: Rich Megginson <rmeggins@redhat.com> - 1.108.4-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog


author: Rich Megginson <rmeggins@redhat.com> - 1.108.5-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes tests in certificate, ha_cluster, kdump, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.6-0.1
changelog:
  - Resolves: RHEL-107013 : bootloader - fix: boolean values and null values are not allowed
  - This fixes ha_cluster tests


author: Rich Megginson <rmeggins@redhat.com> - 1.110.0-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - Resolves: RHEL-46227 : ha_cluster - export CIB properties configuration
  - Resolves: RHEL-110865 : network - Ansible RHEL network system role fails cannot find route table main
  - Resolves: RHEL-123026 : network - Skip the loopback profile when deleting all profiles except the ones explicitly included
  - Resolves: RHEL-123016 : sshd - fix: include external config files first so they can override all options
  - Resolves: RHEL-66738 : storage - add support for disk partitioning
  - Resolves: RHEL-115033 : storage - Storage role crashes on systems without /etc/fstab
  - support podman, timesync in container builds


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-0.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test and ansible-lint issues in firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.110.1-1.1
changelog:
  - Resolves: RHEL-114467 : firewall - add IPv6 ipset support
  - fixes ansible-test issue with firewall


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.1
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - Resolves: RHEL-128428 : nbde_client - Error in using the RHEL system role for nbde client [rhel-10]
  - Resolves: RHEL-104931 : snapshot - add support for bootable snapsets
  - new role hpc
  - minor firewall update


author: Rich Megginson <rmeggins@redhat.com> - 1.111.0-0.2
changelog:
  - Resolves: RHEL-46226 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export constraints configuration
  - revert to community.general 11.4.1 - we cannot use 12.* anymore as they have dropped support for py27 and py36


author: Rich Megginson <rmeggins@redhat.com> - 1.112.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS


author: Rich Megginson <rmeggins@redhat.com> - 1.113.0-0.1
changelog:
  - Resolves: RHEL-127971 : sshd - feat: Add new configuration option CanonicalMatchUser on RHEL/CentOS
  - fix ansible-test issues in ha_cluster, sshd
  - rebase all roles to version which has community.general 11.x support (no code changes, only meta)


author: Joseph Marrero Corchado <jmarrero@redhat.com> - 2025.6-4
changelog:
  - backport: https://github.com/coreos/rpm-ostree/pull/5322
    https://github.com/coreos/rpm-ostree/pull/5339 which pairs with the
    previous backport: https://github.com/coreos/rpm-ostree/pull/5341


author: Michal Ruprich <mruprich@redhat.com> - 3.4.1-1
changelog:
  - New version 3.4.1
  - Resolves: RHEL-70151 - Heap Buffer Overflow in Rsync due to Improper Checksum Length Handling
  - Resolves: RHEL-70159 - Info Leak via Uninitialized Stack Contents
  - Resolves: RHEL-70203 - rsync server leaks arbitrary client files
  - Resolves: RHEL-72500 - Path traversal vulnerability in rsync
  - Resolves: RHEL-72501 - --safe-links option bypass leads to path traversal
  - Resolves: RHEL-71658 - Race Condition in rsync Handling Symbolic Links
  - Resolves: RHEL-71293 - Build rsync with --with-rrsync


author: Attila Lakatos <alakatos@redhat.com> - 8.2408.0-1
changelog:
  - Rebase to 8.2408.0
  - Remove dependency on libgcrypt
  - Introduce new ossl crypto provider, replacement for gcry
    Resolves: RHEL-22023


author: Attila Lakatos <alakatos@redhat.com> - 8.2412.0-1
changelog:
  - Rebase to 8.2412.0
    Resolves: RHEL-70110
  - Fix $ActionQueueDiscardMark default value to 80% queue size
    Resolves: RHEL-41153
  - Fix segfault when $ControlCharacterEscapePrefix is set
    Resolves: RHEL-35823
  - Fix segfault due to processing malform queue message
    Resolves: RHEL-33451
  - Fix crash on startup when an invalid function is specified
    Resolves: RHEL-59893
  - Startup rsyslog service after network-online.target
    Resolves: RHEL-39284
  - Harden service file
    Resolves: RHEL-39237
  - imjournal: PID nummber is retrieved from the journal by default 
    Resolves: RHEL-39413


author: Attila Lakatos <alakatos@redhat.com> - 8.2506.0-1
changelog:
  - Rebase to 8.2506.0
  - imuxsock: track dropped messages by ratelimiting
    Resolves: RHEL-96589
  - man page version update
    Resolves: RHEL-96592


author: Attila Lakatos <alakatos@redhat.com> - 8.2510.0-5
changelog:
  - Rebase to 8.2510.0
  - gnutls netstream driver: improve doc
    Resolves: RHEL-106763
  - rsyslog.conf: use RainerSscript syntax in actions
    Resolves: RHEL-119492
  - gnutls netstream driver: report missing certificate just once
    Resolves: RHEL-106477


author: Jun Aruga <jaruga@redhat.com> - 3.3.1-5
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-33975
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-34124
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-34116
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-33866


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-7
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-59035
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57047
    Resolves: RHEL-57059
    Resolves: RHEL-57070
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52802


author: Jun Aruga <jaruga@redhat.com> - 3.3.7-9
changelog:
  - Upgrade to Ruby 3.3.7
    Resolves: RHEL-77994
  - Fix Ruby OpenSSL to respect crypto-policies TLS minimal version.
    Resolves: RHEL-21019


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-10
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-87342
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
    Resolves: RHEL-86116
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-11
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-130160
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122028


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Dan Horák <dhorak@redhat.com> - 2:2.35.0-1
changelog:
  - rebased to 2.35.0 (RHEL-59086)
  - cpacfstats: support MSA 10 and MSA 11 (RHEL-23873)
  - Resolves: RHEL-59086 RHEL-23873


author: Dan Horák <dhorak@redhat.com> - 2:2.36.0-1
changelog:
  - rebased to 2.36.0 (RHEL-59086)
  - cpacfinfo: new tool to provide CPACF information (RHEL-23869)
  - chpstat: Additional Channel Measurements (RHEL-23875)
  - zPCI: Optics Monitoring for PF Access Mode (RHEL-24153)
  - KVM: Support extended attestation for Secure Execution (RHEL-27472)
  - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-47108)
  - Vertical CPU Polarization Support Stage 2 (RHEL-64704)
  - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70851)
  - KVM: Rewrite genprotimg in Rust (RHEL-72022)
  - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71821)
  - KVM: Support retrievable secrets in Secure Execution guests (RHEL-46894)
  - zkey key support for dm-crypt with XTS keys (RHEL-23870)
  - Resolves: RHEL-59086 RHEL-23869 RHEL-23875 RHEL-24153 RHEL-27472 RHEL-47108 RHEL-64704 RHEL-70851 RHEL-72022 RHEL-71821 RHEL-46894 RHEL-23870


