# changelog

author: Eduard Abdullin <eabdullin@almalinux.org> - 1:1.22.1-3.1.alma.1
changelog:
  - Show correct AlmaLinux logo on default error pages (Thanks to metalefty)
    Resolves: https://bugs.almalinux.org/view.php?id=415
  - Debrand for AlmaLinux


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-4
changelog:
  - Resolves: #2170808 - Running nginx with systemctl and entering ssl
    private key's pass phrase
  - added new ssl_pass_phrase_dialog directive which enables setting
    external program for entering password for encrypted private key


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12736 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-5
changelog:
  - Resolves: RHEL-12737 - nginx:1.22/nginx: HTTP/2: Multiple HTTP/2 enabled web
    servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.22.1-8.1
changelog:
  - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may
    cause denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-4.1
changelog:
  - Resolves: RHEL-84478 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5
changelog:
  - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause
    denial of service (CVE-2024-7347)


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.24.0-5.1
changelog:
  - Resolves: RHEL-146526 - nginx:1.24/nginx: NGINX: Data injection via
    man-in-the-middle attack on TLS proxied connections (CVE-2026-1642)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.26.3-2
changelog:
  - nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied
    connections (CVE-2026-1642)


author: Matej Focko <mfocko@redhat.com> - 1.2.14-1
changelog:
  - New release 1.2.14 (Gris Ge)
  - bond: support changing bond mode (Gris Ge)
  - Reorganize the code structure (Gris Ge)
  - CI: Enable VRF and ethool pause test (Gris Ge)
  - CI: Upgrade the version of github action tasks (Gris Ge)
  - test: Fix ethtool link mode test on Ubuntu (Gris Ge)
  - Github CI: Install extra module of running kernel (Gris Ge)
  - macsec: add base_iface property (Fernando Fernandez Mancera)
  - macsec: add MACsec interface support (Fernando Fernandez Mancera)
  - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera)


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Ana Cabral <acabral@redhat.com> - 2.0.0-0.4.alpha3
changelog:
  - Upgrade to 2.0.0 alpha 3. Resolves: RHBZ#1996575
  - Remove connection renaming behaviour. Resolves: RHBZ#1998222
  - Add prefixes to OVS bridges and interfaces connections. Resolves: RHBZ#1998218
  - Improve OVS bridge start with nmstate. Resolves: RHBZ#1660250


author: Gris Ge <fge@redhat.com> - 2.2.22-1
changelog:
  - Use hash value to mark applied yml files at nmstatectl service. RHEL-19778
  - Support SRIOV VLAN protocol. RHEL-16487


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.23-1
changelog:
  - Upgrade to 2.2.23
  - Support type, hostaddrfamily and clientaddrfamily options in IPSec. RHEL-21354


author: Gris Ge <fge@redhat.com> - 2.2.24-1
changelog:
  - Upgrade to 2.2.24
  - Fix modification of ipsec connection. RHEL-23008
  - Fix nmstate.service on applied file. RHEL-24718


author: Gris Ge <fge@redhat.com> - 2.2.27-1
changelog:
  - N/A

   - Support TCP congestion window(cwnd) in route. (59f99632)
   - Support query interface driver. (67817c23)
   - New API to generate changed state. (fe5327a2)

   - Include driver information for `persist-nic-names` subcommand. (1129e46b)
   - nm: Protect global DNS config in checkpoint. (881373ba)
   - route rule: Append rule instead of overriding when iface defined. (88d3d3ef)
  - Resolves RHEL-19409


author: Gris Ge <fge@redhat.com> - 2.2.33-1
changelog:
  - Upgrade to 2.2.33
  - Fix validation of controller overbook. RHEL-40683
  - Support DNS and route in kernel mode. RHEL-37665


author: Gris Ge <fge@redhat.com> - 2.2.35-1
changelog:
  - Upgrade to 2.2.35
  - Fix gen_diff on VLAN ID change. RHEL-38623
  - Fix Nmpolicy on mac-address identifier. RHEL-54292
  - Fix reapply. RHEL-50556


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Fix gc mode on blackhole route. RHEL-58666
  - Only search desired interface for storing route rule. RHEL-60261


author: Wen Liang <wenliang@redhat.com> - 2.2.39-1
changelog:
  - Upgrade to 2.2.39
  - Fix VLAN interface being removed unnecessarily due to route mismatches triggering deactivations. RHEL-65031


author: Íñigo Huguet <ihuguet@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Provide an option to disable only nmstate log in python API (RHEL-76316)
  - Remove down up workaround for route removal in Nmstate (RHEL-75151)


author: Gris Ge <fge@redhat.com> - 2.2.36-1
changelog:
  - Upgrade to 2.2.36
  - Support route source. RHEL-56258
  - Fix setting empty MPTCP flags. RHEL-38607
  - Fix gc mode on blackhole route. RHEL-56727
  - Support ipsec require-id-on-certificate. RHEL-50696
  - Reselect iface DNS if desired. RHEL-56557


author: Gris Ge <fge@redhat.com> - 2.2.38-1
changelog:
  - Upgrade to 2.2.38
  - Preserve current IP setting for multiconnect profile. RHEL-61890
  - Fix profile name changing. RHEL-59239
  - IPvlan support. RHEL-43438
  - Handle ipv6.method: ignore. RHEL-58406


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 2.2.40-1
changelog:
  - Upgrade to 2.2.40
  - Do not deactivate connection when removing routes. RHEL-70138
  - Use specific libnmstate logger. RHEL-72016
  - Do not deactivate connection if mptcp flags didn't change. RHEL-53211


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41
  - Fix the lose of OVS DB system-id. RHEL-78652
  - Support overriding interface config. RHEL-59935


author: Gris Ge <fge@redhat.com> - 2.2.41-1
changelog:
  - Upgrade to 2.2.41.
  - Support nm connection with empty connection.interface-name (RHEL-82661)
  - Fix ovsdb purging issue (RHEL-79176)


author: Wen Liang <wenliang@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support ethtool Forward Error Correction (FEC). RHEL-80786
  - Support nm connection with empty connection.interface-name. RHEL-82662


author: Mingyu Shi <mshi@redhat.com> - 2.2.43-1
changelog:
  - Upgrade to 2.2.43
  - Support for vlan-egress-priority-map configuration. RHEL-67631
  - Support FEC. RHEL-80725
  - Support quickack. RHEL-80418


author: Gris Ge <fge@redhat.com> - 2.2.44-1
changelog:
  - Upgrade to 2.2.44
  - Refer route next hop interface by MAC. RHEL-32495
  - Support reapply on mac-ref interface. RHEL-87794


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-96176
  - Support nmpolicy against down iface. RHEL-88992
  - Support removal VLAN connection with empty ifname. RHEL-93145


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Fix SRIOV VF reference. RHEL-93179
  - Apply dispatch changes first. RHEL-101741


author: Gris Ge <fge@redhat.com> - 2.2.46-1
changelog:
  - Upgrade to 2.2.46
  - Store DNS to both iface and global DNS. RHEL-91291
  - Support nmpolicy against down iface. RHEL-88989
  - Support removal VLAN connection with empty ifname. RHEL-93146


author: Gris Ge <fge@redhat.com> - 2.2.48-1
changelog:
  - Upgrade to 2.2.48
  - Validate OVN bridge mapping. RHEL-85787
  - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784
  - Support matching by PCI adress. RHEL-88993
  - Apply dispatch changes first. RHEL-101742
  - Fix SRIOV VF reference. RHEL-93180


author: Rahul Rajesh <rrajesh@redhat.com> - 2.2.49-1
changelog:
  - Upgrade to 2.2.49
  - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526
  - Fix setting DNS only with search or option. RHEL-104797


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support interface alternative names. RHEL-110777
  - Support IPv4 forwarding. RHEL-110786
  - Support IPSec `leftsendcert` option. RHEL-110633


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121109
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121990


author: Gris Ge <fge@redhat.com> - 2.2.52-1
changelog:
  - Upgrade to 2.2.52
  - Support IPSec `leftsendcert` option. RHEL-110634
  - Support interface alternative names. RHEL-110778


author: Gris Ge <fge@redhat.com> - 2.2.54-1
changelog:
  - Upgrade to 2.2.54.
  - Support matching interface via PCI address. RHEL-121110
  - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121991


author: Gris Ge <fge@redhat.com> - 2.2.57-1
changelog:
  - Upgrade to 2.2.57
  - Use global DNS even for static IP with static DNS. (RHEL-126730)
  - Add libreswan leftprotoport and rightprotoport support. (RHEL-130911


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
    Resolves: CVE-2022-29244


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.18.1-2
changelog:
  - Add back libs and v8-devel subpackages
  - Related: RHBZ#2121126
  - Record previously fixed CVE
  - Resolves: CVE-2021-44906


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.19.1-1
changelog:
  - Rebase to 16.19.1
  - Resolves: rhbz#2153714
  - Resolves: CVE-2023-23918 CVE-2023-23919 CVE-2023-23936 CVE-2023-24807 CVE-2023-23920
  - Resolves: CVE-2022-25881 CVE-2022-4904


author: Jan Staněk <jstanek@redhat.com> - 1:16.19.1-2
changelog:
  - Update bundled c-ares to 1.19.1
    Resolves: CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.1-1
changelog:
  - Rebase to 16.20.1
    Resolves: rhbz#2188291
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2177781


author: Jan Staněk <jstanek@redhat.com> - 1:16.20.2-5
changelog:
  - Backport patches for several CVEs.
    Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182


author: Jan Staněk <jstanek@redhat.com> - 1:16.14.0-5
changelog:
  - Unify configure calls into single command
  - Refactor bootstrap-related parts
  - Decouple dependency bundling from bootstrapping


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.7.0-1
changelog:
  - Update to latest release
  - Resolves CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215
  - Resolves CVE-2022-29244
  - Resolves: RHBZ#2111009


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.8.0-1
changelog:
  - Update to latest release
  - Resolves: RHBZ#2111009
  - Provide undici and cjs-module-lexer + wasi-sdk sources
  - Resolves: RBHZ#2111861


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.14.2-1
changelog:
  - Rebase to 18.14.2
  - Resolves: #2159389
  - Resolves: CVE-2022-25881, CVE-2022-4904, CVE-2023-23936, CVE-2023-24807
  - Resolves: CVE-2023-23918, CVE-2023-23919, CVE-2023-23920


author: Jan Staněk <jstanek@redhat.com> - 1:18.16.1-1
changelog:
  - Rebase to 18.16.1
    Resolves: rhbz#2188292 rhbz#2187683
    Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
  - Replace /usr/etc/npmrc symlink with builtin configuration
    Resolves: rhbz#2222285


author: Jan Staněk <jstanek@redhat.com> - 1:18.17.1-1
changelog:
  - Rebase to version 18.17.1
    Resolves: rhbz#2228940
    Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559
  - Specify proper OpenSSL configuration section build
    Related: rhbz#2226726


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:18.18.2-1
changelog:
  - Rebase to 18.18.2 (Security release)
  - Switch icu from zip to tgz
  - Fixes #2228925, CVE-2023-45143, CVE-2023-44487, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fix FIPS handling of the cmd-line options (RHBZ#2226726)
  - Resolves: RHEL-26695 RHEL-26009 RHEL-26690


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:18.19.1-1
changelog:
  - Rebase to version 18.19.1
  - Fixes: CVE-2024-21892 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 (medium)


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.0-1
changelog:
  - Update to v20.5.0
  - Remove dtrace support
  - bcond corepack, so we don't provide it by default
  - Decrease debuginfo verbosity for all arches
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.5.1-1
changelog:
  - Rebase to new security release
  - Address CVE-2023-32002, CVE-2023-32004, CVE-2023-32558 (high)
  - Address CVE-2023-32006, CVE-2023-32559 (medium)
  - Address CVE-2023-32005, CVE-2023-32003 (low)
  - Resolves: #2186717
  - Resolves RHELPLAN-155639


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:20.8.1-1
changelog:
  - Update node and nghttp
  - Add fips patch
  - Fixes CVE-2023-44487 (nghttp)
  - Fixes CVE-2023-45143, CVE-2023-39331, CVE-2023-39332, CVE-2023-38552, CVE-2023-39333


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Resolves: RHEL-26694 RHEL-26684 RHEL-26687 RHEL-26010 RHEL-26597 RHEL-26689 RHEL-26022


author: Lukas Javorsky <ljavorsk@redhat.com> - 1:20.11.1-1
changelog:
  - Rebase to version 20.11.1
  - Fixes: CVE-2024-21892 CVE-2024-21896 CVE-2024-22017 CVE-2024-22019 (high)
  - Fixes: CVE-2023-46809 CVE-2024-21890 CVE-2024-21891 (medium)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes: CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes: CVE-2024-25629 (c-ares)


author: Jan Staněk <jstanek@redhat.com> - 1:20.12.2-1
changelog:
  - Rebase to version 20.12.0
    Fixes CVE-2024-27983 CVE-2024-27982 CVE-2024-22025 (node)
    Fixes CVE-2024-25629 (c-ares)


author: Andrei Radchenko <aradchen@redhat.com>
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76536 RHEL-76364


author: Andrei Radchenko <aradchen@redhat.com> - 1:20.18.2-1
changelog:
  - Update to version 20.18.2
    Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76363 RHEL-76554 RHEL-76540


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76360


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-83013
  - Disable npm update notifications for users
    Resolves: RHEL-81155


author: Jan Staněk <jstanek@redhat.com> - 1:22.13.1-1
changelog:
  - Update to version 22.13.1
    Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150
    Resolves: RHEL-76354


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81079


author: Andrei Radchenko <aradchen@redhat.com> - 1:22.13.1-2
changelog:
  - Remove obsolete lua pretransaction script from spec file
    Resolves: RHEL-81119
  - Disable npm update notifications for users
    Resolves: RHEL-81158


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 2.0.15-1
changelog:
  - Resolves: RHBZ#2005419
  - Resolves CVE-2020-28469
  - Rebase to newest version
  - Change source to npmjs.com


author: Jan Staněk <jstanek@redhat.com> - 2.0.3-6
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469


author: Jan Staněk <jstanek@redhat.com> - 2.0.19-1
changelog:
  - Rebase to 2.0.19
    Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469
    Resolves: CVE-2020-7788


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-5
changelog:
  - FIPS 140-3 changes
  -  Reject Small RSA keys, 1024 bit keys are marked as FIP OK when verifying, reject
     signature keys by policy
  -  Allow applications to retrigger selftests on demand.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-6
changelog:
  - Remove debugging printf from a patch
  - increase the pbe cache size to handle reusing the same token key.


author: Bob Relyea <rrelyea@redhat.com> - 3.79.0-17
changelog:
  - fix consistency return errors. We shouldn't lock the FIPS
    token if the application asked for invalid DH parameters on
    on keygen.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-1
changelog:
  - Rebase to NSS-3.90
  - Rebase to NSPR-3.35
  - fix incorrect version values in the NSS spec file for FIPS


author: Bob Relyea <rrelyea@redhat.com> - 3.112.0-3
changelog:
  - restore CONCATENATE functions accidentally remvoed in the last patch
  - fix big endian issue in tstclnt and selfserv in certificate compression


author: Andreas Schneider <asn@redhat.com> - 1.1.11-8
changelog:
  - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install
                             smaller footprint


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jerry James <loganjerry@gmail.com> - 8.0.1-1
changelog:
  - Version 8.0.1
  - Add 0002-Catch-CompileException-in-test.patch to fix compilation of a test
  - Make generate-tarball.sh actually compress the tarball


author: Jindrich Novy <jnovy@redhat.com> - 1.2.5-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.5
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.6-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.6
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 1.2.8-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.8
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 1.2.9-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.10-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.11-1
changelog:
  - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
  - simplify spec
  - Resolves: RHEL-86603


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to
    https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.1
  - require crun >= 0.17


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Zuzana Miklankova <zmiklank@redhat.com> - 1.9.0~beta1-1
changelog:
  - Rebase to 1.9-beta1
  - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Ravindra Kumar <ravindrakumar@vmware.com> - 11.2.5-1
changelog:
  - Package new upstream version open-vm-tools-11.2.5-17337674.
  - libdnet dependency was removed in open-vm-tools 11.0.0. So,
    removed the stale BuildRequires for libdnet.


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-2.el9
changelog:
  - ovt-Fixes-necessary-to-build-open-vm-tools-with-newer-gt.patch [bz#1936382]
  - ovt-Update-spec-file-for-correct-build.patch [bz#1936382]
  - Resolves: bz#1936382
    ([ESXi][RHEL-9][FTBS] open-vm-tools not working with newer gtk libraries)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.2.5-4
changelog:
  - ovt-Fix-a-memory-leak-reported-by-a-partner-from-their-C.patch [bz#1954040]
  - Resolves: bz#1954040
    ([ESXi][RHEL9.0][open-vm-tools] Coverity detected an important defect in open-vm-tools-11.2.5 rebase)


author: Miroslav Rezanina <rezanin@redhat.com> - 11.3.0-1
changelog:
  - Rebase to 11.3.0 [bz#1974471]
  - Resolves: bz#1974471
    ([ESXi][RHEL9]Open-vm-tools release 11.3.0 has been released - please update for RHEL 9.0)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1
changelog:
  - Rebase to 11.3.5 [bz#2008243]
  - Resolves: bz#2008243
    ([ESXi][RHEL9]Open-vm-tools release 11.3.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 11.3.5-1.el9_0.1
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119285]
  - Resolves: bz#2119285
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.0-1
changelog:
  - Rebase to 12.0.0 [bz#2061193]
  - Resolves: bz#2061193
    ([ESXi][RHEL9]Open-vm-tools release 12.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-1
changelog:
  - Rebase to open-vm-tools 12.0.5 [bz#2090275]
  - Resolves: bz#2090275
    ([ESXi][RHEL9]Open-vm-tools release 12.0.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.0.5-2
changelog:
  - ovt-Properly-check-authorization-on-incoming-guestOps-re.patch [bz#2119286]
  - Resolves: bz#2119286
    (CVE-2022-31676 open-vm-tools: local root privilege escalation in the virtual machine [rhel-9.1.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.0-1
changelog:
  - Rebase to open-mv-tools 12.1.0 [bz#2121203]
  - Resolves: bz#2121203
    ([ESXi][RHEL9]Open-vm-tools release 12.1.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1
changelog:
  - Rebase to open-vm-tools 12.1.5 [bz#2150190]
  - Resolves: bz#2150190
    ([ESXi][RHEL9]Open-vm-tools release 12.1.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.1.5-1.el9_2.1
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2217081]
  - Resolves: bz#2217081
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-9.2.0.z])


author: Andrew Lukoshko <alukoshko@almalinux.org> - 12.1.5-1.el9_2.1.alma
changelog:
  - [CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-1
changelog:
  - Rebase to open-vm-tools 12.2.0 [bz#2177086]
  - Resolves: bz#2177086
    ([ESXi][RHEL9]open-vm-tools version 12.2.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-2
changelog:
  - ovt-Use-https-instead-of-http-for-documentation-links.patch [bz#2208160]
  - Resolves: bz#2208160
    ([ESXi][RHEL9] URL in service unit files are started from http instead of https)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.0-3
changelog:
  - ovt-Remove-some-dead-code.patch [bz#2215566]
  - Resolves: bz#2215566
    ([CISA Major Incident] CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module [rhel-br-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-1
changelog:
  - Rebaer to open-vm-tools 12.2.5
  - Resolves: bz#2214862
    ([ESXi][RHEL9]open-vm-tools version 12.2.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-2
changelog:
  - ovt-VGAuth-Allow-only-X509-certs-to-verify-the-SAML-toke.patch [bz#2236544]
  - Resolves: bz#2236544
    (CVE-2023-20900 open-vm-tools: SAML token signature bypass [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.2.5-3
changelog:
  - ovt-Provide-alternate-method-to-allow-expected-pre-froze.patch [RHEL-2446]
  - Resolves: RHEL-2446
    ([RHEL9.3][ESXi]Latest version of open-vm-tools breaks VM backups)


author: Eduard Abdullin <eabdullin@almalinux.org> - 12.2.5-3.2.alma.1
changelog:
  - File descriptor vulnerability in the open-vm-tools
   vmware-user-suid-wrapperx on Linux
  - Don't accept tokens with unrelated certs


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-1
changelog:
  - Rebase to 12.3.5-1 [RHEL-15058]
  - Fixed CVE-2023-34058 [RHEL-14653]
  - Fixed CVE-2023-34059 [RHEL-14687]
  - Resolves: RHEL-15058
    ([ESXi][RHEL9]open-vm-tools version 12.3.5 has been released - please rebase)
  - Resolves: RHEL-14653
    (CVE-2023-34058 open-vm-tools: SAML token signature bypass [rhel-9.4.0])
  - Resolves: RHEL-14687
    (CVE-2023-34059 open-vm-tools: file descriptor hijack vulnerability in the vmware-user-suid-wrapper [rhel-9.4.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.3.5-2
changelog:
  - ovt-Restart-tools-on-failure.patch [RHEL-15346]
  - Resolves: RHEL-15346
    (Add Restart=on-failure to vmtoolsd.service)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-1
changelog:
  - Rebase to 12.4.0 [RHEL-30341
  - Resolves: RHEL-30341
    ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.0-2
changelog:
  - ovt-Require-dbus-tools.patch [RHEL-35543]
  - Resolves: RHEL-35543
    ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.4.5-1
changelog:
  - Rebase to 12.4.5 [RHEL-45547]
  - Resolves: RHEL-45547
    ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1
changelog:
  - Rebase to 12.5.0 [RHEL-63096]
  - Resolves: RHEL-63096
    ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 12.5.0-1.el9_6.2
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117390]
  - Resolves: RHEL-117390
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.6.z])


author: Lili Du <ldu@redhat.com> - 13.0.0-1
changelog:
  - Rebase to 13.0.0 [RHEL-99158]
  - Resolves: RHEL-99158 
    ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)


author: Miroslav Rezanina <mrezanin@redhat.com> - 13.0.0-1.1
changelog:
  - ovt-Address-CVE-2025-41244.patch [RHEL-117392]
  - Resolves: RHEL-117392
    ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])


author: François Cami <fcami@fedoraproject.org> - 1.19.1-9
changelog:
  - Fix FTBFS (rhbz#1865148)
  - Set __cmake_in_source_build
  - BR qt5-qtbase-devel to keep the GUI frontend


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Karol Herbst <kherbst@redhat.com> - 3.0-0.20200512git5cc337c
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Bump CLHPP version to 2.0.11


author: Karol Herbst <kherbst@redhat.com> - 3.0-1.20200512gitd082d42
changelog:
  - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix
  - Rework CLHPP handling as file is not downloadable anymore
  - Bump CLHPP version to 2.0.12


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
  - The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Related: rhbz#2094159


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-2
changelog:
  - The client tools parameters '-h' and '-p' are still deprecated,
    but this release brings back the client tools options that
    were removed during the previous rebase.
    Resolves: RHEL-19384


author: Simon Pichugin <spichugi@redhat.com> - 2.6.6-3
changelog:
  - Use systemd-sysusers for ldap user and group
    Replace License with SPDX identifier
    Resolves: RHEL-5140


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-1
changelog:
  - Rebase to version 2.6.8 (RHEL-71053)
  - Avoid SSL context cleanup during library destruction (RHEL-56502)


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-4
changelog:
  - Fix potential invalid scan results in OpenSCAP (rhbz#2109485)
  - Remove oscap-remediate service (rhbz#2111358)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.7-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2159286)
  - Fix error when processing OVAL filters (rhbz#2126883)
  - Don't emit xmlfilecontent items if XPath doesn't match (rhbz#2138884)


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2217442)
  - Fix systemd* probes unit enumeration (rhbz#2219532)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.10-1
changelog:
  - Rebase to the latest upstream version (RHEL-29172)
  - Fix OVAL results file name (RHEL-7050)
  - Add ability to define a limit of collected items (RHEL-4141)
  - Add ability to refine rules in autotailor (RHEL-1477)
  - Improve the formatting of Blueprint remediations (RHEL-1476)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.11-1
changelog:
  - Upgrade to the latest upstream release (RHEL-76355)
  - Introduce "oscap-im", a tool for building hardened bootable container images
  - Fix RPM probes in bootable container images build environment (RHEL-55251)


author: Matthew Burket <mburket@redhat.com> - 1:1.3.13-1
changelog:
  - Upgrade to the latest upstream release (RHEL-133976)
  - Fix Filepath and Pattern Fields inversion (RHEL-104073)
  - Fix verbose flag (RHEL-53859)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-11
changelog:
  - Initialize crypto API only once (rhbz#2020044)
  - Add support for Blueprint remediations (rhbz#2020052)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.5-12
changelog:
  - Allow using local files instead of remote resources (rhbz#2015518)
  - Add an alternative source of hostname (rhbz#2021509)
  - Lower memory limits and improve their checking (rhbz#2022362)


author: Jan Černý <jcerny@redhat.com> - 1:1.3.6-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2041782)
  - Select and exclude groups of rules on the command line (rhbz#2020580, rhbz#2020581)
  - The boot-time remediation service for systemd's Offline Update mode


author: Evgenii Kolesnikov <ekolesni@redhat.com> - 1.3.8-1
changelog:
  - Upgrade to the latest upstream release (rhbz#2223356)
  - Fix systemd* probes unit enumeration (rhbz#2223981)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-26
changelog:
  - Fix one-byte overflow in SSH banner processing
    Resolves: rhbz#2138345
  - Fix double free() in error path
    Resolves: rhbz#2138347


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-28
changelog:
  - Do not try to use SHA1 for host key ownership proof when we don't support it server-side
    Resolves: rhbz#2088750


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-30
changelog:
  - Some non-terminating processes were listening on ports.
    Resolves: rhbz#2177768
  - On sshd startup, we check whether signing using the SHA1 for signing is
    available and don't use it when it isn't.
  - On ssh private key conversion we explicitly use SHA2 for testing RSA keys.
  - In sshd, when SHA1 signatures are unavailable, we fallback (fall forward :) )
    to SHA2 on host keys proof confirmation.
  - On a client side we permit SHA2-based proofs from server when requested SHA1
    proof (or didn't specify the hash algorithm that implies SHA1 on the client
    side). It is aligned with already present exception for RSA certificates.
  - We fallback to SHA2 if SHA1 signatures is not available on the client side
    (file sshconnect2.c).
  - We skip dss-related tests (they don't work without SHA1).
    Resolves: rhbz#2070163
  - FIPS compliance efforts for dh, ecdh and signing
    Resolves: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-31
changelog:
  - Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch:
  - Check return values
  - Use EVP API to get the size of DH
  - Add some log debug lines
  - Related: rhbz#2091694


author: Norbert Pocs <npocs@redhat.com> - 8.7p1-32
changelog:
  - Fix pkcs11 issue with the recent changes
  - Delete unnecessary log messages from previous compl-dh patch
  - Add ssh_config man page explanation on rhbz#2068423
  - Resolves: rhbz#2207793, rhbz#2209096


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-34.1
changelog:
  - Fix Terrapin attack (CVE-2023-48795)
    Resolves: RHEL-19764
  - Forbid shell metasymbols in username/hostname (CVE-2023-51385)
    Resolves: RHEL-19822


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-44
changelog:
  - Add extra help information on ssh early failure
    Resolves: RHEL-33809
  - Provide details on crypto error instead of "error in libcrypto"
    Resolves: RHEL-52293
  - Allow duplicate Subsystem directive
    Resolves: RHEL-47112


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-45
changelog:
  - Fix missing error codes set and invalid error code checks in OpenSSH. It
    prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
    is on (CVE-2025-26465).
    Resolves: RHEL-78700


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-47
changelog:
  - CVE-2025-61984: Reject usernames with control characters
    Resolves: RHEL-128401
  - CVE-2025-61985: Reject URL-strings with NULL characters
    Resolves: RHEL-128392


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-19
changelog:
  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-20
changelog:
  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-32
changelog:
  - `openssl ecparam -list_curves` lists only FIPS-approved curves in FIPS mode
  - Resolves: rhbz#2091929
  - Ciphersuites with RSA KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - In FIPS mode, signature verification works with keys of arbitrary size
    above 2048 bit, and only with 1024, 1280, 1536, 1792 bits for keys
    below 2048 bits
  - Resolves: rhbz#2091938


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089443
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2089439
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090361
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087234
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2086866


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087234


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2091977
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2086554
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2101346
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2085521
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098276


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2107530
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2103044
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2103044


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2112978


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115856
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115857
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2115858
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2115859
  - Zeroization according to FIPS-140-3 requirements
    Related: rhbz#2115861


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Resolves: rhbz#2115861
  - Add FIPS indicator for HKDF
    Resolves: rhbz#2118388


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2103289
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2051312
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2051312


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2102535


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102536
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2102537
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2102540
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2102541


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Related: rhbz#2102542
  - Add FIPS indicator for HKDF
    Related: rhbz#2114772


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-43
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-44
changelog:
  - SHAKE-128/256 are not allowed with RSA in FIPS mode
    Resolves: rhbz#2144010
  - Avoid memory leaks in TLS
    Resolves: rhbz#2144008
  - FIPS RSA CRT tests must use correct parameters
    Resolves: rhbz#2144006
  - FIPS-140-3 permits only SHA1, SHA256, and SHA512 for DRBG-HASH/DRBG-HMAC
    Resolves: rhbz#2144017
  - Remove support for X9.31 signature padding in FIPS mode
    Resolves: rhbz#2144015
  - Add explicit indicator for SP 800-108 KDFs with short key lengths
    Resolves: rhbz#2144019
  - Add explicit indicator for HMAC with short key lengths
    Resolves: rhbz#2144000
  - Set minimum password length for PBKDF2 in FIPS mode
    Resolves: rhbz#2144003
  - Add explicit indicator for PSS salt length in FIPS mode
    Resolves: rhbz#2144012
  - Clamp default PSS salt length to digest size for FIPS 186-4 compliance
    Related: rhbz#2144012
  - Forbid short RSA keys for key encapsulation/decapsulation in FIPS mode
    Resolves: rhbz#2145170


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-45
changelog:
  - Add support of X25519 and X448 "group" parameter in EVP_PKEY_CTX objects
    Resolves: rhbz#2149010
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2144012
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2144012


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-46
changelog:
  - Refactor OpenSSL fips module MAC verification
    Resolves: rhbz#2158412
  - Disallow SHAKE in RSA-OAEP decryption in FIPS mode
    Resolves: rhbz#2144010


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-47
changelog:
  - Fixed X.509 Name Constraints Read Buffer Overflow
    Resolves: CVE-2022-4203
  - Fixed Timing Oracle in RSA Decryption
    Resolves: CVE-2022-4304
  - Fixed Double free after calling PEM_read_bio_ex
    Resolves: CVE-2022-4450
  - Fixed Use-after-free following BIO_new_NDEF
    Resolves: CVE-2023-0215
  - Fixed Invalid pointer dereference in d2i_PKCS7 functions
    Resolves: CVE-2023-0216
  - Fixed NULL dereference validating DSA public key
    Resolves: CVE-2023-0217
  - Fixed X.400 address type confusion in X.509 GeneralName
    Resolves: CVE-2023-0286
  - Fixed NULL dereference during PKCS7 data verification
    Resolves: CVE-2023-0401


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-9
changelog:
  - Fix explicit FIPS indicator for X9.42 KDF when used with output lengths < 14 bytes
    Resolves: rhbz#2175864


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-11
changelog:
  - Add missing reference to patchfile to add explicit FIPS indicator to RSA
    encryption and RSASVE and fix the gettable parameter list for the RSA
    asymmetric cipher implementation.
    Resolves: rhbz#2179379


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-13
changelog:
  - Enforce using EMS in FIPS mode
    Resolves: rhbz#2157951
  - Fix excessive resource usage in verifying X509 policy constraints
    Resolves: rhbz#2186661
  - Fix invalid certificate policies in leaf certificates check
    Resolves: rhbz#2187429
  - Certificate policy check not enabled
    Resolves: rhbz#2187431
  - OpenSSL rsa_verify_recover key length checks in FIPS mode
    Resolves: rhbz#2186819


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-15.1
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2178030


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-16
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211396


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.7-16
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2188180


author: Clemens Lang <cllang@redhat.com> - 1:3.0.7-19
changelog:
  - Re-enable DHX keys in FIPS mode, disable FIPS 186-4 parameter validation and generation in FIPS mode
    Resolves: rhbz#2169757


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-20
changelog:
  - Fix possible DoS translating ASN.1 object identifiers
    Resolves: CVE-2023-2650
  - Release the DRBG in global default libctx early
    Resolves: rhbz#2211340


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13249
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14614
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14614
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15993
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-25
changelog:
  - Provide relevant diagnostics when FIPS checksum is corrupted
    Resolves: RHEL-5317
  - Don't limit using SHA1 in KDFs in non-FIPS mode.
    Resolves: RHEL-5295
  - Provide empty evp_properties section in main OpenSSL configuration file
    Resolves: RHEL-11439
  - Avoid implicit function declaration when building openssl
    Resolves: RHEL-1780
  - Forbid explicit curves when created via EVP_PKEY_fromdata
    Resolves: RHEL-5304
  - AES-SIV cipher implementation contains a bug that causes it to ignore empty
    associated data entries (CVE-2023-2975)
    Resolves: RHEL-5302
  - Excessive time spent checking DH keys and parameters (CVE-2023-3446)
    Resolves: RHEL-5306
  - Excessive time spent checking DH q parameter value (CVE-2023-3817)
    Resolves: RHEL-5308
  - Fix incorrect cipher key and IV length processing (CVE-2023-5363)
    Resolves: RHEL-13251
  - Switch explicit FIPS indicator for RSA-OAEP to approved following
    clarification with CMVP
    Resolves: RHEL-14083
  - Backport the check required by SP800-56Br2 6.4.1.2.1 (3.c)
    Resolves: RHEL-14083
  - Add missing ECDH Public Key Check in FIPS mode
    Resolves: RHEL-15990
  - Excessive time spent in DH check/generation with large Q parameter value (CVE-2023-5678)
    Resolves: RHEL-15954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-2
changelog:
  - Various provider-related imrovements necessary for PKCS#11 provider correct operations
    Resolves: rhbz#2142517
  - We should export 2 versions of OPENSSL_str[n]casecmp to be compatible with upstream
    Resolves: rhbz#2133809
  - Removed recommended package for openssl-libs
    Resolves: rhbz#2093804
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083879
  - Backport of ppc64le Montgomery multiply enhancement
    Resolves: rhbz#2130708
  - Fix explicit indicator for PSS salt length in FIPS mode when used with
    negative magic values
    Resolves: rhbz#2142087
  - Update change to default PSS salt length with patch state from upstream 
    Related: rhbz#2142087


