# changelog

author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-0.1
changelog:
  - Update to 1.31.5 (development)
  - build: install D-Bus service files to '/usr' by default (rh #1969428)
  - ethtool: introduce PAUSE support (rh #1959261)
  - resolve conflicts in NetworkManager-libnm-devel multilib packages (rh #1915254)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - DNS: fix lookup of hostname via DNS (rh #1956319)
  - initrd: fix crash parsing empty rd.znet argument (rh #1931284)
  - fix the connection unauthenticated via insecure defaults (rh #1910627, CVE-2020-10754)
  - fix NetworkManager crash when setting 'match.path' and activating a profile (rh #1944977, CVE-2021-20297)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1966123, CVE-2020-13529)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 release
  - core/wwan: avoid assertion failure in modem_ip{4,6}_config_result() (rh #1916192)
  - bond: support the peer_notif_delay option (rh #1963854)


author: Yunying Sun <yunying.sun@intel.com> - 3.0.1-1
changelog:
  - Updated to 3.0.1 release
  - Removed ix86 support as so far it supports x86_64 only
  - Updated licenses following upstream


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Al Stone <ahs3@redhat.com> - 20200326-1
changelog:
  - Update to 20200326 source tree, including patch refreshes
  - Removed a couple of patches that got included upstream


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.1-4
changelog:
  - Enable default RHEL configuration
    This enables syscall auditing by default.
    Resolves: rhbz#1924561


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-15
changelog:
  - bz1942371 - Drop nis support from autofs
      - fix dangling symlink creation if nis support is not available
        (add missing patch).
    - bz1958489 - autofs amd mounts present in the configuration get
      umounted on reload
      - fix amd section mounts map reload.
    - bz1958486 - autofs amd type host mounts fail for certain host names
      - fix amd hosts mount expire.
  - Related: rhbz#1942371
  - Resolves: rhbz#1958489 rhbz#1958486


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-16
changelog:
  - bz1965870 - autofs: regression in offset ordering
    - fix offset entries order.
    - use mapent tree root for tree_mapent_add_node().
    - eliminate redundant cache lookup in tree_mapent_add_node().
    - fix hosts map offset order.
    - fix direct mount deadlock.
  - bz1965863 - A recent Coverity change can cause an infinit loop on map reload
    - fix lookup_prune_one_cache() refactoring change.
  - bz1966380 - auto.master manpage doesn't mention -null or other built-in maps
    - add missing desciption of null map option.
  - Resolves: rhbz#1965870 rhbz#1965863 rhbz#1966380


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-17
changelog:
  - bz1973892 - /net mount being not cleanly mounted and unmounted
    - correct patch, fix nonstrict offset mount fail handling.
  - Related: rhbz#1973892


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-20
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - fix concat_options() error handling.
  - Resolves: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-21
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - correct patch, fix concat_options() error handling.
  - Related: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-22
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - eliminate some more alloca usage.
    - use default stack size for threads.
  - Resolves: rhbz#1984813


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-23
changelog:
  - bz1984813 - autofs: FTBFS due to dynamic PTHREAD_STACK_MIN (glibc 2.34 related)
    - fix potential memory leak in "eliminate some more alloca usage" patch.
    - remove unused parameter from add_path() in "eliminate some more alloca usage" patch.
  - Related: rhbz#1984813


author: Nick Clifton <nickc@redhat.com> - 2.35.2-1
changelog:
  - Fix an illegal memory access when parsing a corrupt ELF file.  (#1950481)
  - Fix excessive memory consumption parsing corrupt DWARF information. (#1947969)
  - Rebase to GNU Binutils 2.35.2.
  - Retire: binutils-2.35.1-update.patch
  - Retire: binutils-gas-auto-dwarf-5.patch
  - Retire: binutils-DWARF-5-line-number-parsing.patch


author: Nick Clifton <nickc@redhat.com> - 2.35.2-2
changelog:
  - Fix potential buffer corruption in sha1 code in libiberty library.  (#1954138)
  - Fix potential buffer corruption in sha1 code in linker.  (#1954139)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Christian Kellner <christian@kellner.me> - 0.8-3
changelog:
  - Add patch to ignore uevents from wakeup devices. See upstream issue
    https://gitlab.freedesktop.org/bolt/bolt/issues/156
  - Add patch to fix BoltError not being a typedef.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-2
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "Staat der Nederlanden Root CA - G2"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Stephen Gallagher <sgallagh@redhat.com> - 9.0-1.0.12
changelog:
  - Ship public secureboot certs in a well-known location
  - Related: rhbz#1997343
  - Switch to libvirt modular daemons
  - Related: rhbz#1991965


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Miroslav Lichvar <mlichvar@redhat.com> 4.0-0.8.pre3
changelog:
  - update to 4.0-pre3
  - switch to sourcedir directive for loading servers from DHCP
  - add NetworkManager dispatcher script to save servers from DHCP when
    dhclient is not installed (Robert Fairley)
  - drop old migration code from scriptlet
  - move default paths in /var/run to /run


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Martin Pitt <mpitt@redhat.com> - 244.1-1
changelog:
  - storage: use SHA256 for Tang fingerprints
  - testlib: Eliminate dataclass for RHEL/CentOS 8 compatibility


author: Martin Pitt <mpitt@redhat.com> - 245-1
changelog:
  - Metrics: New PCP configuration dialog
  - Storage: Show both SHA256 and SHA1 Tang fingerprints
  - Release: No more cockpit-cache tarball


author: Marius Vollmer <mvollmer@redhat.com> - 246-1
changelog:
  - Improvements to the build system
  - Polish of the Services and Storage pages
  - Updated translations


author: Katerina Koukiou <kkoukiou@redhat.com> - 247-1
changelog:
  - Metrics: Enable Grafana client setup
  - Machines: Share host files with the guest using virtio-fs
  - Machines: Show list of pass-through devices


author: Allison Karlitskaya <allison.karlitskaya@redhat.com> - 248-1
changelog:
  - Metrics: Install missing packages
  - PAM: Deprecate `pam_cockpit_cert` module
  - Build system cleanups


author: Matej Marusak <mmarusak@redhat.com> - 249-1
changelog:
  - storage: Content table improvements
  - common: Add Content-Type for wasm
  - all: Port away from Moment.js


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210213-1.git5c710c0
changelog:
  - exclude RC4 from LEGACY
  - introduce rc4_md5_in_krb5 to narrow AD_SUPPORT's impact
  - an assortment of small fixes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210218-1.git2246c55
changelog:
  - require 2048 bit params in LEGACY
  - require TLSv1.2/DTLSv1.2 in all policies
  - disable DSA
  - disable 3DES in LEGACY
  - drop FFDHE-1024 from LEGACY
  - drop (sub)policies we're not going to offer in RHEL-9


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210628-1.gitdd7d273
changelog:
  - implement scoped policies, e.g., cipher@SSH = ...
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol, sha1_in_dnssec
  - deprecate unscoped form of protocol property
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS
  - openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes
  - libssh: respect ssh_certs
  - restrict FIPS:OSPP further
  - improve Python 3.10 compatibility
  - update documentation
  - expand upstream test coverage
  - FUTURE: disable CBC ciphers for all backends but krb5
  - openssl: LEGACY must have SECLEVEL=1, enabling SHA1
  - disable DHE-DSS in LEGACY
  - bump LEGACY key size requirements from 1023 to 1024
  - add javasystem backend
  - *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  - set %verify(not mode) for backend sometimes-symlinks-sometimes-not
  - gnutls: use allowlisting


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210707-1.git29f6c0b
changelog:
  - gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
  - packaging: adapt to the RHEL-9 %check-time testing tools availability


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op1-3
changelog:
  - remove nss-mdns dependency - let the user decide whether use resolved or nss-mdns
  - remove cups dependency on cups-ipptool - actually not needed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op1-4
changelog:
  - fix for CVE-2020-10001
  - recommend nss-mdns for Fedora to have a working default for now
  - 1921881 - [abrt] cups: __strcmp_avx2(): help.cgi killed by SIGSEGV
  - 1909980 - cupsd crashes on parsing malformed Brother PPD


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-6
changelog:
  - 1960160 - PreserveJobHistory/JobFiles aren't applied after the first cupsd restart right after successful print


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-3
changelog:
  - fix TLS session caching disaster (CVE-2021-22901)
  - fix TELNET stack contents disclosure (CVE-2021-22898)


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-8
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.5-4
changelog:
  - Update Source to upstream version 0.8.5 plus post tag commits
    * Patches 0001-0121 are from
      https://github.com/openSUSE/multipath-tools/tree/queue and are
      already queued for upstream
    * Patches 0122&0123 have been posted for upstream inclusion
  - Rename files
    * Previous patches 0103-0111 are now patches 0124-0132


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-1
changelog:
  - Update Source to upstream version 0.8.6
    * Previous patches 0001-0123 are included in the commit
    * Fixes bz #1951336
  - Rename files
    * Previous patches 0124-0132 are now patches 0001-0009
  - Add 0010-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * make scsi wwid fallback code result match the default udev wwid
      code result (Red Hat specific patch)
  - Sync tests with RHEL-8
  - Resolves: bz #1951336


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-3
changelog:
  - Add 0011-multipathd-don-t-fail-to-remove-path-once-the-map-is.patch
  - Add 0012-multipathd-remove-duplicate-orphan_paths-in-flush_ma.patch
  - Add 0013-multipathd-fix-ev_remove_path-return-code-handling.patch
  - Add 0014-multipath-free-vectors-in-configure.patch
  - Add 0015-kpartx-Don-t-leak-memory-when-getblock-returns-NULL.patch
  - Add 0016-multipathd-don-t-rescan_path-on-wwid-change-in-uev_u.patch
    * Above patches Fix bz #1938704
  - Resolves: bz #1938704


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-6
changelog:
  - Add 0022-multipathd-cli_handlers-cleanup-setting-reply-length.patch
    * Found by corosync
  - Related: bz #1984921


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Nicola Sella <nsella@redhat.com> - 4.4.2-1
changelog:
  - Update to 4.4.2
  - spec: Fix building with new cmake macros (backport from downstream)
  - Warn about key retrieval over http:
  - Fix --setopt=cachedir writing outside of installroot
  - Add vendor to dnf API (RhBug:1876561)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 4.5.1-1
changelog:
  - Add a get_current() method to SwdbInterface
  - Add `from_repo` attribute for Package class (RhBug:1898968,1879168)
  - Correct description of Package().reponane attribute
  - Add unittest for new API
  - Make rotated log file (mode, owner, group) match previous log settings (RhBug:1894344)
  - [doc] Improve description of modular filtering
  - [doc] add documentation for from_repo
  - [doc] deprecated alias for dnf repoquery --deplist <deplist_option-label>
  - New config option module_allow_stream_switch allows switching enabled streams


author: Nicola Sella <nsella@redhat.com> - 4.6.0-1
changelog:
  - Update to 4.6.0
  - Log scriptlets output also for API users (RhBug:1847340)
  - Fix module remove --all when no match spec (RhBug:1904490)
  - yum.misc.decompress() to handle uncompressed files (RhBug:1895059)
  - Make an error message more informative (RhBug:1814831)
  - Add deprecation notice to help messages of deplist
  - Remove Base._history_undo_operations() as it was replaced with transaction_sr code
  - cli/output: Return number of listed packages from listPkgs()
  - Clean up history command error handling
  - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
  - Add api function fill_sack_from_repos_in_cache to allow loading a repo cache with repomd and (solv file or primary xml) only (RhBug:1865803)
  - Packages installed/removed via DNF API are logged into dnf.log (RhBug:1855158)
  - Support comps groups in history redo (RhBug:1657123,1809565,1809639)
  - Support comps groups in history rollback (RhBug:1657123,1809565,1809639)
  - Support comps groups in history undo (RhBug:1657123,1809565,1809639)
  - New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
  - Add get_header() method to the Package class (RhBug:1876606)
  - Fix documentation of globs not supporting curly brackets (RhBug:1913418)


author: Nicola Sella <nsella@redhat.com> - 4.6.1-1
changelog:
  - Update to 4.6.1
  - Fix recreate script
  - Add unit test for fill_sack_from_repos_in_cache (RhBug:1865803)
  - Add docs and examples for fill_sack_from_repos_in_cache (RhBug:1865803)
  - [spec] remove python2 support
  - Remove problematic language
  - The noroot plugin no longer exists, remove mention
  - Run tests for fill_sack_from_repos_in_cache in installroot (RhBug:1865803)
  - expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - Set persistdir and substitutions for fill_sack_from_repos_in_cache tests (RhBug:1865803)
  - Update documentation for module_obsoletes and module_stream_switch
  - print additional information when verifying GPG key using DNS
  - Bugs fixed (RhBug:1897573)
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Igor Raits <ignatenkobrain@fedoraproject.org> - 4.0.16-1
changelog:
  - Update to 4.0.16
    + [versionlock] Take obsoletes into account (RhBug:1627124)
    + Move args "--set-enabled", "--set-disabled" from DNF (RhBug:1727882)
    + Add missing arguments --set-enabled/--set-diabled into error message
    + Warn when --enablerepo/--disablerepo args were passed (RhBug:1727882)
    + [copr] add support for enabling/disabling runtime dependencies
    + [copr] no-liability text to be always printed


author: Nicola Sella <nsella@redhat.com> - 4.0.18-1
changelog:
  - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist
  - [needs-restarting] add kernel-rt to reboot list
  - Fix debug-restore command
  - [config-manager] enable/disable comma separated pkgs (RhBug:1830530)
  - [debug] Use standard demands.resolving for transaction handling
  - [debug] Do not remove install-only packages (RhBug:1844533)
  - return error when dnf download failed
  - README: Reference Fedora Weblate instead of Zanata
  - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074)
  - copr: don't try to list runtime dependencies


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Mark Wielaard <mjw@fedoraproject.org> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.183-1
changelog:
  - Upgrade to upstream 0.183
    - debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
    - debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h can
      be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and DEBUGINFOD_VERBOSE
      environment variable.
    - config: profile.sh and profile.csh won't export DEBUGINFOD_URLS
      unless configured --enable-debuginfod-urls[=URLS]
    - elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target type.


author: Mark Wielaard <mjw@redhat.com> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukas Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Dave Dykstra <dwd@fedoraproject.org> - 2.9.9-7
changelog:
  - Update the Requires: fuse-common >= version to 3.4.2-4 because
    fuse-common > 3.4.2-3 is insufficient to force the new version


author: Richard Hughes <richard@hughsie.com> 1.5.2-1
changelog:
  - New upstream release
  - Add a flag to indicate if packages are supported
  - Add a plugin for the Pinebook Pro laptop
  - Allow components to set the icon from the metadata
  - Fall back to FAT32 internal partitions for detecting ESP
  - Fix detection of ColorHug version on older firmware versions
  - Fix reading BCM57XX vendor and device ids from firmware
  - Fix replugging the MSP430 device
  - Fix sync method when called from threads without a context
  - Ignore an invalid vendor-id when adding releases for display
  - Improve synaptics-mst reliability when writing data
  - Install modules-load configs in the correct directory
  - Notify the service manager when idle-quitting
  - Only download the remote metadata as required
  - Remove HSI update and attestation suffixes
  - Restore recognizing GPG and PKCS7 signature types in libfwupd
  - Set the SMBIOS chassis type to portable if a DT battery exists
  - Switch from libsoup to libcurl for downloading data


author: Richard Hughes <richard@hughsie.com> 1.5.3-1
changelog:
  - New upstream release
  - Add a UEFI quirk for Star Labs Lite Mk III
  - Add the device firmare ID for serio class hardware
  - Allow setting the GMainContext when used for sync methods
  - Allow the client to send legacy PKCS7 and GPG signatures
  - Export the driver name from FuUdevDevice
  - Fix a possible critical warning due to missing retval
  - Fix the endianness for the CRC check in bcm57xx
  - Make sure the correct interface number is used for QMI
  - Mark more user-visible strings as translatable
  - Restrict loading component types of firmware
  - Validate ModemManager firmware update method combinations


author: Richard Hughes <richard@hughsie.com> 1.5.4-1
changelog:
  - New upstream release
  - Add Maple Ridge Thunderbolt firmware parsing support
  - Allow creating FMAP and Synaptics firmware using builder.xml
  - Allow using fwupdtool as non-root for firmware commands
  - Do not trust the Block.HintSystem boolean for ESP filtering
  - Fix a memory leak when parsing Synaptics firmware
  - Fix a possible crash when reading the Goodix MOC USB request
  - Fix possible crashes when parsing invalid firmware


author: Richard Hughes <richard@hughsie.com> 1.5.5-1
changelog:
  - New upstream release
  - Add a plugin to update PixArt RF devices
  - Add new hardware to use the elantp and rts54hid plugins
  - Detect the AMD TSME encryption state for HSI-4
  - Detect the AMI PK test key is not installed for HSI-1
  - Fix flashing a fingerprint reader that is in use
  - Fix several critical warnings when parsing invalid firmware
  - Fix updating DFU devices that use DNLOAD_BUSY
  - Ignore the legacy UEFI OVMF dummy GUID
  - Make libfwupd more thread safe to fix a crash in gnome-software
  - Never show unprintable chars from invalid firmware in the logs


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-2
changelog:
  - update from releases/gcc-11-branch
    - PRs c++/98032, c++/100319, c++/100362, c/100450, fortran/100274,
  	ipa/100308, libgomp/100352, libstdc++/99006, libstdc++/99453,
  	libstdc++/100259, libstdc++/100298, libstdc++/100384,
  	rtl-optimization/84878, rtl-optimization/100225,
  	rtl-optimization/100230, rtl-optimization/100263,
  	rtl-optimization/100411, target/99988, target/100217, target/100232,
  	target/100236, target/100270, target/100305, target/100311,
  	target/100375, target/100402, tree-optimization/96513,
  	tree-optimization/100253, tree-optimization/100278,
  	tree-optimization/100329, tree-optimization/100414
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)
  - fix up mausezahn miscompilation (#1958887, PR tree-optimization/100566)