author: Dan Horák <dhorak@redhat.com> - 2:2.38.0-1
changelog:
  - rebased to 2.38.0 (RHEL-73341)
  - LPAR level power consumption reporting (RHEL-72677)
  - Provide Topology-Map information to userspace (RHEL-72680)
  - Add CCK secret type for updating the Customer Communication Key (RHEL-73023)
  - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85389)
  - Resolves: RHEL-73341 RHEL-72677 RHEL-72680 RHEL-73023 RHEL-85389


author: Dan Horák <dhorak@redhat.com> - 2:2.39.0-1
changelog:
  - rebased to 2.39.0 (RHEL-100438)
  - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126748)
  - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126744)
  - zipl: makedumpfile is required for ngdump support (RHEL-114661)
  - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114884)
  - chpstat: Fix DPU utilization scaling in reports (RHEL-109214)
  - Resolves: RHEL-100438 RHEL-126748 RHEL-126744 RHEL-114661 RHEL-114884 RHEL-109214


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1.5
changelog:
  - Bump release for rebuild against pacemaker-3.0.0-rc1 package
    Resolves: RHEL-68410
    Resolves: RHEL-67387


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-36
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-113741
  - Add sysusers.d config file to allow rpm to create users/groups automatically
    and drop attempt to delete group
    Related: RHEL-114454
  - Add support for Image Mode
    Resolves: RHEL-114454


author: Timm Bäder <tbaeder@redhat.com> - 2.2.8-21
changelog:
  - Add downstream patch to fix c99 incompatibilities
  - https://fedoraproject.org/wiki/Changes/PortingToModernC


author: Matthew Burket <mburket@redhat.com>
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.74 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.74


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.77-2
changelog:
  - fix incorrect applicability of Grub2 UEFI specific rules
  - replace grub-mkconfig with grub2-mkconfig in rule descriptions


author: Remi Collet <remi@remirepo/net> - 1:2.0.3-1
changelog:
  - Rebase to 2.0.3
  - add upstream patch to fix brp-python-hardlink path
  - use SPDX license ID
  - run upstream tests


author: Neal Gompa <ngompa@fedoraproject.org> - 2.32.50-1
changelog:
  - Update to 2.32.50
  - Backport fixes from upstream
    + Correctly handle SDL environment variables
    + Fix to avoid over optimizing away internal strlen
    Resolves: RHEL-77078


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-6
changelog:
  - seabios-pciinit-don-t-misalign-large-BARs.patch [RHEL-67847]
  - Resolves: RHEL-67847
    (amdgpu failed to initialize when multiple AMD MI210 GPUs assigned and firmware is seabios [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-7
changelog:
  - seabios-Remove-iasl-from-BuildRequires.patch [RHEL-68975]
  - Resolves: RHEL-68975
    (remove iasl build dependency)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.16.3-8
changelog:
  - seabios-update-release-date.patch [RHEL-126466]
  - Resolves: RHEL-126466
    (SeaBIOS date is "stuck" at 2014 even for recent releases)


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.5-1
changelog:
  - Confine nfs-server generator
  Resolves: RHEL-106119
  - Support virtqemud handle hotplug hostdev devices
  Resolves: RHEL-65266
  - Allow virtstoraged create qemu /var/run files
  Resolves: RHEL-104344
  - Allow virtqemud write to sysfs files
  Resolves: RHEL-104378
  - Allow unconfined_domain_type cap2_userns capabilities
  Resolves: RHEL-93656


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.6-1
changelog:
  - Apply generator template to selinux-autorelabel generator
  Resolves: RHEL-107516
  - Allow systemd-coredumpd capabilities in the user namespace
  Resolves: RHEL-97586
  - Allow virtqemud start a vm which uses nbdkit
  Resolves: RHEL-69118
  - Add nbdkit_signal() and nbdkit_signull() interfaces
  Resolves: RHEL-69118
  - Allow openvswitch read virtqemud process state
  Resolves: RHEL-65322
  - Add binsbin-convert.sh script
  Resolves: RHEL-69118


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.7-1
changelog:
  - Revert "Add policy for insights-core"
  Resolves: RHEL-110651
  - Revert "Add insights_core interfaces"
  Resolves: RHEL-110651


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.8-1
changelog:
  - Reapply "Add insights_core interfaces"
  Resolves: RHEL-112368
  - Reapply "Add policy for insights-core"
  Resolves: RHEL-112368


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.9-1
changelog:
  - Allow systemd-oomd watch tmpfs dirs
  Resolves: RHEL-106998
  - Allow systemd-oomd watch dbus pid sock files
  Resolves: RHEL-106998
  - Allow userdomain to connect to systemd-oomd over a unix socket
  Resolves: RHEL-106998
  - Allow 'oomctl dump' to interact with systemd-oomd
  Resolves: RHEL-106998
  - Basic functionality for systemd-oomd
  Resolves: RHEL-106998
  - Basic enablement for systemd-oomd
  Resolves: RHEL-106998
  - Remove permissive domains
  Resolves: RHEL-107038
  - Allow iptables manage its private fifo_files in /tmp
  Resolves: RHEL-83775
  - Allow ras-mc-ctl write to sysfs files
  Resolves: RHEL-86926
  - Allow nfs generator create and use netlink sockets
  Resolves: RHEL-111556
  - Revert "Allow virt_domain write to virt_image_t files"
  Resolves: RHEL-93773


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.10-1
changelog:
  - Allow sshd-auth read generic proc files
  Resolves: RHEL-107732
  - Allow sshd-auth read and write user domain ptys
  Resolves: RHEL-107732
  - Allow sshd-session get attributes of sshd vsock socket
  Resolves: RHEL-107732
  - Adjust guest and xguest users policy for sshd-session
  Resolves: RHEL-107732
  - Update files_search_base_file_types()
  Resolves: RHEL-107732
  - Allow sshd-session read cockpit pid files
  Resolves: RHEL-107732
  - Add default contexts for sshd-seesion
  Resolves: RHEL-107732
  - Define types for new openssh executables
  Resolves: RHEL-107732
  - Allow ras-mc-ctl get attributes of the kmod executable
  Resolves: RHEL-102535
  - Define file equivalency for /var/opt
  Resolves: RHEL-116512
  - Update specfile triggers for DSP modules
  Resolves: RHEL-116044


