# changelog

author: Pavel Hrdina <phrdina@redhat.com> - 5.0.0-1
changelog:
  - Rebased to virt-manager-5.0.0 (RHEL-46783)
  - The rebase also fixes the following bugs:
      RHEL-50653, RHEL-65105, RHEL-62960, RHEL-46282, RHEL-65371
      RHEL-65189, RHEL-66768


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.5.4-5
changelog:
  - RHEL patches:
    * Select correct qemu binary for -o qemu mode
    * Disable the --qemu-boot / -oo qemu-boot option
    * Fix list of supported sound cards to match RHEL qemu
    * Fixes for libguestfs-winsupport
    * -i disk: force VNC as display
    * point to KB for supported v2v hypervisors/guests
    * Remove -o glance
    * Remove the --in-place option
    * tests: Remove btrfs test
    * Remove --block-driver option
  - Remove input from Xen
    resolves: RHEL-37687
  - Remove -o rhv, -o rhv-upload and -o vdsm modes
    resolves: RHEL-36712


author: Richard W.M. Jones <rjones@redhat.com> - 1:2.7.1-4
changelog:
  - Rebase to virt-v2v 2.7.1
    resolves: RHEL-56814
  - Replace Jansson with json-c
    resolves: RHEL-65297
  - Find drivers for win2025 guests
    resolves: RHEL-65009
  - in-place: Add new -O option to write inspector XML
    resolves: RHEL-70538
  - mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
    resolves: RHEL-78505
  - convert: Use yum/apt/... for package removals
    resolves: RHEL-78657


author: Colin Walters <walters@verbum.org> - 1.7.0-5
changelog:
  - Rebuild with latest vhost-user-backend; xref
    https://gitlab.com/virtio-fs/virtiofsd/-/issues/62#note_1584371000


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.11.1-1
changelog:
  - Update to upstream version 1.11.1 [RHEL-48645]
  - Resolves: RHEL-48645
    (Rebase virtiofsd to latest version for RHEL 10.0 Beta)


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.13.0-1
changelog:
  - Rebase to 1.13.0 [RHEL-69290]
  - Resolves: RHEL-69290
    (Rebase virtiofsd to latest version for RHEL 10.0)


author: Daiki Ueno <dueno@redhat.com> - 1.24.5-5
changelog:
  - Revert back to using GnuTLS as the TLS backend
  - Use bundled implementation of MD4 for NTLM
    Resolves: RHEL-69748 - wget cannot open pkcs11 uri


author: Michal Ruprich <mruprich@redhat.com> - 1:4.4.2-1
changelog:
  - Resolves: RHEL-69442 - Rebase wireshark to 4.4.2
  - Resolves: RHEL-68453 - Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
  - Resolves: RHEL-68452 - Buffer Over-read in Wireshark


author: Tomas Halman <thalman@redhat.com> - 1.2.39-1
changelog:
  - Resolves: RHEL-46771
    Rebase to version 1.2.39
    Fix openssl engine dependency
    Stop building gcrypt and gnutls implementations


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.1-4
changelog:
  - Remove unneeded build dependencies on xorg-x11-util-macros and libXpm
  - Remove unneeded build dependency on wayland-eglstream-protocols (RHEL-66317)


author: Olivier Fourdan <ofourdan@redhat.com> - 24.1.5-2
changelog:
  - CVE fix for: CVE-2025-26594 (RHEL-79127), CVE-2025-26595 (RHEL-79131),
                 CVE-2025-26596 (RHEL-79142), CVE-2025-26597 (RHEL-79144),
                 CVE-2025-26598 (RHEL-79145), CVE-2025-26599 (RHEL-79147),
                 CVE-2025-26600 (RHEL-79155), CVE-2025-26601 (RHEL-79151)


author: Stanislas Faye <sfaye@redhat.com> 1:1.48.4-1
changelog:
  - Update to 1.48.4 release
  - Support matching a OVS system interface by MAC address (RHEL-34617)
  - When looking up the system hostname from the reverse DNS lookup of
    addresses configured on interfaces, NetworkManager now takes into
    account the content of /etc/hosts (RHEL-33435)


author: Íñigo Huguet <ihuguet@redhat.com> - 1:1.48.10-1
changelog:
  - Unblock the autoconnect for children when parent is available (RHEL-46904)
  - Fix crash produced by malformed LLDP package when debug logging (RHEL-46199)
  - Support reapplying bridge-port VLANs (RHEL-26750)
  - Add small backoff time before resync (RHEL-29902)


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.3-1
changelog:
  - Update translations from Weblate for rhel-10 (github-actions)
  - Add release note for NVMe-oF (vslavik)
    Related: RHEL-27200
  - Add a NVMe-FC tab to the Advanced Storage screen (vslavik)
    Resolves: RHEL-27200
  - Update the .glade file for the Advanced Storage screen (vponcova)
    Related: RHEL-27200
  - Filter out NVMe over Fibre Channel from local disks (vslavik)
    Resolves: RHEL-27200
  - Install nvme-cli on boot.iso (vslavik)
    Resolves: RHEL-27200
  - Add release note for new ping command in Dracut (jkonecny)
    Related: RHEL-32760
  - Add ping tool to Dracut (jkonecny)
    Resolves: RHEL-32760


author: Jiri Konecny <jkonecny@redhat.com> - 40.22.3.4-1
changelog:
  - Do not require libreport on RHEL 10 (mkolman)
    Resolves: RHEL-35676
  - Update translations from Weblate for rhel-10 (github-actions)
  - Update translations from Weblate for rhel-10 (github-actions)


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.5-1
changelog:
  - Adjust to freerdp and GNOME package changes (mkolman)
    Resolves: RHEL-38407
  - Replace VNC support with GNOME remote desktop (mkolman)
    Resolves: RHEL-38407
  - Rebuild Ask VNC spoke (mkolman)
    Resolves: RHEL-38407
  - Update translations from Weblate for rhel-10 (github-actions)
  - Add RDP boot options & deprecate VNC boot options (mkolman)
    Resolves: RHEL-38407
  - Introduce GNOME remote desktop support (mkolman)
    Resolves: RHEL-38407
  - Rename usevnc flag & similar variables (mkolman)
    Resolves: RHEL-38407
  - Add unit tests for GkKeyboardManager and its API in localization module
    (rvykydal)
    Resolves: RHEL-38399
  - Drop the X.Org server dependency (jexposit)
    Resolves: RHEL-38399
  - Drop xrdb (jexposit)
    Resolves: RHEL-38399
  - Drop xrandr (jexposit)
    Resolves: RHEL-38399
  - Drop libxklavier (jexposit)
    Resolves: RHEL-38399
  - Use GNOME Kiosk's API in LayoutIndicator (jexposit)
    Resolves: RHEL-38399
  - Setup gdbus-codegen (jexposit)
    Resolves: RHEL-38399
  - Use GNOME Kiosk's API in XklWrapper (jexposit)
    Resolves: RHEL-38399
  - Add GNOME Kiosk keyboard manager class (jexposit)
    Resolves: RHEL-38399


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.7-1
changelog:
  - pykickstart: Use RHEL10 kickstart commands (bcl)
    Related: RHEL-36831
  - Fix starting anaconda on z/VM and LPAR s390x (jstodola)
    Resolves: RHEL-45516
  - Fix kickstart --dhcpclass option application (rvykydal)
    Resolves: RHEL-38998
  - Write a warning rescue selinux (akankovs)
    Resolves: RHEL-38389


author: Katerina Koukiou <kkoukiou@redhat.com> - 40.22.3.8-1
changelog:
  - The RPM tooling generates the compiled python so having automake do it is
    redundant (kkoukiou)
    Resolves: RHEL-46593


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.9-1
changelog:
  - unit_tests: drop DASDDevice.opts like in related blivet change (maier)
    Resolves: RHEL-24057
  - network: use consolidated s390 device configuration (#1802482,#1937049)
    (maier)
    Resolves: RHEL-24057
  - write persistent config of any (dasd,zfcp,znet) s390 devices to sysroot
    (#1802482,#1937049) (maier)
    Resolves: RHEL-24057
  - DASDDiscoverTask: use consolidated device configuration with zdev
    (#1802482,#1937049) (maier)
    Resolves: RHEL-24057


author: Radek Vykydal <rvykydal@redhat.com> - 40.22.3.10-1
changelog:
  - Cleanup remaining Xorg and VNC references and dead code (mkolman)
    Resolves: RHEL-41219
  - Do not create default wired connections for bond ports (rvykydal)
    Resolves: RHEL-50039
  - Consolidate code for dumping network connections (rvykydal)
    Related: RHEL-50039
  - Handle inst.rdp in Dracut (mkolman)
    Resolves: RHEL-41219
  - Deprecate kickstart modularity module (marusak.matej)
    Resolves: RHEL-36831


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.11-1
changelog:
  - Support the not-satellite: prefix for server hostname (mkolman)
    Related: RHEL-49661
  - Use the RHEL 10 version of the vnc kickstart command (mkolman)
    Resolves: RHEL-41219
    Resolves: RHEL-53844
  - Use proxy server also for FTP .treeinfo download (jkonecny)
    Resolves: RHEL-54009
  - Do not mark ancestors of device with source or stage2 as protected (rvykydal)
    Resolves: RHEL-35701


author: Martin Kolman <mkolman@redhat.com> - 40.22.3.12-1
changelog:
  - Redirect output of various GNOME related tools to Journal (mkolman)
    Resolves: RHEL-47097
  - Remove leftover debugging message (mkolman)
    Resolves: RHEL-47097
  - Redirect Anaconda main process stderr to Journal (mkolman)
    Resolves: RHEL-47097
  - network: ignore kickstart configuration of nBFT devices (rvykydal)
    Resolves: RHEL-46014
  - network: do not dump configurations of nBFT devices (rvykydal)
    Resolves: RHEL-46014
  - network: ignore nBFT devices connections in network configuration (rvykydal)
    Resolves: RHEL-46014
  - network: add a test for ignoring ifname=nbft* for device renaming (rvykydal)
    Resolves: RHEL-46014
  - network: do not create empty dir for only ifname=nbft* options (rvykydal)
    Resolves: RHEL-46014
  - network: Avoid creating link files for 'nbft' interfaces (tbzatek)
    Resolves: RHEL-46014


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 12.46-1
changelog:
  - Annocheck: Improve detection of -mbranch-protection option.  (RHEL-526)
  - Clang Plugin: Add global-file-syms option.
  - LLVM Plugin: Add global-file-syms option.
  - Plugins: Add support for ANNOBIN environment variable.
  - Built By: Add more lang types.


author: Nick Clifton <nickc@redhat.com> - 12.47-1
changelog:
  - Clang & LLVM Plugins: Allow environment to override fortification level.  (RHEL-30579)
  - Spec File: Override fortification level and set it to 3.


author: Nick Clifton <nickc@redhat.com> - 12.52-1
changelog:
  - Annocheck: Add OpenSSL Engine test.  (PTG-319)
  - Annocheck: Test for gaps even when only one note is present.
  - Annocheck: Skip AArch64 branch protection test for GO binaries.
  - GCC Plugin: Disable active check for -Wimplicit-int for non-C sources.  (#2275884)
  - Annocheck: Ignore stack checks for AMD GPU binaries.
  - Annocheck: Do not produce FAIL result for i686 binaries in the RHEL-10 profile.
  - Annocheck: Test for __stack_chk_guard being writeable.


author: Nick Clifton <nickc@redhat.com> - 12.53-1
changelog:
  - Annocheck: Defer passing the branch protection test until all notes have been checked.
  - GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)


author: Nick Clifton <nickc@redhat.com> - 12.54-1
changelog:
  - Spec File: Add annobin plugin document directory to the files section.  (#2279779)
  - Annocheck: Remove some false positives for Rust binaries.  (#2280239) (RHEL-37267)


author: Sergei Petrosian <spetrosi@redhat.com> - 2.0.1-1
changelog:
  - Update role to version 2.0.1 to enhance AD integration
    Resolves: RHEL-877
    Resolves: RHEL-878
    Resolves: RHEL-879
    Resolves: RHEL-880


author: Sergei Petrosian <spetrosi@redhat.com> - 2.2.0-1
changelog:
  - Support installing SQL Server 2022 on RHEL 9 and running as a selinux-confined application
    Resolves: RHEL-16342
  - Remove unnecessary variable and RPM requirements for read-scale clusters
    Resolves: RHEL-3540
  - Add the mssql_ha_prep_for_pacemaker variable to configure SQL Server for Pacemaker
    Resolves: RHEL-19091
  - Deprecate `mssql_ha_cluster_run_role` for `mssql_manage_ha_cluster`
    Resolves: RHEL-19092


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Highlights:
    - Support for GECOS, street, smb and idp attributes in ipauser module
    - Support for indirect maps in ipaautomountmap module
    - Update of user_auth_type choices in ipaconfig and ipauser modules
    - Update of auth_ind choices in ipahost and ipaservice modules
    - Upstream test and environment enhancements
    - Documentation updates


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Highlights:
    - New idoverridegroup management module.
    - New idoverrideuser management module.
    - New idview management module.
    - New idp management module.
    - Bug fixes and CI improvements.


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Highlights:
    - Fix ipaserver deployment on CentOS 8 Stream
    - Fix ipaclient deployment with automount
    - Fix ipaclient OTP error reporting
    - Add missing support for renaming groups and users
    - Idempotency fixes in several modules


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-2
changelog:
  - The package now provides the Ansible collection freeipa.ansible_freeipa
  - New build requires for ansible-core and python
  - The tests are part of the collection, new provides and obsoletes for the
    -tests sub package


author: Thomas Woerner <twoerner@redhat.com> - 1.13.1-1
changelog:
  - Update to version 1.13.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.13.1
    Resolves: RHEL-35566
  - New inventory plugin
    Resolves: RHEL-38947
  - Enable batch command as backend
    Resolves: RHEL-38944
  - New collection sub package
    Resolves: RHEL-38930


author: Maxwell G <gotmax@e.email> - 2.2.7-2
changelog:
  - BuildRequire ansible-packaging on Fedora
  - Resolves: rhbz#2126889
  - Fix inverted conditionals and build/install the collection using ansible-galaxy
  - Keep ansible-lint disabled for now
  - Remove unnecessary macros
  - Exclude files with galaxy.yml build_ignore


author: Frederic Berat <fberat@redhat.com> - 2.71-4
changelog:
  - Cherry-pick: Fix typo in variable name (#2132715)
  - Backport: Fix testsuite failures with bash 5.2


author: Frederic Berat <fberat@redhat.com> - 1.16.5-9
changelog:
  - Fix tests environment failures due to LDFLAGS being set globally
  - Remove ExclusiveArch as there is no java dependency anymore


author: Nick Clifton <nickc@redhat.com> - 2.41-43
changelog:
  - Do not enable '-z separate code' by default - allow packages to choose to do it.
  - Add fix for discarded section counting for AArcch64 DT_RELR relocs.  (RHEL-42765)


author: Jindrich Novy <jnovy@redhat.com> - 2:1.37.1-1
changelog:
  - buildah-1.37.1-1.el10
  - update to https://github.com/containers/buildah/releases/tag/v1.37.1
  - Related: RHEL-34195


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0.2-11
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
  - drop java binding for platforms not in %{java_arches}


author: Kefu Chai <kefu.chai@scylladb.com> - 17.0.6-6
changelog:
  - Fix the too-early instantiation of conditional "explict" by applying the patch
    of https://github.com/llvm/llvm-project/commit/128b3b61fe6768c724975fd1df2be0abec848cf6


author: Tulio Magno Quites Machado Filho <tuliom@redhat.com> - 18.1.8-1
changelog:
  - Update to LLVM 18.1.8 (RHEL-28056)
  - Remove llvm17 compat package (RHEL-30890)
  - Enable pie (RHEL-33489)


author: Packit <hello@packit.dev> - 318-1
changelog:
  - Storage: Extra confirmation before deleting non-empty partitions in Anaconda's Web UI
  - Discontinue Intel 32-bit support in Fedora, CentOS, and RHEL
  - cockpit.js: Get user primary group ID


author: Packit <hello@packit.dev> - 320-1
changelog:
  - pam-ssh-add: Fix insecure killing of session ssh-agent [CVE-2024-6126]
  - sosreport: Read report directory from sos config (fix page on Debian/Ubuntu)


author: Packit <hello@packit.dev> - 323-1
changelog:
  - metrics: Install valkey instead of redis on RHEL/CentOS 10
  - login: Prevent multiple logins in a single browser session
  - Update documentation links


author: Jindrich Novy <jnovy@redhat.com> - 1.0.5-2
changelog:
  - update to the latest upstream release https://github.com/containers/composefs/releases/tag/v1.0.5
  - Related: RHEL-39410


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.11-1
changelog:
  - conmon-2.1.11-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.11
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.12-1
changelog:
  - conmon-2.1.12-1.el10
  - update to https://github.com/containers/conmon/releases/tag/v2.1.12
  - Related: RHEL-34195


author: Pavol Zacik <pzacik@redhat.com> - 1:2.4.9-1
changelog:
  - CVE-2024-35235 cups: Cupsd Listen arbitrary chmod 0140777
  - RHEL-25804 Rebase CUPS to next upstream version - 2.4.9


author: Mark Wielaard <mjw@fedoraproject.org> - 5.0-7
changelog:
  - Refresh 0001-tests-Handle-zero-directory-entry-in-.debug_line-DWA.patch
  - Add new upstream patches:
    0001-use-READELF-not-readelf.patch
    0001-find-debuginfo-Pass-j-down-to-dwz.patch
    0002-configure.ac-Use-AC_LINK_IFELSE-for-gz-none-check.patch
    0003-configure.ac-Use-AC_LANG_PROGRAM-for-AC_LINK_IFELSE-.patch
    0004-scripts-find-debuginfo.in-Add-q-quiet.patch