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-6.1
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76755


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-7
changelog:
  - RFC7250 handshakes with unauthenticated servers don't abort as expected (CVE-2024-12797)
    Resolves: RHEL-76756


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.1-7
changelog:
  - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469
    CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420
    CVE-2025-69421 CVE-2026-22795 CVE-2026-22796
    Resolves: RHEL-142068
    Resolves: RHEL-142002
    Resolves: RHEL-142055
    Resolves: RHEL-142051
    Resolves: RHEL-142047
    Resolves: RHEL-142043
    Resolves: RHEL-142039
    Resolves: RHEL-142035
    Resolves: RHEL-142031
    Resolves: RHEL-142011
    Resolves: RHEL-142027
    Resolves: RHEL-142023


author: Benedikt Bongartz <bongartz@redhat.com> - 0.95.0
changelog:
  - add observability user that is part of the systemd-journal group
  - add opentelemetry collector config folder (`/etc/opentelemetry-collector/configs`)
  - add opentelemetry collector default config
  - add microshift manifests


author: Felix Kolwa <fkolwa@redhat.com> - 0.102.1-4
changelog:
  - Fix SELinux policy resource names
  - Use sources for SELinux resources in spec file
  - Bump revision


author: Felix Kolwa <fkolwa@redhat.com> - 0.107.0-1
changelog:
  - Version bump to 0.107.0
  - Reset release to 1
  - Update addresses the following CVEs:
  - CVE-2024-34155
  - CVE-2024-34156
  - CVE-2024-42368


author: Kseniia Nivnia <knivnia@redhat.com> - 0.107.0-2
changelog:
  - Bump revision
  - Update tarball name to match upstream
  - Upgrade the following tarball dependencies:
  - x/sys v0.23.0 to v0.29.0
  - x/crypto v0.26.0 to v0.32.0
  - x/net v0.28.0 to v0.33.0
  - x/sync v0.8.0 to v0.10.0
  - x/term v0.23.0 to v0.28.0
  - x/text v0.17.0 to v0.21.0
  - Update addresses the following CVEs:
  - CVE-2024-45338
  - CVE-2024-45337


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-3
changelog:
  - Bump revision
  - Update tarball golang from 1.21.0 to 1.22.11
  - Update addresses CVE-2024-45336
    Resolves: RHEL-79113


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-4
changelog:
  - Bump revision
  - Add runtime requirements for shadow-utils and util-linux to ensure successful creation of observability user on installation
  - Modify post-uninstallation stage to only delete delete the observability user on full uninstallation to prevent the user being deleted during upgrades
    Resolves: RHEL-81967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-5
changelog:
  - Bump revision
  - Update Golang v1.22.11 to v1.23.0
  - Add toolchain go1.23.7
  - Update x/oauth2 v0.22.0 to v0.27.0
  - Update addresses CVE-2025-22868
    Resolves: RHEL-81359


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-6
changelog:
  - Bump revision
  - Update expr v1.16.9 to v1.17.0
  - Remove explicit go toolchain dependency
  - Update addresses CVE-2025-29786
    Resolves: RHEL-83841


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-7
changelog:
  - Bump revision
  - Update go-jose v4.0.2 to v4.0.5
  - Update testify v1.9.0 to v1.10.0
  - Update addresses CVE-2025-27144
    Resolves: RHEL-82967


author: Conor Cowman <ccowman@redhat.com> - 0.107.0-8
changelog:
  - Bump revision
  - Update golang-jwt v5.2.1 to v5.2.2
  - Update addresses CVE-2025-30204
    Resolves: RHEL-85033


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-1
changelog:
  - Collector version update
  - Go version update to v1.23.9
  - Update addresses CVE-2025-22871
    Resolves: RHEL-90050


author: Kseniia Nivnia <knivnia@redhat.com> - 0.127.0-2
changelog:
  - Bump revision
  - Go version update to v1.24.4
  - Update addresses CVE-2025-4673
    Resolves: RHEL-105058


author: Kseniia Nivnia <knivnia@redhat.com> - 0.135.0-1
changelog:
  - Version bump to 0.135.0
  - Add systemd-journal group to Requires(pre)
  - Bump go-tpm-keyfiles
    Resolves: RHEL-119812


author: Eduard Abdullin <eabdullin@almalinux.org> - 118-1.alma.1
changelog:
  - Install AlmaLinux repositories
  - Add AlmaLinux support patch (Thanks @pastalian)
  - Remove libreport-rhel-bugzilla from package set


author: Gianluca Zuccarelli <gzuccare@redhat.com> - 132.2-3
changelog:
  - Fix json tailoring blueprint conversion
    Resolves: RHEL-111314
  - Fix unclosed logrus logging pipes
    Resolves: RHEL-102832
  - Update go-jose dependency
    Resolves: RHEL-82968 (CVE-2025-27144)


author: imagebuilder-bot <imagebuilder-bots+imagebuilder-bot@redhat.com> - 149-4
changelog:
  - Rebuilt to fix: 
    - CVE-2025-61726
    - CVE-2025-61728
    - CVE-2025-61729
    - CVE-2025-68121
    - RHEL-146868
    - RHEL-147086
    - RHEL-147371
    - RHEL-149626


author: Tomáš Hozza <thozza@redhat.com> - 76-2
changelog:
  - distro/rhel: add payload repos to os package set (rhbz#2177699)
  - Manifest: always set kernel options in grub2 stage (rhbz#2162299)


author: Matej Tyc <matyc@redhat.com> - 2.0.0-5
changelog:
  - Fix handling of content archives
    Resolves: rhbz#1996129
  - Fix handling of content fingerprint
    Resolves: rhbz#1993065
  - Fix crash when a previously selected hardening has been cancelled
    Resolves: rhbz#2014108
  - Pull latest translations


author: Matej Tyc <matyc@redhat.com> - 2.0.0-8
changelog:
  - Introduce unified help support
    Resolves: rhbz#2043512
  - Update translations
    Resolves: rhbz#2017374


author: Matej Tyc <matyc@redhat.com> - 2.0.0-9
changelog:
  - Introduce the firstboot remediation
    Resolves: rhbz#1999587
  - Add better error handling of installation using unsupported installation sources
    Resolves: rhbz#2042334


author: Matej Tyc <matyc@redhat.com> - 2.0.0-12
changelog:
  - Remove the firstboot remediation feature completely.
    We can't have it, while maintaining the standard UX.
    Resolves: rhbz#2065751


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 2.0.0-12.el9.ML.1
changelog:
  - Make MIRACLE LINUX 9 security contents the default (Patch1000)
  - Fix uninitialized variables in content_uri (Patch1001)


author: Matej Tyc <matyc@redhat.com> - 2.0.0-13
changelog:
  - Fix problems with handling multi-datastream archives
    Resolves: rhbz#2129846
  - Fix a crash when compulsively clicking in the GUI
    Resolves: rhbz#2127502


author: Jan Černý <jcerny@redhat.com> - 2.0.0-17
changelog:
  - Update translations (rhbz#2189526)
  - Fix tar file extraction (rhbz#2218875)
  - Fix conflict of tftp package with "network servers" group (rhbz#2172264)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210809-1
changelog:
  - Update for new release (v20210809) [bz#1970881]
  - Resolves: bz#1970881
    ([RHEL-9] virt-install --location fails with Could not find an installable distribution at URL '/var/lib/libvirt/images/boot.iso')


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 20230518-1.el9.ML.1
changelog:
  - Added miraclelinux-8.6 and miraclelinux-8.8, miraclelinux-9.2 xml file
  - Changed miraclelinux-9-unknown.xml file


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 20231215-1.el9.ML.1
changelog:
  - Added miraclelinux-8.6 and miraclelinux-8.8, miraclelinux-9.2, miraclelinux-9.2 xml file
  - Changed miraclelinux-9-unknown.xml file


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 20240701-2.el9.ML.1
changelog:
  - Added miraclelinux-8.6 and miraclelinux-8.8, miraclelinux-8.10,
          miraclelinux-9.2, miraclelinux-9.4 xml file
  - Changed miraclelinux-9-unknown.xml file


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 20250124-1.el9.ML.1
changelog:
  - Added miraclelinux-8.6 and miraclelinux-8.8, miraclelinux-8.10,
          miraclelinux-9.2, miraclelinux-9.4, miraclelinux-9.6 xml file
  - Changed miraclelinux-9-unknown.xml file


author: Victor Toso <victortoso@redhat.com> - 20250124-2
changelog:
  - Fix missing rhel 9.6 and related
    Resolves: RHEL-87787
  - Fix missing windows server 2025
    Resolves: RHEL-82513


author: Luca BRUNO <lucab@redhat.com> - 2021.3-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.3
    Resolves: rhbz#1981859


author: Luca BRUNO <lucab@redhat.com> - 2021.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2021.6
    Resolves: rhbz#2026931


author: Luca BRUNO <lucab@redhat.com> - 2022.2-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.2
    Resolves: rhbz#2070964


author: Luca BRUNO <lucab@redhat.com> - 2022.5-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.5
    Resolves: rhbz#2119815


author: Luca BRUNO <lucab@redhat.com> - 2022.6-1
changelog:
  - New upstream version
    https://github.com/ostreedev/ostree/releases/tag/v2022.6
    Resolves: rhbz#2134054


author: Colin Walters <walters@verbum.org> - 2023.1-4
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/2874/commits/de6fddc6adee09a93901243dc7074090828a1912
    Resolves: rhbz#2224081


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2023.1-7
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/2969/commits/402e04280b54c058ad47be99fe6a9326caf2ae00
    Resolves: rhbz#2230111


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2023.5-1
changelog:
  - https://github.com/ostreedev/ostree/releases/tag/v2023.5
    backport: https://github.com/ostreedev/ostree/commit/7f70614a1ac1950ebde3df0e26cc9ab1d72b2f1f
    Resolves: rhbz#2221997


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.2-2
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/3472
    Backport https://github.com/ostreedev/ostree/pull/3473
    Resolves: #RHEL-108923


author: Alex Macdonald <almacdon@redhat.com> - 1.2.2-3
changelog:
  - Remove osgi metadata patch0 that previously added a manifest
  - Include patch (courtesy of jkang) to package as a bundle instead of a jar
  - Update maven-compiler-plugin source/target version for builds in f33


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1.1
changelog:
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-150167


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1.1
changelog:
  - Use dbus signalling for systemd resource start/stop
  - Add an option to disable default remote node fencing behavior
  - Resolves: RHEL-92505
  - Resolves: RHEL-92513


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-14
changelog:
  - pam_lastlog: check localtime_r() return value. Resolves: #2130124
  - pam_faillock: clarify missing user faillock files after reboot. Resolves: #2126632
  - pam_faillock: avoid logging an erroneous consecutive login failure message. Resolves: #2126648


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-16
changelog:
  - libpam: use close_range() to close file descriptors. Resolves: RHEL-5099
  - fix formatting of audit messages. Resolves: RHEL-5100


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-18
changelog:
  - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727
  - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.3.1-19
changelog:
  - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS
    situations. CVE-2024-22365. Resolves: RHEL-21244


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-21
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879


author: Diaa Sami <disami@redhat.com> - 1.5.1-21
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62880


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-22
changelog:
  - pam_unix: always run the helper to obtain shadow password file entries.
    CVE-2024-10041. Resolves: RHEL-62879
  - pam_access: always match local address and clarify LOCAL keyword behaviour.
    Resolves: RHEL-23631 and RHEL-39943


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-1
changelog:
  - Rebase to release 1.5.1
  - fix CVE-2020-27780: authentication bypass when the user doesn't exist
    and root password is blank (#1901173)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.0-1
changelog:
  - Rebase to release 1.5.0
  - Rebase to pam-redhat-1.1.4
  - Remove pam_cracklib, pam_tally and pam_tally2
  - spec file cleanup


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.42.2-3
changelog:
  - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use
    cairomm1.0, which may be a virtual Provides, in the manual lib Requires


author: Stefano Brivio <sbrivio@redhat.com> - 0^20221015.gb3f3591-1
changelog:
  - Add versioning information
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2022_09_29.06aa26f..2022_10_15.b3f3591


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-2
changelog:
  - udp: Actually use host resolver to forward DNS queries (rhbz#2177075)
  - conf: Split add_dns{4,6}() out of get_dns() (rhbz#2177075)
  - conf, udp: Allow any loopback address to be used as resolver (rhbz#2177075)
  - tcp, tcp_splice: Get rid of false positive CWE-394 Coverity warning from fls() (rhbz#2177084)
  - tcp: Avoid false (but convoluted) positive Coverity CWE-476 warning (rhbz#2177084)
  - tcp: Avoid (theoretical) resource leak (CWE-772) Coverity warning (rhbz#2177084)
  - Fix definitions of SOCKET_MAX, TCP_MAX_CONNS (rhbz#2177084)
  - doc/demo: Fix and suppress ShellCheck warnings (rhbz#2177084)
  - contrib/selinux: Drop duplicate init_daemon_domain() rule (rhbz#2176813)
  - contrib/selinux: Let passt write to stdout and stderr when it starts (rhbz#2176813)
  - contrib/selinux: Allow binding and connecting to all UDP and TCP ports (rhbz#2176813)
  - contrib/selinux: Let interface users set paths for log, PID, socket files (rhbz#2176813)
  - contrib/selinux: Drop "example" from headers: this is the actual policy (rhbz#2176813)
  - contrib/selinux: Drop unused passt_read_data() interface (rhbz#2176813)
  - contrib/selinux: Split interfaces into smaller bits (rhbz#2176813)
  - fedora: Install SELinux interface files to shared include directory (rhbz#2176813)
  - tcp, udp, util: Pass socket creation errors all the way up (rhbz#2177080)
  - tcp, udp: Fix partial success return codes in {tcp,udp}_sock_init() (rhbz#2177080)
  - conf: Terminate on EMFILE or ENFILE on sockets for port mapping (rhbz#2177080)
  - tcp: Clamp MSS value when queueing data to tap, also for pasta (rhbz#2177083)
  - Fix up SELinux labels on install/uninstall, require matching -selinux package (rhbz#2176813)
  - Resolves: rhbz#2177075 rhbz#2177084 rhbz#2177080 rhbz#2177083 rhbz#2176813


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-3
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230222.g4ddbcb9-4
changelog:
  - Drop (pointless) patches 20, 21, 22, actually apply changes to the spec file!
  - Refresh SELinux labels in scriptlets, require -selinux package (rhbz#2183089)
  - Don't install useless SELinux interface file for pasta (rhbz#2183106)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-2
changelog:
  - Drop user_namespace create allow rule, incompatible with current el9 kernel
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-3
changelog:
  - Explicit restorecon in scriptlet as rpm(8) mix up contexts with hard links
  - Resolves: RHELPLAN-155811


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-4
changelog:
  - Switch to copies instead of links for pasta: previous workaround unreliable
  - Resolves: RHELPLAN-155811


author: David Gibson <dgibson@redhat.com> - 0^20250217.ga1e48a0-6
changelog:
  - Original fix for RHEL-83978 wasn't sufficient, we need the fix for upstream bug 119 as well.
  - Resolves: RHEL-83978


author: David Gibson <dgibson@redhat.com> - 0^20250217.ga1e48a0-7
changelog:
  - Original fix for RHEL-84156 still leaves inbound connections broken.  Bring in
    another fix.
  - Last fix for RHEL-83978 introduced a different off-by-one error, fix again.
  - Resolves: RHEL-84156
  - Resolves: RHEL-83978


author: Nathan Scott <nathans@redhat.com> - 5.3.5-3
changelog:
  - Resolve failure in the Nvidia metrics agent (BZ 2030123)
  - PMDA indom cache loading performance improvements (BZ 2030122)
  - Consistent user experience for new farm services (BZ 2030138)
  - Resilience improvements for the pmproxy service (BZ 2030141)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-4
changelog:
  - pmdabcc: resolve compilation issues of some bcc PMDA modules on
    aarch64, ppc64le and s390x (BZ 2024982)
  - pmdabpf: support arm and powerpc architectures (BZ 2024980)
  - Further improve pmlogger service startup latency (BZ 1973833)
  - Additional improvements to farm systemd services (BZ 2030138)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-5
changelog:
  - Further improve pmlogger and pmie farm services (BZ 2030138)
  - Resolve a further KVM selinux issue with KVM (BZ 2006430)
  - Rebuild to use latest selinux-policy for el9 (BZ 2041503)


author: Nathan Scott <nathans@redhat.com> - 5.3.5-8
changelog:
  - Fix pcp-zeroconf logger interval override regression (BZ 1991764)
  - Remove warnings from spec setup of PCP systemd units (BZ 2048024)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-3
changelog:
  - Fix remaining issues in the pcp-ss(1) utility (BZ 1981886)
  - Remove benign pmie systemd unit file warning (BZ 2072971)


author: Nathan Scott <nathans@redhat.com> - 5.3.7-5
changelog:
  - Harden pmdapostfix(1) against missing Postfix (BZ 2059463)
  - Fix cgroups failure on non-x86_64 platforms (BZ 2081262)


author: Nathan Scott <nathans@redhat.com> - 6.0.0-1
changelog:
  - Support --top* options in the pcp-dstat(1) utility (BZ 2020988)
  - Performance improvements, fixes in pmseries --load (BZ 2027430)
  - Switch from static pcp useradd to systemd-sysusers (BZ 2095445)
  - Rebase to latest stable version of PCP (BZ 2117074)


author: Nathan Scott <nathans@redhat.com> - 6.0.1-1
changelog:
  - Convert to independent selinux policy (BZs 1941873, 2127037)
  - Improve pmproxy REST API timeout handling (BZ 2130208)
  - Rebase to latest stable version of PCP (BZ 2117074)


author: Nathan Scott <nathans@redhat.com> - 6.0.4-1
changelog:
  - Ensure pmcd.conf not rewritten needlessly (BZ 2166819)
  - Add support for pmieconf webhook action (BZ 2185803)
  - Rebase to latest stable version of PCP (BZ 2175602)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-1
changelog:
  - Improve pmlogcheck performance with compressed archives (RHEL-3930)
  - Fix pcp-ss(1) utility handling of duplicate sources (RHEL-7498)
  - Fine-tune PCP python wrapper path resolution (RHEL-7509)
  - Rebase to latest stable version of PCP (RHEL-2317)


author: Nathan Scott <nathans@redhat.com> - 6.1.1-2
changelog:
  - Fix pcp-ss(1) default handling of listen state (RHEL-17335)
  - Added pcp package dependency on diffutils for diffstat(1)


author: Nathan Scott <nathans@redhat.com> - 6.2.0-5
changelog:
  - Fix buffer sizing checks in pmstore PDU handling (RHEL-57805)
  - Guard against symlink attacks in pmpost program (RHEL-57810)
  - Fix libpcp_web webgroup slow request refcounting (RHEL-58306)
  - Updated pmdahacluster for newer crm_mon versions (RHEL-50693)


author: Nathan Scott <nathans@redhat.com> - 6.2.1-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Disable pmproxy(1) RESP proxying by default (RHEL-30720)
  - Add pmcheck(1) utility to check installation (RHEL-25497)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-1
changelog:
  - Rebase to latest stable version of PCP (RHEL-30198)
  - Fix pcp2openmetrics on s390x reading from an archive (RHEL-32407)
  - Fix pcp2openmetrics -F output file option (RHEL-32674)
  - Fix pmlogdump version reporting (RHEL-32381)
  - Add timestamps for pcp2openmetrics archive option (RHEL-32369)
  - Add new metrics to monitor VMware balloon usage (RHEL-32198)


author: Lauren Chilton <lchilton@redhat.com> - 6.2.2-4
changelog:
  - Removed excess headers for pcp2openmetrics tool (RHEL-39159)
  - Fix pcp2openmetrics '-s' option (RHEL-39132)
  - Fix pcp2openmetrics timestamps in archive mode (RHEL-32983)
  - Fix pcp2openmetrics output to adhere to prometheus parser (RHEL-39293)


author: Nathan Scott <nathans@redhat.com> - 6.2.2-5
changelog:
  - Add rpm dependency on package providing ps(1) tool (RHEL-39491)
  - Update Java bytecode in pcp-testasuite package (RHEL-40718)


author: Eduard Abdullin <eabdullin@almalinux.org> - 6.2.0-7.alma.1
changelog:
  - Fix buffer sizing checks in pmstore PDU handling
  - Guard against symlink attacks in pmpost program
  - Fix libpcp_web webgroup slow request refcounting
  - Updated pmdahacluster for newer crm_mon versions


author: Nathan Scott <nathans@redhat.com> - 6.3.1-1
changelog:
  - New pcp-xsos utility for rapid system summaries (RHEL-30590)
  - Fix Upgrade scripts to not rewrite pmcd.conf (RHEL-40631)
  - Add new Hyper-V balloon usage metrics (RHEL-45715)
  - Auto-load pmdaproc in local context (RHEL-50941)
  - Fix a benign potential libpcp buffer overflow (RHEL-58914)
  - Fix pcp-zeroconf pmie.config write permission (RHEL-59366)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.2-1
changelog:
  - Add proc PMDA access control for IO metrics (RHEL-60891)
  - Fix pmdastatsd segfaults within pmdaRehash (RHEL-57717)
  - Multiple hugepage size NUMA metric support (RHEL-45876)
  - Improve pcp-xsos command line diagnostics (RHEL-61597, RHEL-61598)
  - Add pmlogger_farm_check service selinux policy (RHEL-61885)
  - Fix v3 archive replay on big endian machines (RHEL-61501)
  - Rebase to latest stable version of PCP (RHEL-58953)


author: Nathan Scott <nathans@redhat.com> - 6.3.7-5
changelog:
  - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039)
  - Fix a multilib regression in PCP header files (RHEL-93186)
  - Fix python PMDA wrapper handling of list objects
  - Improve tmpfiles.d handling of empty directories


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Mohan Boddu <mboddu@redhat.com> - 1.1.3-28
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951271 replace apache-commons-logging with java.util.logging


author: Mohan Boddu <mboddu@redhat.com> - 1:0.9.4-23
changelog:
  - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
  - Related: rhbz#1951270 replace apache-commons-logging with java.util.logging


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-471
changelog:
  - Make accessing environment by DynaLoader thread-safe
  - Use duplocale() if available
  - Fix fc() in Turkish locale
  - Fix croaking on "my $_" when "use utf8" is in effect (GH#18449)
  - Fix PERL_UNUSED_ARG() definition in XSUB.h
  - Add missing entries to perldiag (GH#18276)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-472
changelog:
  - Protect locale tests from LANGUAGE environment variable
  - Prevent the number of buckets in a hash from getting too large
  - Fix a memory leak when compiling a regular expression (GH#18604)


author: Petr Pisar <ppisar@redhat.com> - 4:5.32.1-474
changelog:
  - Fix dumping a hash entry of PL_strtab type
  - Fix an arithmetic left shift of a minimal integer value (GH#18639)


author: Paul Howarth <paul@city-fan.org> - 1.2000-1
changelog:
  - Update to 1.200
    - New release with no new features, just preparing for a series of bugfix
      releases
  - Specify all build dependencies
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.014-14
changelog:
  - Spec clean-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Use %{make_build} and %{make_install}
    - Fix permissions of installed files


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.64-4
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Petr Pisar <ppisar@redhat.com> - 1.66-2
changelog:
  - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch
  - Do not build-require unused Test::FailWarnings
  - Update the description


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Paul Howarth <paul@city-fan.org> - 1:0.17029-1
changelog:
  - Update to 0.17029
    - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
      documentation (VERSION used to appear before NAME)


author: Paul Howarth <paul@city-fan.org> - 1.002002-1
changelog:
  - Update to 1.002002
    - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps
      like /foo/i but not /foo/; having trailing flags is now optional! (GH#6)
    - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set;
      this is because bareword '-default' was being interpreted as the Perl
      'default' keyword (GH#5)
  - Unbundle newly-bundled test modules


author: Paul Howarth <paul@city-fan.org> - 1.16-18
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.72-21
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 2.069-1
changelog:
  - Update to 2.069
    - IO::Socket::Utils CERT_asHash and CERT_create now support subject and
      issuer with multiple same parts (like multiple OU); in this case an array
      ref instead of a scalar is used as hash value (GH#95)


author: Michal Josef Špaček <mspacek@redhat.com> - 2.070-4
changelog:
  - Remove failing tests in openssl 3.0.0-alpha16. Related: rhbz#1968046
    - Provisional for mass rebuild of openssl3.


author: Paul Howarth <paul@city-fan.org> - 1.26-1
changelog:
  - Update to 1.26
    - BUILD: Update FAIL_POSIX warning message (GH#28)
    - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21)
    - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403)
    - Add Travis configuration


author: Paul Howarth <paul@city-fan.org> - 1.29-1
changelog:
  - Update to 1.29
    - Improved handling of shell commands on Windows, which should get us closer
      to resolving Win32-related issues; there should be no change of
      functionality on Unix-like platforms
    - Better workaround for bug in perl-5.8.9 (GH#23)
    - Add t/args.t
    - Modify t/win32.t
    - Added Travis and AppVeyor configuration files
    - Eliminated use of Dist::Zilla for build, using older, but more reliable and
      better understood (by maintainer) ExtUtils::MakeMaker-based configuration
    - Move author testing to xt/ directory


author: Emmanuel Seyman <emmanuel@seyman.fr> - 4.03-1
changelog:
  - Update to 4.03
  - Use %{make_install} instead of "make pure_install"
  - Use %{make_build} instead of make
  - Replace calls to %{__perl} with /usr/bin/perl
  - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL


author: Petr Pisar <ppisar@redhat.com> - 1:0.68-3
changelog:
  - Fix resolving localhost on loopback-only machines
    (https://github.com/perl-ldap/perl-ldap/pull/60)


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix failing installation in parallel make (GH#38)
    - Infrastructure improvements and tooling updates, lots of author tests with
      corresponding fixes added
    - Added slide and slideatatime functions
    - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043,
      CPAN RT#132940)
    - Bump List::MoreUtils::XS requirement to 0.430
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.430-1
changelog:
  - Update to 0.430
    - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs
      - Since some bugs are simply reported wrong, dealing with them breaks more
        (including running code) than it solves - way too heavy to feel better...
    - Introduce functions slide and slideatatime
    - Toolchain fixes
    - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128)
    - Fix typo (GH#7)
    - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation
  - Use author-independent source URL


author: Paul Howarth <paul@city-fan.org> - 0.70-1
changelog:
  - Update to 0.70
    - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939)
  - Use author-independent source URL
  - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.86-1
changelog:
  - Update to 0.86
    - Update PAUSE and ANDK keys to 2020
    - Update documentation pertaining to SHA1
    - Fix compatibility with Crypt::OpenPGP
  - Use mktemp to create temporary GPG directory


author: Paul Howarth <paul@city-fan.org> - 0.21-26
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Use %{make_build} and %{make_install}
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 1.90-1
changelog:
  - Update to 1.90
    - Formalised libssl version support policy: all stable versions of OpenSSL
      in the 0.9.8-1.1.1 branches (with the exception of 0.9.8-0.9.8b) and all
      stable releases of LibreSSL in the 2.0-3.1 series are supported
    - The LibreSSL 3.2 series is not yet fully supported because its TLSv1.3
      implementation is not currently libssl-compatible
    - Added support for LibreSSL on Windows when built with Visual C++
    - Exposed P_X509_CRL_add_extensions, several SSL_CIPHER functions, and
      several stack functions
    - Fixed crashes in the callback functions CTX_set_next_proto_select_cb and
      CTX_set_alpn_select_cb
    - The test suite is now compatible with OpenSSL 1.1.1e onwards, as well as
      OpenSSL security level 2 (the default on many Linux distributions)


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-4
changelog:
  - Fix tests for openssl 3.0.0-alpha16. rhbz#1964854
    - Fix check across alpha1 vs alpha17
    - Change default alg for PEM_get_string_PrivateKey()
    - Different order in CA chain in some versions
    - Changed API of CTX_set_ciphersuites() and set_ciphersuites(), ignore
      unknown ciphers
    - Disable TLSv1 and TLSv1_1 usage in test


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-6
changelog:
  - Fix tests for openssl 3.0.0-beta1. rhbz#1964854
    - Add fix for t/05_passwd_cb.t
    - Update Net-SSLeay-1.90-openssl3.0.0-43_misc_functions.patch to accept beta version
  - Fix tab vs space in spec file
  - Update Net-SSLeay-1.90-openssl3.0.0-39_pkcs12.patch patch to upstream version


author: Michal Josef Špaček <mspacek@redhat.com> - 1.90-8
changelog:
  - Fix tests for openssl 3.0.0-beta2. rhbz#1992571
    - Add another fix for t/05_passwd_cb.t, because change in passphrase caching
  - Remove XXX in spec file


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Paul Howarth <paul@city-fan.org> - 1.106-20
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Drop support for building with Test::More < 0.88
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Use %license macro


author: Paul Howarth <paul@city-fan.org> - 1:0.38-458
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely
    - Make %files list more explicit


author: Tom Stellard <tstellar@redhat.com> - 3:1.54-441
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.29-6
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Tom Stellard <tstellar@redhat.com> - 1.1-36
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 1.30-1
changelog:
  - Update to 1.30
    - Breaking Change: Set $YAML::LoadBlessed default to false to make it more
      secure


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Filip Janus <fjanus@redhat.com> - 1.7.0-1
changelog:
  - Initial import for postgresql 15 module
  - Update to 1.7.0
  - Support postgresql 15
  - Related: #2128410


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Remi Collet <rcollet@redhat.com> - 8.0.20-1
changelog:
  - rebase to 8.0.20 #2095752
  - clean unneeded dependency on useradd command #2095447
  - add upstream patch to initialize pcre before mbstring
  - retrieve tzdata version from /usr/share/zoneinfo/tzdata.zi


author: Remi Collet <rcollet@redhat.com> - 8.0.30-2
changelog:
  - Fix Leak partial content of the heap through heap buffer over-read
    CVE-2024-8929
  - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs
    CVE-2024-11234
  - Fix Single byte overread with convert.quoted-printable-decode filter
    CVE-2024-11233
  - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision
    CVE-2024-8927
  - Fix Logs from childrens may be altered
    CVE-2024-9026
  - Fix Erroneous parsing of multipart form data
    CVE-2024-8925
  - Fix filter bypass in filter_var FILTER_VALIDATE_URL
    CVE-2024-5458
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


author: Remi Collet <rcollet@redhat.com> - 8.0.30-3
changelog:
  - Fix libxml streams use wrong `content-type` header when requesting a redirected resource
    CVE-2025-1219
  - Fix Stream HTTP wrapper header check might omit basic auth header
    CVE-2025-1736
  - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes
    CVE-2025-1861
  - Fix Streams HTTP wrapper does not fail for headers without colon
    CVE-2025-1734
  - Fix Header parser of `http` stream wrapper does not handle folded headers
    CVE-2025-1217


author: Remi Collet <rcollet@redhat.com> - 8.0.30-4
changelog:
  - Fix pgsql extension does not check for errors during escaping
    CVE-2025-1735
  - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
    CVE-2025-6491
  - Fix Null byte termination in hostnames
    CVE-2025-1220
  - Fix soap memory corruption
  - Fix ldap_set_option() not applied on different ldap connections


author: Remi Collet <rcollet@redhat.com> - 8.0.30-5
changelog:
  - Fix Null byte termination in dns_get_record()
    GHSA-www2-q4fc-65wf
  - Fix Heap buffer overflow in array_merge()
    CVE-2025-14178
  - Fix Information Leak of Memory in getimagesize
    CVE-2025-14177


author: Remi Collet <rcollet@redhat.com> - 8.1.6-2
changelog:
  - add upstream patch to initialize pcre before mbstring
  - add upstream patch to use more sha256 in openssl tests


author: Remi Collet <rcollet@redhat.com> - 8.2.13-1
changelog:
  - rebase to 8.2.13 RHEL-14699
  - add %__phpize and %__phpconfig macros
  - move httpd/nginx wants directives to config files in /etc
  - php-fpm.conf: move include directive after [global] section
    following upstream example, allowing overriding
  - use SPDX license IDs


author: Remi Collet <rcollet@redhat.com> - 8.3.12-1
changelog:
  - rebase to 8.3.12 RHEL-62189
  - enable command history in phpdbg
  - backport Argon2 password hashing in OpenSSL ext
  - build sockets extension statically
  - switch to nikic/php-parser version 5
  - openssl: always warn about missing curve_name


author: Remi Collet <remi@remirepo.net> - 6.1.0~RC2-1
changelog:
  - update to 6.1.0RC2
  - fix test suite with redis 6.2 using patch from
    https://github.com/phpredis/phpredis/pull/2555


author: Jakub Jelen <jjelen@redhat.com> - 1.1.1-2
changelog:
  - Move pinentry-tty to separate subpackage (#1782442)
  - Update the wrapper selecting the appropriate version (#1918969)


author: Neal Gompa <ngompa@centosproject.org> - 0.3.40-1
changelog:
  - Update to version 0.3.40 which drops media-session service for WirePlumber
    Resolves: rhbz#2022694


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.6-1
changelog:
  - Bug #2107335 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.0.0.z]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 2.11.4-6
changelog:
  - Drop jackson-module-afterburner, jackson-module-guice, jackson-module-mrbean,
    jackson-module-osgi, jackson-module-paranamer, and jackson-module-javadoc


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.30-1
changelog:
  - Resolves: rhbz#1721684 Rebase pki-servlet-engine to 9.0.30
  - Update to JWS 5.3.0 distribution
  - Remove new dependencies that PKI doesn't need (and are not provided by RHEL 8)