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.11-1
changelog:
  - Allow iotop stream connect to systemd-userdbd
  Resolves: RHEL-105481
  - Allow insights-client manage /etc symlinks
  Resolves: RHEL-107589
  - Allow insights-client get attributes of the rpm executable
  Resolves: RHEL-124855
  - Allow nfsidmapd search virt lib directories
  Resolves: RHEL-68722
  - Allow kdump search kdumpctl_tmp_t directories
  Resolves: RHEL-116041


author: Zdenek Pytela <zpytela@redhat.com> - 42.1.12-1
changelog:
  - Update kernel_secretmem_use()
  Resolves: RHEL-116154
  - Allow system_mail_t read apache system content conditionally
  Resolves: RHEL-114970
  - Allow create kerberos files in postgresql db home
  Resolves: RHEL-119619
  - Update specfile trigger for smartmontools
  Resolves: RHEL-113167


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.34-1
changelog:
  - data: update app icon
  - Disable bug reporting, if libreport is not available
  - Enable Georgian and Arabic (ar) languages in configure.ac
  - Update translations


author: Petr Lautrbach <lautrbach@redhat.com> - 3.3.35-3
changelog:
  - Reload auditd using auditctl instead of service
  - Drop dependency on initscripts-service
  Resolves: rhbz#2365614


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-7
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices (RHEL-40861,RHEL-54607)
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.0-1
changelog:
  - Rebase to version 4.15.0
  - getdef: avoid spurious error messages about unknown configuration options


author: Milan Crha <mcrha@redhat.com> - 2.3-6
changelog:
  - Co-own /usr/share/gettext and /usr/share/gettext/its
  - Related to rhbz#2280150
  - Resolves: RHEL-38682 (Backport Fedora 40 changes)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.18.1-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.18
    (https://github.com/containers/skopeo/commit/bfd0850)
  - fixes "CVE-2025-27144 skopeo: Go JOSE's Parsing Vulnerable to Denial of Service [rhel-10.1]"
  - Resolves: RHEL-80611


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.60.0-4
changelog:
  - Ignore updates from non-tracked subtrees during modify/modrdn/update
    to avoid deadlocks with retro changelog


author: Alexander Bokovoy <abokovoy@redhat.com> - 0.70.0-1
changelog:
  - Upstream release 0.70.0: make NIS server optional
  - Disable NIS server support
  - Resolves: RHEL-34186


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-58990


author: Jindrich Novy <jnovy@redhat.com> - 1.3.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3
  - Resolves: RHEL-94771


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-1
changelog:
  - new version 6.10
  - Resolves: RHEL-45048 - squid: Out-of-bounds write error may lead to Denial of
    Service (CVE-2024-37894)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-2
changelog:
  - Resolves: RHEL-62323 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-5
changelog:
  - Disable ESI support
  - Resolves: RHEL-65069 - CVE-2024-45802 squid: Denial of Service processing ESI
    response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-6
changelog:
  - Resolves: RHEL-86817 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is
    output frequently on RHEL10


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-9
changelog:
  - Resolves: RHEL-122481 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:6.10-10
changelog:
  - Resolves: RHEL-129457 - "ICAP_ERR_OTHER/408" occurs in icap.log when
    downloading a file on RHEL9


author: Stephen Gallagher <sgallagh@redhat.com> - 3.0.5-12
changelog:
  - Fix IP address handling in CA certificate SAN constraints
  - Add automatic single-IP subnet mask to IP addresses in CA name
    constraints
  - Update help text to show simplified IP format without subnet mask
  - Add comprehensive test for basicConstraints


author: Stephen Gallagher <sgallagh@redhat.com> - 4.0.0-1
changelog:
  - Release SSCG 4.0.0
  - Support for ML-DSA keys for post-quantum cryptography (PQC) when built
    against OpenSSL 3.5 or later
  - Support for EC-DSA keys for elliptic curves
  - RSA certificate authority is now created with a minimum key strength of
    4096 bits
  - Improved --help output
  - Deprecated support for generating custom DH parameters
  - Stopped producing the DH parameter file by default (it may be requested
    explicitly with the --dhparams-file argument)
  - Minimum OpenSSL version is now 3.0
  - Drop upstreamed patches


author: Chris White <chwhite@redhat.com> - 1.19.5
changelog:
  - Refactor Makefile to fix passing options to koji builds
  - Updated compile options for annocheck hardening
  - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences.
  - Added an 'annocheck' makefile target for local checking.
  Resolves: RHEL-34055


author: Chris White <chwhite@redhat.com> - 1.19.6-1
changelog:
  - Makefile: add uninstall target
  - systemd: add BE environment variable to select backend
  Resolves: RHEL-34055


author: Clark Williams <williams@redhat.com> - 1.19.8-1
changelog:
  - sched_debug: fix non x86 support
  - stalld.h:  fix prototype mis-patch with cleanup_regex()
  - throttlectl.sh:  add errexit
  - stalld.h:  fix incorrect default umask value
  - version bump
  - Fix building with glibc 2.41
  - throttlectl: clean up throttling script due to reported CVE-2024-54159
  - Makefile:  change modes on throttled and stalld
  - stalld.c: use a more reasonable size for reading /proc/stat
  Resolves: RHEL-69567
  Resolves: RHEL-40146
  Resolves: RHEL-79159
  Resolves: RHEL-67223
  Resolves: RHEL-50356


author: Wander Lairson Costa <wander@redhat.com> - 1.20.3-1
changelog:
  - Rebase to stalld-1.20.3
  - Make systemd start stalld with the SCHED_FIFO:10 priority
  Resolves: RHEL-109112


author: Wander Lairson Costa <wander@redhat.com> - 1.20.4-1
changelog:
  - Rebase to stalld-1.20.4
  - Remove duplicated ExecStart entry from the stalld.service file
  Resolves: RHEL-109112


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-5
changelog:
  - Fix incorrect syscall name reporting in restart_syscall() on attach when
    PTRACE_GET_SYSCALL_INFO is in use (RHEL-65108).
  - Update net-yy-inet* and linkat--secontext_mismatch tests.


author: Eugene Syromiatnikov <esyr@redhat.com> - 6.7-6
changelog:
  - Avoid failures of creat.gen test on kernels that include commit
    v6.11-rc1~242^2~19 ("fs: don't block i_writecount during exec").


author: John Kacur <jkacur@redhat.com> - 0.18.06-2
changelog:
  - Revert a patch to use that creates a gcc flags mismatch on power
  - Remove duplicate sqrt function
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-3
changelog:
  - Remove the revert patch and replace it with an upstream fix for power
  - Include all of the stress-ng patches available past 0.18.06
  Resolves:RHEL-65475


author: John Kacur <jkacur@redhat.com> - 0.18.06-6
changelog:
  - Due to the special nature of stress-ng, it's not even possible to compile
    with -fpic or -fPIC, so turning annocheck off
  Resolves: RHEL-33521