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Pavel Reichl <preichl@redhat.com> - 3.34-1
changelog:
  - New upstream version (RHBZ#2178183)
  - Drop support for pmeblk https://github.com/axboe/fio/commit/04c1cdc


author: Iñaki Úcar <iucar@fedoraproject.org> - 3.3.1-3
changelog:
  - Require netlib from base package
  - Adapt license tag to SPDX
  - Add rpminspect.yaml file to skip tests with false positives


author: Ondrej Holy <oholy@redhat.com> - 2:3.5.1-1
changelog:
  - Update to 3.5.1 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041,
    CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658,
    CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.16
changelog:
  - update from trunk and releases/gcc-14 branch
    - GCC 14.1.0-rc1
    - PRs c++/93595, c++/99426, c++/106820, c++/107457, c++/109966, c++/111284,
  	c++/113141, c++/114078, c++/114393, c++/114426, c++/114600,
  	c++/114634, c++/114691, c++/114706, c++/114709, c++/114784,
  	c++/114795, c++/114888, c/92880, c/114780, d/111650, fortran/89462,
  	fortran/93678, fortran/102597, fortran/103471, fortran/103496,
  	fortran/113793, fortran/114739, fortran/114825, fortran/114959,
  	gcov-profile/114715, gcov-profile/114720, libgcc/114689,
  	libgcc/114755, libgcc/114762, libstdc++/93672, libstdc++/113386,
  	libstdc++/114750, libstdc++/114770, libstdc++/114803,
  	libstdc++/114863, lto/113208, lto/114574, middle-end/112938,
  	middle-end/114753, modula2/112893, modula2/114745, modula2/114807,
  	modula2/114811, modula2/114836, other/114738, preprocessor/114748,
  	rtl-optimization/114768, sanitizer/114687, sanitizer/114743,
  	target/110621, target/112431, target/112432, target/114416,
  	target/114668, target/114676, target/114696, target/114714,
  	target/114741, target/114752, target/114783, target/114794,
  	target/114810, target/114837, target/114861, target/114885,
  	testsuite/113706, testsuite/114744, testsuite/114768,
  	tree-optimization/114403, tree-optimization/114666,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114769,
  	tree-optimization/114787, tree-optimization/114792,
  	tree-optimization/114799, tree-optimization/114832,
  	tree-optimization/114883
  - switch to --with-arch_64=x86-64-v3 for latest RHEL
  - remove obsolete reason for not shipping *.gch* files


author: Marek Polacek <polacek@redhat.com>
changelog:
  - enable hardening and configure with --enable-host-pie --enable-host-bind-now
    on RHEL
  - don't require rocm-runtime on RHEL


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Kevin Buettner <kevinb@redhat.com> - 14.1-8
changelog:
  - Backport upstream workaround for GCC 14 problem which is causing
    GDB internal errors (RHBZ 261580, Tom de Vries).


author: Arjun Shankar <arjun@redhat.com> - 2.39-15
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 6ade91c21140d8c803c289932dbfc74537f65a1f:
  - elf: Avoid some free (NULL) calls in _dl_update_slotinfo
  - misc: Add support for Linux uio.h RWF_NOAPPEND flag
  - i386: Disable Intel Xeon Phi tests for GCC 15 and above (BZ 31782)
  - Reinstate generic features-time64.h
  - Always define __USE_TIME_BITS64 when 64 bit time_t is used
  - socket: Use may_alias on sockaddr structs (bug 19622)
  - parse_fdinfo: Don't advance pointer twice [BZ #31798]
  - LoongArch: Fix undefined `__memset_aligned` reference in ld.so linking.
  - socket: Add new test for connect
  - libsupport: Add xgetpeername
  - x86_64: Fix missing wcsncat function definition without multiarch (x86-64-v4)


author: Arjun Shankar <arjun@redhat.com> - 2.39-16
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 7f9f25f255ee2c00178779fbce502f4b94b848b9:
  - Linux: Include <dl-symbol-redir-ifunc.h> in dl-sysdep.c
  - x86: Properly set x86 minimum ISA level [BZ #31883]
  - x86: Properly set MINIMUM_X86_ISA_LEVEL for i386 [BZ #31867]
  - localedata: ssy_ER: Fix syntax error
  - malloc: New test to check malloc alternate path using memory obstruction
  - malloc: Improve aligned_alloc and calloc test coverage.
  - malloc/Makefile: Split and sort tests
  - x86/cet: fix shadow stack test scripts


author: Arjun Shankar <arjun@redhat.com> - 2.39-21
changelog:
  - Sync with upstream branch release/2.39/master,
    commit 4bdcc1963bc2b5ba5f8e319e402d9eb2cb6096c1:
  - manual: make setrlimit() description less ambiguous
  - manual/stdio: Clarify putc and putwc
  - malloc: add multi-threaded tests for aligned_alloc/calloc/malloc
  - malloc: avoid global locks in tst-aligned_alloc-lib.c
  - resolv: Track single-request fallback via _res._flags (bug 31476)
  - resolv: Do not wait for non-existing second DNS response after error (bug 30081)
  - resolv: Allow short error responses to match any query (bug 31890)
  - elf: Fix localplt.awk for DT_RELR-enabled builds (BZ 31978)
  - Fix usage of _STACK_GROWS_DOWN and _STACK_GROWS_UP defines [BZ 31989]
  - Linux: Make __rseq_size useful for feature detection (bug 31965)
  - elf: Make dl-rseq-symbols Linux only
  - nptl: fix potential merge of __rseq_* relro symbols
  - s390x: Fix segfault in wcsncmp [BZ #31934]
  - stdlib: fix arc4random fallback to /dev/urandom (BZ 31612)
  - math: Provide missing math symbols on libc.a (BZ 31781)
  - math: Fix isnanf128 static build (BZ 31774)
  - math: Fix i386 and m68k exp10 on static build (BZ 31775)
  - math: Fix i386 and m68k fmod/fmodf on static build (BZ 31488)
  - posix: Fix pidfd_spawn/pidfd_spawnp leak if execve fails (BZ 31695)


author: Florian Weimer <fweimer@redhat.com> - 2.39-22
changelog:
  - Support clearing options in /etc/resolv.conf, RES_OPTIONS with a - prefix
  - Introduce the strict-error/RES_STRICTERR stub resolver option (RHEL-18039)


author: Yaakov Selkowitz <yselkowi@redhat.com> - 44.0-2
changelog:
  - Enable bundled deps in RHEL builds
  - Update bundled provides
  - Only use Fedora branding in Fedora builds


author: Archana <aravinda@redhat.com> - 1.22.2-6
changelog:
  - Corrected golang.spec to use --no-backup-if-mismatch to avoid creating
    .orig files - Resolves: RHEL-34671


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-13
changelog:
  - Fixes coredump issue introduced by selinux
  - Patches out call to panic when trying to walk "/" directory


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-17
changelog:
  - Allows for postgreSQL datasource in selinux policy
  - grafana-cli wrapper script now allows for the gid to be 0


author: Andreas Gerstmayr <agerstmayr@redhat.com> 5.1.1-1
changelog:
  - update to 5.1.1 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY


author: Sam Feifer <sfeifer@redhat.com> 5.1.1-4
changelog:
  - Move location of plugin from /usr/share/... to /usr/libexec/... because there is a binary executable


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.22.8-2
changelog:
  - Enable asfdemux, dvdlpcmdec, dvdsub, and realmedia plugins
  - Disable AMR plugins in RHEL builds
  - Resolves: rhbz#2236889


author: Jindrich Novy <jnovy@redhat.com> - 6:0.7.5-1
changelog:
  - gvisor-tap-vsock-0.7.5-1.el10
  - update to https://github.com/containers/gvisor-tap-
    vsock/releases/tag/v0.7.5
  - Related: RHEL-34195


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-3
changelog:
  - Add java patch to fix incorrect calculations for
    Africa/Casablanca starting in 2027. (RHEL-32178)
  - Remove hardcoded versioned path to javac.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <pats@redhat.com> - 2025a-1
changelog:
  Update to tzdata-2025a (RHEL-74296)
    - Paraguay is now permanently at -03. This impacts timestamps
      starting on 2025-03-22.
    - Includes improvements to pre-1991 data for the Philippines.
    - Etc/Unknown is now reserved.


author: Vit Mojzis <vmojzis@redhat.com> - 0.2.7-5
changelog:
  - Show diff when checking formatting
  - Fix several lint findings
  - Fix generating policy for Crio mounts


author: Packit <hello@packit.dev> - 2.3.12-1
changelog:
  - New Release 2.3.12 (lurcher)
  - Don't check state with shared env (lurcher)
  - Add --enable-singleenv option (lurcher)
  - Allow longer messages via SQLGetDiag (lurcher)
  - Add --enable-utf8ini flag and coding (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Fix possible seg faults with SQLAPI and pooling (lurcher)
  - Remove self-reference (Stefan)
  - Avoid implicit function declarations, for C99 compatibility (Florian Weimer)
  - Fix --enable-stats config error (lurcher)
  - Allow diagnostics to be retrieved on SQL_NO_DATA (Kevin Adler)
  - isql.1: Add information about passwords containing semicolons (Hugh McMaster)
  - isql.1: Various text updates (Hugh McMaster)
  - Export __clear_ini_cache from libodbcinst (lurcher)
  - Revert "Add call to atexit to clear the ini cache" (lurcher)
  - Add call to atexit to clear the ini cache (lurcher)
  - Add extra iusql connectionstring syntax (lurcher)
  - Allow longer connection strings (part 3) (lurcher)
  - Allow longer connection strings (part 2) (lurcher)
  - Allow longer connection strings (lurcher)
  - Fixed Connection String (Stefan)
  - Add extra connection syntax to isql help (lurcher)
  - Add extra logging for ODBCINST connect settings (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (and report warning) (lurcher)
  - Allow isql to handle SQLPrepare returning SQL_SUCCESS_WITH_INFO (lurcher)
  - Allow passing complete connection string into iusql (lurcher)
  - Remove __get_connection from cursor lib (lurcher)
  - Avoid failed build if clock_gettime() is not available (lurcher)
  - Update change log (lurcher)
  - DriverManager/_info.c: Get locale encoding on Windows. (Markus Mützel)
  - DriverManager/drivermanager.h: fix build without threads (Fabrice Fontaine)
  - Fix iconv handle leak with pooling (lurcher)
  - Fix buffer overrun (lurcher)
  - Create SECURITY.md (Nick Gorham)
  - Move to 2.3.12pre (lurcher)
  - Makefile.am: Do not install config.h (Hugh McMaster)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.26-1
changelog:
  - Fix stylish issue in migrateconfiguration.py (jhnidek@redhat.com)
  - Added next rhel-9.x subversion to releasers.conf file. (jhnidek@redhat.com)
  - 2158710: Migrated virt-who.conf, when necessary (jhnidek@redhat.com)
  - Added documentation for the 'rhsm_insecure' option, for insecure connections
    (fernandez.santos.d@gmail.com)
  - Added configuration for rhel-9.x into releasers.conf (jhnidek@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.31.27-1
changelog:
  - ci: bump actions/checkout from 3 to 4
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Change /var/run -> /run (orion@nwra.com)
  - ci: add dependabot config for GitHub Actions (ptoscano@redhat.com)
  - Drop unused copy of python-daemon sources (ptoscano@redhat.com)
  - Migrate to SPDX license (jhnidek@redhat.com)
  - fix: disable complex tests for ESX (jhnidek@redhat.com)
  - fix: use ssl.SSLContext.wrap_socket for wrapping socket (jhnidek@redhat.com)
  - fix: stylish issue discovered by flake8 (jhnidek@redhat.com)
  - fix: Use ConfigParser and not SafeConfigParser (jhnidek@redhat.com)
  - spec: drop unused openssl dependency (ptoscano@redhat.com)
  - spec: hardcode/inline Python 3 variables (ptoscano@redhat.com)
  - spec: drop unused Group tag (ptoscano@redhat.com)
  - spec: do not Require setuptools (ptoscano@redhat.com)
  - spec: drop $RPM_BUILD_ROOT manual cleanup (ptoscano@redhat.com)
  - Updated README.md file to reflect current state (jhnidek@redhat.com)
  - Drop outdated/unused requirements (ptoscano@redhat.com)
  - Removed support for Jenkins (jhnidek@redhat.com)
  - Added support for GitHub actions (jhnidek@redhat.com)
  - Removed some unused parts of Makefile (jhnidek@redhat.com)
  - Removed support for docker (jhnidek@redhat.com)
  - spec: assume the python3-libvirt package name everywhere
    (ptoscano@redhat.com)
  - spec: drop redundant "release_number" variable (ptoscano@redhat.com)
  - spec: drop outdated variables and comments (ptoscano@redhat.com)
  - spec: drop six dependency (ptoscano@redhat.com)
  - Drop non-systemd support (ptoscano@redhat.com)
  - Feature: improve log message, when wrong value is provided
    (jhnidek@redhat.com)
  - Fix: default value for prism_central cannot be None (jhnidek@redhat.com)
  - spec: drop support for Python < 3 (ptoscano@redhat.com)
  - spec: drop support for Fedora < 36 (ptoscano@redhat.com)
  - spec: drop support for RHEL < 8 (ptoscano@redhat.com)


author: Jiri Hnidek <jhnidek@redhat.com> 1.32.1-1
changelog:
  - feat: Run Github CI action py.test every month (jhnidek@redhat.com)
  - fix: Added missing .el10 to virt-who.spec (jhnidek@redhat.com)
  - fix: Replace all warn() with warning() (jhnidek@redhat.com)


author: Rafael Guterres Jeffman <rjeffman@redhat.com> - 1.1.3-15
changelog:
  - Use "grep -E" instead of the obsoleted "egrep"
    Resolves: BZ#2140197
  - mark LICENSE as %license
  - Spec cleanup
  - Small patches, as a rule, are in git dist, to be more easy to read.
  - Migrated to SPDX license (noop)


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-1
changelog:
  - Update to 0.0.4
  - Require xorg-x11-xauth and dbus-daemon
  - Use mutter as default compositor if none is specified


author: Olivier Fourdan <ofourdan@redhat.com> - 0.0.4-2
changelog:
  - Backport fix for waitpid errors (RHEL-46355)
  - Suggest mutter since this is the default compositor


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-8
changelog:
  - ci-.distro-spec-add-missing-dependencies-for-cloud-init.patch [RHEL-41010]
  - Resolves: RHEL-41010
    ([RHEL-10] Add missing Requires dependency in cloud-init)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-10
changelog:
  - ci-feat-sysconfig-Add-DNS-from-interface-config-to-reso.patch [RHEL-44334]
  - ci-fix-jsonschema-Add-missing-sudo-definition-5418.patch [RHEL-44338]
  - ci-doc-update-examples-to-reflect-alternative-ways-to-p.patch [RHEL-44338]
  - ci-Update-pylint-version-to-support-python-3.12-5338.patch [RHEL-44599]
  - Resolves: RHEL-44334
    ([RHEL-10] cloud-init fails to configure DNS search domains)
  - Resolves: RHEL-44338
    ([RHEL-10] fix `SUDO` configuration schema for users and groups)
  - Resolves: RHEL-44599
    ([rhel-10] fix pylint error and support python 3.12)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-11
changelog:
  - ci-Deprecate-the-users-ssh-authorized-keys-property-516.patch [RHEL-45263]
  - ci-docs-Add-deprecated-system_info-to-schema-5168.patch [RHEL-45263]
  - ci-fix-schema-permit-deprecated-hyphenated-keys-under-u.patch [RHEL-45263]
  - Resolves: RHEL-45263
    (Deprecate the users ssh-authorized-keys property and permit deprecated hyphenated keys under users key [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-12
changelog:
  - ci-Support-metalink-in-yum-repository-config-5444.patch [RHEL-44918]
  - ci-fix-vmware-Set-IPv6-to-dhcp-when-there-is-no-IPv6-ad.patch [RHEL-35562]
  - Resolves: RHEL-44918
    ([RFE] Support metalink in yum repository config [rhel-10])
  - Resolves: RHEL-35562
    ([RHEL-10] It leaves the ipv6 networking config as blank in NM keyfile when config dhcp ipv6 with customization spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-13
changelog:
  - ci-fix-add-schema-rules-for-baseurl-and-metalink-in-yum.patch [RHEL-46874]
  - Resolves: RHEL-46874
    (Suggest to update schema to support metalink [rhel-10])


author: Miroslav Rezanina <mrezanin@redhat.com> - 24.1.4-14
changelog:
  - ci-fix-Clean-cache-if-no-datasource-fallback-5499.patch [RHEL-49740]
  - ci-Support-setting-mirrorlist-in-yum-repository-config-.patch [RHEL-49739]
  - Resolves: RHEL-49740
    ([Cloud-init] [RHEL-10] Password reset feature broken with CloudstackDataSource)
  - Resolves: RHEL-49739
    (Support setting mirrorlist in yum repository config [rhel-10])


author: Packit <hello@packit.dev> - 311-1
changelog:
  - Allow pasting multiple SSH keys at once in Create VM dialog
  - Fix detaching host device for running VMs


author: Packit <hello@packit.dev> - 89-1
changelog:
  - Use binary http channel for podman socket for non-UTF-8 robustness
  - Stop using obsolete cockpit.utf8_{de,en}coder() API
  - Fix tests for CentOS/RHEL 10


author: Paul Wouters <paul.wouters@aiven.io - 1.4.7-1
changelog:
  - Resolves: rhbz#2132747 conntrack-tools-1.4.7 is available
  - Add gpg source code verification
  - Removed patches that were merged upstream


author: Jindrich Novy <jnovy@redhat.com> - 2:2.231.0-1
changelog:
  - container-selinux-2.231.0-1.el10
  - update to https://github.com/containers/container-
    selinux/releases/tag/v2.231.0
  - Resolves: RHEL-30620


author: Jindrich Novy <jnovy@redhat.com> - 2:2.232.1-1
changelog:
  - container-selinux-2.232.1-1.el10
  - update to https://github.com/containers/container-
    selinux/releases/tag/v2.232.1
  - Related: RHEL-34195


author: HATAYAMA Daisuke <d.hatayama@fujitsu.com> - 1.6.3-2
changelog:
  - gcore.mk: fix mismatch of _FILE_OFFSET_BITS when building gcore.so
  - coredump: fix unexpected truncation of generated core files
  - elf: fix warning message caused by type mismatch of offset types
  - coredump: fix segmentation fault caused by type mismatch
  - x86: Fix failure of collecting vsyscall mapping due to change of enum type of vsyscall_mode
  - gcore: fix memory allocation failure during processing NT_AUXV note
  - gcore, defs: remove definitions and initializations for saved_auxv entries of offset and size tables
  - coredump: use MEMBER_{OFFSET, SIZE} instead of GCORE_{OFFSET, SIZE}


author: Jindrich Novy <jnovy@redhat.com> - 1.14.4-1
changelog:
  - crun-1.14.4-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.14.4
  - Resolves: RHEL-34649 RHEL-30621


author: Jindrich Novy <jnovy@redhat.com> - 1.16-1
changelog:
  - crun-1.16-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.16
  - Related: RHEL-34195


author: Jindrich Novy <jnovy@redhat.com> - 1.16.1-1
changelog:
  - crun-1.16.1-1.el10
  - update to https://github.com/containers/crun/releases/tag/1.16.1
  - Related: RHEL-34195


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Pavel Valena <pvalena@redhat.com> - 101-1
changelog:
  - Update to dracut 101.
  - Remove network-legacy module.
  - Additional fixes on top of rebase (see patches).