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-1
changelog:
  - Update to JWS 5.5, and drop jakarta-saaj dependency
  - Updates to javapackages-local removed %add_maven_depmap which broke the build,
    so I removed most of the maven artifacts as they aren't very useful anyway
  - Cleaned up a few unnecessary patches


author: Coty Sutherland <csutherl@redhat.com> - 1:9.0.43-2
changelog:
  - Related: rhbz#1977948 Cleanup unused tomcat-juli.jar copy now that the maven artifacts have been removed


author: Dimitris Soumis <dsoumis@redhat.com> - 1:9.0.50-1.el9_2.2
changelog:
  - Resolves: RHEL-71715
    pki-servlet-engine: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-13.20200306git58a7289
changelog:
  - Add patches fixing crash on monitor hot(un)plug (rhbz#1809681)
  - Add patches fixing delay between gdm telling us to deactivate and
    us telling gdm it is ok to continue
  - Drop plymouth-plugin-throbgress sub-package, the spinfinity theme now
    uses the two-step plugin


author: Hans de Goede <jwrdegoede@fedoraproject.org> - 0.9.4-14.20200306git58a7289
changelog:
  - New upstream git snapshot
  - Add RemainAfterExit=yes to plymouth's systemd service files (rhbz#1807771)
  - Fix the spinner / animation missing on shutdown and reboot


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/9237d75)
  - Related: #2062835


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-3
changelog:
  - rebuild with golang >= 1.17.5 (CVE-2021-44716, CVE-2021-44717)
  - rebuild with golang >= 1.17.7 to fix FIPS issues
  - Related: #1975396


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/bb1e6e6)
  - Resolves: #2066501


author: Jindrich Novy <jnovy@redhat.com> - 2:4.0.2-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.0-rhel
    (https://github.com/containers/podman/commit/3d24a66)
  - Resolves: #2067526


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/4978898)
  - Resolves: #2124676


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/d520a5c)
  - Resolves: #2136845


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/35c0df3)
  - Resolves: #2120436


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/6742838)
  - Resolves: #2149776


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/bfac4a5)
  - Resolves: #2152026


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/28df097)
  - Resolves: #2158636


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.2.0-rhel
    (https://github.com/containers/podman/commit/1a116d1)
  - Resolves: #2166104


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.1.1-rhel
    (https://github.com/containers/podman/commit/fa692a6)
  - Related: #2097694


author: Jindrich Novy <jnovy@redhat.com> - 2:4.1.1-6
changelog:
  - convert catatonit dependency to soft dep as catatonit is
    no longer in Appstream but in CRB
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.2.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.2.0
    (https://github.com/containers/podman/commit/7fe5a419cfd2880df2028ad3d7fd9378a88a04f4)
  - Related: #2061316


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/e1703bb)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/ffc2614)
  - Resolves: #2179450


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/bf400bd)
  - Resolves: #2180126


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/67f7e1e)
  - Resolves: #2182492


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/05037d3)
  - Resolves: #2183602


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/fd0ea3b)
  - Resolves: #2177925


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/aa5db47)
  - Resolves: #2189592


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/bcea446)
  - Resolves: #2210113


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-11
changelog:
  - fix --dns-add get error logs when there is no container attached to the network
  - Resolves: #2210118


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/ff30585)
  - Resolves: #2213844


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/dd490ff)
  - Resolves: #2229749


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.0-0.7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/ce504bb)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.0-0.8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/c35e74f)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.0-0.9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/323b515)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.0-0.10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/main
    (https://github.com/containers/podman/commit/68bbdc2)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4
    (https://github.com/containers/podman/commit/f5670f0)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/d4e285a)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.4.1-rhel
    (https://github.com/containers/podman/commit/0b38633)
  - Related: #2124478


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.0-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.0
    (https://github.com/containers/podman/commit/38e6fab9664c6e59b66e73523b307a56130316ae)


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.6.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/1b2fadd)
  - Resolves: #2232127


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/8bb0204)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/ea33dce)
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/68e7ae0)
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.6.1-7
changelog:
  - Rebuild for following CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322 CVE-2023-29409
  - Related: Jira:RHEL-2785
  - Related: Jira:RHEL-7452


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/227b84e)
  - Resolves: RHEL-20911


author: Jindrich Novy <jnovy@redhat.com> - 2:4.6.1-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.6.1-rhel
    (https://github.com/containers/podman/commit/22c2308)
  - Resolves: RHEL-20491


author: Jindrich Novy <jnovy@redhat.com> - 2:4.7.2-2
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.7.2
    (https://github.com/containers/podman/commit/750b4c3a7c31f6573350f0b3f1b787f26e0fe1e3)
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.7.2-3
changelog:
  - Rebuild for following CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Related: Jira:RHEL-2785


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:4.8.1-1
changelog:
  - update to latest content of https://github.com/containers/podman/releases/tag/4.8.1
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.2-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/4c14019)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/b8a887c)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.4-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9
    (https://github.com/containers/podman/commit/4b69d93)
  - Related: RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 4:4.9.4-2
changelog:
  - bump Epoch to 4 to preserve upgrade path from rhel 8.10
  - bump release tag or else it refuses to build
  - Resolves: RHEL-28234


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/4afc71a)
  - Resolves: RHEL-28735


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/b699052)
  - Resolves: RHEL-45531


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/8fa0c76)
  - Resolves: RHEL-40804


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/affa589)
  - Resolves: RHEL-45916


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/1a2d8e3)
  - Resolves: RHEL-50507


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/6b45bb1)
  - Resolves: RHEL-53250


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/e3221b5)
  - Resolves: RHEL-56327 RHEL-50231


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-12
changelog:
  - rebuild to address CVE-2024-34155 CVE-2024-34156 CVE-2024-34158
  - Resolves: RHEL-57980 RHEL-57950 RHEL-58203


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/6cf9920)
  - Resolves: RHEL-60964


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/235a22c)
  - Resolves: RHEL-61154


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/1866072)
  - Resolves: RHEL-61868


author: Jindrich Novy <jnovy@redhat.com> - 4:4.9.4-16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/70e4d02)
  - Resolves: RHEL-65451


author: Jindrich Novy <jnovy@redhat.com> - 2:4.9.3-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/c82fdc8)
  - Resolves: RHEL-28633 RHEL-28629


author: Jindrich Novy <jnovy@redhat.com> - 3:4.9.3-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/06e4598)
  - Resolves: RHEL-28636


author: Jindrich Novy <jnovy@redhat.com> - 3:4.9.3-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/5f872ae)
  - Resolves: RHEL-28234


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.9.4-1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v4.9-rhel
    (https://github.com/containers/podman/commit/7752c56)
  - Resolves: RHEL-28234


author: Jindrich Novy <jnovy@redhat.com> - 2:5.2.2-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/5f2c188)
  - Resolves: RHEL-59703


author: Jindrich Novy <jnovy@redhat.com> - 2:5.2.2-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/8e693ce)
  - Resolves: RHEL-60963


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/c03b5f3)
  - Resolves: RHEL-61667


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/6df7dfb)
  - Resolves: RHEL-61847


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/39171ac)
  - Resolves: RHEL-62566


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61962


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/76d1690)
  - Resolves: RHEL-73592


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/173b20b)
  - Resolves: RHEL-67606


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-14
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/ea1bef4)
  - fixes "CVE-2025-22869 podman: Potential denial of service in golang.org/x/crypto [rhel-9.5.z]"
  - Resolves: RHEL-81318


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-15
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/a2d774c)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x - [RHEL 9.5] Zstream"
  - Resolves: RHEL-83558


author: Jindrich Novy <jnovy@redhat.com> - 4:5.2.2-16
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/da46fda)
  - fixes "Rootless container libpod/tmp/persist directories not cleaned up, fill up tmpfs - [RHEL 9.5]"
  - Resolves: RHEL-86866


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-1
changelog:
  - stick with the v5.2-rhel branch for RHEL
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/458f9b4)
  - Resolves: RHEL-60965


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.2-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.2-rhel
    (https://github.com/containers/podman/commit/e40738b)
  - Resolves: RHEL-61858


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/2adbe89)
  - Resolves: RHEL-79694


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/e48006b)
  - Resolves: RHEL-82198


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/45c2d1f)
  - Resolves: RHEL-82970


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x - [RHEL - 9.6] ZeroDay"
  - Resolves: RHEL-83557


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "CVE-2025-22869 podman: Potential denial of service in golang.org/x/crypto [rhel-9.6]"
  - Resolves: RHEL-81319


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f7bf65c)
  - fixes "Importing a tar.xz archive as a container fails with error 'layer 0 <...> does not match config's DiffID'  - [RHEL 9.6] 0day"
  - Resolves: RHEL-85218


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-8
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing - [RHEL 9.6] 0day"
  - Resolves: RHEL-86092


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "Rootless container libpod/tmp/persist directories not cleaned up, fill up tmpfs - [RHEL 9.6] 0day"
  - Resolves: RHEL-86544


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-10
changelog:
  - rebuild to fix CVE-2025-22871 podman: Request smuggling due to acceptance of invalid chunked data in net/http
  - Resolves: RHEL-90055


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/f944b21)
  - fixes "Terminate healthcheck command upon reaching timeout. [rhel-9.6.z]"
  - Resolves: RHEL-96917


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9811294)
  - fixes "CVE-2025-6032 podman: podman missing TLS verification [rhel-9.6.z]"
  - Resolves: RHEL-96708


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/b0d88c7)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-9.6.z]"
  - Resolves: RHEL-113152


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.0-2
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/56f1962)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-3
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/7078b79)
  - fixes "CVE-2025-9566 podman: Podman kube play command may overwrite host files [rhel-9.7]"
  - Resolves: RHEL-113151


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/c5a3735)
  - fixes "Can not find network create and rm message from podman event when set --events-backend to journald - [RHEL 9.7] 0day"
  - Resolves: RHEL-110317


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/61231e1)
  - fixes "Timeouts while pushing Sigstore logs to Rekor - [RHEL 9.7] 0day"
  - Resolves: RHEL-111076


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/2791007)
  - fixes "[Minor Incident] CVE-2025-52881 podman: container escape and denial of service due to arbitrary write gadgets and procfs write redirects [rhel-9.7.z]"
  - Resolves: RHEL-126913


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-9
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/3bf5313)
  - fixes "run 1.2.x upgrade throws error while using nocopy volume mount filesystem option - [RHEL 9.7]"
  - Resolves: RHEL-132531


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-10
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/a58af02)
  - fixes "[podman 5.6][runc 1.3.3] podman update can not update the io related options with runc"
  - Resolves: RHEL-81042


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-11
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/0a20b84)
  - fixes "CVE-2025-47913 podman: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS [rhel-9.7.z]"
  - Resolves: RHEL-134793


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-12
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/360c775)
  - fixes "[podman-5.6] Crash in podman-system-migrate due to nil c.runtime.storageService [rhel-9.7.z]"
  - Resolves: RHEL-141491


author: Jindrich Novy <jnovy@redhat.com> - 6:5.6.0-13
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel
    (https://github.com/containers/podman/commit/1dce7a7)
  - fixes "Podman 5.6 regression: container fails to start when WORKDIR is a symlink (“file exists” error) [rhel-9.7.z]"
  - Resolves: RHEL-142311


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-4
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9d2e54f)
  - fixes "Excessive memory leak due to uncontrolled accumulation of health.log entries in Podman 5.x"
  - Resolves: RHEL-83262


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-5
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/9ad4842)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-6
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/a994a04)
  - fixes "podman tests are failing"
  - Resolves: RHEL-86200


author: Jindrich Novy <jnovy@redhat.com> - 5:5.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.4-rhel
    (https://github.com/containers/podman/commit/0ee1d49)
  - fixes "podman tests are failing - [RHEL-10.1.GA]"
  - Resolves: RHEL-88191


author: Jindrich Novy <jnovy@redhat.com> - 5:5.6.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/podman/tree/v5.6
    (https://github.com/containers/podman/commit/d46b857)
  - fixes "Work on RHEL 9.7 packaging"
  - Related: RHEL-80816


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-2
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-3
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-2
changelog:
  - Improve man pages (RHEL-672)
  - Unwrap strings - remove hard returns and initial white spaces from strings (RHEL-606)


author: Jan Rybar <jrybar@redhat.com> - 0.117-13
changelog:
  - session-monitor: watch sessions only
  - PolkitPermission: react on really changed sessions
  - allow polkit-pkla-compat to be uninstalled if no .pkla rules
  - Resolves: RHEL-39063


author: Marek Kasik <mkasik@redhat.com> - 21.01.0-11
changelog:
  - Backport fixes for issues found by Coverity Scan
  - and fix some of the new issues
  - Resolves: #1967967


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Masahiro Matsuya <mmatsuya@redhat.com> - 13.13-1
changelog:
  - Update to 13.13
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, and CVE-2023-39417
  - Resolves: RHEL-16098


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418


author: Masahiro Matsuya <mmatsuya@redhat.com> - 15.5-1
changelog:
  - update to 15.5
  - Fixes CVE-2023-5868, CVE-2023-5869, CVE-2023-5870, CVE-2023-39417, and CVE-2023-39418
    Resolves: RHEL-16100, RHEL-16124, RHEL-16139


author: Filip Januš <fjanus@redhat.com> - 15.0-1
changelog:
  - Initial import for postgresql 15
  - Specfile is based on version locate in centos stream
    It reflects changes with libpq. This version of databse server
    will use private libpq library.
  - Resolves: #2128241


author: Filip Januš <fjanus@redhat.com> - 15.2-1
changelog:
  - Update to upstream version 15.2
  - Update postgresql-setup to 8.8
  - PostgreSQL systemd unit waits for the network to be up
  - Resolves: #2128241


author: Filip Janus <fjanus@redhat.com> - 16.0-1
changelog:
  - New postgresql stream - 16
  - Remove pdf documentation
  - Update postgresql-setup to 8.9
  - postmaster binary no more shipped
  - Resolves: RHEL-3636


author: Filip Janus <fjanus@redhat.com> - 16.11-1
changelog:
  - Update to 16.11
  - Add sysusers configuration and generate tmpfiles.d dynamically
  - Resolves: RHEL-123193 (CVE-2025-12818)


author: Filip Janus <fjanus@redhat.com> - 16.13-1
changelog:
  - Update to 16.13
  - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input
  - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow
  - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length
  - Resolves: RHEL-149371 RHEL-149404 RHEL-149338


author: Bastien Nocera <bnocera@redhat.com> - 0.8.1-2
changelog:
  + power-profiles-daemon-0.8.1-2
  - Remove linter, as apparently unwanted in check section
  - Resolves: rhbz#1947950


author: Kate Hsuan <hpa@redhat.com> - 0.21-1
changelog:
  - Update to 0.21
  - Support multi-drivers mode and amdgpu
  - Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
  - Resolves: RHEL-23395


author: Adrian Reber <adrian@lisas.de> - 3.14.0-6
changelog:
  - Reintroduce the emacs subpackage to avoid file conflicts between
    protobuf-compiler.x86_64 and protobuf-compiler.i686
  - Disable LTO to fix annobin errors


author: Adrian Reber <areber@redhat.com> - 3.14.0-14
changelog:
  - Applied patch for CVE-2022-1941 (#RHEL-40872)
  - Applied patch to make emacs dependency optional (#RHEL-40572)


author: Jan Rybar <jrybar@redhat.com> - 3.6-16
changelog:
  - output is not redirected when ps_mem is killed
  - cmdline unwanted blank spaces fixed
  - Resolves: rhbz#2033997
  - Resolves: rhbz#2049743


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Brian C. Lane <bcl@redhat.com> - 3.32.1-1
changelog:
  - Use .z version for new builds, start with 3.32.0 (bcl)
    Related: rhbz#1968762
  - tests: Use pykickstart/commands relative to the import (bcl)
    Related: rhbz#1968762


author: Brian C. Lane <bcl@redhat.com> - 3.32.2-1
changelog:
  - Add RHEL 9 handler (mkolman)
    Resolves: rhbz#1966730
  - Add RHEL 9 version for commands that had a RHEL version in the past (mkolman)
    Related: rhbz#1966730
  - Add RHEL 9 version for BTRFS related commands (mkolman)
    Related: rhbz#1966730


author: Brian C. Lane <bcl@redhat.com> - 3.32.4-1
changelog:
  - github: Add rhel9-branch to the list of branches (bcl)
    Related: rhbz#2054906
  - Fix validation of packages arguments (bcl)
    Resolves: rhbz#2054906


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2060779
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2060779
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2060779
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2060779
  - Add the isRHEL function (vponcova)
    Related: rhbz#2060779


author: Brian C. Lane <bcl@redhat.com> - 3.32.6-1
changelog:
  - tests: Update ksvalidator tests to allow new wording for help output (bcl)
    Related: rhbz#2083269
  - rootpw: Use RHEL9 instead of F37 for new rootpw feature (bcl)
    Related: rhbz#2083269
  - rootpw: Add an --allow-ssh argument (bcl)
    Resolves: rhbz#2083269
  - github: Fix workflow to only send coverage for python 3.9 (bcl)
    Related: rhbz#2083269


author: Brian C. Lane <bcl@redhat.com> - 3.32.10-1
changelog:
  - Add DNS handling options to the network command (vslavik)
    Resolves: rhbz#2172531
  - whitelist_externals has changed to allowlist_externals (bcl)
    Related: rhbz#2172531


author: Brian C. Lane <bcl@redhat.com> - 3.32.11-1
changelog:
  - tox: Only run unit tests for python 3.6 (bcl)
    Related: RHEL-17662
  - Add conflict test between ostree sources (#2125655) (jkonecny)
    Related: RHEL-17662
  - Fix missing seen check for output generation (#2125655) (jkonecny)
    Related: RHEL-17662
  - Add new ostreecontainer command (#2125655) (jkonecny)
    Resolves: RHEL-17662
  - Check the conflicting commands automatically (vponcova)
    Related: RHEL-17662
  - Fix tests for conflicting commands (vponcova)
    Related: RHEL-17662
  - Add conflicting commands support (bcl)
    Related: RHEL-17662


author: Brian C. Lane <bcl@redhat.com> - 3.32.12-1
changelog:
  - Add support for inline certificates with `%certificate` section (k.koukiou)
    Resolves: RHEL-61432


author: Brian C. Lane <bcl@redhat.com> - 3.32.14-1
changelog:
  - Update %certificate section documentation (rvykydal)
    Related: RHEL-61432
  - Make %certificate section option --dir mandatory. (rvykydal)
    Resolves: RHEL-76501


author: Brian C. Lane <bcl@redhat.com> - 3.32.15-1
changelog:
  - workflows: run tests using only python 3.9 (bcl)
    Related: RHEL-75659
  - workflows: Switch to using ubuntu-latest (bcl)
    Related: RHEL-75659
  - Do not remove "md" prefix from RAID names (vtrefny)
    Resolves: RHEL-75659


author: Brian C. Lane <bcl@redhat.com> - 3.30-1
changelog:
  - ksshell: Fix traceback and add tests (bcl)
  - fs: Make tmp file creation cross-platform in ksvalidator to support Windows


author: Brian C. Lane <bcl@redhat.com> - 3.31-1
changelog:
  - Add make to BuildRequires, buildroot is removing it.
  - Deprecate the autostep command (vslavik)
  - Add missing spaces into the message (yurchor)
  - ksshell: Fix indentation in _init_matches (bcl)
  - Mark the level option of the logging command as deprecated (vponcova)


author: Brian C. Lane <bcl@redhat.com> - 3.32-1
changelog:
  - Conditionally BuildRequire coverage and sphinx for runtests (bcl)
    Resolves: rhbz#1916735
  - Change the lilo command removal to use RemovedCommand (vslavik)
  - Change the lilocheck command removal to use RemovedCommand (vslavik)
  - Fix test for the removed "interactive" command (vslavik)
  - Change the langsupport command removal to use RemovedCommand (vslavik)
  - Change the monitor command removal to use RemovedCommand (vslavik)
  - Change the mouse command removal to use RemovedCommand (vslavik)
  - Change the upgrade command removal to use RemovedCommand (vslavik)
  - Fix ksverdiff detection of removed commands (vslavik)
  - Check warnings of the deprecated kickstart commands (vponcova)
  - Remove the install command (vslavik)
  - Remove the deviceprobe command (vslavik)
  - Remove the device command (vslavik)
  - Remove the dmraid command (vslavik)
  - Remove the multipath command (vslavik)
  - Fix deprecation test for removed commands (vslavik)
  - Switch interactive removal to use RemovedCommand (bcl)
  - Add RemovedCommand for removing commands and documenting them (bcl)
  - Remove support for the updates command without an URL (vponcova)
  - Document how to deprecate commands and options (bcl)
  - Remove the ignoredisk --interactive option (vslavik)
  - Remove the partition --active option (vslavik)
  - Deprecate the %traceback section (vslavik)
  - Add missing .coveragerc file (bcl)
  - Switch to using GitHub Actions instead of Travis CI (bcl)
  - Add support for running via tox (bcl)
  - Deprecate the method command (vslavik)
  - Remove the bootloader option --upgrade (vslavik)


author: Brian C. Lane <bcl@redhat.com> - 3.32.5-1
changelog:
  - Tools should default to RHEL9 not DEVEL (bcl)
    Resolves: rhbz#2058335
  - Default to RHEL9 for docs and ksshell test. (bcl)
    Related: rhbz#2058335
  - Set default version to RHEL9 (bcl)
    Related: rhbz#2058335
  - Remove the --ignorebroken option from RHEL handlers (vponcova)
    Related: rhbz#2058335
  - Add the isRHEL function (vponcova)
    Related: rhbz#2058335


author: Lumír Balhar <lbalhar@redhat.com> - 1.6.3-1
changelog:
  - Remove .dist-info directory at the end of %pyproject_buildrequires
  - An incomplete .dist-info directory in $PWD can confuse tests in %check


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.0-1
changelog:
  - %pyproject_buildrequires: Redirect stdout to stderr via Shell
  - Dependencies are recorded to a text file that is catted at the end


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.0-1
changelog:
  - %pyproject_buildrequires: Add support for self-referential extras requirements
  - Deprecate the provisional %{pyproject_build_lib} macro
    See https://lists.fedoraproject.org/archives/list/python-devel@lists.fedoraproject.org/thread/HMLOPAU3RZLXD4BOJHTIPKI3I4U6U7OE/


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 1.12.1-1
changelog:
  - Add a temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Related: rhbz#2284187


author: Miro Hrončok <mhroncok@redhat.com> - 1.13.0-1
changelog:
  - Properly escape weird characters from paths in %{pyproject_files} (RPM 4.19+ only)
  - Revert the temporary workaround for RPM 4.20 alpha 2 leaking \x1f (unit separators)
  - Fixes: rhbz#1990879


author: Python Maint <python-maint@redhat.com> - 1.15.0-1
changelog:
  - Add a possibility to read runtime requirements from pyproject.toml [project] table
  - Fixes: rhbz#2261939
  - Don't generate a dependency on pip when %pyproject_buildrequires -N is used
  - Fixes: rhbz#2294510
  - Even when %_auto_set_build_flags is disabled, set all compiler flags when building wheels
  - Fixes: rhbz#2293616


author: Miro Hrončok <mhroncok@redhat.com> - 1.16.0-1
changelog:
  - %pyproject_buildrequires: Add support for dependency groups (PEP 735), via the -g flag
  - This is implied when used tox testenvs depend on dependency groups (requires tox 4.22+)
  - Fixes: rhbz#2318849


author: Miro Hrončok <miro@hroncok.cz> - 1.16.1-1
changelog:
  - Support for setuptools 70+
  - wheel is no longer generated as a dependency of the default build system


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.3.2-1
changelog:
  - Update %pyproject_build_lib to support setuptools 62.1.0 and later
  - %pyproject_buildrequires: When extension modules are built,
    support https://fedoraproject.org/wiki/Changes/Package_information_on_ELF_objects


author: Python Maint <python-maint@redhat.com> - 1.4.0-1
changelog:
  - %pyproject_save_files: Support License-Files installed into the *Root License Directory* from PEP 369
  - %pyproject_check_import: Import only the modules whose top-level names
    match any of the globs provided to %pyproject_save_files


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-44
changelog:
  - Set $RPM_BUILD_ROOT in %{python3_...} macros
    to allow selecting alternate sysconfig install scheme based on that variable


author: Karolina Surma <ksurma@redhat.com> - 3.9-45
changelog:
  - Introduce -f (read from file) option to %py{3}_check_import
  - Introduce -t (filter top-level modules) option to %py{3}_check_import
  - Introduce -e (exclude module globs) option to %py{3}_check_import


author: Karolina Surma <ksurma@redhat.com> - 3.9-46
changelog:
  - Fix multiline arguments processing for %py_check_import
  - Fix %py_shebang_flags handling within %py_check_import
  - Process .pth files in buildroot's sitedirs in %py_check_import
  - Move import_all_modules.py from python-srpm-macros to python-rpm-macros


author: Miro Hrončok <mhroncok@redhat.com> - 3.9-47
changelog:
  - Set %__python3 value according to %python3_pkgversion
    I.e. when %python3_pkgversion is 3.12, %__python3 is /usr/bin/python3.12


author: Tomas Orsava <torsava@redhat.com> - 3.9-49
changelog:
  - Add lua helper functions to make it possible to automatically generate
    Obsoletes tags
  - Modify the %py_provides macro to also generate Obsoletes tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9-51
changelog:
  - Add Obsoletes tags with the python39- prefix for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.10-3
changelog:
  - Security fix for CVE-2020-10735
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#1834423


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.16-1
changelog:
  - Update to 3.9.16
  - Security fixes for CVE-2022-42919 and CVE-2022-45061
  Resolves: rhbz#2138705, rhbz#2144072


author: Maito Yokoyama <maito.yokoyama@asianux.com> - 3.9.18-3.el9.ML.1
changelog:
  - Fix tests for XMLPullParser with Expat 2.5.0
  - Get python39-3.9.18-1-fix-test_xml_etree-py.patch (https://github.com/python/cpython/commit/4a08e7b3431cd32a0daf22a33421cd3035343dc4)


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.18-3.1
changelog:
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33887, RHEL-34287


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64888
  Resolves: RHEL-67259


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.21-2.1
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98053, RHEL-98025, RHEL-98243, RHEL-98195, RHEL-98219


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.23-1
changelog:
  - Update to 3.9.23
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.25-3.1
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143108 RHEL-143169 RHEL-144893


author: Tomas Orsava <torsava@redhat.com> - 0.10.1-5
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Related: rhbz#1990421


author: Miro Hrončok <mhroncok@redhat.com> - 1.4.3-12
changelog:
  - Subpackage python2-appdirs has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.5.0-18
changelog:
  - Subpackage python2-augeas has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pino Toscano <ptoscano@redhat.com> - 0.5.0-20
changelog:
  - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix
    the discovery of location in the test
  - Execute the tests at build time
  - Add a simple gating test to execute the test script, and make it gating for
    the python-augeas source


author: Packit <hello@packit.dev> - 0.19.6-1
changelog:
  - [packit] 0.19.6 upstream release
  - Resolves rhbz#2211521 Upstream tag: v0.19.6 Upstream commit: b83949d0


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Miro Hrončok <mhroncok@redhat.com> - 5.0.6-19
changelog:
  - Subpackage python2-configobj has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Remove dependency on python-cryptography-vectors package and use vectors
    directly from Github source tar ball. Related: rhbz#1952343


author: Christian Heimes <cheimes@redhat.com> - 36.0.1-6
changelog:
  - Rebase to 36.0.1, related: rhbz#2059630, rhbz#2060787
  - OpenSSL 3.0 FIPS mode is now detected correctly, related: rhbz#2054785
  - Fix error check from EVP_PKEY_CTX_set_signature_md, related: rhbz#2060343
  - Block 3DES in FIPS mode, related: rhbz#2055209
  - Disable DSA tests in FIPS mode
  - Enable SHA1 signatures in test suite
  - Fix serialization of keyusage ext with no bits
  - Re-enable tests that are passing again


author: Vendula Poncova <vponcova@redhat.com> - 0.4-1
changelog:
  - Replace the error register with the error mapper (vponcova)
  - Propagate additional arguments for the client handler factory (vponcova)
  - Propagate additional arguments in the class AddressedMessageBus (vponcova)
  - Generate the documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.0-1
changelog:
  - Fix the documentation (vponcova)
  - Fix minor typos (yurchor)
  - Enable Codecov (vponcova)
  - Test the documentation build (vponcova)
  - Extend the documentation (vponcova)
  - Add configuration files for Read the Docs and Conda (vponcova)
  - Fix all warnings from the generated documentation (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.1-1
changelog:
  - Include tests and examples in the source distribution (vponcova)
  - Fix the pylint warning signature-differs (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.2-1
changelog:
  - Replace ABC with ABCMeta (vponcova)
  - Fix typing tests (vponcova)
  - Run tests on the latest CentOS (vponcova)
  - Install sphinx from PyPI (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.3-1
changelog:
  - Document differences between dasbus and pydbus (vponcova)
  - Improve the support for interface proxies in the service identifier (vponcova)
  - Improve the support for interface proxies in the message bus (vponcova)
  - Test the interface proxies (vponcova)
  - Make the message bus of a service identifier accessible (vponcova)
  - Fix the testing environment for Fedora Rawhide (vponcova)


author: Vendula Poncova <vponcova@redhat.com> - 1.4-1
changelog:
  - Handle all errors of the DBus call (vponcova)
  - Fix tests for handling DBus errors on the server side (vponcova)
  - Run packit smoke tests for all Fedora (jkonecny)
  - Fix packit archive creation (jkonecny)
  - Add possibility to change setup.py arguments (jkonecny)


author: Bryan Gurney <bgurney@redhat.com> - 0.8-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus and python3-into-dbus-python
  - Resolves: rhbz#1986608


author: Bryan Gurney <bgurney@redhat.com> - 0.04-4
changelog:
  - Remove check test
  - Remove Requires and BuildRequires for python3-pyparsing
  - Resolves: rhbz#1986574


author: Stephen Gallagher <sgallagh@redhat.com> - 1.5.0-2
changelog:
  - Fix Python configuration for ELN/RHEL 9
  - Rework bconds for Python now that there are no Fedoras left that should
    use Python2


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-12
changelog:
  - Fix incorrect spanish translation file (RHEL-6394)
  - Fix for strange issue with binary garbage in smaps files (RHEL-6420, RhBug:2231923)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-14
changelog:
  - needs-restarting prefers to obtain a boot time from systemd to deal with
    RTCs running in local time (RHEL-14900)


author: Petr Pisar <ppisar@redhat.com> - 4.3.0-16
changelog:
  - Revert needs-restarting prefers to obtain a boot time from systemd to deal
    with RTCs running in local time (RHEL-39775)


author: Marek Blaha <mblaha@redhat.com> - 4.3.0-21
changelog:
  - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320)
  - Fix bogus changelog entry date


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Lukas Hrazky <lhrazky@redhat.com> - 4.3.0-1
changelog:
  - Update to 4.3.0
  - [config-manager] Update documentation (RhBug:2075366)
  - [builddep] Warning when using macros with source rpms (RhBug:2077820)
  - [repomanage] Use modules only from repo they are handling (RhBug:2072441)
  - Skip all non rpm transaction items for transaction_action plugins (rhbug:2023652)
  - feat(repomanage): Add new option --oldonly


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Bryan Gurney <bgurney@redhat.com> - 0.08-4
changelog:
  - Remove check test
  - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus
  - Resolves: rhbz#1986609


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Miro Hrončok <mhroncok@redhat.com> - 1.10-18
changelog:
  - Subpackage python2-jsonpointer has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Bryan Gurney <bgurney@redhat.com> - 0.15-5
changelog:
  - Remove check test
  - Remove BuildRequires and Requires for python3-justbases
  - Resolves: rhbz#1986913


author: Julien Rische <jrische@redhat.com> - 1.0.0-9
changelog:
  - Use DNS discovery for declared realms only (CVE-2025-59088)
    Resolves: RHEL-122779
  - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089)
    Resolves: RHEL-122778


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jiri Denemark <jdenemar@redhat.com> - 8.5.0-1
changelog:
  - Rebased to libvirt-python-8.5.0 (rhbz#2060316)
  - The rebase also fixes the following bugs:
      rhbz#2092752


author: Jiri Denemark <jdenemar@redhat.com> - 7.3.0-1
changelog:
  - Rebased to libvirt-python-7.3.0 (rhbz#1950951)
  - The rebase also fixes the following bugs:
      rhbz#1916800, rhbz#1950603, rhbz#1950951
  - RHEL: Add gating.yaml for RHEL9 (rhbz#1950603)


author: Miro Hrončok <mhroncok@redhat.com> - 4.6.2-1
changelog:
  - Update to 4.6.2
  - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner
  - Fixes: rhbz#1855415
  - Fixes: rhbz#1901634


author: Petr Viktorin <pviktori@redhat.com> - 1.1.4-1
changelog:
  - Update to version 1.1.4
  - Avoids test warnings on Python 3.10
    Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474


author: Martin Kolman <mkolman@redhat.com> - 0.48-1
changelog:
  - Merge pull request #23 from poncovka/master-decode_bytes (mkolman)
  - Handle bytes and strings from RPM (#1764642) (vponcova)


author: Martin Kolman <mkolman@redhat.com> - 0.49-1
changelog:
  - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman)
  - Fix make archive command after pot file removal (jkonecny)
  - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny)
  - Add Readme with description and translation badge (jkonecny)
  - Add pot file to the git ignore (jkonecny)
  - Pause release when making bumpver to check and solve translations (jkonecny)
  - Remove unused PREFIX from Makefile (jkonecny)
  - Remove Zanata (jkonecny)
  - Push translations to our translation repository (jkonecny)
  - Download translations from Weblate (jkonecny)
  - Remove pot file (jkonecny)
  - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman)
  - Fix Zanata client detection in Makefile (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.50-1
changelog:
  - Merge pull request #33 from mzidek-gh/master (mkolman)
  - dump: Use exception's type and value when calculating hash (mzidek)


author: Tomas Orsava <torsava@redhat.com> - 4.7.1-9
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Use the modern way of filtering Provides not to interfere with modern Python
    RPM generators
  - Related: rhbz#1990421


author: Tom Stellard <tstellar@redhat.com> - 4.6.8-3
changelog:
  - Use make_build macro instead of just make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.6-9
changelog:
  - Subpackage python2-netifaces has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Petr Lautrbach <plautrba@redhat.com> - 2.5-2
changelog:
  - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux
  - Skip pytest in Red Hat Enterprise Linux
  - Do not build -doc subpackage for Red Hat Enterprise Linux


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.0-1
changelog:
  - Resolves: rhbz#1922352 - python-oauthlib requires python-mock
  - Update to upstream 3.1.0
  - Gets rid of obsolete python-nose dependency
  - Nuke the python2/python3 conditionals, let's only support python3


author: Miro Hrončok <mhroncok@redhat.com> - 3.1.0-2
changelog:
  - Remove the python3-oauthlib+signedtoken package
  - When building, skip tests that require jwt
  - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib


author: Jakub Hrozek <jhrozek@redhat.com> - 3.1.1-1
changelog:
  - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the
                             deprecated SHA1 algorithm by default


author: TomasHalman <thalman@redhat.com> - 3.1.1-3
changelog:
  - Remove RSA support
  - Remove build dependency on blinker
    Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Jindrich Novy <jnovy@redhat.com> - 4.2.0-2
changelog:
  - fix "[RFE] python-podman: Podman support to perform custom actions on unhealthy containers"
  - Resolves: #2136283


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:4.8.0.post1-1
changelog:
  - update to https://github.com/containers/podman-py/releases/tag/v4.8.0.post1
  - Related: Jira:RHEL-2112


author: Miro Hrončok <mhroncok@redhat.com> - 0.7.2-21
changelog:
  - Subpackage python2-prettytable has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tomas Orsava <torsava@redhat.com> - 5.8.0-5
changelog:
  - Remove unnecessary test dependency on python3-mock
  - Remove unnecessary macro __provides_exclude_from


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.8.6-6
changelog:
  - Add automatically generated Obsoletes tag with the python39- prefix
    for smoother upgrade from RHEL8
  - Add manual Obsoletes for python39-psycopg2-doc
  - Related: rhbz#1990421


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 1.4.4-8.ML.3
changelog:
  - Remove Patch1000, 1001 and recreate and apply Japanese translation patch in order 
    to fix punctuation in msgstr(Patch1000)


author: Dominik Mierzejewski <rpm@greysector.net> - 0.26-1
changelog:
  - update to 0.26 (#1780153)
  - make main package archful to run tests on all arches
    (pythonN-pyelftools subpackages are still noarch)
  - run readelf tests on x86_64 only for now
  - rename binaries to conform to Python packaging guidelines
  - enable python3 subpackage for EPEL7
  - declare bundled old construct module instead of needlessly requiring it


author: Pavel Cahyna <pcahyna@redhat.com> - 1.5.29-1
changelog:
  - Updated to 1.5.29.
  - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
    Inspired by python-sushy.