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-5.p5
changelog:
  - RHEL 10.0 ERRATUM
  - sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
    positive(s) Resolves: RHEL-44436
  - sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864


author: Alejandro López <allopez@redhat.com> - 1.9.15-9.p5
changelog:
  - RHEL 10.1 ERRATUM
  - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
  - CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022


author: Alejandro López <allopez@redhat.com> - 1.9.17-2.p2
changelog:
  - Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
    the shell being executed [rhel-10]
  - Resolves: RHEL-128212 - [RFE] request to backport support for regex in
    sudo [rhel-10]
  - Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]


author: Stefan Berger <stefanb@linux.ibm.com> - 0.8.1-2
changelog:
  - Don't build tools-pkcs11 for i686 since python-tpm2-pytss is not built for it
  - Set license to BSD-3-Clause for all packages


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.0-1
changelog:
  - Update to v0.9.0 release
    Resolves: RHEL-42590
  - Fix SHA-1 algorithm availability
    Resolves: RHEL-46754


author: Miroslav Lichvar <mlichvar@redhat.com> 1.1.0-4
changelog:
  - remove existing smc socket on start (RHEL-40673)
  - fix crash observed with newer E810 firmware (RHEL-55261)
  - fix initial pin ID to not match an existing pin (RHEL-55261)
  - fix requested thread stack size on aarch64 (RHEL-55260)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.5.18-8
changelog:
  - RHEL-28165 - configure-printer exits with failure status when device is already handled
  - RHEL-26328 - Drop the dependency on python3-pycurl


author: systemd maintenance team <systemd-maint@redhat.com> - 257-11
changelog:
  - fuzz-journal-remote: use ASSERT_OK() and friends (RHEL-79976)
  - logs-show: skip journal entry with an invalid timestamp (RHEL-79976)
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-87179)
  - backlight: Drop support for actual_brightness (RHEL-86713)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-12
changelog:
  - mkosi: use C10S repo for building RPMs (RHEL-79976)
  - test: adapt TEST-22 to the downstream --purge behavior (RHEL-79976)
  - mkosi: reconfigure the CI for CentOS Stream 10 (RHEL-79976)
  - test: skip tests for components not shipped in RHEL 10 (RHEL-79976)
  - ci: add a unique identifier to each GH Actions job (RHEL-79976)
  - test: limit logging when running TEST-21-DFUZZER (RHEL-79976)
  - man: mention RHEL documentation in systemctl's man page (RHEL-97762)
  - ukify: switch from zstd to zstandard (RHEL-97625)
  - ukify: fix zboot parsing with zstd (RHEL-97625)
  - ukify: if the specified kernel is not a valid PE file try to decompress it (RHEL-97625)
  - ukify: fix version detection for aarch64 zboot kernels with gzip or lzma compression (RHEL-97625)
  - ukify: when decompressing kernel before signing, call verify on decompressed file (RHEL-97625)
  - udev/net_id: introduce naming scheme for RHEL-10.1 (RHEL-44419)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-44419)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-104555)
  - test: add test case for issue #38265 (RHEL-104555)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-106260)
  - core: output log cycle path in one log message, not many (RHEL-106260)
  - core: make log cycle messages recognizable via message IDs (RHEL-106260)
  - core: change ordering cycle log message log levels (RHEL-106260)
  - core: cast log_oom() got void (RHEL-106260)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-106260)
  - catalog: add entries for the order cycle log messages (RHEL-106260)
  - flush_ports: flush POSIX message queues properly (RHEL-100553)
  - Add --entry-type=type1|type2 option to kernel-install. (RHEL-103354)
  - kernel-install: regroup options in help meesage (RHEL-103354)
  - kernel-install: do not mix || and && (RHEL-103354)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-103354)
  - bootspec: rename boot_entry_type_to_string() to boot_entry_type_description_to_string() (RHEL-103354)
  - bootspec: include 'UKI' in descriptive name for type #2 (RHEL-103354)
  - bootspec: rename BootEntryType values (RHEL-103354)
  - bootspec: rename boot_entry_source_to_string() to boot_entry_source_description_to_string() (RHEL-103354)
  - bootspec: boot_entry_source_to_json_string() to boot_entry_source_to_string() (RHEL-103354)
  - 90-uki-copy.install: Skip removing UKI related when BOOT_ENTRY_TYPE=type1 (RHEL-103354)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72701)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72701)
  - hwdb.d: add support for Akoya P15645 (RHEL-72701)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72701)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72701)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72701)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72701)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72701)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72701)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72701)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72701)
  - hwdb: add G-Mode key support (#37175) (RHEL-72701)
  - Add emulated release to G-Mode key (RHEL-72701)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72701)
  - hwdb: add bladeRF SDR devices (RHEL-72701)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72701)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72701)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72701)
  - hwdb: say that settings can be also set to 0 (RHEL-72701)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72701)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72701)
  - hwdb: run "update-hwdb" (RHEL-72701)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72701)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72701)
  - hwdb: add Ettus Research SDR devices (RHEL-72701)
  - hwdb: add RTL-SDR devices (RHEL-72701)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72701)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72701)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72701)
  - hwdb: add support for Loupedeck devices (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72701)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72701)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72701)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72701)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72701)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72701)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - Fix Positivo K116J search key and www shortcut (RHEL-72701)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72701)
  - hwdb: several cleanups (RHEL-72701)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72701)
  - hwdb: update (RHEL-72701)
  - hwdb: update autosuspend rules (RHEL-72701)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72701)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72701)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72701)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72701)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72701)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-14
changelog:
  - test: add test case for AddDependencyUnitFiles assert (RHEL-108257)
  - TEST-17: drop unnecessary $PATH setting (RHEL-108242)
  - chase: check the result is a directory or regular file only when the resolved path exists (RHEL-108006)
  - bootctl: stop printing "Stub/Boot loader set partition information" (RHEL-108251)
  - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109552)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-15
changelog:
  - coredump: drop RestrictSUIDSGID= option (#38640) (RHEL-113920)
  - ukify: fix insertion of padding in merged sections (RHEL-114414)
  - core: introduce Unit.dependency_generation counter and restart loop when dependency is updated in the loop (RHEL-112203)
  - core/unit: use UNIT_FOREACH_DEPENDENCY_SAFE() at several more places (RHEL-112203)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-16
changelog:
  - test: rename TEST-53-ISSUE-16347 to TEST-53-TIMER (RHEL-118216)
  - test: restarting elapsed timer shouldn't trigger the corresponding service (RHEL-118216)
  - test: check the next elapse timer timestamp after deserialization (RHEL-118216)
  - timer: don't run service immediately after restart of a timer (RHEL-118216)
  - test: store and compare just the property value (RHEL-118216)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-17
changelog:
  - pam_systemd: honor session class provided via PAM environment (RHEL-109832)
  - udev/net_id: introduce naming scheme for RHEL-10.2 (RHEL-72813)
  - udev/net_id: introduce naming scheme for RHEL-9.8 (RHEL-72813)
  - test: split VM-only subtests from TEST-74-AUX-UTILS to new VM-only test (RHEL-112205)
  - core/transaction: first drop unmergable jobs for anchor jobs (RHEL-112205)
  - test: add test case for issue #38765 (RHEL-112205)
  - strv: add strv_equal_ignore_order() helper (RHEL-109902)
  - pam: minor coding style tweaks (RHEL-109902)
  - user-record: add helper that checks if a provided user name matches a record (RHEL-109902)
  - user-record: add support for alias user names to user record (RHEL-109902)
  - pam_systemd_home: use right field name in error message (RHEL-109902)
  - pam_systemd_home: support login with alias names + user names with realms (RHEL-109902)
  - homed: support user record aliases (RHEL-109902)
  - homectl: add support for creating users with alias names (RHEL-109902)
  - test: add test for homed alias and realm user resolution (RHEL-109902)
  - update TODO (RHEL-109902)
  - udev: create symlinks for s390 PTP devices (RHEL-120177)
  - test: build the crashing test binary outside of the test (RHEL-113920)
  - test: exclude test-stacktrace(-not)?-symbolized from the coredump check (RHEL-113920)
  - mkosi: install test dependencies for EnterNamespace= test (RHEL-113920)
  - coredump: verify pidfd after parsing data in usermode helper (RHEL-104135)
  - coredump: restore compatibility with older patterns (RHEL-104135)
  - coredump: wrap long lines, fix grammar in comments (RHEL-104135)
  - coredump: get rid of _META_MANDATORY_MAX (RHEL-104135)
  - coredump: use %d in kernel core pattern (RHEL-104135)
  - coredump: also stop forwarding non-dumpable processes (RHEL-104135)
  - coredump: get rid of a bogus assertion (RHEL-104135)
  - coredump: add support for new %F PIDFD specifier (RHEL-104135)
  - coredump: when %F/pidfd is used, again allow forwarding to containers (RHEL-104135)
  - coredump: introduce an enum to wrap dumpable constants (RHEL-104135)
  - Define helper to call PR_SET_DUMPABLE (RHEL-104135)
  - coredump: fix 0-passed-as-pointer warning (RHEL-104135)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-19
changelog:
  - man: fix a missing word (RHEL-120277)
  - sd_bus_open_user_machine(): Don't shortcut without necessary env (RHEL-129179)
  - udev: set clock group for PTP and RTC devices (RHEL-113051)
  - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-126122)
  - strv: introduce string_strv_hashmap_remove() (RHEL-126937)
  - unit-file: introduce unit_file_remove_from_name_map() (RHEL-126937)
  - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-126937)
  - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-126937)