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-2
changelog:
  - edk2-MdeModulePkg-Warn-if-out-of-flash-space-when-writing.patch [RHEL-45261]
  - Resolves: RHEL-45261
    ([RHEL10] edk2 disconnects abnormally before loading the kernel)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20240524-3
changelog:
  - edk2-NetworkPkg-DxeNetLib-adjust-PseudoRandom-error-loggi.patch [RHEL-45829]
  - edk2-NetworkPkg-DxeNetLib-Reword-PseudoRandom-error-loggi.patch [RHEL-45829]
  - Resolves: RHEL-45829
    ([RHEL-10.0] edk2 hit Failed to generate random data )


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Kalev Lember <klember@redhat.com> - 3.92.0-1
changelog:
  - Update to 3.92.0
  - Remove gtk3 and gtk4 subpackages as the gcr gtk3 and gtk4 libraries are gone
  - Rename gcr-base to gcr-libs
  - Fix gir and vala directory ownership
  - Misc packaging cleanup


author: Milan Crha <mcrha@redhat.com> - 3.50.1-2
changelog:
  - Resolves: RHEL-33893
  - Disable Microsoft 365 provider
  - Remove support for 'files' in Google provider


author: Florian Müllner <fmuellner@redhat.com> - 46.3.1-2
changelog:
  - Only use RH branding on RHEL and use the system icon instead of a custom
    asset to avoid including trademarked assets on non-RHEL installs.


author: Packit <hello@packit.dev> - 0.15.3-1
changelog:
  - Release 0.15.3 (Paul Whalen)
  - packit: add koji, bodhi jobs, upstream url (Paul Whalen)
  - packit.yaml: Fix deprecated and renamed keys. (Paul Whalen)
  - greenboot: fix exit status with unknown argument (Paul Whalen)
  - greenboot-grub2-set-counter.service: ensure /boot is mounted (Adam Williamson)
  - check-fallbback: ShellCheck fix (Micah Abbott)
  - greenboot-grub2-set-counter: ShellCheck fix (Micah Abbott)
  - greenboot-status: fix or statements to default to true (Micah Abbott)
  - update_platforms_check: quote array for ShellCheck fix (Micah Abbott)
  - watchdog.sh: ShellCheck fixes (Micah Abbott)
  - add shellcheck GH action (Micah Abbott)
  - Revert "disable DefaultDependencies to fix cycle error" (Antonio Murdaca)
  - Revert "Add greenboot-service-monitor.service for service health checking" (Antonio Murdaca)


author: Packit <hello@packit.dev> - 0.15.4-1
changelog:
  - Release v0.15.4 (Paul Whalen)
  - checks: update assignment of platform URLs var (Micah Abbott)
  - Revert "update_platforms_check: quote array for ShellCheck fix" (Micah Abbott)
  - Update README.md (alcir)


author: Joe Orton <jorton@redhat.com> - 2.4.59-3.1
changelog:
  - apachectl(8): use BUG_REPORT_URL from /etc/os-release
  - apachectl(8): fix grammar (#2278748)
  - httpd.service.xml(8): mention ProtectSystem= setting


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.16-11
changelog:
  - Update required packages in CI
  - adobe-source-code-pro-fonts is no longer available in RHEL10
  - dnf and git do not work after systemd-oomd-defaults is installed


author: Mike FABIAN <mfabian@redhat.com> - 1.4.23-1
changelog:
  - Update to 1.4.23
  - Do not translate the Multi_key when using the option “☑️ Use US keyboard layout”
  - Fix option “☑️ Use US keyboard layout”
    (Resolves: https://github.com/ibus/ibus-m17n/issues/66)
  - Translation update from Weblate: new language Hindi, hi 100%


author: Mike FABIAN <mfabian@redhat.com> - 1.4.24-1
changelog:
  - Update to 1.4.24
  - Make IBusEngineSimple read ~/.XCompose
    (Resolves: https://github.com/ibus/ibus-m17n/issues/70)
  - Do not hide empty preedit text before committing text.
    (Resolves: https://github.com/ibus/ibus-m17n/pull/64).
    Together with ibus >= 1.5.29 this solves the preedit flicker problem perfectly.
  - Use “<developer><name>…</name></developer>” in m17n.appdata.xml instead of “<developer_name>…</developer_name>”
    Because </developer_name> is deprecated and it makes the build fail on Fedora rawhide.


author: Mike FABIAN <mfabian@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - New option commit_invalid_mode: Choose what happens when a
    character not in valid input characters is typed
    (Resolves: github-mike-fabian-issue#133)
  - Translation update from Weblate (de 100%, uk 100%)


author: Mike FABIAN <mfabian@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - Fix mypy warnings
  - Return empty program_name and window_title in get_active_window_xprop()
    when xprop results are unexpected (Resolves: rhbz#2215466)
  - Translation update from Weblate (si 10.0%)


author: Mike FABIAN <mfabian@redhat.com> - 1.8.9-1
changelog:
  - Update to 1.8.9
  - Add tones to Jyutping.txt table
    (Resolves: https://github.com/mike-fabian/ibus-table-chinese/issues/6)
    Tonal markers according to
    https://github.com/rime/rime-cantonese/blob/main/README-en.md#tonal-markers
    were added:
    1. v: High level, e.g. siv → 詩; High level checked, e.g. sikv → 色
    2. x: Medium rising, e.g. six → 史
    3. q: Medium level, e.g. siq→ 試; Medium level checked, e.g. sekq → 錫
    4. vv: Low falling, e.g. sivv → 時
    5. xx: Low rising, e.g. sixx → 市
    6. qq: Low level, e.g. siqq→ 事; Low level checked, e.g. sikqq → 食


author: Mike FABIAN <mfabian@redhat.com> - 1.8.10-1
changelog:
  - Update to 1.8.10
  - Improve punctuation support in cangjie5.txt, cangjie3.txt, cangjie-big.txt,
    quick5.txt, quick3.txt, quick-classic.txt
    (Resolves: https://github.com/kaio/ibus-table/issues/73)
  - Remove obsolete patch: Make-build-outside-of-the-source-tree-possible.patch


author: Mike FABIAN <mfabian@redhat.com> - 2.25.3-1
changelog:
  - Resolves: RHEL-31506 Update to 2.25.3
  - Add a feature to insert or remove RLM or LRM markers to change the
    direction of a line of bidi text (Resolves: https://github.com/mike-
    fabian/ibus-typing-booster/issues/500)


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.0-1
changelog:
  - Resolves: RHEL-39144 Rebase ipa to the latest 4.12 version for RHEL 10
  - Resolves: RHEL-30537 ipa: freeipa: argument injection into the username field of the /ipa/session/login_password requests


author: Julien Rische <jrische@redhat.com> - 4.12.1-1
changelog:
  - Resolves: RHEL-32233 CVE-2024-3183 freeipa: user can obtain a hash of the passwords of all domain users and perform offline brute force
  - Resolves: RHEL-40881 CVE-2024-2698 freeipa: delegation rules allow a proxy service to impersonate any user to access another target service


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-2
changelog:
  - Resolves: RHEL-46607 kdc.crt certificate not getting automatically renewed by certmonger in IPA Hidden replica
  - Resolves: RHEL-46606 ipa-client rpm post script creates always ssh_config.orig even if nothing needs to be changed
  - Resolves: RHEL-46605 IPA Web UI not showing replication agreement for non-admin users
  - Resolves: RHEL-46592 [RFE] Allow IPA SIDgen task to continue if it finds an entity that SID can't be assigned to
  - Resolves: RHEL-46556 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-42705 PSKC.xml issues with ipa_otptoken_import.py


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-3
changelog:
  - Resolves: RHEL-49452 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-49433 Adjust "ipa config-mod --addattr ipaconfigstring=EnforceLDAPOTP" to allow for non OTP users in some cases
  - Resolves: RHEL-49432 ipa-migrate stage-mode is failing with error: Modifying a mapped attribute in a managed entry is not allowed
  - Resolves: RHEL-49413 ipa-migrate with -Z option fails with ValueError: option error
  - Resolves: RHEL-47157 ipa-migrate -V options fails to display version
  - Resolves: RHEL-47148 Pagure #9629: Syntax error uninstalling the selinux-luna subpackage
  - Resolves: RHEL-40892 ipa-server-install: token_password_file read in kra.install_check after calling hsm_validator in ca.install_check


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.1-4
changelog:
  - Resolves: RHEL-53501 adtrustinstance only prints issues in check_inst() and does not log them
  - Resolves: RHEL-52305 Unconditionally add MS-PAC to global config
  - Resolves: RHEL-52223 ipa-replica/server-install with softhsm needs to check permission/ownership of /var/lib/softhsm/tokens to avoid install failure
  - Resolves: RHEL-51937 Include latest fixes in python3-ipatests packages
  - Resolves: RHEL-50805 ipa-migrate -Z with invalid cert options fails with 'ValueError: option error'
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-49592 'Unable to log in as uid=admin-replica.testrealm.test,ou=people,o=ipaca' during replica install
  - Resolves: RHEL-4879 RFE - Keep the configured value for the "nsslapd-ignore-time-skew" after a "force-sync"


author: Florence Blanc-Renaud <flo@redhat.com> - 4.12.2-1
changelog:
  - Resolves: RHEL-54545 Covscan issues: Resource Leak
  - Resolves: RHEL-54304 support for python cryptography 43.0.0
  - Resolves: RHEL-49805 misleading warning for missing ipa-selinux-nfast package on luna hsm h/w
  - Resolves: RHEL-46897 With unreachable AD, ipa trust returns an internal error


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-1
changelog:
  - Update to jdk-21.0.2+13 (GA)
  - Sync the copy of the portable specfile with the latest update
  - Bump libpng version to 1.6.40 following JDK-8316030
  - Bump HarfBuzz version to 8.2.2 following JDK-8313643
  - Drop local JDK-8311630 patch which is now upstream
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **
  - Resolves: RHEL-45217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-2
changelog:
  - Define portablesuffix according to whether pkgos is defined or not
  - Handle debugedit being a separate package installed in /usr on RHEL/CentOS 10
  - Related: RHEL-45217


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.2.0.13-3
changelog:
  - Fix gating.yaml to reference RHEL 10
  - Set this to be the default/system JDK providing 'java', 'jre', 'java-devel' ,etc.
  - Resolves: RHEL-34597
  - Resolves: RHEL-51617


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.3+1 (EA)
  - Update release notes to 21.0.3+1
  - Switch to EA mode
  - Require tzdata 2023d due to local inclusion of JDK-8322725
  - Bump FreeType version to 2.13.2 following JDK-8316028
  - Install alt-java man page from the misc tarball as it is no longer in the JDK image
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck
  - Related: RHEL-52723


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.1.ea
changelog:
  - Invoke xz in multi-threaded mode
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Related: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254
  - Resolves: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: RHEL-32427


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Restore NEWS file so portable can be rebuilt
  - Sync the copy of the portable specfile with the latest update
  - Related: RHEL-45357
  - Resolves: RHEL-46026


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Limit Java only tests to one architecture using jdk_test_arch
  - Actually require tzdata 2024a now it is available in the buildroot
  - Resolves: RHEL-45357
  - Resolves: RHEL-52735
  - Related: RHEL-52723


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - Sync the copy of the portable specfile with the latest update
  - Add missing section headers in NEWS
  - Vary portablesuffix depending on whether we are on RHEL ('el8') or CentOS ('el9')
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: RHEL-47024