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.12.0-1
changelog:
  - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the
    msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt
    label
    Resolves: rhbz#2103243


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.17.3-3
changelog:
  - Replace pypi_name macro with srcname
  - Update BR’s
  - Run the doctests
  - Build documentation in a new -doc subpackage


author: Miro Hrončok <mhroncok@redhat.com> - 0.17.3-7
changelog:
  - Don't BuildRequire python3-hypothesis and exclude affected tests from %check
  - Resolves: rhbz#1928125


author: Miro Hrončok <mhroncok@redhat.com> - 3.4-6
changelog:
  - Subpackage python2-pyserial has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Tony Asleson <tasleson@redhat.com> - 0.14.6-6
changelog:
  - Fix build failure
    Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory


author: Miro Hrončok <mhroncok@redhat.com> - 0.26-8
changelog:
  - Subpackage python2-pyxdg has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Christian Heimes <cheimes@redhat.com> - 6.1-10
changelog:
  - Resolves: #1935839 Remove python-imaging build requirements for RHEL
  - Run unit tests during build


author: Jakub Hrozek <jhrozek@redhat.com> - 1.3.0-11
changelog:
  - Don't use SIGNATURE_RSA
  - Related: #1935433 - python-oauthlib implements and/or uses the deprecated
                        SHA1 algorithm by default


author: Paul Belanger <pabelanger@redhat.com> - 0.5.4-1
changelog:
  - Initial package.
  - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however
    downgraded to 0.5.4 due to 0.5.5 being yanked from pypi.


author: Miro Hrončok <mhroncok@redhat.com> - 12-1
changelog:
  - Disable the dist generators for Python 2
  - https://fedoraproject.org/wiki/Changes/Disable_Python_2_Dist_RPM_Generators_and_Freeze_Python_2_Macros


author: Tomas Orsava <torsava@redhat.com> - 12-2
changelog:
  - scripts/pythondistdeps: Switch from using pkg_resources to importlib.metadata
    for reading the egg/dist-info metadata
  - The script no longer requires setuptools but instead requires packaging


author: Tomas Orsava <torsava@redhat.com> - 12-4
changelog:
  - scripts/pythondistdeps: Treat extras names case-insensitively and always
    output them in lower case (#1936875)


author: Miro Hrončok <mhroncok@redhat.com> - 12-5.1
changelog:
  - Do not generate setuptools requirement for console_scripts on Python 3.10+
  - See https://fedoraproject.org/wiki/Changes/Reduce_dependencies_on_python3-setuptools


author: Miro Hrončok <mhroncok@redhat.com> - 12-6
changelog:
  - Get rid of distutils deprecation warning (by not using it)
  - The distutils module is deprecated in Python 3.10+
  - https://www.python.org/dev/peps/pep-0632/


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.2.6-5
changelog:
  - Confirm License is SPDX MIT
  - Reduce macro indirection, etc.
  - Drop unused manual runtime dependency on setuptools
  - Add a note about the circular dependency with ruamel.yaml
  - Stop numbering sources and patches
  - Update URL (close RHBZ#1840610)
  - Add an import-only “smoke test”
  - Properly handle libyaml bundling
  - Port to pyproject-rpm-macros (“new Python guidelines”)
  - Add a link to the upstream issue for the Cython workaround


author: Andrea Claudi <aclaudi@redhat.com> - [2.4.4-4.el9]
changelog:
  - Don't build scapy-doc package on rhel (Andrea Claudi) [1973720]
  - Enable gating test on RHEL9 (Jianwen Ji) [1974642]


author: Andrea Claudi <aclaudi@redhat.com> - 2.5.0-1.el9
changelog:
  - Don't package scapy tests (Andrea Claudi)
  - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667]
  - New version 2.5.0 (Andrea Claudi) [RHEL-657]


author: Pavel Simovec <psimovec@redhat.com> - 1.9.3-2
changelog:
  - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26
  - Resolves: RHEL-70908


author: Packit Service <user-cont-team+packit-service@redhat.com> - 1.8-1
changelog:
  - New version - 1.8 (Jiri Konecny)
  - Add missing make command to spec file (Jiri Konecny)
  - Don't translate the prompt keys (Vendula Poncova)
  - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny)
  - Use Fedora container registry instead of Dockerhub (Jiri Konecny)
  - Migrate COPR daily COPR builds to Packit (Jiri Konecny)
  - Test build on Fedora ELN (Jiri Konecny)
  - Remove packit get-current-action (Jiri Konecny)
  - Run tests in GitHub workflow (Martin Pitt)
  - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt)
  - Fix pylint to check test code correctly (Jiri Konecny)
  - Use script to run unit tests (Jiri Konecny)
  - Use relative imports in tests (Jiri Konecny)
  - Change directory structure of unit tests (Jiri Konecny)
  - Fix documentation of _process_screen method (Jiri Konecny)
  - Fix pylint issues (Jiri Konecny)
  - Use pylint instead of pocketlint (Jiri Konecny)
  - Add coverage support (Jiri Konecny)
  - Make link to exmples directory in Readme (Jiri Konecny)
  - Fix homepage of the project in setup.py (Jiri Konecny)
  - Fix classifiers in setup.py (Jiri Konecny)
  - Add pypi-upload to Makefile (Jiri Konecny)
  - Use correct variant of the field (Jiri Konecny)
  - Propose Fedora update only to Fedora in development (Jiri Konecny)
  - Add upstream tag template to packit for releasing (Jiri Konecny)
  - Packit will download archive from Source0 if needed (Jiri Konecny)


author: Jiri Konecny <jkonecny@redhat.com> - 1.8.3-1
changelog:
  - Fix bumpver Makefile target (Jiri Konecny)
  - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny)
    Related: rhbz#2134889
  - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny)
    Related: rhbz#2134889
  - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny)
    Resolves: rhbz#2134889
  - Add Makefile target for local container tests (Jiri Konecny)
  - Use localization from rhel-9 weblate translation component (Jiri Konecny)
  - Remove changelog from the upstream spec file (Jiri Konecny)
  - Fix spec file archive link (Jiri Konecny)
  - Include also documentation to the tarball (Jiri Konecny)
  - Rename doc directory to docs (Jiri Konecny)
  - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny)
  - Update packit config to reflect new tag naming (Jiri Konecny)
  - Change tag name to just version (Jiri Konecny)
  - Fix GitHub workflow checkout (Jiri Konecny)
  - Switch to packit new fedora-latest alias (Jiri Konecny)
  - Disable duplicate-code in pylint test (Jiri Konecny)
  - Remove duplicate of code between event loops (Jiri Konecny)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: Jaroslav Rohel <jrohel@redhat.com> - 0.7.24-1
changelog:
  - Update to 0.7.24
  - Backport Treat condition both as positive and negative literal in pool_add_pos_literals_complex_dep
    (RhBug:2185061,2190136)


author: Petr Pisar <ppisar@redhat.com> - 0.7.24-3
changelog:
  - Some static analysis fixes for unitialized structs
    Resolves: RHEL-25498
  - Fix a memory leak in parse_package() of repo conda (RHEL-25496)


author: Nils Philippsen <nils@tiptoe.de> - 1.4.32-1
changelog:
  - version 1.4.32
  - don't BR: python3-pytest-xdist on EL9
  - remove obsolete (no-op) tweak of setup.cfg


author: Sergio Correia <scorreia@redhat.com> - 1.4.37-3
changelog:
  - Remove obsolete cruft from the specfile, follow the packaging guidelines
  - Remove also extra packages we have no runtime dependencies for
    Related: rhbz#2084556


author: Jerry James <loganjerry@gmail.com> - 2020.3-4
changelog:
  - Fix cmake file installation (bz 1930389)
  - Allow use of RTM instructions when available
  - At upstream's suggestion, do not force ITT_NOTIFY support
  - Drop -fetchadd64 patch, only needed for forced ITT_NOTIFY support


author: Miro Hrončok <mhroncok@redhat.com> - 2.0.1-5
changelog:
  - Initial package for RHEL 9
  - Resolves: rhbz#2175213
  - Fedora+EPEL contributions by:
        Maxwell G <gotmax@e.email>
        Michel Alexandre Salim <salimma@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>


author: Jonathon Turel <jturel@gmail.com> 0.7.2-1
changelog:
  - Use DNF on RHEL (jturel@gmail.com)
  - Use PackageManager to determine kernel version (jturel@gmail.com)
  - Use subprocess to check process path arguments (jturel@gmail.com)
  - Find the right lxml version for Python 3.4 (jturel@gmail.com)
  - Update Vagrantfile to use Fedora 30 (jturel@gmail.com)
  - Ignore debug kernels when checking if kernel has been updated
    (jturel@gmail.com)
  - Add build dependency for nosetests (frostyx@email.cz)
  - Run tests within the %check phase (frostyx@email.cz)
  - Update fedora branches (frostyx@email.cz)


author: Jonathon Turel <jturel@gmail.com> 0.7.2-3
changelog:
  - Update tito releaser branches (frostyx@email.cz)
  - Not build for python2 package for Fedora anymore (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.4-1
changelog:
  - Fix list index out of range for ssh process names (frostyx@email.cz)
  - When there is no helper, it doesn't contain anything (frostyx@email.cz)
  - Fix wrong parameters number when upating an application objects
    (frostyx@email.cz)
  - Remove unnecessary string decoding (frostyx@email.cz)
  - Fix the missing dist in release (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.5-1
changelog:
  - Depend on python3-six instead of python3-future (frostyx@email.cz)
  - Drop beautifulsoup4 in favor of built-in xml.dom (frostyx@email.cz)
  - Drop nosetests dependency, use pytest instead (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 0.7.9-1
changelog:
  - Create /var/run/reboot-required file (frostyx@email.cz)
  - Recommend the correct command for restarting auditd (frostyx@email.cz)
  - Add python3-setuptools dependency (frostyx@email.cz)
  - Fix argument passed to print_helper() (ferdnyc@gmail.com)
  - Add similar software to the readme (frostyx@email.cz)
  - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com)
  - Oracle Linux 8 uses dnf, too (suttner@atix.de)
  - Drop python-setuptools runtime dependency (frostyx@email.cz)
  - Fix Python DeprecationWarning: invalid escape sequence
    (jvanderwaa@redhat.com)
  - Add readthedocs configuration file (frostyx@email.cz)


author: Jakub Kadlcik <frostyx@email.cz> 1.0-1
changelog:
  - Fix querying RPM files on EPEL7 (frostyx@email.cz)
  - Use backported lru_cache on EPEL7 (frostyx@email.cz)
  - Don't hang forever when executed via SSH (frostyx@email.cz)
  - Don't check if package is installed before listing its files
    (frostyx@email.cz)
  - Replace regexes where they are not needed (frostyx@email.cz)
  - Query all packages at once, its faster than one by one (frostyx@email.cz)
  - Cache some properties for a massive performance boost (frostyx@email.cz)
  - Refactor unnecessary condition (frostyx@email.cz)
  - Fix weird indentation (frostyx@email.cz)
  - Pass the whole application to the provided_by function, not just its name
    (frostyx@email.cz)
  - Stop using deprecated rpm.fi (frostyx@email.cz)
  - Attempt to fix readthedocs deprecation error (frostyx@email.cz)
  - More reliable check if /usr/lib/sysimage/dnf/ database should be used
    (frostyx@email.cz)


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-3.1
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25642
  - Resolves: RHEL-25670


author: Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
changelog:
  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25671
  - Resolves: RHEL-25643


author: Gerd Hoffmann <kraxel@redhat.com> - 1.6-1
changelog:
  - update to version 1.6
  - drop peutils
  - add man-pages
  - add tests sub-package
  - resolves: rhbz#2142608


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-1
changelog:
  - Rebase to 3.11.9
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix expat tests for the latest expat security release
  Resolves: RHEL-33677, RHEL-33689


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.11-2.1
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  - Resolves: RHEL-98045, RHEL-98015, RHEL-98238, RHEL-98177, RHEL-98206


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-1
changelog:
  - Update to 3.11.13
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.13-2
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-101551


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11.13-5.1
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143104 RHEL-143167 RHEL-144890


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.5-1
changelog:
  - Rebase to 3.11.5
  - Security fixes for CVE-2023-40217 and CVE-2023-41105
  Resolves: RHEL-3045, RHEL-3269


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11.7-1.1
changelog:
  - Security fix for CVE-2023-6597
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33884


author: Charalampos Stratakis <cstratak@redhat.com> - 1.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.15.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Gwyn Ciesla <limburgher@gmail.com>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Joel Capitao <jcapitao@redhat.com>
        John Dulaney <jdulaney@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Parag Nemade <pnemade@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.1.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 37.0.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@ualberta.net>


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <fale@redhat.com>
        Igor Raits <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jcollie@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomas Orsava <torsava@redhat.com> - 4.9.2-4
changelog:
  - Bring back the isoschematron submodule,
    but without the validation of the schema file itself
  - Resolves: RHEL-5570


author: Maito Yokoyama <maito.yokoyama@asianux.com> - 4.9.2-4.el9.ML.1
changelog:
  - Fix etree XMLPullParser tests for Expat >=2.5.0 
  - Get python-lxml-4.6.5-1-fix-test_elementtree-py.patch (https://github.com/python/cpython/commit/4a08e7b3431cd32a0daf22a33421cd3035343dc4)


author: Charalampos Stratakis <cstratak@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.23.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <sharkcz@fedoraproject.org>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <limburgher@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 22.3.1-1
changelog:
  - Initial package
  - Fedora contributions by:
      Bill Nottingham <notting@fedoraproject.org>
      Charalampos Stratakis <cstratak@redhat.com>
      David Malcolm <dmalcolm@redhat.com>
      Dennis Gilmore <dennis@ausil.us>
      Jon Ciesla <limburgher@gmail.com>
      Karolina Surma <ksurma@redhat.com>
      Kevin Fenzi <kevin@fedoraproject.org>
      Kevin Kofler <Kevin@tigcc.ticalc.org>
      Luke Macken <lmacken@redhat.com>
      Lumir Balhar <lbalhar@redhat.com>
      Marcel Plch <mplch@redhat.com>
      Matej Stuchlik <mstuchli@redhat.com>
      Michal Cyprian <m.cyprian@gmail.com>
      Miro Hrončok <miro@hroncok.cz>
      Orion Poplawski <orion@cora.nwra.com>
      Pádraig Brady <P@draigBrady.com>
      Peter Halliday <hoangelos@fedoraproject.org>
      Petr Viktorin <pviktori@redhat.com>
      Robert Kuska <rkuska@redhat.com>
      Slavek Kabrda <bkabrda@redhat.com>
      Tim Flink <tflink@fedoraproject.org>
      Tomáš Hrnčiar <thrnciar@redhat.com>
      Tomas Orsava <torsava@redhat.com>
      Toshio Kuratomi <toshio@fedoraproject.org>
      Ville Skyttä <ville.skytta@iki.fi>


author: Charalampos Stratakis <cstratak@redhat.com> - 3.11-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim GÜNDÜZ <devrim@fedoraproject.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.20-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.7.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Raphael Groner <raphgro@fedoraproject.org>
        Tim Orling <timothy.t.orling@linux.intel.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 6.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <ausil@fedoraproject.org>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 2.28.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.8.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 65.5.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.16.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        yatin <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.26.12-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        yatinkarel <ykarel@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.12-5.1
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-140565, RHEL-139404


author: Charalampos Stratakis <cstratak@redhat.com> - 0.38.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Björn Esser <besser82@fedoraproject.org>
        Bohuslav Kabrda <bkabrda@redhat.com>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Florian Weimer <fweimer@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Igor Gnatenko <ignatenko@redhat.com>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jaroslav Škarvada <jskarvad@redhat.com>
        Jason ティビツ <tibbs@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karsten Hopp <karsten@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <marcel.plch@protonmail.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Michal Toman <mtoman@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Nicolas Chauvet <kwizart@gmail.com>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Peter Robinson <pbrobinson@gmail.com>
        Petr Šplíchal <psplicha@redhat.com>
        Petr Viktorin <pviktori@redhat.com>
        Rex Dieter <rdieter@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Robert Kuska <rkuska@gmail.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Till Maas <opensource@till.name>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Mraz <tmraz@fedoraproject.org>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Victor Stinner <vstinner@python.org>
        Ville Skyttä <ville.skytta@iki.fi>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Mika Kamei <mika.kamei@miraclelinux.com> - 3.12.1-4.el9.ML.1
changelog:
  - Fix failed test_xml_etree with expat 2.5.0 (Patch1000)
    (https://github.com/python/cpython/pull/115164/)


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.1-4.1
changelog:
  - Fix tests for XMLPullParser with Expat with fixed CVE
  - Enable importing of hash-based .pyc files under FIPS mode
  Resolves: RHEL-40773


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
changelog:
  - Update to 3.12.8
  - Security fix for CVE-2024-9287 and CVE-2024-12254
  Resolves: RHEL-64886, RHEL-70320


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.10-3
changelog:
  - Fix PySSL_SetError handling SSL_ERROR_SYSCALL
  - This fixes random flakiness of test_ssl on stressed machines
  Resolves: RHEL-88897


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.11-1
changelog:
  - Update to 3.12.11
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  Resolves: RHEL-98057, RHEL-98019, RHEL-97811, RHEL-98183, RHEL-98210


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.12.12-4.1
changelog:
  - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299
  Resolves: RHEL-143106 RHEL-143168 RHEL-144891


author: Lumír Balhar <lbalhar@redhat.com> - 3.12.2-3
changelog:
  - Move all test modules to the python3-test package, namely:
     - __phello__
     - _xxsubinterpreters
     - xxlimited
     - xxlimited_35
     - xxsubtype


author: Charalampos Stratakis <cstratak@redhat.com> - 3.12.9-1.1
changelog:
  - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435
  - Resolves: RHEL-98058, RHEL-98020, RHEL-97809, RHEL-98184, RHEL-98211


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.1.0-4
changelog:
  - Initial package
  - Fedora contributions by:
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Damien Ciabrini <dciabrin@redhat.com>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Itamar Reis Peixoto <itamar@ispbrasil.com.br>
        Julien Enselme <jujens@jujens.eu>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.3.0-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Gwyn Ciesla <limb@fedoraproject.org>
        Lumír Balhar <lbalhar@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 41.0.5-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alfredo Moralejo <amoralej@redhat.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <christian@python.org>
        Colin Walters <walters@verbum.org>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Valentini <decathorpe@gmail.com>
        Felix Schwarz <felix.schwarz@oss.schwarz.eu>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matěj Cepl <mcepl@cepl.eu>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <npmccallum@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Sahana Prasad <sahana@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Paul Wouters <pwouters@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Tom Prince <tom.prince@twistedmatrix.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.3-1
changelog:
  - Initial package
  - Fedora contributions by:
        Alexander Todorov <atodorov@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Fabio Alessandro Locati <me@fale.io>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason ティビツ <tibbs@fedoraproject.org>
        Jeffrey C. Ollie <jeff@ocjtech.us>
        Jesse Keating <jkeating@fedoraproject.org>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mikolaj Izdebski <mizdebsk@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@gmail.com>
        Robert Kuska <rkuska@redhat.com>
        Shahms King <shahms@fedoraproject.org>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        tomspur <tomspur@fedoraproject.org>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>


author: Mika Kamei <mika.kamei@miraclelinux.com> - 4.9.3-2.el9.ML.1
changelog:
  - Fix test_elementtree with Expat 2.5.0 (Patch#1000)
    Upstream patch: (https://src.fedoraproject.org/rpms/python-lxml/blob/f40/f/407.patch)


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 4.9.4-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Alexander Bokovoy <abokovoy@redhat.com>
        Bill Nottingham <notting@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Dorňák <jakub.dornak@misli.cz>
        James Bowes <jbowes@repl.ca>
        Jan Kaluza <jkaluza@redhat.com>
        jbowes <jbowes@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Joe Orton <jorton@redhat.com>
        joshkayse <joshkayse@fedoraproject.org>
        Kevin Fenzi <kevin@fedoraproject.org>
        Luboš Uhliarik <luhliari@redhat.com>
        Luke Macken <lmacken@fedoraproject.org>
        Matthias Runge <mrunge@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Richard W.M. Jones <rjones@redhat.com>
        Ricky Zhou (周家杰) <ricky@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tom Stellard <tstellar@redhat.com>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.24.4-2
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        David Tardon <dtardon@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Gwyn Ciesla <gwync@protonmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jarod Wilson <jwilson@fedoraproject.org>
        Jaromir Capik <jcapik@redhat.com>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Merlin Mathesius <mmathesi@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Robert Kuska <rkuska@redhat.com>
        Scott Talbert <swt@techie.net>
        Simone Caronni <negativo17@gmail.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>
        Yaakov Selkowitz <yselkowitz@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 23.2.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Jon Ciesla <limburgher@gmail.com>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@fedoraproject.org>
        Kevin Kofler <Kevin@tigcc.ticalc.org>
        Luke Macken <lmacken@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <m.cyprian@gmail.com>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Pádraig Brady <P@draigBrady.com>
        Peter Halliday <hoangelos@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tim Flink <tflink@fedoraproject.org>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <tomas.n@orsava.cz>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Ville Skyttä <ville.skytta@iki.fi>


author: Miro Hrončok <mhroncok@redhat.com> - 23.2.1-3
changelog:
  - Don't RPM Provide pip
  - Remove a superfluous RPM Conflict with python-pip
  - Allows to install python3.12-pip together with python3-pip


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.11-22
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        dmalcolm <dmalcolm@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Orion Poplawski <orion@cora.nwra.com>
        Patrik Kopkan <pkopkan@redhat.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Thomas Spura <tomspur@fedoraproject.org>
        Tom spot Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.9.6-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Devrim Gündüz <devrim@gunduz.org>
        Filip Januš <fjanus@redhat.com>
        Honza Horak <hhorak@redhat.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Jason Tibbitts <tibbs@math.uh.edu>
        Jesse Keating <jkeating@fedoraproject.org>
        Jozef Mlich <jmlich@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Ondřej Sloup <ondrej.sloup@protonmail.com>
        Patrik Novotný <panovotn@redhat.com>
        Pavel Raiskup <praiskup@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Kubat <pkubat@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Todd Zullinger <tmz@fedoraproject.org>
        Tomas Hrnciar <thrnciar@redhat.com>
        Tom Lane <tgl@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.20-13
changelog:
  - Initial package
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Heimes <cheimes@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Eric Smith <brouhaha@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Lumir Balhar <lbalhar@redhat.com>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nathaniel McCallum <nathaniel@themccallums.org>
        Orion Poplawski <orion@cora.nwra.com>
        Rob Crittenden <rcritten@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 6.0.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        Dan Horák <dan@danny.cz>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jakub Čajka <jcajka@redhat.com>
        Jesse Keating <jkeating@fedoraproject.org>
        John Eckersberg <jeckersb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru Tasaka <mtasaka@fedoraproject.org>
        Miro Hrončok <miro@hroncok.cz>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 2.28.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Adam Williamson <awilliam@redhat.com>
        Arun SAG <sagarun@gmail.com>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Petr Viktorin <pviktori@redhat.com>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Rex Dieter <rdieter@math.unl.edu>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Stephen Gallagher <sgallagh@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Charalampos Stratakis <cstratak@redhat.com> - 1.11.1-1
changelog:
  - Initial package
  - Fedora contributions by:
        Antonio Trande <anto.trande@gmail.com>
        Bill Nottingham <notting@fedoraproject.org>
        Björn Esser <me@besser82.io>
        Charalampos Stratakis <cstratak@redhat.com>
        Christian Dersch <lupinix@mailbox.org>
        David Malcolm <dmalcolm@redhat.com>
        Deji Akingunola <deji@fedoraproject.org>
        Dennis Gilmore <dennis@ausil.us>
        Elliott Sales de Andrade <quantum.analyst@gmail.com>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Iñaki Úcar <iucar@fedoraproject.org>
        Jef Spaleta <jspaleta@fedoraproject.org>
        Jerry James <loganjerry@gmail.com>
        Jesse Keating <jkeating@fedoraproject.org>
        Jitka Plesnikova <jplesnik@redhat.com>
        Jonathan Wakely <jwakely@redhat.com>
        Jon Ciesla <limb@fedoraproject.org>
        Kalev Lember <klember@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lumir Balhar <lbalhar@redhat.com>
        Mamoru TASAKA <mtasaka@fedoraproject.org>
        Marcel Plch <mplch@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nikola Forró <nforro@redhat.com>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Pavel Šimovec <psimovec@redhat.com>
        Peter Robinson <pbrobinson@fedoraproject.org>
        Petr Viktorin <pviktori@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Than Ngo <than@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomas Tomecek <ttomecek@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 68.2.2-1
changelog:
  - Initial package
  - Fedora contributions by:
        Bill Nottingham <notting@fedoraproject.org>
        Charalampos Stratakis <cstratak@redhat.com>
        David Malcolm <dmalcolm@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org>
        Jesse Keating <jkeating@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Konstantin Ryabitsev <icon@fedoraproject.org>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Michal Cyprian <mcyprian@redhat.com>
        Miro Hrončok <miro@hroncok.cz>
        Nils Philippsen <nils@redhat.com>
        Orion Poplawski <orion@cora.nwra.com>
        Petr Viktorin <pviktori@redhat.com>
        Pierre-Yves Chibon <pingou@pingoured.fr>
        Ralph Bean <rbean@redhat.com>
        Randy Barlow <randy@electronsweatshop.com>
        Robert Kuska <rkuska@redhat.com>
        Thomas Spura <thomas.spura@gmail.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>
        Tomas Radej <tradej@redhat.com>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Troy Dawson <tdawson@redhat.com>
        Ville Skyttä <scop@fedoraproject.org>


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 1.26.18-1
changelog:
  - Initial package
  - Fedora contributions by
        Adam Williamson <awilliam@redhat.com>
        Anna Khaitovich <akhaitov@redhat.com>
        Arun S A G <sagarun@gmail.com>
        Benjamin A. Beasley <code@musicinmybrain.net>
        Carl George <carl@george.computer>
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Iryna Shcherbina <shcherbina.iryna@gmail.com>
        Jeremy Cline <jeremy@jcline.org>
        Karolina Surma <ksurma@redhat.com>
        Kevin Fenzi <kevin@scrye.com>
        Lukas Slebodnik <lslebodn@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Ralph Bean <rbean@redhat.com>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomas Hoger <thoger@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tom Callaway <spot@fedoraproject.org>
        Toshio Kuratomi <toshio@fedoraproject.org>
        Yaakov Selkowitz <yselkowi@redhat.com>
        yatinkarel <ykarel@redhat.com>


author: Miro Hrončok <mhroncok@redhat.com> - 1.26.19-1.1
changelog:
  - Security fix for CVE-2025-66471
  - Security fix for CVE-2025-66418
  - Security fix for CVE-2026-21441
  Resolves: RHEL-139403


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 0.41.2-1
changelog:
  - Initial package.
  - Fedora contributions by:
        Charalampos Stratakis <cstratak@redhat.com>
        Dennis Gilmore <dennis@ausil.us>
        Haikel Guemar <hguemar@fedoraproject.org>
        Igor Gnatenko <ignatenkobrain@fedoraproject.org>
        Karolina Surma <ksurma@redhat.com>
        Lumir Balhar <lbalhar@redhat.com>
        Matej Stuchlik <mstuchli@redhat.com>
        Maxwell G <maxwell@gtmx.me>
        Miro Hrončok <miro@hroncok.cz>
        Robert Kuska <rkuska@redhat.com>
        Slavek Kabrda <bkabrda@redhat.com>
        Tomáš Hrnčiar <thrnciar@redhat.com>
        Tomas Orsava <torsava@redhat.com>


author: Vladis Dronov <vdronov@redhat.com> - 0.6.7-1
changelog:
  - Update to qatengine v0.6.7 with openssl-3 support (bz 1874206, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 1.4.0-1
changelog:
  - Update to qatengine v1.4.0 (RHEL-15636)
  - Enable QAT_HW & QAT SW Co-ex Acceleration for non RHEL distros


author: Vladis Dronov <vdronov@redhat.com> - 1.7.0-1
changelog:
  - Update to qatengine v1.7.0 @ ceb9d4ac (RHEL-47394)
  - Remove qat_contig_mem from upstream package
  - Add a condition to build as an OpenSSL provider


author: Vladis Dronov <vdronov@redhat.com> - 21.05.0-1
changelog:
  - Update to qatlib 21.05 with openssl-3 support (bz 1920444, bz 1953498)
  - Add documentation files to a package


author: Vladis Dronov <vdronov@redhat.com> - 24.02.0-1
changelog:
  - Update to qatlib 24.02.0 (RHEL-20174)
  - Add zuc_sample to qatlib-tests package
  - Use proper SPDX license identifiers


author: Vladis Dronov <vdronov@redhat.com> - 24.09.0-1
changelog:
  - Update to qatlib 24.09.0 @ 36fb0903 (RHEL-40255)
  - Add pciutils as a dependency of the qatlib-service subpackage
  - Add numactl-devel as a dependency since it is required by qatlib-24.09.0


author: Vladis Dronov <vdronov@redhat.com> - 1.0.7-1
changelog:
  - Rebuild for qatzip v1.0.7
  - Fix snprintf truncation check (bz 2046925)
  - Add -fstack-protector-strong build option (bz 2044889)


author: Vladis Dronov <vdronov@redhat.com> - 1.0.9-1
changelog:
  - Rebuild for qatzip v1.0.9 (bz 2047744)
  - Update to require qatlib-devel >= 22.07.0 due to soversion bump


author: Vladis Dronov <vdronov@redhat.com> - 1.1.2-1
changelog:
  - Update to qatzip 1.1.2 (bz 2178631)
  - Update README, update driver configure files
  - Fix some bugs
  - Add support for pkgconfig


author: Vladis Dronov <vdronov@redhat.com> - 1.1.2-1
changelog:
  - Update to qatzip 1.1.2 (bz 2082438)
  - Update README, update driver configure files
  - Fix some bugs
  - Add support for pkgconfig


author: Vladis Dronov <vdronov@redhat.com> - 1.3.1-1
changelog:
  - Update to qatzip 1.3.1 @ 10dbadba (RHEL-73091, RHEL-50460)
  - Fix qatzip docker file build broken issue
  - Support Latency sensitive mode for qatzip
  - Add a suit of comp/decomp API to support Async offloading
  - Support zlib format and end of stream flag
  - Fix some bugs


author: Basil Salman <bsalman@redhat.com> 102.0.0
changelog:
  - rebase to qemu-5.2.0
  - Set version to 102.0.0
  - BZ#1915198 - Rebase mingw-qemu-ga-win to qemu 5.2
  - BZ#1929144 - fix qemu-ga-win resource leaks
  - BZ#1920874 - Some changes of qga command "get-devices" should be fix on mingw-qemu-ga-win to qemu 5.2
  - BZ#1919535 - Can not get the disks of windows guest via guest agent
  - BZ#1909073 - Filesystem freeze on Windows reports errors frequently


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.1.0
changelog:
  - Set version to 102.1.0
  - BZ#1957377 - ownstream qemu-ga should report the build number and not QEMU version


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.5.0
changelog:
  - Set version to 102.5.0
  - Bug 1972070 - RFE: Add Windows Server 2022 version support for mingw-qemu-ga


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.6.0
changelog:
  - Set version to 102.6.0
  - BZ#1978859 - The qemu-ga-win build version in MSI is different between checking inside guest and qga command
  - BZ#1981302 - QGA version can't be upgrade directly without uninstalling old version


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.9.0
changelog:
  - Set version to 102.9.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Use mingw-glib2-2.70.1


author: Yan Vugenfirer <yvugenfi@redhat.com> 102.10.0
changelog:
  - Set version to 102.10.0
  - BZ#2026167 - Add Windows11 version support for mingw-qemu-ga
  - Dynamically link mingw-glib2 library