author: systemd maintenance team <systemd-maint@redhat.com> - 257-20
changelog:
  - tools/check-version-history: avoid DeprecationWarning with newer lxml (RHEL-128767)
  - man: don't duplicate version in History section (RHEL-128767)
  - tools: ignore root element explicitly in check-version-history (RHEL-128767)
  - systemd-logind: Add signal section in man systemd-logind (RHEL-128767)
  - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118216)
  - timer: rebase last_trigger timestamp if needed (RHEL-118216)


author: Frank Ch. Eigler <fche@redhat.com> - 5.2-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
  - https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 5.3-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-12
changelog:
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0 OR MPL-1.1)"


author: Petr Pisar <ppisar@redhat.com> - 2.5.12-1
changelog:
  - 2.5.12 bump
  - Correct a license tag to "(LGPL-2.1-or-later OR CPL-1.0) AND
    (LGPL-2.1-or-later OR GPL-2.0-or-later OR MPL-2.0)"


author: Than Ngo <than@redhat.com> - 12:20230311-18
changelog:
  - Fixed eufm font mapping
  - Added missing license and fixed file list in texlive-plain
  Related: RHEL-34826


author: Than Ngo <than@redhat.com> - 13:20240311-2
changelog:
  - removed obsoleted patch
  - fixed file conflicts in bibtex, oberdiek, xetex, attachfile, xepersian
  - fixed texlive-docindex conflict with texlive-base
  Related: RHEL-59868
  Resolves: RHEL-53483, RHEL-53786


author: Than Ngo <than@redhat.com> - 13:20240311-3
changelog:
  - include luajit for x86_64 only as it only supports this arch
  - fix requirement on tex-kpathsea, texlive-base
  - fix unicode issues
  - add rpminspect.yaml

  Related: RHEL-59868


author: Than Ngo <than@redhat.com> - 13:202403
changelog:
  - Add two subpackages for texlive 2024: firstaid, hypcap
    can't find latex2e-first-aid-for-external-files.ltx file
  - Drop luajittex
  Resolves: RHEL-65862


author: Than Ngo <than@redhat.com> - 13:20240311-6
changelog:
  - Resolves: RHEL-70243, remove xdvi due to removal of X11 in ghostscript
  - Resolves: RHEL-69757, fix python-sphinx FTBFS


author: Kate Hsuan <hpa@redhat.com> - 2.5.10-1
changelog:
  - Update to the upstream version 2.5.10
  - Update to 2.5.10 the commits 3144beaf22c4a (Update Panther Lake sysfs
    paths) be2049afdee80 (Add Panther Lake to the supported list)
    03b4a139388f6 (Check for target code ITMT3) were included in the 2.5.10
    release.
  - Include commits c921e802f6e49 (Compile issue on i586 for time_t print)
    352125763b8f9 (itmt3 support) to enable itmt3 support.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.14.1-75
changelog:
  - Add epoch prefix to version-release in requires
  - Add rpminspect.yaml to adjust configuration for rpminspect run
    Resolves: RHEL-56884


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2:2.14.1-77
changelog:
  - Update OpenSSL certificates set up
    Resolves: RHEL-86503
  - Remove deprecated path from systemd service file
    Resolves: RHEL-86502


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Resolves: RHEL-50166 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-12274 - Use src.zip file as a Source0 instead of tar.gz
  - Resolves: RHEL-51277 - Prune changelog to remove non-relevant history
  - Resolves: RHEL-52906 - tomcat: Switch to using Java 21 as the default JDK
  - Resolves: RHEL-55194 - Fix changelog version
  - Resolves: RHEL-46156
    tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-1
changelog:
  - Rebase tomcat to 10.1.36
  - Resolves: RHEL-82925
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-87272
    tomcat: DoS in examples web application (CVE-2024-54677)
  - Resolves: RHEL-87273
    tomcat: Authentication bypass when using Jakarta Authentication API (CVE-2024-52316)
  - Resolves: RHEL-85343 - NoClassDefFoundError when using migration tool