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc2.16.el10]
changelog:
  - Linux 6.11-rc2 (Linus Torvalds)
  - profiling: remove profile=sleep support (Tetsuo Handa)
  - x86/uaccess: Zero the 8-byte get_range case on failure on 32-bit (David Gow)
  - x86/mm: Fix pti_clone_entry_text() for i386 (Peter Zijlstra)
  - x86/mm: Fix pti_clone_pgtable() alignment assumption (Peter Zijlstra)
  - x86/setup: Parse the builtin command line before merging (Borislav Petkov (AMD))
  - x86/CPU/AMD: Add models 0x60-0x6f to the Zen5 range (Perry Yuan)
  - x86/sev: Fix __reserved field in sev_config (Pavan Kumar Paluri)
  - x86/aperfmperf: Fix deadlock on cpu_hotplug_lock (Jonathan Cameron)
  - clocksource: Fix brown-bag boolean thinko in cs_watchdog_read() (Paul E. McKenney)
  - tick/broadcast: Move per CPU pointer access into the atomic section (Thomas Gleixner)
  - sched/core: Fix unbalance set_rq_online/offline() in sched_cpu_deactivate() (Yang Yingliang)
  - sched/core: Introduce sched_set_rq_on/offline() helper (Yang Yingliang)
  - sched/smt: Fix unbalance sched_smt_present dec/inc (Yang Yingliang)
  - sched/smt: Introduce sched_smt_present_inc/dec() helper (Yang Yingliang)
  - sched/cputime: Fix mul_u64_u64_div_u64() precision for cputime (Zheng Zucheng)
  - perf/x86: Fix smp_processor_id()-in-preemptible warnings (Li Huafei)
  - perf/x86/intel/cstate: Add pkg C2 residency counter for Sierra Forest (Zhenyu Wang)
  - irqchip/mbigen: Fix mbigen node address layout (Yipeng Zou)
  - irqchip/meson-gpio: Convert meson_gpio_irq_controller::lock to 'raw_spinlock_t' (Arseniy Krasnov)
  - irqchip/irq-pic32-evic: Add missing 'static' to internal function (Luca Ceresoli)
  - irqchip/loongarch-cpu: Fix return value of lpic_gsi_to_irq() (Huacai Chen)
  - jump_label: Fix the fix, brown paper bags galore (Peter Zijlstra)
  - locking/pvqspinlock: Correct the type of "old" variable in pv_kick_node() (Uros Bizjak)
  - arm: dts: arm: versatile-ab: Fix duplicate clock node name (Rob Herring (Arm))
  - cifs: update internal version number (Steve French)
  - smb: client: fix FSCTL_GET_REPARSE_POINT against NetApp (Paulo Alcantara)
  - smb3: add dynamic tracepoints for shutdown ioctl (Steve French)
  - cifs: Remove cifs_aio_ctx (David Howells)
  - smb: client: handle lack of FSCTL_GET_REPARSE_POINT support (Paulo Alcantara)
  - media: uvcvideo: Fix custom control mapping probing (Ricardo Ribalda)
  - media: v4l: Fix missing tabular column hint for Y14P format (Jean-Michel Hautbois)
  - media: intel/ipu6: select AUXILIARY_BUS in Kconfig (Bingbu Cao)
  - media: ipu-bridge: fix ipu6 Kconfig dependencies (Arnd Bergmann)
  - rh_flags: fix failed when register_sysctl_sz rh_flags_table to kernel (Ricardo Robaina) [RHEL-52629]
  - redhat: regenerate test-data (Jan Stancek) [RHEL-29722]
  - redhat: rpminspect.yaml: more tests to ignore selftests (Jan Stancek)
  - gitlab-ci: add initial version (Michael Hofmann)
  - redhat/Makefile.variables: don't set DISTRO (Jan Stancek) [RHEL-29722]
  - redhat/Makefile.variables: set PATCHLIST_URL to none (Jan Stancek) [RHEL-29722]
  - redhat/kernel.spec.template: fix with_realtime (Jan Stancek) [RHEL-29722]
  - remove ARK .gitlab-ci.yml (Jan Stancek)
  - redhat: update rpminspect with c9s one (Jan Stancek)
  - redhat: remove fedora configs and files (Jan Stancek)
  - redhat: init RHEL10.0 beta variables and dist tag (Jan Stancek) [RHEL-29722]
  - scsi: ufs: exynos: Don't resume FMP when crypto support is disabled (Eric Biggers)
  - scsi: mpt3sas: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)
  - scsi: mpi3mr: Avoid IOMMU page faults on REPORT ZONES (Damien Le Moal)
  - scsi: ufs: core: Do not set link to OFF state while waking up from hibernation (Manivannan Sadhasivam)
  - scsi: Revert "scsi: sd: Do not repeat the starting disk message" (Johan Hovold)
  - scsi: ufs: core: Fix deadlock during RTC update (Peter Wang)
  - scsi: ufs: core: Bypass quick recovery if force reset is needed (Peter Wang)
  - scsi: ufs: core: Check LSDBS cap when !mcq (Kyoungrul Kim)
  - xfs: convert comma to semicolon (Chen Ni)
  - xfs: convert comma to semicolon (Chen Ni)
  - xfs: remove unused parameter in macro XFS_DQUOT_LOGRES (Julian Sun)
  - xfs: fix file_path handling in tracepoints (Darrick J. Wong)
  - xfs: allow SECURE namespace xattrs to use reserved block pool (Eric Sandeen)
  - xfs: fix a memory leak (Darrick J. Wong)
  - parisc: fix a possible DMA corruption (Mikulas Patocka)
  - parisc: fix unaligned accesses in BPF (Mikulas Patocka)
  - runtime constants: deal with old decrepit linkers (Linus Torvalds)
  - redhat: enable changes to build rt variants (Clark Williams)
  - Add localversion for -RT release (Thomas Gleixner)
  - sysfs: Add /sys/kernel/realtime entry (Clark Williams)
  - riscv: add PREEMPT_AUTO support (Jisheng Zhang)
  - POWERPC: Allow to enable RT (Sebastian Andrzej Siewior)
  - powerpc/stackprotector: work around stack-guard init from atomic (Sebastian Andrzej Siewior)
  - powerpc/kvm: Disable in-kernel MPIC emulation for PREEMPT_RT (Bogdan Purcareata)
  - powerpc/pseries: Select the generic memory allocator. (Sebastian Andrzej Siewior)
  - powerpc/pseries/iommu: Use a locallock instead local_irq_save() (Sebastian Andrzej Siewior)
  - powerpc: traps: Use PREEMPT_RT (Sebastian Andrzej Siewior)
  - ARM: Allow to enable RT (Sebastian Andrzej Siewior)
  - ARM: vfp: Move sending signals outside of vfp_lock()ed section. (Sebastian Andrzej Siewior)
  - ARM: vfp: Use vfp_lock() in vfp_support_entry(). (Sebastian Andrzej Siewior)
  - ARM: vfp: Use vfp_lock() in vfp_sync_hwstate(). (Sebastian Andrzej Siewior)
  - ARM: vfp: Provide vfp_lock() for VFP locking. (Sebastian Andrzej Siewior)
  - arm: Disable FAST_GUP on PREEMPT_RT if HIGHPTE is also enabled. (Sebastian Andrzej Siewior)
  - ARM: enable irq in translation/section permission fault handlers (Yadi.hu)
  - arm: Disable jump-label on PREEMPT_RT. (Thomas Gleixner)
  - tun: Add missing bpf_net_ctx_clear() in do_xdp_generic() (Jeongjun Park)
  - sched: define TIF_ALLOW_RESCHED (Thomas Gleixner)
  - Revert "drm/i915: Depend on !PREEMPT_RT." (Sebastian Andrzej Siewior)
  - drm/i915/guc: Consider also RCU depth in busy loop. (Sebastian Andrzej Siewior)
  - drm/i915: Drop the irqs_disabled() check (Sebastian Andrzej Siewior)
  - drm/i915/gt: Use spin_lock_irq() instead of local_irq_disable() + spin_lock() (Sebastian Andrzej Siewior)
  - drm/i915: Disable tracing points on PREEMPT_RT (Sebastian Andrzej Siewior)
  - drm/i915: Don't check for atomic context on PREEMPT_RT (Sebastian Andrzej Siewior)
  - drm/i915: Don't disable interrupts on PREEMPT_RT during atomic updates (Mike Galbraith)
  - drm/i915: Use preempt_disable/enable_rt() where recommended (Mike Galbraith)
  - time: Allow to preempt after a callback. (Sebastian Andrzej Siewior)
  - softirq: Add function to preempt serving softirqs. (Sebastian Andrzej Siewior)
  - sched/core: Provide a method to check if a task is PI-boosted. (Sebastian Andrzej Siewior)
  - zram: Shrink zram_table_entry::flags. (Sebastian Andrzej Siewior)
  - zram: Remove ZRAM_LOCK (Sebastian Andrzej Siewior)
  - zram: Replace bit spinlocks with a spinlock_t. (Mike Galbraith)
  - softirq: Wake ktimers thread also in softirq. (Junxiao Chang)
  - tick: Fix timer storm since introduction of timersd (Frederic Weisbecker)
  - rcutorture: Also force sched priority to timersd on boosting test. (Frederic Weisbecker)
  - softirq: Use a dedicated thread for timer wakeups. (Sebastian Andrzej Siewior)
  - sched/rt: Don't try push tasks if there are none. (Sebastian Andrzej Siewior)
  - riscv: allow to enable RT (Jisheng Zhang)
  - ARM64: Allow to enable RT (Sebastian Andrzej Siewior)
  - x86: Enable RT also on 32bit (Sebastian Andrzej Siewior)
  - x86: Allow to enable RT (Sebastian Andrzej Siewior)
  - prinkt/nbcon: Add a scheduling point to nbcon_kthread_func(). (Sebastian Andrzej Siewior)
  - serial: 8250: Revert "drop lockdep annotation from serial8250_clear_IER()" (John Ogness)
  - serial: 8250: Switch to nbcon console (John Ogness)
  - printk: nbcon: Add function for printers to reacquire ownership (John Ogness)
  - printk: Avoid false positive lockdep report for legacy printing (John Ogness)
  - printk: Provide threadprintk boot argument (John Ogness)
  - tty: sysfs: Add nbcon support for 'active' (John Ogness)
  - proc: Add nbcon support for /proc/consoles (John Ogness)
  - proc: consoles: Add notation to c_start/c_stop (John Ogness)
  - printk: Add kthread for all legacy consoles (John Ogness)
  - printk: nbcon: Show replay message on takeover (John Ogness)
  - printk: Provide helper for message prepending (John Ogness)
  - printk: nbcon: Start printing threads (John Ogness)
  - printk: nbcon: Stop threads on shutdown/reboot (John Ogness)
  - printk: nbcon: Add printer thread wakeups (Thomas Gleixner)
  - printk: nbcon: Add context to console_is_usable() (John Ogness)
  - printk: nbcon: Fix nbcon_cpu_emergency_flush() when preemptible (John Ogness)
  - printk: Atomic print in printk context on shutdown (John Ogness)
  - printk: nbcon: Introduce printing kthreads (Thomas Gleixner)
  - lockdep: Mark emergency sections in lockdep splats (John Ogness)
  - rcu: Mark emergency sections in rcu stalls (John Ogness)
  - panic: Mark emergency section in oops (John Ogness)
  - panic: Mark emergency section in warn (Thomas Gleixner)
  - printk: nbcon: Implement emergency sections (Thomas Gleixner)
  - printk: Coordinate direct printing in panic (John Ogness)
  - printk: Track nbcon consoles (John Ogness)
  - printk: Avoid console_lock dance if no legacy or boot consoles (John Ogness)
  - printk: nbcon: Add unsafe flushing on panic (John Ogness)
  - printk: nbcon: Use nbcon consoles in console_flush_all() (John Ogness)
  - printk: Track registered boot consoles (John Ogness)
  - printk: nbcon: Provide function to flush using write_atomic() (Thomas Gleixner)
  - printk: nbcon: Add helper to assign priority based on CPU state (John Ogness)
  - printk: Add @flags argument for console_is_usable() (John Ogness)
  - printk: Let console_is_usable() handle nbcon (John Ogness)
  - printk: Make console_is_usable() available to nbcon (John Ogness)
  - printk: nbcon: Do not rely on proxy headers (John Ogness)
  - serial: core: Implement processing in port->lock wrapper (John Ogness)
  - nbcon: Add API to acquire context for non-printing operations (John Ogness)
  - console: Improve console_srcu_read_flags() comments (John Ogness)
  - serial: core: Introduce wrapper to set @uart_port->cons (John Ogness)
  - serial: core: Provide low-level functions to lock port (John Ogness)
  - printk: nbcon: Use driver synchronization while (un)registering (John Ogness)
  - printk: nbcon: Add callbacks to synchronize with driver (John Ogness)
  - printk: nbcon: Add detailed doc for write_atomic() (John Ogness)
  - printk: Check printk_deferred_enter()/_exit() usage (Sebastian Andrzej Siewior)
  - printk: nbcon: Remove return value for write_atomic() (John Ogness)
  - printk: Properly deal with nbcon consoles on seq init (Petr Mladek)
  - printk: Add notation to console_srcu locking (John Ogness)
  - crypto: x86/aes-gcm: Disable FPU around skcipher_walk_done(). (Sebastian Andrzej Siewior)
  - task_work: make TWA_NMI_CURRENT handling conditional on IRQ_WORK (Linus Torvalds)


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc2.17.el10]
changelog:
  - btrfs: avoid using fixed char array size for tree names (Qu Wenruo)
  - btrfs: fix double inode unlock for direct IO sync writes (Filipe Manana)
  - btrfs: emit a warning about space cache v1 being deprecated (Josef Bacik)
  - btrfs: fix qgroup reserve leaks in cow_file_range (Boris Burkov)
  - btrfs: implement launder_folio for clearing dirty page reserve (Boris Burkov)
  - btrfs: scrub: update last_physical after scrubbing one stripe (Qu Wenruo)
  - btrfs: factor out stripe length calculation into a helper (Qu Wenruo)
  - power: supply: qcom_battmgr: Ignore extra __le32 in info payload (Stephan Gerhold)
  - power: supply: qcom_battmgr: return EAGAIN when firmware service is not up (Neil Armstrong)
  - power: supply: axp288_charger: Round constant_charge_voltage writes down (Hans de Goede)
  - power: supply: axp288_charger: Fix constant_charge_voltage writes (Hans de Goede)
  - power: supply: rt5033: Bring back i2c_set_clientdata (Nikita Travkin)
  - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (Jason Wang)
  - platform/x86/intel/ifs: Initialize union ifs_status to zero (Kuppuswamy Sathyanarayanan)
  - platform/x86: msi-wmi-platform: Fix spelling mistakes (Luis Felipe Hernandez)
  - platform/x86/amd/pmf: Add new ACPI ID AMDI0107 (Shyam Sundar S K)
  - platform/x86/amd/pmc: Send OS_HINT command for new AMD platform (Shyam Sundar S K)
  - platform/x86/amd: pmf: Add quirk for ROG Ally X (Luke D. Jones)
  - platform/x86: intel-vbtn: Protect ACPI notify handler against recursion (Hans de Goede)
  - selftests: ksft: Fix finished() helper exit code on skipped tests (Laura Nao)
  - mm, slub: do not call do_slab_free for kfence object (Rik van Riel)
  - redhat/configs: Disable gfs2 in rhel configs (Andrew Price)
  - redhat/uki_addons/virt: add common FIPS addon (Emanuele Giuseppe Esposito)
  - redhat/kernel.spec: add uki_addons to create UKI kernel cmdline addons (Emanuele Giuseppe Esposito)
  - Linux v6.11.0-0.rc2