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-3
changelog:
  - update from releases/gcc-11-branch
    - PRs bootstrap/100552, c++/100205, c++/100261, c++/100281, c++/100367,
  	c++/100372, c++/100489, c++/100502, c++/100634, c++/100644,
  	c++/100659, c/100550, fortran/98411, fortran/100551, fortran/100602,
  	fortran/100633, fortran/100656, ipa/100513, libstdc++/100361,
  	libstdc++/100479, libstdc++/100630, middle-end/100471,
  	middle-end/100508, middle-end/100509, preprocessor/100392,
  	target/94177, target/99725, target/99960, target/99977, target/100419,
  	target/100563, target/100626, target/100767, testsuite/96488,
  	tree-optimization/100492, tree-optimization/100519


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-5
changelog:
  - update from releases/gcc-11-branch
    - PRs bootstrap/100731, c++/91706, c++/91859, c++/95719, c++/100065,
  	c++/100102, c++/100580, c++/100666, c++/100796, c++/100797,
  	c++/100862, c++/100946, c++/100963, c++/101029, c++/101078, c/100902,
  	c/100920, d/100882, d/100935, d/100964, d/100967, d/100999,
  	debug/100852, fortran/82376, fortran/98301, fortran/99839,
  	fortran/100965, ipa/100791, libstdc++/98842, libstdc++/100475,
  	libstdc++/100577, libstdc++/100631, libstdc++/100639,
  	libstdc++/100676, libstdc++/100690, libstdc++/100768,
  	libstdc++/100770, libstdc++/100824, libstdc++/100833,
  	libstdc++/100889, libstdc++/100894, libstdc++/100900,
  	libstdc++/100982, libstdc++/101034, libstdc++/101055,
  	middle-end/100576, middle-end/100898, middle-end/101009,
  	preprocessor/100646, rtl-optimization/100342, rtl-optimization/100590,
  	rtl-optimization/101008, target/100333, target/100885, target/100887,
  	target/101046, testsuite/100750, tree-optimization/100934,
  	tree-optimization/100981


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-6
changelog:
  - update from releases/gcc-11-branch
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
  	fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
  	libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
  	middle-end/100250, middle-end/100307, middle-end/100574,
  	middle-end/100684, middle-end/100732, middle-end/100876,
  	middle-end/101062, middle-end/101167, target/99842, target/99939,
  	target/100310, target/100777, target/100856, target/100871,
  	target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986836)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562
  - enable LTO profiledbootstrap on x86_64, i?86, ppc64le and s390x for rhel9
    (#1986141)


author: Marek Polacek <polacek@redhat.com> 11.2.1-2.2
changelog:
  - bootstrap with -Wl,-z,relro,-z,now, apply libgcc hardening patch (#1988450)
  - fix libsanitizer with non-constant SIGSTKSZ (#1992727)


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Florian Weimer <fweimer@redhat.com> - 2.33.9000-50
changelog:
  - Auto-sync with upstream branch master,
    commit d34ed66f96fa9316654d7adb2afcce4be1d1c4f5:
  - manual: Document unsupported cases for interposition
  - x86: Install <bits/platform/x86.h> [BZ #27958]
  - Fix build and tests with --disable-tunables


author: Florian Weimer <fweimer@redhat.com> - 2.33.9000-51
changelog:
  - Auto-sync with upstream branch master,
    commit ddcc612ce923038b867083a0c55d6e034951155a:
  - Exclude static tests for mcheck and malloc-check
  - i386: Regenerate ulps


author: Florian Weimer <fweimer@redhat.com> - 2.33.9000-55
changelog:
  - Auto-sync with upstream branch master,
    commit c37fc3ebf0607ce1953c565ffe56d56555eeb25e:
  - Update libc.pot for 2.34 release.
  - x86-64: Add Avoid_Short_Distance_REP_MOVSB
  - Typo: Rename HAVE_CLONE3_WAPPER to HAVE_CLONE3_WRAPPER
  - build-many-glibcs.py: Add x86_64-linux-gnu-minimal configuration
  - tests: use xmalloc to allocate implementation array
  - xmalloc: Fix warnings with gcc analyzer
  - __cxa_thread_atexit_impl: Abort on allocation failure [BZ #18524]
  - manual: Drop the .so suffix in libc_malloc_debug description
  - hurd: _Fork: unlock malloc before calling fork child hooks


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.33.9000-56
changelog:
  - Port post scripts for gconv-extra to lua and drop dependency across
    architectures for x86 multilib (#1988344).


author: Florian Weimer <fweimer@redhat.com> - 2.34-1
changelog:
  - Switch to glibc 2.34 release tarball:
  - Update ChangeLog.old/ChangeLog.23.
  - Prepare for glibc 2.34 release.
  - po/nl.po: Update Dutch translation.
  - Update install.texi, and regenerate INSTALL.
  - Update translations.
  - Update NEWS.
  - NEWS: Fix typos, grammar, and missing words
  - elf: Fix audit regression


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Daiki Ueno <dueno@redhat.com> - 3.7.1-1
changelog:
  - Update to upstream 3.7.1 release
  - Remove fipscheck dependency, as it is now calculated with an
    internal tool


author: Daiki Ueno <dueno@redhat.com> - 3.7.2-2
changelog:
  - Remove %defattr invocations which are no longer necessary
  - libpkcs11mock1.* is not installed anymore
  - hobble-gnutls: Remove SRP removal
  - Use correct source URL
  - Switch to using %gpgverify macro


author: Daiki Ueno <dueno@redhat.com> - 3.7.2-4
changelog:
  - Disable GOST cryptography by default (#1945292)
  - Tighten timestamp adjustment when not bootstrapping (#1975482)
  - Re-enable LTO (#1986143)


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Javier Martinez Canillas <javierm@redhat.com> - 2.06~rc1-1
changelog:
  - Update to 2.06~rc1 to fix a bunch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Tom Stellard <tstellar@redhat.com> - 8.40-50
changelog:
  - Use make_build macro instead of plain make
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Jan Macku <jamacku@redhat.com> - 10.05-1
changelog:
  - service: Prevent variables from globbing
  - init.d/functions: Make usage msgs more clear
  - network-scripts: Use net_log() instead of logger
  - Allow updating rfkill switch status while in readonly root mode
  - Add info into specfile about readonly-root deprecation
  - Allow updating mlocate.db while in readonly root mode
  - rc.d/functions: replace grep's --quiet with -q
  - Add warning to warn user when ETHTOOL_OPTS is set and ethtool binary is missing - Olav Vitters
  - Fix spacing in Makefile
  - Add optional 'dev' keyword


author: Jan Macku <jamacku@redhat.com> - 10.07-1
changelog:
  - doc: Fix "Duplicated string found in the file."
  - doc: Documents RES_OPTIONS option
  - doc: Documents ifcfg option LINKSTATUS
  - ci: use up to date keywords and fix some warnings
  - network: fix set_link_up()
  - network: add option to keep the link down
  - Rework of shell ci
  - Translations update from Weblate


author: Jan Macku <jamacku@redhat.com> - 10.10-1
changelog:
  - Translated using Weblate (Friulian) (#381)
  - Translations update from Weblate (#378)
  - added veth support
  - ifup-eth: add a new PERSISTENT_DHCLIENT_IPV6 option for IPv6 dhclient daemon
  - ifdown removes veth pair if both peers are down
  - rename_device: also support dracut-style kernel cmdline configuration
  - spec: Mark network-scripts as deprecated
  - spec: Initscripts now requires chkconfig (#374)
  - Translations update from Weblate (#371)
  - spec: Move service script into subpackage
  - ci: Onboard initscripts to Packit
  - ci: Migrate from Travis to GH Actions


author: Jan Macku <jamacku@redhat.com> - 10.11.1-1
changelog:
  - spec: Update relation between initscripts and initscripts-service
  - spec: Replace not working awk command with sed
  - use downstream version style


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]
  Resolves: rhbz#1938744, rhbz#1994520, rhbz#1994545, rhbz#1994581


author: Phil Sutter <psutter@redhat.com> - 1.8.7-15
changelog:
  - doc: Improve deprecation notices a bit
  - nft: cache: Sort chains on demand only
  - nft: Increase BATCH_PAGE_SIZE to support huge rulesets


author: Phil Sutter <psutter@redhat.com> - 1.8.7-18
changelog:
  - Make iptables-nft-services require iptables-services to avoid confusion
  - Add deprecation notice to iptables-extensions man page as well