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-2
changelog:
  - Resolves: RHEL-108900
    tomcat: Apache  FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108902
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108904
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108908
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:10.1.36-3
changelog:
  - Resolves: RHEL-102184
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)
  - Resolves: RHEL-108906
    tomcat: Denial of service (CVE-2025-52520)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-2
changelog:
  - Initial commit on c10s
    Resolves: RHEL-69841
  - tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5
changelog:
  - Resolves: RHEL-82927
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-5.el10_0.1
changelog:
  - Resolves: RHEL-91750
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-94960
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-7
changelog:
  - Resolves: RHEL-108485
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108493
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108501
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108509
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108522
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108517
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-8
changelog:
  - Resolves: RHEL-102186
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-14
changelog:
  - Silence 'rpminspect --tests=stack-prot'
  - Silence 'rpminspect --tests=annocheck' (part 2)
  Resolves: RHEL-33522


author: Debarshi Ray <rishi@fedoraproject.org> - 0.2-2
changelog:
  - Update to 0.2
  - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787
  Resolves: RHEL-104450


author: Adrian Freihofer <adrian.freihofer@gmail.com> 1.2.0-2
changelog:
  - tito: use release tagger (adrian.freihofer@gmail.com)
  - Revert "Automatic commit of package [tpm2-openssl] release [1.2.1-1]."
    (adrian.freihofer@gmail.com)
  - Automatic commit of package [tpm2-openssl] release [1.2.1-1].
    (adrian.freihofer@gmail.com)
  - run-with-simulator: backport from upstream (adrian.freihofer@gmail.com)


author: Tomas Popela <tpopela@redhat.com> - 3.7.4-1
changelog:
  - Update to 3.7.4 and sync the macro naming with Fedora
    Resolves: RHEL-71387
  - Drop references to non-existent tracker-extract-3.service
    Resolves: RHEL-70242


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-50567
    - clear plugin repository when stopping tuning
    - man: add description of the balanced-battery profile


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.24.0-3
changelog:
  - Fixed privileged execution of arbitrary scripts by active local user,
    (CVE-2024-52336)
    Resolves: RHEL-66636
  - Added sanity checks for API methods parameters, (CVE-2024-52337)
    Resolves: RHEL-66613


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-0.1.rc1
changelog:
  - new release
    - tuned-ppd: removed the use of StrEnum
    - tuned-ppd: fixed traceback
      resolves: RHEL-74384
    - tuned-ppd: multiple fixes and updates
    - docs: plugins docs are now automatically generated from the docstrings
    - plugin_cpu: fixed no_turbo boolean option parsing
    - plugin_cpu: allowed raw energy_performance_preference values
    - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    - plugin_bootloader: added variables to BLS entries only if grub is used
    - plugin_scheduler: do not assume that perf events have type attribute
    - plugin_scheduler: updated sched knobs for kernels 6.6+
    - plugin_scheduler: log process info when its affinity cannot be changed
      resolves: RHEL-69933
    - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    - plugin_scheduler: made perf support optional
    - plugin_net: added support for hotplug and rename
    - makefile: added support for installation to custom $BINDIR/$SBINDIR
    - functions: dropped cpuspeed support


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - sap-hana: Set transparent_hugepages to madvise
      resolves: RHEL-68454
    - plugin_bootloader: export Grub variables to make them available in submenus
    - utils.commands: fixed CPU online detection when not present
    - plugin_net: handled cqe-mode-rx ethtool option
    - profiles: correct CPU governor settings


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.25.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-70454
    - plugins: added missing instance parameters
    - disk: added missing remove parameter
    - plugin_scheduler: added switch to disable processing of kthreads
    - Makefile: added support for installation to custom LIBEXECDIR
    - functions: create a new parser object for each string expansion


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.26.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-94809
    - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
    - tuned-ppd: enabled sysfs_acpi_monitor by default
    - tuned-ppd: fixed inotify watch for performance degradation
    - tuned-ppd: pinned virtual files in memory for inotify
    - fixed instance priority inheritance
      resolves: RHEL-94842
    - hotplug: added fixes for device remove race condition
    - tuned-main.conf: added startup_udev_settle_wait option
      resolves: RHEL-88238
    - functions: silenced errors if module kvm_intel does not exist
    - functions: make calc_isolated_cores return CPU ranges
    - scsi: used 'med_power_with_dipm' for SATA ALPM
    - scsi: do not set ALPM on external SATA ports
      resolves: RHEL-79913
    - network_latency: Set non-zero rcutree.nohz_full_patience_delay
    - realtime: disable appropriate P-State drivers
    - plugin_disk: added support for MMC (MultiMediaCard) devices
    - udev: fix possible traceback in device matcher
      resolves: RHEL-97087
    - udev-settle: obey udev buffer size and handle possible tracebacks
      resolves: RHEL-92637
    - daemon: re-raise daemon init exception in no-daemon mode
    - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    - gui: fix the profile deleter script


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Patsy Griffin <patsy@redhat.com> - 2025b-1
changelog:
  - Update to tzdata-2025b (RHEL-84740)
    - Chile's Aysén Region moves from -04/-03
      to -03 year-round, diverging from America/Santiago and
      creating a new zone America/Coyhaique.


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.7-5
changelog:
  - Show diff when checking formatting
  - Fix several lint findings
  - Fix generating policy for Crio mounts


author: Jens Petersen <petersen@redhat.com> - 15.1.0-0.1
changelog:
  - update to draft 15.1.0: https://unicode.org/versions/Unicode15.1.0/
  - do not add copyright.html file from website
  - add missing Unicode-TOU license tag


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Jakub Martisko <jamartis@redhat.com> - 6.0-65
changelog:
  - Fix: Unzip Fails on Large Zip Files
  - Use the patch from Debian dealing with this
  Resolves: RHEL-45993


author: Jakub Martisko <jamartis@redhat.com> - 6.0-67
changelog:
  - zipinfo: remove the extra %c that caused invalid reads
  - zipinfo: fix the whitespaces in the output
  - Zipbombs: Port Another patch, orinally made by Mark Adler
  - https://github.com/madler/unzip/commit/af0d07f95809653b669d88aa0f424c6d5aa48ba0
    Resolves: RHEL-59972
    Resolves: RHEL-6286


author: Kate Hsuan <hpa@redhat.com> - 1.90.6-1
changelog:
  - Update to upstream version 1.90.6
  - Update to the upstream version 1.90.6
  - Include a fix patch for "incorrect external device battery update" issue.
    Link: https://gitlab.freedesktop.org/upower/upower/-
    /commit/7d7bb84fde91bef9ee7eba924cbdfa74639cc4fe


author: Kate Hsuan <hpa@redhat.com> - 1.90.8-1
changelog:
  - Update to the upstream version 1.90.8
  - Update to 1.90.8
  - README and HACKING were renamed to README.md and HACKING.md
  - Support zsh-completion
  - Resolve memory leak when connecting/disconnecting and refreshing the
    battery info.


