# changelog

author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.4
changelog:
  - Upgrade to 1.35.4 release (development)
  - core: don't reset assume state if the device is unmanaged by parent (rh #2012182)
  - nm-device: clean up IP methods if we lose ifindex (rh #2012934)
  - core: log variant properties in connection diff (rh #2034086)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983735)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.90 release (release candidate)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.10
changelog:
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.37.2-1
changelog:
  - Upgrade to 1.37.2 release (development)
  - core: preserve external ports during checkpoint rollback (rh #2061711)
  - core: fix ovs bridge deletion (rh #2061709)
  - core: shorten hostname when too long (rh #2033643)
  - nm-online: bump the timeout upper limit to 2073600 seconds (rh #2025617)
  - cloud-setup: fix crash when handling sigterm (rh #2027674)


author: Tomas Orsava <torsava@redhat.com> - 5.4.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Al Stone <ahs3@redhat.com> - 20200326-1
changelog:
  - Update to 20200326 source tree, including patch refreshes
  - Removed a couple of patches that got included upstream


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-20
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - fix concat_options() error handling.
  - Resolves: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-21
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - correct patch, fix concat_options() error handling.
  - Related: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-22
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - eliminate some more alloca usage.
    - use default stack size for threads.
  - Resolves: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-23
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - fix potential memory leak in "eliminate some more alloca usage" patch.
    - remove unused parameter from add_path() in "eliminate some more alloca usage" patch.
  - Related: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-25
changelog:
  - bz2028301 - autofs: send FAIL cmd/ioctl mess when encountering problems with
    mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2028301


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-26
changelog:
  - bz2028301 - autofs: send FAIL cmd/ioctl mess when encountering problems with
    mount trigger
    - fix fedfs build flags.
  - Related: rhbz#2028301


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-27
changelog:
  - bz2028746 - autofs service has not proper limits set to be able to handle
    many mounts
    - fix set open file limit.
    - improve descriptor open error reporting.
  - Resolves: rhbz#2028746


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Christian Kellner <christian@kellner.me> - 0.8-3
changelog:
  - Add patch to ignore uevents from wakeup devices. See upstream issue
    https://gitlab.freedesktop.org/bolt/bolt/issues/156
  - Add patch to fix BoltError not being a typedef.