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc3.18.el10]
changelog:
  - Linux 6.11-rc3 (Linus Torvalds)
  - x86/mtrr: Check if fixed MTRRs exist before saving them (Andi Kleen)
  - x86/paravirt: Fix incorrect virt spinlock setting on bare metal (Chen Yu)
  - x86/acpi: Remove __ro_after_init from acpi_mp_wake_mailbox (Zhiquan Li)
  - x86/mm: Fix PTI for i386 some more (Thomas Gleixner)
  - timekeeping: Fix bogus clock_was_set() invocation in do_adjtimex() (Thomas Gleixner)
  - ntp: Safeguard against time_constant overflow (Justin Stitt)
  - ntp: Clamp maxerror and esterror to operating range (Justin Stitt)
  - irqchip/riscv-aplic: Retrigger MSI interrupt on source configuration (Yong-Xuan Wang)
  - irqchip/xilinx: Fix shift out of bounds (Radhey Shyam Pandey)
  - genirq/irqdesc: Honor caller provided affinity in alloc_desc() (Shay Drory)
  - usb: typec: ucsi: Fix a deadlock in ucsi_send_command_common() (Heikki Krogerus)
  - usb: typec: tcpm: avoid sink goto SNK_UNATTACHED state if not received source capability message (Xu Yang)
  - usb: gadget: f_fs: pull out f->disable() from ffs_func_set_alt() (Tudor Ambarus)
  - usb: gadget: f_fs: restore ffs_func_disable() functionality (Tudor Ambarus)
  - USB: serial: debug: do not echo input by default (Marek Marczykowski-Górecki)
  - usb: typec: tipd: Delete extra semi-colon (Harshit Mogalapalli)
  - usb: typec: tipd: Fix dereferencing freeing memory in tps6598x_apply_patch() (Harshit Mogalapalli)
  - usb: gadget: u_serial: Set start_delayed during suspend (Prashanth K)
  - usb: typec: tcpci: Fix error code in tcpci_check_std_output_cap() (Dan Carpenter)
  - usb: typec: fsa4480: Check if the chip is really there (Konrad Dybcio)
  - usb: gadget: core: Check for unset descriptor (Chris Wulff)
  - usb: vhci-hcd: Do not drop references before new references are gained (Oliver Neukum)
  - usb: gadget: u_audio: Check return codes from usb_ep_enable and config_ep_by_speed. (Chris Wulff)
  - usb: gadget: midi2: Fix the response for FB info with block 0xff (Takashi Iwai)
  - dt-bindings: usb: microchip,usb2514: Add USB2517 compatible (Alexander Stein)
  - USB: serial: garmin_gps: use struct_size() to allocate pkt (Javier Carrasco)
  - USB: serial: garmin_gps: annotate struct garmin_packet with __counted_by (Javier Carrasco)
  - USB: serial: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - USB: serial: spcp8x5: remove unused struct 'spcp8x5_usb_ctrl_arg' (Dr. David Alan Gilbert)
  - tty: vt: conmakehash: cope with abs_srctree no longer in env (Max Krummenacher)
  - serial: sc16is7xx: fix invalid FIFO access with special register set (Hugo Villeneuve)
  - serial: sc16is7xx: fix TX fifo corruption (Hugo Villeneuve)
  - serial: core: check uartclk for zero to avoid divide by zero (George Kennedy)
  - driver core: Fix uevent_show() vs driver detach race (Dan Williams)
  - Documentation: embargoed-hardware-issues.rst: add a section documenting the "early access" process (Greg Kroah-Hartman)
  - Documentation: embargoed-hardware-issues.rst: minor cleanups and fixes (Greg Kroah-Hartman)
  - rust: firmware: fix invalid rustdoc link (Andrew Ballance)
  - spmi: pmic-arb: add missing newline in dev_err format strings (David Collins)
  - spmi: pmic-arb: Pass the correct of_node to irq_domain_add_tree (Konrad Dybcio)
  - binder_alloc: Fix sleeping function called from invalid context (Mukesh Ojha)
  - binder: fix descriptor lookup for context manager (Carlos Llamas)
  - char: add missing NetWinder MODULE_DESCRIPTION() macros (Jeff Johnson)
  - misc: mrvl-cn10k-dpi: add PCI_IOV dependency (Arnd Bergmann)
  - eeprom: ee1004: Fix locking issues in ee1004_probe() (Armin Wolf)
  - fsi: add missing MODULE_DESCRIPTION() macros (Jeff Johnson)
  - scsi: sd: Keep the discard mode stable (Li Feng)
  - scsi: sd: Move sd_read_cpr() out of the q->limits_lock region (Shin'ichiro Kawasaki)
  - scsi: ufs: core: Fix hba->last_dme_cmd_tstamp timestamp updating logic (Vamshi Gajjela)
  - nfsd: don't set SVC_SOCK_ANONYMOUS when creating nfsd sockets (Jeff Layton)
  - sunrpc: avoid -Wformat-security warning (Arnd Bergmann)
  - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (Gaosheng Cui)
  - i2c: qcom-geni: Add missing clk_disable_unprepare in geni_i2c_runtime_resume (Gaosheng Cui)
  - i2c: testunit: match HostNotify test name with docs (Wolfram Sang)
  - i2c: Fix conditional for substituting empty ACPI functions (Richard Fitzgerald)
  - i2c: smbus: Send alert notifications to all devices if source not found (Guenter Roeck)
  - i2c: smbus: Improve handling of stuck alerts (Guenter Roeck)
  - dma-debug: avoid deadlock between dma debug vs printk and netconsole (Rik van Riel)
  - bcachefs: bcachefs_metadata_version_disk_accounting_v3 (Kent Overstreet)
  - bcachefs: improve bch2_dev_usage_to_text() (Kent Overstreet)
  - bcachefs: bch2_accounting_invalid() (Kent Overstreet)
  - bcachefs: Switch to .get_inode_acl() (Kent Overstreet)
  - cifs: cifs_inval_name_dfs_link_error: correct the check for fullpath (Gleb Korobeynikov)
  - Fix spelling errors in Server Message Block (Xiaxi Shen)
  - smb3: fix setting SecurityFlags when encryption is required (Steve French)
  - spi: spi-fsl-lpspi: Fix scldiv calculation (Stefan Wahren)
  - spi: spidev: Add missing spi_device_id for bh2228fv (Geert Uytterhoeven)
  - spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware (Devyn Liu)
  - spi: hisi-kunpeng: Add validation for the minimum value of speed_hz (Devyn Liu)
  - drm/i915: Attempt to get pages without eviction first (David Gow)
  - drm/i915: Allow evicting to use the requested placement (David Gow)
  - drm/i915/gem: Fix Virtual Memory mapping boundaries calculation (Andi Shyti)
  - drm/i915/gem: Adjust vma offset for framebuffer mmap offset (Andi Shyti)
  - drm/i915/display: correct dual pps handling for MTL_PCH+ (Dnyaneshwar Bhadane)
  - drm/xe: Take ref to VM in delayed snapshot (Matthew Brost)
  - drm/xe/hwmon: Fix PL1 disable flow in xe_hwmon_power_max_write (Karthik Poosa)
  - drm/xe: Use dma_fence_chain_free in chain fence unused as a sync (Matthew Brost)
  - drm/xe/rtp: Fix off-by-one when processing rules (Lucas De Marchi)
  - drm/amdgpu: Add DCC GFX12 flag to enable address alignment (Arunpravin Paneer Selvam)
  - drm/amdgpu: correct sdma7 max dw (Frank Min)
  - drm/amdgpu: Add address alignment support to DCC buffers (Arunpravin Paneer Selvam)
  - drm/amd/display: Skip Recompute DSC Params if no Stream on Link (Fangzhi Zuo)
  - drm/amdgpu: change non-dcc buffer copy configuration (Frank Min)
  - drm/amdgpu: Forward soft recovery errors to userspace (Joshua Ashton)
  - drm/amdgpu: add golden setting for gc v12 (Likun Gao)
  - drm/buddy: Add start address support to trim function (Arunpravin Paneer Selvam)
  - drm/amd/display: Add missing program DET segment call to pipe init (Rodrigo Siqueira)
  - drm/amd/display: Add missing DCN314 to the DML Makefile (Rodrigo Siqueira)
  - drm/amdgpu: force to use legacy inv in mmhub (Likun Gao)
  - drm/amd/pm: update powerplay structure on smu v14.0.2/3 (Kenneth Feng)
  - drm/amd/display: Add missing mcache registers (Rodrigo Siqueira)
  - drm/amd/display: Add dcc propagation value (Rodrigo Siqueira)
  - drm/amd/display: Add missing DET segments programming (Rodrigo Siqueira)
  - drm/amd/display: Replace dm_execute_dmub_cmd with dc_wake_and_execute_dmub_cmd (Rodrigo Siqueira)
  - drm/atomic: allow no-op FB_ID updates for async flips (Simon Ser)
  - dt-bindings: display: panel: samsung,atna45dc02: Document ATNA45DC02 (Rob Clark)
  - drm/bridge-connector: Fix double free in error handling paths (Cristian Ciocaltea)
  - drm/omap: add CONFIG_MMU dependency (Arnd Bergmann)
  - drm/test: fix the gem shmem test to map the sg table. (Dave Airlie)
  - drm/client: fix null pointer dereference in drm_client_modeset_probe (Ma Ke)
  - cpumask: Fix crash on updating CPU enabled mask (Gavin Shan)
  - cpufreq: intel_pstate: Update Balance performance EPP for Emerald Rapids (Pedro Henrique Kopper)
  - syscalls: add back legacy __NR_nfsservctl macro (Arnd Bergmann)
  - syscalls: fix fstat() entry again (Arnd Bergmann)
  - arm64: dts: ti: k3-j784s4-main: Correct McASP DMAs (Parth Pancholi)
  - arm64: dts: ti: k3-j722s: Fix gpio-range for main_pmx0 (Jared McArthur)
  - arm64: dts: ti: k3-am62p: Fix gpio-range for main_pmx0 (Jared McArthur)
  - arm64: dts: ti: k3-am62p: Add gpio-ranges for mcu_gpio0 (Jared McArthur)
  - arm64: dts: ti: k3-am62-verdin-dahlia: Keep CTRL_SLEEP_MOCI# regulator on (Francesco Dolcini)
  - arm64: dts: ti: k3-j784s4-evm: Consolidate serdes0 references (Andrew Halaney)
  - arm64: dts: ti: k3-j784s4-evm: Assign only lanes 0 and 1 to PCIe1 (Andrew Halaney)
  - ARM: pxa/gumstix: fix attaching properties to vbus gpio device (Dmitry Torokhov)
  - doc: platform: cznic: turris-omnia-mcu: Use double backticks for attribute value (Marek Behún)
  - doc: platform: cznic: turris-omnia-mcu: Fix sphinx-build warning (Marek Behún)
  - platform: cznic: turris-omnia-mcu: Make GPIO code optional (Marek Behún)
  - platform: cznic: turris-omnia-mcu: Make poweroff and wakeup code optional (Marek Behún)
  - platform: cznic: turris-omnia-mcu: Make TRNG code optional (Marek Behún)
  - platform: cznic: turris-omnia-mcu: Make watchdog code optional (Marek Behún)
  - kprobes: Fix to check symbol prefixes correctly (Masami Hiramatsu (Google))
  - bpf: kprobe: remove unused declaring of bpf_kprobe_override (Menglong Dong)
  - nvme: reorganize nvme_ns_head fields (Kanchan Joshi)
  - nvme: change data type of lba_shift (Kanchan Joshi)
  - nvme: remove a field from nvme_ns_head (Kanchan Joshi)
  - nvme: remove unused parameter (Kanchan Joshi)
  - blk-throttle: remove more latency dead-code (Dr. David Alan Gilbert)
  - io_uring/net: don't pick multiple buffers for non-bundle send (Jens Axboe)
  - io_uring/net: ensure expanded bundle send gets marked for cleanup (Jens Axboe)
  - io_uring/net: ensure expanded bundle recv gets marked for cleanup (Jens Axboe)
  - ASoC: cs35l56: Patch CS35L56_IRQ1_MASK_18 to the default value (Simon Trimmer)
  - ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (Jerome Brunet)
  - MAINTAINERS: Update Cirrus Logic parts to linux-sound mailing list (Charles Keepax)
  - ASoC: dt-bindings: qcom,wcd939x: Correct reset GPIO polarity in example (Krzysztof Kozlowski)
  - ASoC: dt-bindings: qcom,wcd938x: Correct reset GPIO polarity in example (Krzysztof Kozlowski)
  - ASoC: dt-bindings: qcom,wcd934x: Correct reset GPIO polarity in example (Krzysztof Kozlowski)
  - ASoC: dt-bindings: qcom,wcd937x: Correct reset GPIO polarity in example (Krzysztof Kozlowski)
  - ASoC: amd: yc: Add quirk entry for OMEN by HP Gaming Laptop 16-n0xxx (Takashi Iwai)
  - ASoC: codecs: ES8326: button detect issue (Zhang Yi)
  - ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6 (Krzysztof Stępniak)
  - ASoC: cs35l56: Stop creating ALSA controls for firmware coefficients (Simon Trimmer)
  - ASoC: wm_adsp: Add control_add callback and export wm_adsp_control_add() (Simon Trimmer)
  - ASoC: cs35l56: Handle OTP read latency over SoundWire (Richard Fitzgerald)
  - ASoC: codecs: lpass-macro: fix missing codec version (Johan Hovold)
  - ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL (Richard Fitzgerald)
  - ASoC: cs42l43: Cache shutter IRQ control pointers (Charles Keepax)
  - ASoC: cs35l45: Use new snd_soc_component_get_kcontrol_locked() helper (Charles Keepax)
  - ASoC: soc-component: Add new snd_soc_component_get_kcontrol() helpers (Charles Keepax)
  - ASoC: cs42l43: Remove redundant semi-colon at end of function (Charles Keepax)
  - ASoC: SOF: Remove libraries from topology lookups (Curtis Malainey)
  - ASoC: nau8822: Lower debug print priority (Francesco Dolcini)
  - ASoC: fsl_micfil: Differentiate register access permission for platforms (Shengjiu Wang)
  - ASoC: fsl_micfil: Expand the range of FIFO watermark mask (Shengjiu Wang)
  - ASoC: codecs: wsa884x: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wsa883x: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wsa881x: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wcd939x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: codecs: wcd937x-sdw: Correct Soundwire ports mask (Krzysztof Kozlowski)
  - ASoC: cs530x: Change IN HPF Select kcontrol name (Paul Handrigan)
  - ASoC: amd: yc: Support mic on HP 14-em0002la (Bruno Ancona)
  - ASoC: sti: add missing probe entry for player and reader (Jerome Audu)
  - ALSA: usb-audio: Re-add ScratchAmp quirk entries (Takashi Iwai)
  - ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (Dustin L. Howett)
  - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (Takashi Iwai)
  - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (Steven 'Steve' Kendall)
  - ALSA: line6: Fix racy access to midibuf (Takashi Iwai)
  - ALSA: hda: cs35l41: Stop creating ALSA Controls for firmware coefficients (Stefan Binding)
  - ALSA: hda: cs35l56: Stop creating ALSA controls for firmware coefficients (Simon Trimmer)
  - module: make waiting for a concurrent module loader interruptible (Linus Torvalds)
  - kernel: config: enable erofs lzma compression (Ian Kent)
  - fedora: disable RTL8192CU in Fedora (Peter Robinson)
  - ice: Fix incorrect assigns of FEC counts (Mateusz Polchlopek)
  - ice: Skip PTP HW writes during PTP reset procedure (Grzegorz Nitka)
  - ice: Fix reset handler (Grzegorz Nitka)
  - net: dsa: microchip: disable EEE for KSZ8567/KSZ9567/KSZ9896/KSZ9897. (Martin Whitaker)
  - ethtool: Fix context creation with no parameters (Gal Pressman)
  - net: ethtool: fix off-by-one error in max RSS context IDs (Edward Cree)
  - net: pse-pd: tps23881: include missing bitfield.h header (Arnd Bergmann)
  - net: fec: Stop PPS on driver remove (Csókás, Bence)
  - net: bcmgenet: Properly overlay PHY and MAC Wake-on-LAN capabilities (Florian Fainelli)
  - l2tp: fix lockdep splat (James Chapman)
  - net: stmmac: dwmac4: fix PCS duplex mode decode (Russell King (Oracle))
  - Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor (Anton Khirnov)
  - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (Dmitry Antipov)
  - Bluetooth: hci_qca: fix a NULL-pointer derefence at shutdown (Bartosz Golaszewski)
  - Bluetooth: hci_qca: fix QCA6390 support on non-DT platforms (Bartosz Golaszewski)
  - Bluetooth: hci_qca: don't call pwrseq_power_off() twice for QCA6390 (Bartosz Golaszewski)
  - idpf: fix UAFs when destroying the queues (Alexander Lobakin)
  - idpf: fix memleak in vport interrupt configuration (Michal Kubiak)
  - idpf: fix memory leaks and crashes while performing a soft reset (Alexander Lobakin)
  - bnxt_en : Fix memory out-of-bounds in bnxt_fill_hw_rss_tbl() (Michael Chan)
  - net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (Joe Hattori)
  - net/smc: add the max value of fallback reason count (Zhengchao Shao)
  - net: usb: qmi_wwan: add MeiG Smart SRM825L (ZHANG Yuntian)
  - net: dsa: microchip: Fix Wake-on-LAN check to not return an error (Tristram Ha)
  - net: linkwatch: use system_unbound_wq (Eric Dumazet)
  - net: bridge: mcast: wait for previous gc cycles when removing port (Nikolay Aleksandrov)
  - net: usb: qmi_wwan: fix memory leak for not ip packets (Daniele Palmas)
  - virtio-net: unbreak vq resizing when coalescing is not negotiated (Heng Qi)
  - virtio-net: check feature before configuring the vq coalescing command (Heng Qi)
  - net/tcp: Disable TCP-AO static key after RCU grace period (Dmitry Safonov)
  - gve: Fix use of netif_carrier_ok() (Praveen Kaligineedi)
  - net: pse-pd: tps23881: Fix the device ID check (Kyle Swenson)
  - sctp: Fix null-ptr-deref in reuseport_add_sock(). (Kuniyuki Iwashima)
  - MAINTAINERS: update status of sky2 and skge drivers (Stephen Hemminger)
  - selftests: mptcp: join: test both signal & subflow (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: ability to invert ADD_ADDR check (Matthieu Baerts (NGI0))
  - mptcp: pm: do not ignore 'subflow' if 'signal' flag is also set (Matthieu Baerts (NGI0))
  - mptcp: pm: don't try to create sf if alloc failed (Matthieu Baerts (NGI0))
  - mptcp: pm: reduce indentation blocks (Matthieu Baerts (NGI0))
  - mptcp: pm: deny endp with signal + subflow + port (Matthieu Baerts (NGI0))
  - mptcp: fully established after ADD_ADDR echo on MPJ (Matthieu Baerts (NGI0))
  - tracefs: Use generic inode RCU for synchronizing freeing (Steven Rostedt)
  - ring-buffer: Remove unused function ring_buffer_nr_pages() (Jianhui Zhou)
  - tracing: Fix overflow in get_free_elt() (Tze-nan Wu)
  - function_graph: Fix the ret_stack used by ftrace_graph_ret_addr() (Petr Pavlu)
  - eventfs: Use SRCU for freeing eventfs_inodes (Mathias Krause)
  - eventfs: Don't return NULL in eventfs_create_dir() (Mathias Krause)
  - tracefs: Fix inode allocation (Mathias Krause)
  - tracing: Use refcount for trace_event_file reference counter (Steven Rostedt)
  - tracing: Have format file honor EVENT_FILE_FL_FREED (Steven Rostedt)
  - bcachefs: Use bch2_wait_on_allocator() in btree node alloc path (Kent Overstreet)
  - bcachefs: Make allocator stuck timeout configurable, ratelimit messages (Kent Overstreet)
  - bcachefs: Add missing path_traverse() to btree_iter_next_node() (Kent Overstreet)
  - bcachefs: ec should not allocate from ro devs (Kent Overstreet)
  - bcachefs: Improved allocator debugging for ec (Kent Overstreet)
  - bcachefs: Add missing bch2_trans_begin() call (Kent Overstreet)
  - bcachefs: Add a comment for bucket helper types (Kent Overstreet)
  - bcachefs: Don't rely on implicit unsigned -> signed integer conversion (Kent Overstreet)
  - lockdep: Fix lockdep_set_notrack_class() for CONFIG_LOCK_STAT (Kent Overstreet)
  - bcachefs: Fix double free of ca->buckets_nouse (Kent Overstreet)
  - module: warn about excessively long module waits (Linus Torvalds)
  - LoongArch: KVM: Remove undefined a6 argument comment for kvm_hypercall() (Dandan Zhang)
  - LoongArch: KVM: Remove unnecessary definition of KVM_PRIVATE_MEM_SLOTS (Yuli Wang)
  - LoongArch: Use accessors to page table entries instead of direct dereference (Huacai Chen)
  - LoongArch: Enable general EFI poweroff method (Miao Wang)
  - padata: Fix possible divide-by-0 panic in padata_mt_helper() (Waiman Long)
  - mailmap: update entry for David Heidelberg (David Heidelberg)
  - memcg: protect concurrent access to mem_cgroup_idr (Shakeel Butt)
  - mm: shmem: fix incorrect aligned index when checking conflicts (Baolin Wang)
  - mm: shmem: avoid allocating huge pages larger than MAX_PAGECACHE_ORDER for shmem (Baolin Wang)
  - mm: list_lru: fix UAF for memory cgroup (Muchun Song)
  - kcov: properly check for softirq context (Andrey Konovalov)
  - MAINTAINERS: Update LTP members and web (Petr Vorel)
  - selftests: mm: add s390 to ARCH check (Nico Pache)
  - redhat: Fix the ownership of /lib/modules/<kversion> directory (Vitaly Kuznetsov)
  - new configs in drivers/phy (Izabela Bakollari)
  - Add support to rh_waived cmdline boot parameter (Ricardo Robaina) [RHEL-26170]
  - Linux v6.11.0-0.rc3


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc3.19.el10]
changelog:
  - exec: Fix ToCToU between perm check and set-uid/gid usage (Kees Cook)
  - binfmt_flat: Fix corruption when not offsetting data start (Kees Cook)
  - ksmbd: override fsids for smb2_query_info() (Namjae Jeon)
  - ksmbd: override fsids for share path check (Namjae Jeon)
  - fedora: Enable AF8133J Magnetometer driver (Peter Robinson)
  - platform/x86: ideapad-laptop: add a mutex to synchronize VPC commands (Gergo Koteles)
  - platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc (Gergo Koteles)
  - platform/x86: ideapad-laptop: introduce a generic notification chain (Gergo Koteles)
  - platform/x86/amd/pmf: Fix to Update HPD Data When ALS is Disabled (Shyam Sundar S K)
  - fix bitmap corruption on close_range() with CLOSE_RANGE_UNSHARE (Al Viro)
  - redhat: spec: add cachestat kselftest (Eric Chanudet)
  - redhat: hmac sign the UKI for FIPS (Vitaly Kuznetsov)
  - not upstream: Disable vdso getrandom when FIPS is enabled (Herbert Xu)
  - Linux v6.11.0-0.rc3