author: Attila Lakatos <alakatos@redhat.com> - 1.1.3-2
changelog:
  - Rebase to 1.1.3
  - Update usbguard-selinux subpackage
  - Include usbguard-notifier subpackage
  Resolves: RHEL-37322
  - Disable logging to console


author: Attila Lakatos <alakatos@redhat.com> - 1.1.4-1
changelog:
  - Rebase to 1.1.4
  - selinux: comply with with the "Unify bin and sbin" change
    Resolves: RHEL-113206
  - Restore permissions of the log directory
    Resolves: RHEL-92260


author: Sérgio Basto <sergio@serjux.com> - 1.6.2-61
changelog:
  - Use standard Fedora linker flags (bug #1548666)
    https://src.fedoraproject.org/rpms/uuid/pull-request/1


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-2
changelog:
  - Add VALGRIND_3_24_BRANCH patches
    0001-Prepare-NEWS-for-branch-3.24-fixes.patch
    0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch
    0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch
    0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch
    0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch
    0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch
    0007-Add-support-for-landlock_create_ruleset-444-landlock.patch
    0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch
    0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch
    0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch
    0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-3
changelog:
  - Add more VALGRIND_3_24_BRANCH patches
    0012-Recognize-new-DWARF5-DW_LANG-constants.patch
    0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch
    0014-linux-support-EVIOCGRAB-ioctl.patch


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-4
changelog:
  - Split main valgrind package into several subpackages:
    - valgrind now contains just the core tools.
    - valgrind-scripts contains the post-processing scripts for callgrind,
      cachegrind, massif and dhat which depend on perl and python.
    - valgrind-gdb contains the debuginfo client/server and (v)gdb support.
    - valgrind-docs contains the man pages, html and pdf manual.
  - Adjust Requires/Recommends to subpackages can be installed independently.
    - valgrind-devel now Recommends, instead of Requires, valgrind.
    - valgrind-gdb Requires valgrind
    - valgrind-scripts Recommends valgrind-gdb
    - valgrind-gdb Recommends gdb


author: Mark Wielaard <mjw@redhat.com> - 3.24.0-6
changelog:
  - More VALGRIND_3_24_BRANCH patches
    0015-ppc-test_dfp2-build-fix-for-GCC-15.patch
    0016-syswrap-generic-Emit-pp_ExeContext-after-the-file-de.patch
    0017-add_hardwired_spec-for-ld-linux-x86-64.so.2-memcmp.patch
    0018-gdbserver_tests-filter-out-new-Missing-rpms-message.patch


author: Mark Wielaard <mjw@redhat.com> - 3.25.1-2
changelog:
  - Add VALGRIND_3_25_BRANCH patches
    - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch
    - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch


author: Mark Wielaard <mjw@redhat.com> - 3.26.0-1
changelog:
  - Valgrind 3.26.0 final
  - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches
  - Refresh some-stack-protector and some-Wl-z-now patches.
  - Add vgstack to valgrind-gdb.
  - Update License to GPL-3.0-or-later
  - Clarify License of valgrind-scripts.


author: Remi Collet <rcollet@redhat.com> - 7.2.6.1
changelog:
  - rebase to 7.2.6
  - merge limit.conf in main service files
  - drop /etc/sysconfig/valkey
  - rename compat package
  - fix working dir
  - partially enable upstream test suite


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.4.2-1
changelog:
  - New upstream release. A security release
  - Includes fix for CVE-2023-44487 aka VSV00013, rhbz#2243328, HTTP/2 Rapid Reset Attack


author: Luboš Uhliarik <luhliari@redhat.com> - 7.6.0-3
changelog:
  - Resolves: RHEL-59267 - varnish rebase to 7.6.0
  - Resolves: RHEL-30333 CVE-2024-30156 varnish: HTTP/2 Broken Window
    Attack may result in denial of service


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.083-6
changelog:
  - RHEL-113549 CVE-2025-53906 vim: Vim path traversal
  - RHEL-113543 CVE-2025-53905 vim: Vim path traversial


author: Jonathon Jongsma <jjongsma@redhat.com> - 4.1.0-7
changelog:
  - cloner: Sync <uuid> and <sysinfo> system uuid (RHEL-34608)
  - virtinstall: fix regression with --boot and no install method (RHEL-34608)
  - progress: Fix showing correct final total (RHEL-34608)
  - virtinstall: Fix the allocating disk size printed by the progress bar (RHEL-34608)
  - virtinstall: Hide total_size in the progress bar if it doesn't need (RHEL-34608)
  - virt-install: Recommend '--boot uefi' (RHEL-34608)
  - virt-install: Document Secure Boot setups (RHEL-34608)
  - tests: Add more cloud-init and TPM test cases (RHEL-34608)
  - installer: drop default TPM for --cloud-init install phase (RHEL-34608)
  - Add gating for centos stream 10 (RHEL-34608)
  - xmleditor: make gtksourceview optional (RHEL-35859)


author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Pavel Hrdina <phrdina@redhat.com> - 5.1.0-1
changelog:
  - Rebased to virt-manager-5.1.0 (RHEL-119228)
  - The rebase also fixes the following bugs:
      RHEL-105818


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.8.1-9
changelog:
  - Rebase to virt-v2v 2.8.1
    related: RHEL-81735
  - Fix virt-v2v -v --install dnf5 error
    resolves: RHEL-83288
  - Print blkhash of converted image in virt-v2v debugging output
    resolves: RHEL-85514
  - Document dracut network-legacy conversion failure
    resolves: RHEL-55732
  - Print nbdcopy command in debug output
    resolves: RHEL-86088
  - Remove usage of nbdkit-cacheextents-filter
    resolves: RHEL-88860
  - Print better mountpoint stats in debug output
    resolves: RHEL-88862
  - Remove several ancient, deprecated options
    resolves: RHEL-88867
  - virt-v2v-inspector is failing on snapshots of running VMs
    resolves: RHEL-88544
  - Add virt-v2v-open tool
    resolves: RHEL-89993
  - Run filesystem check before and after conversion
    resolves: RHEL-91931
  - virt-v2v fails to convert XFS guest with dirty filesystem
    resolves: RHEL-95365
  - virt-v2v fails to convert guests with e2fsck errors
    resolves: RHEL-97600
  - Improve layout of man page
    resolves: RHEL-99745
  - Fix xfs_repair out of memory error
    resolves: RHEL-99313
  - Remove virt-v2v -io vddk-noextents=true option
    resolves: RHEL-102619
  - Add -o kubevirt -oo disk and -oo create options
    resolves: RHEL-101599
  - Fix escaping of nbdkit-vddk-plugin export parameter
    resolves: RHEL-102734
  - Fix installation of drivers on firstboot with pending reboots
    resolves: RHEL-103356
  - Log the version of libnbd / nbdcopy in virt-v2v output
    resolves: RHEL-104018
  - Fix SELinux relabelling in Linux split-/usr
    resolves: RHEL-109130
  - Set boot order for Linux guests based on grub location
    resolves: RHEL-108991