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-67.el9]
changelog:
  - kabi: Adding symbol strncpy_from_user (lib/strncpy_from_user.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strlcpy (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strchr (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol simple_strtoull (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol simple_strtol (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol memparse (lib/cmdline.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strsep (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol kstrtoll (lib/kstrtox.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol __bitmap_weight (lib/bitmap.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol vsprintf (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol vsnprintf (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strstr (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strrchr (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strlcat (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strcpy (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol sprintf (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strnlen (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strncpy (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol snprintf (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol memcmp (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol dump_stack (lib/dump_stack.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strncmp (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol sscanf (lib/vsprintf.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol memset (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol memmove (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol __list_add_valid (lib/list_debug.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strlen (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol strcmp (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol memcpy (lib/string.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol _copy_to_user (lib/usercopy.c) (Čestmír Kalina) [2008872]
  - kabi: Adding symbol _copy_from_user (lib/usercopy.c) (Čestmír Kalina) [2008872]
  - block: bio-integrity: Advance seed correctly for larger interval sizes (Ming Lei) [2044184]
  - blk-mq: Fix wrong wakeup batch configuration which will cause hang (Ming Lei) [2044184]
  - block: fix memory leak in disk_register_independent_access_ranges (Ming Lei) [2044184]
  - block: fix async_depth sysfs interface for mq-deadline (Ming Lei) [2044184]
  - blk-mq: fix tag_get wait task can't be awakened (Ming Lei) [2044184]
  - block: Fix wrong offset in bio_truncate() (Ming Lei) [2044184]
  - block: assign bi_bdev for cloned bios in blk_rq_prep_clone (Ming Lei) [2044184]
  - block: Fix fsync always failed if once failed (Ming Lei) [2044184]
  - block: don't protect submit_bio_checks by q_usage_counter (Ming Lei) [2044184]
  - blk-mq: use bio->bi_opf after bio is checked (Ming Lei) [2044184]
  - block: fix double bio queue when merging in cached request path (Ming Lei) [2044184]
  - blk-mq: cleanup request allocation (Ming Lei) [2044184]
  - blk-mq: simplify the plug handling in blk_mq_submit_bio (Ming Lei) [2044184]
  - block: null_blk: only set set->nr_maps as 3 if active poll_queues is > 0 (Ming Lei) [2044184]
  - null_blk: allow zero poll queues (Ming Lei) [2044184]
  - iocost: Fix divide-by-zero on donation from low hweight cgroup (Ming Lei) [2044184]
  - block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2) (Ming Lei) [2044184]
  - block: fix single bio async DIO error handling (Ming Lei) [2044184]
  - usb: xhci: Extend support for runtime power management for AMD's Yellow carp. (Renjith Pananchikkal) [2015776]
  - usb: xhci: Enable runtime-pm by default on AMD Yellow Carp platform (Renjith Pananchikkal) [2015776]
  - redhat: switch the vsyscall config to CONFIG_LEGACY_VSYSCALL_XONLY=y (Herton R. Krzesinski) [2023041]
  - ice: Implement support for SMA and U.FL on E810-T (Jonathan Toppins) [1975008]
  - ice: Add support for SMA control multiplexer (Jonathan Toppins) [1975008]
  - ice: Implement functions for reading and setting GPIO pins (Jonathan Toppins) [1975008]
  - ice: Refactor ice_aqc_link_topo_addr (Jonathan Toppins) [1975008]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-68.el9]
changelog:
  - net: ena: Extract recurring driver reset code into a function (Petr Oros) [2038150]
  - net: ena: Change the name of bad_csum variable (Petr Oros) [2038150]
  - net: ena: Add debug prints for invalid req_id resets (Petr Oros) [2038150]
  - net: ena: Remove ena_calc_queue_size_ctx struct (Petr Oros) [2038150]
  - net: ena: Move reset completion print to the reset function (Petr Oros) [2038150]
  - net: ena: Remove redundant return code check (Petr Oros) [2038150]
  - net: ena: Update LLQ header length in ena documentation (Petr Oros) [2038150]
  - net: ena: Change ENI stats support check to use capabilities field (Petr Oros) [2038150]
  - net: ena: Add capabilities field with support for ENI stats capability (Petr Oros) [2038150]
  - net: ena: Change return value of ena_calc_io_queue_size() to void (Petr Oros) [2038150]
  - net: ena: Fix error handling when calculating max IO queues number (Petr Oros) [2038150]
  - net: ena: Fix wrong rx request id by resetting device (Petr Oros) [2038150]
  - net: ena: Fix undefined state when tx request id is out of bounds (Petr Oros) [2038150]
  - net/packet: rx_owner_map depends on pg_vec (Hangbin Liu) [2050329] {CVE-2021-22600}
  - powerpc: security: Lock down the kernel if booted in secure boot mode (Desnes A. Nunes do Rosario) [2041984]
  - drm/i915: Flush TLBs before releasing backing store (Dave Airlie) [2044335] {CVE-2022-0330}
  - sfc: The RX page_ring is optional (Íñigo Huguet) [2042801]
  - sfc: Check null pointer of rx_queue->page_ring (Íñigo Huguet) [2042801]
  - sfc_ef100: potential dereference of null pointer (Íñigo Huguet) [2042801]
  - sfc: Don't use netif_info before net_device setup (Íñigo Huguet) [2042801]
  - sfc: Export fibre-specific supported link modes (Íñigo Huguet) [2042801]
  - sfc: Fix reading non-legacy supported link modes (Íñigo Huguet) [2042801]
  - ethernet: constify references to netdev->dev_addr in drivers (Íñigo Huguet) [2042801]
  - sfc: last resort fallback for lack of xdp tx queues (Íñigo Huguet) [2042801]
  - sfc: fallback for lack of xdp tx queues (Íñigo Huguet) [2042801]
  - RDMA/cma: Do not change route.addr.src_addr.ss_family (Kamal Heib) [2032069] {CVE-2021-4028}
  - kernel/sched/sched.h: Exclude cpuidle from KABI (Prarit Bhargava) [2033340]
  - redhat/configs: Disable CONFIG_SENSORS_NCT6683 in RHEL for arm/aarch64 (Dean Nelson) [2041186]
  - kernel.spec: Add glibc-static build requirement (Prarit Bhargava)
  - libbpf: Fix memleak in libbpf_netlink_recv() (Toke Høiland-Jørgensen) [2052543]
  - libbpf: Use dynamically allocated buffer when receiving netlink messages (Toke Høiland-Jørgensen) [2052543]
  - redhat/configs: Disable arch_hw disabled CONFIGS (Prarit Bhargava) [2053029]
  - netfilter: conntrack: re-init state for retransmitted syn-ack (Florian Westphal) [2051973]
  - netfilter: conntrack: move synack init code to helper (Florian Westphal) [2051973]
  - ext4: fix remount with 'abort' option (Lukas Czerner) [2049657]
  - thunderbolt: Enable retry logic for intra-domain control packets (David Arcari) [1960445]
  - thunderbolt: Handle ring interrupt by reading interrupt status register (David Arcari) [1960445]
  - thunderbolt: Add vendor specific NHI quirk for auto-clearing interrupt status (David Arcari) [1960445]
  - thunderbolt: Fix port linking by checking all adapters (David Arcari) [1960445]
  - thunderbolt: Do not read control adapter config space (David Arcari) [1960445]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-69.el9]
changelog:
  - config: mt76: set CONFIG_MT7921S to not set, like in ark (Íñigo Huguet) [2043454]
  - config: rtw89: enable driver and device RTL8852AE (Íñigo Huguet) [2043454]
  - rtw89: 8852a: correct bit definition of dfs_en (Íñigo Huguet) [2043454]
  - rtw89: coex: Update COEX to 5.5.8 (Íñigo Huguet) [2043454]
  - rtw89: coex: Cancel PS leaving while C2H comes (Íñigo Huguet) [2043454]
  - rtw89: coex: Update BT counters while receiving report (Íñigo Huguet) [2043454]
  - rtw89: coex: Define LPS state for BTC using (Íñigo Huguet) [2043454]
  - rtw89: coex: Add MAC API to get BT polluted counter (Íñigo Huguet) [2043454]
  - rtw89: coex: Not to send H2C when WL not ready and count H2C (Íñigo Huguet) [2043454]
  - rtw89: coex: correct C2H header length (Íñigo Huguet) [2043454]
  - rtw89: don't kick off TX DMA if failed to write skb (Íñigo Huguet) [2043454]
  - rtw89: remove cch_by_bw which is not used (Íñigo Huguet) [2043454]
  - rtw89: fix sending wrong rtwsta->mac_id to firmware to fill address CAM (Íñigo Huguet) [2043454]
  - rtw89: fix incorrect channel info during scan (Íñigo Huguet) [2043454]
  - rtw89: update scan_mac_addr during scanning period (Íñigo Huguet) [2043454]
  - rtw89: use inline function instead macro to set H2C and CAM (Íñigo Huguet) [2043454]
  - rtw89: add const in the cast of le32_get_bits() (Íñigo Huguet) [2043454]
  - rtw89: add AXIDMA and TX FIFO dump in mac_mem_dump (Íñigo Huguet) [2043454]
  - rtw89: fix potentially access out of range of RF register array (Íñigo Huguet) [2043454]
  - rtw89: remove unneeded variable (Íñigo Huguet) [2043454]
  - rtw89: remove unnecessary conditional operators (Íñigo Huguet) [2043454]
  - rtw89: update rtw89_regulatory map to R58-R31 (Íñigo Huguet) [2043454]
  - rtw89: update tx power limit/limit_ru tables to R54 (Íñigo Huguet) [2043454]
  - rtw89: update rtw89 regulation definition to R58-R31 (Íñigo Huguet) [2043454]
  - rtw89: fill regd field of limit/limit_ru tables by enum (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: add killer devices to the driver (Íñigo Huguet) [2043454]
  - iwlwifi: add support for BNJ HW (Íñigo Huguet) [2043454]
  - iwlwifi: Read the correct addresses when getting the crf id (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: add jacket bit to device configuration parsing (Íñigo Huguet) [2043454]
  - iwlwifi: add new ax1650 killer device (Íñigo Huguet) [2043454]
  - iwlwifi: add new Qu-Hr device (Íñigo Huguet) [2043454]
  - iwlwifi: add missing entries for Gf4 with So and SoF (Íñigo Huguet) [2043454]
  - iwlwifi: remove unused iwlax210_2ax_cfg_so_hr_a0 structure (Íñigo Huguet) [2043454]
  - iwlwifi: support 4-bits in MAC step value (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Increase the scan timeout guard to 30 seconds (Íñigo Huguet) [2043454]
  - wilc1000: fix double free error in probe() (Íñigo Huguet) [2043454]
  - wilc1000: Fix spurious "FW not responding" error (Íñigo Huguet) [2043454]
  - wilc1000: Fix missing newline in error message (Íñigo Huguet) [2043454]
  - wilc1000: Fix copy-and-paste typo in wilc_set_mac_address (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Use div_s64 instead of do_div in iwl_mvm_ftm_rtt_smoothing() (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (Íñigo Huguet) [2043454]
  - ath11k: Fix unexpected return buffer manager error for QCA6390 (Íñigo Huguet) [2043454]
  - ath11k: Fix napi related hang (Íñigo Huguet) [2043454]
  - iwlwifi: yoyo: fix issue with new DBGI_SRAM region read. (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: make sure prph_info is set when treating wakeup IRQ (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: fix AUX ROC removal (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: set protected flag only for NDP ranging (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: perform 6GHz passive scan after suspend (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Fix calculation of frame length (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: test roc running status bits before removing the sta (Íñigo Huguet) [2043454]
  - iwlwifi: don't pass actual WGDS revision number in table_revision (Íñigo Huguet) [2043454]
  - iwlwifi: fix leaks/bad data after failed firmware load (Íñigo Huguet) [2043454]
  - iwlwifi: fix debug TLV parsing (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: fix 32-bit build in FTM (Íñigo Huguet) [2043454]
  - iwlwifi: fix Bz NMI behaviour (Íñigo Huguet) [2043454]
  - rtlwifi: rtl8192cu: Fix WARNING when calling local_irq_restore() with interrupts enabled (Íñigo Huguet) [2043454]
  - rtw88: 8822c: update rx settings to prevent potential hw deadlock (Íñigo Huguet) [2043454]
  - rtw88: Disable PCIe ASPM while doing NAPI poll on 8821CE (Íñigo Huguet) [2043454]
  - ath9k: Fix out-of-bound memcpy in ath9k_hif_usb_rx_stream (Íñigo Huguet) [2043454]
  - ath9k_htc: fix NULL pointer dereference at ath9k_htc_tx_get_packet() (Íñigo Huguet) [2043454]
  - ath9k_htc: fix NULL pointer dereference at ath9k_htc_rxep() (Íñigo Huguet) [2043454]
  - mac80211: fix FEC flag in radio tap header (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix possible resume failure (Íñigo Huguet) [2043454]
  - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix network buffer leak by txs missing (Íñigo Huguet) [2043454]
  - mt76: mt7615: clear mcu error interrupt status on mt7663 (Íñigo Huguet) [2043454]
  - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (Íñigo Huguet) [2043454]
  - mt76: mt7921: use correct iftype data on 6GHz cap init (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix boolreturn.cocci warning (Íñigo Huguet) [2043454]
  - mt76: mt7615: fix unused tx antenna mask in testmode (Íñigo Huguet) [2043454]
  - mt76: fix the wiphy's available antennas to the correct value (Íñigo Huguet) [2043454]
  - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (Íñigo Huguet) [2043454]
  - mt76: fix possible OOB issue in mt76_calculate_default_rate (Íñigo Huguet) [2043454]
  - mt76: debugfs: fix queue reporting for mt76-usb (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix SMPS operation fail (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix MT7921E reset failure (Íñigo Huguet) [2043454]
  - mt76: mt7615: fix possible deadlock while mt7615_register_ext_phy() (Íñigo Huguet) [2043454]
  - mt76: mt7921: drop offload_flags overwritten (Íñigo Huguet) [2043454]
  - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (Íñigo Huguet) [2043454]
  - bus: mhi: core: Use correctly sized arguments for bit field (Íñigo Huguet) [2043454]
  - bus: mhi: core: Fix race while handling SYS_ERR at power up (Íñigo Huguet) [2043454]
  - bus: mhi: core: Fix reading wake_capable channel configuration (Íñigo Huguet) [2043454]
  - bus: mhi: core: Minor style and comment fixes (Íñigo Huguet) [2043454]
  - bus: mhi: pci_generic: Graceful shutdown on freeze (Íñigo Huguet) [2043454]
  - ath11k: Fix a NULL pointer dereference in ath11k_mac_op_hw_scan() (Íñigo Huguet) [2043454]
  - mt76: remove variable set but not used (Íñigo Huguet) [2043454]
  - ath11k: Fix deleting uninitialized kernel timer during fragment cache flush (Íñigo Huguet) [2043454]
  - ath11k: add spectral/CFR buffer validation support (Íñigo Huguet) [2043454]
  - ath11k: Fix buffer overflow when scanning with extraie (Íñigo Huguet) [2043454]
  - mwifiex: Fix possible ABBA deadlock (Íñigo Huguet) [2043454]
  - ath10k: fix scan abort when duration is set for hw scan (Íñigo Huguet) [2043454]
  - ath10k: Fix tx hanging (Íñigo Huguet) [2043454]
  - iwlwifi: Fix FW name for gl (Íñigo Huguet) [2043454]
  - iwlwifi: add support for Bz-Z HW (Íñigo Huguet) [2043454]
  - iwlwifi: acpi: fix wgds rev 3 size (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: avoid clearing a just saved session protection id (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Fix wrong documentation for scan request command (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: synchronize with FW after multicast commands (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: fix delBA vs. NSSN queue sync race (Íñigo Huguet) [2043454]
  - ath11k: Fix QMI file type enum value (Íñigo Huguet) [2043454]
  - ath11k: add support for WCN6855 hw2.1 (Íñigo Huguet) [2043454]
  - ath10k: Fix the MTU size on QCA9377 SDIO (Íñigo Huguet) [2043454]
  - wireless: iwlwifi: Fix a double free in iwl_txq_dyn_alloc_dma (Íñigo Huguet) [2043454]
  - mwifiex: Ignore BTCOEX events from the 88W8897 firmware (Íñigo Huguet) [2043454]
  - mwifiex: Fix skb_over_panic in mwifiex_usb_recv() (Íñigo Huguet) [2043454]
  - ath11k: Use host CE parameters for CE interrupts configuration (Íñigo Huguet) [2043454]
  - ath11k: Fix mon status ring rx tlv processing (Íñigo Huguet) [2043454]
  - ath11k: skip sending vdev down for channel switch (Íñigo Huguet) [2043454]
  - ath11k: fix read fail for htt_stats and htt_peer_stats for single pdev (Íñigo Huguet) [2043454]
  - ath11k: Set IRQ affinity to CPU0 in case of one MSI vector (Íñigo Huguet) [2043454]
  - ath11k: do not restore ASPM in case of single MSI vector (Íñigo Huguet) [2043454]
  - ath11k: add support one MSI vector (Íñigo Huguet) [2043454]
  - ath11k: refactor multiple MSI vector implementation (Íñigo Huguet) [2043454]
  - ath11k: use ATH11K_PCI_IRQ_DP_OFFSET for DP IRQ (Íñigo Huguet) [2043454]
  - ath11k: add CE and ext IRQ flag to indicate irq_handler (Íñigo Huguet) [2043454]
  - ath11k: get msi_data again after request_irq is called (Íñigo Huguet) [2043454]
  - ath9k: fix intr_txqs setting (Íñigo Huguet) [2043454]
  - ath11k: add hw_param for wakeup_mhi (Íñigo Huguet) [2043454]
  - ath11k: reset RSN/WPA present state for open BSS (Íñigo Huguet) [2043454]
  - ath11k: clear the keys properly via DISABLE_KEY (Íñigo Huguet) [2043454]
  - ath11k: Fix crash caused by uninitialized TX ring (Íñigo Huguet) [2043454]
  - ath11k: use cache line aligned buffers for dbring (Íñigo Huguet) [2043454]
  - ath11k: Fix ETSI regd with weather radar overlap (Íñigo Huguet) [2043454]
  - ath11k: fix FCS_ERR flag in radio tap header (Íñigo Huguet) [2043454]
  - ath11k: fix the value of msecs_to_jiffies in ath11k_debugfs_fw_stats_request (Íñigo Huguet) [2043454]
  - ath11k: fix firmware crash during channel switch (Íñigo Huguet) [2043454]
  - ath11k: Fix 'unused-but-set-parameter' error (Íñigo Huguet) [2043454]
  - ath11k: fix DMA memory free in CE pipe cleanup (Íñigo Huguet) [2043454]
  - ath11k: fix error routine when fallback of add interface fails (Íñigo Huguet) [2043454]
  - ath11k: fix fw crash due to peer get authorized before key install (Íñigo Huguet) [2043454]
  - ath11k: Clear auth flag only for actual association in security mode (Íñigo Huguet) [2043454]
  - ath11k: Send PPDU_STATS_CFG with proper pdev mask to firmware (Íñigo Huguet) [2043454]
  - ath11k: set correct NL80211_FEATURE_DYNAMIC_SMPS for WCN6855 (Íñigo Huguet) [2043454]
  - mac80211: mesh: embedd mesh_paths and mpp_paths into ieee80211_if_mesh (Íñigo Huguet) [2043454]
  - mac80211: initialize variable have_higher_than_11mbit (Íñigo Huguet) [2043454]
  - mac80211: fix locking in ieee80211_start_ap error path (Íñigo Huguet) [2043454]
  - mac80211: do drv_reconfig_complete() before restarting all (Íñigo Huguet) [2043454]
  - mac80211: mark TX-during-stop for TX in in_reconfig (Íñigo Huguet) [2043454]
  - mac80211: update channel context before station state (Íñigo Huguet) [2043454]
  - mac80211: Fix the size used for building probe request (Íñigo Huguet) [2043454]
  - mac80211: fix lookup when adding AddBA extension element (Íñigo Huguet) [2043454]
  - mac80211: validate extended element ID is present (Íñigo Huguet) [2043454]
  - cfg80211: Acquire wiphy mutex on regulatory work (Íñigo Huguet) [2043454]
  - mac80211: agg-tx: don't schedule_and_wake_txq() under sta->lock (Íñigo Huguet) [2043454]
  - nl80211: remove reload flag from regulatory_request (Íñigo Huguet) [2043454]
  - mac80211: send ADDBA requests using the tid/queue of the aggregation session (Íñigo Huguet) [2043454]
  - bus: mhi: core: Add support for forced PM resume (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix build regression (Íñigo Huguet) [2043454]
  - brcmsmac: rework LED dependencies (Íñigo Huguet) [2043454]
  - iwlwifi: fix LED dependencies (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: don't crash on invalid rate w/o STA (Íñigo Huguet) [2043454]
  - bus: mhi: pci_generic: Fix device recovery failed issue (Íñigo Huguet) [2043454]
  - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (Íñigo Huguet) [2043454]
  - rt2x00: do not mark device gone on EPROTO errors during start (Íñigo Huguet) [2043454]
  - nl80211: reset regdom when reloading regdb (Íñigo Huguet) [2043454]
  - mac80211: add docs for ssn in struct tid_ampdu_tx (Íñigo Huguet) [2043454]
  - mac80211: fix a memory leak where sta_info is not freed (Íñigo Huguet) [2043454]
  - mac80211: set up the fwd_skb->dev for mesh forwarding (Íñigo Huguet) [2043454]
  - mac80211: fix regression in SSN handling of addba tx (Íñigo Huguet) [2043454]
  - mac80211: fix rate control for retransmitted frames (Íñigo Huguet) [2043454]
  - mac80211: track only QoS data frames for admission control (Íñigo Huguet) [2043454]
  - mac80211: fix TCP performance on mesh interface (Íñigo Huguet) [2043454]
  - mt76: fix possible pktid leak (Íñigo Huguet) [2043454]
  - mt76: fix timestamp check in tx_status (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix NULL pointer dereference in mt7915_get_phy_mode (Íñigo Huguet) [2043454]
  - rtw89: update partition size of firmware header on skb->data (Íñigo Huguet) [2043454]
  - iwlwifi: Fix memory leaks in error handling path (Íñigo Huguet) [2043454]
  - iwlwifi: fix warnings produced by kernel debug options (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: retry init flow if failed (Íñigo Huguet) [2043454]
  - iwlwifi: Fix missing error code in iwl_pci_probe() (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: fix constant-conversion warning (Íñigo Huguet) [2043454]
  - mac80211: fix throughput LED trigger (Íñigo Huguet) [2043454]
  - mac80211: fix monitor_sdata RCU/locking assertions (Íñigo Huguet) [2043454]
  - mac80211: drop check for DONT_REORDER in __ieee80211_select_queue (Íñigo Huguet) [2043454]
  - mac80211: fix radiotap header generation (Íñigo Huguet) [2043454]
  - mac80211: do not access the IV when it was stripped (Íñigo Huguet) [2043454]
  - nl80211: fix radio statistics in survey dump (Íñigo Huguet) [2043454]
  - cfg80211: call cfg80211_stop_ap when switch from P2P_GO type (Íñigo Huguet) [2043454]
  - mwifiex: fix division by zero in fw download path (Íñigo Huguet) [2043454]
  - iwlwifi: bump FW API to 67 for AX devices (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: extend session protection on association (Íñigo Huguet) [2043454]
  - iwlwifi: rename CHANNEL_SWITCH_NOA_NOTIF to CHANNEL_SWITCH_START_NOTIF (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: remove session protection on disassoc (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: fix WGDS table print in iwl_mvm_chub_update_mcc() (Íñigo Huguet) [2043454]
  - iwlwifi: rename GEO_TX_POWER_LIMIT to PER_CHAIN_LIMIT_OFFSET_CMD (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: d3: use internal data representation (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: update RFI TLV (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: don't get address of mvm->fwrt just to dereference as a pointer (Íñigo Huguet) [2043454]
  - iwlwifi: yoyo: support for ROM usniffer (Íñigo Huguet) [2043454]
  - iwlwifi: fw: uefi: add missing include guards (Íñigo Huguet) [2043454]
  - iwlwifi: dump host monitor data when NIC doesn't init (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: simplify iwl_pci_find_dev_info() (Íñigo Huguet) [2043454]
  - iwlwifi: ACPI: support revision 3 WGDS tables (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: update sw error interrupt for BZ family (Íñigo Huguet) [2043454]
  - iwlwifi: add new pci SoF with JF (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Use all Rx chains for roaming scan (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: remove two duplicate PNJ device entries (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: refactor dev_info lookup (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: remove duplicate entry (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: fix killer name matching for AX200 (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: fix some kerneldoc issues (Íñigo Huguet) [2043454]
  - ath10k: fix division by zero in send path (Íñigo Huguet) [2043454]
  - ath10k: fix control-message timeout (Íñigo Huguet) [2043454]
  - rtw89: Fix variable dereferenced before check 'sta' (Íñigo Huguet) [2043454]
  - rtw89: fix return value in hfc_pub_cfg_chk (Íñigo Huguet) [2043454]
  - rtw89: remove duplicate register definitions (Íñigo Huguet) [2043454]
  - rtw89: fix error function parameter (Íñigo Huguet) [2043454]
  - ath10k: fix module load regression with iram-recovery feature (Íñigo Huguet) [2043454]
  - ath10k: fix invalid dma_addr_t token assignment (Íñigo Huguet) [2043454]
  - ath11k: change return buffer manager for QCA6390 (Íñigo Huguet) [2043454]
  - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (Íñigo Huguet) [2043454]
  - mt76: Make use of the helper macro kthread_run() (Íñigo Huguet) [2043454]
  - mt76: Print error message when reading EEPROM from mtd failed (Íñigo Huguet) [2043454]
  - mt76: mt7921: disable 4addr capability (Íñigo Huguet) [2043454]
  - mt76: mt7915: add debugfs knobs for MCU utilization (Íñigo Huguet) [2043454]
  - mt76: mt7915: add WA firmware log support (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (Íñigo Huguet) [2043454]
  - mt76: mt7915: rework debugfs fixed-rate knob (Íñigo Huguet) [2043454]
  - mt76: mt7915: rework .set_bitrate_mask() to support more options (Íñigo Huguet) [2043454]
  - mt76: mt7915: remove mt7915_mcu_add_he() (Íñigo Huguet) [2043454]
  - mt76: mt7615: apply cached RF data for DBDC (Íñigo Huguet) [2043454]
  - mt76: mt7615: mt7622: fix ibss and meshpoint (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix Wformat build warning (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix mt7921s Kconfig (Íñigo Huguet) [2043454]
  - iwlwifi: pnvm: print out the version properly (Íñigo Huguet) [2043454]
  - iwlwifi: dbg: treat non active regions as unsupported regions (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Read acpi dsm to get channel activation bitmap (Íñigo Huguet) [2043454]
  - iwlwifi: add new device id 7F70 (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: improve log when processing CSA (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: set BT-coex high priority for 802.1X/4-way-HS (Íñigo Huguet) [2043454]
  - iwlwifi: dbg: treat dbgc allocation failure when tlv is missing (Íñigo Huguet) [2043454]
  - iwlwifi: add new killer devices to the driver (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: set inactivity timeouts also for PS-poll (Íñigo Huguet) [2043454]
  - iwlwifi: pcie: try to grab NIC access early (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: reduce WARN_ON() in TX status path (Íñigo Huguet) [2043454]
  - iwlwifi: allow rate-limited error messages (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: remove session protection after auth/assoc (Íñigo Huguet) [2043454]
  - iwlwifi: remove redundant iwl_finish_nic_init() argument (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Add RTS and CTS flags to iwl_tx_cmd_flags. (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: remove csi from iwl_mvm_pass_packet_to_mac80211() (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Support new rate_n_flags for REPLY_RX_MPDU_CMD and RX_NO_DATA_NOTIF (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Support new TX_RSP and COMPRESSED_BA_RES versions (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Support new version of BEACON_TEMPLATE_CMD. (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Add support for new rate_n_flags in tx_cmd. (Íñigo Huguet) [2043454]
  - iwlwifi: BZ Family SW reset support (Íñigo Huguet) [2043454]
  - iwlwifi: BZ Family BUS_MASTER_DISABLE_REQ code duplication (Íñigo Huguet) [2043454]
  - iwlwifi: yoyo: fw debug config from context info and preset (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Support new version of ranging response notification (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Support version 3 of tlc_update_notif. (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: convert old rate & flags to the new format. (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: add definitions for new rate & flags (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: update definitions due to new rate & flags (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: scrub key material in firmware dumps (Íñigo Huguet) [2043454]
  - iwlwifi: parse debug exclude data from firmware file (Íñigo Huguet) [2043454]
  - iwlwifi: fw dump: add infrastructure for dump scrubbing (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: correct sta-state logic for TDLS (Íñigo Huguet) [2043454]
  - iwlwifi: api: fix struct iwl_wowlan_status_v7 kernel-doc (Íñigo Huguet) [2043454]
  - iwlwifi: fix fw/img.c license statement (Íñigo Huguet) [2043454]
  - iwlwifi: remove contact information (Íñigo Huguet) [2043454]
  - iwlwifi: remove MODULE_AUTHOR() statements (Íñigo Huguet) [2043454]
  - iwlwifi: api: remove unused RX status bits (Íñigo Huguet) [2043454]
  - iwlwifi: add some missing kernel-doc in struct iwl_fw (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: Remove antenna c references (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: add support for 160Mhz in ranging measurements (Íñigo Huguet) [2043454]
  - iwlwifi: add vendor specific capabilities for some RFs (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: add lmac/umac PC info in case of error (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: disable RX-diversity in powersave (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: fix ieee80211_get_he_iftype_cap() iftype (Íñigo Huguet) [2043454]
  - iwlwifi: Start scratch debug register for Bz family (Íñigo Huguet) [2043454]
  - iwlwifi: Add support for more BZ HWs (Íñigo Huguet) [2043454]
  - iwlwifi: Add support for getting rf id with blank otp (Íñigo Huguet) [2043454]
  - cfg80211: fix kernel-doc for MBSSID EMA (Íñigo Huguet) [2043454]
  - mac80211: Prevent AP probing during suspend (Íñigo Huguet) [2043454]
  - nl80211: Add LC placeholder band definition to nl80211_band (Íñigo Huguet) [2043454]
  - mac80211: split beacon retrieval functions (Íñigo Huguet) [2043454]
  - cfg80211: separate get channel number from ies (Íñigo Huguet) [2043454]
  - mac80211: use ieee80211_bss_get_elem() in most places (Íñigo Huguet) [2043454]
  - cfg80211: scan: use element finding functions in easy cases (Íñigo Huguet) [2043454]
  - nl80211: use element finding functions (Íñigo Huguet) [2043454]
  - mac80211: fils: use cfg80211_find_ext_elem() (Íñigo Huguet) [2043454]
  - mac80211: fix memory leaks with element parsing (Íñigo Huguet) [2043454]
  - cfg80211: prepare for const netdev->dev_addr (Íñigo Huguet) [2043454]
  - mac80211: use eth_hw_addr_set() (Íñigo Huguet) [2043454]
  - wireless: mac80211_hwsim: use eth_hw_addr_set() (Íñigo Huguet) [2043454]
  - mac80211: debugfs: calculate free buffer size correctly (Íñigo Huguet) [2043454]
  - fq_codel: generalise ce_threshold marking for subset of traffic (Íñigo Huguet) [2043454]
  - wl3501_cs: use eth_hw_addr_set() (Íñigo Huguet) [2043454]
  - ray_cs: use eth_hw_addr_set() (Íñigo Huguet) [2043454]
  - wilc1000: use eth_hw_addr_set() (Íñigo Huguet) [2043454]
  - brcmfmac: prepare for const netdev->dev_addr (Íñigo Huguet) [2043454]
  - wireless: use eth_hw_addr_set() instead of ether_addr_copy() (Íñigo Huguet) [2043454]
  - wireless: use eth_hw_addr_set() (Íñigo Huguet) [2043454]
  - iwlwifi: cfg: set low-latency-xtal for some integrated So devices (Íñigo Huguet) [2043454]
  - iwlwifi: pnvm: read EFI data only if long enough (Íñigo Huguet) [2043454]
  - iwlwifi: pnvm: don't kmemdup() more than we have (Íñigo Huguet) [2043454]
  - iwlwifi: change all JnP to NO-160 configuration (Íñigo Huguet) [2043454]
  - iwlwifi: mvm: reset PM state on unsuccessful resume (Íñigo Huguet) [2043454]
  - mwifiex: Deactive host sleep using HSCFG after it was activated manually (Íñigo Huguet) [2043454]
  - mwifiex: Send DELBA requests according to spec (Íñigo Huguet) [2043454]
  - mwifiex: Fix an incorrect comment (Íñigo Huguet) [2043454]
  - mwifiex: Log an error on command failure during key-material upload (Íñigo Huguet) [2043454]
  - mwifiex: Don't log error on suspend if wake-on-wlan is disabled (Íñigo Huguet) [2043454]
  - rtw89: remove unneeded semicolon (Íñigo Huguet) [2043454]
  - rtw89: fix return value check in rtw89_cam_send_sec_key_cmd() (Íñigo Huguet) [2043454]
  - mt76: mt7915: change max rx len limit of hw modules (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix missing HE phy cap (Íñigo Huguet) [2043454]
  - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (Íñigo Huguet) [2043454]
  - mt76: mt7915: enable HE UL MU-MIMO (Íñigo Huguet) [2043454]
  - mt76: mt7921: add per-vif counters in ethtool (Íñigo Huguet) [2043454]
  - mt76: mt7921: move tx amsdu stats in mib_stats (Íñigo Huguet) [2043454]
  - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (Íñigo Huguet) [2043454]
  - mt76: mt7921: introduce stats reporting through ethtool (Íñigo Huguet) [2043454]
  - mt76: mt7921: add some more MIB counters (Íñigo Huguet) [2043454]
  - mt76: do not reset MIB counters in get_stats callback (Íñigo Huguet) [2043454]
  - mt76: mt7915: move tx amsdu stats in mib_stats (Íñigo Huguet) [2043454]
  - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (Íñigo Huguet) [2043454]
  - mt76: move mt76_ethtool_worker_info in mt76 module (Íñigo Huguet) [2043454]
  - mt76: move mt76_sta_stats in mt76.h (Íñigo Huguet) [2043454]
  - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (Íñigo Huguet) [2043454]
  - mt76: mt7921s: add reset support (Íñigo Huguet) [2043454]
  - mt76: mt7921: introduce mt7921s support (Íñigo Huguet) [2043454]
  - mt76: mt7921: refactor mt7921_mcu_send_message (Íñigo Huguet) [2043454]
  - mt76: mt7921: rely on mcu_get_nic_capability (Íñigo Huguet) [2043454]
  - mt76: connac: extend mcu_get_nic_capability (Íñigo Huguet) [2043454]
  - mt76: sdio: extend sdio module to support CONNAC2 (Íñigo Huguet) [2043454]
  - mt76: sdio: introduce parse_irq callback (Íñigo Huguet) [2043454]
  - mt76: sdio: move common code in mt76_sdio module (Íñigo Huguet) [2043454]
  - mt76: mt7921: use physical addr to unify register access (Íñigo Huguet) [2043454]
  - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (Íñigo Huguet) [2043454]
  - mt76: mt7663s: rely on mcu reg access utility (Íñigo Huguet) [2043454]
  - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (Íñigo Huguet) [2043454]
  - mt76: mt7921: add MT7921_COMMON module (Íñigo Huguet) [2043454]
  - mt76: mt7921: refactor init.c to be bus independent (Íñigo Huguet) [2043454]
  - mt76: mt7921: refactor mcu.c to be bus independent (Íñigo Huguet) [2043454]
  - mt76: mt7921: refactor dma.c to be pcie specific (Íñigo Huguet) [2043454]
  - mt76: mt7921: refactor mac.c to be bus independent (Íñigo Huguet) [2043454]
  - mt76: mt7921: add MU EDCA cmd support (Íñigo Huguet) [2043454]
  - mt76: mt7915: remove dead code in debugfs code (Íñigo Huguet) [2043454]
  - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (Íñigo Huguet) [2043454]
  - mt76: mt7915: improve code readability for xmit-queue handler (Íñigo Huguet) [2043454]
  - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (Íñigo Huguet) [2043454]
  - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (Íñigo Huguet) [2043454]
  - mt76: mt7915: set muru platform type (Íñigo Huguet) [2043454]
  - mt76: mt7915: set VTA bit in tx descriptor (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix muar_idx in mt7915_mcu_alloc_sta_req() (Íñigo Huguet) [2043454]
  - mt76: mt7915: rework starec TLV tags (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix sta_rec_wtbl tag len (Íñigo Huguet) [2043454]
  - mt76: mt7915: improve starec readability of txbf (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix txbf starec TLV issues (Íñigo Huguet) [2043454]
  - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (Íñigo Huguet) [2043454]
  - mt76: connac: fix possible NULL pointer dereference in mt76_connac_get_phy_mode_v2 (Íñigo Huguet) [2043454]
  - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (Íñigo Huguet) [2043454]
  - mt76: use a separate CCMP PN receive counter for management frames (Íñigo Huguet) [2043454]
  - mt76: mt7921: add delay config for sched scan (Íñigo Huguet) [2043454]
  - mt76: mt7615: fix monitor mode tear down crash (Íñigo Huguet) [2043454]
  - mt76: debugfs: improve queue node readability (Íñigo Huguet) [2043454]
  - mt76: mt7915: add twt_stats knob in debugfs (Íñigo Huguet) [2043454]
  - mt76: mt7915: enable twt responder capability (Íñigo Huguet) [2043454]
  - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (Íñigo Huguet) [2043454]
  - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (Íñigo Huguet) [2043454]
  - mt76: mt7915: introduce __mt7915_get_tsf routine (Íñigo Huguet) [2043454]
  - mt76: drop MCU header size from buffer size in __mt76_mcu_send_firmware (Íñigo Huguet) [2043454]
  - mt76: introduce __mt76_mcu_send_firmware routine (Íñigo Huguet) [2043454]
  - mt76: support reading EEPROM data embedded in fdt (Íñigo Huguet) [2043454]
  - mt76: schedule status timeout at dma completion (Íñigo Huguet) [2043454]
  - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (Íñigo Huguet) [2043454]
  - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (Íñigo Huguet) [2043454]
  - mt76: introduce packet_id idr (Íñigo Huguet) [2043454]
  - mt76: mt7921: add 6GHz support (Íñigo Huguet) [2043454]
  - mt76: add 6GHz support (Íñigo Huguet) [2043454]
  - mt76: connac: enable hw amsdu @ 6GHz (Íñigo Huguet) [2043454]
  - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (Íñigo Huguet) [2043454]
  - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (Íñigo Huguet) [2043454]
  - mt76: connac: set 6G phymode in single-sku support (Íñigo Huguet) [2043454]
  - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (Íñigo Huguet) [2043454]
  - mt76: connac: enable 6GHz band for hw scan (Íñigo Huguet) [2043454]
  - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (Íñigo Huguet) [2043454]
  - mt76: mt7915: add mib counters to ethtool stats (Íñigo Huguet) [2043454]
  - mt76: mt7915: add more MIB registers (Íñigo Huguet) [2043454]
  - mt76: mt7915: add tx mu/su counters to mib (Íñigo Huguet) [2043454]
  - mt76: mt7915: add some per-station tx stats to ethtool (Íñigo Huguet) [2043454]
  - mt76: mt7915: add tx stats gathered from tx-status callbacks (Íñigo Huguet) [2043454]
  - mt76: mt7915: add ethtool stats support (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix retrying release semaphore without end (Íñigo Huguet) [2043454]
  - mt76: mt7921: robustify hardware initialization flow (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix possible infinite loop release semaphore (Íñigo Huguet) [2043454]
  - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (Íñigo Huguet) [2043454]
  - mt76: move spin_lock_bh to spin_lock in tasklet (Íñigo Huguet) [2043454]
  - mt76: mt7921: remove mt7921_sta_stats (Íñigo Huguet) [2043454]
  - mt76: mt7921: remove mcu rate reporting code (Íñigo Huguet) [2043454]
  - mt76: mt7921: report tx rate directly from tx status (Íñigo Huguet) [2043454]
  - mt76: mt7921: add support for tx status reporting (Íñigo Huguet) [2043454]
  - mt76: mt7921: start reworking tx rate reporting (Íñigo Huguet) [2043454]
  - mt76: mt7615: fix hwmon temp sensor mem use-after-free (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix hwmon temp sensor mem use-after-free (Íñigo Huguet) [2043454]
  - mt76: mt7915: enable configured beacon tx rate (Íñigo Huguet) [2043454]
  - mt76: disable BH around napi_schedule() calls (Íñigo Huguet) [2043454]
  - mt76: fill boottime_ns in Rx path (Íñigo Huguet) [2043454]
  - mt76: switch from 'pci_' to 'dma_' API (Íñigo Huguet) [2043454]
  - mt76: fix boolreturn.cocci warnings (Íñigo Huguet) [2043454]
  - mt76: mt7921: update mib counters dumping phy stats (Íñigo Huguet) [2043454]
  - mt76: mt7921: always wake device if necessary in debugfs (Íñigo Huguet) [2043454]
  - mt76: mt7915: rename debugfs tx-queues (Íñigo Huguet) [2043454]
  - mt76: mt7915: rework debugfs queue info (Íñigo Huguet) [2043454]
  - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix WMM index on DBDC cards (Íñigo Huguet) [2043454]
  - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (Íñigo Huguet) [2043454]
  - mt76: mt7915: introduce bss coloring support (Íñigo Huguet) [2043454]
  - mt76: mt7915: add LED support (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix potential NPE in TXS processing (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix he_mcs capabilities for 160mhz (Íñigo Huguet) [2043454]
  - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (Íñigo Huguet) [2043454]
  - mt76: mt7915: update mac timing settings (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix kernel warning from cfg80211_calculate_bitrate (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix firmware usage of RA info using legacy rates (Íñigo Huguet) [2043454]
  - mt76: mt7915: add HE-LTF into fixed rate command (Íñigo Huguet) [2043454]
  - mt76: mt7921: report HE MU radiotap (Íñigo Huguet) [2043454]
  - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (Íñigo Huguet) [2043454]
  - mt76: overwrite default reg_ops if necessary (Íñigo Huguet) [2043454]
  - mt76: mt7921: introduce mt7921_mcu_set_beacon_filter utility routine (Íñigo Huguet) [2043454]
  - mt76: mt7921: get rid of mt7921_mac_set_beacon_filter (Íñigo Huguet) [2043454]
  - mt76: mt7921: get rid of monitor_vif (Íñigo Huguet) [2043454]
  - mt76: connac: add support for limiting to maximum regulatory Tx power (Íñigo Huguet) [2043454]
  - mt76: connac: fix GTK rekey offload failure on WPA mixed mode (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix dma hang in rmmod (Íñigo Huguet) [2043454]
  - mt76: add support for setting mcast rate (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix bit fields for HT rate idx (Íñigo Huguet) [2043454]
  - mt76: mt7915: switch proper tx arbiter mode in testmode (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix potential overflow of eeprom page index (Íñigo Huguet) [2043454]
  - mt76: mt7921: send EAPOL frames at lowest rate (Íñigo Huguet) [2043454]
  - mt76: mt7915: send EAPOL frames at lowest rate (Íñigo Huguet) [2043454]
  - mt76: mt7915: add control knobs for thermal throttling (Íñigo Huguet) [2043454]
  - mt76: mt7921: Add mt7922 support (Íñigo Huguet) [2043454]
  - mt76: mt7615: fix skb use-after-free on mac reset (Íñigo Huguet) [2043454]
  - mt76: mt7921: Fix out of order process by invalid event pkt (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix mgmt frame using unexpected bitrate (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix mgmt frame using unexpected bitrate (Íñigo Huguet) [2043454]
  - mt76: add mt76_default_basic_rate more devices can rely on (Íñigo Huguet) [2043454]
  - mt76: mt7921: introduce testmode support (Íñigo Huguet) [2043454]
  - mt76: mt7915: remove mt7915_sta_stats (Íñigo Huguet) [2043454]
  - mt76: mt7915: report tx rate directly from tx status (Íñigo Huguet) [2043454]
  - mt76: mt7915: cleanup -Wunused-but-set-variable (Íñigo Huguet) [2043454]
  - mt76: mt7915: take RCU read lock when calling ieee80211_bss_get_elem() (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix an off-by-one bound check (Íñigo Huguet) [2043454]
  - mt76: mt7921: add .set_sar_specs support (Íñigo Huguet) [2043454]
  - mt76: mt7915: adapt new firmware to update BA winsize for Rx session (Íñigo Huguet) [2043454]
  - mt76: mt7915: report HE MU radiotap (Íñigo Huguet) [2043454]
  - mt76: mt76x02: fix endianness warnings in mt76x02_mac.c (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix survey-dump reporting (Íñigo Huguet) [2043454]
  - mt76: fix build error implicit enumeration conversion (Íñigo Huguet) [2043454]
  - mt76: mt7921: enable aspm by default (Íñigo Huguet) [2043454]
  - mt76: connac: fix mt76_connac_gtk_rekey_tlv usage (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix calling mt76_wcid_alloc with incorrect parameter (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix info leak in mt7915_mcu_set_pre_cal() (Íñigo Huguet) [2043454]
  - mt76: mt7615: fix endianness warning in mt7615_mac_write_txwi (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix endianness warning in mt7921_update_txs (Íñigo Huguet) [2043454]
  - mt76: mt7915: fix endianness warning in mt7915_mac_add_txs_skb (Íñigo Huguet) [2043454]
  - mt76: mt7921: avoid unnecessary spin_lock/spin_unlock in mt7921_mcu_tx_done_event (Íñigo Huguet) [2043454]
  - mt76: mt7921: fix endianness in mt7921_mcu_tx_done_event (Íñigo Huguet) [2043454]
  - rtw89: Remove redundant check of ret after call to rtw89_mac_enable_bb_rf (Íñigo Huguet) [2043454]
  - rtw89: Fix two spelling mistakes in debug messages (Íñigo Huguet) [2043454]
  - mwifiex: Try waking the firmware until we get an interrupt (Íñigo Huguet) [2043454]
  - mwifiex: Read a PCI register after writing the TX ring write pointer (Íñigo Huguet) [2043454]
  - fq_codel: implement L4S style ce_threshold_ect1 marking (Íñigo Huguet) [2043454]
  - net: add skb_get_dsfield() helper (Íñigo Huguet) [2043454]
  - wireless: Remove redundant 'flush_workqueue()' calls (Íñigo Huguet) [2043454]
  - mt7601u: Remove redundant initialization of variable ret (Íñigo Huguet) [2043454]
  - rtlwifi: rtl8192ee: Remove redundant initialization of variable version (Íñigo Huguet) [2043454]
  - rtw89: add Realtek 802.11ax driver (Íñigo Huguet) [2043454]
  - ath10k: fix max antenna gain unit (Íñigo Huguet) [2043454]
  - ath9k: fix an IS_ERR() vs NULL check (Íñigo Huguet) [2043454]
  - ath11k: Identify DFS channel when sending scan channel list command (Íñigo Huguet) [2043454]
  - ath9k: support DT ieee80211-freq-limit property to limit channels (Íñigo Huguet) [2043454]
  - ath11k: Change number of TCL rings to one for QCA6390 (Íñigo Huguet) [2043454]
  - ath11k: Handle MSI enablement during rmmod and SSR (Íñigo Huguet) [2043454]
  - ath: dfs_pattern_detector: Fix possible null-pointer dereference in channel_detector_create() (Íñigo Huguet) [2043454]
  - ath11k: Use kcalloc() instead of kzalloc() (Íñigo Huguet) [2043454]
  - ath11k: Remove redundant assignment to variable fw_size (Íñigo Huguet) [2043454]
  - ath11k: fix m68k and xtensa build failure in ath11k_peer_assoc_h_smps() (Íñigo Huguet) [2043454]
  - ath11k: Fix spelling mistake "incompaitiblity" -> "incompatibility" (Íñigo Huguet) [2043454]
  - ath11k: Remove unused variable in ath11k_dp_rx_mon_merg_msdus() (Íñigo Huguet) [2043454]
  - ath9k: Fix potential interrupt storm on queue reset (Íñigo Huguet) [2043454]
  - ath9k: add option to reset the wifi chip via debugfs (Íñigo Huguet) [2043454]
  - ath10k: Don't always treat modem stop events as crashes (Íñigo Huguet) [2043454]
  - rtl8xxxu: Use lower tx rates for the ack packet (Íñigo Huguet) [2043454]
  - brcmfmac: Add DMI nvram filename quirk for Cyberbook T116 tablet (Íñigo Huguet) [2043454]
  - rtw88: refine fw_crash debugfs to show non-zero while triggering (Íñigo Huguet) [2043454]
  - rtw88: fix RX clock gate setting while fifo dump (Íñigo Huguet) [2043454]
  - net: qrtr: combine nameservice into main module (Íñigo Huguet) [2043454]
  - ath10k: sdio: Add missing BH locking around napi_schdule() (Íñigo Huguet) [2043454]
  - ath10k: Fix missing frame timestamp for beacon/probe-resp (Íñigo Huguet) [2043454]
  - ath10k: high latency fixes for beacon buffer (Íñigo Huguet) [2043454]
  - ath11k: Change DMA_FROM_DEVICE to DMA_TO_DEVICE when map reinjected packets (Íñigo Huguet) [2043454]
  - ath11k: support SMPS configuration for 6 GHz (Íñigo Huguet) [2043454]
  - ath11k: add 6 GHz params in peer assoc command (Íñigo Huguet) [2043454]
  - ieee80211: Add new A-MPDU factor macro for HE 6 GHz peer caps (Íñigo Huguet) [2043454]
  - ath11k: indicate to mac80211 scan complete with aborted flag for ATH11K_SCAN_STARTING state (Íñigo Huguet) [2043454]
  - ath11k: indicate scan complete for scan canceled when scan running (Íñigo Huguet) [2043454]
  - ath11k: add handler for scan event WMI_SCAN_EVENT_DEQUEUED (Íñigo Huguet) [2043454]
  - ath11k: add HTT stats support for new stats (Íñigo Huguet) [2043454]
  - ath11k: Change masking and shifting in htt stats (Íñigo Huguet) [2043454]
  - ath11k: Remove htt stats fixed size array usage (Íñigo Huguet) [2043454]
  - ath11k: Replace HTT_DBG_OUT with scnprintf (Íñigo Huguet) [2043454]
  - ath11k: Rename macro ARRAY_TO_STRING to PRINT_ARRAY_TO_BUF (Íñigo Huguet) [2043454]
  - ath11k: Fix memory leak in ath11k_qmi_driver_event_work (Íñigo Huguet) [2043454]
  - ath11k: Fix inaccessible debug registers (Íñigo Huguet) [2043454]
  - ath11k: Drop MSDU with length error in DP rx path (Íñigo Huguet) [2043454]
  - ath11k: copy cap info of 6G band under WMI_HOST_WLAN_5G_CAP for WCN6855 (Íñigo Huguet) [2043454]
  - ath11k: enable 6G channels for WCN6855 (Íñigo Huguet) [2043454]
  - ath11k: re-enable ht_cap/vht_cap for 5G band for WCN6855 (Íñigo Huguet) [2043454]
  - ath11k: fix survey dump collection in 6 GHz (Íñigo Huguet) [2043454]
  - ath11k: fix packet drops due to incorrect 6 GHz freq value in rx status (Íñigo Huguet) [2043454]
  - ath11k: add channel 2 into 6 GHz channel list (Íñigo Huguet) [2043454]
  - mac80211: MBSSID support in interface handling (Íñigo Huguet) [2043454]
  - ath11k: Add wmi peer create conf event in wmi_tlv_event_id (Íñigo Huguet) [2043454]
  - ath11k: Avoid "No VIF found" warning message (Íñigo Huguet) [2043454]
  - ath11k: Fix crash during firmware recovery on reo cmd ring access (Íñigo Huguet) [2043454]
  - ath11k: Assign free_vdev_map value before ieee80211_register_hw (Íñigo Huguet) [2043454]
  - ath11k: Add vdev start flag to disable hardware encryption (Íñigo Huguet) [2043454]
  - ath11k: Avoid race during regd updates (Íñigo Huguet) [2043454]
  - ath11k: Avoid reg rules update during firmware recovery (Íñigo Huguet) [2043454]
  - ath11k: Update pdev tx and rx firmware stats (Íñigo Huguet) [2043454]
  - ath11k: Fix pktlog lite rx events (Íñigo Huguet) [2043454]
  - ath11k: Add support for RX decapsulation offload (Íñigo Huguet) [2043454]
  - ath11k: fix some sleeping in atomic bugs (Íñigo Huguet) [2043454]
  - ath11k: qmi: avoid error messages when dma allocation fails (Íñigo Huguet) [2043454]
  - ath11k: Replace one-element array with flexible-array member (Íñigo Huguet) [2043454]
  - ath11k: add caldata download support from EEPROM (Íñigo Huguet) [2043454]
  - ath11k: add caldata file for multiple radios (Íñigo Huguet) [2043454]
  - ath11k: clean up BDF download functions (Íñigo Huguet) [2043454]
  - ath11k: use hw_params to access board_size and cal_offset (Íñigo Huguet) [2043454]
  - ath11k: Wstringop-overread warning (Íñigo Huguet) [2043454]
  - ath11k: Add spectral scan support for QCN9074 (Íñigo Huguet) [2043454]
  - ath11k: Fix the spectral minimum FFT bin count (Íñigo Huguet) [2043454]
  - ath11k: Introduce spectral hw configurable param (Íñigo Huguet) [2043454]
  - ath11k: Refactor spectral FFT bin size (Íñigo Huguet) [2043454]
  - ath11k: add support for 80P80 and 160 MHz bandwidth (Íñigo Huguet) [2043454]
  - ath11k: add support for setting fixed HE rate/gi/ltf (Íñigo Huguet) [2043454]
  - nl80211: MBSSID and EMA support in AP mode (Íñigo Huguet) [2043454]
  - nl80211: don't kfree() ERR_PTR() value (Íñigo Huguet) [2043454]
  - cfg80211: always free wiphy specific regdomain (Íñigo Huguet) [2043454]
  - mac80211: save transmit power envelope element and power constraint (Íñigo Huguet) [2043454]
  - mac80211: add parse regulatory info in 6 GHz operation information (Íñigo Huguet) [2043454]
  - ieee80211: add power type definition for 6 GHz (Íñigo Huguet) [2043454]
  - mac80211: twt: don't use potentially unaligned pointer (Íñigo Huguet) [2043454]
  - cfg80211: AP mode driver offload for FILS association crypto (Íñigo Huguet) [2043454]
  - ath11k: monitor mode clean up to use separate APIs (Íñigo Huguet) [2043454]
  - ath11k: add separate APIs for monitor mode (Íñigo Huguet) [2043454]
  - ath11k: move static function ath11k_mac_vdev_setup_sync to top (Íñigo Huguet) [2043454]
  - rtw88: 8821c: correct 2.4G tx power for type 2/4 NIC (Íñigo Huguet) [2043454]
  - rtw88: 8821c: support RFE type4 wifi NIC (Íñigo Huguet) [2043454]
  - brcmfmac: Replace zero-length array with flexible array member (Íñigo Huguet) [2043454]
  - mac80211_hwsim: enable 6GHz channels (Íñigo Huguet) [2043454]
  - mac80211: use ieee802_11_parse_elems() in ieee80211_prep_channel() (Íñigo Huguet) [2043454]
  - nl80211: don't put struct cfg80211_ap_settings on stack (Íñigo Huguet) [2043454]
  - mac80211: always allocate struct ieee802_11_elems (Íñigo Huguet) [2043454]
  - mac80211: mlme: find auth challenge directly (Íñigo Huguet) [2043454]
  - mac80211: move CRC into struct ieee802_11_elems (Íñigo Huguet) [2043454]
  - mac80211: mesh: clean up rx_bcn_presp API (Íñigo Huguet) [2043454]
  - mac80211: reduce stack usage in debugfs (Íñigo Huguet) [2043454]
  - nl80211: prefer struct_size over open coded arithmetic (Íñigo Huguet) [2043454]
  - mac80211: check hostapd configuration parsing twt requests (Íñigo Huguet) [2043454]
  - cfg80211: honour V=1 in certificate code generation (Íñigo Huguet) [2043454]
  - rt2x00: remove duplicate USB device ID (Íñigo Huguet) [2043454]
  - wilc1000: increase config packets response wait timeout limit (Íñigo Huguet) [2043454]
  - wilc1000: use correct write command sequence in wilc_spi_sync_ext() (Íñigo Huguet) [2043454]
  - wilc1000: add 'initialized' flag check before adding an element to TX queue (Íñigo Huguet) [2043454]
  - wilc1000: invoke chip reset register before firmware download (Íñigo Huguet) [2043454]
  - wilc1000: ignore clockless registers status response for SPI (Íñigo Huguet) [2043454]
  - wilc1000: handle read failure issue for clockless registers (Íñigo Huguet) [2043454]
  - wilc1000: add reset/terminate/repeat command support for SPI bus (Íñigo Huguet) [2043454]
  - wilc1000: configure registers to handle chip wakeup sequence (Íñigo Huguet) [2043454]
  - wilc1000: add new WID to pass wake_enable information to firmware (Íñigo Huguet) [2043454]
  - wilc1000: fix possible memory leak in cfg_scan_result() (Íñigo Huguet) [2043454]
  - wilc1000: move 'deinit_lock' lock init/destroy inside module probe (Íñigo Huguet) [2043454]
  - mwifiex: Fix copy-paste mistake when creating virtual interface (Íñigo Huguet) [2043454]
  - mwifiex: Properly initialize private structure on interface type changes (Íñigo Huguet) [2043454]
  - mwifiex: Handle interface type changes from AP to STATION (Íñigo Huguet) [2043454]
  - mwifiex: Allow switching interface type from P2P_CLIENT to P2P_GO (Íñigo Huguet) [2043454]
  - mwifiex: Update virtual interface counters right after setting bss_type (Íñigo Huguet) [2043454]
  - mwifiex: Use helper function for counting interface types (Íñigo Huguet) [2043454]
  - mwifiex: Run SET_BSS_MODE when changing from P2P to STATION vif-type (Íñigo Huguet) [2043454]
  - mwifiex: Use function to check whether interface type change is allowed (Íñigo Huguet) [2043454]
  - mwifiex: Small cleanup for handling virtual interface type changes (Íñigo Huguet) [2043454]
  - rtw88: move adaptivity mechanism to firmware (Íñigo Huguet) [2043454]
  - rtw88: support adaptivity for ETSI/JP DFS region (Íñigo Huguet) [2043454]
  - rtw88: add regulatory strategy by chip type (Íñigo Huguet) [2043454]
  - rtw88: upgrade rtw_regulatory mechanism and mapping (Íñigo Huguet) [2043454]
  - brcmfmac: fix incorrect error prints (Íñigo Huguet) [2043454]
  - ath11k: Align bss_chan_info structure with firmware (Íñigo Huguet) [2043454]
  - ath11k: add support in survey dump with bss_chan_info (Íñigo Huguet) [2043454]
  - ath11k: Rename atf_config to flag1 in target_resource_config (Íñigo Huguet) [2043454]
  - ath11k: fix 4addr multicast packet tx (Íñigo Huguet) [2043454]
  - ath11k: fix 4-addr tx failure for AP and STA modes (Íñigo Huguet) [2043454]
  - ath9k: owl-loader: fetch pci init values through nvmem (Íñigo Huguet) [2043454]
  - ath9k: fetch calibration data via nvmem subsystem (Íñigo Huguet) [2043454]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.el9]
changelog:
  - stmmac/intel: mark driver as tech preview (Mark Salter) [2045594]
  - net: stmmac: Add GFP_DMA32 for rx buffers if no 64 capability (Mark Salter) [2045594]
  - mm: fix invalid page pointer returned with FOLL_PIN gups (Peter Xu) [2037300]
  - tipc: improve size validations for received domain records (Xin Long) [2048972] {CVE-2022-0435}
  - cgroup-v1: Require capabilities to set release_agent (Waiman Long) [2052168] {CVE-2022-0492}
  - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (Yauheni Kaliuta) [2033596]
  - bpf: Stop caching subprog index in the bpf_pseudo_func insn (Yauheni Kaliuta) [2033596]
  - ucount: Make get_ucount a safe get_user replacement (Alexey Gladkov) [2049040] {CVE-2022-24122}
  - ucounts: Add get_ucounts_or_wrap for clarity (Alexey Gladkov) [2049040]
  - ucounts: Remove unnecessary test for NULL ucount in get_ucounts (Alexey Gladkov) [2049040]
  - ucounts: Use atomic_long_sub_return for clarity (Alexey Gladkov) [2049040]
  - ucounts: Fix rlimit max values check (Alexey Gladkov) [2049040]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.1.1.el9_0]
changelog:
  - Revert 8dffe2b6 "Merge: kabi: add lib ACKed symbols" (Čestmír Kalina) [2059972]
  - include/linux/kernel.h: fix function name for mark_hardware_unmaintained() if !CONFIG_RHEL_DIFFERENCES (Ewan D. Milne) [2059687]
  - scsi: sd: Mark ZBC host-managed SCSI disks as unmaintained (Ewan D. Milne) [2059687]
  - spec: make linux-firmware weak(er) dependency (Jan Stancek) [2031113]
  - redhat/configs: Enable CONFIG_INTEL_PCH_THERMAL for x86 (David Arcari) [2058186]
  - redhat/configs: Disable CONFIG_SURFACE_PLATFORMS (David Arcari) [2056609]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-71.el9]
changelog:
  - CI: Build coverage RPMs on c9s environment (Veronika Kabatova)
  - md: use default_groups in kobj_type (Nigel Croxon) [2042797]
  - md: Move alloc/free acct bioset in to personality (Nigel Croxon) [2042797]
  - md: fix spelling of "its" (Nigel Croxon) [2042797]
  - md: raid456 add nowait support (Nigel Croxon) [2042797]
  - md: raid10 add nowait support (Nigel Croxon) [2042797]
  - md: raid1 add nowait support (Nigel Croxon) [2042797]
  - md: add support for REQ_NOWAIT (Nigel Croxon) [2042797]
  - md: drop queue limitation for RAID1 and RAID10 (Nigel Croxon) [2042797]
  - md/raid5: play nice with PREEMPT_RT (Nigel Croxon) [2042797]
  - md/raid1: fix missing bitmap update w/o WriteMostly devices (Nigel Croxon) [2042797]
  - md: fix double free of mddev->private in autorun_array() (Nigel Croxon) [2042797]
  - md: fix update super 1.0 on rdev size change (Nigel Croxon) [2042797]
  - raid5-ppl: use swap() to make code cleaner (Nigel Croxon) [2042797]
  - md/bitmap: don't set max_write_behind if there is no write mostly device (Nigel Croxon) [2042797]
  - md: update superblock after changing rdev flags in state_store (Nigel Croxon) [2042797]
  - md: remove unused argument from md_new_event (Nigel Croxon) [2042797]
  - md/raid5: call roundup_pow_of_two in raid5_run (Nigel Croxon) [2042797]
  - md/raid1: use rdev in raid1_write_request directly (Nigel Croxon) [2042797]
  - md/raid1: only allocate write behind bio fof WriteMostly device (Nigel Croxon) [2042797]
  - md: properly unwind when failing to add the kobject in md_alloc (Nigel Croxon) [2042797]
  - md: extend disks_mutex coverage (Nigel Croxon) [2042797]
  - md: add the bitmap group to the default groups for the md kobject (Nigel Croxon) [2042797]
  - md: add error handling support for add_disk() (Nigel Croxon) [2042797]
  - redhat: Bump RHEL_MINOR for 9.1 (Patrick Talbert)