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc4.20.el10]
changelog:
  - Linux 6.11-rc4 (Linus Torvalds)
  - mips: sgi-ip22: Fix the build (Bart Van Assche)
  - ARM: riscpc: ecard: Fix the build (Bart Van Assche)
  - char: xillybus: Check USB endpoints when probing device (Eli Billauer)
  - char: xillybus: Refine workqueue handling (Eli Billauer)
  - Revert "misc: fastrpc: Restrict untrusted app to attach to privileged PD" (Griffin Kroah-Hartman)
  - char: xillybus: Don't destroy workqueue from work item running on it (Eli Billauer)
  - Revert "serial: 8250_omap: Set the console genpd always on if no console suspend" (Griffin Kroah-Hartman)
  - tty: atmel_serial: use the correct RTS flag. (Mathieu Othacehe)
  - tty: vt: conmakehash: remove non-portable code printing comment header (Masahiro Yamada)
  - tty: serial: fsl_lpuart: mark last busy before uart_add_one_port (Peng Fan)
  - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (Mathias Nyman)
  - usb: misc: ljca: Add Lunar Lake ljca GPIO HID to ljca_gpio_hids[] (Hans de Goede)
  - Revert "usb: typec: tcpm: clear pd_event queue in PORT_RESET" (Xu Yang)
  - usb: typec: ucsi: Fix the return value of ucsi_run_command() (Heikki Krogerus)
  - usb: xhci: fix duplicate stall handling in handle_tx_event() (Niklas Neronin)
  - usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup() (Marc Zyngier)
  - thunderbolt: Mark XDomain as unplugged when router is removed (Mika Westerberg)
  - thunderbolt: Fix memory leaks in {port|retimer}_sb_regs_write() (Aapo Vienamo)
  - btrfs: only enable extent map shrinker for DEBUG builds (Qu Wenruo)
  - btrfs: zoned: properly take lock to read/update block group's zoned variables (Naohiro Aota)
  - btrfs: tree-checker: add dev extent item checks (Qu Wenruo)
  - btrfs: update target inode's ctime on unlink (Jeff Layton)
  - btrfs: send: annotate struct name_cache_entry with __counted_by() (Thorsten Blum)
  - fuse: Initialize beyond-EOF page contents before setting uptodate (Jann Horn)
  - mm/migrate: fix deadlock in migrate_pages_batch() on large folios (Gao Xiang)
  - alloc_tag: mark pages reserved during CMA activation as not tagged (Suren Baghdasaryan)
  - alloc_tag: introduce clear_page_tag_ref() helper function (Suren Baghdasaryan)
  - crash: fix riscv64 crash memory reserve dead loop (Jinjie Ruan)
  - selftests: memfd_secret: don't build memfd_secret test on unsupported arches (Muhammad Usama Anjum)
  - mm: fix endless reclaim on machines with unaccepted memory (Kirill A. Shutemov)
  - selftests/mm: compaction_test: fix off by one in check_compaction() (Dan Carpenter)
  - mm/numa: no task_numa_fault() call if PMD is changed (Zi Yan)
  - mm/numa: no task_numa_fault() call if PTE is changed (Zi Yan)
  - mm/vmalloc: fix page mapping if vm_area_alloc_pages() with high order fallback to order 0 (Hailong Liu)
  - mm/memory-failure: use raw_spinlock_t in struct memory_failure_cpu (Waiman Long)
  - mm: don't account memmap per-node (Pasha Tatashin)
  - mm: add system wide stats items category (Pasha Tatashin)
  - mm: don't account memmap on failure (Pasha Tatashin)
  - mm/hugetlb: fix hugetlb vs. core-mm PT locking (David Hildenbrand)
  - mseal: fix is_madv_discard() (Pedro Falcato)
  - powerpc/topology: Check if a core is online (Nysal Jan K.A)
  - cpu/SMT: Enable SMT only if a core is online (Nysal Jan K.A)
  - powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL (Christophe Leroy)
  - powerpc/mm: Fix size of allocated PGDIR (Christophe Leroy)
  - soc: fsl: qbman: remove unused struct 'cgr_comp' (Dr. David Alan Gilbert)
  - smb: smb2pdu.h: Use static_assert() to check struct sizes (Gustavo A. R. Silva)
  - smb3: fix lock breakage for cached writes (Steve French)
  - smb/client: avoid possible NULL dereference in cifs_free_subrequest() (Su Hui)
  - i2c: tegra: Do not mark ACPI devices as irq safe (Breno Leitao)
  - i2c: qcom-geni: Add missing geni_icc_disable in geni_i2c_runtime_resume (Andi Shyti)
  - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (Richard Fitzgerald)
  - scsi: mpi3mr: Avoid MAX_PAGE_ORDER WARNING for buffer allocations (Shin'ichiro Kawasaki)
  - scsi: mpi3mr: Add missing spin_lock_init() for mrioc->trigger_lock (Shin'ichiro Kawasaki)
  - xfs: conditionally allow FS_XFLAG_REALTIME changes if S_DAX is set (Darrick J. Wong)
  - xfs: revert AIL TASK_KILLABLE threshold (Darrick J. Wong)
  - xfs: attr forks require attr, not attr2 (Darrick J. Wong)
  - bcachefs: Fix locking in __bch2_trans_mark_dev_sb() (Kent Overstreet)
  - bcachefs: fix incorrect i_state usage (Kent Overstreet)
  - bcachefs: avoid overflowing LRU_TIME_BITS for cached data lru (Kent Overstreet)
  - bcachefs: Fix forgetting to pass trans to fsck_err() (Kent Overstreet)
  - bcachefs: Increase size of cuckoo hash table on too many rehashes (Kent Overstreet)
  - bcachefs: bcachefs_metadata_version_disk_accounting_inum (Kent Overstreet)
  - bcachefs: Kill __bch2_accounting_mem_mod() (Kent Overstreet)
  - bcachefs: Make bkey_fsck_err() a wrapper around fsck_err() (Kent Overstreet)
  - bcachefs: Fix warning in __bch2_fsck_err() for trans not passed in (Kent Overstreet)
  - bcachefs: Add a time_stat for blocked on key cache flush (Kent Overstreet)
  - bcachefs: Improve trans_blocked_journal_reclaim tracepoint (Kent Overstreet)
  - bcachefs: Add hysteresis to waiting on btree key cache flush (Kent Overstreet)
  - lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc() (Kent Overstreet)
  - bcachefs: Convert for_each_btree_node() to lockrestart_do() (Kent Overstreet)
  - bcachefs: Add missing downgrade table entry (Kent Overstreet)
  - bcachefs: disk accounting: ignore unknown types (Kent Overstreet)
  - bcachefs: bch2_accounting_invalid() fixup (Kent Overstreet)
  - bcachefs: Fix bch2_trigger_alloc when upgrading from old versions (Kent Overstreet)
  - bcachefs: delete faulty fastpath in bch2_btree_path_traverse_cached() (Kent Overstreet)
  - memcg_write_event_control(): fix a user-triggerable oops (Al Viro)
  - arm64: Fix KASAN random tag seed initialization (Samuel Holland)
  - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)
  - arm64: uaccess: correct thinko in __get_mem_asm() (Mark Rutland)
  - clk: thead: fix dependency on clk_ignore_unused (Drew Fustini)
  - block: Fix lockdep warning in blk_mq_mark_tag_wait (Li Lingfeng)
  - md/raid1: Fix data corruption for degraded array with slow disk (Yu Kuai)
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Stefan Haberland)
  - s390/dasd: Remove DMA alignment (Eric Farman)
  - io_uring: fix user_data field name in comment (Caleb Sander Mateos)
  - io_uring/sqpoll: annotate debug task == current with data_race() (Jens Axboe)
  - io_uring/napi: remove duplicate io_napi_entry timeout assignation (Olivier Langlois)
  - io_uring/napi: check napi_enabled in io_napi_add() before proceeding (Olivier Langlois)
  - of/irq: Prevent device address out-of-bounds read in interrupt map walk (Stefan Wiehler)
  - dt-bindings: eeprom: at25: add fujitsu,mb85rs256 compatible (Francesco Dolcini)
  - dt-bindings: Batch-update Konrad Dybcio's email (Konrad Dybcio)
  - thermal: gov_bang_bang: Use governor_data to reduce overhead (Rafael J. Wysocki)
  - thermal: gov_bang_bang: Add .manage() callback (Rafael J. Wysocki)
  - thermal: gov_bang_bang: Split bang_bang_control() (Rafael J. Wysocki)
  - thermal: gov_bang_bang: Call __thermal_cdev_update() directly (Rafael J. Wysocki)
  - ACPI: EC: Evaluate _REG outside the EC scope more carefully (Rafael J. Wysocki)
  - ACPICA: Add a depth argument to acpi_execute_reg_methods() (Rafael J. Wysocki)
  - Revert "ACPI: EC: Evaluate orphan _REG under EC device" (Rafael J. Wysocki)
  - nvdimm/pmem: Set dax flag for all 'PFN_MAP' cases (Zhihao Cheng)
  - rust: x86: remove `-3dnow{,a}` from target features (Miguel Ojeda)
  - kbuild: rust-analyzer: mark `rust_is_available.sh` invocation as recursive (Miguel Ojeda)
  - rust: add intrinsics to fix `-Os` builds (Miguel Ojeda)
  - kbuild: rust: skip -fmin-function-alignment in bindgen flags (Zehui Xu)
  - rust: Support latest version of `rust-analyzer` (Sarthak Singh)
  - rust: macros: indent list item in `module!`'s docs (Miguel Ojeda)
  - rust: fix the default format for CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT (Masahiro Yamada)
  - rust: suppress error messages from CONFIG_{RUSTC,BINDGEN}_VERSION_TEXT (Masahiro Yamada)
  - RISC-V: hwprobe: Add SCALAR to misaligned perf defines (Evan Green)
  - RISC-V: hwprobe: Add MISALIGNED_PERF key (Evan Green)
  - riscv: Fix out-of-bounds when accessing Andes per hart vendor extension array (Alexandre Ghiti)
  - RISC-V: ACPI: NUMA: initialize all values of acpi_early_node_map to NUMA_NO_NODE (Haibo Xu)
  - riscv: change XIP's kernel_map.size to be size of the entire kernel (Nam Cao)
  - riscv: entry: always initialize regs->a0 to -ENOSYS (Celeste Liu)
  - riscv: Re-introduce global icache flush in patch_text_XXX() (Alexandre Ghiti)
  - rtla/osnoise: Prevent NULL dereference in error handling (Dan Carpenter)
  - tracing: Return from tracing_buffers_read() if the file has been closed (Steven Rostedt)
  - KEYS: trusted: dcp: fix leak of blob encryption key (David Gstir)
  - KEYS: trusted: fix DCP blob payload length assignment (David Gstir)
  - dm persistent data: fix memory allocation failure (Mikulas Patocka)
  - Documentation: dm-crypt.rst warning + error fix (Daniel Yang)
  - dm resume: don't return EINVAL when signalled (Khazhismel Kumykov)
  - dm suspend: return -ERESTARTSYS instead of -EINTR (Mikulas Patocka)
  - iommu: Remove unused declaration iommu_sva_unbind_gpasid() (Yue Haibing)
  - iommu: Restore lost return in iommu_report_device_fault() (Barak Biber)
  - gpio: mlxbf3: Support shutdown() function (Asmaa Mnebhi)
  - ALSA: hda/tas2781: Use correct endian conversion (Takashi Iwai)
  - ALSA: usb-audio: Support Yamaha P-125 quirk entry (Juan José Arboleda)
  - ALSA: hda: cs35l41: Remove redundant call to hda_cs_dsp_control_remove() (Richard Fitzgerald)
  - ALSA: hda: cs35l56: Remove redundant call to hda_cs_dsp_control_remove() (Richard Fitzgerald)
  - ALSA: hda/tas2781: fix wrong calibrated data order (Baojun Xu)
  - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (Lianqin Hu)
  - ALSA: hda/realtek: Add support for new HP G12 laptops (Simon Trimmer)
  - spi: Add empty versions of ACPI functions (Richard Fitzgerald)
  - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (Parsa Poorshikhian)
  - ALSA: timer: Relax start tick time check for slave timer elements (Takashi Iwai)
  - drm/mediatek: Set sensible cursor width/height values to fix crash (AngeloGioacchino Del Regno)
  - drm/xe: Hold a PM ref when GT TLB invalidations are inflight (Matthew Brost)
  - drm/xe: Drop xe_gt_tlb_invalidation_wait (Matthew Brost)
  - drm/xe: Add xe_gt_tlb_invalidation_fence_init helper (Matthew Brost)
  - drm/xe/pf: Fix VF config validation on multi-GT platforms (Michal Wajdeczko)
  - drm/xe: Build PM into GuC CT layer (Matthew Brost)
  - drm/xe/vf: Fix register value lookup (Michal Wajdeczko)
  - drm/xe: Fix use after free when client stats are captured (Umesh Nerlige Ramappa)
  - drm/xe: Take a ref to xe file when user creates a VM (Umesh Nerlige Ramappa)
  - drm/xe: Add ref counting for xe_file (Umesh Nerlige Ramappa)
  - drm/xe: Move part of xe_file cleanup to a helper (Umesh Nerlige Ramappa)
  - drm/xe: Validate user fence during creation (Matthew Brost)
  - drm/rockchip: inno-hdmi: Fix infoframe upload (Alex Bee)
  - drm/v3d: Fix out-of-bounds read in `v3d_csd_job_run()` (Maíra Canal)
  - drm: panel-orientation-quirks: Add quirk for Ayn Loki Max (Bouke Sybren Haarsma)
  - drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero (Bouke Sybren Haarsma)
  - dt-bindings: display: panel: samsung,atna45dc02: Fix indentation (Douglas Anderson)