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Herton R. Krzesinski <herton@redhat.com> [5.14-1]
changelog:
  - redhat: drop Patchlist.changelog for RHEL (Jan Stancek) [1997494]
  - redhat: update Makefile.variables for centos/rhel9 fork (Herton R. Krzesinski)
  - redhat: add support for stream profile in koji/brew (Herton R. Krzesinski)
  - redhat: make DIST default to .el9 (Herton R. Krzesinski)
  - redhat: set default values in Makefiles for RHEL 9 Beta (Jan Stancek) [1997494]
  - arm64: use common CONFIG_MAX_ZONEORDER for arm kernel (Mark Salter)
  - Create Makefile.variables for a single point of configuration change (Justin M. Forbes)
  - rpmspec: drop traceevent files instead of just excluding them from files list (Herton R. Krzesinski) [1967640]
  - redhat/config: Enablement of CONFIG_PAPR_SCM for PowerPC (Gustavo Walbon) [1962936]
  - Attempt to fix Intel PMT code (David Arcari)
  - CI: Enable realtime branch testing (Veronika Kabatova)
  - CI: Enable realtime checks for c9s and RHEL9 (Veronika Kabatova)
  - [fs] dax: mark tech preview (Bill O'Donnell)
  - ark: wireless: enable all rtw88 pcie wirless variants (Peter Robinson)
  - wireless: rtw88: move debug options to common/debug (Peter Robinson)
  - fedora: minor PTP clock driver cleanups (Peter Robinson)
  - common: x86: enable VMware PTP support on ark (Peter Robinson)
  - arm64: dts: rockchip: Disable CDN DP on Pinebook Pro (Matthias Brugger)
  - arm64: dts: rockchip: Setup USB typec port as datarole on (Dan Johansen)
  - [scsi] megaraid_sas: re-add certain pci-ids (Tomas Henzl)
  - xfs: drop experimental warnings for bigtime and inobtcount (Bill O'Donnell) [1995321]
  - Disable liquidio driver on ark/rhel (Herton R. Krzesinski) [1993393]
  - More Fedora config updates (Justin M. Forbes)
  - Fedora config updates for 5.14 (Justin M. Forbes)
  - CI: Rename ARK CI pipeline type (Veronika Kabatova)
  - CI: Finish up c9s config (Veronika Kabatova)
  - CI: Update ppc64le config (Veronika Kabatova)
  - CI: use more templates (Veronika Kabatova)
  - Filter updates for aarch64 (Justin M. Forbes)
  - increase CONFIG_NODES_SHIFT for aarch64 (Chris von Recklinghausen) [1890304]
  - redhat: configs: Enable CONFIG_WIRELESS_HOTKEY (Hans de Goede)
  - redhat/configs: Update CONFIG_NVRAM (Desnes A. Nunes do Rosario) [1988254]
  - common: serial: build in SERIAL_8250_LPSS for x86 (Peter Robinson)
  - powerpc: enable CONFIG_FUNCTION_PROFILER (Diego Domingos) [1831065]
  - crypto: rng - Override drivers/char/random in FIPS mode (Herbert Xu)
  - random: Add hook to override device reads and getrandom(2) (Herbert Xu)
  - redhat/configs: Disable Soft-RoCE driver (Kamal Heib)
  - redhat/configs/evaluate_configs: Update help output (Prarit Bhargava)
  - redhat/configs: Double MAX_LOCKDEP_CHAINS (Justin M. Forbes)
  - fedora: configs: Fix WM5102 Kconfig (Hans de Goede)
  - powerpc: enable CONFIG_POWER9_CPU (Diego Domingos) [1876436]
  - redhat/configs: Fix CONFIG_VIRTIO_IOMMU to 'y' on aarch64 (Eric Auger) [1972795]
  - filter-modules.sh: add more sound modules to filter (Jaroslav Kysela)
  - redhat/configs: sound configuration cleanups and updates (Jaroslav Kysela)
  - common: Update for CXL (Compute Express Link) configs (Peter Robinson)
  - redhat: configs: disable CRYPTO_SM modules (Herton R. Krzesinski) [1990040]
  - Remove fedora version of the LOCKDEP_BITS, we should use common (Justin M. Forbes)
  - Re-enable sermouse for x86 (rhbz 1974002) (Justin M. Forbes)
  - Fedora 5.14 configs round 1 (Justin M. Forbes)
  - redhat: add gating configuration for centos stream/rhel9 (Herton R. Krzesinski)
  - x86: configs: Enable CONFIG_TEST_FPU for debug kernels (Vitaly Kuznetsov) [1988384]
  - redhat/configs: Move CHACHA and POLY1305 to core kernel to allow BIG_KEYS=y (root) [1983298]
  - kernel.spec: fix build of samples/bpf (Jiri Benc)
  - Enable OSNOISE_TRACER and TIMERLAT_TRACER (Jerome Marchand) [1979379]
  - rpmspec: switch iio and gpio tools to use tools_make (Herton R. Krzesinski) [1956988]
  - configs/process_configs.sh: Handle config items with no help text (Patrick Talbert)
  - fedora: sound config updates for 5.14 (Peter Robinson)
  - fedora: Only enable FSI drivers on POWER platform (Peter Robinson)
  - The CONFIG_RAW_DRIVER has been removed from upstream (Peter Robinson)
  - fedora: updates for 5.14 with a few disables for common from pending (Peter Robinson)
  - fedora: migrate from MFD_TPS68470 -> INTEL_SKL_INT3472 (Peter Robinson)
  - fedora: Remove STAGING_GASKET_FRAMEWORK (Peter Robinson)
  - Fedora: move DRM_VMWGFX configs from ark -> common (Peter Robinson)
  - fedora: arm: disabled unused FB drivers (Peter Robinson)
  - fedora: don't enable FB_VIRTUAL (Peter Robinson)
  - redhat/configs: Double MAX_LOCKDEP_ENTRIES (Waiman Long) [1940075]
  - rpmspec: fix verbose output on kernel-devel installation (Herton R. Krzesinski) [1981406]
  - Build Fedora x86s kernels with bytcr-wm5102 (Marius Hoch)
  - Deleted redhat/configs/fedora/generic/x86/CONFIG_FB_HYPERV (Patrick Lang)
  - rpmspec: correct the ghost initramfs attributes (Herton R. Krzesinski) [1977056]
  - rpmspec: amend removal of depmod created files to include modules.builtin.alias.bin (Herton R. Krzesinski) [1977056]
  - configs: remove duplicate CONFIG_DRM_HYPERV file (Patrick Talbert)
  - CI: use common code for merge and release (Don Zickus)
  - rpmspec: add release string to kernel doc directory name (Jan Stancek)
  - redhat/configs: Add CONFIG_INTEL_PMT_CRASHLOG (Michael Petlan) [1880486]
  - redhat/configs: Add CONFIG_INTEL_PMT_TELEMETRY (Michael Petlan) [1880486]
  - redhat/configs: Add CONFIG_MFD_INTEL_PMT (Michael Petlan) [1880486]
  - redhat/configs: enable CONFIG_BLK_DEV_ZONED (Ming Lei) [1638087]
  - Add --with clang_lto option to build the kernel with Link Time Optimizations (Tom Stellard)
  - common: disable DVB_AV7110 and associated pieces (Peter Robinson)
  - Fix fedora-only config updates (Don Zickus)
  - Fedor config update for new option (Justin M. Forbes)
  - redhat/configs: Enable stmmac NIC for x86_64 (Mark Salter)
  - all: hyperv: use the DRM driver rather than FB (Peter Robinson)
  - all: hyperv: unify the Microsoft HyperV configs (Peter Robinson)
  - all: VMWare: clean up VMWare configs (Peter Robinson)
  - Update CONFIG_ARM_FFA_TRANSPORT (Patrick Talbert)
  - CI: Handle all mirrors (Veronika Kabatova)
  - Turn on CONFIG_STACKTRACE for s390x zfpcdump kernels (Justin M. Forbes)
  - arm64: switch ark kernel to 4K pagesize (Mark Salter)
  - Disable AMIGA_PARTITION and KARMA_PARTITION (Prarit Bhargava) [1802694]
  - all: unify and cleanup i2c TPM2 modules (Peter Robinson)
  - redhat/configs: Set CONFIG_VIRTIO_IOMMU on aarch64 (Eric Auger) [1972795]
  - redhat/configs: Disable CONFIG_RT_GROUP_SCHED in rhel config (Phil Auld)
  - redhat/configs: enable KEXEC_SIG which is already enabled in RHEL8 for s390x and x86_64 (Coiby Xu) [1976835]
  - rpmspec: do not BuildRequires bpftool on noarch (Herton R. Krzesinski)
  - redhat/configs: disable {IMA,EVM}_LOAD_X509 (Bruno Meneguele) [1977529]
  - redhat: add secureboot CA certificate to trusted kernel keyring (Bruno Meneguele)
  - redhat/configs: enable IMA_ARCH_POLICY for aarch64 and s390x (Bruno Meneguele)
  - redhat/configs: Enable CONFIG_MLXBF_GIGE on aarch64 (Alaa Hleihel) [1858599]
  - common: enable STRICT_MODULE_RWX everywhere (Peter Robinson)
  - COMMON_CLK_STM32MP157_SCMI is bool and selects COMMON_CLK_SCMI (Justin M. Forbes)
  - kernel.spec: Add kernel{,-debug}-devel-matched meta packages (Timothée Ravier)
  - Turn off with_selftests for Fedora (Justin M. Forbes)
  - Don't build bpftool on Fedora (Justin M. Forbes)
  - Fix location of syscall scripts for kernel-devel (Justin M. Forbes)
  - fedora: arm: Enable some i.MX8 options (Peter Robinson)
  - Enable Landlock for Fedora (Justin M. Forbes)
  - Filter update for Fedora aarch64 (Justin M. Forbes)
  - rpmspec: only build debug meta packages where we build debug ones (Herton R. Krzesinski)
  - rpmspec: do not BuildRequires bpftool on nobuildarches (Herton R. Krzesinski)
  - redhat/configs: Consolidate CONFIG_HMC_DRV in the common s390x folder (Thomas Huth) [1976270]
  - redhat/configs: Consolidate CONFIG_EXPOLINE_OFF in the common folder (Thomas Huth) [1976270]
  - redhat/configs: Move CONFIG_HW_RANDOM_S390 into the s390x/ subfolder (Thomas Huth) [1976270]
  - redhat/configs: Disable CONFIG_HOTPLUG_PCI_SHPC in the Fedora settings (Thomas Huth) [1976270]
  - redhat/configs: Remove the non-existent CONFIG_NO_BOOTMEM switch (Thomas Huth) [1976270]
  - redhat/configs: Compile the virtio-console as a module on s390x (Thomas Huth) [1976270]
  - redhat/configs: Enable CONFIG_S390_CCW_IOMMU and CONFIG_VFIO_CCW for ARK, too (Thomas Huth) [1976270]
  - Revert "Merge branch 'ec_fips' into 'os-build'" (Vladis Dronov) [1947240]
  - Fix typos in fedora filters (Justin M. Forbes)
  - More filtering for Fedora (Justin M. Forbes)
  - Fix Fedora module filtering for spi-altera-dfl (Justin M. Forbes)
  - Fedora 5.13 config updates (Justin M. Forbes)
  - fedora: cleanup TCG_TIS_I2C_CR50 (Peter Robinson)
  - fedora: drop duplicate configs (Peter Robinson)
  - More Fedora config updates for 5.13 (Justin M. Forbes)
  - redhat/configs: Enable needed drivers for BlueField SoC on aarch64 (Alaa Hleihel) [1858592 1858594 1858596]
  - redhat: Rename mod-blacklist.sh to mod-denylist.sh (Prarit Bhargava)
  - redhat/configs: enable CONFIG_NET_ACT_MPLS (Marcelo Ricardo Leitner)
  - configs: Enable CONFIG_DEBUG_KERNEL for zfcpdump (Jiri Olsa)
  - kernel.spec: Add support to use vmlinux.h (Don Zickus)
  - spec: Add vmlinux.h to kernel-devel package (Jiri Olsa)
  - Turn off DRM_XEN_FRONTEND for Fedora as we had DRM_XEN off already (Justin M. Forbes)
  - Fedora 5.13 config updates pt 3 (Justin M. Forbes)
  - all: enable ath11k wireless modules (Peter Robinson)
  - all: Enable WWAN and associated MHI bus pieces (Peter Robinson)
  - spec: Enable sefltests rpm build (Jiri Olsa)
  - spec: Allow bpf selftest/samples to fail (Jiri Olsa)
  - bpf, selftests: Disable tests that need clang13 (Toke Høiland-Jørgensen)
  - kvm: Add kvm_stat.service file and kvm_stat logrotate config to the tools (Jiri Benc)
  - kernel.spec: Add missing source files to kernel-selftests-internal (Jiri Benc)
  - kernel.spec: selftests: add net/forwarding to TARGETS list (Jiri Benc)
  - kernel.spec: selftests: add build requirement on libmnl-devel (Jiri Benc)
  - kernel.spec: add action.o to kernel-selftests-internal (Jiri Benc)
  - kernel.spec: avoid building bpftool repeatedly (Jiri Benc)
  - kernel.spec: selftests require python3 (Jiri Benc)
  - kernel.spec: skip selftests that failed to build (Jiri Benc)
  - kernel.spec: fix installation of bpf selftests (Jiri Benc)
  - redhat: fix samples and selftests make options (Jiri Benc)
  - kernel.spec: enable mptcp selftests for kernel-selftests-internal (Jiri Benc)
  - kernel.spec: Do not export shared objects from libexecdir to RPM Provides (Jiri Benc)
  - kernel.spec: add missing dependency for the which package (Jiri Benc)
  - kernel.spec: add netfilter selftests to kernel-selftests-internal (Jiri Benc)
  - kernel.spec: move slabinfo and page_owner_sort debuginfo to tools-debuginfo (Jiri Benc)
  - kernel.spec: package and ship VM tools (Jiri Benc)
  - configs: enable CONFIG_PAGE_OWNER (Jiri Benc)
  - kernel.spec: add coreutils (Jiri Benc)
  - kernel.spec: add netdevsim driver selftests to kernel-selftests-internal (Jiri Benc)
  - redhat/Makefile: Clean out the --without flags from the baseonly rule (Jiri Benc)
  - kernel.spec: Stop building unnecessary rpms for baseonly builds (Jiri Benc)
  - kernel.spec: disable more kabi switches for gcov build (Jiri Benc)
  - kernel.spec: Rename kabi-dw base (Jiri Benc)
  - kernel.spec: Fix error messages during build of zfcpdump kernel (Jiri Benc)
  - kernel.spec: perf: remove bpf examples (Jiri Benc)
  - kernel.spec: selftests should not depend on modules-internal (Jiri Benc)
  - kernel.spec: build samples (Jiri Benc)
  - kernel.spec: tools: sync missing options with RHEL 8 (Jiri Benc)
  - redhat/configs: nftables: Enable extra flowtable symbols (Phil Sutter)
  - redhat/configs: Sync netfilter options with RHEL8 (Phil Sutter)
  - Fedora 5.13 config updates pt 2 (Justin M. Forbes)
  - Move CONFIG_ARCH_INTEL_SOCFPGA up a level for Fedora (Justin M. Forbes)
  - fedora: enable the Rockchip rk3399 pcie drivers (Peter Robinson)
  - Fedora 5.13 config updates pt 1 (Justin M. Forbes)
  - Fix version requirement from opencsd-devel buildreq (Justin M. Forbes)
  - configs/ark/s390: set CONFIG_MARCH_Z14 and CONFIG_TUNE_Z15 (Philipp Rudo) [1876435]
  - configs/common/s390: Clean up CONFIG_{MARCH,TUNE}_Z* (Philipp Rudo)
  - configs/process_configs.sh: make use of dummy-tools (Philipp Rudo)
  - configs/common: disable CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} (Philipp Rudo)
  - configs/common/aarch64: disable CONFIG_RELR (Philipp Rudo)
  - redhat/config: enable STMICRO nic for RHEL (Mark Salter)
  - redhat/configs: Enable ARCH_TEGRA on RHEL (Mark Salter)
  - redhat/configs: enable IMA_KEXEC for supported arches (Bruno Meneguele)
  - redhat/configs: enable INTEGRITY_SIGNATURE to all arches (Bruno Meneguele)
  - configs: enable CONFIG_LEDS_BRIGHTNESS_HW_CHANGED (Benjamin Tissoires)
  - RHEL: disable io_uring support (Jeff Moyer)
  - all: Changing CONFIG_UV_SYSFS to build uv_sysfs.ko as a loadable module. (Frank Ramsay)
  - Enable NITRO_ENCLAVES on RHEL (Vitaly Kuznetsov)
  - Update the Quick Start documentation (David Ward)
  - redhat/configs: Set PVPANIC_MMIO for x86 and PVPANIC_PCI for aarch64 (Eric Auger) [1961178]
  - bpf: Fix unprivileged_bpf_disabled setup (Jiri Olsa)
  - Enable CONFIG_BPF_UNPRIV_DEFAULT_OFF (Jiri Olsa)
  - configs/common/s390: disable CONFIG_QETH_{OSN,OSX} (Philipp Rudo) [1903201]
  - nvme: nvme_mpath_init remove multipath check (Mike Snitzer)
  - team: mark team driver as deprecated (Hangbin Liu) [1945477]
  - Make CRYPTO_EC also builtin (Simo Sorce) [1947240]
  - Do not hard-code a default value for DIST (David Ward)
  - Override %{debugbuildsenabled} if the --with-release option is used (David Ward)
  - Improve comments in SPEC file, and move some option tests and macros (David Ward)
  - configs: enable CONFIG_EXFAT_FS (Pavel Reichl) [1943423]
  - Revert s390x/zfcpdump part of a9d179c40281 and ecbfddd98621 (Vladis Dronov)
  - Embed crypto algos, modes and templates needed in the FIPS mode (Vladis Dronov) [1947240]
  - configs: Add and enable CONFIG_HYPERV_TESTING for debug kernels (Mohammed Gamal)
  - mm/cma: mark CMA on x86_64 tech preview and print RHEL-specific infos (David Hildenbrand) [1945002]
  - configs: enable CONFIG_CMA on x86_64 in ARK (David Hildenbrand) [1945002]
  - rpmspec: build debug-* meta-packages if debug builds are disabled (Herton R. Krzesinski)
  - UIO: disable unused config options (Aristeu Rozanski) [1957819]
  - ARK-config: Make amd_pinctrl module builtin (Hans de Goede)
  - rpmspec: revert/drop content hash for kernel-headers (Herton R. Krzesinski)
  - rpmspec: fix check that calls InitBuildVars (Herton R. Krzesinski)
  - fedora: enable zonefs (Damien Le Moal)
  - redhat: load specific ARCH keys to INTEGRITY_PLATFORM_KEYRING (Bruno Meneguele)
  - redhat: enable INTEGRITY_TRUSTED_KEYRING across all variants (Bruno Meneguele)
  - redhat: enable SYSTEM_BLACKLIST_KEYRING across all variants (Bruno Meneguele)
  - redhat: enable INTEGRITY_ASYMMETRIC_KEYS across all variants (Bruno Meneguele)
  - Remove unused boot loader specification files (David Ward)
  - redhat/configs: Enable mlx5 IPsec and TLS offloads (Alaa Hleihel) [1869674 1957636]
  - Force DWARF4 because crash does not support DWARF5 yet (Justin M. Forbes)
  - common: disable Apple Silicon generally (Peter Robinson)
  - cleanup Intel's FPGA configs (Peter Robinson)
  - common: move PTP KVM support from ark to common (Peter Robinson)
  - Enable CONFIG_DRM_AMDGPU_USERPTR for everyone (Justin M. Forbes)
  - redhat: add initial rpminspect configuration (Herton R. Krzesinski)
  - fedora: arm updates for 5.13 (Peter Robinson)
  - fedora: Enable WWAN and associated MHI bits (Peter Robinson)
  - Update CONFIG_MODPROBE_PATH to /usr/sbin (Justin Forbes)
  - Fedora set modprobe path (Justin M. Forbes)
  - Keep sctp and l2tp modules in modules-extra (Don Zickus)
  - Fix ppc64le cross build packaging (Don Zickus)
  - Fedora: Make amd_pinctrl module builtin (Hans de Goede)
  - Keep CONFIG_KASAN_HW_TAGS off for aarch64 debug configs (Justin M. Forbes)
  - New configs in drivers/bus (Fedora Kernel Team)
  - RHEL: Don't build KVM PR module on ppc64 (David Gibson) [1930649]
  - Flip CONFIG_USB_ROLE_SWITCH from m to y (Justin M. Forbes)
  - Set valid options for CONFIG_FW_LOADER_USER_HELPER (Justin M. Forbes)
  - Clean up CONFIG_FB_MODE_HELPERS (Justin M. Forbes)
  - Turn off CONFIG_VFIO for the s390x zfcpdump kernel (Justin M. Forbes)
  - Delete unused CONFIG_SND_SOC_MAX98390 pending-common (Justin M. Forbes)
  - Update pending-common configs, preparing to set correctly (Justin M. Forbes)
  - Update fedora filters for surface (Justin M. Forbes)
  - Build CONFIG_CRYPTO_ECDSA inline for s390x zfcpdump (Justin M. Forbes)
  - Replace "flavour" where "variant" is meant instead (David Ward)
  - Drop the %{variant} macro and fix --with-vanilla (David Ward)
  - Fix syntax of %kernel_variant_files (David Ward)
  - Change description of --without-vdso-install to fix typo (David Ward)
  - Config updates to work around mismatches (Justin M. Forbes)
  - CONFIG_SND_SOC_FSL_ASOC_CARD selects CONFIG_MFD_WM8994 now (Justin M. Forbes)
  - wireguard: disable in FIPS mode (Hangbin Liu) [1940794]
  - Enable mtdram for fedora (rhbz 1955916) (Justin M. Forbes)
  - Remove reference to bpf-helpers man page (Justin M. Forbes)
  - Fedora: enable more modules for surface devices (Dave Olsthoorn)
  - Fix Fedora config mismatch for CONFIG_FSL_ENETC_IERB (Justin M. Forbes)
  - hardlink is in /usr/bin/ now (Justin M. Forbes)
  - Ensure CONFIG_KVM_BOOK3S_64_PR stays on in Fedora, even if it is turned off in RHEL (Justin M. Forbes)
  - Set date in package release from repository commit, not system clock (David Ward)
  - Use a better upstream tarball filename for snapshots (David Ward)
  - Don't create empty pending-common files on pending-fedora commits (Don Zickus)
  - nvme: decouple basic ANA log page re-read support from native multipathing (Mike Snitzer)
  - nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT (Mike Snitzer)
  - nvme: Return BLK_STS_TARGET if the DNR bit is set (Mike Snitzer)
  - Add redhat/configs/pending-common/generic/s390x/zfcpdump/CONFIG_NETFS_SUPPORT (Justin M. Forbes)
  - Create ark-latest branch last for CI scripts (Don Zickus)
  - Replace /usr/libexec/platform-python with /usr/bin/python3 (David Ward)
  - Turn off ADI_AXI_ADC and AD9467 which now require CONFIG_OF (Justin M. Forbes)
  - Export ark infrastructure files (Don Zickus)
  - docs: Update docs to reflect newer workflow. (Don Zickus)
  - Use upstream/master for merge-base with fallback to master (Don Zickus)
  - Fedora: Turn off the SND_INTEL_BYT_PREFER_SOF option (Hans de Goede)
  - filter-modules.sh.fedora: clean up "netprots" (Paul Bolle)
  - filter-modules.sh.fedora: clean up "scsidrvs" (Paul Bolle)
  - filter-*.sh.fedora: clean up "ethdrvs" (Paul Bolle)
  - filter-*.sh.fedora: clean up "driverdirs" (Paul Bolle)
  - filter-*.sh.fedora: remove incorrect entries (Paul Bolle)
  - filter-*.sh.fedora: clean up "singlemods" (Paul Bolle)
  - filter-modules.sh.fedora: drop unused list "iiodrvs" (Paul Bolle)
  - Update mod-internal to fix depmod issue (Nico Pache)
  - Turn on CONFIG_VDPA_SIM_NET (rhbz 1942343) (Justin M. Forbes)
  - New configs in drivers/power (Fedora Kernel Team)
  - Turn on CONFIG_NOUVEAU_DEBUG_PUSH for debug configs (Justin M. Forbes)
  - Turn off KFENCE sampling by default for Fedora (Justin M. Forbes)
  - Fedora config updates round 2 (Justin M. Forbes)
  - New configs in drivers/soc (Jeremy Cline)
  - filter-modules.sh: Fix copy/paste error 'input' (Paul Bolle)
  - Update module filtering for 5.12 kernels (Justin M. Forbes)
  - Fix genlog.py to ensure that comments retain "%" characters. (Mark Mielke)
  - New configs in drivers/leds (Fedora Kernel Team)
  - Limit CONFIG_USB_CDNS_SUPPORT to x86_64 and arm in Fedora (David Ward)
  - Fedora: Enable CHARGER_GPIO on aarch64 too (Peter Robinson)
  - Fedora config updates (Justin M. Forbes)
  - wireguard: mark as Tech Preview (Hangbin Liu) [1613522]
  - configs: enable CONFIG_WIREGUARD in ARK (Hangbin Liu) [1613522]
  - Remove duplicate configs acroos fedora, ark and common (Don Zickus)
  - Combine duplicate configs across ark and fedora into common (Don Zickus)