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.9.10-1
changelog:
  - Rebase to virt-v2v 2.9.10
    resolves: RHEL-111241
  - Synchronize spec file with Fedora.
  - Tighten permissions on windows C:\Program Files\Guestfs
    resolves: RHEL-104352
  - Don't output floppy XML with qemu lacks support
    resolves: RHEL-90175
  - convert: linux: Ignore /etc/lvm/archive/*.vg files
    resolves: RHEL-113820
  - mlcustomize/inject_virtio_win.ml: Use viostor.inf instead of guestor
    resolves: RHEL-112517
  - Fix for setting boot order for Linux guests based on grub location
    resolves: RHEL-115989, RHEL-115990
  - Remove virt-v2v subscription manager options
    resolves: RHEL-122308
  - Handle subdirectories in nbdkit vddk export wildcard
    resolves: RHEL-121728
  - Further fixes for nbdkit vddk export wildcard
    resolves: RHEL-122753
  - Fix ESP conversion if C:\Windows\Temp has alternate case
    resolves: RHEL-124569
  - setfiles runs out of memory in glibc fts_read (doc fix)
    resolves: RHEL-125116
  - Use AV and GPO information from inspection instead of open coding
    resolves: RHEL-125956


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.26-1
changelog:
  - Fix stylish issue in migrateconfiguration.py (jhnidek@redhat.com)
  - Added next rhel-9.x subversion to releasers.conf file. (jhnidek@redhat.com)
  - 2158710: Migrated virt-who.conf, when necessary (jhnidek@redhat.com)
  - Added documentation for the 'rhsm_insecure' option, for insecure connections
    (fernandez.santos.d@gmail.com)
  - Added configuration for rhel-9.x into releasers.conf (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.27-1
changelog:
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Change /var/run -> /run (orion@nwra.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Drop unused copy of python-daemon sources (ptoscano@redhat.com)
  - Migrate to SPDX license (jhnidek@redhat.com)
  - fix: disable complex tests for ESX (jhnidek@redhat.com)
  - fix: use ssl.SSLContext.wrap_socket for wrapping socket (jhnidek@redhat.com)
  - fix: stylish issue discovered by flake8 (jhnidek@redhat.com)
  - fix: Use ConfigParser and not SafeConfigParser (jhnidek@redhat.com)
  - spec: drop unused openssl dependency (ptoscano@redhat.com)
  - spec: hardcode/inline Python 3 variables (ptoscano@redhat.com)
  - spec: drop unused Group tag (ptoscano@redhat.com)
  - spec: do not Require setuptools (ptoscano@redhat.com)
  - spec: drop $RPM_BUILD_ROOT manual cleanup (ptoscano@redhat.com)
  - Updated README.md file to reflect current state (jhnidek@redhat.com)
  - Drop outdated/unused requirements (ptoscano@redhat.com)
  - Removed support for Jenkins (jhnidek@redhat.com)
  - Added support for GitHub actions (jhnidek@redhat.com)
  - Removed some unused parts of Makefile (jhnidek@redhat.com)
  - Removed support for docker (jhnidek@redhat.com)
  - spec: assume the python3-libvirt package name everywhere
    (ptoscano@redhat.com)
  - spec: drop redundant "release_number" variable (ptoscano@redhat.com)
  - spec: drop outdated variables and comments (ptoscano@redhat.com)
  - spec: drop six dependency (ptoscano@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - Feature: improve log message, when wrong value is provided
    (jhnidek@redhat.com)
  - Fix: default value for prism_central cannot be None (jhnidek@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 36 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.32.1-1
changelog:
  - feat: Run Github CI action py.test every month (jhnidek@redhat.com)
  - fix: Added missing .el10 to virt-who.spec (jhnidek@redhat.com)
  - fix: Replace all warn() with warning() (jhnidek@redhat.com)


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.2-1
changelog:
  - Rebase to 1.13.2 [RHEL-97010]
  - Resolves: RHEL-97010
    (Rebase virtiofsd to latest version for RHEL 9.6.z)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-2
changelog:
  - Resolves: RHEL-80274 - Uncontrolled Recursion in Wireshark
  - Resolves: RHEL-93153 - wireshark-cli's %post uses /usr/bin/udevadm but missing systemd-udev


author: Neal Gompa <ngompa@centosproject.org> - 0.18-7
changelog:
  - Backport patches to install systemd units to fix initialization races
    Resolves: RHEL-79119
  - Fix minor spec formatting inconsistencies


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Tomas Pelka <tpelka@redhat.com> - 24.1.5-3
changelog:
  Rebuild for 10.0.z required due to issue when releasing original erratum.
  - CVE fix for: CVE-2025-26594 (RHEL-80504), CVE-2025-26595 (RHEL-80505),
                 CVE-2025-26596 (RHEL-80510), CVE-2025-26597 (RHEL-80511),
                 CVE-2025-26598 (RHEL-80513), CVE-2025-26599 (RHEL-80512),
                 CVE-2025-26600 (RHEL-80517), CVE-2025-26601 (RHEL-80516)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-4
changelog:
  - CVE fix for: CVE-2025-49175 (RHEL-97129), CVE-2025-49176 (RHEL-97135),
                 CVE-2025-49177 (RHEL-97141), CVE-2025-49178 (RHEL-97147),
                 CVE-2025-49179 (RHEL-97153), CVE-2025-49180 (RHEL-97159)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-5
changelog:
  - CVE fix for: CVE-2025-62229 (RHEL-119966), CVE-2025-62230 (RHEL-120012),
                 CVE-2025-62231 (RHEL-125005)


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-1
changelog:
  - Update to 0.0.4
  - Require xorg-x11-xauth and dbus-daemon
  - Use mutter as default compositor if none is specified


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Backport fix for waitpid errors (RHEL-46355)
  - Suggest mutter since this is the default compositor


author: Jakub Martisko <jamartis@redhat.com> - 3.0-42
changelog:
  - Use C implementation of some functions instead of asm
  - Fix the missing compiler/linker flags
  - Minor spec clean up
  Resolves: RHEL-33526


author: Jakub Martisko <jamartis@redhat.com> - 0.13.78-2
changelog:
  - Fix directory traversal in unzip binary
  - Disable the CVE tests during the check phase - the reproducers for these are downloaded from the github
  - Resolves: RHEL-105822