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-72.el9]
changelog:
  - spec: Fix separate tools build (Jiri Olsa) [2054579]
  - redhat: use centos x509.genkey file if building under centos (Herton R. Krzesinski) [2029952]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-73.el9]
changelog:
  - CI: Use 9.0-rt branch for rhel-9 realtime_check (Juri Lelli)
  - redhat: enable zstream release numbering for rhel 9.0 (Herton R. Krzesinski)
  - redhat: change kabi tarballs to use the package release (Herton R. Krzesinski)
  - redhat: generate distgit changelog in genspec.sh as well (Herton R. Krzesinski)
  - redhat: make genspec prefer metadata from git notes (Herton R. Krzesinski)
  - redhat: use tags from git notes for zstream to generate changelog (Herton R. Krzesinski)
  - CI: Add disttag setting (Veronika Kabatova)
  - CI: Drop c9s config (Veronika Kabatova)
  - virtio-net: fix pages leaking when building skb in big mode (Laurent Vivier) [2042559]
  - lib/iov_iter: initialize "flags" in new pipe_buffer (Carlos Maiolino) [2060869] {CVE-2022-0847}
  - redhat/configs: Make CRYPTO_ECDH algos built-in (Simo Sorce) [2062199]
  - crypto: api - Move cryptomgr soft dependency into algapi (Vladis Dronov) [2062199]
  - crypto: api - Fix boot-up crash when crypto manager is disabled (Vladis Dronov) [2062199]
  - crypto: api - Do not create test larvals if manager is disabled (Vladis Dronov) [2062199]
  - crypto: api - Export crypto_boot_test_finished (Vladis Dronov) [2062199]
  - crypto: api - Fix built-in testing dependency failures (Vladis Dronov) [2062199]
  - redhat/configs: Add CRYPTO_AES_ARM64 config explicitly (Vladis Dronov) [2062199]
  - crypto: arm64/aes-ce - stop using SIMD helper for skciphers (Vladis Dronov) [2062199]
  - crypto: arm64/aes-neonbs - stop using SIMD helper for skciphers (Vladis Dronov) [2062199]
  - redhat: change default dist suffix for RHEL 9.0 (Herton R. Krzesinski)
  - selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2050813]
  - KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2050813]
  - block: kabi: reserve space for block layer public structure (Ming Lei) [2057238]
  - block: kabi: reserve space for blk-mq related structure (Ming Lei) [2057238]
  - block: kabi: reserve space for bsg related structure (Ming Lei) [2057238]
  - block: kabi: reserve space for integrity related structure (Ming Lei) [2057238]
  - scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (Dick Kennedy) [2054866]
  - x86/MCE/AMD, EDAC/mce_amd: Support non-uniform MCA bank type enumeration (Aristeu Rozanski) [1898165 2047430 2047446]
  - x86/MCE/AMD, EDAC/mce_amd: Add new SMCA bank types (Aristeu Rozanski) [1898165 2047430 2047446]
  - EDAC/amd64: Add support for AMD Family 19h Models 10h-1Fh and A0h-AFh (Aristeu Rozanski) [1898165 2047430 2047446]
  - EDAC: Add RDDR5 and LRDDR5 memory types (Aristeu Rozanski) [1898165 2047430 2047446]
  - drm/amdgpu: Register MCE notifier for Aldebaran RAS (Aristeu Rozanski) [1898165 2047430 2047446]
  - x86/MCE/AMD: Export smca_get_bank_type symbol (Aristeu Rozanski) [1898165 2047430 2047446]
  - PCI/ACPI: Fix acpi_pci_osc_control_set() kernel-doc comment (Mark Langsdorf) [2049635]
  - PCI/ACPI: Check for _OSC support in acpi_pci_osc_control_set() (Mark Langsdorf) [2049635]
  - PCI/ACPI: Move _OSC query checks to separate function (Mark Langsdorf) [2049635]
  - PCI/ACPI: Move supported and control calculations to separate functions (Mark Langsdorf) [2049635]
  - PCI/ACPI: Remove OSC_PCI_SUPPORT_MASKS and OSC_PCI_CONTROL_MASKS (Mark Langsdorf) [2049635]
  - nvmet-tcp: fix missing unmainted messages (Chris Leech) [2054441]
  - dm stats: fix too short end duration_ns when using precise_timestamps (Benjamin Marzinski) [2051798]
  - dm: fix double accounting of flush with data (Benjamin Marzinski) [2051798]
  - dm: interlock pending dm_io and dm_wait_for_bios_completion (Benjamin Marzinski) [2051798]
  - dm: properly fix redundant bio-based IO accounting (Benjamin Marzinski) [2051798]
  - dm: revert partial fix for redundant bio-based IO accounting (Benjamin Marzinski) [2051798]
  - block: add bio_start_io_acct_time() to control start_time (Benjamin Marzinski) [2051798]
  - scsi: mpt3sas: Fix incorrect system timestamp (Tomas Henzl) [2049631]
  - scsi: mpt3sas: Fix system going into read-only mode (Tomas Henzl) [2049631]
  - scsi: mpt3sas: Fix kernel panic during drive powercycle test (Tomas Henzl) [2049631]
  - redhat/configs: enable mellanox platform drivers to support LED, fan & watchdog devices (Ivan Vecera) [2057491]
  - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (David Arcari) [2040022]
  - x86/cpu: Add Raptor Lake to Intel family (David Arcari) [2040022]
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2055566]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2055566]
  - selftests: kvm: Check whether SIDA memop fails for normal guests (Thomas Huth) [2060814]
  - KVM: s390: Return error on SIDA memop on normal guest (Thomas Huth) [2060814]
  - igb: refactor XDP registration (Corinna Vinschen) [2054379]
  - igc: avoid kernel warning when changing RX ring parameters (Corinna Vinschen) [2054379]
  - redhat/configs: Enable CONFIG_ACER_WIRELESS (Peter Georg) [2025985]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-74.el9]
changelog:
  - redhat: rpminspect: disable 'patches' check for known empty patch files (Patrick Talbert)
  - KVM: x86/mmu: Don't advance iterator after restart due to yielding (Nico Pache) [2055725]
  - ibmvnic: don't release napi in __ibmvnic_open() (Diego Domingos) [2055981]