  - common/ark: cleanup and unify the parport configs (Peter Robinson)
  - iommu/vt-d: enable INTEL_IDXD_SVM for both fedora and rhel (Jerry Snitselaar)
  - REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70 (Jeremy Linton)
  - configs/common/generic: disable CONFIG_SLAB_MERGE_DEFAULT (Rafael Aquini)
  - Remove _legacy_common_support (Justin M. Forbes)
  - redhat/mod-blacklist.sh: Fix floppy blacklisting (Hans de Goede)
  - New configs in fs/pstore (CKI@GitLab)
  - New configs in arch/powerpc (Fedora Kernel Team)
  - configs: enable BPF LSM on Fedora and ARK (Ondrej Mosnacek)
  - configs: clean up LSM configs (Ondrej Mosnacek)
  - New configs in drivers/platform (CKI@GitLab)
  - New configs in drivers/firmware (CKI@GitLab)
  - New configs in drivers/mailbox (Fedora Kernel Team)
  - New configs in drivers/net/phy (Justin M. Forbes)
  - Update CONFIG_DM_MULTIPATH_IOA (Augusto Caringi)
  - New configs in mm/Kconfig (CKI@GitLab)
  - New configs in arch/powerpc (Jeremy Cline)
  - New configs in arch/powerpc (Jeremy Cline)
  - New configs in drivers/input (Fedora Kernel Team)
  - New configs in net/bluetooth (Justin M. Forbes)
  - New configs in drivers/clk (Fedora Kernel Team)
  - New configs in init/Kconfig (Jeremy Cline)
  - redhat: allow running fedora-configs and rh-configs targets outside of redhat/ (Herton R. Krzesinski)
  - all: unify the disable of goldfish (android emulation platform) (Peter Robinson)
  - common: minor cleanup/de-dupe of dma/dmabuf debug configs (Peter Robinson)
  - common/ark: these drivers/arches were removed in 5.12 (Peter Robinson)
  - Correct kernel-devel make prepare build for 5.12. (Paulo E. Castro)
  - redhat: add initial support for centos stream dist-git sync on Makefiles (Herton R. Krzesinski)
  - redhat/configs: Enable CONFIG_SCHED_STACK_END_CHECK for Fedora and ARK (Josh Poimboeuf) [1856174]
  - CONFIG_VFIO now selects IOMMU_API instead of depending on it, causing several config mismatches for the zfcpdump kernel (Justin M. Forbes)
  - Turn off weak-modules for Fedora (Justin M. Forbes)
  - redhat: enable CONFIG_FW_LOADER_COMPRESS for ARK (Herton R. Krzesinski) [1939095]
  - Fedora: filters: update to move dfl-emif to modules (Peter Robinson)
  - drop duplicate DEVFREQ_GOV_SIMPLE_ONDEMAND config (Peter Robinson)
  - efi: The EFI_VARS is legacy and now x86 only (Peter Robinson)
  - common: enable RTC_SYSTOHC to supplement update_persistent_clock64 (Peter Robinson)
  - generic: arm: enable SCMI for all options (Peter Robinson)
  - fedora: the PCH_CAN driver is x86-32 only (Peter Robinson)
  - common: disable legacy CAN device support (Peter Robinson)
  - common: Enable Microchip MCP251x/MCP251xFD CAN controllers (Peter Robinson)
  - common: Bosch MCAN support for Intel Elkhart Lake (Peter Robinson)
  - common: enable CAN_PEAK_PCIEFD PCI-E driver (Peter Robinson)
  - common: disable CAN_PEAK_PCIEC PCAN-ExpressCard (Peter Robinson)
  - common: enable common CAN layer 2 protocols (Peter Robinson)
  - ark: disable CAN_LEDS option (Peter Robinson)
  - Fedora: Turn on SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC option (Hans de Goede)
  - Fedora: enable modules for surface devices (Dave Olsthoorn)
  - Turn on SND_SOC_INTEL_SOUNDWIRE_SOF_MACH for Fedora again (Justin M. Forbes)
  - common: fix WM8804 codec dependencies (Peter Robinson)
  - Build SERIO_SERPORT as a module (Peter Robinson)
  - input: touchscreen: move ELO and Wacom serial touchscreens to x86 (Peter Robinson)
  - Sync serio touchscreens for non x86 architectures to the same as ARK (Peter Robinson)
  - Only enable SERIO_LIBPS2 on x86 (Peter Robinson)
  - Only enable PC keyboard controller and associated keyboard on x86 (Peter Robinson)
  - Generic: Mouse: Tweak generic serial mouse options (Peter Robinson)
  - Only enable PS2 Mouse options on x86 (Peter Robinson)
  - Disable bluetooth highspeed by default (Peter Robinson)
  - Fedora: A few more general updates for 5.12 window (Peter Robinson)
  - Fedora: Updates for 5.12 merge window (Peter Robinson)
  - Fedora: remove dead options that were removed upstream (Peter Robinson)
  - redhat: remove CONFIG_DRM_PANEL_XINGBANGDA_XBD599 (Herton R. Krzesinski)
  - New configs in arch/powerpc (Fedora Kernel Team)
  - Turn on CONFIG_PPC_QUEUED_SPINLOCKS as it is default upstream now (Justin M. Forbes)
  - Update pending-common configs to address new upstream config deps (Justin M. Forbes)
  - rpmspec: ship gpio-watch.debug in the proper debuginfo package (Herton R. Krzesinski)
  - Removed description text as a comment confuses the config generation (Justin M. Forbes)
  - New configs in drivers/dma-buf (Jeremy Cline)
  - Fedora: ARMv7: build for 16 CPUs. (Peter Robinson)
  - Fedora: only enable DEBUG_HIGHMEM on debug kernels (Peter Robinson)
  - process_configs.sh: fix find/xargs data flow (Ondrej Mosnacek)
  - Fedora config update (Justin M. Forbes)
  - fedora: minor arm sound config updates (Peter Robinson)
  - Fix trailing white space in redhat/configs/fedora/generic/CONFIG_SND_INTEL_BYT_PREFER_SOF (Justin M. Forbes)
  - Add a redhat/rebase-notes.txt file (Hans de Goede)
  - Turn on SND_INTEL_BYT_PREFER_SOF for Fedora (Hans de Goede)
  - CI: Drop MR ID from the name variable (Veronika Kabatova)
  - redhat: add DUP and kpatch certificates to system trusted keys for RHEL build (Herton R. Krzesinski)
  - The comments in CONFIG_USB_RTL8153_ECM actually turn off CONFIG_USB_RTL8152 (Justin M. Forbes)
  - Update CKI pipeline project (Veronika Kabatova)
  - Turn off additional KASAN options for Fedora (Justin M. Forbes)
  - Rename the master branch to rawhide for Fedora (Justin M. Forbes)
  - Makefile targets for packit integration (Ben Crocker)
  - Turn off KASAN for rawhide debug builds (Justin M. Forbes)
  - New configs in arch/arm64 (Justin Forbes)
  - Remove deprecated Intel MIC config options (Peter Robinson)
  - redhat: replace inline awk script with genlog.py call (Herton R. Krzesinski)
  - redhat: add genlog.py script (Herton R. Krzesinski)
  - kernel.spec.template - fix use_vdso usage (Ben Crocker)
  - redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED (Herton R. Krzesinski)
  - Turn off vdso_install for ppc (Justin M. Forbes)
  - Remove bpf-helpers.7 from bpftool package (Jiri Olsa)
  - New configs in lib/Kconfig.debug (Fedora Kernel Team)
  - Turn off CONFIG_VIRTIO_CONSOLE for s390x zfcpdump (Justin M. Forbes)
  - New configs in drivers/clk (Justin M. Forbes)
  - Keep VIRTIO_CONSOLE on s390x available. (Jakub Čajka)
  - New configs in lib/Kconfig.debug (Jeremy Cline)
  - Fedora 5.11 config updates part 4 (Justin M. Forbes)
  - Fedora 5.11 config updates part 3 (Justin M. Forbes)
  - Fedora 5.11 config updates part 2 (Justin M. Forbes)
  - Update internal (test) module list from RHEL-8 (Joe Lawrence) [1915073]
  - Fix USB_XHCI_PCI regression (Justin M. Forbes)
  - fedora: fixes for ARMv7 build issue by disabling HIGHPTE (Peter Robinson)
  - all: s390x: Increase CONFIG_PCI_NR_FUNCTIONS to 512 (#1888735) (Dan Horák)
  - Fedora 5.11 configs pt 1 (Justin M. Forbes)
  - redhat: avoid conflict with mod-blacklist.sh and released_kernel defined (Herton R. Krzesinski)
  - redhat: handle certificate files conditionally as done for src.rpm (Herton R. Krzesinski)
  - specfile: add %{?_smp_mflags} to "make headers_install" in tools/testing/selftests (Denys Vlasenko)
  - specfile: add %{?_smp_mflags} to "make samples/bpf/" (Denys Vlasenko)
  - Run MR testing in CKI pipeline (Veronika Kabatova)
  - Reword comment (Nicolas Chauvet)
  - Add with_cross_arm conditional (Nicolas Chauvet)
  - Redefines __strip if with_cross (Nicolas Chauvet)
  - fedora: only enable ACPI_CONFIGFS, ACPI_CUSTOM_METHOD in debug kernels (Peter Robinson)
  - fedora: User the same EFI_CUSTOM_SSDT_OVERLAYS as ARK (Peter Robinson)
  - all: all arches/kernels enable the same DMI options (Peter Robinson)
  - all: move SENSORS_ACPI_POWER to common/generic (Peter Robinson)
  - fedora: PCIE_HISI_ERR is already in common (Peter Robinson)
  - all: all ACPI platforms enable ATA_ACPI so move it to common (Peter Robinson)
  - all: x86: move shared x86 acpi config options to generic (Peter Robinson)
  - All: x86: Move ACPI_VIDEO to common/x86 (Peter Robinson)
  - All: x86: Enable ACPI_DPTF (Intel DPTF) (Peter Robinson)
  - All: enable ACPI_BGRT for all ACPI platforms. (Peter Robinson)
  - All: Only build ACPI_EC_DEBUGFS for debug kernels (Peter Robinson)
  - All: Disable Intel Classmate PC ACPI_CMPC option (Peter Robinson)
  - cleanup: ACPI_PROCFS_POWER was removed upstream (Peter Robinson)
  - All: ACPI: De-dupe the ACPI options that are the same across ark/fedora on x86/arm (Peter Robinson)
  - Enable the vkms module in Fedora (Jeremy Cline)
  - Fedora: arm updates for 5.11 and general cross Fedora cleanups (Peter Robinson)
  - Add gcc-c++ to BuildRequires (Justin M. Forbes)
  - Update CONFIG_KASAN_HW_TAGS (Justin M. Forbes)
  - fedora: arm: move generic power off/reset to all arm (Peter Robinson)
  - fedora: ARMv7: build in DEVFREQ_GOV_SIMPLE_ONDEMAND until I work out why it's changed (Peter Robinson)
  - fedora: cleanup joystick_adc (Peter Robinson)
  - fedora: update some display options (Peter Robinson)
  - fedora: arm: enable TI PRU options (Peter Robinson)
  - fedora: arm: minor exynos plaform updates (Peter Robinson)
  - arm: SoC: disable Toshiba Visconti SoC (Peter Robinson)
  - common: disable ARCH_BCM4908 (NFC) (Peter Robinson)
  - fedora: minor arm config updates (Peter Robinson)
  - fedora: enable Tegra 234 SoC (Peter Robinson)
  - fedora: arm: enable new Hikey 3xx options (Peter Robinson)
  - Fedora: USB updates (Peter Robinson)
  - fedora: enable the GNSS receiver subsystem (Peter Robinson)
  - Remove POWER_AVS as no longer upstream (Peter Robinson)
  - Cleanup RESET_RASPBERRYPI (Peter Robinson)
  - Cleanup GPIO_CDEV_V1 options. (Peter Robinson)
  - fedora: arm crypto updates (Peter Robinson)
  - CONFIG_KASAN_HW_TAGS for aarch64 (Justin M. Forbes)
  - Fedora: cleanup PCMCIA configs, move to x86 (Peter Robinson)
  - New configs in drivers/rtc (Fedora Kernel Team)
  - redhat/configs: Enable CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL (Josh Poimboeuf) [1856176]
  - redhat/configs: Enable CONFIG_GCC_PLUGIN_STRUCTLEAK (Josh Poimboeuf) [1856176]
  - redhat/configs: Enable CONFIG_GCC_PLUGINS on ARK (Josh Poimboeuf) [1856176]
  - redhat/configs: Enable CONFIG_KASAN on Fedora (Josh Poimboeuf) [1856176]
  - New configs in init/Kconfig (Fedora Kernel Team)
  - build_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - genspec.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - mod-blacklist.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - Enable Speakup accessibility driver (Justin M. Forbes)
  - New configs in init/Kconfig (Fedora Kernel Team)
  - Fix fedora config mismatch due to dep changes (Justin M. Forbes)
  - New configs in drivers/crypto (Jeremy Cline)
  - Remove duplicate ENERGY_MODEL configs (Peter Robinson)
  - This is selected by PCIE_QCOM so must match (Justin M. Forbes)
  - drop unused BACKLIGHT_GENERIC (Peter Robinson)
  - Remove cp instruction already handled in instruction below. (Paulo E. Castro)
  - Add all the dependencies gleaned from running `make prepare` on a bloated devel kernel. (Paulo E. Castro)
  - Add tools to path mangling script. (Paulo E. Castro)
  - Remove duplicate cp statement which is also not specific to x86. (Paulo E. Castro)
  - Correct orc_types failure whilst running `make prepare` https://bugzilla.redhat.com/show_bug.cgi?id=1882854 (Paulo E. Castro)
  - redhat: ark: enable CONFIG_IKHEADERS (Jiri Olsa)
  - Add missing '$' sign to (GIT) in redhat/Makefile (Augusto Caringi)
  - Remove filterdiff and use native git instead (Don Zickus)
  - New configs in net/sched (Justin M. Forbes)
  - New configs in drivers/mfd (CKI@GitLab)
  - New configs in drivers/mfd (Fedora Kernel Team)
  - New configs in drivers/firmware (Fedora Kernel Team)
  - Temporarily backout parallel xz script (Justin M. Forbes)
  - redhat: explicitly disable CONFIG_IMA_APPRAISE_SIGNED_INIT (Bruno Meneguele)
  - redhat: enable CONFIG_EVM_LOAD_X509 on ARK (Bruno Meneguele)
  - redhat: enable CONFIG_EVM_ATTR_FSUUID on ARK (Bruno Meneguele)
  - redhat: enable CONFIG_EVM in all arches and flavors (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_LOAD_X509 on ARK (Bruno Meneguele)
  - redhat: set CONFIG_IMA_DEFAULT_HASH to SHA256 (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_READ_POLICY on ARK (Bruno Meneguele)
  - redhat: set default IMA template for all ARK arches (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_DEFAULT_HASH_SHA256 for all flavors (Bruno Meneguele)
  - redhat: disable CONFIG_IMA_DEFAULT_HASH_SHA1 (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_ARCH_POLICY for ppc and x86 (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_APPRAISE_MODSIG (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_APPRAISE_BOOTPARAM (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_APPRAISE (Bruno Meneguele)
  - redhat: enable CONFIG_INTEGRITY for aarch64 (Bruno Meneguele)
  - kernel: Update some missing KASAN/KCSAN options (Jeremy Linton)
  - kernel: Enable coresight on aarch64 (Jeremy Linton)
  - Update CONFIG_INET6_ESPINTCP (Justin Forbes)
  - New configs in net/ipv6 (Justin M. Forbes)
  - fedora: move CONFIG_RTC_NVMEM options from ark to common (Peter Robinson)
  - configs: Enable CONFIG_DEBUG_INFO_BTF (Don Zickus)
  - fedora: some minor arm audio config tweaks (Peter Robinson)
  - Ship xpad with default modules on Fedora and RHEL (Bastien Nocera)
  - Fedora: Only enable legacy serial/game port joysticks on x86 (Peter Robinson)
  - Fedora: Enable the options required for the Librem 5 Phone (Peter Robinson)
  - Fedora config update (Justin M. Forbes)
  - Fedora config change because CONFIG_FSL_DPAA2_ETH now selects CONFIG_FSL_XGMAC_MDIO (Justin M. Forbes)
  - redhat: generic  enable CONFIG_INET_MPTCP_DIAG (Davide Caratti)
  - Fedora config update (Justin M. Forbes)
  - Enable NANDSIM for Fedora (Justin M. Forbes)
  - Re-enable CONFIG_ACPI_TABLE_UPGRADE for Fedora since upstream disables this if secureboot is active (Justin M. Forbes)
  - Ath11k related config updates (Justin M. Forbes)
  - Fedora config updates for ath11k (Justin M. Forbes)
  - Turn on ATH11K for Fedora (Justin M. Forbes)
  - redhat: enable CONFIG_INTEL_IOMMU_SVM (Jerry Snitselaar)
  - More Fedora config fixes (Justin M. Forbes)
  - Fedora 5.10 config updates (Justin M. Forbes)
  - Fedora 5.10 configs round 1 (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Allow kernel-tools to build without selftests (Don Zickus)
  - Allow building of kernel-tools standalone (Don Zickus)
  - redhat: ark: disable CONFIG_NET_ACT_CTINFO (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_TEQL (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_SFB (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_QFQ (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_PLUG (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_PIE (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_HHF (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_DSMARK (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_DRR (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_CODEL (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_CHOKE (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_CBQ (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_ATM (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_EMATCH and sub-targets (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_TCINDEX (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_RSVP6 (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_RSVP (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_ROUTE4 (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_BASIC (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_ACT_SKBMOD (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_ACT_SIMP (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_ACT_NAT (Davide Caratti)
  - arm64/defconfig: Enable CONFIG_KEXEC_FILE (Bhupesh Sharma) [1821565]
  - redhat/configs: Cleanup CONFIG_CRYPTO_SHA512 (Prarit Bhargava)
  - New configs in drivers/mfd (Fedora Kernel Team)
  - Fix LTO issues with kernel-tools (Don Zickus)
  - Point pathfix to the new location for gen_compile_commands.py (Justin M. Forbes)
  - configs: Disable CONFIG_SECURITY_SELINUX_DISABLE (Ondrej Mosnacek)
  - [Automatic] Handle config dependency changes (Don Zickus)
  - configs/iommu: Add config comment to empty CONFIG_SUN50I_IOMMU file (Jerry Snitselaar)
  - New configs in kernel/trace (Fedora Kernel Team)
  - Fix Fedora config locations (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - configs: enable CONFIG_CRYPTO_CTS=y so cts(cbc(aes)) is available in FIPS mode (Vladis Dronov) [1855161]
  - Partial revert: Add master merge check (Don Zickus)
  - Update Maintainers doc to reflect workflow changes (Don Zickus)
  - WIP: redhat/docs: Update documentation for single branch workflow (Prarit Bhargava)
  - Add CONFIG_ARM64_MTE which is not picked up by the config scripts for some reason (Justin M. Forbes)
  - Disable Speakup synth DECEXT (Justin M. Forbes)
  - Enable Speakup for Fedora since it is out of staging (Justin M. Forbes)
  - Modify patchlist changelog output (Don Zickus)
  - process_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - generate_all_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - redhat/self-test: Initial commit (Ben Crocker)
  - Fixes "acpi: prefer booting with ACPI over DTS" to be RHEL only (Peter Robinson)
  - arch/x86: Remove vendor specific CPU ID checks (Prarit Bhargava)
  - redhat: Replace hardware.redhat.com link in Unsupported message (Prarit Bhargava) [1810301]
  - x86: Fix compile issues with rh_check_supported() (Don Zickus)
  - KEYS: Make use of platform keyring for module signature verify (Robert Holmes)
  - Input: rmi4 - remove the need for artificial IRQ in case of HID (Benjamin Tissoires)
  - ARM: tegra: usb no reset (Peter Robinson)
  - arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT (Jon Masters)
  - redhat: rh_kabi: deduplication friendly structs (Jiri Benc)
  - redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage (Jiri Benc)
  - redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE (Jiri Benc)
  - redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve. (Don Dutile)
  - redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator (Tony Camuso)
  - redhat: rh_kabi: Add macros to size and extend structs (Prarit Bhargava)
  - Removing Obsolete hba pci-ids from rhel8 (Dick Kennedy)
  - mptsas: pci-id table changes (Laura Abbott)
  - mptsas: Taint kernel if mptsas is loaded (Laura Abbott)
  - mptspi: pci-id table changes (Laura Abbott)
  - qla2xxx: Remove PCI IDs of deprecated adapter (Jeremy Cline)
  - be2iscsi: remove unsupported device IDs (Chris Leech)
  - mptspi: Taint kernel if mptspi is loaded (Laura Abbott)
  - hpsa: remove old cciss-based smartarray pci ids (Joseph Szczypek)
  - qla4xxx: Remove deprecated PCI IDs from RHEL 8 (Chad Dupuis)
  - aacraid: Remove depreciated device and vendor PCI id's (Raghava Aditya Renukunta)
  - megaraid_sas: remove deprecated pci-ids (Tomas Henzl)
  - mpt*: remove certain deprecated pci-ids (Jeremy Cline)
  - kernel: add SUPPORT_REMOVED kernel taint (Tomas Henzl)
  - Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES (Don Zickus)
  - Add option of 13 for FORCE_MAX_ZONEORDER (Peter Robinson)
  - s390: Lock down the kernel when the IPL secure flag is set (Jeremy Cline)
  - efi: Lock down the kernel if booted in secure boot mode (David Howells)
  - efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)
  - security: lockdown: expose a hook to lock the kernel down (Jeremy Cline)
  - Make get_cert_list() use efi_status_to_str() to print error messages. (Peter Jones)
  - Add efi_status_to_str() and rework efi_status_to_err(). (Peter Jones)
  - Add support for deprecating processors (Laura Abbott) [1565717 1595918 1609604 1610493]
  - arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT (Jeremy Cline)
  - iommu/arm-smmu: workaround DMA mode issues (Laura Abbott)
  - rh_kabi: introduce RH_KABI_EXCLUDE (Jakub Racek)
  - ipmi: do not configure ipmi for HPE m400 (Laura Abbott) [1670017]
  - kABI: Add generic kABI macros to use for kABI workarounds (Myron Stowe) [1546831]
  - add pci_hw_vendor_status() (Maurizio Lombardi)
  - ahci: thunderx2: Fix for errata that affects stop engine (Robert Richter)
  - Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Robert Richter)
  - bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter (Eugene Syromiatnikov) [1561171]