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-4
changelog:
  - kvm-block-nvme-fix-infinite-loop-in-nvme_free_req_queue_.patch [bz#2024544]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2028623]
  - Resolves: bz#2024544
    (Fio workers hangs when running fio with 32 jobs iodepth 32 and QEMU's userspace NVMe driver)
  - Resolves: bz#2028623
    ([9.0] machine types: 6.2: Fix prefer_sockets)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-5
changelog:
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#1945666]
  - kvm-x86-Add-q35-RHEL-9.0.0-machine-type.patch [bz#1945666]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2036669]
  - Resolves: bz#1945666
    (9.0: x86 machine types)
  - Resolves: bz#2036669
    (DEVICE_DELETED event is not delivered for device frontend if -device is configured via JSON)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-6
changelog:
  - Moving feature support out of qemu-kvm-core to separate packages (can
    cause loss of functionality when using only qemu-kvm-core - qemu-kvm keeps
    same feature set).
  - kvm-spec-Rename-qemu-kvm-hw-usbredir-to-qemu-kvm-device-.patch [bz#2022847]
  - kvm-spec-Split-qemu-kvm-ui-opengl.patch [bz#2022847]
  - kvm-spec-Introduce-packages-for-virtio-gpu-modules.patch [bz#2022847]
  - kvm-spec-Introduce-device-display-virtio-vga-packages.patch [bz#2022847]
  - kvm-spec-Move-usb-host-module-to-separate-package.patch [bz#2022847]
  - kvm-spec-Move-qtest-accel-module-to-tests-package.patch [bz#2022847]
  - kvm-spec-Extend-qemu-kvm-core-description.patch [bz#2022847]
  - Resolves: bz#2022847
    (qemu-kvm: Align package split with Fedora)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-7
changelog:
  - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088]
  - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088]
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791]
  - Resolves: bz#1962088
    ([QSD] wrong help message for the fuse)
  - Resolves: bz#2046201
    (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0])
  - Resolves: bz#2034791
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-8
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708]
  - kvm-Enable-SGX-RH-Only.patch [bz#2033708]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041461]
  - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917]
  - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123]
  - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481]
  - Resolves: bz#2033708
    ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041461
    (Inconsistent block status reply in qemu-nbd)
  - Resolves: bz#1882917
    (the target image size is incorrect when converting a badly fragmented file)
  - Resolves: bz#2040123
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2042481
    ([aarch64] Launch guest with "default-bus-bypass-iommu=off,iommu=smmuv3" and "iommu_platform=on", guest hangs after system_reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-9
changelog:
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659]
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626]
  - Resolves: bz#2046659
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2033626
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-10
changelog:
  - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820]
  - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820]
  - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820]
  - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818]
  - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818]
  - Resolves: bz#2042820
    (qemu crash when try to copy and paste contents from client to VM)
  - Resolves: bz#2044818
    (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11
changelog:
  - kvm-spec-Remove-qemu-virtiofsd.patch [bz#2055284]
  - Resolves: bz#2055284
    (Remove the qemu-virtiofsd subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.1
changelog:
  - kvm-RHEL-mark-old-machine-types-as-deprecated.patch [bz#2052050]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2059786]
  - kvm-spec-Fix-obsolete-for-spice-subpackages.patch [bz#2059175 bz#2059146]
  - kvm-spec-Obsolete-old-usb-redir-subpackage.patch [bz#2059175 bz#2059146]
  - kvm-spec-Obsolete-ssh-driver.patch [bz#2059175 bz#2059146]
  - Resolves: bz#2052050
    (Mark all RHEL-8 and earlier machine types as deprecated)
  - Resolves: bz#2059786
    ([virtual network][rhel9][vDPA] qemu crash after hot unplug vdpa device)
  - Resolves: bz#2059175
    (Broken upgrade path due to qemu-kvm-hw-usbredir  rename)
  - Resolves: bz#2059146
    (Missing qemu-kvm-block-ssh obsolete breaks upgrade path)


author: <cconte@redhat.com> - 6.2.0-11.el9_0.2
changelog:
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2053584]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2053584]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2038051]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2038051]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2043531]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2043531]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2043531]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2043531]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2043531]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2043531]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2043531]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2043531]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2043531]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2043531]
  - Resolves: bz#2053584
    (watchdog: BUG: soft lockup - CPU#3 stuck for 22s! [cat:2843])
  - Resolves: bz#2038051
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04')
  - Resolves: bz#2043531
    (Guest can not start with SLIC acpi table)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.3
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2071102]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2075635]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2075640]
  - Resolves: bz#2071102
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-9.0.0.z])
  - Resolves: bz#2075635
    (CVE-2022-26353 qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-9] [rhel-9.0.0.z])
  - Resolves: bz#2075640
    (CVE-2022-26354 qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-9] [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.4
changelog:
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2095795]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2095795]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2095795]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2095795]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2095795]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2095795]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2095795]
  - Resolves: bz#2095795
    (PXE boot crash qemu when using multiqueue vDPA [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.5
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2109569]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2109569]
  - Resolves: bz#2109569
    (Stalled IO Operations in VM [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-6
changelog:
  - kvm-Introduce-event-loop-base-abstract-class.patch [bz#2031024]
  - kvm-util-main-loop-Introduce-the-main-loop-into-QOM.patch [bz#2031024]
  - kvm-util-event-loop-base-Introduce-options-to-set-the-th.patch [bz#2031024]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#2072379]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#2072379]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#2072379]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#2072379]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2070804]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2070804]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2070804]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2070804]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2070804]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2070804]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2070804]
  - kvm-Revert-globally-limit-the-maximum-number-of-CPUs.patch [bz#2094270]
  - kvm-vfio-common-remove-spurious-warning-on-vfio_listener.patch [bz#2086262]
  - Resolves: bz#2031024
    (Add support for fixing thread pool size [QEMU])
  - Resolves: bz#2072379
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))
  - Resolves: bz#2070804
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2094270
    (Do not set the hard vCPU limit to the soft vCPU limit in downstream qemu-kvm anymore)
  - Resolves: bz#2086262
    ([Win11][tpm]vfio_listener_region_del received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-7
changelog:
  - kvm-coroutine-ucontext-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-coroutine-win32-use-QEMU_DEFINE_STATIC_CO_TLS.patch [bz#1952483]
  - kvm-Enable-virtio-iommu-pci-on-x86_64.patch [bz#2094252]
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2092788]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2092788]
  - Resolves: bz#1952483
    (RFE: QEMU's coroutines fail with CFLAGS=-flto on non-x86_64 architectures)
  - Resolves: bz#2094252
    (Compile the virtio-iommu device on x86_64)
  - Resolves: bz#2092788
    (Stalled IO Operations in VM)


author: Camilla Conte <cconte@redhat.com> - 7.0.0-8
changelog:
  - kvm-tests-avocado-update-aarch64_virt-test-to-exercise-c.patch [bz#2060839]
  - kvm-RHEL-only-tests-avocado-Switch-aarch64-tests-from-a5.patch [bz#2060839]
  - kvm-RHEL-only-AArch64-Drop-unsupported-CPU-types.patch [bz#2060839]
  - kvm-target-i386-deprecate-CPUs-older-than-x86_64-v2-ABI.patch [bz#2060839]
  - kvm-target-s390x-deprecate-CPUs-older-than-z14.patch [bz#2060839]
  - kvm-target-arm-deprecate-named-CPU-models.patch [bz#2060839]
  - kvm-meson.build-Fix-docker-test-build-alpine-when-includ.patch [bz#1968509]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#1968509]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#1968509]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#1968509]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#1968509]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#1968509]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#1968509]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#1968509]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#1968509]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#1968509]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#1968509]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2096143]
  - Resolves: bz#2060839
    (Consider deprecating CPU models like "kvm64" / "qemu64" on RHEL 9)
  - Resolves: bz#1968509
    (Use MSG_ZEROCOPY on QEMU Live Migration)
  - Resolves: bz#2096143
    (The migration port is not released if use it again for recovering postcopy migration)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-9
changelog:
  - kvm-virtio-iommu-Add-bypass-mode-support-to-assigned-dev.patch [bz#2100106]
  - kvm-virtio-iommu-Use-recursive-lock-to-avoid-deadlock.patch [bz#2100106]
  - kvm-virtio-iommu-Add-an-assert-check-in-translate-routin.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-the-partial-copy-of-probe-request.patch [bz#2100106]
  - kvm-virtio-iommu-Fix-migration-regression.patch [bz#2100106]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098077]
  - kvm-pc-bios-s390-ccw-netboot.mak-Ignore-Clang-s-warnings.patch [bz#2098077]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951522]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951522]
  - Resolves: bz#2100106
    (Fix virtio-iommu/vfio bypass)
  - Resolves: bz#2098077
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)
  - Resolves: bz#1951522
    (CVE-2021-3507 qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-9.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-10
changelog:
  - kvm-vhost-Track-descriptor-chain-in-private-at-SVQ.patch [bz#1939363]
  - kvm-vhost-Fix-device-s-used-descriptor-dequeue.patch [bz#1939363]
  - kvm-hw-virtio-Replace-g_memdup-by-g_memdup2.patch [bz#1939363]
  - kvm-vhost-Fix-element-in-vhost_svq_add-failure.patch [bz#1939363]
  - kvm-meson-create-have_vhost_-variables.patch [bz#1939363]
  - kvm-meson-use-have_vhost_-variables-to-pick-sources.patch [bz#1939363]
  - kvm-vhost-move-descriptor-translation-to-vhost_svq_vring.patch [bz#1939363]
  - kvm-virtio-net-Expose-MAC_TABLE_ENTRIES.patch [bz#1939363]
  - kvm-virtio-net-Expose-ctrl-virtqueue-logic.patch [bz#1939363]
  - kvm-vdpa-Avoid-compiler-to-squash-reads-to-used-idx.patch [bz#1939363]
  - kvm-vhost-Reorder-vhost_svq_kick.patch [bz#1939363]
  - kvm-vhost-Move-vhost_svq_kick-call-to-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Check-for-queue-full-at-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-Decouple-vhost_svq_add-from-VirtQueueElement.patch [bz#1939363]
  - kvm-vhost-Add-SVQDescState.patch [bz#1939363]
  - kvm-vhost-Track-number-of-descs-in-SVQDescState.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_push_elem.patch [bz#1939363]
  - kvm-vhost-Expose-vhost_svq_add.patch [bz#1939363]
  - kvm-vhost-add-vhost_svq_poll.patch [bz#1939363]
  - kvm-vhost-Add-svq-avail_handler-callback.patch [bz#1939363]
  - kvm-vdpa-Export-vhost_vdpa_dma_map-and-unmap-calls.patch [bz#1939363]
  - kvm-vhost-net-vdpa-add-stubs-for-when-no-virtio-net-devi.patch [bz#1939363]
  - kvm-vdpa-manual-forward-CVQ-buffers.patch [bz#1939363]
  - kvm-vdpa-Buffer-CVQ-support-on-shadow-virtqueue.patch [bz#1939363]
  - kvm-vdpa-Extract-get-features-part-from-vhost_vdpa_get_m.patch [bz#1939363]
  - kvm-vdpa-Add-device-migration-blocker.patch [bz#1939363]
  - kvm-vdpa-Add-x-svq-to-NetdevVhostVDPAOptions.patch [bz#1939363]
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2111994]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2111994]
  - kvm-kvm-don-t-use-perror-without-useful-errno.patch [bz#2095608]
  - kvm-multifd-Copy-pages-before-compressing-them-with-zlib.patch [bz#2099934]
  - kvm-Revert-migration-Simplify-unqueue_page.patch [bz#2099934]
  - Resolves: bz#1939363
    (vDPA control virtqueue support in Qemu)
  - Resolves: bz#2111994
    (RHEL9: skey test in kvm_unit_test got failed)
  - Resolves: bz#2095608
    (Please correct the error message when try to start qemu with "-M kernel-irqchip=split")
  - Resolves: bz#2099934
    (Guest reboot on destination host after postcopy migration completed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-11
changelog:
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2107466]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2107466]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2107466]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2107466]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2107466]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2107466]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112303]
  - kvm-vdpa-Fix-bad-index-calculus-at-vhost_vdpa_get_vring_.patch [bz#2116876]
  - kvm-vdpa-Fix-index-calculus-at-vhost_vdpa_svqs_start.patch [bz#2116876]
  - kvm-vdpa-Fix-memory-listener-deletions-of-iova-tree.patch [bz#2116876]
  - kvm-vdpa-Fix-file-descriptor-leak-on-get-features-error.patch [bz#2116876]
  - Resolves: bz#2107466
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112303
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)
  - Resolves: bz#2116876
    (Fixes for vDPA control virtqueue support in Qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-12
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120275]
  - kvm-vhost-Get-vring-base-from-vq-not-svq.patch [bz#2114060]
  - kvm-vdpa-Skip-the-maps-not-in-the-iova-tree.patch [bz#2114060]
  - kvm-vdpa-do-not-save-failed-dma-maps-in-SVQ-iova-tree.patch [bz#2114060]
  - kvm-util-Return-void-on-iova_tree_remove.patch [bz#2114060]
  - kvm-util-accept-iova_tree_remove_parameter-by-value.patch [bz#2114060]
  - kvm-vdpa-Remove-SVQ-vring-from-iova_tree-at-shutdown.patch [bz#2114060]
  - kvm-vdpa-Make-SVQ-vring-unmapping-return-void.patch [bz#2114060]
  - kvm-vhost-Always-store-new-kick-fd-on-vhost_svq_set_svq_.patch [bz#2114060]
  - kvm-vdpa-Use-ring-hwaddr-at-vhost_vdpa_svq_unmap_ring.patch [bz#2114060]
  - kvm-vhost-stop-transfer-elem-ownership-in-vhost_handle_g.patch [bz#2114060]
  - kvm-vhost-use-SVQ-element-ndescs-instead-of-opaque-data-.patch [bz#2114060]
  - kvm-vhost-Delete-useless-read-memory-barrier.patch [bz#2114060]
  - kvm-vhost-Do-not-depend-on-NULL-VirtQueueElement-on-vhos.patch [bz#2114060]
  - kvm-vhost_net-Add-NetClientInfo-start-callback.patch [bz#2114060]
  - kvm-vhost_net-Add-NetClientInfo-stop-callback.patch [bz#2114060]
  - kvm-vdpa-add-net_vhost_vdpa_cvq_info-NetClientInfo.patch [bz#2114060]
  - kvm-vdpa-Move-command-buffers-map-to-start-of-net-device.patch [bz#2114060]
  - kvm-vdpa-extract-vhost_vdpa_net_cvq_add-from-vhost_vdpa_.patch [bz#2114060]
  - kvm-vhost_net-add-NetClientState-load-callback.patch [bz#2114060]
  - kvm-vdpa-Add-virtio-net-mac-address-via-CVQ-at-start.patch [bz#2114060]
  - kvm-vdpa-Delete-CVQ-migration-blocker.patch [bz#2114060]
  - kvm-virtio-scsi-fix-race-in-virtio_scsi_dataplane_start.patch [bz#2099541]
  - Resolves: bz#2120275
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-9.1])
  - Resolves: bz#2114060
    (vDPA state restore support through control virtqueue in Qemu)
  - Resolves: bz#2099541
    (qemu coredump with error Assertion `qemu_mutex_iothread_locked()' failed when repeatly hotplug/unplug disks in pause status)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13
changelog:
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2117546]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2117546]
  - Resolves: bz#2117546
    ([RHEL9.1] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.1
changelog:
  - kvm-target-i386-kvm-fix-kvmclock_current_nsec-Assertion-.patch [bz#2134896]
  - Resolves: bz#2134896
    (Windows guest reboot after migration with wsl2 installed inside [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-13.el9_1.2
changelog:
  - kvm-migration-Read-state-once.patch [bz#2168221]
  - Resolves: bz#2168221
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set [rhel-9.1.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-4
changelog:
  - kvm-qapi-machine.json-Add-cluster-id.patch [bz#2041823]
  - kvm-qtest-numa-test-Specify-CPU-topology-in-aarch64_numa.patch [bz#2041823]
  - kvm-hw-arm-virt-Consider-SMP-configuration-in-CPU-topolo.patch [bz#2041823]
  - kvm-qtest-numa-test-Correct-CPU-and-NUMA-association-in-.patch [bz#2041823]
  - kvm-hw-arm-virt-Fix-CPU-s-default-NUMA-node-ID.patch [bz#2041823]
  - kvm-hw-acpi-aml-build-Use-existing-CPU-topology-to-build.patch [bz#2041823]
  - kvm-coroutine-Rename-qemu_coroutine_inc-dec_pool_size.patch [bz#2079938]
  - kvm-coroutine-Revert-to-constant-batch-size.patch [bz#2079938]
  - kvm-virtio-scsi-fix-ctrl-and-event-handler-functions-in-.patch [bz#2079347]
  - kvm-virtio-scsi-don-t-waste-CPU-polling-the-event-virtqu.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_event_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_ctrl_vq.patch [bz#2079347]
  - kvm-virtio-scsi-clean-up-virtio_scsi_handle_cmd_vq.patch [bz#2079347]
  - kvm-virtio-scsi-move-request-related-items-from-.h-to-.c.patch [bz#2079347]
  - kvm-Revert-virtio-scsi-Reject-scsi-cd-if-data-plane-enab.patch [bz#1995710]
  - kvm-migration-Fix-operator-type.patch [bz#2064530]
  - Resolves: bz#2041823
    ([aarch64][numa] When there are at least 6 Numa nodes serial log shows 'arch topology borken')
  - Resolves: bz#2079938
    (qemu coredump when boot with multi disks (qemu) failed to set up stack guard page: Cannot allocate memory)
  - Resolves: bz#2079347
    (Guest boot blocked when scsi disks using same iothread and 100% CPU consumption)
  - Resolves: bz#1995710
    (RFE: Allow virtio-scsi CD-ROM media change with IOThreads)
  - Resolves: bz#2064530
    (Rebuild qemu-kvm with clang-14)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.0.0-5
changelog:
  - kvm-qemu-nbd-Pass-max-connections-to-blockdev-layer.patch [bz#1708300]
  - kvm-nbd-server-Allow-MULTI_CONN-for-shared-writable-expo.patch [bz#1708300]
  - Resolves: bz#1708300
    (RFE: qemu-nbd vs NBD_FLAG_CAN_MULTI_CONN)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-6
changelog:
  - kvm-virtio_net-Modify-virtio_net_get_config-to-early-ret.patch [bz#2141088]
  - kvm-virtio_net-copy-VIRTIO_NET_S_ANNOUNCE-if-device-mode.patch [bz#2141088]
  - kvm-vdpa-handle-VIRTIO_NET_CTRL_ANNOUNCE-in-vhost_vdpa_n.patch [bz#2141088]
  - kvm-vdpa-do-not-handle-VIRTIO_NET_F_GUEST_ANNOUNCE-in-vh.patch [bz#2141088]
  - kvm-s390x-pv-Implement-a-CGS-check-helper.patch [bz#2122523]
  - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163701]
  - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163701]
  - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163701]
  - kvm-qga-linux-add-usb-support-to-guest-get-fsinfo.patch [bz#2149191]
  - Resolves: bz#2141088
    (vDPA SVQ guest announce support)
  - Resolves: bz#2122523
    (Secure guest can't boot with maximal number of vcpus (248))
  - Resolves: bz#2163701
    ([s390x] VM fails to start with ISM passed through)
  - Resolves: bz#2149191
    ([RFE][guest-agent] - USB bus type support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-7
changelog:
  - kvm-vdpa-use-v-shadow_vqs_enabled-in-vhost_vdpa_svqs_sta.patch [bz#2104412]
  - kvm-vhost-set-SVQ-device-call-handler-at-SVQ-start.patch [bz#2104412]
  - kvm-vhost-allocate-SVQ-device-file-descriptors-at-device.patch [bz#2104412]
  - kvm-vhost-move-iova_tree-set-to-vhost_svq_start.patch [bz#2104412]
  - kvm-vdpa-add-vhost_vdpa_net_valid_svq_features.patch [bz#2104412]
  - kvm-vdpa-request-iova_range-only-once.patch [bz#2104412]
  - kvm-vdpa-move-SVQ-vring-features-check-to-net.patch [bz#2104412]
  - kvm-vdpa-allocate-SVQ-array-unconditionally.patch [bz#2104412]
  - kvm-vdpa-add-asid-parameter-to-vhost_vdpa_dma_map-unmap.patch [bz#2104412]
  - kvm-vdpa-store-x-svq-parameter-in-VhostVDPAState.patch [bz#2104412]
  - kvm-vdpa-add-shadow_data-to-vhost_vdpa.patch [bz#2104412]
  - kvm-vdpa-always-start-CVQ-in-SVQ-mode-if-possible.patch [bz#2104412]
  - kvm-vdpa-fix-VHOST_BACKEND_F_IOTLB_ASID-flag-check.patch [bz#2104412]
  - kvm-spec-Disable-VDUSE.patch [bz#2128222]
  - Resolves: bz#2104412
    (vDPA ASID support in Qemu)
  - Resolves: bz#2128222
    (VDUSE block export should be disabled in builds for now)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-8
changelog:
  - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2150180]
  - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2150180]
  - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2150180]
  - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2150180]
  - kvm-accel-tcg-Test-CPUJumpCache-in-tb_jmp_cache_clear_pa.patch [bz#2165280]
  - kvm-block-Improve-empty-format-specific-info-dump.patch [bz#1860292]
  - kvm-block-file-Add-file-specific-image-info.patch [bz#1860292]
  - kvm-block-vmdk-Change-extent-info-type.patch [bz#1860292]
  - kvm-block-Split-BlockNodeInfo-off-of-ImageInfo.patch [bz#1860292]
  - kvm-qemu-img-Use-BlockNodeInfo.patch [bz#1860292]
  - kvm-block-qapi-Let-bdrv_query_image_info-recurse.patch [bz#1860292]
  - kvm-block-qapi-Introduce-BlockGraphInfo.patch [bz#1860292]
  - kvm-block-qapi-Add-indentation-to-bdrv_node_info_dump.patch [bz#1860292]
  - kvm-iotests-Filter-child-node-information.patch [bz#1860292]
  - kvm-iotests-106-214-308-Read-only-one-size-line.patch [bz#1860292]
  - kvm-qemu-img-Let-info-print-block-graph.patch [bz#1860292]
  - kvm-qemu-img-Change-info-key-names-for-protocol-nodes.patch [bz#1860292]
  - kvm-Revert-vhost-user-Monitor-slave-channel-in-vhost_use.patch [bz#2155173]
  - kvm-Revert-vhost-user-Introduce-nested-event-loop-in-vho.patch [bz#2155173]
  - kvm-virtio-rng-pci-fix-transitional-migration-compat-for.patch [bz#2162569]
  - Resolves: bz#2150180
    (qemu-img finishes successfully while having errors in commit or bitmaps operations)
  - Resolves: bz#2165280
    ([kvm-unit-tests] debug-wp-migration fails)
  - Resolves: bz#1860292
    (RFE: add extent_size_hint information to qemu-img info)
  - Resolves: bz#2155173
    ([vhost-user] unable to start vhost net: 71: falling back on userspace)
  - Resolves: bz#2162569
    ([transitional device][virtio-rng-pci-transitional]Stable Guest ABI failed between RHEL 8.6 to RHEL 9.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-9
changelog:
  - kvm-tests-qtest-netdev-test-stream-and-dgram-backends.patch [bz#2169232]
  - kvm-net-stream-add-a-new-option-to-automatically-reconne.patch [bz#2169232]
  - kvm-linux-headers-Update-to-v6.1.patch [bz#2158704]
  - kvm-util-userfaultfd-Add-uffd_open.patch [bz#2158704]
  - kvm-util-userfaultfd-Support-dev-userfaultfd.patch [bz#2158704]
  - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2169732]
  - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2169732]
  - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168172]
  - Resolves: bz#2169232
    (RFE: reconnect option for stream socket back-end)
  - Resolves: bz#2158704
    (RFE: Prefer /dev/userfaultfd over userfaultfd(2) syscall)
  - Resolves: bz#2169732
    (Multifd migration fails under a weak network/socket ordering race)
  - Resolves: bz#2168172
    ([s390x] qemu-kvm coredumps when SE crashes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-10
changelog:
  - kvm-block-temporarily-hold-the-new-AioContext-of-bs_top-.patch [bz#2168209]
  - Resolves: bz#2168209
    (Qemu coredump after do snapshot of mirrored top image and its converted base image(iothread enabled))


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-11
changelog:
  - kvm-hw-smbios-fix-field-corruption-in-type-4-table.patch [bz#2169904]
  - Resolves: bz#2169904
    ([SVVP] job 'Check SMBIOS Table Specific Requirements' failed on win2022)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-12
changelog:
  - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2155748]
  - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2155748]
  - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2155748]
  - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2175660]
  - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2175660]
  - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2175660]
  - kvm-edu-add-smp_mb__after_rmw.patch [bz#2175660]
  - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2175660]
  - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2175660]
  - kvm-physmem-add-missing-memory-barrier.patch [bz#2175660]
  - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2175660]
  - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2175660]
  - Resolves: bz#2155748
    (qemu crash on void blk_drain(BlockBackend *): Assertion qemu_in_main_thread() failed)
  - Resolves: bz#2175660
    (Guest hangs when starting or rebooting)


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-13
changelog:
  - kvm-target-i386-fix-operand-size-of-unary-SSE-operations.patch [bz#2173590]
  - kvm-tests-tcg-i386-Introduce-and-use-reg_t-consistently.patch [bz#2173590]
  - kvm-target-i386-Fix-BEXTR-instruction.patch [bz#2173590]
  - kvm-target-i386-Fix-C-flag-for-BLSI-BLSMSK-BLSR.patch [bz#2173590]
  - kvm-target-i386-fix-ADOX-followed-by-ADCX.patch [bz#2173590]
  - kvm-target-i386-Fix-32-bit-AD-CO-X-insns-in-64-bit-mode.patch [bz#2173590]
  - kvm-target-i386-Fix-BZHI-instruction.patch [bz#2173590]
  - kvm-intel-iommu-fail-DEVIOTLB_UNMAP-without-dt-mode.patch [bz#2156876]
  - Resolves: bz#2173590
    (bugs in emulation of BMI instructions (for libguestfs without KVM))
  - Resolves: bz#2156876
    ([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22))


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-14
changelog:
  - Rebuild for 9.2 release
  - Resolves: bz#2173590
    (bugs in emulation of BMI instructions (for libguestfs without KVM))
  - Resolves: bz#2156876
    ([virtual network][rhel7.9_guest] qemu-kvm: vhost vring error in virtqueue 1: Invalid argument (22))


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-14.el9_2.1
changelog:
  - kvm-acpi-pcihp-allow-repeating-hot-unplug-requests.patch [bz#2203745]
  - Resolves: bz#2203745
    (Disk detach is unsuccessful while the guest is still booting [rhel-9.2.0.z])


author: Eduard Abdullin <eabdullin@almalinux.org> - 7.2.0-14.el9_2.3.alma
changelog:
  - Apply 0001-kvm-reuse-per-vcpu-stats-fd-to-avoid-vcpu-interruption.patch
   and 0002-vdpa-stop-all-svq-on-device-deletion.patch


author: Eduard Abdullin <eabdullin@almalinux.org> - 7.2.0-14.el9_2.5.alma.1
changelog:
  - Apply aio-posix-fix-race-between-epoll-upgrade.patch
  - Apply io-remove-io-watch-if-TLS-channel-is-closed.patch
  - Apply vdpa-map-shadow-vrings-with-MAP_SHARED.patch
  - Apply vdpa-net-move-iova-tree-creation.patch
  - Apply vdpa-reorder-vhost_vdpa_net_cvq_cmd_page_len-function.patch
  - Apply vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net.patch