author: Patrick Talbert <ptalbert@redhat.com> [5.14.0-75.el9]
changelog:
  - ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() (Hangbin Liu) [2059308] {CVE-2022-0742}
  - redhat/configs: aarch64: Fix PAC/BTI config settings (Mark Salter) [2063215]
  - RHEL9.0: arch_hw Update CONFIG_MOUSE_VSXXXAA=m (Tony Camuso) [2062909]
  - redhat/configs: Disable KVM on POWER (Laurent Vivier) [2052898]
  - drm/ast: Create threshold values for AST2600 (Jocelyn Falempe) [2062560]
  - mm: gup: make fault_in_safe_writeable() use fixup_user_fault() (Andreas Gruenbacher) [2062797]
  - drm/vmwgfx: Fix stale file descriptors on failed usercopy (David Airlie) [2047613] {CVE-2022-22942}
  - netfilter: nf_queue: handle socket prefetch (Florian Westphal) [2060092]
  - netfilter: nf_queue: fix possible use-after-free (Florian Westphal) [2060092]
  - selftests: netfilter: add nfqueue TCP_NEW_SYN_RECV socket race test (Florian Westphal) [2060092]
  - netfilter: nf_queue: don't assume sk is full socket (Florian Westphal) [2060092]
  - scsi: mpi3mr: Fix flushing !WQ_MEM_RECLAIM events warning (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix memory leaks (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix reporting of actual data transfer size (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix cmnd getting marked as in use forever (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix hibernation issue (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix printing of pending I/O count (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fix deadlock while canceling the fw event (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Fixes around reply request queues (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Enhanced Task Management Support Reply handling (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Use TM response codes from MPI3 headers (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Increase internal cmnds timeout to 60s (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Do access status validation before adding devices (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Update MPI3 headers - part2 (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Update MPI3 headers - part1 (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Don't reset IOC if cmnds flush with reset status (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Replace spin_lock() with spin_lock_irqsave() (Tomas Henzl) [2056626]
  - scsi: mpi3mr: Add debug APIs based on logging_level bits (Tomas Henzl) [2056626]
  - x86/kvm/fpu: Remove kvm_vcpu_arch.guest_supported_xcr0 (Leonardo Bras) [2043545]
  - x86/kvm/fpu: Limit guest user_xfeatures to supported bits of XCR0 (Leonardo Bras) [2043545]
  - KVM: x86: Move CPUID.(EAX=0x12,ECX=1) mangling to __kvm_update_cpuid_runtime() (Leonardo Bras) [2043545]
  - KVM: x86: Do runtime CPUID update before updating vcpu->arch.cpuid_entries (Leonardo Bras) [2043545]
  - x86/fpu: Fix inline prefix warnings (Leonardo Bras) [2043545]
  - kvm: x86: Emulate IA32_XFD_ERR for guest (Leonardo Bras) [2043545]
  - x86/fpu: Prepare xfd_err in struct fpu_guest (Leonardo Bras) [2043545]
  - kvm: x86: Add emulation for IA32_XFD (Leonardo Bras) [2043545]
  - x86/fpu: Provide fpu_update_guest_xfd() for IA32_XFD emulation (Leonardo Bras) [2043545]
  - kvm: x86: Enable dynamic xfeatures at KVM_SET_CPUID2 (Leonardo Bras) [2043545]
  - x86/fpu: Provide fpu_enable_guest_xfd_features() for KVM (Leonardo Bras) [2043545]
  - x86/fpu: Add guest support to xfd_enable_feature() (Leonardo Bras) [2043545]
  - x86/fpu: Prepare guest FPU for dynamically enabled FPU features (Leonardo Bras) [2043545]
  - x86/fpu: Extend fpu_xstate_prctl() with guest permissions (Leonardo Bras) [2043545]
  - cpuid: kvm_find_kvm_cpuid_features() should be declared 'static' (Leonardo Bras) [2043545]
  - KVM: x86: Make sure KVM_CPUID_FEATURES really are KVM_CPUID_FEATURES (Leonardo Bras) [2043545]
  - KVM: x86: Add helper to consolidate core logic of SET_CPUID{2} flows (Leonardo Bras) [2043545]
  - redhat/configs: Disable watchdog components (Prarit Bhargava) [2060117]
  - sched: Fix yet more sched_fork() races (Phil Auld) [2062836]
  - sched/fair: Fix fault in reweight_entity (Phil Auld) [2062836]
  - x86/cpu: Add Xeon Icelake-D to list of CPUs that support PPIN (David Arcari) [2043225]
  - powerpc/pseries/ddw: Revert "Extend upper limit for huge DMA window for persistent memory" (Steve Best) [2056057]
  - drivers/char: permit access to the RTAS user buffer under lockdown (Desnes A. Nunes do Rosario) [2046472]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210628-1.gitdd7d273
changelog:
  - implement scoped policies, e.g., cipher@SSH = ...
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol, sha1_in_dnssec
  - deprecate unscoped form of protocol property
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS
  - openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes
  - libssh: respect ssh_certs
  - restrict FIPS:OSPP further
  - improve Python 3.10 compatibility
  - update documentation
  - expand upstream test coverage
  - FUTURE: disable CBC ciphers for all backends but krb5
  - openssl: LEGACY must have SECLEVEL=1, enabling SHA1
  - disable DHE-DSS in LEGACY
  - bump LEGACY key size requirements from 1023 to 1024
  - add javasystem backend
  - *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  - set %verify(not mode) for backend sometimes-symlinks-sometimes-not
  - gnutls: use allowlisting