  - add Red Hat-specific taint flags (Eugene Syromiatnikov) [1559877]
  - tags.sh: Ignore redhat/rpm (Jeremy Cline)
  - put RHEL info into generated headers (Laura Abbott) [1663728]
  - acpi: prefer booting with ACPI over DTS (Mark Salter) [1576869]
  - aarch64: acpi scan: Fix regression related to X-Gene UARTs (Mark Salter) [1519554]
  - ACPI / irq: Workaround firmware issue on X-Gene based m400 (Mark Salter) [1519554]
  - modules: add rhelversion MODULE_INFO tag (Laura Abbott)
  - ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support (Al Stone) [1518076]
  - Add Red Hat tainting (Laura Abbott) [1565704]
  - Introduce CONFIG_RH_DISABLE_DEPRECATED (Laura Abbott)
  - Stop merging ark-patches for release (Don Zickus)
  - Fix path location for ark-update-configs.sh (Don Zickus)
  - Combine Red Hat patches into single patch (Don Zickus)
  - New configs in drivers/misc (Jeremy Cline)
  - New configs in drivers/net/wireless (Justin M. Forbes)
  - New configs in drivers/phy (Fedora Kernel Team)
  - New configs in drivers/tty (Fedora Kernel Team)
  - Set SquashFS decompression options for all flavors to match RHEL (Bohdan Khomutskyi)
  - configs: Enable CONFIG_ENERGY_MODEL (Phil Auld)
  - New configs in drivers/pinctrl (Fedora Kernel Team)
  - Update CONFIG_THERMAL_NETLINK (Justin Forbes)
  - Separate merge-upstream and release stages (Don Zickus)
  - Re-enable CONFIG_IR_SERIAL on Fedora (Prarit Bhargava)
  - Create Patchlist.changelog file (Don Zickus)
  - Filter out upstream commits from changelog (Don Zickus)
  - Merge Upstream script fixes (Don Zickus)
  - kernel.spec: Remove kernel-keys directory on rpm erase (Prarit Bhargava)
  - Add mlx5_vdpa to module filter for Fedora (Justin M. Forbes)
  - Add python3-sphinx_rtd_theme buildreq for docs (Justin M. Forbes)
  - redhat/configs/process_configs.sh: Remove *.config.orig files (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Add process_configs_known_broken flag (Prarit Bhargava)
  - redhat/Makefile: Fix '*-configs' targets (Prarit Bhargava)
  - dist-merge-upstream: Checkout known branch for ci scripts (Don Zickus)
  - kernel.spec: don't override upstream compiler flags for ppc64le (Dan Horák)
  - Fedora config updates (Justin M. Forbes)
  - Fedora confi gupdate (Justin M. Forbes)
  - mod-sign.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - Swap how ark-latest is built (Don Zickus)
  - Add extra version bump to os-build branch (Don Zickus)
  - dist-release: Avoid needless version bump. (Don Zickus)
  - Add dist-fedora-release target (Don Zickus)
  - Remove redundant code in dist-release (Don Zickus)
  - Makefile.common rename TAG to _TAG (Don Zickus)
  - Fedora config change (Justin M. Forbes)
  - Fedora filter update (Justin M. Forbes)
  - Config update for Fedora (Justin M. Forbes)
  - enable PROTECTED_VIRTUALIZATION_GUEST for all s390x kernels (Dan Horák)
  - redhat: ark: enable CONFIG_NET_SCH_TAPRIO (Davide Caratti)
  - redhat: ark: enable CONFIG_NET_SCH_ETF (Davide Caratti)
  - More Fedora config updates (Justin M. Forbes)
  - New config deps (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - First half of config updates for Fedora (Justin M. Forbes)
  - Updates for Fedora arm architectures for the 5.9 window (Peter Robinson)
  - Merge 5.9 config changes from Peter Robinson (Justin M. Forbes)
  - Add config options that only show up when we prep on arm (Justin M. Forbes)
  - Config updates for Fedora (Justin M. Forbes)
  - fedora: enable enery model (Peter Robinson)
  - Use the configs/generic config for SND_HDA_INTEL everywhere (Peter Robinson)
  - Enable ZSTD compression algorithm on all kernels (Peter Robinson)
  - Enable ARM_SMCCC_SOC_ID on all aarch64 kernels (Peter Robinson)
  - iio: enable LTR-559 light and proximity sensor (Peter Robinson)
  - iio: chemical: enable some popular chemical and partical sensors (Peter Robinson)
  - More mismatches (Justin M. Forbes)
  - Fedora config change due to deps (Justin M. Forbes)
  - CONFIG_SND_SOC_MAX98390 is now selected by SND_SOC_INTEL_DA7219_MAX98357A_GENERIC (Justin M. Forbes)
  - Config change required for build part 2 (Justin M. Forbes)
  - Config change required for build (Justin M. Forbes)
  - Fedora config update (Justin M. Forbes)
  - Add ability to sync upstream through Makefile (Don Zickus)
  - Add master merge check (Don Zickus)
  - Replace hardcoded values 'os-build' and project id with variables (Don Zickus)
  - redhat/Makefile.common: Fix MARKER (Prarit Bhargava)
  - gitattributes: Remove unnecesary export restrictions (Prarit Bhargava)
  - Add new certs for dual signing with boothole (Justin M. Forbes)
  - Update secureboot signing for dual keys (Justin M. Forbes)
  - fedora: enable LEDS_SGM3140 for arm configs (Peter Robinson)
  - Enable CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG (Justin M. Forbes)
  - redhat/configs: Fix common CONFIGs (Prarit Bhargava)
  - redhat/configs: General CONFIG cleanups (Prarit Bhargava)
  - redhat/configs: Update & generalize evaluate_configs (Prarit Bhargava)
  - fedora: arm: Update some meson config options (Peter Robinson)
  - redhat/docs: Add Fedora RPM tagging date (Prarit Bhargava)
  - Update config for renamed panel driver. (Peter Robinson)
  - Enable SERIAL_SC16IS7XX for SPI interfaces (Peter Robinson)
  - s390x-zfcpdump: Handle missing Module.symvers file (Don Zickus)
  - Fedora config updates (Justin M. Forbes)
  - redhat/configs: Add .tmp files to .gitignore (Prarit Bhargava)
  - disable uncommon TCP congestion control algorithms (Davide Caratti)
  - Add new bpf man pages (Justin M. Forbes)
  - Add default option for CONFIG_ARM64_BTI_KERNEL to pending-common so that eln kernels build (Justin M. Forbes)
  - redhat/Makefile: Add fedora-configs and rh-configs make targets (Prarit Bhargava)
  - redhat/configs: Use SHA512 for module signing (Prarit Bhargava)
  - genspec.sh: 'touch' empty Patchlist file for single tarball (Don Zickus)
  - Fedora config update for rc1 (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - redhat/Makefile.common: fix RPMKSUBLEVEL condition (Ondrej Mosnacek)
  - redhat/Makefile: silence KABI tar output (Ondrej Mosnacek)
  - One more Fedora config update (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fix PATCHLEVEL for merge window (Justin M. Forbes)
  - Change ark CONFIG_COMMON_CLK to yes, it is selected already by other options (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - More module filtering for Fedora (Justin M. Forbes)
  - Update filters for rnbd in Fedora (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fix up module filtering for 5.8 (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - More Fedora config work (Justin M. Forbes)
  - RTW88BE and CE have been extracted to their own modules (Justin M. Forbes)
  - Set CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK for Fedora (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Arm64 Use Branch Target Identification for kernel (Justin M. Forbes)
  - Change value of CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fix configs for Fedora (Justin M. Forbes)
  - Add zero-commit to format-patch options (Justin M. Forbes)
  - Copy Makefile.rhelver as a source file rather than a patch (Jeremy Cline)
  - Move the sed to clear the patch templating outside of conditionals (Justin M. Forbes)
  - Match template format in kernel.spec.template (Justin M. Forbes)
  - Break out the Patches into individual files for dist-git (Justin M. Forbes)
  - Break the Red Hat patch into individual commits (Jeremy Cline)
  - Fix update_scripts.sh unselective pattern sub (David Howells)
  - Add cec to the filter overrides (Justin M. Forbes)
  - Add overrides to filter-modules.sh (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_SMC91X and disable CONFIG_SMC911X (Prarit Bhargava) [1722136]
  - Include bpftool-struct_ops man page in the bpftool package (Jeremy Cline)
  - Add sharedbuffer_configuration.py to the pathfix.py script (Jeremy Cline)
  - Use __make macro instead of make (Tom Stellard)
  - Sign off generated configuration patches (Jeremy Cline)
  - Drop the static path configuration for the Sphinx docs (Jeremy Cline)
  - redhat: Add dummy-module kernel module (Prarit Bhargava)
  - redhat: enable CONFIG_LWTUNNEL_BPF (Jiri Benc)
  - Remove typoed config file aarch64CONFIG_SM_GCC_8150 (Justin M. Forbes)
  - Add Documentation back to kernel-devel as it has Kconfig now (Justin M. Forbes)
  - Copy distro files rather than moving them (Jeremy Cline)
  - kernel.spec: fix 'make scripts' for kernel-devel package (Brian Masney)
  - Makefile: correct help text for dist-cross-<arch>-rpms (Brian Masney)
  - redhat/Makefile: Fix RHEL8 python warning (Prarit Bhargava)
  - redhat: Change Makefile target names to dist- (Prarit Bhargava)
  - configs: Disable Serial IR driver (Prarit Bhargava)
  - Fix "multiple %files for package kernel-tools" (Pablo Greco)
  - Introduce a Sphinx documentation project (Jeremy Cline)
  - Build ARK against ELN (Don Zickus)
  - Drop the requirement to have a remote called linus (Jeremy Cline)
  - Rename 'internal' branch to 'os-build' (Don Zickus)
  - Only include open merge requests with "Include in Releases" label (Jeremy Cline)
  - Package gpio-watch in kernel-tools (Jeremy Cline)
  - Exit non-zero if the tag already exists for a release (Jeremy Cline)
  - Adjust the changelog update script to not push anything (Jeremy Cline)
  - Drop --target noarch from the rh-rpms make target (Jeremy Cline)
  - Add a script to generate release tags and branches (Jeremy Cline)
  - Set CONFIG_VDPA for fedora (Justin M. Forbes)
  - Add a README to the dist-git repository (Jeremy Cline)
  - Provide defaults in ark-rebase-patches.sh (Jeremy Cline)
  - Default ark-rebase-patches.sh to not report issues (Jeremy Cline)
  - Drop DIST from release commits and tags (Jeremy Cline)
  - Place the buildid before the dist in the release (Jeremy Cline)
  - Sync up with Fedora arm configuration prior to merging (Jeremy Cline)
  - Disable CONFIG_PROTECTED_VIRTUALIZATION_GUEST for zfcpdump (Jeremy Cline)
  - Add RHMAINTAINERS file and supporting conf (Don Zickus)
  - Add a script to test if all commits are signed off (Jeremy Cline)
  - Fix make rh-configs-arch (Don Zickus)
  - Drop RH_FEDORA in favor of the now-merged RHEL_DIFFERENCES (Jeremy Cline)
  - Sync up Fedora configs from the first week of the merge window (Jeremy Cline)
  - Migrate blacklisting floppy.ko to mod-blacklist.sh (Don Zickus)
  - kernel packaging: Combine mod-blacklist.sh and mod-extra-blacklist.sh (Don Zickus)
  - kernel packaging: Fix extra namespace collision (Don Zickus)
  - mod-extra.sh: Rename to mod-blacklist.sh (Don Zickus)
  - mod-extra.sh: Make file generic (Don Zickus)
  - Fix a painfully obvious YAML syntax error in .gitlab-ci.yml (Jeremy Cline)
  - Add in armv7hl kernel header support (Don Zickus)
  - Disable all BuildKernel commands when only building headers (Don Zickus)
  - Drop any gitlab-ci patches from ark-patches (Jeremy Cline)
  - Build the srpm for internal branch CI using the vanilla tree (Jeremy Cline)
  - Pull in the latest ARM configurations for Fedora (Jeremy Cline)
  - Fix xz memory usage issue (Neil Horman)
  - Use ark-latest instead of master for update script (Jeremy Cline)
  - Move the CI jobs back into the ARK repository (Jeremy Cline)
  - Sync up ARK's Fedora config with the dist-git repository (Jeremy Cline)
  - Pull in the latest configuration changes from Fedora (Jeremy Cline)
  - configs: enable CONFIG_NET_SCH_CBS (Marcelo Ricardo Leitner)
  - Drop configuration options in fedora/ that no longer exist (Jeremy Cline)
  - Set RH_FEDORA for ARK and Fedora (Jeremy Cline)
  - redhat/kernel.spec: Include the release in the kernel COPYING file (Jeremy Cline)
  - redhat/kernel.spec: add scripts/jobserver-exec to py3_shbang_opts list (Jeremy Cline)
  - redhat/kernel.spec: package bpftool-gen man page (Jeremy Cline)
  - distgit-changelog: handle multiple y-stream BZ numbers (Bruno Meneguele)
  - redhat/kernel.spec: remove all inline comments (Bruno Meneguele)
  - redhat/genspec: awk unknown whitespace regex pattern (Bruno Meneguele)
  - Improve the readability of gen_config_patches.sh (Jeremy Cline)
  - Fix some awkward edge cases in gen_config_patches.sh (Jeremy Cline)
  - Update the CI environment to use Fedora 31 (Jeremy Cline)
  - redhat: drop whitespace from with_gcov macro (Jan Stancek)
  - configs: Enable CONFIG_KEY_DH_OPERATIONS on ARK (Ondrej Mosnacek)
  - configs: Adjust CONFIG_MPLS_ROUTING and CONFIG_MPLS_IPTUNNEL (Laura Abbott)
  - New configs in lib/crypto (Jeremy Cline)
  - New configs in drivers/char (Jeremy Cline)
  - Turn on BLAKE2B for Fedora (Jeremy Cline)
  - kernel.spec.template: Clean up stray *.h.s files (Laura Abbott)
  - Build the SRPM in the CI job (Jeremy Cline)
  - New configs in net/tls (Jeremy Cline)
  - New configs in net/tipc (Jeremy Cline)
  - New configs in lib/kunit (Jeremy Cline)
  - Fix up released_kernel case (Laura Abbott)
  - New configs in lib/Kconfig.debug (Jeremy Cline)
  - New configs in drivers/ptp (Jeremy Cline)
  - New configs in drivers/nvme (Jeremy Cline)
  - New configs in drivers/net/phy (Jeremy Cline)
  - New configs in arch/arm64 (Jeremy Cline)
  - New configs in drivers/crypto (Jeremy Cline)
  - New configs in crypto/Kconfig (Jeremy Cline)
  - Add label so the Gitlab to email bridge ignores the changelog (Jeremy Cline)
  - Temporarily switch TUNE_DEFAULT to y (Jeremy Cline)
  - Run config test for merge requests and internal (Jeremy Cline)
  - Add missing licensedir line (Laura Abbott)
  - redhat/scripts: Remove redhat/scripts/rh_get_maintainer.pl (Prarit Bhargava)
  - configs: Take CONFIG_DEFAULT_MMAP_MIN_ADDR from Fedra (Laura Abbott)
  - configs: Turn off ISDN (Laura Abbott)
  - Add a script to generate configuration patches (Laura Abbott)
  - Introduce rh-configs-commit (Laura Abbott)
  - kernel-packaging: Remove kernel files from kernel-modules-extra package (Prarit Bhargava)
  - configs: Enable CONFIG_DEBUG_WX (Laura Abbott)
  - configs: Disable wireless USB (Laura Abbott)
  - Clean up some temporary config files (Laura Abbott)
  - configs: New config in drivers/gpu for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/powerpc for v5.4-rc1 (Jeremy Cline)
  - configs: New config in crypto for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/usb for v5.4-rc1 (Jeremy Cline)
  - AUTOMATIC: New configs (Jeremy Cline)
  - Skip ksamples for bpf, they are broken (Jeremy Cline)
  - configs: New config in fs/erofs for v5.4-rc1 (Jeremy Cline)
  - configs: New config in mm for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/md for v5.4-rc1 (Jeremy Cline)
  - configs: New config in init for v5.4-rc1 (Jeremy Cline)
  - configs: New config in fs/fuse for v5.4-rc1 (Jeremy Cline)
  - merge.pl: Avoid comments but do not skip them (Don Zickus)
  - configs: New config in drivers/net/ethernet/pensando for v5.4-rc1 (Jeremy Cline)
  - Update a comment about what released kernel means (Laura Abbott)
  - Provide both Fedora and RHEL files in the SRPM (Laura Abbott)
  - kernel.spec.template: Trim EXTRAVERSION in the Makefile (Laura Abbott)
  - kernel.spec.template: Add macros for building with nopatches (Laura Abbott)
  - kernel.spec.template: Add some macros for Fedora differences (Laura Abbott)
  - kernel.spec.template: Consolodate the options (Laura Abbott)
  - configs: Add pending direcory to Fedora (Laura Abbott)
  - kernel.spec.template: Don't run hardlink if rpm-ostree is in use (Laura Abbott)
  - configs: New config in net/can for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/phy for v5.4-rc1 (Jeremy Cline)
  - configs: Increase x86_64 NR_UARTS to 64 (Prarit Bhargava) [1730649]
  - configs: turn on ARM64_FORCE_52BIT for debug builds (Jeremy Cline)
  - kernel.spec.template: Tweak the python3 mangling (Laura Abbott)
  - kernel.spec.template: Add --with verbose option (Laura Abbott)
  - kernel.spec.template: Switch to using %install instead of %__install (Laura Abbott)
  - kernel.spec.template: Make the kernel.org URL https (Laura Abbott)
  - kernel.spec.template: Update message about secure boot signing (Laura Abbott)
  - kernel.spec.template: Move some with flags definitions up (Laura Abbott)
  - kernel.spec.template: Update some BuildRequires (Laura Abbott)
  - kernel.spec.template: Get rid of %clean (Laura Abbott)
  - configs: New config in drivers/char for v5.4-rc1 (Jeremy Cline)
  - configs: New config in net/sched for v5.4-rc1 (Jeremy Cline)
  - configs: New config in lib for v5.4-rc1 (Jeremy Cline)
  - configs: New config in fs/verity for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/aarch64 for v5.4-rc4 (Jeremy Cline)
  - configs: New config in arch/arm64 for v5.4-rc1 (Jeremy Cline)
  - Flip off CONFIG_ARM64_VA_BITS_52 so the bundle that turns it on applies (Jeremy Cline)
  - New configuration options for v5.4-rc4 (Jeremy Cline)
  - Correctly name tarball for single tarball builds (Laura Abbott)
  - configs: New config in drivers/pci for v5.4-rc1 (Jeremy Cline)
  - Allow overriding the dist tag on the command line (Laura Abbott)
  - Allow scratch branch target to be overridden (Laura Abbott)
  - Remove long dead BUILD_DEFAULT_TARGET (Laura Abbott)
  - Amend the changelog when rebasing (Laura Abbott)
  - configs: New config in drivers/platform for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/pinctrl for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/wireless for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/ethernet/mellanox for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/can for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/hid for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/dma-buf for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/crypto for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/s390 for v5.4-rc1 (Jeremy Cline)
  - configs: New config in block for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/cpuidle for v5.4-rc1 (Jeremy Cline)
  - redhat: configs: Split CONFIG_CRYPTO_SHA512 (Laura Abbott)
  - redhat: Set Fedora options (Laura Abbott)
  - Set CRYPTO_SHA3_*_S390 to builtin on zfcpdump (Jeremy Cline)
  - configs: New config in drivers/edac for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/firmware for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/hwmon for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/iio for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/mmc for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/tty for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/s390 for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/bus for v5.4-rc1 (Jeremy Cline)
  - Add option to allow mismatched configs on the command line (Laura Abbott)
  - configs: New config in drivers/crypto for v5.4-rc1 (Jeremy Cline)
  - configs: New config in sound/pci for v5.4-rc1 (Jeremy Cline)
  - configs: New config in sound/soc for v5.4-rc1 (Jeremy Cline)
  - gitlab: Add CI job for packaging scripts (Major Hayden)
  - Speed up CI with CKI image (Major Hayden)
  - Disable e1000 driver in ARK (Neil Horman)
  - configs: Fix the pending default for CONFIG_ARM64_VA_BITS_52 (Jeremy Cline)
  - configs: Turn on OPTIMIZE_INLINING for everything (Jeremy Cline)
  - configs: Set valid pending defaults for CRYPTO_ESSIV (Jeremy Cline)
  - Add an initial CI configuration for the internal branch (Jeremy Cline)
  - New drop of configuration options for v5.4-rc1 (Jeremy Cline)
  - New drop of configuration options for v5.4-rc1 (Jeremy Cline)
  - Pull the RHEL version defines out of the Makefile (Jeremy Cline)
  - Sync up the ARK build scripts (Jeremy Cline)
  - Sync up the Fedora Rawhide configs (Jeremy Cline)
  - Sync up the ARK config files (Jeremy Cline)
  - configs: Adjust CONFIG_FORCE_MAX_ZONEORDER for Fedora (Laura Abbott)
  - configs: Add README for some other arches (Laura Abbott)
  - configs: Sync up Fedora configs (Laura Abbott)
  - [initial commit] Add structure for building with git (Laura Abbott)
  - [initial commit] Add Red Hat variables in the top level makefile (Laura Abbott)
  - [initial commit] Red Hat gitignore and attributes (Laura Abbott)
  - [initial commit] Add changelog (Laura Abbott)
  - [initial commit] Add makefile (Laura Abbott)
  - [initial commit] Add files for generating the kernel.spec (Laura Abbott)
  - [initial commit] Add rpm directory (Laura Abbott)
  - [initial commit] Add files for packaging (Laura Abbott)
  - [initial commit] Add kabi files (Laura Abbott)
  - [initial commit] Add scripts (Laura Abbott)
  - [initial commit] Add configs (Laura Abbott)
  - [initial commit] Add Makefiles (Laura Abbott)