  - drm/amd/amdgpu: add HDP_SD support on gc 12.0.0/1 (Kenneth Feng)
  - drm/amdgpu: Update kmd_fw_shared for VCN5 (Yinjie Yao)
  - drm/amd/amdgpu: command submission parser for JPEG (David (Ming Qiang) Wu)
  - drm/amdgpu/mes12: fix suspend issue (Jack Xiao)
  - drm/amdgpu/mes12: sw/hw fini for unified mes (Jack Xiao)
  - drm/amdgpu/mes12: configure two pipes hardware resources (Jack Xiao)
  - drm/amdgpu/mes12: adjust mes12 sw/hw init for multiple pipes (Jack Xiao)
  - drm/amdgpu/mes12: add mes pipe switch support (Jack Xiao)
  - drm/amdgpu/mes12: load unified mes fw on pipe0 and pipe1 (Jack Xiao)
  - drm/amdgpu/mes: add multiple mes ring instances support (Jack Xiao)
  - drm/amdgpu/mes12: update mes_v12_api_def.h (Jack Xiao)
  - drm/amdgpu: Actually check flags for all context ops. (Bas Nieuwenhuizen)
  - drm/amdgpu/jpeg4: properly set atomics vmid field (Alex Deucher)
  - drm/amdgpu/jpeg2: properly set atomics vmid field (Alex Deucher)
  - drm/amd/display: Adjust cursor position (Rodrigo Siqueira)
  - drm/amd/display: fix cursor offset on rotation 180 (Melissa Wen)
  - drm/amd/display: Fix MST BW calculation Regression (Fangzhi Zuo)
  - drm/amd/display: Enable otg synchronization logic for DCN321 (Loan Chen)
  - drm/amd/display: fix s2idle entry for DCN3.5+ (Hamza Mahfooz)
  - drm/amdgpu/mes: fix mes ring buffer overflow (Jack Xiao)
  - v6.11-rc3-rt3 (Sebastian Andrzej Siewior)
  - crypto: x86/aes-gcm - fix PREEMPT_RT issue in gcm_crypt() (Eric Biggers)
  - hrtimer: Annotate hrtimer_cpu_base_.*_expiry() for sparse. (Sebastian Andrzej Siewior)
  - timers: Add sparse annotation for timer_sync_wait_running(). (Sebastian Andrzej Siewior)
  - locking/rt: Annotate unlock followed by lock for sparse. (Sebastian Andrzej Siewior)
  - locking/rt: Add sparse annotation for RCU. (Sebastian Andrzej Siewior)
  - locking/rt: Remove one __cond_lock() in RT's spin_trylock_irqsave() (Sebastian Andrzej Siewior)
  - locking/rt: Add sparse annotation PREEMPT_RT's sleeping locks. (Sebastian Andrzej Siewior)
  - v6.11-rc3-rt2 (Sebastian Andrzej Siewior)
  - perf daemon: Fix the build on 32-bit architectures (Arnaldo Carvalho de Melo)
  - tools/include: Sync arm64 headers with the kernel sources (Namhyung Kim)
  - tools/include: Sync x86 headers with the kernel sources (Namhyung Kim)
  - tools/include: Sync filesystem headers with the kernel sources (Namhyung Kim)
  - tools/include: Sync network socket headers with the kernel sources (Namhyung Kim)
  - tools/include: Sync uapi/asm-generic/unistd.h with the kernel sources (Namhyung Kim)
  - tools/include: Sync uapi/sound/asound.h with the kernel sources (Namhyung Kim)
  - tools/include: Sync uapi/linux/perf.h with the kernel sources (Namhyung Kim)
  - tools/include: Sync uapi/linux/kvm.h with the kernel sources (Namhyung Kim)
  - tools/include: Sync uapi/drm/i915_drm.h with the kernel sources (Namhyung Kim)
  - perf tools: Add tools/include/uapi/README (Namhyung Kim)
  - kallsyms: Match symbols exactly with CONFIG_LTO_CLANG (Song Liu)
  - kallsyms: Do not cleanup .llvm.<hash> suffix before sorting symbols (Song Liu)
  - kunit/overflow: Fix UB in overflow_allocation_test (Ivan Orlov)
  - gcc-plugins: randstruct: Remove GCC 4.7 or newer requirement (Thorsten Blum)
  - refcount: Report UAF for refcount_sub_and_test(0) when counter==0 (Petr Pavlu)
  - netfilter: nf_tables: Add locking for NFT_MSG_GETOBJ_RESET requests (Phil Sutter)
  - netfilter: nf_tables: Introduce nf_tables_getobj_single (Phil Sutter)
  - netfilter: nf_tables: Audit log dump reset after the fact (Phil Sutter)
  - selftests: netfilter: add test for br_netfilter+conntrack+queue combination (Florian Westphal)
  - netfilter: nf_queue: drop packets with cloned unconfirmed conntracks (Florian Westphal)
  - netfilter: flowtable: initialise extack before use (Donald Hunter)
  - netfilter: nfnetlink: Initialise extack before use in ACKs (Donald Hunter)
  - netfilter: allow ipv6 fragments to arrive on different devices (Tom Hughes)
  - net: hns3: use correct release function during uninitialization (Peiyang Wang)
  - net: hns3: void array out of bound when loop tnl_num (Peiyang Wang)
  - net: hns3: fix a deadlock problem when config TC during resetting (Jie Wang)
  - net: hns3: use the user's cfg after reset (Peiyang Wang)
  - net: hns3: fix wrong use of semaphore up (Jie Wang)
  - selftests: net: lib: kill PIDs before del netns (Matthieu Baerts (NGI0))
  - pse-core: Conditionally set current limit during PI regulator registration (Oleksij Rempel)
  - net: thunder_bgx: Fix netdev structure allocation (Marc Zyngier)
  - net: ethtool: Allow write mechanism of LPL and both LPL and EPL (Danielle Ratson)
  - vsock: fix recursive ->recvmsg calls (Cong Wang)
  - wifi: ath12k: use 128 bytes aligned iova in transmit path for WCN7850 (Baochen Qiang)
  - wifi: iwlwifi: correctly lookup DMA address in SG table (Benjamin Berg)
  - wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change (Bert Karwatzki)
  - wifi: brcmfmac: cfg80211: Handle SSID based pmksa deletion (Janne Grunau)
  - wifi: rtlwifi: rtl8192du: Initialise value32 in _rtl92du_init_queue_reserved_page (Bitterblue Smith)
  - selftest: af_unix: Fix kselftest compilation warnings (Abhinav Jain)
  - tcp: Update window clamping condition (Subash Abhinov Kasiviswanathan)
  - mptcp: correct MPTCP_SUBFLOW_ATTR_SSN_OFFSET reserved size (Eugene Syromiatnikov)
  - mlxbf_gige: disable RX filters until RX path initialized (David Thompson)
  - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (Long Li)
  - net: macb: Use rcu_dereference() for idev->ifa_list in macb_suspend(). (Kuniyuki Iwashima)
  - net: ethernet: mtk_wed: fix use-after-free panic in mtk_wed_setup_tc_block_cb() (Zheng Zhang)
  - net: mana: Fix RX buf alloc_size alignment and atomic op panic (Haiyang Zhang)
  - dt-bindings: net: fsl,qoriq-mc-dpmac: add missed property phys (Frank Li)
  - net: phy: vitesse: repair vsc73xx autonegotiation (Pawel Dembicki)
  - net: dsa: vsc73xx: allow phy resetting (Pawel Dembicki)
  - net: dsa: vsc73xx: check busy flag in MDIO operations (Pawel Dembicki)
  - net: dsa: vsc73xx: pass value in phy_write operation (Pawel Dembicki)
  - net: dsa: vsc73xx: fix port MAC configuration in full duplex mode (Pawel Dembicki)
  - net: axienet: Fix register defines comment description (Radhey Shyam Pandey)
  - atm: idt77252: prevent use after free in dequeue_rx() (Dan Carpenter)
  - igc: Fix qbv tx latency by setting gtxoffset (Faizal Rahim)
  - igc: Fix reset adapter logics when tx mode change (Faizal Rahim)
  - igc: Fix qbv_config_change_errors logics (Faizal Rahim)
  - igc: Fix packet still tx after gate close by reducing i226 MAC retry buffer (Faizal Rahim)
  - net: ethernet: use ip_hdrlen() instead of bit shift (Moon Yeounsu)
  - net/mlx5e: Fix queue stats access to non-existing channels splat (Gal Pressman)
  - net/mlx5e: Correctly report errors for ethtool rx flows (Cosmin Ratiu)
  - net/mlx5e: Take state lock during tx timeout reporter (Dragos Tatulea)
  - net/mlx5e: SHAMPO, Increase timeout to improve latency (Dragos Tatulea)
  - net/mlx5: SD, Do not query MPIR register if no sd_group (Tariq Toukan)
  - selftests/net: Add coverage for UDP GSO with IPv6 extension headers (Jakub Sitnicki)
  - udp: Fall back to software USO if IPv6 extension headers are present (Jakub Sitnicki)
  - net: Make USO depend on CSUM offload (Jakub Sitnicki)
  - gtp: pull network headers in gtp_dev_xmit() (Eric Dumazet)
  - usbnet: ipheth: fix carrier detection in modes 1 and 4 (Foster Snowhill)
  - usbnet: ipheth: do not stop RX on failing RX callback (Foster Snowhill)
  - usbnet: ipheth: drop RX URBs with no payload (Foster Snowhill)
  - usbnet: ipheth: remove extraneous rx URB length check (Foster Snowhill)
  - usbnet: ipheth: race between ipheth_close and error handling (Oliver Neukum)
  - media: atomisp: Fix streaming no longer working on BYT / ISP2400 devices (Hans de Goede)
  - media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (Sean Young)
  - Revert "ata: libata-scsi: Honor the D_SENSE bit for CK_COND=1 and no error" (Niklas Cassel)
  - redhat/configs: Disable dlm in rhel configs (Andrew Price)
  - rhel: aarch64: enable required PSCI configs (Peter Robinson)
  - btrfs: fix invalid mapping of extent xarray state (Naohiro Aota)
  - btrfs: send: allow cloning non-aligned extent if it ends at i_size (Filipe Manana)
  - btrfs: only run the extent map shrinker from kswapd tasks (Filipe Manana)
  - btrfs: tree-checker: reject BTRFS_FT_UNKNOWN dir type (Qu Wenruo)
  - btrfs: check delayed refs when we're checking if a ref exists (Josef Bacik)
  - KVM: SEV: uapi: fix typo in SEV_RET_INVALID_CONFIG (Amit Shah)
  - KVM: x86: Disallow read-only memslots for SEV-ES and SEV-SNP (and TDX) (Sean Christopherson)
  - KVM: eventfd: Use synchronize_srcu_expedited() on shutdown (Li RongQing)
  - KVM: selftests: Add a testcase to verify x2APIC is fully readonly (Michal Luczaj)
  - KVM: x86: Make x2APIC ID 100% readonly (Sean Christopherson)
  - KVM: x86: Use this_cpu_ptr() instead of per_cpu_ptr(smp_processor_id()) (Isaku Yamahata)
  - KVM: x86: hyper-v: Remove unused inline function kvm_hv_free_pa_page() (Yue Haibing)
  - KVM: SVM: Fix an error code in sev_gmem_post_populate() (Dan Carpenter)
  - s390/uv: Panic for set and remove shared access UVC errors (Claudio Imbrenda)
  - KVM: s390: fix validity interception issue when gisa is switched off (Michael Mueller)
  - KVM: arm64: vgic: Hold config_lock while tearing down a CPU interface (Marc Zyngier)
  - KVM: selftests: arm64: Correct feature test for S1PIE in get-reg-list (Mark Brown)
  - KVM: arm64: Tidying up PAuth code in KVM (Fuad Tabba)
  - KVM: arm64: vgic-debug: Exit the iterator properly w/o LPI (Zenghui Yu)
  - KVM: arm64: Enforce dependency on an ARMv8.4-aware toolchain (Marc Zyngier)
  - docs: KVM: Fix register ID of SPSR_FIQ (Takahiro Itazuri)
  - KVM: arm64: vgic: fix unexpected unlock sparse warnings (Sebastian Ott)
  - KVM: arm64: fix kdoc warnings in W=1 builds (Sebastian Ott)
  - KVM: arm64: fix override-init warnings in W=1 builds (Sebastian Ott)
  - KVM: arm64: free kvm->arch.nested_mmus with kvfree() (Danilo Krummrich)
  - KVM: SVM: Fix uninitialized variable bug (Dan Carpenter)
  - selinux: revert our use of vma_is_initial_heap() (Paul Moore)
  - selinux: add the processing of the failure of avc_add_xperms_decision() (Zhen Lei)
  - selinux: fix potential counting error in avc_add_xperms_decision() (Zhen Lei)
  - Squashfs: sanity check symbolic link size (Phillip Lougher)
  - 9p: Fix DIO read through netfs (Dominique Martinet)
  - vfs: Don't evict inode under the inode lru traversing context (Zhihao Cheng)
  - netfs: Fix handling of USE_PGPRIV2 and WRITE_TO_CACHE flags (David Howells)
  - netfs, ceph: Revert "netfs: Remove deprecated use of PG_private_2 as a second writeback flag" (David Howells)
  - file: fix typo in take_fd() comment (Mathias Krause)
  - pidfd: prevent creation of pidfds for kthreads (Christian Brauner)
  - netfs: clean up after renaming FSCACHE_DEBUG config (Lukas Bulwahn)
  - libfs: fix infinite directory reads for offset dir (yangerkun)
  - nsfs: fix ioctl declaration (Christian Brauner)
  - fs/netfs/fscache_cookie: add missing "n_accesses" check (Max Kellermann)
  - filelock: fix name of file_lease slab cache (Omar Sandoval)
  - netfs: Fault in smaller chunks for non-large folio mappings (Matthew Wilcox (Oracle))
  - perf/bpf: Don't call bpf_overflow_handler() for tracing events (Kyle Huey)
  - selftests/bpf: Add a test to verify previous stacksafe() fix (Yonghong Song)
  - bpf: Fix a kernel verifier crash in stacksafe() (Yonghong Song)
  - bpf: Fix updating attached freplace prog in prog_array map (Leon Hwang)
  - Linux v6.11.0-0.rc4