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210707-1.git29f6c0b
changelog:
  - gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
  - packaging: adapt to the RHEL-9 %check-time testing tools availability


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210914-1.git97d08ef
changelog:
  - gnutls: reorder ECDSA-SECPMMMR1-SHANNN together with ECDSA-SHANNN
  - fix several issues with update-crypto-policies --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-9
changelog:
  - 2018948 - Unauthenticated users can't move print jobs in Web UI
  - 1999955 - Printing of banner before PCL file only prints banner
  - 2006713 - Trying to restart and hold a job doesn't work


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-12
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)
  - fix use-after-free and double-free in MQTT sending (CVE-2021-22945)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-6
changelog:
  - Add 0022-multipathd-cli_handlers-cleanup-setting-reply-length.patch
    * Found by corosync
  - Related: bz #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update Source to upstream version 0.8.7 plus upstream staged commits
    * Previous patches 0011-0016 & 0018-0022 are included in the source tarball
    * Fixes bz#2017592
  - Rename files
    * Previous patches 0001-0010 are now patches 0013-0022
  - Modify 0018-RH-add-mpathconf.patch
    * merged with previous patch 0017
  - Add 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz#1984303
  - Fix multipath_conf_syntax test to work with bz #1984303
  - Resolves: bz #1984303, #2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0017-RH-use-rpm-optflags-if-present.patch
    * use RPM_LF_FLAGS
  - Modify 0018-RH-add-mpathconf.patch
    * update default config to match multipath changes
  - Modify 0022-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * fix cmocka vpd tests
  - Rename 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch to
           0023-libmultipath-add-section-name-to-invalid-keyword-out.patch
  - Resolves: bz#2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Add 0024-libmultipath-use-typedef-for-keyword-handler-functio.patch
  - Add 0025-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0026-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0027-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0028-libmultipath-improve-checks-for-set_str.patch
  - Add 0029-libmultipath-deprecate-file-and-directory-config-opt.patch
  - Add 0030-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0031-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0032-libmultipath-don-t-return-error-on-invalid-values.patch
    * The above 9 patches fix bz #2017969
  - Add 0033-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2017979
  - Add 0034-multipath-fix-exit-status-of-multipath-T.patch
  - Resolves: bz #2017969, #2017979


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Add 0035-RH-mpathconf-fix-setting-property_blacklist.patch
  - Add 0036-libmultipath-fix-disassemble-status-for-historical-s.patch
    * Fixes bz #2042032
  - Add 0037-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0038-multipathd-trigger-udev-change-on-path-addition.patch
    * Fixes bz #2028835
  - Resolves: bz #2028835, #2042032


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Add 0039-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * Fixes bz #2050421
  - Add 0040-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * Fixes bz #2039749
  - Resolves: bz #2039749, #2050421


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-6
changelog:
  - Add 0041-multipathd-handle-fpin-events.patch
  - Add 0042-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
    * Add "marginal_pathgroups fpin" for responding to PFIN-Li events
    * Fixes bz #2053642
  - Modify tests/restate_module
    * Always offline the path with the lowest priority
    * Fixes bz #2052633
  - Resolves: bz #2052633, #2053642


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Nicola Sella <nsella@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0
  - Log scriptlets output also for API users (RhBug:1847340)
  - Fix module remove --all when no match spec (RhBug:1904490)
  - yum.misc.decompress() to handle uncompressed files (RhBug:1895059)
  - Make an error message more informative (RhBug:1814831)
  - Add deprecation notice to help messages of deplist
  - Remove Base._history_undo_operations() as it was replaced with transaction_sr code
  - cli/output: Return number of listed packages from listPkgs()
  - Clean up history command error handling
  - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
  - Add api function fill_sack_from_repos_in_cache to allow loading a repo cache with repomd and (solv file or primary xml) only (RhBug:1865803)
  - Packages installed/removed via DNF API are logged into dnf.log (RhBug:1855158)
  - Support comps groups in history redo (RhBug:1657123,1809565,1809639)
  - Support comps groups in history rollback (RhBug:1657123,1809565,1809639)
  - Support comps groups in history undo (RhBug:1657123,1809565,1809639)
  - New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
  - Add get_header() method to the Package class (RhBug:1876606)
  - Fix documentation of globs not supporting curly brackets (RhBug:1913418)


author: Nicola Sella <nsella@redhat.com> - 4.6.1-1
changelog:
  - Update to 4.6.1
  - Fix recreate script
  - Add unit test for fill_sack_from_repos_in_cache (RhBug:1865803)
  - Add docs and examples for fill_sack_from_repos_in_cache (RhBug:1865803)
  - [spec] remove python2 support
  - Remove problematic language
  - The noroot plugin no longer exists, remove mention
  - Run tests for fill_sack_from_repos_in_cache in installroot (RhBug:1865803)
  - expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - Set persistdir and substitutions for fill_sack_from_repos_in_cache tests (RhBug:1865803)
  - Update documentation for module_obsoletes and module_stream_switch
  - print additional information when verifying GPG key using DNS
  - Bugs fixed (RhBug:1897573)
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-1
changelog:
  - Update to 4.10.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - [API] Add method "set_or_append_opt_value" to BaseConfig (RhBug:1967925)
  - Add aliases for commands: info, updateinfo, provides (RhBug:1938333)
  - Add report about demodularized rpms into module info (RhBug:1805260)
  - Remove DNSSEC errors on COPR group email keys
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies (RhBug:1699672)
  - Add support for excluding packages to be installed as weak dependencies (RhBug:1699672)
  - Add fail_fast parameter to download_payloads methods for use in reposync
  - Acquire all relevant locks during "dnf clean"
  - API: Raise CompsError when group/env not found in install_group and install_environment (RhBug:1947958)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-2
changelog:
  - Respect cacheonly in python dnf API (RhBug:2026849)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: Nicola Sella <nsella@redhat.com> - 4.0.18-1
changelog:
  - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist
  - [needs-restarting] add kernel-rt to reboot list
  - Fix debug-restore command
  - [config-manager] enable/disable comma separated pkgs (RhBug:1830530)
  - [debug] Use standard demands.resolving for transaction handling
  - [debug] Do not remove install-only packages (RhBug:1844533)
  - return error when dnf download failed
  - README: Reference Fedora Weblate instead of Zanata
  - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074)
  - copr: don't try to list runtime dependencies


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.183-1
changelog:
  - Upgrade to upstream 0.183
    - debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
    - debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h can
      be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and DEBUGINFOD_VERBOSE
      environment variable.
    - config: profile.sh and profile.csh won't export DEBUGINFOD_URLS
      unless configured --enable-debuginfod-urls[=URLS]
    - elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target type.


author: Mark Wielaard <mjw@redhat.com> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-6
changelog:
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-8
changelog:
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - Resolves: CVE-2021-45960


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Florian Weimer <fweimer@redhat.com> - 2.34-21
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 3438bbca90895d32825a52e31a77dc44d273c1c1:
  - Linux: Detect user namespace support in io/tst-getcwd-smallbuff
  - realpath: Avoid overwriting preexisting error
  - CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1
  - tst-realpath-toolong: Fix hurd build
  - CVE-2021-3998: realpath: ENAMETOOLONG for result larger than PATH_MAX
  - stdlib: Fix formatting of tests list in Makefile
  - stdlib: Sort tests in Makefile
  - support: Add helpers to create paths longer than PATH_MAX
  - powerpc: Fix unrecognized instruction errors with recent binutils
  - x86: use default cache size if it cannot be determined [BZ #28784]
  - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
  - sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)
  - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)
  - socket: Add the __sockaddr_un_set function
  - Disable debuginfod in printer tests [BZ #28757]
  - Update syscall lists for Linux 5.16


author: Florian Weimer <fweimer@redhat.com> - 2.34-22
changelog:
  - Sync with upstream branch release/2.34/master,
    commit aa601d024424c40ae9a69b0c4e394a70ea0570c8:
  - x86: Use CHECK_FEATURE_PRESENT to check HLE [BZ #27398]
  - x86: Filter out more Intel CPUs for TSX [BZ #27398]
  - Fix glibc 2.34 ABI omission (missing GLIBC_2.34 in dynamic loader)
  - x86: Fix __wcsncmp_evex in strcmp-evex.S [BZ# 28755]
  - x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755]


author: Florian Weimer <fweimer@redhat.com> - 2.34-24
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 008003dc6e83439c5e04a744b7fd8197df19096e:
  - tst-socket-timestamp-compat.c: Check __TIMESIZE [BZ #28837]
  - Linux: Only generate 64 bit timestamps for 64 bit time_t recvmsg/recvmmsg
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ#28350)
  - support: Add support_socket_so_timestamp_time64


author: Florian Weimer <fweimer@redhat.com> - 2.34-25
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6eaf10cbb78d22eae7999d9de55f6b93999e0860:
  - socket: Do not use AF_NETLINK in __opensock
  - hurd if_index: Explicitly use AF_INET for if index discovery
  - Linux: Simplify __opensock and fix race condition [BZ #28353]
  - linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage [BZ #28850]


author: Arjun Shankar <arjun@redhat.com> - 2.34-28
changelog:
  - Reduce installed size of some langpacks by de-duplicating LC_CTYPE (#2054789)
  - Fix localedef so it can handle symbolic links when generating locale-archive.
  - Drop glibc-fedora-localedef.patch and adjust locale installation
    accordingly so that installed content remains unchanged.


author: Florian Weimer <fweimer@redhat.com> - 2.34-29
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 224d8c1890b6c57c7e4e8ddbb792dd9552086704:
  - debug: Synchronize feature guards in fortified functions [BZ #28746]
  - debug: Autogenerate _FORTIFY_SOURCE tests
  - Enable _FORTIFY_SOURCE=3 for gcc 12 and above
  - fortify: Fix spurious warning with realpath
  - __glibc_unsafe_len: Fix comment
  - debug: Add tests for _FORTIFY_SOURCE=3
  - Make sure that the fortified function conditionals are constant
  - Don't add access size hints to fortifiable functions
  - nss: Protect against errno changes in function lookup (bug 28953)
  - nss: Do not mention NSS test modules in <gnu/lib-names.h>
  - io: Add fsync call in tst-stat
  - hppa: Fix warnings from _dl_lookup_address
  - nptl: Fix cleanups for stack grows up [BZ# 28899]
  - hppa: Revise gettext trampoline design
  - hppa: Fix swapcontext
  - Fix elf/tst-audit2 on hppa
  - localedef: Handle symbolic links when generating locale-archive
  - NEWS: Add a bug fix entry for BZ #28896
  - x86: Fix TEST_NAME to make it a string in tst-strncmp-rtm.c
  - x86: Test wcscmp RTM in the wcsncmp overflow case [BZ #28896]
  - x86: Fallback {str|wcs}cmp RTM in the ncmp overflow case [BZ #28896]
  - string: Add a testcase for wcsncmp with SIZE_MAX [BZ #28755]
  - linux: fix accuracy of get_nprocs and get_nprocs_conf [BZ #28865]
  - Add reference to BZ#28860 on NEWS
  - linux: Fix missing __convert_scm_timestamps (BZ #28860)


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Jan Macku <jamacku@redhat.com> - 10.11.2-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - ci: Update path to csdiff repository (#391)


author: Jan Macku <jamacku@redhat.com> - 10.11.3-1
changelog:
  - Drop unnecessary obsoletes
  - spec: Move rename_device to subpackage `initscripts-rename-device`
  - ci: Update `.packit.yml` to run on `c9s`
  - ci: Use Differential ShellCheck action


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]
  Resolves: rhbz#1938744, rhbz#1994520, rhbz#1994545, rhbz#1994581