author: Miroslav Rezanina <mrezanin@redhat.com> - 7.2.0-5
changelog:
  - kvm-virtio-introduce-macro-VIRTIO_CONFIG_IRQ_IDX.patch [bz#1905805]
  - kvm-virtio-pci-decouple-notifier-from-interrupt-process.patch [bz#1905805]
  - kvm-virtio-pci-decouple-the-single-vector-from-the-inter.patch [bz#1905805]
  - kvm-vhost-introduce-new-VhostOps-vhost_set_config_call.patch [bz#1905805]
  - kvm-vhost-vdpa-add-support-for-config-interrupt.patch [bz#1905805]
  - kvm-virtio-add-support-for-configure-interrupt.patch [bz#1905805]
  - kvm-vhost-add-support-for-configure-interrupt.patch [bz#1905805]
  - kvm-virtio-net-add-support-for-configure-interrupt.patch [bz#1905805]
  - kvm-virtio-mmio-add-support-for-configure-interrupt.patch [bz#1905805]
  - kvm-virtio-pci-add-support-for-configure-interrupt.patch [bz#1905805]
  - kvm-s390x-s390-virtio-ccw-Activate-zPCI-features-on-s390.patch [bz#2159408]
  - kvm-vhost-fix-vq-dirty-bitmap-syncing-when-vIOMMU-is-ena.patch [bz#2124856]
  - kvm-block-drop-bdrv_remove_filter_or_cow_child.patch [bz#2155112]
  - kvm-qed-Don-t-yield-in-bdrv_qed_co_drain_begin.patch [bz#2155112]
  - kvm-test-bdrv-drain-Don-t-yield-in-.bdrv_co_drained_begi.patch [bz#2155112]
  - kvm-block-Revert-.bdrv_drained_begin-end-to-non-coroutin.patch [bz#2155112]
  - kvm-block-Remove-drained_end_counter.patch [bz#2155112]
  - kvm-block-Inline-bdrv_drain_invoke.patch [bz#2155112]
  - kvm-block-Fix-locking-for-bdrv_reopen_queue_child.patch [bz#2155112]
  - kvm-block-Drain-individual-nodes-during-reopen.patch [bz#2155112]
  - kvm-block-Don-t-use-subtree-drains-in-bdrv_drop_intermed.patch [bz#2155112]
  - kvm-stream-Replace-subtree-drain-with-a-single-node-drai.patch [bz#2155112]
  - kvm-block-Remove-subtree-drains.patch [bz#2155112]
  - kvm-block-Call-drain-callbacks-only-once.patch [bz#2155112]
  - kvm-block-Remove-ignore_bds_parents-parameter-from-drain.patch [bz#2155112]
  - kvm-block-Drop-out-of-coroutine-in-bdrv_do_drained_begin.patch [bz#2155112]
  - kvm-block-Don-t-poll-in-bdrv_replace_child_noperm.patch [bz#2155112]
  - kvm-block-Remove-poll-parameter-from-bdrv_parent_drained.patch [bz#2155112]
  - kvm-accel-introduce-accelerator-blocker-API.patch [bz#1979276]
  - kvm-KVM-keep-track-of-running-ioctls.patch [bz#1979276]
  - kvm-kvm-Atomic-memslot-updates.patch [bz#1979276]
  - Resolves: bz#1905805
    (support config interrupt in vhost-vdpa qemu)
  - Resolves: bz#2159408
    ([s390x] VMs with ISM passthrough don't autostart after leapp upgrade from RHEL 8)
  - Resolves: bz#2124856
    (VM with virtio interface and iommu=on will crash when try to migrate)
  - Resolves: bz#2155112
    (Qemu coredump after do snapshot of mirrored top image and its converted base image(iothread enabled))
  - Resolves: bz#1979276
    (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-6
changelog:
  - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216201]
  - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216201]
  - kvm-block-blkio-use-qemu_open-to-support-fd-passing-for-.patch [bz#2180076]
  - kvm-qapi-add-fdset-feature-for-BlockdevOptionsVirtioBlkV.patch [bz#2180076]
  - kvm-Enable-libblkio-block-drivers.patch [bz#2213317]
  - Resolves: bz#2216201
    ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
  - Resolves: bz#2180076
    ([qemu-kvm] support fd passing for libblkio QEMU BlockDrivers)
  - Resolves: bz#2213317
    (Enable libblkio-based block drivers in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-7
changelog:
  - kvm-numa-Validate-cluster-and-NUMA-node-boundary-if-requ.patch [bz#2171363]
  - kvm-hw-arm-Validate-cluster-and-NUMA-node-boundary.patch [bz#2171363]
  - kvm-hw-arm-virt-Validate-cluster-and-NUMA-node-boundary-.patch [bz#2171363]
  - kvm-vhost-fix-vhost_dev_enable_notifiers-error-case.patch [RHEL-330]
  - kvm-kvm-reuse-per-vcpu-stats-fd-to-avoid-vcpu-interrupti.patch [bz#2218644]
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2128929]
  - Resolves: bz#2171363
    ([aarch64] Kernel hits Call trace with irregular CPU-to-NUMA association)
  - Resolves: RHEL-330
    ([virtual network][qemu-kvm-8.0.0-rc1]qemu core dump: qemu-kvm: ../softmmu/memory.c:2592: void memory_region_del_eventfd(MemoryRegion *, hwaddr, unsigned int, _Bool, uint64_t, EventNotifier *): Assertion `i != mr->ioeventfd_nb' failed)
  - Resolves: bz#2218644
    (query-stats QMP command interrupts vcpus, the Max Latencies could be more than 100us (rhel 9.3.0 clone))
  - Resolves: bz#2128929
    ([rhel9.2] hotplug/hotunplug mlx vdpa device to the occupied addr port, then qemu core dump occurs after shutdown guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-8
changelog:
  - kvm-virtio-iommu-Fix-64kB-host-page-size-VFIO-device-ass.patch [bz#2211609 bz#2211634]
  - kvm-virtio-iommu-Rework-the-traces-in-virtio_iommu_set_p.patch [bz#2211609 bz#2211634]
  - kvm-vfio-pci-add-support-for-VF-token.patch [bz#2192818]
  - kvm-vfio-migration-Skip-log_sync-during-migration-SETUP-.patch [bz#2192818]
  - kvm-vfio-pci-Static-Resizable-BAR-capability.patch [bz#2192818]
  - kvm-vfio-pci-Fix-a-use-after-free-issue.patch [bz#2192818]
  - kvm-util-vfio-helpers-Use-g_file_read_link.patch [bz#2192818]
  - kvm-migration-Make-all-functions-check-have-the-same-for.patch [bz#2192818]
  - kvm-migration-Move-migration_properties-to-options.c.patch [bz#2192818]
  - kvm-migration-Add-switchover-ack-capability.patch [bz#2192818]
  - kvm-migration-Implement-switchover-ack-logic.patch [bz#2192818]
  - kvm-migration-Enable-switchover-ack-capability.patch [bz#2192818]
  - kvm-vfio-migration-Refactor-vfio_save_block-to-return-sa.patch [bz#2192818]
  - kvm-vfio-migration-Store-VFIO-migration-flags-in-VFIOMig.patch [bz#2192818]
  - kvm-vfio-migration-Add-VFIO-migration-pre-copy-support.patch [bz#2192818]
  - kvm-vfio-migration-Add-support-for-switchover-ack-capabi.patch [bz#2192818]
  - kvm-vfio-Implement-a-common-device-info-helper.patch [bz#2192818]
  - kvm-hw-vfio-pci-quirks-Support-alternate-offset-for-GPUD.patch [bz#2192818]
  - kvm-vfio-pci-Call-vfio_prepare_kvm_msi_virq_batch-in-MSI.patch [bz#2192818]
  - kvm-vfio-migration-Reset-bytes_transferred-properly.patch [bz#2192818]
  - kvm-vfio-migration-Make-VFIO-migration-non-experimental.patch [bz#2192818]
  - kvm-vfio-pci-Fix-a-segfault-in-vfio_realize.patch [bz#2192818]
  - kvm-vfio-pci-Free-leaked-timer-in-vfio_realize-error-pat.patch [bz#2192818]
  - kvm-hw-vfio-pci-quirks-Sanitize-capability-pointer.patch [bz#2192818]
  - kvm-vfio-pci-Disable-INTx-in-vfio_realize-error-path.patch [bz#2192818]
  - kvm-vfio-migration-Change-vIOMMU-blocker-from-global-to-.patch [bz#2192818]
  - kvm-vfio-migration-Free-resources-when-vfio_migration_re.patch [bz#2192818]
  - kvm-vfio-migration-Remove-print-of-Migration-disabled.patch [bz#2192818]
  - kvm-vfio-migration-Return-bool-type-for-vfio_migration_r.patch [bz#2192818]
  - kvm-vfio-Fix-null-pointer-dereference-bug-in-vfio_bars_f.patch [bz#2192818]
  - kvm-pc-bios-s390-ccw-Makefile-Use-z-noexecstack-to-silen.patch [bz#2220866]
  - kvm-pc-bios-s390-ccw-Fix-indentation-in-start.S.patch [bz#2220866]
  - kvm-pc-bios-s390-ccw-Provide-space-for-initial-stack-fra.patch [bz#2220866]
  - kvm-pc-bios-s390-ccw-Don-t-use-__bss_start-with-the-larl.patch [bz#2220866]
  - kvm-ui-Fix-pixel-colour-channel-order-for-PNG-screenshot.patch [bz#2222579]
  - kvm-block-blkio-fix-module_block.py-parsing.patch [bz#2213317]
  - kvm-Fix-virtio-blk-vhost-vdpa-typo-in-spec-file.patch [bz#2213317]
  - Resolves: bz#2211609
    (With virtio-iommu and vfio-pci, qemu reports "warning: virtio-iommu page mask 0xfffffffffffff000 does not match 0x40201000")
  - Resolves: bz#2211634
    ([aarch64] With virtio-iommu and vfio-pci, qemu coredump when host using kernel-64k package)
  - Resolves: bz#2192818
    ([VFIO LM] Live migration)
  - Resolves: bz#2220866
    (Misaligned symbol for s390-ccw image during qemu-kvm build)
  - Resolves: bz#2222579
    (PNG screendump doesn't save screen correctly)
  - Resolves: bz#2213317
    (Enable libblkio-based block drivers in QEMU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-9
changelog:
  - kvm-scsi-fetch-unit-attention-when-creating-the-request.patch [bz#2176702]
  - kvm-scsi-cleanup-scsi_clear_unit_attention.patch [bz#2176702]
  - kvm-scsi-clear-unit-attention-only-for-REPORT-LUNS-comma.patch [bz#2176702]
  - kvm-s390x-ap-Wire-up-the-device-request-notifier-interfa.patch [RHEL-794]
  - kvm-multifd-Create-property-multifd-flush-after-each-sec.patch [bz#2196295]
  - kvm-multifd-Protect-multifd_send_sync_main-calls.patch [bz#2196295]
  - kvm-multifd-Only-flush-once-each-full-round-of-memory.patch [bz#2196295]
  - kvm-net-socket-prepare-to-cleanup-net_init_socket.patch [RHEL-582]
  - kvm-net-socket-move-fd-type-checking-to-its-own-function.patch [RHEL-582]
  - kvm-net-socket-remove-net_init_socket.patch [RHEL-582]
  - kvm-pcie-Add-hotplug-detect-state-register-to-cmask.patch [bz#2215819]
  - kvm-spec-Build-DBUS-display.patch [bz#2207940]
  - Resolves: bz#2176702
    ([RHEL9][virtio-scsi] scsi-hd cannot hot-plug successfully after hot-plug it repeatly)
  - Resolves: RHEL-794
    (Backport s390x fixes from QEMU 8.1)
  - Resolves: bz#2196295
    (Multifd flushes its channels 10 times per second)
  - Resolves: RHEL-582
    ([passt][rhel 9.3] qemu core dump occurs when guest is shutdown after hotunplug/hotplug a passt interface)
  - Resolves: bz#2215819
    (Migration test failed while guest with PCIe devices)
  - Resolves: bz#2207940
    ([RFE] Enable qemu-ui-dbus subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-10
changelog:
  - kvm-util-iov-Make-qiov_slice-public.patch [bz#2174676]
  - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2174676]
  - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2174676]
  - kvm-iotests-iov-padding-New-test.patch [bz#2174676]
  - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2174676]
  - kvm-vdpa-do-not-block-migration-if-device-has-cvq-and-x-.patch [RHEL-573]
  - kvm-virtio-net-correctly-report-maximum-tx_queue_size-va.patch [bz#2040509]
  - kvm-hw-pci-Disable-PCI_ERR_UNCOR_MASK-reg-for-machine-ty.patch [bz#2223691]
  - kvm-vhost-vdpa-mute-unaligned-memory-error-report.patch [bz#2141965]
  - Resolves: bz#2174676
    (Guest hit EXT4-fs error on host 4K disk  when repeatedly hot-plug/unplug running IO disk [RHEL9])
  - Resolves: RHEL-573
    ([mlx vhost_vdpa][rhel 9.3]live migration fail with "net vdpa cannot migrate with CVQ feature")
  - Resolves: bz#2040509
    ([RFE]:Add support for changing "tx_queue_size" to a setable value)
  - Resolves: bz#2223691
    ([machine type 9.2]Failed to migrate VM from RHEL 9.3 to RHEL 9.2)
  - Resolves: bz#2141965
    ([TPM][vhost-vdpa][rhel9.2]Boot a guest with "vhost-vdpa + TPM emulator", qemu output: qemu-kvm: vhost_vdpa_listener_region_add received unaligned region)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-11
changelog:
  - kvm-block-blkio-enable-the-completion-eventfd.patch [bz#2225354 bz#2225439]
  - kvm-block-blkio-do-not-use-open-flags-in-qemu_open.patch [bz#2225354 bz#2225439]
  - kvm-block-blkio-move-blkio_connect-in-the-drivers-functi.patch [bz#2225354 bz#2225439]
  - kvm-block-blkio-retry-blkio_connect-if-it-fails-using-fd.patch [bz#2225354 bz#2225439]
  - kvm-block-blkio-fall-back-on-using-path-when-fd-setting-.patch [bz#2225354 bz#2225439]
  - kvm-block-blkio-use-blkio_set_int-fd-to-check-fd-support.patch [bz#2225354 bz#2225439]
  - kvm-hw-virtio-iommu-Fix-potential-OOB-access-in-virtio_i.patch [bz#2229133]
  - kvm-virtio-iommu-Standardize-granule-extraction-and-form.patch [bz#2229133]
  - kvm-hw-arm-smmu-Handle-big-endian-hosts-correctly.patch [bz#2229133]
  - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214839]
  - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214839]
  - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214839]
  - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214839]
  - kvm-Provide-elf2dmp-binary-in-qemu-tools.patch [bz#2165917]
  - Resolves: bz#2225354
    ([vdpa-blk] The new driver virtio-blk-vhost-user not work in VM booting)
  - Resolves: bz#2225439
    ([vdpa-blk] read-only=on option not work on driver virtio-blk-vhost-vdpa)
  - Resolves: bz#2229133
    (Backport some virtio-iommu and smmu fixes)
  - Resolves: bz#2214839
    ([AMDSERVER 9.3 Bug] Qemu SEV reduced-phys-bits fixes)
  - Resolves: bz#2165917
    (qemu-kvm: contrib/elf2dmp: Windows Server 2022 support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-12
changelog:
  - kvm-target-i386-allow-versioned-CPUs-to-specify-new-cach.patch [bz#2094913]
  - kvm-target-i386-Add-new-EPYC-CPU-versions-with-updated-c.patch [bz#2094913]
  - kvm-target-i386-Add-a-couple-of-feature-bits-in-8000_000.patch [bz#2094913]
  - kvm-target-i386-Add-feature-bits-for-CPUID_Fn80000021_EA.patch [bz#2094913]
  - kvm-target-i386-Add-missing-feature-bits-in-EPYC-Milan-m.patch [bz#2094913]
  - kvm-target-i386-Add-VNMI-and-automatic-IBRS-feature-bits.patch [bz#2094913]
  - kvm-target-i386-Add-EPYC-Genoa-model-to-support-Zen-4-pr.patch [bz#2094913]
  - Resolves: bz#2094913
    (Add EPYC-Genoa CPU model in qemu)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.0.0-13
changelog:
  - kvm-vdpa-return-errno-in-vhost_vdpa_get_vring_group-erro.patch [RHEL-923]
  - kvm-vdpa-move-CVQ-isolation-check-to-net_init_vhost_vdpa.patch [RHEL-923]
  - kvm-vdpa-use-first-queue-SVQ-state-for-CVQ-default.patch [RHEL-923]
  - kvm-vdpa-export-vhost_vdpa_set_vring_ready.patch [RHEL-923]
  - kvm-vdpa-rename-vhost_vdpa_net_load-to-vhost_vdpa_net_cv.patch [RHEL-923]
  - kvm-vdpa-move-vhost_vdpa_set_vring_ready-to-the-caller.patch [RHEL-923]
  - kvm-vdpa-remove-net-cvq-migration-blocker.patch [RHEL-923]
  - Resolves: RHEL-923
    (vhost shadow virtqueue: state restore through CVQ)


author: Eduard Abdullin <eabdullin@almalinux.org> - 8.0.0-16.1.alma.1
changelog:
  - Apply io-remove-io-watch-if-TLS-channel-is-closed.patch
  - Apply migration-Add-migration-prefix-to-functions-in-target.patch
  - Apply migration-Move-more-initializations-to-migrate_init.patch
  - Apply migration-Add-save_prepare-handler-to-struct-SaveVMHandlers.patch
  - Apply vfio-migration-Block-VFIO-migration-with-postcopy-migration.patch


author: Eduard Abdullin <eabdullin@almalinux.org> - 8.0.0-16.3.alma.1
changelog:
  - dump: Add arch cleanup function
  - target/s390x/arch_dump: Add arch cleanup function for PV
   dumps
  - target/s390x/dump: Remove unneeded dump info function pointer
   init


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-2
changelog:
  - kvm-hw-arm-virt-Fix-compats.patch [RHEL-17168]
  - Resolves: RHEL-17168
    (Introduce virt-rhel9.4.0 arm-virt machine type [aarch64])


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-3
changelog:
  - kvm-hw-arm-virt-Add-properties-to-disable-high-memory-re.patch [RHEL-19738]
  - kvm-vfio-Introduce-base-object-for-VFIOContainer-and-tar.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Introduce-a-empty-VFIOIOMMUOps.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Switch-to-dma_map-unmap-API.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-common-Introduce-vfio_container_init-destroy-he.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-common-Move-giommu_list-in-base-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-space-field-to-base-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Switch-to-IOMMU-BE-set_dirty_page_tra.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-per-container-device-list-in-bas.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Convert-functions-to-base-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-pgsizes-and-dma_max_mappings-to-.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-vrdl_list-to-base-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-listener-to-base-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-dirty_pgsizes-and-max_dirty_bitm.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Move-iova_ranges-to-base-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Implement-attach-detach_device.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-Introduce-spapr-backend-and-target-interf.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-switch-to-spapr-IOMMU-BE-add-del_section_.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-Move-prereg_listener-into-spapr-container.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-Move-hostwin_list-into-spapr-container.patch [RHEL-19302 RHEL-21057]
  - kvm-backends-iommufd-Introduce-the-iommufd-object.patch [RHEL-19302 RHEL-21057]
  - kvm-util-char_dev-Add-open_cdev.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-common-return-early-if-space-isn-t-empty.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Implement-the-iommufd-backend.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Relax-assert-check-for-iommufd-backend.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Add-support-for-iova_ranges-and-pgsizes.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-pci-Extract-out-a-helper-vfio_pci_get_pci_hot_r.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-pci-Introduce-a-vfio-pci-hot-reset-interface.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Enable-pci-hot-reset-through-iommufd-cd.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-pci-Allow-the-selection-of-a-given-iommu-backen.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-pci-Make-vfio-cdev-pre-openable-by-passing-a-fi.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-platform-Allow-the-selection-of-a-given-iommu-b.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-platform-Make-vfio-cdev-pre-openable-by-passing.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-ap-Allow-the-selection-of-a-given-iommu-backend.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-ap-Make-vfio-cdev-pre-openable-by-passing-a-fil.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-ccw-Allow-the-selection-of-a-given-iommu-backen.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-ccw-Make-vfio-cdev-pre-openable-by-passing-a-fi.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-Make-VFIOContainerBase-poiner-parameter-const-i.patch [RHEL-19302 RHEL-21057]
  - kvm-hw-arm-Activate-IOMMUFD-for-virt-machines.patch [RHEL-19302 RHEL-21057]
  - kvm-kconfig-Activate-IOMMUFD-for-s390x-machines.patch [RHEL-19302 RHEL-21057]
  - kvm-hw-i386-Activate-IOMMUFD-for-q35-machines.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-pci-Move-VFIODevice-initializations-in-vfio_ins.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-platform-Move-VFIODevice-initializations-in-vfi.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-ap-Move-VFIODevice-initializations-in-vfio_ap_i.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-ccw-Move-VFIODevice-initializations-in-vfio_ccw.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-Introduce-a-helper-function-to-initialize-VFIOD.patch [RHEL-19302 RHEL-21057]
  - kvm-docs-devel-Add-VFIO-iommufd-backend-documentation.patch [RHEL-19302 RHEL-21057]
  - kvm-hw-ppc-Kconfig-Imply-VFIO_PCI.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-Extend-VFIOIOMMUOps-with-a-release-handle.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Introduce-vfio_legacy_setup-for-furth.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Initialize-VFIOIOMMUOps-under-vfio_in.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Introduce-a-VFIOIOMMU-QOM-interface.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Introduce-a-VFIOIOMMU-legacy-QOM-inte.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Intoduce-a-new-VFIOIOMMUClass-setup-h.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-Introduce-a-sPAPR-VFIOIOMMU-QOM-interface.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Introduce-a-VFIOIOMMU-iommufd-QOM-inter.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-spapr-Only-compile-sPAPR-IOMMU-support-when-nee.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Remove-CONFIG_IOMMUFD-usage.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Replace-basename-with-g_path_get_base.patch [RHEL-19302 RHEL-21057]
  - kvm-hw-vfio-fix-iteration-over-global-VFIODevice-list.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-iommufd-Remove-the-use-of-stat-to-check-file-ex.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-container-Rename-vfio_init_container-to-vfio_se.patch [RHEL-19302 RHEL-21057]
  - kvm-vfio-migration-Add-helper-function-to-set-state-or-r.patch [RHEL-19302 RHEL-21057]
  - kvm-backends-iommufd-Remove-check-on-number-of-backend-u.patch [RHEL-19302 RHEL-21057]
  - kvm-backends-iommufd-Remove-mutex.patch [RHEL-19302 RHEL-21057]
  - kvm-Compile-IOMMUFD-object-on-aarch64.patch [RHEL-19302 RHEL-21057]
  - kvm-Compile-IOMMUFD-on-s390x.patch [RHEL-19302 RHEL-21057]
  - kvm-Compile-IOMMUFD-on-x86_64.patch [RHEL-19302 RHEL-21057]
  - kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18212]
  - kvm-nbd-server-avoid-per-NBDRequest-nbd_client_get-put.patch [RHEL-15965]
  - kvm-nbd-server-only-traverse-NBDExport-clients-from-main.patch [RHEL-15965]
  - kvm-nbd-server-introduce-NBDClient-lock-to-protect-field.patch [RHEL-15965]
  - kvm-block-file-posix-set-up-Linux-AIO-and-io_uring-in-th.patch [RHEL-15965]
  - kvm-virtio-blk-add-lock-to-protect-s-rq.patch [RHEL-15965]
  - kvm-virtio-blk-don-t-lock-AioContext-in-the-completion-c.patch [RHEL-15965]
  - kvm-virtio-blk-don-t-lock-AioContext-in-the-submission-c.patch [RHEL-15965]
  - kvm-scsi-only-access-SCSIDevice-requests-from-one-thread.patch [RHEL-15965]
  - kvm-virtio-scsi-don-t-lock-AioContext-around-virtio_queu.patch [RHEL-15965]
  - kvm-scsi-don-t-lock-AioContext-in-I-O-code-path.patch [RHEL-15965]
  - kvm-dma-helpers-don-t-lock-AioContext-in-dma_blk_cb.patch [RHEL-15965]
  - kvm-virtio-scsi-replace-AioContext-lock-with-tmf_bh_lock.patch [RHEL-15965]
  - kvm-scsi-assert-that-callbacks-run-in-the-correct-AioCon.patch [RHEL-15965]
  - kvm-tests-remove-aio_context_acquire-tests.patch [RHEL-15965]
  - kvm-aio-make-aio_context_acquire-aio_context_release-a-n.patch [RHEL-15965]
  - kvm-graph-lock-remove-AioContext-locking.patch [RHEL-15965]
  - kvm-block-remove-AioContext-locking.patch [RHEL-15965]
  - kvm-block-remove-bdrv_co_lock.patch [RHEL-15965]
  - kvm-scsi-remove-AioContext-locking.patch [RHEL-15965]
  - kvm-aio-wait-draw-equivalence-between-AIO_WAIT_WHILE-and.patch [RHEL-15965]
  - kvm-aio-remove-aio_context_acquire-aio_context_release-A.patch [RHEL-15965]
  - kvm-docs-remove-AioContext-lock-from-IOThread-docs.patch [RHEL-15965]
  - kvm-scsi-remove-outdated-AioContext-lock-comment.patch [RHEL-15965]
  - kvm-job-remove-outdated-AioContext-locking-comments.patch [RHEL-15965]
  - kvm-block-remove-outdated-AioContext-locking-comments.patch [RHEL-15965]
  - kvm-block-coroutine-wrapper-use-qemu_get_current_aio_con.patch [RHEL-15965]
  - kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-21169]
  - kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-21169]
  - kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-21169]
  - kvm-include-ui-rect.h-fix-qemu_rect_init-mis-assignment.patch [RHEL-21570]
  - kvm-virtio-gpu-block-migration-of-VMs-with-blob-true.patch [RHEL-7565]
  - kvm-spec-Enable-zstd.patch [RHEL-7361]
  - Resolves: RHEL-19738
    (Enable properties allowing to disable high memory regions)
  - Resolves: RHEL-19302
    (NVIDIA:Grace-Hopper Backport QEMU IOMMUFD Backend)
  - Resolves: RHEL-21057
    (Request backport of 9353b6da430f90e47f352dbf6dc31120c8914da6)
  - Resolves: RHEL-18212
    ([RHEL9][Secure-execution][s390x] The error message is not clear when boot up a SE guest with wrong encryption)
  - Resolves: RHEL-15965
    ( [qemu-kvm] Remove AioContext lock (no response with QMP command block_resize))
  - Resolves: RHEL-21169
    ([s390x] VM fails to start with ISM passed through QEMU 8.2)
  - Resolves: RHEL-21570
    (Critical performance degradation for input devices in virtio vnc session)
  - Resolves: RHEL-7565
    (qemu crashed when migrate guest with blob resources enabled)
  - Resolves: RHEL-7361
    ([qemu-kvm] Enable zstd support for qcow2 files)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-4
changelog:
  - kvm-vfio-pci-Clear-MSI-X-IRQ-index-always.patch [RHEL-21293]
  - Resolves: RHEL-21293
    ([emulated igb] Failed to set up TRIGGER eventfd signaling for interrupt INTX-0: VFIO_DEVICE_SET_IRQS failure: Invalid argument)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-5
changelog:
  - kvm-hv-balloon-use-get_min_alignment-to-express-32-GiB-a.patch [RHEL-20341]
  - kvm-memory-device-reintroduce-memory-region-size-check.patch [RHEL-20341]
  - kvm-block-backend-Allow-concurrent-context-changes.patch [RHEL-24593]
  - kvm-scsi-Await-request-purging.patch [RHEL-24593]
  - kvm-string-output-visitor-show-structs-as-omitted.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-string-output-visitor-Fix-pseudo-struct-handling.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-qdev-properties-alias-all-object-class-properties.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-qdev-add-IOThreadVirtQueueMappingList-property-type.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-add-iothread-vq-mapping-parameter.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-Fix-potential-nullpointer-read-access-in-.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-move-dataplane-code-into-virtio-blk.c.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-rename-dataplane-create-destroy-functions.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-rename-dataplane-to-ioeventfd.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-restart-s-rq-reqs-in-vq-AioContexts.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-tolerate-failure-to-set-BlockBackend-AioC.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-blk-always-set-ioeventfd-during-startup.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-tests-unit-Bump-test-replication-timeout-to-60-secon.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-iotests-iothreads-stream-Use-the-right-TimeoutError.patch [RHEL-17369 RHEL-20764 RHEL-7356]
  - kvm-virtio-mem-default-enable-dynamic-memslots.patch [RHEL-24045]
  - Resolves: RHEL-20341
    (memory-device size alignment check invalid in QEMU 8.2)
  - Resolves: RHEL-24593
    (qemu crash blk_get_aio_context(BlockBackend *): Assertion `ctx == blk->ctx' when repeatedly hotplug/unplug disk)
  - Resolves: RHEL-17369
    ([nfv virt][rt][post-copy migration] qemu-kvm: ../block/qcow2.c:5263: ImageInfoSpecific *qcow2_get_specific_info(BlockDriverState *, Error **): Assertion `false' failed.)
  - Resolves: RHEL-20764
    ([qemu-kvm] Enable qemu multiqueue block layer support)
  - Resolves: RHEL-7356
    ([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-9])
  - Resolves: RHEL-24045
    (QEMU: default-enable dynamically using multiple memslots for virtio-mem)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-6
changelog:
  - kvm-virtio-scsi-Attach-event-vq-notifier-with-no_poll.patch [RHEL-3934]
  - kvm-virtio-Re-enable-notifications-after-drain.patch [RHEL-3934]
  - kvm-virtio-blk-Use-ioeventfd_attach-in-start_ioeventfd.patch [RHEL-3934]
  - kvm-virtio-blk-avoid-using-ioeventfd-state-in-irqfd-cond.patch [RHEL-15394]
  - kvm-hw-arm-virt-deprecate-virt-rhel9.-0-2-.0-machine-typ.patch [RHEL-24988]
  - Resolves: RHEL-3934
    ([qemu-kvm] Failed on repeatedly hotplug/unplug  disk iothread enabled  )
  - Resolves: RHEL-15394
    (virtio-blk: qemu hang on "no response on QMP query-status" when write data to disk without enough space)
  - Resolves: RHEL-24988
    (Mark virt-rhel9.{0,2}.0 machine types as deprecated)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-7
changelog:
  - kvm-qemu_init-increase-NOFILE-soft-limit-on-POSIX.patch [RHEL-26049]
  - kvm-chardev-char-socket-Fix-TLS-io-channels-sending-too-.patch [RHEL-24614]
  - Resolves: RHEL-26049
    (When max vcpu is greater than or equal to 246, qemu unable to init event notifier)
  - Resolves: RHEL-24614
    ([RHEL9][chardev][s390x] qemu hit core dump while using TLS server from host to guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-8
changelog:
  - kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19629]
  - kvm-ui-clipboard-add-asserts-for-update-and-request.patch [RHEL-19629]
  - kvm-hw-i386-pc-Defer-smbios_set_defaults-to-machine_done.patch [RHEL-21705]
  - kvm-Implement-base-of-SMBIOS-type-9-descriptor.patch [RHEL-21705]
  - kvm-Implement-SMBIOS-type-9-v2.6.patch [RHEL-21705]
  - kvm-smbios-cleanup-smbios_get_tables-from-legacy-handlin.patch [RHEL-21705]
  - kvm-smbios-get-rid-of-smbios_smp_sockets-global.patch [RHEL-21705]
  - kvm-smbios-get-rid-of-smbios_legacy-global.patch [RHEL-21705]
  - kvm-smbios-avoid-mangling-user-provided-tables.patch [RHEL-21705]
  - kvm-smbios-don-t-check-type4-structures-in-legacy-mode.patch [RHEL-21705]
  - kvm-smbios-add-smbios_add_usr_blob_size-helper.patch [RHEL-21705]
  - kvm-smbios-rename-expose-structures-bitmaps-used-by-both.patch [RHEL-21705]
  - kvm-smbios-build-legacy-mode-code-only-for-pc-machine.patch [RHEL-21705]
  - kvm-smbios-handle-errors-consistently.patch [RHEL-21705]
  - kvm-smbios-get-rid-of-global-smbios_ep_type.patch [RHEL-21705]
  - kvm-smbios-clear-smbios_type4_count-before-building-tabl.patch [RHEL-21705]
  - kvm-smbios-extend-smbios-entry-point-type-with-auto-valu.patch [RHEL-21705]
  - kvm-smbios-in-case-of-entry-point-is-auto-try-to-build-v.patch [RHEL-21705]
  - kvm-smbios-error-out-when-building-type-4-table-is-not-p.patch [RHEL-21705]
  - kvm-pc-q35-set-SMBIOS-entry-point-type-to-auto-by-defaul.patch [RHEL-21705]
  - Resolves: RHEL-19629
    (CVE-2023-6683 qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-9])
  - Resolves: RHEL-21705
    (pc-q35-rhel9.4.0 does not provide proper computer information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-9
changelog:
  - kvm-mirror-Don-t-call-job_pause_point-under-graph-lock.patch [RHEL-28125]
  - kvm-nbd-server-Fix-race-in-draining-the-export.patch [RHEL-28125]
  - kvm-iotests-Add-test-for-reset-AioContext-switches-with-.patch [RHEL-28125]
  - kvm-pc-smbios-fixup-manufacturer-product-version-to-matc.patch [RHEL-21705]
  - Resolves: RHEL-28125
    (RHEL9.4 - KVM : Live migration of guest with multiple qcow devices remains incomplete.)
  - Resolves: RHEL-21705
    (pc-q35-rhel9.4.0 does not provide proper computer information)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-10
changelog:
  - kvm-chardev-lower-priority-of-the-HUP-GSource-in-socket-.patch [RHEL-24614]
  - kvm-Revert-chardev-char-socket-Fix-TLS-io-channels-sendi.patch [RHEL-24614]
  - kvm-Revert-chardev-use-a-child-source-for-qio-input-sour.patch [RHEL-24614]
  - Resolves: RHEL-24614
    ([RHEL9][chardev] qemu hit core dump while using TLS server from host to guest)


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11
changelog:
  - kvm-coroutine-cap-per-thread-local-pool-size.patch [RHEL-28947]
  - kvm-coroutine-reserve-5-000-mappings.patch [RHEL-28947]
  - Resolves: RHEL-28947
    (Qemu crashing with "failed to set up stack guard page: Cannot allocate memory")


author: Eduard Abdullin <eabdullin@almalinux.org> - 8.2.0-11.2.alma.1
changelog:
  - kvm: error out of kvm_irqchip_add_msi_route() in case of full
   route table
  - virtio-pci: fix use of a released vector


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11.el9_4.1
changelog:
  - kvm-virtio-pci-fix-use-of-a-released-vector.patch [RHEL-32837]
  - Resolves: RHEL-32837
    (qemu-kvm running Vyatta hits assert when doing KVM_SET_GSI_ROUTING [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11.el9_4.2
changelog:
  - kvm-kvm-error-out-of-kvm_irqchip_add_msi_route-in-case-o.patch [RHEL-32990]
  - Resolves: RHEL-32990
    (qemu crash with kvm_irqchip_commit_routes: Assertion `ret == 0' failed if booting with many virtio disks and vcpus [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11.el9_4.3
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-33754]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-33754]
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-33754]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-33754]
  - Resolves: RHEL-33754
    (Qemu hang when quit dst vm after storage migration(nbd+tls) [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11.el9_4.5
changelog:
  - kvm-virtio-gpu-fix-scanout-migration-post-load.patch [RHEL-36181]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-36181]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-36181]
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-43261]
  - Resolves: RHEL-36181
    ([RHEL9.5.0][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument [rhel-9.4.0.z])
  - Resolves: RHEL-43261
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 8.2.0-11.el9_4.6
changelog:
  - kvm-Fix-scanout-version-with-pc-q35-rhel9.4.0.patch [RHEL-53565]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52616]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52616]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52616]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52616]
  - Resolves: RHEL-53565
    ([RHEL9.4_to_RHEL9.5]When the VM is with only 9.4.0 (q35) machine type, still hit error of virtio-gpu issue [rhel-9.4.z])
  - Resolves: RHEL-52616
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.4.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-1
changelog:
  - Rebase to QEMU 9.0.0 [RHEL-28073]
  - Resolves: RHEL-28073
    (Rebase qemu-kvm to QEMU 9.0.0 for RHEL 9.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-2
changelog:
  - kvm-hw-arm-virt-Fix-spurious-call-to-arm_virt_compat_set.patch [RHEL-34945]
  - kvm-Revert-x86-rhel-9.4.0-machine-type-compat-fix.patch [RHEL-30362]
  - Resolves: RHEL-34945
    ([aarch64, kvm-unit-tests] all tests tagged as FAIL [qemu-kvm: GLib: g_ptr_array_add: assertion 'rarray' failed] )
  - Resolves: RHEL-30362
    (Check/fix machine type compatibility for QEMU 9.0.0 [x86_64][rhel-9.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-33440]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-33440]
  - Resolves: RHEL-33440
    (Qemu hang when quit dst vm after storage migration(nbd+tls))