author: Herton R. Krzesinski <herton@redhat.com> [5.14-2]
changelog:
  - redhat: update branches/targets after 9 Beta fork (Herton R. Krzesinski)
  - hv_utils: Set the maximum packet size for VSS driver to the length of the receive buffer (Vitaly Kuznetsov) [1996628]
  - Enable bridge jobs for scratch pipelines (Michael Hofmann)


author: Tao Liu <ltao@redhat.com> - 2.0.22-5
changelog:
  - Use a customized emergency shell
  - Remove the kdump error handler isolation wrapper
  - Don's try to restart dracut-initqueue if it's already there


author: Tao Liu <ltao@redhat.com> - 2.0.22-6
changelog:
  - Add gating.yaml to RHEL-9 kexec-tools
  - Iterate /sys/bus/ccwgroup/devices to tell if we should set up rd.znet


author: Tao Liu <ltao@redhat.com> - 2.0.22-8
changelog:
  - check for invalid physical address of /proc/kcore when making ELF dumpfile
  - Increase SECTION_MAP_LAST_BIT to 5
  - kdumpctl: fix check_config error when kdump.conf is empty
  - kdump-lib.sh: fix a warning in prepare_kdump_bootinfo()


author: Tao Liu <ltao@redhat.com> - 2.0.22-9
changelog:
  - Add a crashkernel-howto.txt doc
  - Add a new hook: 92-crashkernel.install
  - kdumpctl: Add kdumpctl reset-crashkernel
  - Revert "kdump-lib.sh: Remove is_atomic"
  - fix format issue in find_online_znet_device
  - check the existence of /sys/bus/ccwgroup/devices before trying to find online network device


author: Tao Liu <ltao@redhat.com> - 2.0.22-10
changelog:
  - fadump-init: clean up mount points properly
  - fadump: kdumpctl should check the modules used by the fadump initramfs
  - fadump: isolate fadump initramfs image within the default one
  - Cleanup dead systemd services before start sysroot.mount
  - Revert "Revert "x86_64: enable the kexec file load by default""


author: Tao Liu <ltao@redhat.com> - 2.0.22-11
changelog:
  - Make `dump_to_rootfs` wait for 90s for real
  - Check the existence of /sys/bus/ccwgroup/devices/*/online beforehand
  - kdump.sysconfig.s390: Remove "prot_virt" from kdump kernel cmdline


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.264-1
changelog:
  - Rebased to upstream candidate.
  - Related: rhbz#1955374
  - Fixed GCC implicit-fallthrough errors when building for latest kernel
  - Resolves: rhbz#1984814


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Update to 0.55.0
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.2-1
changelog:
  - Update to 0.55.2
  - Improve performance of query installed() and available()
  - Swdb: Add a method to get the current transaction
  - [modules] Add special handling for src artifacts (RhBug:1809314)
  - Better msgs if "basecachedir" or "proxy_password" isn't set (RhBug:1888946)
  - Add new options module_stream_switch
  - Support allow_vendor_change setting in dnf context API
  - Fix couple of sanitizer builds in specfile


author: Nicola Sella <nsella@redhat.com> - 0.58.0-1
changelog:
  - Update to 0.58.0
  - Option: Add reset() method
  - Add OptionBinds::getOption() method
  - [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  - [context] Add support for options: minrate, throttle, bandwidth, timeout
  - [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  - Allow loading ext metadata even if only cache (solv) is present
  - Add ASAN_OPTIONS for test_libdnf_main
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Add compatible layer for MdDocuments v2
  - Fix modular queries with the new solver
  - Improve formatting of error string for modules
  - Change mechanism of module conflicts
  - Fix load/update FailSafe


author: Nicola Sella <nsella@redhat.com> - 0.60.0-1
changelog:
  - Update to 0.60.0
  - Fix repo.fresh() implementation
  - build-sys: Add ENABLE_STATIC option
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Apply proxy certificate options
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - build-sys: Clean up message about Python bindings
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Fix problematic language
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file option "installonlypkgs".
  - Support main config file option "protected_packages".
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - ModuleProfile: add isDefault()
  - ModulePackage: add getDefaultProfile()
  - Add new dnf_context_module_install() C API
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)


author: Richard Hughes <richard@hughsie.com> 0.3.2-1
changelog:
  - New upstream version
  - Do not use deprecated libusb API
  - Use a 1ms timeout in the Windows event thread


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Dan Horák <dan[at]danny.cz> - 3.7.0-3
changelog:
  - Use make macros (taken from PR#1 by <tstellar at redhat.com>)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Dan Horák <dan[at]danny.cz> - 3.8.0-1
changelog:
  - updated to 3.8.0 (#1869532)
  - eliminate SW fallback functions (#1924119)
  - updated for OpenSSL 3.0 (#1952946)
  - disable FIPS support (broken)
  - Resolves: #1869532 #1924119 #1952946


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.1-1
changelog:
  - Release 2.11.1
  - Ignore Packager documents when running ModuleIndex.update_from_*()
  - Add python overrides for XMD in PackagerV3
  - Add python override to ignore the GType return when reading packager files
  - Add PackagerV3.get_mdversion()


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-1
changelog:
  - Release 2.11.2
  - Extend read_packager_[file|string]() to support overriding the module name
    and stream.


author: Stephen Gallagher <sgallagh@redhat.com> - 2.11.2-2
changelog:
  - Fix issue with ModuleIndex when input contains only Obsoletes documents
  - Fix import issue when built with Python 2 support


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-4
changelog:
  - Drop deprecated functions and duplicated symbols
  - Change library version to libsemanage.so.2
  - Temporary ship -compat with libsemanage.so.1
  - Based on upstream db0f2f382e31
  - Re-enable lto flags


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-6
changelog:
  - Drop "genhomedircon: check usepasswd" patch
  - genhomedircon to ignore
    /root;/bin;/boot;/dev;/etc;/lib;/lib64;/proc;/run;/sbin;/sys;/tmp;/usr;/var by default
  - Fix usepasswd=False explanation in semanage.conf


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-4
changelog:
  - Drop deprecated functions and duplicated symbols
  - Dange library version to libsepol.so.2
  - temporary ship -compat with libsepol.so.1
  - Re-enable LTO flags


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-5
changelog:
  - Drop and obsolete libsepol-compat subpackage
  - cil: Give error for more than one true or false block


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-3
changelog:
  - Do not return error when server properly closed the channel (#1849069)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Jiri Pirko <jiri@resnulli.us> - 1.31-1
changelog:
  1.31 release
  utils/bond2team: remove TYPE in ifcfg file
  utils/bond2team: keep delivering config to file if stdout not supplied
  teamd/lacp: silence ignore none LACP frames
  teamd: fix ctx->hwaddr value assignment
  Send LACP PDU right after the Actor state has been changed
  Skip setting the same hwaddr to a lag port if not needed
  Make all netlink socket RCVBUF sizes configurable
  Don't return an error when timerfd socket return 0
  Fix ifinfo_link_with_port race condition with newlink
  teamd: fix possible race in master ifname callback


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Tom Stellard <tstellar@redhat.com> - 1.2.6-2
changelog:
  - Add BuildRequires: gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_packaging


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Renaming python package according to the standard
  - Resolves: rhbz#1951968

  =======
  >>>>>>> 96fbb4a91a8471e931d872e7b696d176fc351605


author: Tomas Halman <thalman@redhat.com>
changelog:
  - Enable audit library in the build 
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Victor Stinner <vstinner@python.org> - 2.9.10-9
changelog:
  - Build the Python extension with the PY_SSIZE_T_CLEAN macro to make it
    compatible with Python 3.10.
  - Fixes: rhbz#1890878.


author: David King <dking@redhat.com> - 2.9.10-12
changelog:
  - Fix CVE-2021-3516 (#1956969)
  - Fix CVE-2021-3517 (#1957002)
  - Fix CVE-2021-3518 (#1957029)
  - Fix CVE-2021-3537 (#1957285)


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dan Horák <dan[at]danny.cz> - 2.2.0-10
changelog:
  - build with libzfcphbaapi as standalone library to avoid dependency on obsolete libhbaapi (#1922413)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20201118-115
changelog:
  - Update to upstream 20201118 release
  - rtw88: RTL8822C: Update firmware to v9.9.4
  - amdgpu: update picasso/raven/raven2 VCN firmware
  - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  - QCA: Update Bluetooth firmware for QCA6390
  - qcom : updated venus firmware files for v5.4
  - QCA : Fixed BT SSR due to command timeout / IO fatal error
  - ath11k: Updated firmware for QCA6390/IPQ8074/IPQ6018
  - ath10l: Updated firmware for QCA9984/QCA9888/QCA6174