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Peter Robinson <pbrobinson@fedoraproject.org> 20210315-119
changelog:
  - Update to upstream 20210315 release
  - Update to Intel Bluetooth AX200/201 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.6
  - rtw89: 8852a: add firmware v0.9.12.2
  - iwlwifi: updates for 9000-family/7265D/core59-66 (cc, Qu, QuZ, ty)
  - amdgpu: add initial firmware for green sardine
  - Silabs new WF200 firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2406
  - Added Mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20210716-121
changelog:
  - Update to upstream 20210716 release (rhbz 1984973, rhbz 1876310).
    What changed in this release is noted on items below, copied from Fedora's
    linux-firmware changelog done by Peter Robinson
  - update NXP 8897/8997 firmware images
  - rtlwifi: de-dupe rtl8723b/rtl8192e SDIO/USB WiFi firmware
  - Mediatek: update WiFi/bluetooth chip (MT7921)
  - Mediatek: update MT7915 firmware to 20201105
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  - cxgb4: Update firmware to revision 1.26.0.0
  - firmware/i915/guc: Add HuC v7.9.3 for TGL & DG1
  - firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  - firmware/i915/guc: Add GuC v62.0.0 for all platforms
  - nvidia: fix symlinks for tu104/tu106 acr unload firmware
  - iwlwifi: new/updated 8000/9000/other from core60-51 release
  - Update firmware file for Intel Bluetooth AX210/201/200
  - rtw88: 8822c: Update normal firmware to v9.9.10
  - rtl_bt: Update RTL8852A BT(UART I/F) FW to 0xD9A8_A0CD
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  - rtl_bt: Add rtl8761b/rtl8761bu firmware
  - QCA: Update Bluetooth firmware for QCA6174/QCA6390
  - QCA: Add Bluetooth firmware for WCN685x
  - amdgpu: update 21.20 vcn firmware for green sardine, renoir, navi10/12/14
  - amdgpu: add initial dimgrey cavefish firmware from 21.20
  - amdgpu: updated 21.20 firmware for: Picasso, green sardine, arcturus
    vega10/12/20, navi10/12/14, raven1/2, renoir, navy flounder
  - cypress: update firmware: cyw54591/cyw43570 pcie
  - cypress: update firmware: cyw4373/cyw4356/cyw4354/cyw43455/cyw43430/cyw43340/cyw43012 sdio
  - nvidia: Update Tegra194 XUSB firmware to v60.09
  - nvidia: Update Tegra186 XUSB firmware to v55.18
  - nvidia: Update Tegra210 XUSB firmware to v50.26
  - nvidia: Add VIC firmware for Tegra194
  - update firmware for cadence mhdp8546
  - i915: Add ADL-P DMC Support
  - qcom: add gpu firmwares for sc7280
  - qcom: Add venus firmware files for VPU-2.0
  - qcom: update venus firmware files for v5.4
  - qcom: sm8250: update remoteproc firmware
  - qcom: update a650 firmware files
  - QCA: Update Bluetooth firmware for QCA6174
  - WHENCE: link to similar config file for rtl8821a support
  - rtw89: 8852a: update fw to v0.13.8.0
  - rtw88: 8822c: Update normal firmware to v9.9.9
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  - rtl_bt: Add rtl8723bs_config-OBDA0623.bin symlink
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x59A_76A3
  - rtl_nic: add new firmware for RTL8153 and RTL8156 series
  - Intel: Update firmware for Intel Bluetooth AX210/201/200, 9560, 9260, 8265
  - Intel BT 7265: Fix Security Issues
  - mrvl: prestera: Add Marvell Prestera Switchdev firmware 3.0 version
  - amdgpu: update GPU firmwares from 21.10
  - amdgpu: add initial support for arcturus, navy flounder
  - amdgpu: add new polaris 12 MC firmware
  - amdgpu: update navi10/14 smc firmware
  - cxgb4: Update firmware to revision 1.25.4.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2438
  - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.14.A.6
  - brcm: add missing symlink for Pi Zero W NVRAM file
  - brcm: Add a link to enable khadas VIM2's WiFi
  - brcm: Link CM4's WiFi firmware with DMI machine name.
  - brcm: Add nvram for the Chuwi Hi8 (CWI509) tablet
  - brcm: Add nvram for the Predia Basic tablet


author: Herton R. Krzesinski <herton@redhat.com> - 20210919-122
changelog:
  - Update to upstream 20210919 release (rhbz 1979806). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - qed: Add firmware 8.59.1.0
  - Update firmware file for Intel Bluetooth AX211/AX210/AX200/AX201
  - Update firmware file for Intel Bluetooth 9560/9260/8265
  - iwlwifi: add FWs for new So device types with multiple RF modules
  - amdgpu: add initial firmware for Yellow Carp
  - Add firmware for mediatek bluetooth chip (MT7922)
  - Update AMD SEV firmware
  - Update firmware for mediatek bluetooth chip (MT7921)
  - Update RTL8852A BT USB firmware to 0xD9A9_1D69
  - Update RTL8822C BT UART firmware to 0x05A9_1A4A
  - Update RTL8822C BT USB firmware to 0x09A9_1A4A
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  - Update firmware of RTL8153C
  - ice: update package file to 1.3.26.0
  - amdgpu: revert back to older raven2/raven/picasso sdma firmware
  - amdgpu: add initial vangogh support
  - amdgpu: update vega20/vega12/vega10/renoir/raven2/raven firmware from 21.30
  - amdgpu: update polaris12/picasso/dimgrey cavefish/flounder firmware from 21.30
  - amdgpu: update sienna cichlid/navi14/navi12/navi10 firmware from 21.30
  - amdgpu: update green sardine/arcturus firmware from 21.30
  - QCA: Updated firmware files for WCN3991
  - i915: Add v2.03 DMC for RKL
  - i915: Add v2.12 DMC for TGL
  - qca: Add firmware files for BT chip WCN6750
  - iwlwifi: add ty firmware from Core63-43


author: Herton R. Krzesinski <herton@redhat.com> - 20211027-123
changelog:
  - Update to upstream 20211027 release (rhbz 1986659). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - Update AMD cpu microcode
  - QCA: Update Bluetooth firmware for WCN685x
  - bnx2x: Add FW 7.13.20.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  - Update NXP Management Complex firmware to version 10.28.1
  - Update firmware for MT7921 WiFi device
  - rtw89: 8852a: update fw to v0.13.30.0
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth AX201
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth AX200
  - brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  - amdgpu: update VCN firmware for dimgrey cavefish
  - amdgpu: update VCN firmware for navy flounder
  - amdgpu: update VCN firmware for sienna cichlid
  - amdgpu: update VCN firmware for vangogh
  - amdgpu: update VCN firmware for renoir
  - amdgpu: update VCN firmware for picasso
  - amdgpu: update VCN firmware for raven2
  - amdgpu: update VCN firmware for raven
  - amdgpu: Add initial firmware for Beige Goby
  - cxgb4: Update firmware to revision 1.26.2.0
  - Update frimware for mediatek bluetooth chip (MT7921)
  - i915: Update ADLP DMC v2.12


author: Herton R. Krzesinski <herton@redhat.com> - 20211216-124
changelog:
  - Update to upstream 20211216 release (rhbz 2035777). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - amdgpu: update green sardine PSP firmware
  - bnx2x: Add FW 7.13.21.0
  - wilc1000: update WILC1000 firmware to v15.4.1
  - rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  - rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  - cxgb4: Update firmware to revision 1.26.4.0
  - i915: Add DMC firmware v2.14 for ADL-P
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth AX200
  - Update firmware file for Intel Bluetooth AX201
  - amdgpu: update yellow carp dmcub firmware
  - amdgpu: update vangogh DMCUB firmware
  - QCA: Add Bluetooth default nvm file for WCN685x
  - Update ath10k/QCA6174/hw3.0/board-2.bin
  - mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  - QCA: Add Bluetooth firmware for WCN685x
  - Update AMD cpu microcode
  - amdgpu: update raven2 firmware from 21.40
  - amdgpu: update navi14 firmware from 21.40
  - amdgpu: update raven firmware from 21.40
  - amdgpu: update navi12 firmware from 21.40
  - amdgpu: update navi10 firmware from 21.40
  - amdgpu: update vega20 firmware from 21.40
  - amdgpu: update vega12 firmware from 21.40
  - amdgpu: update vega10 firmware from 21.40
  - amdgpu: update picasso firmware from 21.40
  - amdgpu: update vangogh firmware from 21.40
  - amdgpu: update beige goby firmware from 21.40
  - amdgpu: add cyan skillfish firmware from 21.40
  - amdgpu: update dimgrey cavefish firmware from 21.40
  - amdgpu: update green sardine firmware from 21.40
  - amdgpu: update navy flounder firmware from 21.40
  - amdgpu: update renoir firmware from 21.40
  - amdgpu: update arcturus firmware from 21.40
  - amdgpu: update sienna cichlid firmware from 21.40
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  - iwlwifi: add new FWs from core64-96 release
  - iwlwifi: update 9000-family firmwares to core64-96
  - amdgpu: update VCN firmware for green sardine
  - update firmware for mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20220209-125
changelog:
  - Update to upstream 20220209 release (rhbz 1967151, 2031174). Changes
    since the last update are noted on items below, copied from the git
    changelog of upstream linux-firmware repository
  - Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  - i915: Add DMC firmware v2.16 for ADL-P
  - mediatek: Update MT8173 VPU firmware to v1.1.7
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth AX201
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth AX200
  - update firmware for mediatek bluetooth chip (MT7921)
  - update firmware for MT7921 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  - add marvell CPT firmware images
  - update firmware for MT7915
  - iwlwifi: add new FWs from core63-136 release
  - iwlwifi: add new FWs from core66-88 release
  - iwlwifi: update 9000-family firmwares to core66-88
  - add firmware for MT7916
  - Update firmware file for Intel Bluetooth 9462
  - WHENCE: add missing symlink for NanoPi R1
  - amdgpu: update yellow carp dmcub firmware
  - QCA: Add Bluetooth nvm file for WCN685x
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  - QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  - cxgb4: Update firmware to revision 1.26.6.0
  - cnm: add chips&media wave521c firmware
  - rtw88: 8822c: Update normal firmware to v9.9.11
  - i915: Add GuC v69.0.3 for all platforms
  - rtw89: 8852a: update fw to v0.13.33.0


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Tao Liu <ltao@redhat.com> - 2.0.22-16
changelog:
  - fix broken extra_bins when installing multiple binaries
  - mkdumprd: drop mountaddr/mountproto nfs mount options
  - 92-crashkernel.install: fix exit code
  - dracut-early-kdump.sh: make it POSIX compatible
  - Add header comment for POSIX compliant scripts
  - mkdumprd: allow using dash
  - kdump-logger.sh: make it POSIX compatible
  - kdump-lib.sh: reformat with shfmt
  - kdump-lib.sh: declare and assign separately
  - kdump-lib.sh: fix variable quoting issue
  - Remove trace_buf_size and trace_event from the kernel bootparameters of the kdump kernel
  - kdump-lib.sh: fix a few ambiguous or redundant code
  - kdump-lib.sh: fix arithmetic operation syntax
  - kdump-lib.sh: remove useless echo and cat
  - kdump-lib.sh: rework nmcli related functions
  - kdump-lib.sh: replace '[ ]' with '[[ ]]' and get rid of legacy ``
  - kdump-lib-initramfs.sh: make it POSIX compatible
  - dracut-kdump.sh: reformat with shfmt
  - dracut-kdump.sh: make it POSIX compatible
  - dracut-kdump.sh: POSIX doesn't support pipefail
  - dracut-kdump.sh: Use stat instead of ls to get vmcore size
  - dracut-kdump.sh: simplify dump_ssh
  - dracut-kdump.sh: remove add_dump_code
  - dracut-kdump.sh: don't put KDUMP_SCRIPT_DIR in PATH
  - kdump-lib-initramfs.sh: move dump related functions to kdump.sh
  - Merge kdump-error-handler.sh into kdump.sh
  - kdump-lib-initramfs.sh: prepare to be a POSIX compatible lib
  - bash scripts: reformat with shfmt
  - bash scripts: declare and assign separately
  - bash scripts: fix redundant exit code check
  - bash scripts: fix variable quoting issue
  - Don't use die in dracut-module-setup.sh
  - bash scripts: replace '[ ]' with '[[ ]]' for bash scripts
  - mkdumprd: display the absolute path of dump location in the check_user_configured_target()
  - Don't iterate the whole /sys/devices just to find drm device
  - mkdumprd: prompt the user to install nfs-utils when mounting NFS fs failed
  - bash scripts: use $(...) notation instead of legacy `...`
  - bash scripts: always use "read -r"
  - bash scripts: get rid of unnecessary sed calls
  - bash scripts: get rid of expr and let
  - bash scripts: remove useless cat
  - dracut-module-setup.sh: remove surrounding $() for subshell
  - dracut-module-setup.sh: make iscsi check fail early if cd failed
  - dracut-module-setup.sh: fix a loop over ls issue
  - dracut-module-setup.sh: fix a ambiguous variable reference
  - dracut-module-setup.sh: use "*" to expend array as string
  - dracut-module-setup.sh: fix _bondoptions wrong references
  - dracut-module-setup.sh: remove an unused variable
  - dracut-module-setup.sh: rework kdump_get_ip_route_field
  - mkfadumprd: make _dracut_isolate_args an array
  - mkdumprd: use array to store ssh arguments in mkdir_save_path_ssh
  - mkdumprd: remove an awk call in get_fs_size
  - mkdumprd: fix multiple issues with get_ssh_size
  - mkdumprd: remove some redundant echo
  - mkdumprd: make dracut_args an array again
  - mkdumprd: use kdump_get_conf_val to read config values
  - kdumpctl: refine grep usage
  - kdumpctl: fix fragile loops over find output
  - kdumpctl: use kdump_get_conf_val to read config values
  - kdump-lib.sh: use kdump_get_conf_val to read config values
  - kdump-lib.sh: add a config value retrive helper
  - kdump-lib.sh: add a config format and read helper
  - Add a .editorconfig file
  - Remove hard requirement on grubby


author: Tao Liu <ltao@redhat.com> - 2.0.23-2
changelog:
  - kdump/ppc64: migration action registration clean up
  - kdump/ppc64: rebuild initramfs image after migration
  - Update supported-kdump-targets.txt
  - add keyutils as a weak dependency for POWER
  - kdumpctl: enable secure boot on ppc64le LPARs
  - kdump.sysconfig: make kexec_file_load as default option on arm64
  - kdump.sysconfig: make kexec_file_load as default option on ppc64le


author: Tao Liu <ltao@redhat.com> - 2.0.23-3
changelog:
  - Update eppic to latest upstream snapshot
  - Update crashkernel-howto.txt
  - Remove references to systemd-sysv-convert
  - kdump/ppc64: suppress the error message "Could not find a registered notification tool" from servicelog_notify
  - fadump: improve fadump-howto.txt about remote dump target setup
  - Don't exit 1 from 92-crashkernel.install if zipl is absent (#1993505)
  - Document/kexec-kdump-howto.txt: improve notes for kdump_pre and kdump_post scripts


author: Tao Liu <ltao@redhat.com> - 2.0.23-4
changelog:
  - Set zstd as the default compression method for kdump initrd
  - kdump-lib.sh: Escape '|' for 'failure_action|default' in is_dump_to_rootfs
  - dracut-early-kdump-module-setup.sh: install xargs and kdump-lib-initramfs.sh
  - update crashkernel-howto
  - set up kernel crashkernel for osbuild in kernel hook
  - reset kernel crashkernel for the special case where the kernel is updated right after kexec-tools
  - try to reset kernel crashkernel when kexec-tools updates the default crashkernel value
  - introduce the auto_reset_crashkernel option to kdump.conf
  - rewrite reset_crashkernel to support fadump and to used by RPM scriptlet
  - fix incorrect usage of rpm-ostree to update kernel command line parameters
  - add helper functions to get kernel path by kernel release and the path of current running kernel
  - add helper functions to get dump mode
  - add a helper function to read kernel cmdline parameter from grubby --info
  - provide kdumpctl get-default-crashkernel for kdump_anaconda_addon and RPM scriptlet
  - factor out kdump_get_arch_recommend_crashkernel
  - update default crashkernel value
  - ppc64/ppc64le: drop cpu online rule in 40-redhat.rules in kdump initramfs


author: Tao Liu <ltao@redhat.com> - 2.0.23-5
changelog:
  - Set zstd as recommented for kexec-tools
  - fix "kdump: Invalid kdump config option auto_reset_crashkernel" error
  - use grep -s to suppress error messages about nonexistent or unreadable files


author: Tao Liu <ltao@redhat.com> - 2.0.23-6
changelog:
  - Revert "Remove trace_buf_size and trace_event from the kernel bootparameters of the kdump kernel"
  - fix broken kdump_get_arch_recommend_size
  - remove the upper bound of 102400T for the range in default crashkernel
  - fix the error of parsing the container environ variable for osbuild
  - mkdumprd (RHEL-only): add nvme module by force
  - Remove dropped patches
  - s390: handle R_390_PLT32DBL reloc entries in machine_apply_elf_rel()
  - spec: add hostname.rpm into Recommends list
  - move variable FENCE_KDUMP_SEND from kdump-lib.sh to kdump-lib-initramfs.sh


author: Tao Liu <ltao@redhat.com> - 2.0.23-7
changelog:
  - fix incorrect usage of _get_all_kernels_from_grubby
  - fix the mistake of swapping function parameters of read_proc_environ_var


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-10
changelog:
  - Rebuilt for latest kernel.
  - Related: rhbz#2000926
  - Temporarily disabled creation of sysfs nodes.
  - Related: rhbz#2035003


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-10
changelog:
  - Eliminated uses of "master" as part of the conscious language initiative.
  - Resolves: rhbz#2023970
  - Fixed potential use-after-free error found by Coverity.
  - Resolves: rhbz#1999056
  - Fixed bug which could result in empty flushes being issued to the storage
    below vdo while suspended.
  - Resolves: rhbz#2013057
  - Added optional table line parameters for enabling or disabling
    deduplication and compression.
  - Resolves: rhbz#2007444
  - Adapted to kernel API changes.
  - Resolves: rhbz#2035003


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-12
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2022464
  - Rebuilt for latest kernel.
  - Related: rhbz#2000926


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-12
changelog:
  - Fixed a compilation issue due to changes in stdarg.h.
  - Resolves: rhbz#2035003
  - Modified the UDS index to handle backing store changes while suspended.
  - Resolves: rhbz#2007803
  - Fixed a bug which prevented the resumption of a suspended read-only vdo.
  - Resolves: rhbz#2004206


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Karel Zak <kzak@redhat.com> - 2.36.1-2
changelog:
  - remove unused patches
  - remove versions and seq.numbers from patch names
  - fix mount "symfollow" issue (upstream patch)


author: Karel Zak <kzak@redhat.com> - 2.36.2-1
changelog:
  - upgrade to stable upstream 2.36.2
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36.2-ReleaseNotes