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-33440]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-33440]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-34621]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-34621]
  - Resolves: RHEL-33440
    (Qemu hang when quit dst vm after storage migration(nbd+tls))
  - Resolves: RHEL-34621
    ([RHEL9.5.0][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-5
changelog:
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-42411]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-34618 RHEL-38697]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-34618 RHEL-38697]
  - kvm-block-crypto-create-ciphers-on-demand.patch [RHEL-36159]
  - kvm-crypto-block-drop-qcrypto_block_open-n_threads-argum.patch [RHEL-36159]
  - Resolves: RHEL-42411
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command)
  - Resolves: RHEL-34618
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-38697
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)
  - Resolves: RHEL-36159
    (qemu crash on Assertion `block->n_free_ciphers > 0' failed in guest installation with luks and iothread-vq-mapping)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-6
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35611]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35611]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35611]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35611]
  - Resolves: RHEL-35611
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-7
changelog:
  - kvm-hw-virtio-Fix-the-de-initialization-of-vhost-user-de.patch [RHEL-40708]
  - kvm-hw-arm-virt-Avoid-unexpected-warning-from-Linux-gues.patch [RHEL-39936]
  - Resolves: RHEL-40708
    ([RHEL9.5.0][virtio_fs][s390x] after hot-unplug the vhost-user-fs-ccw device, the device is failed to hot-plug again )
  - Resolves: RHEL-39936
    (ARCH_DMA_MINALIGN smaller than CTR_EL0.CWG (128 < 256) on FUJITSU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-introduce-pc_rhel_9_5_compat.patch [RHEL-39544]
  - kvm-target-i386-add-guest-phys-bits-cpu-property.patch [RHEL-39544]
  - kvm-kvm-add-support-for-guest-physical-bits.patch [RHEL-39544]
  - kvm-i386-kvm-Move-architectural-CPUID-leaf-generation-to.patch [RHEL-39544]
  - kvm-target-i386-Introduce-Icelake-Server-v7-to-enable-TS.patch [RHEL-39544]
  - kvm-target-i386-Add-new-CPU-model-SierraForest.patch [RHEL-39544]
  - kvm-target-i386-Export-RFDS-bit-to-guests.patch [RHEL-39544]
  - kvm-pci-host-q35-Move-PAM-initialization-above-SMRAM-ini.patch [RHEL-39544]
  - kvm-q35-Introduce-smm_ranges-property-for-q35-pci-host.patch [RHEL-39544]
  - kvm-hw-i386-acpi-Set-PCAT_COMPAT-bit-only-when-pic-is-no.patch [RHEL-39544]
  - kvm-confidential-guest-support-Add-kvm_init-and-kvm_rese.patch [RHEL-39544]
  - kvm-i386-sev-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-ppc-pef-switch-to-use-confidential_guest_kvm_init-re.patch [RHEL-39544]
  - kvm-s390-Switch-to-use-confidential_guest_kvm_init.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-setup_data.h-to-imp.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers-Add-bits.h-to-file-impo.patch [RHEL-39544]
  - kvm-linux-headers-update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-runstate-skip-initial-CPU-reset-if-reset-is-not-actu.patch [RHEL-39544]
  - kvm-KVM-track-whether-guest-state-is-encrypted.patch [RHEL-39544]
  - kvm-KVM-remove-kvm_arch_cpu_check_are_resettable.patch [RHEL-39544]
  - kvm-target-i386-introduce-x86-confidential-guest.patch [RHEL-39544]
  - kvm-target-i386-Implement-mc-kvm_type-to-get-VM-type.patch [RHEL-39544]
  - kvm-target-i386-SEV-use-KVM_SEV_INIT2-if-possible.patch [RHEL-39544]
  - kvm-i386-sev-Add-legacy-vm-type-parameter-for-SEV-guest-.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-legacy-SEV-VM-types-for-older-machin.patch [RHEL-39544]
  - kvm-trace-kvm-Split-address-space-and-slot-id-in-trace_k.patch [RHEL-39544]
  - kvm-kvm-Introduce-support-for-memory_attributes.patch [RHEL-39544]
  - kvm-RAMBlock-Add-support-of-KVM-private-guest-memfd.patch [RHEL-39544]
  - kvm-kvm-Enable-KVM_SET_USER_MEMORY_REGION2-for-memslot.patch [RHEL-39544]
  - kvm-kvm-memory-Make-memory-type-private-by-default-if-it.patch [RHEL-39544]
  - kvm-HostMem-Add-mechanism-to-opt-in-kvm-guest-memfd-via-.patch [RHEL-39544]
  - kvm-RAMBlock-make-guest_memfd-require-uncoordinated-disc.patch [RHEL-39544]
  - kvm-physmem-Introduce-ram_block_discard_guest_memfd_rang.patch [RHEL-39544]
  - kvm-kvm-handle-KVM_EXIT_MEMORY_FAULT.patch [RHEL-39544]
  - kvm-kvm-tdx-Don-t-complain-when-converting-vMMIO-region-.patch [RHEL-39544]
  - kvm-kvm-tdx-Ignore-memory-conversion-to-shared-of-unassi.patch [RHEL-39544]
  - kvm-hw-i386-x86-Eliminate-two-if-statements-in-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-Have-x86_bios_rom_init-take-X86MachineState-.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Remove-unused-parameter-from-pc_isa.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-isa-bios-memory-regions.patch [RHEL-39544]
  - kvm-hw-i386-x86-Don-t-leak-pc.bios-memory-region.patch [RHEL-39544]
  - kvm-hw-i386-x86-Extract-x86_isa_bios_init-from-x86_bios_.patch [RHEL-39544]
  - kvm-hw-i386-pc_sysfw-Alias-rather-than-copy-isa-bios-reg.patch [RHEL-39544]
  - kvm-i386-correctly-select-code-in-hw-i386-that-depends-o.patch [RHEL-39544]
  - kvm-i386-pc-remove-unnecessary-MachineClass-overrides.patch [RHEL-39544]
  - kvm-hw-i386-split-x86.c-in-multiple-parts.patch [RHEL-39544]
  - kvm-scripts-update-linux-header.sh-be-more-src-tree-frie.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Remove-temporary-dir.patch [RHEL-39544]
  - kvm-scripts-update-linux-headers.sh-Fix-the-path-of-setu.patch [RHEL-39544]
  - kvm-update-linux-headers-fix-forwarding-to-asm-generic-h.patch [RHEL-39544]
  - kvm-update-linux-headers-move-pvpanic.h-to-correct-direc.patch [RHEL-39544]
  - kvm-linux-headers-Update-to-current-kvm-next.patch [RHEL-39544]
  - kvm-update-linux-headers-import-linux-kvm_para.h-header.patch [RHEL-39544]
  - kvm-machine-allow-early-use-of-machine_require_guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-Replace-error_report-with-error_setg.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-common-type-to-encapsulate-co.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_update-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Move-sev_launch_finish-to-separate-class-me.patch [RHEL-39544]
  - kvm-i386-sev-Introduce-sev-snp-guest-object.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-sev_snp_enabled-helper.patch [RHEL-39544]
  - kvm-i386-sev-Add-sev_kvm_init-override-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Add-snp_kvm_init-override-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-cpu-Set-SEV-SNP-CPUID-bit-when-SNP-enabled.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-return-launch-measurements-for-SEV-SN.patch [RHEL-39544]
  - kvm-i386-sev-Add-a-class-method-to-determine-KVM-VM-type.patch [RHEL-39544]
  - kvm-i386-sev-Update-query-sev-QAPI-format-to-handle-SEV-.patch [RHEL-39544]
  - kvm-i386-sev-Add-the-SNP-launch-start-context.patch [RHEL-39544]
  - kvm-i386-sev-Add-handling-to-encrypt-finalize-guest-laun.patch [RHEL-39544]
  - kvm-i386-sev-Set-CPU-state-to-protected-once-SNP-guest-p.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-function-to-get-SEV-metadata-from-OV.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-populating-OVMF-metadata-pa.patch [RHEL-39544]
  - kvm-i386-sev-Add-support-for-SNP-CPUID-validation.patch [RHEL-39544]
  - kvm-hw-i386-sev-Add-support-to-encrypt-BIOS-when-SEV-SNP.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SEV-class.patch [RHEL-39544]
  - kvm-i386-sev-Invoke-launch_updata_data-for-SNP-class.patch [RHEL-39544]
  - kvm-i386-kvm-Add-KVM_EXIT_HYPERCALL-handling-for-KVM_HC_.patch [RHEL-39544]
  - kvm-i386-sev-Enable-KVM_HC_MAP_GPA_RANGE-hcall-for-SNP-g.patch [RHEL-39544]
  - kvm-i386-sev-Extract-build_kernel_loader_hashes.patch [RHEL-39544]
  - kvm-i386-sev-Reorder-struct-declarations.patch [RHEL-39544]
  - kvm-i386-sev-Allow-measured-direct-kernel-boot-on-SNP.patch [RHEL-39544]
  - kvm-memory-Introduce-memory_region_init_ram_guest_memfd.patch [RHEL-39544]
  - kvm-hw-i386-sev-Use-guest_memfd-for-legacy-ROMs.patch [RHEL-39544]
  - kvm-hw-i386-Add-support-for-loading-BIOS-using-guest_mem.patch [RHEL-39544]
  - kvm-i386-sev-fix-unreachable-code-coverity-issue.patch [RHEL-39544]
  - kvm-i386-sev-Move-SEV_COMMON-null-check-before-dereferen.patch [RHEL-39544]
  - kvm-i386-sev-Return-when-sev_common-is-null.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-formatting-of-CPUID-mismatch-mes.patch [RHEL-39544]
  - kvm-i386-sev-Fix-error-message-in-sev_get_capabilities.patch [RHEL-39544]
  - kvm-i386-sev-Fallback-to-the-default-SEV-device-if-none-.patch [RHEL-39544]
  - kvm-i386-sev-Don-t-allow-automatic-fallback-to-legacy-KV.patch [RHEL-39544]
  - kvm-target-i386-SEV-fix-mismatch-in-vcek-disabled-proper.patch [RHEL-39544]
  - kvm-virtio-rng-block-max-bytes-0.patch [RHEL-50336]
  - kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-50000]
  - kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-50000]
  - kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-50000]
  - kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-50000]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52617]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52617]
  - Resolves: RHEL-39544
    ([QEMU] Add support for AMD SEV-SNP to Qemu)
  - Resolves: RHEL-50336
    (Fail to boot up the guest including vtpm and virtio-rng (max-bytes=0) devices)
  - Resolves: RHEL-50000
    (scsi-block: Cannot setup Windows Failover Cluster, qemu crashes on assert)
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-9
changelog:
  - kvm-qemu-guest-agent-Update-the-logfile-path-of-qga-fsfr.patch [RHEL-52250]
  - Resolves: RHEL-52250
    (fsfreeze hooks break on the systems first restorecon)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-10
changelog:
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52617]
  - Resolves: RHEL-52617
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-10.el9_5.1
changelog:
  - kvm-migration-multifd-Avoid-the-final-FLUSH-in-complete.patch [RHEL-63874]
  - kvm-migration-Rename-thread-debug-names.patch [RHEL-63874]
  - kvm-migration-Use-MigrationStatus-instead-of-int.patch [RHEL-63874]
  - kvm-migration-Cleanup-incoming-migration-setup-state-cha.patch [RHEL-63874]
  - kvm-migration-postcopy-Add-postcopy-recover-setup-phase.patch [RHEL-63874]
  - kvm-migration-docs-Update-postcopy-recover-session-for-S.patch [RHEL-63874]
  - kvm-tests-migration-tests-Drop-most-WIN32-ifdefs-for-pos.patch [RHEL-63874]
  - kvm-tests-migration-tests-Always-enable-migration-events.patch [RHEL-63874]
  - kvm-tests-migration-tests-migration_event_wait.patch [RHEL-63874]
  - kvm-tests-migration-tests-Verify-postcopy-recover-setup-.patch [RHEL-63874]
  - kvm-tests-migration-tests-Cover-postcopy-failure-on-reco.patch [RHEL-63874]
  - Resolves: RHEL-63874
    (Failure to resume paused post-copy migration is undetectable [rhel-9.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-10.el9_5.2
changelog:
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-73006]
  - Resolves: RHEL-73006
    (qemu-kvm: vhost: reports error while updating IOTLB entries [rhel-9.5.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.0.0-10.el9_5.3
changelog:
  - kvm-target-i386-fix-feature-dependency-for-WAITPKG.patch [RHEL-84866]
  - Resolves: RHEL-84866
    (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: waitpkg [rhel-9.5.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-9
changelog:
  - kvm-qdev-Fix-set_pci_devfn-to-visit-option-only-once.patch [RHEL-39948]
  - kvm-tests-avocado-hotplug_blk-Fix-addr-in-device_add-com.patch [RHEL-39948]
  - kvm-qdev-monitor-avoid-QemuOpts-in-QMP-device_add.patch [RHEL-39948]
  - kvm-vl-use-qmp_device_add-in-qemu_create_cli_devices.patch [RHEL-39948]
  - Resolves: RHEL-39948
    (qom-get iothread-vq-mapping is empty on new hotplug disk [rhel-9.5])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-10
changelog:
  - kvm-target-i386-Make-sure-SynIC-state-is-really-updated-.patch [RHEL-53073]
  - kvm-hw-virtio-fix-crash-in-processing-balloon-stats.patch [RHEL-73688]
  - kvm-qemu-ga-Optimize-freeze-hook-script-logic-of-logging.patch [RHEL-52278]
  - kvm-qga-Add-log-to-guest-fsfreeze-thaw-command.patch [RHEL-56340]
  - Resolves: RHEL-53073
    (kvm-unti kvm-hyperv_synic test is stuck on AMD with COS9)
  - Resolves: RHEL-73688
    (VM crashes when requesting domstats)
  - Resolves: RHEL-52278
    (fsfreeze hooks doesn't log error on system logs when running hook fails)
  - Resolves: RHEL-56340
    (qemu-ga logs only "guest-fsfreeze called" (but not "guest-fsthaw called"))


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-11
changelog:
  - kvm-pci-ensure-valid-link-status-bits-for-downstream-por.patch [RHEL-65616]
  - Resolves: RHEL-65616
    (Failed to hot add PCIe device behind xio3130 downstream port)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-12
changelog:
  - kvm-target-i386-cpu-set-correct-supported-XCR0-features-.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-do-not-rely-on-ExtSaveArea-for-accelerat.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-return-bool-from-x86_cpu_filter_features.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-AVX10-feature-and-AVX10-version-prop.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-CPUID.24-features-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-feature-dependencies-for-AVX10.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Add-AVX512-state-when-AVX10-is-supported.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-Introduce-GraniteRapids-v2-model.patch [RHEL-30316 RHEL-45111]
  - kvm-target-i386-add-sha512-sm3-sm4-feature-bits.patch [RHEL-30316 RHEL-45111]
  - kvm-arm-disable-pauth-for-virt-rhel9.patch [RHEL-75782]
  - kvm-tests-qtest-disable-most-pauth-tests.patch [RHEL-75782]
  - Resolves: RHEL-30316
    ([Intel 9.6 FEAT] [GNR] Virt-QEMU: Add AVX10.1 instruction support)
  - Resolves: RHEL-45111
    ([Intel 9.6 FEAT] [CWF][DMR] Virt-QEMU: Advertise new instructions SHA2-512NI, SM3, and SM4)
  - Resolves: RHEL-75782
    ([Nvidia "Grace"] Lack of "PAuth" CPU feature results in live migration failure from RHEL 9.6 to 10)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-13
changelog:
  - kvm-pc-bios-s390-ccw-Abort-IPL-on-invalid-loadparm.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-virtio-Add-a-function-to-reset-a-vi.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-Fix-boot-problem-with-virtio-net-de.patch [RHEL-72716]
  - kvm-pc-bios-s390-ccw-netmain-Fix-error-messages-with-reg.patch [RHEL-72716]
  - Resolves: RHEL-72716
    (Boot fall back to cdrom from network not always working)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-14
changelog:
  - kvm-nbd-server-Silence-server-warnings-on-port-probes.patch [RHEL-67863]
  - kvm-vhost-Add-stubs-for-the-migration-state-transfer-int.patch [RHEL-78372]
  - kvm-virtio-net-vhost-user-Implement-internal-migration.patch [RHEL-78372]
  - Resolves: RHEL-67863
    (Ensure qemu as NBD server does not flood logs [rhel 9.6])
  - Resolves: RHEL-78372
    (Add vhost-user internal migration for passt [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15
changelog:
  - kvm-net-Fix-announce_self.patch [RHEL-73891]
  - kvm-migration-Add-helper-to-get-target-runstate.patch [RHEL-54296 RHEL-78397]
  - kvm-qmp-cont-Only-activate-disks-if-migration-completed.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Make-late-block-active-the-default.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Apply-late-block-active-behavior-to-.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Fix-possible-race-with-block_inactiv.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-Rewrite-disk-activation.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-active-field-to-BlockDeviceInfo.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Allow-inactivating-already-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Inactivate-external-snapshot-overlays-when-nec.patch [RHEL-54296 RHEL-78397]
  - kvm-migration-block-active-Remove-global-active-flag.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Don-t-attach-inactive-child-to-active-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Fix-crash-on-block_resize-on-inactive-node.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-option-to-create-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Add-blockdev-set-active-QMP-command.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Support-inactive-nodes-in-blk_insert_bs.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Don-t-ignore-image-activation-error-in-.patch [RHEL-54296 RHEL-78397]
  - kvm-block-Drain-nodes-before-inactivating-them.patch [RHEL-54296 RHEL-78397]
  - kvm-block-export-Add-option-to-allow-export-of-inactive-.patch [RHEL-54296 RHEL-78397]
  - kvm-nbd-server-Support-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-filter_qtest.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-qsd-migrate-case.patch [RHEL-54296 RHEL-78397]
  - kvm-iotests-Add-NBD-based-tests-for-inactive-nodes.patch [RHEL-54296 RHEL-78397]
  - Resolves: RHEL-73891
    (No RARP packets on the destination after migration [rhel-9.6])
  - Resolves: RHEL-54296
    (Provide QMP command for block device reactivation after migration [rhel-9.5])
  - Resolves: RHEL-78397
    (backport fix for double migration of a paused VM (disk activation rewrite))


author: Eduard Abdullin <eabdullin@almalinux.org> - 17:9.1.0-15.alma.1
changelog:
  - Enable building for ppc64le
  - Don't remove slof.bin for ppc64le
  - usb: add config options for hub and hid devices for ppc


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-6
changelog:
  - kvm-virtio-net-Add-queues-before-loading-them.patch [RHEL-69477]
  - kvm-docs-system-s390x-bootdevices-Update-loadparm-docume.patch [RHEL-68440]
  - kvm-docs-system-bootindex-Make-it-clear-that-s390x-can-a.patch [RHEL-68440]
  - kvm-hw-s390x-Restrict-loadparm-property-to-devices-that-.patch [RHEL-68440]
  - kvm-hw-Add-loadparm-property-to-scsi-disk-devices-for-bo.patch [RHEL-68440]
  - kvm-scsi-fix-allocation-for-s390x-loadparm.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-cdrom-type-to-false-for-eac.patch [RHEL-68440]
  - kvm-pc-bios-s390x-Initialize-machine-loadparm-before-pro.patch [RHEL-68440]
  - kvm-pc-bios-s390-ccw-Re-initialize-receive-queue-index-b.patch [RHEL-68440]
  - kvm-vnc-fix-crash-when-no-console-attached.patch [RHEL-61633]
  - Resolves: RHEL-69477
    (qemu crashed when migrate vm with multiqueue from rhel9.4 to rhel9.6)
  - Resolves: RHEL-68440
    (The new "boot order" feature is sometimes not working as expected [RHEL 9])
  - Resolves: RHEL-61633
    (Qemu-kvm  crashed  if  no display device setting and switching display by remote-viewer [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-7
changelog:
  - kvm-migration-Allow-pipes-to-keep-working-for-fd-migrati.patch [RHEL-66089]
  - Resolves: RHEL-66089
    (warning: fd: migration to a file is deprecated when create or revert a snapshot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-8
changelog:
  - kvm-linux-headers-Update-to-Linux-v6.12-rc5.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa10-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa11-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa12-changes.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-msa13-subfunctions.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-ptff-Query-Time-Stamp-Event-QTSE-.patch [RHEL-50212]
  - kvm-linux-headers-Update-to-Linux-6.13-rc1.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Concurrent-functions-facility-sup.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Enhancements-facility-3.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Miscellaneous-Instruction-Extensi.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Vector-Packed-Decimal-Enhancement.patch [RHEL-50212]
  - kvm-s390x-cpumodel-add-Ineffective-nonconstrained-transa.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-Sequential-Instruction-Fetching-f.patch [RHEL-50212]
  - kvm-s390x-cpumodel-correct-PLO-feature-wording.patch [RHEL-50212]
  - kvm-s390x-cpumodel-Add-PLO-extension-facility.patch [RHEL-50212]
  - kvm-s390x-cpumodel-gen17-model.patch [RHEL-50212]
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-71940]
  - kvm-vhost-fail-device-start-if-iotlb-update-fails.patch [RHEL-27832]
  - kvm-hw-char-pl011-Use-correct-masks-for-IBRD-and-FBRD.patch [RHEL-67107]
  - Resolves: RHEL-50212
    ([IBM 9.6 FEAT] KVM: CPU model for new IBM Z HW - qemu part)
  - Resolves: RHEL-71940
    (qemu-ga cannot freeze filesystems with sentinelone)
  - Resolves: RHEL-27832
    (The post-copy migration of RT-VM leads to race while accessing vhost-user device and hung/stalled target VM)
  - Resolves: RHEL-67107
    ([aarch64] [rhel-9.6] Backport some important post 9.1 qemu fixes)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.2
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-80622]
  - Resolves: RHEL-80622
    (Allow libvirt to restart passt/vhost-user when the process is killed [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.3
changelog:
  - kvm-qga-implement-a-guest-get-load-command.patch [RHEL-83000]
  - Resolves: RHEL-83000
    ([qemu-guest-agent][RFE] Report CPU load average [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.4
changelog:
  - kvm-file-posix-probe-discard-alignment-on-Linux-block-de.patch [RHEL-87734]
  - kvm-block-io-skip-head-tail-requests-on-EINVAL.patch [RHEL-87734]
  - kvm-file-posix-Fix-crash-on-discard_granularity-0.patch [RHEL-87734]
  - Resolves: RHEL-87734
    (QEMU sends unaligned discards on 4K devices [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.5
changelog:
  - kvm-hw-i386-Fix-machine-type-compatibility.patch [RHEL-92077]
  - Resolves: RHEL-92077
    (Fix x86 M-type compats [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.6
changelog:
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-95407]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-95407]
  - Resolves: RHEL-95407
    (Support multipath failover with scsi-block [rhel-9.6.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-15.el9_6.7
changelog:
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-100767]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-99887]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-99887]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-99887]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-99887]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-99887]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-99887]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-99887]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-99887]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-99887]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-99887]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-99887]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-99887]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-99887]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-99887]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-99887]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-99887]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-99887]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-99887]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-99887]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-99887]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-99887]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-99887]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-99887]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-99887]
  - Resolves: RHEL-100767
    (Video stuck after switchover phase when play one video during migration [rhel-9.6.z])
  - Resolves: RHEL-99887
    (-ftrivial-auto-var-init=zero reduced performance [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.8
changelog:
  - kvm-vfio-helpers-Refactor-vfio_region_mmap-error-handlin.patch [RHEL-107314]
  - kvm-vfio-helpers-Align-mmaps.patch [RHEL-107314]
  - Resolves: RHEL-107314
    (Improve VFIO mmapping performance with  huge  pfnmaps [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-15.el9_6.9
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-108725]
  - Resolves: RHEL-108725
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-9.6.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-22
changelog:
  - kvm-migration-postcopy-Spatial-locality-page-hint-for-pr.patch [RHEL-85159]
  - kvm-Allow-guest-network-get-route-guest-get-load-QGA-com.patch [RHEL-91605 RHEL-91606]
  - Resolves: RHEL-85159
    (Video stuck about 1 min after switchover phase when play one video during postcopy-preempt migration)
  - Resolves: RHEL-91605
    ([qemu-guest-agent] Add new api 'guest-network-get-route' to allow-rpc [RHEL-9])
  - Resolves: RHEL-91606
    ([qemu-guest-agent] Enable 'guest-get-load' by default [RHEL-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-23
changelog:
  - kvm-net-vhost-user-add-QAPI-events-to-report-connection-.patch [RHEL-95120]
  - kvm-file-posix-Define-DM_MPATH_PROBE_PATHS.patch [RHEL-95408]
  - kvm-file-posix-Probe-paths-and-retry-SG_IO-on-potential-.patch [RHEL-95408]
  - Resolves: RHEL-95120
    (Allow libvirt to restart passt/vhost-user when the process is killed [rhel-9.7])
  - Resolves: RHEL-95408
    (Support multipath failover with scsi-block [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-24
changelog:
  - kvm-s390x-pci-add-support-for-guests-that-request-direct.patch [RHEL-11430]
  - kvm-s390x-pci-indicate-QEMU-supports-relaxed-translation.patch [RHEL-11430]
  - kvm-block-Expand-block-status-mode-from-bool-to-flags.patch [RHEL-82906 RHEL-83015]
  - kvm-file-posix-gluster-Handle-zero-block-status-hint-bet.patch [RHEL-82906 RHEL-83015]
  - kvm-block-Let-bdrv_co_is_zero_fast-consolidate-adjacent-.patch [RHEL-82906 RHEL-83015]
  - kvm-block-Add-new-bdrv_co_is_all_zeroes-function.patch [RHEL-82906 RHEL-83015]
  - kvm-iotests-Improve-iotest-194-to-mirror-data.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Minor-refactoring.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Pass-full-sync-mode-rather-than-bool-to-inter.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Allow-QMP-override-to-declare-target-already-.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Drop-redundant-zero_target-parameter.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Skip-pre-zeroing-destination-if-it-is-already.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Skip-writing-zeroes-when-target-is-already-ze.patch [RHEL-82906 RHEL-83015]
  - kvm-iotests-common.rc-add-disk_usage-function.patch [RHEL-82906 RHEL-83015]
  - kvm-tests-Add-iotest-mirror-sparse-for-recent-patches.patch [RHEL-82906 RHEL-83015]
  - kvm-mirror-Reduce-I-O-when-destination-is-detect-zeroes-.patch [RHEL-82906 RHEL-83015]
  - Resolves: RHEL-11430
    ([IBM 9.7 FEAT] KVM: Performance Enhanced Refresh PCI Translation - qemu part)
  - Resolves: RHEL-82906
    (--migrate-disks-detect-zeroes doesn't take effect for disk migration [rhel-9.7])
  - Resolves: RHEL-83015
    (Disk size of target raw image is full allocated when doing mirror with default discard value [rhel-9.7])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.1.0-25
changelog:
  - kvm-s390x-Fix-leak-in-machine_set_loadparm.patch [RHEL-98554]
  - kvm-hw-s390x-ccw-device-Fix-memory-leak-in-loadparm-sett.patch [RHEL-98554]
  - kvm-amd_iommu-Rename-variable-mmio-to-mr_mmio.patch [RHEL-66202]
  - kvm-amd_iommu-Add-support-for-pass-though-mode.patch [RHEL-66202]
  - kvm-amd_iommu-Use-shared-memory-region-for-Interrupt-Rem.patch [RHEL-66202]
  - kvm-amd_iommu-Send-notification-when-invalidate-interrup.patch [RHEL-66202]
  - kvm-amd_iommu-Check-APIC-ID-255-for-XTSup.patch [RHEL-66202]
  - kvm-io-Fix-partial-struct-copy-in-qio_dns_resolver_looku.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Refactor-setting-client-sockopts-i.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Refactor-success-and-failure-paths.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Add-support-for-keep-alive-flag-to.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Refactor-inet_parse-to-use-QemuOpt.patch [RHEL-67104]
  - kvm-util-qemu-sockets-Introduce-inet-socket-options-cont.patch [RHEL-67104]
  - kvm-tests-unit-test-util-sockets-fix-mem-leak-on-error-o.patch [RHEL-67104]
  - kvm-target-i386-Expose-bits-related-to-SRSO-vulnerabilit.patch [RHEL-52649]
  - kvm-target-i386-Add-PerfMonV2-feature-bit.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-CPU-model-for-Cache-property.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-Rome-CPU-model-for-Cache-pro.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-Milan-CPU-model-for-Cache-pr.patch [RHEL-52649]
  - kvm-target-i386-Add-couple-of-feature-bits-in-CPUID_Fn80.patch [RHEL-52649]
  - kvm-target-i386-Update-EPYC-Genoa-for-Cache-property-per.patch [RHEL-52649]
  - kvm-target-i386-Add-support-for-EPYC-Turin-model.patch [RHEL-52649]
  - kvm-hw-i386-amd_iommu-Assign-pci-id-0x1419-for-the-AMD-I.patch [RHEL-70926]
  - kvm-hw-i386-amd_iommu-Isolate-AMDVI-PCI-from-amd-iommu-d.patch [RHEL-70925]
  - kvm-hw-i386-amd_iommu-Allow-migration-when-explicitly-cr.patch [RHEL-70925]
  - kvm-Enable-amd-iommu-device.patch [RHEL-70925]
  - kvm-include-qemu-compiler-add-QEMU_UNINITIALIZED-attribu.patch [RHEL-99888]
  - kvm-hw-virtio-virtio-avoid-cost-of-ftrivial-auto-var-ini.patch [RHEL-99888]
  - kvm-block-skip-automatic-zero-init-of-large-array-in-ioq.patch [RHEL-99888]
  - kvm-chardev-char-fd-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-chardev-char-pty-skip-automatic-zero-init-of-large-a.patch [RHEL-99888]
  - kvm-chardev-char-socket-skip-automatic-zero-init-of-larg.patch [RHEL-99888]
  - kvm-hw-audio-ac97-skip-automatic-zero-init-of-large-arra.patch [RHEL-99888]
  - kvm-hw-audio-cs4231a-skip-automatic-zero-init-of-large-a.patch [RHEL-99888]
  - kvm-hw-audio-es1370-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-hw-audio-gus-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-audio-marvell_88w8618-skip-automatic-zero-init-of.patch [RHEL-99888]
  - kvm-hw-audio-sb16-skip-automatic-zero-init-of-large-arra.patch [RHEL-99888]
  - kvm-hw-audio-via-ac97-skip-automatic-zero-init-of-large-.patch [RHEL-99888]
  - kvm-hw-char-sclpconsole-lm-skip-automatic-zero-init-of-l.patch [RHEL-99888]
  - kvm-hw-dma-xlnx_csu_dma-skip-automatic-zero-init-of-larg.patch [RHEL-99888]
  - kvm-hw-display-vmware_vga-skip-automatic-zero-init-of-la.patch [RHEL-99888]
  - kvm-hw-hyperv-syndbg-skip-automatic-zero-init-of-large-a.patch [RHEL-99888]
  - kvm-hw-misc-aspeed_hace-skip-automatic-zero-init-of-larg.patch [RHEL-99888]
  - kvm-hw-net-rtl8139-skip-automatic-zero-init-of-large-arr.patch [RHEL-99888]
  - kvm-hw-net-tulip-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-net-virtio-net-skip-automatic-zero-init-of-large-.patch [RHEL-99888]
  - kvm-hw-net-xgamc-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-nvme-ctrl-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-hw-ppc-spapr_tpm_proxy-skip-automatic-zero-init-of-l.patch [RHEL-99888]
  - kvm-hw-usb-hcd-ohci-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-hw-scsi-lsi53c895a-skip-automatic-zero-init-of-large.patch [RHEL-99888]
  - kvm-hw-scsi-megasas-skip-automatic-zero-init-of-large-ar.patch [RHEL-99888]
  - kvm-hw-ufs-lu-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-net-socket-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-net-stream-skip-automatic-zero-init-of-large-array.patch [RHEL-99888]
  - kvm-ui-vnc-Update-display-update-interval-when-VM-state-.patch [RHEL-100741]
  - Resolves: RHEL-98554
    ([s390x][RHEL9.7.0][virtio_block] there would be memory leak with virtio_blk disks)
  - Resolves: RHEL-66202
    ([AMDSERVER 9.6 Feature] qemu: Interrupt Remap support for emulated amd viommu)
  - Resolves: RHEL-67104
    (postcopy on the destination host can't switch into pause status under the network issue if boot VM with '-S')
  - Resolves: RHEL-52649
    ([AMDSERVER 9.6 Feature] Turin: Qemu EPYC-Turin Model)
  - Resolves: RHEL-70926
    (Qemu/amd-iommu: Advertise a suitable device id)
  - Resolves: RHEL-70925
    (Qemu/amd-iommu: Add ability to manually specify the AMDVI-PCI device)
  - Resolves: RHEL-99888
    (-ftrivial-auto-var-init=zero reduced performance [rhel-9])
  - Resolves: RHEL-100741
    (Video stuck after switchover phase when play one video during migration [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-26
changelog:
  - kvm-rbd-Fix-.bdrv_get_specific_info-implementation.patch [RHEL-108726]
  - Resolves: RHEL-108726
    (Openstack guest becomes inaccessible via network when storage network on the hypervisor is disabled/lost [rhel-9])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-27
changelog:
  - kvm-target-i386-Make-invtsc-migratable-when-user-sets-ts.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-Enable-fdp-excptn-only-and-zero-fcs-fds.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-i386-make-kvm_filter_msr-and-related-definitions.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-remove-unnecessary-ifdef.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-crypto-Define-macros-for-hash-algorithm-digest-lengt.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Drop-the-check-of-phys_bits-in-host_cpu_rea.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Extract-a-common-fucntion-to-setup-value-of.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Drop-the-variable-smp_cores-and-smp_threads.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Drop-cores_per_pkg-in-cpu_x86_cpuid.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-topology-Update-the-comment-of-x86_apicid_from_.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-topology-Introduce-helpers-for-various-topology.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Track-a-X86CPUTopoInfo-directly-in-CPUX86St.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Hoist-check-of-CPUID_EXT3_TOPOEXT-against-t.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-cpu-Remove-nr_cores-from-struct-CPUState.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Set-up-CPUID_HT-in-x86_cpu_expand_features-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Set-and-track-CPUID_EXT3_CMP_LEG-in-env-fea.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-Remove-unused-parameter-uint32_t-bit-in-feature.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-Print-CPUID-subleaf-info-for-unsupported.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-sev-Reduce-system-specific-declarations.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-physmem-replace-assertion-with-error.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-redhat-target-i386-add-CPUID-and-MSR-bits-from-Clear.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-qom-reverse-order-of-instance_post_init-calls.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-Remove-AccelCPUClass-cpu_class_init-need.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Consolidate-the-helper-to-get-Host-s-vendor.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-rocker-do-not-pollute-the-namespace.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-linux-headers-Update-to-Linux-v6.14-rc3.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-linux-headers-Update-to-Linux-v6.15-rc3.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-linux-headers-update-from-6.15-kvm-next.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-update-Linux-headers-to-v6.16-rc3.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-update-Linux-headers-to-KVM-tree-master.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-Introduce-tdx-guest-object.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-tdx_kvm_type-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-tdx_kvm_init-to-initialize-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Get-tdx_capabilities-via-KVM_TDX_CAPABILITI.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Introduce-is_tdx_vm-helper-and-cache-tdx_gu.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-Introduce-kvm_arch_pre_create_vcpu.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Initialize-TDX-before-creating-TD-vcpus.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-property-sept-ve-disable-for-tdx-guest-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Make-sept_ve_disable-set-by-default.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Wire-CPU-features-up-with-attributes-of-TD-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Validate-TD-attributes.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Support-user-configurable-mrconfigid-mrowne.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-APIC-bus-rate-to-match-with-what-TDX-mo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-user-specified-tsc-frequency.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-load-TDVF-for-TD-guest.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdvf-Introduce-function-to-parse-TDVF-metadata.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Parse-TDVF-metadata-for-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-initialize-pc.rom-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Track-mem_ptr-for-each-firmware-entry-of-TD.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Track-RAM-entries-for-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-headers-Add-definitions-from-UEFI-spec-for-volumes-r.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Setup-the-TD-HOB-list.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-TDVF-memory-via-KVM_TDX_INIT_MEM_REGION.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Call-KVM_TDX_INIT_VCPU-to-initialize-TDX-vc.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Finalize-TDX-VM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Enable-user-exit-on-KVM_HC_MAP_GPA_RANGE.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Handle-KVM_SYSTEM_EVENT_TDX_FATAL.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Wire-TDX_REPORT_FATAL_ERROR-with-GuestPanic.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-kvm-Check-KVM_CAP_MAX_VCPUS-at-vm-level.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-introduce-x86_confidential_guest_cpu_instan.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-implement-tdx_cpu_instance_init.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Introduce-enable_cpuid_0x1f-to-force-exposi.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Force-exposing-CPUID-0x1f.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-kvm_readonly_mem_enabled-to-false-for-T.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Disable-SMM-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Disable-PIC-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-and-check-kernel_irqchip-mode-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-synchronize-guest-tsc-for-TDs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Only-configure-MSR_IA32_UCODE_REV-in-kvm_in.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-apic-Skip-kvm_apic_put-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-cpu-Don-t-set-vcpu_dirty-when-guest_state_protected.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cgs-Rename-mask_cpuid_features-to-adjust_cpuid_.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Implement-adjust_cpuid_features-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-TDX-fixed1-bits-to-supported-CPUIDs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-supported-CPUID-bits-related-to-TD-Attr.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-supported-CPUID-bits-relates-to-XFAM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Add-XFD-to-supported-bit-of-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Define-supported-KVM-features-for-TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cgs-Introduce-x86_confidential_guest_check_feat.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fetch-and-validate-CPUID-of-TD-guest.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-treat-SYSCALL-as-unavailable.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Make-invtsc-default-on.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Validate-phys_bits-against-host-value.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-docs-Add-TDX-documentation.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fix-build-on-32-bit-host.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdvf-Fix-build-on-32-bit-host.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-before-fe.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Error-and-exit-when-named-cpu-model-is-requ.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Rename-enable_cpuid_0x1f-to-force_cpuid_0x1.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fix-the-typo-of-the-comment-of-struct-TdxGu.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Clarify-the-error-message-of-mrconfigid-mro.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-handle-TDG.VP.VMCALL-GetTdVmCallInfo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-handle-TDG.VP.VMCALL-GetQuote.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-move-max_features-to-class.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-nvmm-whpx-add-accel-CPU-class-that-sets-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-allow-reordering-max_x86_cpu_initfn-vs-a.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-move-accel_cpu_instance_init-to-.instanc.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-merge-host_cpu_instance_init-and-host_cp.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Remove-enumeration-of-GetQuote-in-tdx_handl.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Set-value-of-GetTdVmCallInfo-based-on-capab.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-handle-TDVMCALL_SETUP_EVENT_NOTIFY_INTERRUP.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Fix-the-report-of-gpa-in-QAPI.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Remove-task-watch-only-when-it-s-valid.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Don-t-mask-off-CPUID_EXT_PDCM.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Move-x86_ext_save_areas-initialization-to-..patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-target-i386-tdx-fix-locking-for-interrupt-injection.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-cpu-Cleanup-host_cpu_max_instance_init.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-i386-tdx-Remove-the-redundant-qemu_mutex_init-tdx-lo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-redhat-enable-CONFIG_TDX.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-redhat-allow-5-level-paging-for-TDX-VMs.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-memory-Export-a-helper-to-get-intersection-of-a-Memo.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-memory-Change-memory_region_set_ram_discard_manager-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-memory-Unify-the-definiton-of-ReplayRamPopulate-and-.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-ram-block-attributes-Introduce-RamBlockAttributes-to.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - kvm-physmem-Support-coordinated-discarding-of-RAM-with-g.patch [RHEL-15710 RHEL-20798 RHEL-49728]
  - Resolves: RHEL-15710
    ([Intel 9.7 FEAT] TDX: QEMU Support)
  - Resolves: RHEL-20798
    ([Intel 9.6 FEAT] TDX: host: Virt-QEMU: Add safe device pass-through for TD)
  - Resolves: RHEL-49728
    ([Intel 9.7 FEAT] Virt-QEMU: TDX: Allow to configure apic bus clock)