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20201218-116
changelog:
  - Update to upstream 20201218 release
  - AMD gpu: Updates for vega10/12/20, renoir, navi10/12/14, raven1/2
  - AMD gpuL add sienna cichlid
  - Update AMD SEV firmware
  - Add Mellanox mlxsw_spectrum xx.2008.2018 firmware
  - i915: Add GuC firmware v49.0.1
  - Intel bluetooth updates for AX200/201/210, 9560, 9260
  - Add Lontium LT9611UXC DSI to HDMI bridge firmware
  - Update QCA WCN3991 firmware
  - Update mediatek MT8173 VPU firmware to v1.1.6


author: Peter Robinson <pbrobinson@fedoraproject.org> 20210208-117
changelog:
  - Update to upstream 20210208 release
  - rtl_bt: Updates for RTL8822C, RTL8821C, added RTL8852A
  - Link Cypress brcmfmac firmwares to old brcm location
  - brcm NVRAM updates for Raspberry Pi, added 96boards Rock960
  - QCom SM8250 (SD865) firmware for Compute, Audio DSPs, Adreno a650, venus VPU-1.0
  - i915: Added firmware for DG1, ADL-S
  - Uodated bluetooth firmware for Intel Bluetooth AX200/201/210
  - rtw88: RTL8821C: Update firmware to v24.8
  - New MT7921 firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304


author: Peter Robinson <pbrobinson@fedoraproject.org> 20210315-119
changelog:
  - Update to upstream 20210315 release
  - Update to Intel Bluetooth AX200/201 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.6
  - rtw89: 8852a: add firmware v0.9.12.2
  - iwlwifi: updates for 9000-family/7265D/core59-66 (cc, Qu, QuZ, ty)
  - amdgpu: add initial firmware for green sardine
  - Silabs new WF200 firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2406
  - Added Mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20210716-121
changelog:
  - Update to upstream 20210716 release (rhbz 1984973, rhbz 1876310).
    What changed in this release is noted on items below, copied from Fedora's
    linux-firmware changelog done by Peter Robinson
  - update NXP 8897/8997 firmware images
  - rtlwifi: de-dupe rtl8723b/rtl8192e SDIO/USB WiFi firmware
  - Mediatek: update WiFi/bluetooth chip (MT7921)
  - Mediatek: update MT7915 firmware to 20201105
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  - cxgb4: Update firmware to revision 1.26.0.0
  - firmware/i915/guc: Add HuC v7.9.3 for TGL & DG1
  - firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  - firmware/i915/guc: Add GuC v62.0.0 for all platforms
  - nvidia: fix symlinks for tu104/tu106 acr unload firmware
  - iwlwifi: new/updated 8000/9000/other from core60-51 release
  - Update firmware file for Intel Bluetooth AX210/201/200
  - rtw88: 8822c: Update normal firmware to v9.9.10
  - rtl_bt: Update RTL8852A BT(UART I/F) FW to 0xD9A8_A0CD
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  - rtl_bt: Add rtl8761b/rtl8761bu firmware
  - QCA: Update Bluetooth firmware for QCA6174/QCA6390
  - QCA: Add Bluetooth firmware for WCN685x
  - amdgpu: update 21.20 vcn firmware for green sardine, renoir, navi10/12/14
  - amdgpu: add initial dimgrey cavefish firmware from 21.20
  - amdgpu: updated 21.20 firmware for: Picasso, green sardine, arcturus
    vega10/12/20, navi10/12/14, raven1/2, renoir, navy flounder
  - cypress: update firmware: cyw54591/cyw43570 pcie
  - cypress: update firmware: cyw4373/cyw4356/cyw4354/cyw43455/cyw43430/cyw43340/cyw43012 sdio
  - nvidia: Update Tegra194 XUSB firmware to v60.09
  - nvidia: Update Tegra186 XUSB firmware to v55.18
  - nvidia: Update Tegra210 XUSB firmware to v50.26
  - nvidia: Add VIC firmware for Tegra194
  - update firmware for cadence mhdp8546
  - i915: Add ADL-P DMC Support
  - qcom: add gpu firmwares for sc7280
  - qcom: Add venus firmware files for VPU-2.0
  - qcom: update venus firmware files for v5.4
  - qcom: sm8250: update remoteproc firmware
  - qcom: update a650 firmware files
  - QCA: Update Bluetooth firmware for QCA6174
  - WHENCE: link to similar config file for rtl8821a support
  - rtw89: 8852a: update fw to v0.13.8.0
  - rtw88: 8822c: Update normal firmware to v9.9.9
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  - rtl_bt: Add rtl8723bs_config-OBDA0623.bin symlink
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x59A_76A3
  - rtl_nic: add new firmware for RTL8153 and RTL8156 series
  - Intel: Update firmware for Intel Bluetooth AX210/201/200, 9560, 9260, 8265
  - Intel BT 7265: Fix Security Issues
  - mrvl: prestera: Add Marvell Prestera Switchdev firmware 3.0 version
  - amdgpu: update GPU firmwares from 21.10
  - amdgpu: add initial support for arcturus, navy flounder
  - amdgpu: add new polaris 12 MC firmware
  - amdgpu: update navi10/14 smc firmware
  - cxgb4: Update firmware to revision 1.25.4.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2438
  - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.14.A.6
  - brcm: add missing symlink for Pi Zero W NVRAM file
  - brcm: Add a link to enable khadas VIM2's WiFi
  - brcm: Link CM4's WiFi firmware with DMI machine name.
  - brcm: Add nvram for the Chuwi Hi8 (CWI509) tablet
  - brcm: Add nvram for the Predia Basic tablet


author: Vit Mojzis <vmojzis@redhat.com> - 1.0.18-3
changelog:
  - Added a patch to fix netinet/sctp.h not to be installed.
  - Added some fixes for kernel feature detection.
  - Updated to 1.0.18. [1568622]


author: Kamil Dudka <kdudka@redhat.com> - 3.18.0-4
changelog:
  - make `renamecopy` and `copytruncate` override each other (#1934601)
  - unify documentation of copy/copytruncate/renamecopy (#1934629)
  - fix resource leaks reported by Coverity


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Marian Csontos <mcsontos@redhat.com> - 2.03.10-1
changelog:
  - Add integrity with raid capability.
  - Add writecache and integrity support to lvmdbusd.
  - Zero pool metadata on allocation (disable with allocation/zero_metadata=0).
  - Failure in zeroing or wiping will fail command (bypass with -Zn, -Wn).
  - Add lvcreate of new cache or writecache lv with single command.
  - Generate unique cachevol name when default required from lvcreate.
  - Converting RAID1 volume to one with same number of legs now succeeds with a
    warning.
  - Fix conversion to raid from striped lagging type.
  - Fix conversion to 'mirrored' mirror log with larger regionsize.
  - Fix running out of free buffers for async writing for larger writes.
  - Fix support for lvconvert --repair used by foreign apps (i.e. Docker).
  - Add support for VDO in blkdeactivate script.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201027-1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893266, #1893254, #1893234):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-2
changelog:
  - Do not use "grep -q" in a pipe in check_caveats (#1902021).
  - Add 06-55-04/06-55-06/06-55-07 (SKX-SP/CLX-SP) microcode-20201110 caveats
    (#1902884).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210216-1
changelog:
  - Update Intel CPU microcode to microcode-20210216 release (#1902884):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a08 up
      to 0x2006a0a;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003003
      up to 0x4003006;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003003 up to 0x5003006.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-1
changelog:
  - Update Intel CPU microcode to microcode-20210525 release, addresses
    CVE-2020-24489, CVE-2020-24511, CVE-2020-24512, and CVE-2020-24513
    (#1962664, #1962714, #1962734, #1962680):
    - Addition of 06-55-05/0xb7 (CLX-SP A0) microcode at revision 0x3000010;
    - Addition of 06-6a-05/0x87 (ICX-SP C0) microcode at revision 0xc0002f0;
    - Addition of 06-6a-06/0x87 (ICX-SP D0) microcode at revision 0xd0002a0;
    - Addition of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Addition of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Addition of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Addition of 06-8c-02/0xc2 (TGL-R C0) microcode at revision 0x16;
    - Addition of 06-8d-01/0xc2 (TGL-H R0) microcode at revision 0x2c;
    - Addition of 06-96-01/0x01 (EHL B1) microcode at revision 0x11;
    - Addition of 06-9c-00/0x01 (JSL A0/A1) microcode at revision 0x1d;
    - Addition of 06-a7-01/0x02 (RKL-S B0) microcode at revision 0x40;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xe2 up to 0xea;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb000038 up
      to 0xb00003e;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006a0a up
      to 0x2006b06;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xe2 up to 0xea;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x68 up to 0x88;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xe0 up
      to 0xea;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xde up to 0xea;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xde up
      to 0xea;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xde up
      to 0xea;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x44 up to 0x46;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x16 up
      to 0x19;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000159
      up to 0x100015b;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003006
      up to 0x4003102;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003006 up to 0x5003102;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x700001e
      up to 0x7002302;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x7000019 up to 0x700001b;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000017
      up to 0xf000019;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe00000f up to 0xe000012;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x40 up
      to 0x44;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x2e up
      to 0x34;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x18 up
      to 0x1a;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa0
      up to 0xa6;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x28 up
      to 0x2a;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xe0 up
      to 0xea;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xe0
      up to 0xea;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xe0
      up to 0xec;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe0
      up to 0xe8;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode from revision
      0xe0 up to 0xea.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Tomas Popela <tpopela@redhat.com> - 0.26-27
changelog:
  - Don't prune bind mounts on ostree based systems, prune the deployments folder
    there to avoid duplications.
  - Fixes: https://github.com/fedora-silverblue/issue-tracker/issues/76


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Than Ngo <than@redhat.com> - 3.16.0-3
changelog:
  - Resolves: #1959894, Soft token does not check if an EC key is valid
  - Resolves: #1924120, Event Notification Support


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Sahana Prasad <sahana@redhat.com> - 3.0.0-0.beta2.3
changelog:
  - Fixes core dump in openssl req -modulus
  - Fixes 'openssl req' to not ask for password when non-encrypted private key
    is used
  - cms: Do not try to check binary format on stdin and -rctform fix
  - Resolves: rhbz#1988137, rhbz#1988468, rhbz#1988137


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.0-0.beta2.7
changelog:
  - Removes the dual-abi build as it not required anymore. The mass rebuild
    was completed and all packages are rebuilt against Beta version.
  - Resolves: rhbz#1984097


author: Dan Horák <dan@danny.cz> - 2.2.0-1
changelog:
  - updated to 2.2.0 (#1869531)
  - eliminate SW fallback functions (#1924117)
  - Resolves: #1869531 #1924117


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.0-1
changelog:
  - Rebase to release 1.5.0
  - Rebase to pam-redhat-1.1.4
  - Remove pam_cracklib, pam_tally and pam_tally2
  - spec file cleanup


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-1
changelog:
  - Rebase to release 1.5.1
  - fix CVE-2020-27780: authentication bypass when the user doesn't exist
    and root password is blank (#1901173)


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Petr Pisar <ppisar@redhat.com> - 8.43-3
changelog:
  - Make erroroffset initializion in a POSIX wrapper thread-safe
    (upstream bug #2447)
  - Fix an integer overflow when parsing numbers after "(?C" (upstream bug #2463)
  - Fix shifting integer bits and a NULL pointer dereferce in pcretest tool
    (upstream bug #2380)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Petr Pisar <ppisar@redhat.com> - 10.36-4
changelog:
  - Fix a mismatch if \K was involved in a recursion
  - Restore single character repetition optimization in JIT (upstream bug #2698)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-1
changelog:
  - Rebase to the 10.37
  - libpcre2-posix.so.2* SONAME bump to libpcre2-posix.so.3*
  - Enable JIT for s390x arch
  - Patches upstreamed: Patch 1,2,3,4
  - Resolves: rhbz#1970765, BZ#1965025


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-4
changelog:
  - policycoreutils-dbus requires polkit
  - fixfiles: do not exclude /dev and /run in -C mode
  - dbus: use GLib.MainLoop


author: Than Ngo <than@redhat.com> - 1.3.8-4
changelog:
  - additional patches to support Linux Hybrid Network Virtualization
  - move commands that dont depend on perl to core subpackage
  - update hcnmgr patch
  - sys_ident: Skip length field from search
  - ofpathname: Use NVMe controller physical nsid


author: Than Ngo <than@redhat.com> - 1.3.8-9
changelog:
  - Resolves: #1937038, New lparstat -x option to report the security flavor
  - Use od instead xxd
  - rebase patch fix_boot-time_bonding_interface_cleanup_and_avoid_use_ifcfg
  - ppc64_cpu --help does not list --version as an option
  - take care of NUMA topology when removing memory (DLPAR)


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Miro Hrončok <mhroncok@redhat.com> - 3.0.4-14
changelog:
  - Subpackage python2-chardet has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 2.8-5
changelog:
  - Subpackage python2-idna has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 0.4-39
changelog:
  - Subpackage python2-iniparse has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Miro Hrončok <mhroncok@redhat.com> - 20.3-1
changelog:
  - Update to 20.3
  - Add support for PEP 600: Future manylinux Platform Tags
  - New resolver
  - Fixes: rhbz#1893470


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 1.7.1-3
changelog:
  - Subpackage python2-pysocks has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 1.25.10-3
changelog:
  - Drop redundant BuildRequires for nose
  - Instead of the mock backport, use unittest.mock from the standard library


author: Karolina Surma <ksurma@redhat.com> - 1.26.5-1
changelog:
  - Update to 1.26.5
  - Fix for CVE-2021-33503 Catastrophic backtracking in URL authority parser
  Resolves: rhbz#1972639


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-3
changelog:
  - Build only blake2 from the internal hash implementations and use md5,
    sha1, sha256, sha512 and sha3 from OpenSSL
  Related: rhbz#1935437, rhbz#1942527


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Vladis Dronov <vdronov@redhat.com> - 6.12-4
changelog:
  - Allow rngd to run as non-privledged user (bz 1965318)
  - Update the rngd.service file
  - Add 3 small upstream patches fixing issues


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Dan Horák <dan[at]danny.cz> - 2:2.17.0-3
changelog:
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding (#1870700)
  - Resolves: #1870700


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.6-1
changelog:
  - Label /dev/dma_heap with dma_device_dir_t
  Resolves: rhbz#1954116
  - Allow pkcs-slotd create and use netlink_kobject_uevent_socket
  Resolves: rhbz#1963252
  - Label /run/systemd/default-hostname with hostname_etc_t
  Resolves: rhbz#1966492


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.8-1
changelog:
  - Associate dma_device_dir_t with device filesystem
  Resolves: rhbz#1954116
  - Add default file context specification for dnf log files
  Resolves: rhbz#1955223
  - Allow using opencryptoki for certmonger
  Resolves: rhbz#1961756
  - Label var.lib.opencryptoki.* files and create pkcs_tmpfs_filetrans()
  Resolves: rhbz#1961756
  - Allow httpd_sys_script_t read, write, and map hugetlbfs files
  Resolves: rhbz#1964890
  - Dontaudit daemon open and read init_t file
  Resolves: rhbz#1965412
  - Allow sanlock get attributes of cgroup filesystems
  Resolves: rhbz#1965217


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.9-1
changelog:
  - Allow systemd-coredump getattr nsfs files and net_admin capability
  Resolves: rhbz#1965372
  - Label /run/libvirt/common with virt_common_var_run_t
  Resolves: rhbz#1969209
  - Label /usr/bin/arping plain file with netutils_exec_t
  Resolves: rhbz#1952515
  - Make usbmuxd_t a daemon
  Resolves: rhbz#1965411
  - Allow usbmuxd get attributes of cgroup filesystems
  Resolves: rhbz#1965411
  - Label /dev/dma_heap/* char devices with dma_device_t
  - Revert "Label /dev/dma_heap/* char devices with dma_device_t"
  - Revert "Label /dev/dma_heap with dma_device_dir_t"
  - Revert "Associate dma_device_dir_t with device filesystem"
  Resolves: rhbz#1967818
  - Label /var/lib/kdump with kdump_var_lib_t
  Resolves: rhbz#1965989
  - Allow systemd-timedated watch runtime dir and its parent
  Resolves: rhbz#1970865
  - Label /run/fsck with fsadm_var_run_t
  Resolves: rhbz#1970911


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.10-1
changelog:
  - Allow bacula get attributes of cgroup filesystems
  Resolves: rhbz#1976917
  - Label /dev/wmi/dell-smbios as acpi_device_t
  Resolves: rhbz#1972382
  - Add the lockdown integrity permission to dev_map_userio_dev()
  Resolves: rhbz#1966758
  - Allow virtlogd_t to create virt_var_lockd_t dir
  Resolves: rhbz#1974875


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.11-1
changelog:
  - Allow hostapd bind UDP sockets to the dhcpd port
  Resolves: rhbz#1979968
  - Allow mdadm read iscsi pid files
  Resolves: rhbz#1976073
  - Unconfined domains should not be confined
  Resolves: rhbz#1977986
  - Allow NetworkManager_t to watch /etc
  Resolves: rhbz#1980000
  - Allow using opencryptoki for ipsec
  Resolves: rhbz#1977915


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.12-1
changelog:
  - Revert "update libs_filetrans_named_content() to have support for /usr/lib/debug directory"
  Resolves: rhbz#1990813
  - Label /dev/crypto/nx-gzip with accelerator_device_t
  Resolves: rhbz#1973953
  - Label /usr/bin/qemu-storage-daemon with virtd_exec_t
  Resolves: rhbz#1977245
  - Allow systemd-machined stop generic service units
  Resolves: rhbz#1979522
  - Label /.k5identity file allow read of this file to rpc.gssd
  Resolves: rhbz#1980610


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.13-1
changelog:
  - Add "/" at the beginning of dev/shm/var\.lib\.opencryptoki.* regexp
  Resolves: rhbz#1977915
  - Set default file context for /sys/firmware/efi/efivars
  Resolves: rhbz#1972372
  - Allow tcpdump run as a systemd service
  Resolves: rhbz#1972577
  - Allow nmap create and use netlink generic socket
  Resolves: rhbz#1985212
  - Allow nscd watch system db files in /var/db
  Resolves: rhbz#1989416
  - Allow systemd-gpt-auto-generator read udev pid files
  Resolves: rhbz#1992638


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.14-1
changelog:
  - Support using ICA crypto accelerator on s390x arch
  Resolves: rhbz#1976180
  - Allow systemd delete /run/systemd/default-hostname
  Resolves: rhbz#1978507
  - Label /usr/bin/Xwayland with xserver_exec_t
  Resolves: rhbz#1993151
  - Label /usr/libexec/gdm-runtime-config with xdm_exec_t
  Resolves: rhbz#1993151
  - Allow tcpdump read system state information in /proc
  Resolves: rhbz#1972577
  - Allow firewalld drop capabilities
  Resolves: rhbz#1989641


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.8.1-9
changelog:
  - libsubid: creation and nsswitch support. Resolves: #1859252
  - Creation of subid and subid-devel subpackages
  - man: mention NSS in new[ug]idmap manpages
  - libsubid: move development header to shadow folder
  - libsubid: don't print error messages on stderr by default
  - libsubid: libsubid_init return false if out of memory
  - useradd: fix SUB_UID_COUNT=0
  - libsubid: don't return owner in list_owner_ranges API call
  - libsubid: libsubid_init don't print messages on error
  - libsubid: fix newusers when nss provides subids
  - man: clarify subid delegation
  - libsubid: make shadow_logfd not extern
  - login.defs: include HMAC_CRYPTO_ALGO key


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.9-1
changelog:
  - Rebase to version 4.9. Resolves: #1989556
  - usermod: allow all group types with -G option. Resolves: #1975329
  - useradd: avoid generating an empty subid range
  - Clean spec file


author: Javier Martinez Canillas <javierm@redhat.com> - 15-7
changelog:
  - Make EFI variable copying fatal only on secureboot enabled systems
    Resolves: rhbz#1715879
  - Fix booting shim from an EFI shell using a relative path
    Resolves: rhbz#1717061