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Nicola Sella <nsella@redhat.com> - 0.58.0-1
changelog:
  - Update to 0.58.0
  - Option: Add reset() method
  - Add OptionBinds::getOption() method
  - [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  - [context] Add support for options: minrate, throttle, bandwidth, timeout
  - [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  - Allow loading ext metadata even if only cache (solv) is present
  - Add ASAN_OPTIONS for test_libdnf_main
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Add compatible layer for MdDocuments v2
  - Fix modular queries with the new solver
  - Improve formatting of error string for modules
  - Change mechanism of module conflicts
  - Fix load/update FailSafe


author: Nicola Sella <nsella@redhat.com> - 0.60.0-1
changelog:
  - Update to 0.60.0
  - Fix repo.fresh() implementation
  - build-sys: Add ENABLE_STATIC option
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Apply proxy certificate options
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - build-sys: Clean up message about Python bindings
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Fix problematic language
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file option "installonlypkgs".
  - Support main config file option "protected_packages".
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - ModuleProfile: add isDefault()
  - ModulePackage: add getDefaultProfile()
  - Add new dnf_context_module_install() C API
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.19-1
changelog:
  - ENT-4083: Fix flake8 error E402 (mhorky@redhat.com)
  - ENT-4085: Fix flake8 error E713 (mhorky@redhat.com)
  - 2003777: Show available organizations before asking for input
    (mhorky@redhat.com)
  - ENT-4302: Remove "u" prefix from strings (mhorky@redhat.com)
  - ENT-4326: Drop "-*- coding" comment (mhorky@redhat.com)
  - ENT-4277: Drop __future__ imports (mhorky@redhat.com)
  - 1979323: Cockpit - do not show red red icon in SCA mode (jhnidek@redhat.com)
  - Remove outdated comments from the coverage Jenkins job (mhorky@redhat.com)
  - ENT-4252: Migrate from nose to pytest (mhorky@redhat.com)
  - Debian / Ubuntu multi-architectures support
    (sbernhard@users.noreply.github.com)
  - Translated using Weblate (Spanish) (ehespinosa57@gmail.com)
  - 1859157: Display better error message on incorrect --org (mhorky@redhat.com)
  - New D-Bus method GetOrg() (jhnidek@redhat.com)
  - 1924338: list prints not status and dates in SCA mode (jhnidek@redhat.com)
  - 1983144: More useful feedback on unknown argument (mhorky@redhat.com)
  - ENT-4089: Fix flake8 error E741 (mhorky@redhat.com)
  - ENT-4090: Fix flake8 error F821 (mhorky@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - ENT-4091: Fix flake8 error F841 (mhorky@redhat.com)
  - ENT-4228: Format rhsmlib exception (mhorky@redhat.com)
  - ENT-4228: Always format restlib exceptions (mhorky@redhat.com)
  - Update exception handling (mhorky@redhat.com)
  - Drop unused M2Crypto bits (ptoscano@redhat.com)
  - 1995465: Do not use deprecated collections.MutableMapping
    (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1983074: Remove invalid log level (mhorky@redhat.com)
  - ENT-4213: Remove deprecated pep8 package (mhorky@redhat.com)
  - build: switch to os.makedirs(..., exist_ok=True) (ptoscano@redhat.com)
  - build: call create_dest_dir() only when running callback
    (ptoscano@redhat.com)
  - flake8: enable E131, E714 (ptoscano@redhat.com)
  - 1859569: Abort on invalid username/token option in syspurpose commands
    (mhorky@redhat.com)
  - Drop logging.conf (ptoscano@redhat.com)
  - Drop long-dead sat5to6 script (ptoscano@redhat.com)
  - Drop RHN migration (ptoscano@redhat.com)
  - 1922151: Add /var/cache/cloud-what to python3-cloud-what RPM.
    (jhnidek@redhat.com)
  - ENT-164: Remove ga_loader importer (mhorky@redhat.com)
  - ENT-164: Drop rhsm-gtk (mhorky@redhat.com)
  - ENT-164: Drop subscription-manager-gui & rhsm-icon (mhorky@redhat.com)
  - Add minimal documentation for the plugins directories (ptoscano@redhat.com)
  - ENT-4168: Unify description of --org in syspurpose subcommands
    (mhorky@redhat.com)
  - 1922151: Use in-memory cache on AWS too (jhnidek@redhat.com)
  - Move zypper plugins to an own directory (ptoscano@redhat.com)
  - Move dnf plugins to an own directory (ptoscano@redhat.com)
  - Move libdnf plugins to an own directory (ptoscano@redhat.com)
  - Drop support for YUM plugins (ptoscano@redhat.com)
  - Drop YUM plugins (ptoscano@redhat.com)
  - Add 'syspurpose' to list of commands in manpage (mhorky@redhat.com)
  - ENT-4152: Drop initial-setup addon (mhorky@redhat.com)
  - ENT-4136: Drop firstboot support (mhorky@redhat.com)
  - ENT-3764: Change comments to follow Conscious language initiative
    (mhorky@redhat.com)
  - ENT-3764: Update variable names in hwprobe.py (mhorky@redhat.com)
  - ENT-3764: Update project URLs to new versions (mhorky@redhat.com)
  - ENT-3764: Remove BLACKLISTED_LOCALES (mhorky@redhat.com)
  - 1980418: Add 'active' field to module stream profile (ianballou67@gmail.com)
  - repos: document order of --enable & --disable (ptoscano@redhat.com)
  - 1984133: repos: respect order of --enable & --disable (ptoscano@redhat.com)
  - Include D-Bus sender in User-Agent http header; Singleton
    (jhnidek@redhat.com)
  - hwprobe.py: Fix counting cores per cpu for Fujitsu A64FX CPU
    (m.mizuma@jp.fujitsu.com)
  - flake8: enable E121, E122, E123, E126, E127, E128 (ptoscano@redhat.com)
  - flake8: disable E122 for test/test_utils.py (ptoscano@redhat.com)
  - Wrap first argument/element in function calls & containers
    (ptoscano@redhat.com)
  - Fix indentation of some continuation lines (ptoscano@redhat.com)
  - 1974641: Fix tab completion with multiple optional commands
    (mhorky@redhat.com)
  - 1876828: Try to suppress errors in stderr when not run as root
    (mhorky@redhat.com)
  - 1977452: typo in string format change Add quotes to a {filename} and remove
    an extra space. (tmerry@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1976240: Improve HTTP code/message reporting in error strings
    (mhorky@redhat.com)
  - Added new stage for running libdnf unit tests. (jhnidek@redhat.com)
  - make sure gpg key download doesn't fail because of private certs
    (sbernhard@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.20-1
changelog:
  - ENT-4279: Switch away from rhsmlib.compat.subprocess_compat
    (mhorky@redhat.com)
  - 2021578: Remove proxy server test as it is unnecessary (wpoteat@redhat.com)
  - cockpit: validate SSL connection to mock-insights (ptoscano@redhat.com)
  - cockpit: fix hostname of the fake Insights server (ptoscano@redhat.com)
  - cockpit: validate the SSL connection to candlepin (ptoscano@redhat.com)
  - cockpit: resolve hostname of service machine (ptoscano@redhat.com)
  - cockpit: use CANDLEPIN_URL consistently (ptoscano@redhat.com)
  - 1719690: Update to message formatting (wpoteat@redhat.com)
  - cockpit: account for missing insights-client on non-RHEL systems
    (ptoscano@redhat.com)
  - cockpit: skip Insights tests on non-RHEL OSes (ptoscano@redhat.com)
  - ENT-4370: Drop old dbus_interface.py (mhorky@redhat.com)
  - ENT-4278: Drop unittest2 imports (mhorky@redhat.com)
  - 1985845: Fix sub-man service-level --show (jhnidek@redhat.com)
  - spec: drop non-systemd support (ptoscano@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 33 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)
  - spec: drop support for SUSE < 15 (ptoscano@redhat.com)
  - 2015173: chmod /etc/pki/entitlement/*.pem only when existing
    (ptoscano@redhat.com)
  - cockpit: port subscriptions info icons to PF4 icons (kkoukiou@redhat.com)
  - cockpit: translate some untranslated aria-labels (kkoukiou@redhat.com)
  - cockpit: Port Po2JSONPlugin to webpack 5 (kkoukiou@redhat.com)
  - cockpit: stop including PF3 - it's not used anymore (kkoukiou@redhat.com)
  - cockpit: port Insights dialog remaining non PF4 parts (kkoukiou@redhat.com)
  - cockpit: port subscriptions register dialog to Patternfly 4
    (kkoukiou@redhat.com)
  - cockpit: make default TEST_OS rhel-8-4 (kkoukiou@redhat.com)
  - cockpit: port spinners to PF4 spinners (kkoukiou@redhat.com)
  - cockpit: replace custom Revealer component with 'ExpandableSection' from PF4
    (kkoukiou@redhat.com)
  - cockpit: replace pficon and fa classes with svgs form react-icons
    (kkoukiou@redhat.com)
  - cockpit: remove jquery unused dependency (kkoukiou@redhat.com)
  - cockpit: patternfly is a normal dependency - not just dev
    (kkoukiou@redhat.com)
  - cockpit: update patternfly modules and explicitely specify react-icons
    dependency (kkoukiou@redhat.com)
  - cockpit: clean up package.json from unused dependencies and move to webpack 5
    (kkoukiou@redhat.com)
  - webpack: Use relative resolve path for npm 7 compatibility
    (kkoukiou@redhat.com)
  - cockpit: Stop using a custom Select, use the one from PF instead
    (kkoukiou@redhat.com)
  - cockpit: checkout Cockpit's PF/React/build library instead of keeping a
    direct copy of it locally (kkoukiou@redhat.com)
  - cockpit: update npmshrinkwrap file (kkoukiou@redhat.com)
  - Use pytest --forked for D-Bus unit tests (jhnidek@redhat.com)
  - Support of python3 of zypper rhsm script (suttner@atix.de)
  - 2003777: Fix organizations hint in syspurpose commands (mhorky@redhat.com)
  - Small style changes of d-bus server and d-bus unit tests (jhnidek@redhat.com)
  - * Removed GLib.threads_init() (jhnidek@redhat.com)
  - Added cleanup for one patcher; fixed some comments. (jhnidek@redhat.com)
  - cockpit: skip RHEL 9 tests using insights-client (ptoscano@redhat.com)
  - cockpit: fix system installation of subscription-manager
    (ptoscano@redhat.com)
  - cockpit: wait 5 seconds for candlepin at first (ptoscano@redhat.com)
  - cockpit: use the self-signed key in mock-insights (ptoscano@redhat.com)
  - test: Building requires gcc (mmarusak@redhat.com)
  - test: Tell tests about rhel-9 package manager (mmarusak@redhat.com)
  - facts: drop dead/unused code from CleanupCollector (ptoscano@redhat.com)
  - 1989955: use /proc/device-tree/ibm,partition-uuid on POWER LPARs
    (ptoscano@redhat.com)
  - facts: prepare _get_devicetree_uuid() for multiple files
    (ptoscano@redhat.com)
  - facts: refactor device-tree parts of VirtUuidCollector (ptoscano@redhat.com)
  - cockpit: Move from obsolete node-sass to Dart sass (martin@piware.de)
  - Cloud-what: Make saving token file more robust (jhnidek@redhat.com)
  - Fix redundant API calls to Candlepin (hyu@redhat.com)
  - Remove i-notify watchers on the end of the loop (jhnidek@redhat.com)
  - build: pin flake8 to < 4 (ptoscano@redhat.com)
  - Only rpmlint our specfiles (csnyder@redhat.com)
  - Version our obsoletes of syspurpose and the container plugin
    (csnyder@redhat.com)
  - Remove unnecessary comment and sles/suse tests (csnyder@redhat.com)
  - ENT-4273: Drop usage of six.moves (mhorky@redhat.com)
  - ENT-4379: Remove function make_utf8 (mhorky@redhat.com)
  - ENT-4087: Fix flake8 error E722 (mhorky@redhat.com)
  - make spec file SUSE / Open Build Service compliant (p.seiler@linuxmail.org)
  - 2003777: Only hint organizations if it's needed (mhorky@redhat.com)
  - Drop old GUI docs leftovers (ptoscano@redhat.com)
  - tests: drop no more needed rhsm_display (ptoscano@redhat.com)
  - build: remove old specific check for GUI file (ptoscano@redhat.com)
  - Drop async_utils & its tests (ptoscano@redhat.com)
  - Remove rhsm-icon leftovers (ptoscano@redhat.com)
  - build: remove unused detect_overindent function (ptoscano@redhat.com)
  - build: drop lxml leftovers (ptoscano@redhat.com)
  - build: drop Glade leftovers (ptoscano@redhat.com)
  - Add rhsm proxy support to apt-transport-katello (suttner@atix.de)
  - ENT-4289: Drop Sphinx (mhorky@redhat.com)
  - ENT-4340: Resolve deprecation warnings (mhorky@redhat.com)
  - Fixed one unused import of six (jhnidek@redhat.com)
  - ENT-4272: Remove Python 2 conditionals (mhorky@redhat.com)
  - ENT-4274: Remove six.assert* methods (mhorky@redhat.com)
  - ENT-4275: Switch away from six.BytesIO and six.StringIO (mhorky@redhat.com)
  - ENT-4082: Fix flake8 error E265 (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.21-1
changelog:
  - 2020248: handle server-side consumer deletion in syspurpose commands
    (ptoscano@redhat.com)
  - connection: recognize proxy errors (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.23-1
changelog:
  - Ignore debian architecture ALL (schmidt@atix.de)
  - 2028894: Don't allow service-level --serverurl on registered system
    (mhorky@redhat.com)
  - 2037771: Cockpit registration dialog: enable insights by default
    (jhnidek@redhat.com)
  - 2039322: fix string representation of DMI facts (ptoscano@redhat.com)
  - Drop usage of six.python_2_unicode_compatible (ptoscano@redhat.com)
  - ENT-4588: Switch away from six iterators (mhorky@redhat.com)
  - ENT-4590: Switch away from six.callable (mhorky@redhat.com)
  - ENT-4587: Switch away from six types (mhorky@redhat.com)
  - Adding permissive coverage publishing (jmolet@redhat.com)
  - Ensure that prompted environment entry follows state of multiples
    (wpoteat@redhat.com)
  - 2026316: Do not delete cache of content_access during refresh
    (jhnidek@redhat.com)
  - More SUSE compliance (jhnidek@redhat.com)
  - Updates for non-multi-environment scenario (wpoteat@redhat.com)
  - Fix some minor issues related to syspurpose (jhnidek@redhat.com)
  - syspurpose: handle users w/o organizations (ptoscano@redhat.com)
  - service-level: drop useless check (ptoscano@redhat.com)
  - 2026286: consider user-specified --org in any case (ptoscano@redhat.com)
  - Drop the Vagrant bits (ptoscano@redhat.com)
  - 1995032: Use multiple environments (wpoteat@redhat.com)
  - cache: fix typo in debug message (ptoscano@redhat.com)
  - Switch away from Thread.getName() (ptoscano@redhat.com)
  - Fix indentation of ProductStatus. (jhnidek@redhat.com)
  - 2028969: Do not try to load compliance status from cache (jhnidek@redhat.com)
  - Switch comma-separated join to space-separated join (schmidt@atix.de)
  - 2029927: Fix bash autocompletion (mhorky@redhat.com)
  - utils: use shutil.get_terminal_size() (ptoscano@redhat.com)
  - Remove PyXML leftovers (ptoscano@redhat.com)
  - 2026320: fix format of HTTP-date headers (ptoscano@redhat.com)
  - connection: move HTTP-date formatting to own helper (ptoscano@redhat.com)
  - Ensure datetime.timezone.utc objects for parsed UTC dates
    (ptoscano@redhat.com)
  - rhsm: drop custom which() implementation (ptoscano@redhat.com)
  - facts: switch to shutil.which() (ptoscano@redhat.com)
  - test: unconditionally use hashlib (ptoscano@redhat.com)
  - 1999048: Fixed partially subscribed product in Cockpit plugin
    (jhnidek@redhat.com)
  - test: rename tests to default pytest filename pattern (ptoscano@redhat.com)
  - Fixed last bits related to updated D-Bus Register method.
    (jhnidek@redhat.com)
  - Cockpit plugin: display syspurpose card without attributes
    (jhnidek@redhat.com)
  - 2023257: Disallowed attaching using D-Bus in SCA mode (jhnidek@redhat.com)
  - 2023257: Disallowed attaching pool in SCA mode: (jhnidek@redhat.com)
  - Refactoring of temporary disablement of dir watchers. (jhnidek@redhat.com)
  - Ignore enable_content option in RegisterWithActivationKeys()
    (jhnidek@redhat.com)
  - Use benefits of enable_content in cockpit plugin. (jhnidek@redhat.com)
  - Added enable_content option to Register() D-Bus method (jhnidek@redhat.com)
  - Added refresh() method to entitlement service (jhnidek@redhat.com)
  - Fixed issue with status cache (jhnidek@redhat.com)
  - Add information about content access mode to consumer (jhnidek@redhat.com)
  - 2024929: build: fix build on 'build' target (ptoscano@redhat.com)
  - 2023391: libdnf: respect environment CFLAGS (ptoscano@redhat.com)
  - Drop unused ssl_verify_depth config option (ptoscano@redhat.com)
  - tests: drop test_po_files.py (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.24-1
changelog:
  - 2023430: Cockpit: another improvement of curtain view (jhnidek@redhat.com)
  - environments: fix list for account in env-less org (ptoscano@redhat.com)
  - Reverting disabling AutoAttach() and PoolAttach() in SCA mode
    (jhnidek@redhat.com)
  - 2023430: cockpit: improve handling of main curtain view (ptoscano@redhat.com)
  - Squelch DeprecationWarning's when importing pyinotify (ptoscano@redhat.com)
  - Drop tox.ini, no more needed now (ptoscano@redhat.com)
  - flake8: improve, and integrate bits from tox.ini (ptoscano@redhat.com)
  - flake8: misc fixes in tito/tests (ptoscano@redhat.com)
  - 2035662: facts: tweak message for dmidecode warnings (ptoscano@redhat.com)
  - facts: improve/tweak logging of warnings (ptoscano@redhat.com)
  - jenkins: use custom settings for the RH internal npmjs repo
    (ptoscano@redhat.com)
  - jenkins: switch away from readFile() (ptoscano@redhat.com)
  - jenkins: simplify script filenames & labels (ptoscano@redhat.com)
  - jenkins: remove old scripts (ptoscano@redhat.com)
  - ENT-4671: Improve debug logging to stdout (mhorky@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - ENT-4650: Remove python-six from build system (mhorky@redhat.com)
  - ENT-4093: Fix flake8 warning W605 (mhorky@redhat.com)
  - ENT-4618: Switch away from six.get_method_* (mhorky@redhat.com)
  - ENT-4414: Remove RhsmIconCache (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - ENT-4589: Switch away from six.reraise (mhorky@redhat.com)
  - 2041968: Update man and help for environments options (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.25-1
changelog:
  - 2046516: register: do not check environments w/ activation keys
    (ptoscano@redhat.com)
  - No-op refactor of RegisterCommand._process_environments()
    (ptoscano@redhat.com)
  - 1935446: Use updated cert with SHA-256 algorithm (jhnidek@redhat.com)
  - build: pin pytest to < 7 (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)


author: Christopher Snyder <csnyder@redhat.com> 1.29.26-1
changelog:
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (German) (atalanttore@googlemail.com)
  - Revert "1935446: Use updated cert with SHA-256 algorithm"
    (csnyder@redhat.com)