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-28
changelog:
  - kvm-target-i386-Expose-IBPB-BRTYPE-and-SBPB-CPUID-bits-t.patch [RHEL-17614]
  - Resolves: RHEL-17614
    (VM reports Vulnerable to spec_rstack_overflow when reading status in '/sys/devices/system/cpu/vulnerabilities/')


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-29.el9_7.1
changelog:
  - kvm-arm-kvm-report-registers-we-failed-to-set.patch [RHEL-120502]
  - Resolves: RHEL-120502
    ([rhel9] Backport "arm/kvm: report registers we failed to set" [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-29.el9_7.2
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120125]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120125]
  - Resolves: RHEL-120125
    (CVE-2025-11234 qemu-kvm: VNC WebSocket handshake use-after-free [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-29.el9_7.4
changelog:
  - kvm-accel-kvm-check-for-KVM_CAP_READONLY_MEM-on-VM.patch [RHEL-129551]
  - kvm-ram-block-attributes-fix-interaction-with-hugetlb-me.patch [RHEL-129551]
  - kvm-ram-block-attributes-Unify-the-retrieval-of-the-bloc.patch [RHEL-129551]
  - kvm-scsi-disk-Apply-error-policy-for-host_status-errors-.patch [RHEL-130209]
  - Resolves: RHEL-129551
    ([RHEL 9]snp guest fail to boot with hugepage [rhel-9.7.z])
  - Resolves: RHEL-130209
    (scsi-block: Error policy is ignored for host_status errors [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-29.el9_7.5
changelog:
  - kvm-file-posix-Handle-suspended-dm-multipath-better-for-.patch [RHEL-133302]
  - Resolves: RHEL-133302
    (The VM hit io error when do S3-PR integration on the pass-through  failover multipath device [rhel-9.7.z])


author: Jon Maloy <jmaloy@redhat.com> - 9.1.0-29.el9_7.6
changelog:
  - kvm-Revert-i386-cpu-Move-adjustment-of-CPUID_EXT_PDCM-be.patch [RHEL-135451]
  - Resolves: RHEL-135451
    (Live migration after workload update fails with operation failed: guest CPU doesn't match specification: missing features: pdcm [rhel-9])


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Rebuild (LLVM-15)
    Resolves: bz#2119003

  - Add versioned dependencies between subpackages
    Resolves: bz#2088352


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-2
changelog:
  - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
    Resolves: RHEL-105000
  - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
    Resolves: RHEL-105005


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-26
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - -gui: add mesa-dri-drivers soft dep for rhel8+ too
    Resolves: bz#1998959
  - Fix out-of-bound write in QOutlineMapper::converPath
    Resolves: bz#1996876


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-27
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch patches
    - validate configure results (base, egl-x11)

    Resolves: bz#2014991


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-4
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209492


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-5
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.9-6
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212754


author: Jan Grulich <jgrulich@redhat.com> - 5.15.2-9
changelog:
  - Sync with Fedora:
    - sync kde/5.15 branch fixes
    - pull in candidate fix QTBUG-83890
    Resolves: bz#1988934


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Aristeu Rozanski <aris@redhat.com> 0.6.7-16
changelog:
  - rasdaemon: Add support to parse the PPIN field of mce tracepoint  [RHEL-52911]
  - rasdaemon: Add support to parse microcode field of mce tracepoint [RHEL-52911]
  - rasdaemon: Update SMCA bank error descriptions [RHEL-52911]
  - rasdaemon: ras-mc-ctl: Add support to display mcastatus_msg string [RHEL-52911]


author: Aristeu Rozanski <aris@redhat.com> 0.6.7-1
changelog:
  - Bumped to 0.6.7
  - Backported patches that sit on top of 0.6.7 without being released
    Related: rhbz#2052190


author: John Kacur <jkacur@redhat.com> - 2.1-2
changelog:
  - Take into account the rename of the sched_features file for HRTICK
  - Use HRTICK_DL if available
  Resolves: rhbz#1973083


author: John Kacur <jkacur@redhat.com> - 2.1-6
changelog:
  - Fix potential double mount of cgroups for deadline_test
  - Fix potential double mount of cgroups for cyclicdeadline_test
  Resolves: rhbz#2011415


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.3-1
changelog:
  - Update to latest upstream 2.3
  - Correct the comment of numa_initialize()
  - oslat.8: Remove the argument of --bias
  Resolves: rhbz#2012297


author: John Kacur <jkacur@redhat.com> - 2.3-2
changelog:
  - Fix parsing of affinity
  - Ignore the runtime cpumask if a new cpumask is requested
  Resolves: rhbz#2050244


author: John Kacur <jkacur@redhat.com> - 2.4-4
changelog:
  - Add error checking in hackbench to connect and getsockname
  - Fix compile warnings in hackbench because of comparison of different signs
  - Fix compile warnings in hackbench because of warnings about fall through
  Resolves: rhbz#2115067


author: Leah Leshchinsky <lleshchi@redhat.com> - 2.4-5
changelog:
  - hwlatdetect: Convert to fstrings
  - hwlatdetect: Update to integer division
  - hwlatdetect: Fix incorrect comment about test duration
  Resolves: rhbz#2121150


author: Crystal Wood <crwood@redhat.com> - 2.6-3
changelog:
  - Fix issues with with using --json without --histogram (both cyclictest and
    cyclicdeadline), and using --histogram without --quiet in cyclicdeadline.
  Resolves: RHEL-9910


author: John Kacur <jkacur@redhat.com> - 2.6-4
changelog:
  - oslat: correct spelling of Mhz to MHz
  - oslat: Fix conversion to nanoseconds for 1us bucket
  Resolves: RHEL-23909


author: Anubhav Shelat <ashelat@redhat.com> - 2.7-2
changelog:
  - Added a patch to fix -s option in hackbench.
  - Added a patch to prevent the user from erroneously passing negative numbers to hackbench.
  Resolves: RHEL-36746


author: Tyonnchie Berry <tyberry@redhat.com> - 2.8-5
changelog:
  -  Added patch Fix-rt-tests-build-with-glibc-2.41.patch
  -  Added patch Revert-Fix-rt-tests-build-with-glibc-2.41.patch
  -  Added patch sched_attr-Do-not-define-for-glibc-2.41.patch
  Resolves: RHEL-88469


author: Tyonnchie Berry <tyberry@redhat.com> - 2.9-1
changelog:
  - Rebased to latest upstream version
  - Dropped previously applied patches
  - Cleaned up spec file
  Resolves: RHEL-86704


author: Christopher Engelhard <ce@lcts.de> - 2.6-3
changelog:
  - Stop auto-creating a cronjob, but ship example cronjob/
    systemd timer units in docdir instead (upstream issue #1829)
  - Build & ship HTML user guide
  - Remove %pre scriptlet, as it was introduced only to fix a
    specific upgrade issue with v1.15 in 2014


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-7
changelog:
  - Sync spec changes and downstream patches from RHEL 8
    - Require xorriso instead of genisoimage
    - Add S/390 support and forgotten dependency on the file utility
    - Backport upstream code related to LUKS2 support
    - Modify the cron command to avoid an e-mail with error message after
      ReaR is installed but not properly configured when the cron command
      is triggered for the first time
    - Changes for NetBackup (NBU) support, upstream PR2544
  - Add dependency on dhcp-client, RHBZ #1926451


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Sync spec changes and downstream patches from RHEL 8 rear-2.6-2
    - Fix multipath performance regression in 2.6, introduced by upstream PR #2299.
      Resolves: rhbz1993296
    - On POWER add bootlist & ofpathname to the list of required programs
      conditionally (bootlist only if running under PowerVM, ofpathname
      always except on PowerNV) - upstream PR2665, add them to package
      dependencies
      Resolves: rhbz1983013
    - Backport PR2608:
      Fix setting boot path in case of UEFI partition (ESP) on MD RAID
      Resolves: rhbz1945869
    - Backport PR2625
      Prevents accidental backup removal in case of errors
      Resolves: rhbz1958247
    - Fix rsync error and option handling
      Resolves: rhbz1930662


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-11
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options
  - Add patch for better handling of thin pools and other LV types not supported
    by vgcfgrestore


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-12
changelog:
  - Apply PR2795 to detect changes in system files between backup
    and rescue image
  - Apply PR2808 to exclude dev/watchdog* from recovery system
  - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
    on stdin
  - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
  - Recommend dosfstools on x86_64, needed for EFI System Partition
  - Backport PR2825 to replace defunct mkinitrd with dracut
  - Apply PR2580 to load the nvram module in the rescue environment in order
    to be able to set the boot order on ppc64le LPARs
  - Backport PR2822 to include the true vi executable in rescue ramdisk


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-16
changelog:
  - Apply PR2903 to protect against colons in pvdisplay output
  - Apply PR2873 to fix initrd regeneration on s390x
  - Apply PR2431 to migrate XFS configuration files


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-18
changelog:
  - Add patch to start rsyslog and include NBU systemd units
  - Apply PR 3027 to ensure correct creation of the rescue environment
    when a file is shrinking while being read
  - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
  - Apply upstream patch for temp dir usage with LUKS to ensure
    that during recovery an encrypted disk can be unlocked using a keyfile
  - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
  - Correct a mistake done when backporting PR 2691


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-19
changelog:
  - Add patch to force removal of lvmdevices, prevents LVM problems after
    restoring to different disks/cloning. Upstream PR 3043


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-20
changelog:
  - Backport PR 3061 to save LVM pool metadata volume size in disk layout
    and restore it
  - Backport PR 3058 to skip useless xfs mount options when mounting
    during recovery, prevents mount errors like "logbuf size must be greater
    than or equal to log stripe size"


author: Eduard Abdullin <eabdullin@almalinux.org> - 2.6-21.alma
changelog:
  - Make initrd accessible only by root (#3123)
  - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136


author: Takashi Igarashi <takashi.igarashi@asianux.com> - 2.6-21.el9_3.ML.2
changelog:
  - Changed OS_VENDOR in /etc/rear/os.conf to 'MIRACLE LINUX'
  - Added 'MIRACLE LINUX' to the selection condition of OS_MASTER_VEMDOR


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-21
changelog:
  - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136
  - make initrd accessible only by root (CVE-2024-23301), PR 3123


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-22
changelog:
  - Do not delete NetBackup logs in case of errors and save
    /usr/openv/netbackup/logs to the restored system after a successful recovery
  - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
    with NetBackup 10.2.0.1


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-23
changelog:
  - Resolve libs for executable links in COPY_AS_IS, PR 3073
  - Skip invalid disk drives when saving layout PR 3047


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-24
changelog:
  - Support "export TMPDIR" in user configuration again, print a warning
    when this is used - revert commit f464eae2, adapt PR 3163, add commit
    b422845f.
    Will be supported only until the update to 2.7


author: Maito Yokoyama <maito.yokoyama@asianux.com> - 2.6-24.el9.ML.1
changelog:
  - Changed OS_VENDOR in /etc/rear/os.conf to 'MIRACLE LINUX'
  - Added 'MIRACLE LINUX' to the selection condition of OS_MASTER_VENDOR


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-25
changelog:
  - Backport PR 3250 to fix useless warning that libsystemd-core requires
    additional libraries and ReaR recovery system needs additional libraries
  - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs:// BACKUP/OUTPUT_URL
  - Backport PR 2576 to remove obsolete FAT16 options to avoid kernel warning


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-26
changelog:
  - Install GRUB on multipath disks, PR 3334
  - Improve docs of layout configuration in user guide, PR 3125


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-27
changelog:
  - add dependency on grub2-tools-extra and GRUB EFI modules on EFI machines
  - add dependency on syslinux-extlinux on x86
  - add initial support for aarch64 machines with UEFI
  - enhance the 300_map_disks.sh script to also print the disk sizes
  - support generation of ed25519 SSH host keys in the rescue image
  - create sshd home directory in the rescue image on systems upgraded from EL8
  - fix recovery of LUKS encrypted systems with multiple keyslots
  - fix PPC PReP Boot detection on GPT layouts
  - skip longhorn iscsi devices in disklayout.conf
  - error out if any unsupported OUTPUT used on s390x


author: Akira TAGOH <tagoh@redhat.com> - 4.0.3-2
changelog:
  - Drop duplicate font files.
  - Correct broken font metadata in fontconfig.
  - Drop Italic variant of the variable fonts to workaround
    unexpected italic rendering and crash.
    Resolves: RHEL-1617


author: Nick Clifton <nickc@redhat.com> - 192-1
changelog:
  - Select between gcc-built and annobin-built versions of the annobin plugin.
  - Resolves: rhbz#2030671


author: Nick Clifton <nickc@redhat.com> - 196-1
changelog:
  - Pass "--remove section .gnu.build.attributes" to the find-debuginfo script.
  - Resolves: rhbz#2099613


author: Michal Domonkos <mdomonko@redhat.com> - 208-1
changelog:
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961)
  - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767)


author: Remi Collet <remi@remirepo.net> - 7.0.10-2
changelog:
  - fix modules directory ownership and permissions #2176173
  - drop redis-shutdown helper and rely on systemd #2181181


author: Rich Megginson <rmeggins@redhat.com> - 1.106.0-0.1
changelog:
  - Resolves: RHEL-89912 : ha_cluster - [RFE] rhel_system_roles.ha_cluster - export resources configuration
  - Resolves: RHEL-102637 : journald - feat: Add MaxRetention configuration
  - All roles support ansible 2.19
  - All roles support the latest ansible-lint


author: Rich Megginson <rmeggins@redhat.com> - 1.106.1-0.1
changelog:
  - Resolves: RHEL-103889 : postfix - fix: configure postfix to listen only to IPv4 if IPv6 is disabled [rhel-9]
  - Resolves: RHEL-103575 : selinux - fix: tempdir path not defined in check mode; __selinux_item.path may be undefined [rhel-9]
  - ha_cluster - ansible 2.19 support
  - bootloader - fix wording in README


author: Rich Megginson <rmeggins@redhat.com> - 1.107.0-0.1
changelog:
  - Resolves: RHEL-105095 : podman - specifying multiple users causes resources to be associated with wrong user [rhel-9]
  - Resolves: RHEL-104891 : storage - Improve error reporting when invalid or unsupported RAID configuration is given [rhel-9]
  - Resolves: RHEL-104676 : storage - Incorrect key file in crypttab entry for volume encrypted_vol [rhel-9]
  - refactor ha_cluster to have empty __init__.py in module_utils for ansible-test
  - fix tests in postfix, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.0-0.1
changelog:
  - Resolves: RHEL-104659 : metrics - [RFE] Allow defining enabled PCP PMDAs with the metrics role [rhel-9]


author: Rich Megginson <rmeggins@redhat.com> - 1.108.1-0.1
changelog:
  - Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed [rhel-9]
  - Resolves: RHEL-106914 : storage - Tests verification fails on encrypted LVM on top of MD RAID [rhel-9]
  - Resolves: RHEL-106733 : sudo - redhat.rhel_system_roles.sudo takes 6-7 hours to scan /etc/sudoers.d [rhel-9]
  - fix storage role tests related to encrypted LVM on top of MD RAID and el7 raid errors
  - fix postfix role tests related to rebooting
  - fix ha_cluster role tests related to missing fence agent
  - add firewall test debugging for interface tests


author: Rich Megginson <rmeggins@redhat.com> - 1.108.3-0.1
changelog:
  - Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
  - add bootloader test for this fix


author: Rich Megginson <rmeggins@redhat.com> - 1.108.4-0.1
changelog:
  - Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
  - no actual code changes, test fixes for bootloader, ha_cluster, kdump, tlog


author: Rich Megginson <rmeggins@redhat.com> - 1.108.5-0.1
changelog:
  - Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
  - This fixes tests in certificate, ha_cluster, kdump, selinux


author: Rich Megginson <rmeggins@redhat.com> - 1.108.6-0.1
changelog:
  - Resolves: RHEL-107015 : bootloader - fix: boolean values and null values are not allowed
  - This fixes ha_cluster tests


author: Rich Megginson <rmeggins@redhat.com> - 1.16.3-1
changelog:
  - tlog - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
    Resolves rhbz#2072749 (EL8)
    Resolves rhbz#2071804 (EL9)


author: Rich Megginson <rmeggins@redhat.com> - 1.17.0-1
changelog:
  - All roles should support running with gather_facts: false
    Resolves: rhbz#2078989 (9.1.0)

  - firewall - Firewall system role Ansible deprecation warning related to "include"
    Resolves: rhbz#2061511 (9.1.0)

  - ha_cluster - ha_cluster - support advanced corosync configuration
    Resolves: rhbz#2065337 (9.1.0)

  - ha_cluster - ha_cluster - support SBD fencing
    Resolves: rhbz#2079626 (9.1.0)

  - ha_cluster - ha_cluster - add support for configuring bundle resources
    Resolves: rhbz#2073519 (9.1.0)

  - kernel_settings - kernel_settings error configobj not found on RHEL 8.6 managed hosts
    Resolves: rhbz#2060525 (9.1.0)

  - logging - logging tests fail during cleanup if no cloud-init on system
    Resolves: rhbz#2058799 (9.1.0)

  - logging - Logging - RFE - support template, severity and facility options
    Resolves: rhbz#2075119 (9.1.0)

  - metrics - Metrics role, with "metrics_from_mssql" option does not configure /var/lib/pcp/pmdas/mssql/mssql.conf on first run
    Resolves: rhbz#2060523 (9.1.0)

  - metrics - metrics - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065392 (9.1.0)

  - metrics - [RFE] add an option to the metrics role to enable postfix metric collection
    Resolves: rhbz#2051737 (9.1.0)

  - nbde_client - NBDE client system role does not support servers with static IP addresses
    Resolves: rhbz#2070462 (9.1.0)

  - network - [RFE] Extend rhel-system-roles.network feature set to support routing rules
    Resolves: rhbz#2079622 (9.1.0)

  - network - bond: fix typo in supporting the infiniband ports in active-backup mode
    Resolves: rhbz#2065394 (9.1.0)

  - network - pytest failed when running with nm providers in the rhel-8.5 beaker machine
    Resolves: rhbz#2066911 (9.1.0)

  - network - network - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065382 (9.1.0)

  - postfix - postfix - consistently use ansible_managed in configuration files managed by role
    Resolves: rhbz#2065393 (9.1.0)

  - postfix - Postfix RHEL System Role should provide the ability to replace config and reset configuration back to default
    Resolves: rhbz#2065383 (9.1.0)

  - sshd - FIPS mode detection in SSHD role is wrong
    Resolves: rhbz#2073605 (9.1.0)

  - storage - RFE storage Less verbosity by default
    Resolves: rhbz#2079627 (9.1.0)

  - timesync - timesync: basic-smoke test failure in timesync/tests_ntp.yml
    Resolves: rhbz#2060524 (9.1.0)

  - tlog - Tlog role - Enabling session recording configuration does not work due to RHEL9 SSSD files provider default
    Resolves: rhbz#2071804 (9.1.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.18.0-1
changelog:
  - firewall - [Improvement] Allow System Role to reset to default Firewalld Settings
    Resolves: rhbz#2043010 (9.1.0)

  - metrics - [RFE] add an option to the metrics role to enable postfix metric collection
    Resolves: rhbz#2051737 (9.1.0)

  - network - Rework the infiniband support
    Resolves: rhbz#2086965 (9.1.0)

  - sshd - recurse into tests and examples sub-directories when replacing string in files
    the sshd role latest version added sub-directories under tests that need
    role name replacement - so just use find

  - sshd - sshd system role should not assume that RHEL 9 /etc/ssh/sshd_config has "Include > /etc/ssh/sshd_config.d/*.conf"
    Resolves: rhbz#2052081 (9.1.0)

  - sshd - sshd system role should be able to optionally manage /etc/ssh/sshd_config on RHEL 9
    Resolves: rhbz#2052086 (9.1.0)

  - storage - storage role cannot set mount_options for volumes
    Resolves: rhbz#2083376 (9.1.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.19.0-1
changelog:
  - storage - support for creating and managing LVM thin pools/LVs
    Resolves: rhbz#2072745 (9.1.0)

  - firewall - Update Ansible syntax in Firewall system role README.md file examples
    Resolves: rhbz#2094096 (9.1.0)

  - storage role raid_level "striped" is not supported
    Resolves: rhbz#2083410 (9.1.0)

  - network: the controller device is not completely cleaned up in the bond tests.
    Resolves: rhbz#2089872 (9.1.0)

  - firewall - state no longer required for masquerade and ICMP block inversion
    Resolves: rhbz#2093423 (9.1.0)

  - ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
    Resolves: rhbz#2093438 (9.1.0)


author: Rich Megginson <rmeggins@redhat.com> - 1.19.1-1
changelog:
  - storage - fix coverity scan issue in blivet.py
    Resolves: rhbz#2072745 (9.1.0)

  - logging - fix gather_facts/set_vars issue
    Resolves: rhbz#2078989 (9.1.0)

  - ha_cluster - Move tasks that set up CI environment to roles tasks/ dir
    Resolves: rhbz#2093438 (9.1.0)

  - sshd - fix tests issue with rhel9 hosts


author: Rich Megginson <rmeggins@redhat.com> - 1.19.3-1
changelog:
  - min_ansible_version is string instead of float

  - fix storage test failures

  - support for ansible-core 2.13

  - crypto_policies - rhel 8.7 default policy is FUTURE not DEFAULT
    Resolves: rhbz#2100251

  - firewall - forward_port should accept list of string or list of dict
    Resolves: rhbz#2100605

  - firewall - support add/modify/delete services
    Resolves: rhbz#2100292

  - metrics - document minimum supported redis version required by rhel-system-roles
    Resolves: rhbz#2100286

  - metrics - restart pmie, pmlogger if changed, do not wait for handler
    Resolves: rhbz#2100294

  - network - Support managing the network through nmstate schema
    Resolves: rhbz#2072385

  - storage - _storage_test_pool_pvs get wrong data type in  test-verify-pool-members.yml
    Resolves: rhbz#2044119

  - storage - support for adding/removing disks to/from storage pools
    Resolves: rhbz#2072742

  - storage - support for attaching cache volumes to existing volumes
    Resolves: rhbz#2072746


author: Rich Megginson <rmeggins@redhat.com> - 1.20.0-1
changelog:
  - ensure CHANGELOG.md files are marked as doc
  - Resolves:rhbz#2115152 : cockpit - Add customization of port
  - Resolves:rhbz#2100942 : firewall - RFE: firewall-system-role: add ability to add interface to zone by PCI device ID
  - Resolves:rhbz#2115154 : firewall - support for firewall_config - gather firewall facts
  - Resolves:rhbz#2112145 : logging - [RFE] Support startmsg.regex and endmsg.regex in the files inputs
  - Resolves:rhbz#2115886 : network - fix IPRouteUtils.get_route_tables_mapping() to accept any whitespace sequence
  - Resolves:rhbz#2115157 : selinux - Added setting of seuser and selevel for completeness
  - Resolves:rhbz#2115156 : nbde_client - Sets proper spacing for parameter rd.neednet=1
  - Resolves:rhbz#2109998 : ssh sshd - ssh, sshd: RSAMinSize parameter definition is missing
  - Resolves:rhbz#2082736 : storage - [RHEL9] [WARNING]: The loop variable 'storage_test_volume' is already in use. You should set the `loop_var` value in the `loop_control` option for the task to something else to avoid variable collisions and unexpected behavior.


author: Rich Megginson <rmeggins@redhat.com> - 1.20.1-1
changelog:
  - Resolves:rhbz#2129873 : ssh,sshd - Sync on final OpenSSH option name RequiredRSASize in ssh and sshd roles


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.13
changelog:
  - Resolves:rhbz#2143246 : storage - [RHEL9]  ansible.parsing.yaml.objects.AnsibleUnicode object' has no attribute 'bytes'
  - Resolves:rhbz#2128467 : storage - [RHEL9] disks_needed need to be set for the raid test cases
  - Resolves:rhbz#2123594 : storage - [RHEL9 system role]  storage role vdo tests failed about  "VDO deduplication is off but it should not"
  - Resolves:rhbz#2153660 : storage - [RHEL9] tests_create_thinp_then_remove_scsi_generated.yml failed at "assertion": "(storage_test_expected_size|int - storage_test_actual_size.bytes)|abs / storage_test_expected_size|int < 0.01"


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.14
changelog:
  - Resolves:rhbz#2140804 : ha_cluster - Allow quorum device configuration
  - Resolves:rhbz#2153030 : ha_cluster - Allow enabled SBD on disabled cluster
  - Resolves:rhbz#2143816 : ha_cluster - use no_log in tasks looping over pot. secret parameters
  - community.general 6.2.0
  - replace community.general with namespace.name for rhc role


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.15
changelog:
  - Resolves:rhbz#2149678 : Synchronize automation-related changes from Fedora spec file
  - Resolves:rhbz#2100559 : network - role should support running tests with ANSIBLE_GATHERING=explicit
  - Fix ansible-test issues in several roles
  - Fix nbde_server tang test failure


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.16
changelog:
  - Resolves:rhbz#2165175 : journald - New role - journald - manage systemd-journald
  - Resolves:rhbz#2162782 : nbde_client - nbde_client_clevis fails with a traceback and prints sensitive data
  - Resolves:rhbz#2160152 : selinux - managing modules is not idempotent
  - fix storage tests_swap and tests_misc - swap size < 128GB on EL7
  - fix podman general-meta issue
  - ha_cluster non-x86_64 tests issue
  - certificate non-x86_64 tests issue


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.18
changelog:
  - Resolves:rhbz#2141330 : rhc - new role for subscription management/registration/insights
  - ad_integration - fix issue with using the network role to configure DNS


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-0.19
changelog:
  - Resolves:rhbz#2141330 : rhc - new role for subscription management/registration/insights
  - vendor in modules required by rhc role
  - Resolves:rhbz#2167528 : ha_cluster - Fix stonith watchdog timeout


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-1
changelog:
  - Resolves:rhbz#2168735 : network - RedHat Role rhel-system-roles.network should route traffic via correct bond


author: Rich Megginson <rmeggins@redhat.com> - 1.21.0-2
changelog:
  - Resolves:rhbz#2141330 : rhc - new role for subscription management/registration/insights
  - remove role until https://bugzilla.redhat.com/show_bug.cgi?id=2171829 is fixed


author: Rich Megginson <rmeggins@redhat.com> - 1.21.1-1
changelog:
  - Resolves:rhbz#2141330 : rhc - new role for subscription management/registration/insights
  - includes the fix for tests_proxy.yml selinux and some test refactoring


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.14
changelog:
  - Resolves:rhbz#2213691 : storage - [RHEL8] Unexpected behavior when creating ext4 filesystem with invalid parameter


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.15
changelog:
  - Resolves:rhbz#2180902 : certificate - add mode parameter to change permissions for cert files
  - Resolves:rhbz#2218592 : network - Support no-aaaa DNS option


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.16
changelog:
  - Resolves:rhbz#2222761 : firewall - should have option to disable conflicting services
  - Resolves:rhbz#2161712 : podman - allow container networking configuration
  - Resolves:rhbz#2179457 : podman - support for healthchecks and healthcheck actions
  - Resolves:rhbz#2179455 : podman - support quadlet units
  - Resolves:rhbz#2224384 : systemd - system role for managing systemd units
  - Resolves:rhbz#2223032 : ALL - facts being gathered unnecessarily
  - Resolves:rhbz#2224138 : certificate - rhel-system-roles.certificate does not re-issue after updating key_size
  - Resolves:rhbz#2222428 : firewall - Check mode fails when creating new firewall service
  - Resolves:rhbz#2224090 : storage - RAID volume pre cleanup - remove existing data from member disks as needed before creation
  - Resolves:rhbz#2123859 : firewall - when firewalld.service is masked, firewall role fails


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.19
changelog:
  - Resolves:rhbz#2223764 : firewall - fix: reload on resetting to defaults
  - Resolves:rhbz#2211984 : podman - Podman system role:  Unable to use podman_registries_conf to set unqualified-search-registries
  - Resolves:rhbz#2227821 : rhc - baseurl in rhsm.conf is empty when rhc_baseurl is not specified
  - Resolves RHEL-906 : kdump - use failure_action instead of default on EL9 and later
  - Resolves RHEL-898 : firewall - Check mode fails with replacing previous rules
  - Resolves RHEL-885 : firewall - Ansible RHEL firewall system role not idempotent when configuring the interface using the role in rhel9
  - Resolves RHEL-865 : podman - use getsubids to look for subuid, subgid for IdM support
  - Resolves RHEL-857 : podman - allow to not pull images, continue if image pull fails


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-0.20
changelog:
  - Resolves:rhbz#2229802 : firewall - missing module in linux-system-roles.firewall to create an ipset


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-1
changelog:
  - Resolves:rhbz#2223764 : ad_integration - leaks credentials when in check_mode
  - Resolves:rhbz#2232241 : kdump - "Write new authorized_keys if needed" task idempotency issues
  - Resolves:rhbz#2232231 : kdump - system role fails if kdump_ssh_user doesn't have a .ssh/authorized_keys file in home directory
  - Resolves RHEL-1397 : kdump - fix: ensure .ssh directory exists for kdump_ssh_user on kdump_ssh_server
  - Resolves RHEL-1499 : kdump - fix: Ensure authorized_keys management works with multiple hosts
  - Resolves:rhbz#2223764 : firewall - fix: reload on resetting to defaults
  - Resolves RHEL-1495 : firewall - fix: files: overwrite firewalld.conf on previous replaced
  - Resolves RHEL-1497 : storage - fix: use stat.pw_name, stat.gr_name instead of owner, group
    sshd README remove upstream only docs
    first RC for 1.22.0 rhel 8.9 and 9.3
    fix firewall reload test gather facts


author: Rich Megginson <rmeggins@redhat.com> - 1.22.0-2
changelog:
  - Resolves:rhbz#2232758 : ad_integration - leaks credentials when in check_mode
    NOTE: changelog entry below has the wrong bz


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.13
changelog:
  - Resolves: RHEL-16974 : rhc - rhc: new rhc_insights.ansible_host parameter
    Rename test playbook from .yaml to .yml


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.14
changelog:
  - Resolves: RHEL-16336 : bootloader - Create bootloader role (MVP)
  - Resolves: RHEL-5274 : postgresql - unable to install PostgreSQL version 15 on RHEL 9


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.16
changelog:
  - Resolves: RHEL-16552 : snapshot - New Role for storage snapshot management (lvm, etc.)
    this is the MVP candidate for the snapshot role


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.17
changelog:
  - Resolves: RHEL-25508 : nbde_server - fix: Allow tangd socket override directory to be managed outside of the role
  - Resolves: RHEL-19579 : network - Add blackhole type route to rhel-system-roles.network
  - Fixed issues with ANSIBLE_GATHERING=explicit in several roles
  - Fixed test cleanup issues in several roles


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.18
changelog:
  - Resolves: RHEL-22228 : podman - user linger needed before secrets
    fixed issue with ANSIBLE_GATHERING=explicit
  - Resolves: RHEL-5972 : sshd - ansible-sshd Manage SSH certificates
    fixed issue with RHEL7 tests


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.19
changelog:
  - Resolves: RHEL-16552 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes idempotency, check mode, cleanup, basic-smoke-test


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.20
changelog:
  - Resolves: RHEL-16964 : rhc - new rhc_insights.display_name parameter
  - Resolves: RHEL-16552 : snapshot - New Role for storage snapshot management (lvm, etc.)
    fixes error handling


author: Rich Megginson <rmeggins@redhat.com> - 1.23.0-2.21
changelog:
  - Resolves: RHEL-16336 : bootloader - Create bootloader role (MVP)
    fix issue with path on arches other than x86_64, and EFI systems
  - Resolves: RHEL-3253 : RHEL for Edge support in system roles
    cockpit - fixed issue with test cleanup
    postgresql - fixed issue with test cleanup


author: Rich Megginson <rmeggins@redhat.com> - 1.87.1-0.1
changelog:
  - Resolves: RHEL-30888 : storage - Fingerprint storage RHEL System Role managed config files
  - s390x issue fix requires fix for architecture fact


author: Rich Megginson <rmeggins@redhat.com> - 1.87.2-0.1
changelog:
  - Resolves: RHEL-50825 : System Roles: No module documentation
  - Fix storage role tests_lvm_pool_pv_grow issue with pvcreate hang on el7
  - podman - skip quadlet tests on non-x86_64 arch
  - journald - fix the test pattern that looks for the max size
  - network - fix the bond tests issue with firewall
  - sshd - add new parameters for openssh 9.8