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Peter Jones <pjones@redhat.com> - 15-13
changelog:
  - New signing keys
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Pavel Moravec <pmoravec@redhat.com> - 4.1-4
changelog:
  - [archive] skip copying SELinux context for /proc and /sys everytime
    Resolves: bz1965002
  - Load maps from all archives before obfuscation
    Resolves: bz1967110
  - Multiple fixes in man pages
    Resolves: bz1967111
  - [ds] Mask password and encryption keys in ldif files
    Resolves: bz1967112
  - [report] add --cmd-timeout option
    Resolves: bz1967113
  - [cups] Add gathering cups-browsed logs
    Resolves: bz1967114
  - [sssd] Collect memory cache / individual logfiles
    Resolves: bz1967115
  - Collect ibmvNIC dynamic_debugs
    Resolves: bz1967116
  - [pulpcore] add plugin for pulp-3
    Resolves: bz1967117
  - [saphana] remove redundant unused argument of get_inst_info
    Resolves: bz1967118
  - [networking] Add nstat command support
    Resolves: bz1967119
  - [snapper] add a new plugin
    Resolves: bz1967120


author: Pavel Moravec <pmoravec@redhat.com> - 4.1-6
changelog:
  - [networking] collect also tc filter show ingress
    Resolves: bz1985976
  - [cleaner] Only skip packaging-based files for the IP parser
    Resolves: bz1985982
  - [sssd] sssd plugin when sssd-common
    Resolves: bz1967718
  - Various OCP/cluster/cleanup enhancements
    Resolves: bz1985983
  - [options] allow variant option names in config file
    Resolves: bz1985985
  - [plugins] Set default predicate instead of None
    Resolves: bz1938874
  - [MigrationResults] collect info about conversions and
    Resolves: bz1959779


author: Pavel Moravec <pmoravec@redhat.com> = 4.1-8
changelog:
  - [report,collect] unify --map-file arguments
    Resolves: bz1985985
  - [rhui] add new plugin for RHUI 4
    Resolves: bz1992859
  - [username parser] Load usernames from `last` for LDAP users
    Resolves: bz1992861


author: Ondrej Dubaj <odubaj@redhat.com> - 3.34.0-1
changelog:
  - Updated to version 3.34.0 (https://sqlite.org/releaselog/3_34_0.html)
  - Enabled fts3conf.test on s390x and ppc64 architectures


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.1-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1938876 - review of important potential issues detected by static analyzers in sssd-2.4.1-1.el9
  - Resolves: rhbz#1942277 - Wrong default debug level of sssd tools


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: William Poteat <wpoteat@redhat.com> 1.29.10-1
changelog:
  - Switch dates returned by D-Bus ListInstalledProducts to ISO 8601
    (ptoscano@redhat.com)
  - 1793501: switch dates returned by D-Bus GetPool to ISO 8601
    (ptoscano@redhat.com)
  - Add format_iso8601_date.format_iso8601_date() (ptoscano@redhat.com)
  - Make sure, re-register works for deb repos (suttner@atix.de)
  - 1863039: Fix issue with dnf/yum variables (jhnidek@redhat.com)
  - 1879856: suppress the warning message when setting syspurpose values
    (tmerry@redhat.com)
  - ENT-2779: call format() on translated string (ptoscano@redhat.com)
  - 1930037: cockpit: ensure /etc/pki/product exist (ptoscano@redhat.com)
  - 1886772: Clear content access mode cache on refresh (csnyder@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Reword ambiguous message (ptoscano@redhat.com)
  - Properly use ungettext for plural forms (ptoscano@redhat.com)
  - cockpit: fix extraction of plural messages (ptoscano@redhat.com)
  - 1672805: 'Addons' is failing spell check and should be changed to 'Add-ons'
    to match documentation (tmerry@redhat.com)
  - 1731109: improve man page & help for registering with --force option
    (tmerry@redhat.com)
  - 1749395: Proper handling when a user does not have an org
    (wpoteat@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1916540: Negative proxy tests occasionally encounter the wrong exception
    handling (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - ENT-3711: Fix a couple of typos (tmerry@redhat.com)
  - ENT-2468: Use format strings with named arguments for translator context
    (tmerry@redhat.com)
  - ENT-3276: refactor test_managercli.py by modules (ptoscano@redhat.com)
  - 1897767: what does 'No Valid values provided for usage' mean to the user
    (tmerry@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Replace optparse with argparse (wpoteat@redhat.com)
  - Fix variable for RestlibException exception (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Correction for condition that was breaking 3 nosetests (wpoteat@redhat.com)
  - maybe this time? (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Remove extra '%' in string (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - cockpit: Adjust for changed services image (martin@piware.de)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (wpoteat@redhat.com)
  - Update translation files (noreply@weblate.org)
  - 1897767: what does 'No valid values provided for usage' mean to the user
    (tmerry@localhost.localdomain)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 1856832: add --org=ORG to the ROLE OPTIONS, USAGE OPTIONS and ADDONS OPTIONS
    (tmerry@localhost.localdomain)
  - 1880920: check for invalid addons (ptoscano@redhat.com)
  - Add AbstractSyspurposeCommand._are_provided_values_valid helper
    (ptoscano@redhat.com)
  - 1924166: improve man text of syspurpose --show (ptoscano@redhat.com)
  - 1646718 debrand a message so that it doesn't say Red Hat Subscription Manager
    but instead an entitlement server (tmerry@localhost.localdomain)


author: William Poteat <wpoteat@redhat.com> 1.29.11-1
changelog:
  - Add subscription-manager dependency to apt-katello-transport (kolb@atix.de)
  - 1898552: refactor/fix collection of IP v4/v6 address info
    (ptoscano@redhat.com)
  - cockpit: Enable TLS for mock insights server (martin@piware.de)
  - adding timoeout to jenkins pipeline (#2585) (jmolet@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1819555: cockpit: translate untranslatable messages (ptoscano@redhat.com)
  - Replace hardcoded errno value with constant (ptoscano@redhat.com)
  - 1940658: bash: complete also the syspurpose subcommand (ptoscano@redhat.com)
  - 1878736: use our i18n functions instead of dnf ones (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.12-1
changelog:
  - 1953069: bash: fix listing of config options (#2609) (ptoscano@redhat.com)
  - Cleanup old *.egg-info dirs in %post (csnyder@redhat.com)
  - 1953047: bash: drop completion for subscribe & unsubscribe
    (ptoscano@redhat.com)
  - 1952228: fix formatting of log error messages (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.13-1
changelog:
  - Updated translations for Korean, Chinese (simiplified, zh_CN), Italian
  - Refactoring of cloud collector/detector and facts (#2515)
    (jhnidek@redhat.com)
  - 1920020: show error message when setting invalid default_log_level as well as
    on every run until changed to a valid value (tmerry@redhat.com)
  - 1959048: improve wording for missing or empty syspurpose values
    (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1960765: fix typo "explicity" in man page (ptoscano@redhat.com)
  - cockpit: Lower cockpit-ws dependency to Recommends (martin@piware.de)
  - test: Robustify and trim down cockpit-ws installation (martin@piware.de)
  - jenkins: switch stylish job to Python 3 (ptoscano@redhat.com)
  - flake8: add more locally found issues (ptoscano@redhat.com)
  - Remove extra whitespace before '(' (ptoscano@redhat.com)
  - 1952879: extract messages from argparse instead of optparse
    (ptoscano@redhat.com)
  - po: set Project-Id-Version to rhsm (ptoscano@redhat.com)
  - po: fuzzy messages with invalid/missing placeholders (ptoscano@redhat.com)
  - po: ko: manually fix placeholder (ptoscano@redhat.com)
  - Update script reference to base branch to main (wpoteat@redhat.com)
  - 1896715: Set proper read permissions on certs (wpoteat@redhat.com)
  - cockpit: Use PF4 based empty state (mmarusak@redhat.com)
  - cockpit: Drop uglification (mmarusak@redhat.com)
  - cockpit: Use 'noreferrer' for external links (mmarusak@redhat.com)
  - cockpit: Add `standard-jsx` eslint plugin (mmarusak@redhat.com)
  - cockpit: Remove loaders for .es6 files (mmarusak@redhat.com)
  - cockpit: Add package-lock.json to .gitignore (mmarusak@redhat.com)
  - build: drop version requirements for pep8 and flake8 (ptoscano@redhat.com)
  - build: remove pyqver test requirement (ptoscano@redhat.com)
  - Add flake8 configuration (ptoscano@redhat.com)
  - Add missing second empty line after class/function (ptoscano@redhat.com)
  - Fix some over-indented code blocks (ptoscano@redhat.com)
  - jenkins: disambiguate virtualenv names (ptoscano@redhat.com)
  - 1956654: Fix issue with proxy and cockpit plugin (jhnidek@redhat.com)
  - Releaser for Centos (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.14-1
changelog:
  - Drop more files/references of old standalone syspurpose tool
    (ptoscano@redhat.com)
  - 1967780: improve placeholders in help text (ptoscano@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1898563: move syspurpose subcommands within the 'syspurpose' command
    (ptoscano@redhat.com)
  - Rename internal variable for syspurpose --show (ptoscano@redhat.com)
  - Drop command name from args when parsing them (ptoscano@redhat.com)
  - 1941904: disable initial-setup in RHEL >= 9 (ptoscano@redhat.com)
  - 1959048: improve wording for invalid syspurpose values (ptoscano@redhat.com)
  - Enable subman to run normally in containers for development/test
    (csnyder@redhat.com)
  - Fixed reporting of AWS cloud facts (null value) (jhnidek@redhat.com)
  - cockpit: Test also system purpose (mmarusak@redhat.com)
  - cockpit: Use current PF4 components and design (mmarusak@redhat.com)
  - test: Update cockpit test/common library (mmarusak@redhat.com)
  - cockpit: Update babel (mmarusak@redhat.com)
  - cockpit: Sync lib/patternfly with Cockpit (mmarusak@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.15-1
changelog:
  - 1941904: actually disable initial-setup in RHEL >= 9, and Fedora too (#2675)
    (ptoscano@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.16-1
changelog:
  - 1941904: remove packages (#2692)
    (31166354+tlhmerry9@users.noreply.github.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Move cloud detector/collector to cloud-what package (#2680)
    (jhnidek@redhat.com)
  - 1975552: add '[SUBMODULE]' in syspurpose usage string (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1973807: fix wording on error when listing syspurpose values (#2684)
    (ptoscano@redhat.com)
  - 1975552: remove extra '[OPTIONS]' from syspurpose usage string (#2682)
    (ptoscano@redhat.com)
  - Make Azure cloud collector more reliable (#2645) (jhnidek@redhat.com)
  - 1967210: Do not print warning, when valid value is provided
    (jhnidek@redhat.com)
  - 1968420: improve description of rhsm.conf format (ptoscano@redhat.com)
  - Delete server repo file (suttner@atix.de)


author: Christopher Snyder <csnyder@redhat.com> 1.29.17-1
changelog:
  - Remove no arch from python3-cloud-what package (csnyder@redhat.com)
  - 1938878: Fix issues discovered by static code analyzers (#2644)
    (jhnidek@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.18-1
changelog:
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - 1976324: Added cloud_what to log root namespaces (jhnidek@redhat.com)
  - Slightly improve our container detection (#2611) (ptoscano@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - 1976225: read lscpu from its JSON output if available (#2699)
    (ptoscano@redhat.com)
  - 1975589: Correct typo in dnf plugin message (wpoteat@redhat.com)
  - 1924126: Fix profile upload on AWS systems (jhnidek@redhat.com)


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p1-1
changelog:
  - rebase to 1.9.5p1
  Resolves: rhbz#1902758
  - fixed double free in sss_to_sudoers
  Resolves: rhbz#1885874
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1915055
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1915054


author: Matthew Miller <mattdm@fedoraproject.org> - 1.9.5p2-1
changelog:
  - rebase to 1.9.5p2
  Resolves: rhbz#1920611
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1920618


author: Zoltan Fridrich <zfridric@redhat.com> - 1.9.5p2-2
changelog:
  - change ldap.conf to sudo-ldap.conf
  Resolves: rhbz#1908882
  - remove /usr/local/* from secure_path
  Resolves: rhbz#1908923
  - fixed CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
  Resolves: rhbz#1916655
  - fixed CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
  Resolves: rhbz#1917039
  - fixed CVE-2021-3156 sudo: Heap buffer overflow in argument parsing
  Resolves: rhbz#1917735


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-5
changelog:
  RHEL 9 BETA
  - sync with rhel8 spec
  Resolves: rhbz#1908882
  Resolves: rhbz#1942383
  Resolves: rhbz#1946707
  Resolves: rhbz#1946709
  Resolves: rhbz#1981278


author: Radovan Sroka <rsroka@redhat.com> - 1.9.5p2-7
changelog:
  - utmp resource leak in sudo
  Resolves: rhbz#1986579
  - sudo does not list /etc/dnf/protected.d/sudo.conf in the rpm config files listing
  Resolves: rhbz#1997030
  - sudo uses Recommends for sudo-python-plugin(x86-64) = 1.9.5p2-2.el9 and vim-minimal
  Resolves: rhbz#1947908
  - review of important potential issues detected by static analyzers in sudo-1.9.5p2-2.el9
  Resolves: rhbz#1938879


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Javier Martinez Canillas <javierm@redhat.com> - 6.04-0.13
changelog:
  - Fix a bunch of annocheck problems (pjones)
  - Drop x86_64 ExclusiveArch for tftpboot subpackage
  - Make tftpboot subpackage completely noarch (yselkowi)


author: systemd maintenance team <systemd-maint@redhat.com> - 248-3
changelog:
  - rfkill: don't compare values of different signedness (#1931710)
  - rfkill: fix the format string to prevent compilation error (#1931710)


author: systemd maintenance team <systemd-maint@redhat.com> - 248-5
changelog:
  - Revert "rfkill: fix the format string to prevent compilation error" (#1931710)
  - Revert "rfkill: don't compare values of different signedness" (#1931710)
  - rfkill: add some casts to silence -Werror=sign-compare (#1931710)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: Jeff Law <law@redhat.com> - 1:1.9.11-5
changelog:
  - Re-enable -Wstringop-overflow and instead make the problematical
    pointer volatile to avoid the false positive diagnostic


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.7-4
changelog:
  - Move texlive-tex files to more approriate location again, this
    time in sync with dropping texlive-texinfo from texlive
    Resolves: #1719379


author: John Kacur <jkacur@redhat.com> - 0.15-1
changelog:
  - Rebase to tuna-0.15
  - This includes changes to remove the python-schedutils dependency
  Resolves: rhbz#1890541


author: John Kacur <jkacur@redhat.com> - 0.15-2
changelog:
  - Remove python3-schedutils from the Requires in the spec file
  - Update the URL in the spec file
  Resolves: rhbz#1890541


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.15.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1874052
    - added plugin service for linux services control
      resolves: rhbz#1869991
    - scheduler: added default_irq_smp_affinity option
      resolves: rhbz#1896348
    - bootloader: skip boom managed BLS snippets
      resolves: rhbz#1901532
    - scheduler: added perf_process_fork option to enable processing of fork
      resolves: rhbz#1894610
    - scheduler: added perf_mmap_pages option to set perf buffer size
      resolves: rhbz#1890219
    - bootloader: fixed cmdline duplication with BLS and grub2-mkconfig
      resolves: rhbz#1777874


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Patsy Griffin <patsy@redhat.com> - 2020b-1
changelog:
  - Rebase to tzdata-2020b
    - Yukon timezones represented by America/Whitehorse and
      America/Dawson will change time zone rules from -08/-07 to
      permanent -07 on 2020-11-01, not on 2020-03-08 as 2020a had it.
    - The most recent winter(+08)/summer(+11) transition for Casey Station,
      Antarctica was 2020-10-04 00:01.
    - Remove obsolete files pacificnew, systemv, and yearistype.sh
      from the distribution.


author: Patsy Griffin <patsy@redhat.com> - 2020d-1
changelog:
  - Rebase to tzdata-2020d including changes from tzdata-2020c
    - Palestine will end summer time on 2020-10-24 rather than the
      predicted 2020-10-31.
    - Fiji starts DST later than usual, on 2020-12-20.
    - Rearguard now provides an empty file pacificnew to support
      downstream software that expects it.


author: Patsy Griffin <patsy@redhat.com> - 2020f-1
changelog:
  - Rebase to tzdata-2020f including changes for tzdata-2020e
    - tzdata-2020f fixes a bug in tzdata-2020e that caused an
      invalid zi file in rearguard format
    - Volgograd changes time zone from UTC+04 to UTC+03 on 2020-12-27.
    - Australia/Currie is identical to Australia/Hobart for all
      timestamps since 1970 and was therefore created by mistake,
      now moved to the "backward" file.


author: Sérgio Basto <sergio@serjux.com> - 2.6.0-3
changelog:
  - Use make macros (https://src.fedoraproject.org/rpms/usb_modeswitch/pull-request/1)
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Sérgio Basto <sergio@serjux.com> - 2.6.1-1
changelog:
  - Update usb_modeswitch to 2.6.1
  - Drop patch1, http://www.draisberghof.de/usb_modeswitch/bb/viewtopic.php?f=2&t=2733
  - Drop BR jimtcl-devel, if we don't install dynlink-dispatcher


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Karel Zak <kzak@redhat.com> - 2.36.1-2
changelog:
  - remove unused patches
  - remove versions and seq.numbers from patch names
  - fix mount "symfollow" issue (upstream patch)


author: Karel Zak <kzak@redhat.com> - 2.36.2-1
changelog:
  - upgrade to stable upstream 2.36.2
    https://mirrors.edge.kernel.org/pub/linux/utils/util-linux/v2.36/v2.36.2-ReleaseNotes


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: John W. Linville <linville@redhat.com> - 2019.06.03-5
changelog:
  - Remove patch preventing install of regulatory.bin.5 man page
  - Include regulatory.bin.5 man page in distributed files


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