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1938876 - review of important potential issues detected by static analyzers in sssd-2.4.1-1.el9
  - Resolves: rhbz#1942277 - Wrong default debug level of sssd tools


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013578 - Rebase to Samba 4.15.3
  - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2039154 - Fix CVE-2021-20316
  - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x
  - resolves: #2044239 - [smb] Segmentation fault when joining the domain
  - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
  - resolves: #2044255 - Fix CVE-2021-43566


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2046129 - Fix CVE-2021-44141
  - resolves: #2046154 - Fix CVE-2021-44142
  - resolves: #2044405 - Fix printing no longer works on Windows 7
  - resolves: #2049485 - Fix systemd notifications
  - resolves: #2049604 - Disable NTLMSSP for ldap client connections


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-101
changelog:
  - resolves: #2050111 - [RFE] Change change password change prompt phrasing
  - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-8
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867
  - pkcs12 export broken in FIPS mode
  - Resolves: rhbz#2049265


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-17
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Skipping 3.0.1-16 due to version numbering confusion with the RHEL-9.0 branch
  - Resolves: rhbz#2062640


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.0-1
changelog:
  - Rebase to release 1.5.0
  - Rebase to pam-redhat-1.1.4
  - Remove pam_cracklib, pam_tally and pam_tally2
  - spec file cleanup


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-1
changelog:
  - Rebase to release 1.5.1
  - fix CVE-2020-27780: authentication bypass when the user doesn't exist
    and root password is blank (#1901173)


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Jakub Jelen <jjelen@redhat.com> - 1.9.4-1
changelog:
  - Rebase to current version from Fedora (#2017828)
  - Use of upstrea polkit policy preventing unneeded prompts


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Christian Heimes <cheimes@redhat.com> - 2.1.0-3
changelog:
  - Add bconds for extras require trio, curio, and doh
  - Move trio and curio backend modules into extras subpackages
  - Enable python3-dns+curio meta package
  - Skip failing test testCanonicalNameDangling


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 234-11
changelog:
  - Subpackage python2-systemd has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-8
changelog:
  - Support hash v8 databases from BDB < 4.6 (#1965147)
  - Ensure ELF files get stripped when debuginfo is disabled (#1999009)
  - Actually honor libarchive bcond at configure time (#1999012)
  - Unbreak checking of installed rich dependencies (#2015407)
  - Rebuild against soname bump in ima-evm-utils (#2026079)
  - Fix IMA signature lengths assumed constant (#2018937)
  - Validate and require subkey binding sigs on PGP pubkeys (#1943724)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-10
changelog:
  - Address covscan issues in binding sigs validation patch (#1943724)
  - Bump hash for rpmdb cookie to SHA256 for FIPS (#2048455)
  - Add --path query option (#2037352)
  - Skip recorded symlinks in --setperms (#2025906)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-11
changelog:
  - Fix IMA signature lengths assumed constant, take III (#2018937)
  - Fix regression reading rpm v3 and other rare packages (#2037186)
  - Fix spurious %transfiletriggerpostun execution (#2023692)


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Vladis Dronov <vdronov@redhat.com> - 6.12-4
changelog:
  - Allow rngd to run as non-privledged user (bz 1965318)
  - Update the rngd.service file
  - Add 3 small upstream patches fixing issues


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.18-1
changelog:
  - Allow fetchmail search cgroup directories
  Resolves: rhbz#2015118
  - Add the auth_read_passwd_file() interface
  Resolves: rhbz#2014611
  - Allow redis-sentinel execute a notification script
  Resolves: rhbz#2014611
  - Support new PING_CHECK health checker in keepalived
  Resolves: rhbz#2014423


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.19-1
changelog:
  - Allow redis get attributes of filesystems with extended attributes
  Resolves: rhbz#2014611
  - Allow dirsrv read slapd tmpfs files
  Resolves: rhbz#2015928
  - Revert "Label /dev/shm/dirsrv/ with dirsrv_tmpfs_t label"
  Resolves: rhbz#2015928
  - Allow login_userdomain open/read/map system journal
  Resolves: rhbz#2017838
  - Allow login_userdomain read and map /var/lib/systemd files
  Resolves: rhbz#2017838
  - Allow nftables read NetworkManager unnamed pipes
  Resolves: rhbz#2023456
  - Allow xdm watch generic directories in /var/lib
  Resolves: rhbz#1960010
  - Allow xdm_t watch generic pid directories
  Resolves: rhbz#1960010


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.20-1
changelog:
  - Allow dnsmasq watch /etc/dnsmasq.d directories
  Resolves: rhbz#2029866
  - Label /usr/lib/pcs/pcs_snmp_agent with cluster_exec_t
  Resolves: rhbz#2029316
  - Allow lldpd use an snmp subagent over a tcp socket
  Resolves: rhbz#2028561
  - Allow smbcontrol use additional socket types
  Resolves: rhbz#2027751
  - Add write permisson to userfaultfd_anon_inode_perms
  Resolves: rhbz#2027660
  - Allow xdm_t watch generic directories in /lib
  Resolves: rhbz#1960010
  - Allow xdm_t watch fonts directories
  Resolves: rhbz#1960010
  - Label /dev/ngXnY and /dev/nvme-subsysX with fixed_disk_device_t
  Resolves: rhbz#2027994
  - Add hwtracing_device_t type for hardware-level tracing and debugging
  Resolves: rhbz#2029392
  - Change dev_getattr_infiniband_dev() to use getattr_chr_files_pattern()
  Resolves: rhbz#2028791
  - Allow arpwatch get attributes of infiniband_device_t devices
  Resolves: rhbz#2028791
  - Allow tcpdump and nmap get attributes of infiniband_device_t
  Resolves: rhbz#2028791


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.21-1
changelog:
  - Remove the lockdown class from the policy
  Resolves: rhbz#2017848
  - Revert "define lockdown class and access"
  Resolves: rhbz#2017848
  - Allow gssproxy access to various system files.
  Resolves: rhbz#2026974
  - Allow gssproxy read, write, and map ica tmpfs files
  Resolves: rhbz#2026974
  - Allow gssproxy read and write z90crypt device
  Resolves: rhbz#2026974
  - Allow sssd_kcm read and write z90crypt device
  Resolves: rhbz#2026974
  - Allow abrt_domain read and write z90crypt device
  Resolves: rhbz#2026974
  - Allow NetworkManager read and write z90crypt device
  Resolves: rhbz#2026974
  - Allow smbcontrol read the network state information
  Resolves: rhbz#2038157
  - Allow virt_domain map vhost devices
  Resolves: rhbz#2035702
  - Allow fcoemon request the kernel to load a module
  Resolves: rhbz#2034463
  - Allow lldpd connect to snmpd with a unix domain stream socket
  Resolves: rhbz#2033315
  - Allow ModemManager create a qipcrtr socket
  Resolves: rhbz#2036582
  - Allow ModemManager request to load a kernel module
  Resolves: rhbz#2036582
  - Allow sshd read sysctl files
  Resolves: rhbz#2036585


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.22-1
changelog:
  - Allow sshd read filesystem sysctl files
  Resolves: rhbz#2036585
  - Revert "Allow sshd read sysctl files"
  Resolves: rhbz#2036585


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.23-1
changelog:
  - Allow systemd nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Label /var/run/user/%{USERID}/dbus with session_dbusd_tmp_t
  Resolves: rhbz#2000039
  - Change /run/user/[0-9]+ to /run/user/%{USERID} for proper labeling
  Resolves: rhbz#2000039
  - Allow scripts to enter LUKS password
  Resolves: rhbz#2048521
  - Allow system_mail_t read inherited apache system content rw files
  Resolves: rhbz#2049372
  - Add apache_read_inherited_sys_content_rw_files() interface
  Related: rhbz#2049372
  - Allow sanlock get attributes of filesystems with extended attributes
  Resolves: rhbz#2047811
  - Associate stratisd_data_t with device filesystem
  Resolves: rhbz#2039974
  - Allow init read stratis data symlinks
  Resolves: rhbz#2039974
  - Label /run/stratisd with stratisd_var_run_t
  Resolves: rhbz#2039974
  - Allow domtrans to sssd_t and role access to sssd
  Resolves: rhbz#2039757
  - Creating interface sssd_run_sssd()
  Resolves: rhbz#2039757
  - Fix badly indented used interfaces
  Resolves: rhbz#2039757
  - Allow domain transition to sssd_t
  Resolves: rhbz#2039757
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  Resolves: rhbz#2039759
  - Allow local_login_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Allow xdm_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Make cupsd_lpd_t a daemon
  Resolves: rhbz#2039449
  - Label utilities for exFAT filesystems with fsadm_exec_t
  Resolves: rhbz#1972225
  - Dontaudit sfcbd sys_ptrace cap_userns
  Resolves: rhbz#2040311


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.24-1
changelog:
  - Allow tumblerd write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain create session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gkeyringd_domain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow systemd-logind delete session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gdm-x-session write to session dbus tmp sock files
  Resolves: rhbz#2000039
  - Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
  Resolves: rhbz#2039453
  - Label exFAT utilities at /usr/sbin
  Resolves: rhbz#1972225


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.25-1
changelog:
  - Allow systemd watch unallocated ttys
  Resolves: rhbz#2054150
  - Allow alsa bind mixer controls to led triggers
  Resolves: rhbz#2049732
  - Allow alsactl set group Process ID of a process
  Resolves: rhbz#2049732
  - Allow unconfined to run virtd bpf
  Resolves: rhbz#2033504


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.26-1
changelog:
  - Remove permissive domain for insights_client_t
  Resolves: rhbz#2055823
  - New policy for insight-client
  Resolves: rhbz#2055823
  - Allow confined sysadmin to use tool vipw
  Resolves: rhbz#2053458
  - Allow chage domtrans to sssd
  Resolves: rhbz#2054657
  - Remove label for /usr/sbin/bgpd
  Resolves: rhbz#2055578
  - Dontaudit pkcsslotd sys_admin capability
  Resolves: rhbz#2055639
  - Do not change selinuxuser_execmod and selinuxuser_execstack
  Resolves: rhbz#2055822
  - Allow tuned to read rhsmcertd config files
  Resolves: rhbz#2055823


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.27-1
changelog:
  - Allow ModemManager connect to the unconfined user domain
  Resolves: rhbz#2000196
  - Label /dev/wwan.+ with modem_manager_t
  Resolves: rhbz#2000196
  - Allow systemd-coredump userns capabilities and root mounton
  Resolves: rhbz#2057435
  - Allow systemd-coredump read and write usermodehelper state
  Resolves: rhbz#2057435
  - Allow sysadm_passwd_t to relabel passwd and group files
  Resolves: rhbz#2053458
  - Allow systemd-sysctl read the security state information
  Resolves: rhbz#2056999
  - Remove unnecessary /etc file transitions for insights-client
  Resolves: rhbz#2055823
  - Label all content in /var/lib/insights with insights_client_var_lib_t
  Resolves: rhbz#2055823
  - Update insights-client policy
  Resolves: rhbz#2055823
  - Update insights-client: fc pattern, motd, writing to etc
  Resolves: rhbz#2055823
  - Update specfile to buildrequire policycoreutils-devel >= 3.3-5
  - Add modules_checksum to %files


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-3
changelog:
  - getsubids: provide system binary and man page. Resolves: #2013015
  - useradd: generate home and mail directories with selinux user attribute. Resolves: #1993081
  - useradd: revert fix memleak of grp. Resolves: #2020238
  - groupdel: fix SIGSEGV when passwd does not exist. Resolves: #2024834
  - pwck: fix segfault when calling fprintf()
  - newgrp: fix segmentation fault
  - Clean spec file: organize dependencies and move License location


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-5
changelog:
  - [clean,hostname_parser] Source /etc/hosts for obfuscation
    Resolves: bz2024893
  - [clean, hostname] Fix unintentionally case sensitive
    Resolves: bz2024892
  - [redhat] update SFTP API version to v2
    Resolves: bz2025611


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-8
changelog:
  - [rhui] New log folder
    Resolves: bz2031777
  - nvidia]:Patch to update nvidia plugin for GPU info
    Resolves: bz2034001
  - [hostname] Fix edge case for new hosts in a known subdomain
    Resolves: bz2024893


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-9
changelog:
  - add oc transport, backport various PRs for OCP
    Resolves: bz2037350
  - [report] Provide better warning about estimate-mode
    Resolves: bz2011537
  - [hostname] Fix loading and detection of long base domains
    Resolves: bz2024893


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-12
changelog:
  - [foreman] Use psql-msgpack-decode wrapper for dynflow >= 1.6
    Resolves: bz2043104
  - [virsh] Call virsh commands in the foreground / with a TTY
    Resolves: bz2041855
  - [ovn_central] Account for Red Hat ovn package naming
    Resolves: bz2043488
  - [clean,parsers] Build regex lists for static items only once
    Resolves: bz2037350


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2037350
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054883
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055548
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz2011537
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2043488


author: Pavel Moravec <pmoravec@redhat.com> = 4.3-1
changelog:
  - Rebase on upstream 4.3
    Resolves: 2055003
  - [sapnw] Fix IndexError exception
    Resolves: 2065551
  - [subscription_manager] collect syspurpose data via sub-man
    Resolves: 2002333
  - [Plugin, utilities] Allow writing command output directly to disk
    Resolves: 2065564
  - [Ceph] Add support for containerized Ceph setup
    Resolves: 2065562
  - [unbound] Add new plugin for Unbound DNS resolver
    Resolves: 2065560
  - [discovery] Add new discovery plugin
    Resolves: 2065558
  - [system] Collect glibc tuning decisions
    Resolves: 2032913


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: John Kacur <jkacur@redhat.com> - 0.15-2
changelog:
  - Remove python3-schedutils from the Requires in the spec file
  - Update the URL in the spec file
  Resolves: rhbz#1890541


author: John Kacur <jkacur@redhat.com> - 0.16-5
changelog:
  - Make it clear in online help and man pages that --include and --isolate
    affect IRQs as well as threads
  Resolves: rhbz#2022142


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.17.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003838
    - cpu-partitioning: fixed no_balance_cores on newer kernels
      resolves: rhbz#1874596


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003838
    - tuned-gui: fixed creation of new profile


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d including changes from tzdata-2020c
    - Palestine will end summer time on 2020-10-24 rather than the
      predicted 2020-10-31.
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Patsy Griffin <patsy@redhat.com> - 2021c-1
changelog:
  - Rebase to tzdata-2021c - supersedes tzdata-2021b
    - Revert most of 2021b changes to 'backward'.
    - Fix 'zic -b fat' bug in pre-1970 32-bit data.
    - Fix two Link line typos.
    - Distribute SECURITY file.
    - Includes changes in tzdata-2021b:
    - Jordan now starts DST on February's last Thursday.
    - Samoa no longer observes DST.
    - Merge more location-based Zones whose timestamps agree since 1970.
    - Move some backward-compatibility links to 'backward'.
    - Rename Pacific/Enderbury to Pacific/Kanton.
    - Correct many pre-1993 transitions in Malawi, Portugal, etc.
    - zic now creates each output file or link atomically.
    - zic -L no longer omits the POSIX TZ string in its output.
    - zic fixes for truncation and leap second table expiration.
    - zic now follows POSIX for TZ strings using all-year DST.
    - Fix some localtime crashes and bugs in obscure cases.
    - zdump -v now outputs more-useful boundary cases.
    - tzfile.5 better matches a draft successor to RFC 8536.


author: Patsy Griffin <patsy@redhat.com> - 2021e-1
changelog:
  - Rebase to tzdata-2021e - supersedes tzdata-2021d
    - Pacific/Fiji suspended DST for the 2021/2022 season.
    - 'zic -r' now marks unspecified timestamps with "-00".
    - Palestine will fall back 2021-10-29 at 01:00, rather
      than the predicted 2021-10-30.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-56
changelog:
  - Use the C crc implementation instead of the asm (i686 only, other arches already use C)
  Related: rhbz#2045075


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Jiri Kucera <jkucera@redhat.com> - 1.114-3
changelog:
  - Do not use fexecve
    Script executed via fexecve has a file descriptor number in
    argv[0]. This results in unexpected output: when displaying
    the script help, a user see "Usage: <number> [options]"
    instead of "Usage: <scriptname> [options]".
    Resolves: #1984417


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028342 - CVE-2021-3984 vim: illegal memory access when C-indenting could lead to Heap Buffer Overflow [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-9
changelog:
  - 2028431 - CVE-2021-4019 vim: heap-based buffer overflow in find_help_tags() in src/help.c [rhel-9.0]


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-10
changelog:
  - CVE-2021-4193 vim: vulnerable to Out-of-bounds Read
  - CVE-2021-4192 vim: vulnerable to Use After Free


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