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc5.21.el10]
changelog:
  - Linux 6.11-rc5 (Linus Torvalds)
  - bcachefs: Fix rebalance_work accounting (Kent Overstreet)
  - bcachefs: Fix failure to flush moves before sleeping in copygc (Kent Overstreet)
  - bcachefs: don't use rht_bucket() in btree_key_cache_scan() (Kent Overstreet)
  - bcachefs: add missing inode_walker_exit() (Kent Overstreet)
  - bcachefs: clear path->should_be_locked in bch2_btree_key_cache_drop() (Kent Overstreet)
  - bcachefs: Fix double assignment in check_dirent_to_subvol() (Yuesong Li)
  - bcachefs: Fix refcounting in discard path (Kent Overstreet)
  - bcachefs: Fix compat issue with old alloc_v4 keys (Kent Overstreet)
  - bcachefs: Fix warning in bch2_fs_journal_stop() (Kent Overstreet)
  - fs/super.c: improve get_tree() error message (Kent Overstreet)
  - bcachefs: Fix missing validation in bch2_sb_journal_v2_validate() (Kent Overstreet)
  - bcachefs: Fix replay_now_at() assert (Kent Overstreet)
  - bcachefs: Fix locking in bch2_ioc_setlabel() (Kent Overstreet)
  - bcachefs: fix failure to relock in btree_node_fill() (Kent Overstreet)
  - bcachefs: fix failure to relock in bch2_btree_node_mem_alloc() (Kent Overstreet)
  - bcachefs: unlock_long() before resort in journal replay (Kent Overstreet)
  - bcachefs: fix missing bch2_err_str() (Kent Overstreet)
  - bcachefs: fix time_stats_to_text() (Kent Overstreet)
  - bcachefs: Fix bch2_bucket_gens_init() (Kent Overstreet)
  - bcachefs: Fix bch2_trigger_alloc assert (Kent Overstreet)
  - bcachefs: Fix failure to relock in btree_node_get() (Kent Overstreet)
  - bcachefs: setting bcachefs_effective.* xattrs is a noop (Kent Overstreet)
  - bcachefs: Fix "trying to move an extent, but nr_replicas=0" (Kent Overstreet)
  - bcachefs: bch2_data_update_init() cleanup (Kent Overstreet)
  - bcachefs: Extra debug for data move path (Kent Overstreet)
  - bcachefs: Fix incorrect gfp flags (Kent Overstreet)
  - bcachefs: fix field-spanning write warning (Kent Overstreet)
  - bcachefs: Reallocate table when we're increasing size (Kent Overstreet)
  - smb/server: update misguided comment of smb2_allocate_rsp_buf() (ChenXiaoSong)
  - smb/server: remove useless assignment of 'file_present' in smb2_open() (ChenXiaoSong)
  - smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() (ChenXiaoSong)
  - smb/server: fix return value of smb2_open() (ChenXiaoSong)
  - ksmbd: the buffer of smb2 query dir response has at least 1 byte (Namjae Jeon)
  - s390/boot: Fix KASLR base offset off by __START_KERNEL bytes (Alexander Gordeev)
  - s390/boot: Avoid possible physmem_info segment corruption (Alexander Gordeev)
  - s390/ap: Refine AP bus bindings complete processing (Harald Freudenberger)
  - s390/mm: Pin identity mapping base to zero (Alexander Gordeev)
  - s390/mm: Prevent lowcore vs identity mapping overlap (Alexander Gordeev)
  - scsi: sd: Do not attempt to configure discard unless LBPME is set (Martin K. Petersen)
  - scsi: MAINTAINERS: Add header files to SCSI SUBSYSTEM (Simon Horman)
  - scsi: ufs: qcom: Add UFSHCD_QUIRK_BROKEN_LSDBS_CAP for SM8550 SoC (Manivannan Sadhasivam)
  - scsi: ufs: core: Add a quirk for handling broken LSDBS field in controller capabilities register (Manivannan Sadhasivam)
  - scsi: core: Fix the return value of scsi_logical_block_count() (Chaotian Jing)
  - scsi: MAINTAINERS: Update HiSilicon SAS controller driver maintainer (Yihang Li)
  - cgroup/cpuset: Eliminate unncessary sched domains rebuilds in hotplug (Waiman Long)
  - cgroup/cpuset: Clear effective_xcpus on cpus_allowed clearing only if cpus.exclusive not set (Waiman Long)
  - cgroup/cpuset: fix panic caused by partcmd_update (Chen Ridong)
  - workqueue: Correct declaration of cpu_pwq in struct workqueue_struct (Uros Bizjak)
  - workqueue: Fix spruious data race in __flush_work() (Tejun Heo)
  - workqueue: Remove incorrect "WARN_ON_ONCE(!list_empty(&worker->entry));" from dying worker (Lai Jiangshan)
  - workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() (Will Deacon)
  - workqueue: doc: Fix function name, remove markers (Nikita Shubin)
  - MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed (Jiaxun Yang)
  - MIPS: Loongson64: Set timer mode in cpu-probe (Jiaxun Yang)
  - KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (Marc Zyngier)
  - KVM: arm64: Ensure canonical IPA is hugepage-aligned when handling fault (Oliver Upton)
  - KVM: arm64: vgic: Don't hold config_lock while unregistering redistributors (Marc Zyngier)
  - KVM: arm64: vgic-debug: Don't put unmarked LPIs (Zenghui Yu)
  - NFS: Avoid unnecessary rescanning of the per-server delegation list (Trond Myklebust)
  - NFSv4: Fix clearing of layout segments in layoutreturn (Trond Myklebust)
  - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (Trond Myklebust)
  - nfs: fix bitmap decoder to handle a 3rd word (Jeff Layton)
  - nfs: fix the fetch of FATTR4_OPEN_ARGUMENTS (Jeff Layton)
  - rpcrdma: Trace connection registration and unregistration (Chuck Lever)
  - rpcrdma: Use XA_FLAGS_ALLOC instead of XA_FLAGS_ALLOC1 (Chuck Lever)
  - rpcrdma: Device kref is over-incremented on error from xa_alloc (Chuck Lever)
  - smb/client: fix typo: GlobalMid_Sem -> GlobalMid_Lock (ChenXiaoSong)
  - smb: client: ignore unhandled reparse tags (Paulo Alcantara)
  - smb3: fix problem unloading module due to leaked refcount on shutdown (Steve French)
  - smb3: fix broken cached reads when posix locks (Steve French)
  - Input: himax_hx83112b - fix incorrect size when reading product ID (Dmitry Torokhov)
  - Input: i8042 - use new forcenorestore quirk to replace old buggy quirk combination (Werner Sembach)
  - Input: i8042 - add forcenorestore quirk to leave controller untouched even on s3 (Werner Sembach)
  - Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table (Takashi Iwai)
  - Input: uinput - reject requests with unreasonable number of slots (Dmitry Torokhov)
  - Input: edt-ft5x06 - add support for FocalTech FT8201 (Felix Kaechele)
  - dt-bindings: input: touchscreen: edt-ft5x06: Document FT8201 support (Felix Kaechele)
  - Input: adc-joystick - fix optional value handling (John Keeping)
  - Input: synaptics - enable SMBus for HP Elitebook 840 G2 (Jonathan Denose)
  - Input: ads7846 - ratelimit the spi_sync error message (Marek Vasut)
  - drm/xe: Free job before xe_exec_queue_put (Matthew Brost)
  - drm/xe: Drop HW fence pointer to HW fence ctx (Matthew Brost)
  - drm/xe: Fix missing workqueue destroy in xe_gt_pagefault (Stuart Summers)
  - drm/xe/uc: Use devm to register cleanup that includes exec_queues (Daniele Ceraolo Spurio)
  - drm/xe: use devm instead of drmm for managed bo (Daniele Ceraolo Spurio)
  - drm/xe/xe2hpg: Add Wa_14021821874 (Tejas Upadhyay)
  - drm/xe: fix WA 14018094691 (Daniele Ceraolo Spurio)
  - drm/xe/xe2: Add Wa_15015404425 (Tejas Upadhyay)
  - drm/xe/xe2: Make subsequent L2 flush sequential (Tejas Upadhyay)
  - drm/xe/xe2lpg: Extend workaround 14021402888 (Bommu Krishnaiah)
  - drm/xe/xe2lpm: Extend Wa_16021639441 (Ngai-Mint Kwan)
  - drm/xe/bmg: implement Wa_16023588340 (Matthew Auld)
  - drm/xe/oa/uapi: Make bit masks unsigned (Geert Uytterhoeven)
  - drm/xe/display: Make display suspend/resume work on discrete (Maarten Lankhorst)
  - drm/xe: prevent UAF around preempt fence (Matthew Auld)
  - drm/xe: Fix tile fini sequence (Matthew Brost)
  - drm/xe: Move VM dma-resv lock from xe_exec_queue_create to __xe_exec_queue_init (Matthew Brost)
  - drm/xe/observation: Drop empty sysctl table entry (Ashutosh Dixit)
  - drm/xe: Fix opregion leak (Lucas De Marchi)
  - nouveau/firmware: use dma non-coherent allocator (Dave Airlie)
  - drm/i915/hdcp: Use correct cp_irq_count (Suraj Kandpal)
  - drm/amdgpu: fix eGPU hotplug regression (Alex Deucher)
  - drm/amdgpu: Validate TA binary size (Candice Li)
  - drm/amdgpu/sdma5.2: limit wptr workaround to sdma 5.2.1 (Alex Deucher)
  - drm/amdgpu: fixing rlc firmware loading failure issue (Yang Wang)
  - drm/msm/adreno: Fix error return if missing firmware-name (Rob Clark)
  - drm/msm: fix the highest_bank_bit for sc7180 (Abhinav Kumar)
  - drm/msm/dpu: take plane rotation into account for wide planes (Dmitry Baryshkov)
  - drm/msm/dpu: relax YUV requirements (Dmitry Baryshkov)
  - drm/msm/dpu: limit QCM2290 to RGB formats only (Dmitry Baryshkov)
  - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (Dmitry Baryshkov)
  - drm/msm/dp: reset the link phy params before link training (Abhinav Kumar)
  - drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() (Abhinav Kumar)
  - drm/msm/dp: fix the max supported bpp logic (Abhinav Kumar)
  - drm/msm/dpu: don't play tricks with debug macros (Dmitry Baryshkov)
  - nvme: Remove unused field (Nilay Shroff)
  - nvme: move stopping keep-alive into nvme_uninit_ctrl() (Ming Lei)
  - block: Drop NULL check in bdev_write_zeroes_sectors() (John Garry)
  - block: Read max write zeroes once for __blkdev_issue_write_zeroes() (John Garry)
  - io_uring/kbuf: sanitize peek buffer setup (Jens Axboe)
  - ACPI: video: Add backlight=native quirk for Dell OptiPlex 7760 AIO (Hans de Goede)
  - platform/x86: dell-uart-backlight: Use acpi_video_get_backlight_type() (Hans de Goede)
  - ACPI: video: Add Dell UART backlight controller detection (Hans de Goede)
  - thermal: of: Fix OF node leak in of_thermal_zone_find() error paths (Krzysztof Kozlowski)
  - thermal: of: Fix OF node leak in thermal_of_zone_register() (Krzysztof Kozlowski)
  - thermal: of: Fix OF node leak in thermal_of_trips_init() error path (Krzysztof Kozlowski)
  - thermal/debugfs: Fix the NULL vs IS_ERR() confusion in debugfs_create_dir() (Yang Ruibin)
  - mmc: mmc_test: Fix NULL dereference on allocation failure (Dan Carpenter)
  - mmc: dw_mmc: allow biu and ciu clocks to defer (Ben Whitten)
  - mmc: mtk-sd: receive cmd8 data when hs400 tuning fail (Mengqi Zhang)
  - spi: pxa2xx: Move PM runtime handling to the glue drivers (Andy Shevchenko)
  - spi: pxa2xx: Do not override dev->platform_data on probe (Andy Shevchenko)
  - spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register (Carlos Song)
  - spi: spi-cadence-quadspi: Fix OSPI NOR failures during system resume (Vignesh Raghavendra)
  - spi: zynqmp-gqspi: Scale timeout by data size (Sean Anderson)
  - power: sequencing: request the WLAN enable GPIO as-is (Bartosz Golaszewski)
  - pmdomain: imx: wait SSAR when i.MX93 power domain on (Peng Fan)
  - pmdomain: imx: scu-pd: Remove duplicated clocks (Alexander Stein)
  - ata: pata_macio: Use WARN instead of BUG (Michael Ellerman)
  - ata: pata_macio: Fix DMA table overflow (Michael Ellerman)
  - s390/iucv: Fix vargs handling in iucv_alloc_device() (Alexandra Winter)
  - net: ovs: fix ovs_drop_reasons error (Menglong Dong)
  - netfilter: flowtable: validate vlan header (Pablo Neira Ayuso)
  - netfilter: nft_counter: Synchronize nft_counter_reset() against reader. (Sebastian Andrzej Siewior)
  - netfilter: nft_counter: Disable BH in nft_counter_offload_stats(). (Sebastian Andrzej Siewior)
  - net: xilinx: axienet: Fix dangling multicast addresses (Sean Anderson)
  - net: xilinx: axienet: Always disable promiscuous mode (Sean Anderson)
  - MAINTAINERS: Mark JME Network Driver as Odd Fixes (Simon Horman)
  - MAINTAINERS: Add header files to NETWORKING sections (Simon Horman)
  - MAINTAINERS: Add limited globs for Networking headers (Simon Horman)
  - MAINTAINERS: Add net_tstamp.h to SOCKET TIMESTAMPING section (Simon Horman)
  - MAINTAINERS: Add sonet.h to ATM section of MAINTAINERS (Simon Horman)
  - octeontx2-af: Fix CPT AF register offset calculation (Bharat Bhushan)
  - net: phy: realtek: Fix setting of PHY LEDs Mode B bit on RTL8211F (Sava Jakovljev)
  - net: ngbe: Fix phy mode set to external phy (Mengyuan Lou)
  - ice: use internal pf id instead of function number (Michal Swiatkowski)
  - ice: fix truesize operations for PAGE_SIZE >= 8192 (Maciej Fijalkowski)
  - ice: fix ICE_LAST_OFFSET formula (Maciej Fijalkowski)
  - ice: fix page reuse when PAGE_SIZE is over 8k (Maciej Fijalkowski)
  - bnxt_en: Fix double DMA unmapping for XDP_REDIRECT (Somnath Kotur)
  - ipv6: prevent possible UAF in ip6_xmit() (Eric Dumazet)
  - ipv6: fix possible UAF in ip6_finish_output2() (Eric Dumazet)
  - ipv6: prevent UAF in ip6_send_skb() (Eric Dumazet)
  - netpoll: do not export netpoll_poll_[disable|enable]() (Eric Dumazet)
  - selftests: mlxsw: ethtool_lanes: Source ethtool lib from correct path (Ido Schimmel)
  - udp: fix receiving fraglist GSO packets (Felix Fietkau)
  - mptcp: pm: avoid possible UaF when selecting endp (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: validate fullmesh endp on 1st sf (Matthieu Baerts (NGI0))
  - mptcp: pm: fullmesh: select the right ID later (Matthieu Baerts (NGI0))
  - mptcp: pm: only in-kernel cannot have entries with ID 0 (Matthieu Baerts (NGI0))
  - mptcp: pm: check add_addr_accept_max before accepting new ADD_ADDR (Matthieu Baerts (NGI0))
  - mptcp: pm: only decrement add_addr_accepted for MPJ req (Matthieu Baerts (NGI0))
  - mptcp: pm: only mark 'subflow' endp as available (Matthieu Baerts (NGI0))
  - mptcp: pm: remove mptcp_pm_remove_subflow() (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: test for flush/re-add endpoints (Matthieu Baerts (NGI0))
  - mptcp: pm: re-using ID of unused flushed subflows (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: check re-using ID of closed subflow (Matthieu Baerts (NGI0))
  - mptcp: pm: re-using ID of unused removed subflows (Matthieu Baerts (NGI0))
  - selftests: mptcp: join: check re-using ID of unused ADD_ADDR (Matthieu Baerts (NGI0))
  - mptcp: pm: re-using ID of unused removed ADD_ADDR (Matthieu Baerts (NGI0))
  - netem: fix return value if duplicate enqueue fails (Stephen Hemminger)
  - net: dsa: mv88e6xxx: Fix out-of-bound access (Joseph Huang)
  - net: dsa: microchip: fix PTP config failure when using multiple ports (Martin Whitaker)
  - igb: cope with large MAX_SKB_FRAGS (Paolo Abeni)
  - cxgb4: add forgotten u64 ivlan cast before shift (Nikolay Kuratov)
  - dpaa2-switch: Fix error checking in dpaa2_switch_seed_bp() (Dan Carpenter)
  - bonding: fix xfrm state handling when clearing active slave (Nikolay Aleksandrov)
  - bonding: fix xfrm real_dev null pointer dereference (Nikolay Aleksandrov)
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (Nikolay Aleksandrov)
  - bonding: fix bond_ipsec_offload_ok return type (Nikolay Aleksandrov)
  - ip6_tunnel: Fix broken GRO (Thomas Bogendoerfer)
  - kcm: Serialise kcm_sendmsg() for the same socket. (Kuniyuki Iwashima)
  - net: mctp: test: Use correct skb for route input check (Jeremy Kerr)
  - tcp: prevent concurrent execution of tcp_sk_exit_batch (Florian Westphal)
  - selftests: udpgro: no need to load xdp for gro (Hangbin Liu)
  - selftests: udpgro: report error when receive failed (Hangbin Liu)
  - Bluetooth: MGMT: Add error handling to pair_device() (Griffin Kroah-Hartman)
  - Bluetooth: SMP: Fix assumption of Central always being Initiator (Luiz Augusto von Dentz)
  - Bluetooth: hci_core: Fix LE quote calculation (Luiz Augusto von Dentz)
  - Bluetooth: HCI: Invert LE State quirk to be opt-out rather then opt-in (Luiz Augusto von Dentz)
  - tc-testing: don't access non-existent variable on exception (Simon Horman)
  - net/mlx5: Fix IPsec RoCE MPV trace call (Patrisious Haddad)
  - net/mlx5e: XPS, Fix oversight of Multi-PF Netdev changes (Carolina Jubran)
  - net/mlx5e: SHAMPO, Release in progress headers (Dragos Tatulea)
  - net/mlx5e: SHAMPO, Fix page leak (Dragos Tatulea)
  - net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged (Vladimir Oltean)
  - net: dsa: felix: fix VLAN tag loss on CPU reception with ocelot-8021q (Vladimir Oltean)
  - net: dsa: provide a software untagging function on RX for VLAN-aware bridges (Vladimir Oltean)
  - net: mscc: ocelot: serialize access to the injection/extraction groups (Vladimir Oltean)
  - net: mscc: ocelot: fix QoS class for injected packets with "ocelot-8021q" (Vladimir Oltean)
  - net: mscc: ocelot: use ocelot_xmit_get_vlan_info() also for FDMA and register injection (Vladimir Oltean)
  - selftests: net: bridge_vlan_aware: test that other TPIDs are seen as untagged (Vladimir Oltean)
  - selftests: net: local_termination: add PTP frames to the mix (Vladimir Oltean)
  - selftests: net: local_termination: don't use xfail_on_veth() (Vladimir Oltean)
  - selftests: net: local_termination: introduce new tests which capture VLAN behavior (Vladimir Oltean)
  - selftests: net: local_termination: add one more test for VLAN-aware bridges (Vladimir Oltean)
  - selftests: net: local_termination: parameterize test name (Vladimir Oltean)
  - selftests: net: local_termination: parameterize sending interface (Vladimir Oltean)
  - selftests: net: local_termination: refactor macvlan creation/deletion (Vladimir Oltean)
  - MAINTAINERS: add selftests to network drivers (Jakub Kicinski)
  - bnxt_en: Don't clear ntuple filters and rss contexts during ethtool ops (Pavan Chebbi)
  - virtio_net: move netdev_tx_reset_queue() call before RX napi enable (Jiri Pirko)
  - kbuild: fix typos "prequisites" to "prerequisites" (Masahiro Yamada)
  - Documentation/llvm: turn make command for ccache into code block (Javier Carrasco)
  - kbuild: avoid scripts/kallsyms parsing /dev/null (Masahiro Yamada)
  - treewide: remove unnecessary <linux/version.h> inclusion (Masahiro Yamada)
  - scripts: kconfig: merge_config: config files: add a trailing newline (Anders Roxell)
  - Makefile: add $(srctree) to dependency of compile_commands.json target (Alexandre Courbot)
  - kbuild: clean up code duplication in cmd_fdtoverlay (Masahiro Yamada)
  - platform/x86: ISST: Fix return value on last invalid resource (Srinivas Pandruvada)
  - platform/surface: aggregator: Fix warning when controller is destroyed in probe (Maximilian Luz)
  - platform/surface: aggregator_registry: Add support for Surface Laptop 6 (Maximilian Luz)
  - platform/surface: aggregator_registry: Add fan and thermal sensor support for Surface Laptop 5 (Maximilian Luz)
  - platform/surface: aggregator_registry: Add support for Surface Laptop Studio 2 (Maximilian Luz)
  - platform/surface: aggregator_registry: Add support for Surface Laptop Go 3 (Maximilian Luz)
  - platform/surface: aggregator_registry: Add Support for Surface Pro 10 (Maximilian Luz)
  - platform/x86: asus-wmi: Add quirk for ROG Ally X (Luke D. Jones)
  - erofs: fix out-of-bound access when z_erofs_gbuf_growsize() partially fails (Gao Xiang)
  - erofs: allow large folios for compressed files (Gao Xiang)
  - erofs: get rid of check_layout_compatibility() (Hongzhen Luo)
  - erofs: simplify readdir operation (Hongzhen Luo)
  - ksmbd: Replace one-element arrays with flexible-array members (Thorsten Blum)
  - ksmbd: fix spelling mistakes in documentation (Victor Timofei)
  - ksmbd: fix race condition between destroy_previous_session() and smb2 operations() (Namjae Jeon)
  - ksmbd: Use unsafe_memcpy() for ntlm_negotiate (Namjae Jeon)
  - iommufd/selftest: Make dirty_ops static (Jinjie Ruan)
  - iommufd/device: Fix hwpt at err_unresv in iommufd_device_do_replace() (Nicolin Chen)
  - cxl/test: Skip cxl_setup_parent_dport() for emulated dports (Li Ming)
  - cxl/pci: Get AER capability address from RCRB only for RCH dport (Li Ming)
  - HID: wacom: Defer calculation of resolution until resolution_code is known (Jason Gerecke)
  - HID: multitouch: Add support for GT7868Q (Dmitry Savin)
  - HID: amd_sfh: free driver_data after destroying hid device (Olivier Sobrie)
  - hid-asus: add ROG Ally X prod ID to quirk list (Luke D. Jones)
  - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (Camila Alvarez)
  - printk/panic: Allow cpu backtraces to be written into ringbuffer during panic (Ryo Takakura)
  - fedora: disable CONFIG_DRM_WERROR (Patrick Talbert)


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc5.22.el10]
changelog:
  - netfs: Fix interaction of streaming writes with zero-point tracker (David Howells)
  - netfs: Fix missing iterator reset on retry of short read (David Howells)
  - netfs: Fix trimming of streaming-write folios in netfs_inval_folio() (David Howells)
  - netfs: Fix netfs_release_folio() to say no if folio dirty (David Howells)
  - afs: Fix post-setattr file edit to do truncation correctly (David Howells)
  - mm: Fix missing folio invalidation calls during truncation (David Howells)
  - ovl: ovl_parse_param_lowerdir: Add missed '\n' for pr_err (Zhihao Cheng)
  - ovl: fix wrong lowerdir number check for parameter Opt_lowerdir (Zhihao Cheng)
  - ovl: pass string to ovl_parse_layer() (Christian Brauner)
  - backing-file: convert to using fops->splice_write (Ed Tsai)
  - Revert "pidfd: prevent creation of pidfds for kthreads" (Christian Brauner)
  - romfs: fix romfs_read_folio() (Christian Brauner)
  - netfs, ceph: Partially revert "netfs: Replace PG_fscache by setting folio->private and marking dirty" (David Howells)
  - Add weakdep support to the kernel spec (Justin M. Forbes)
  - redhat: configs: disable PF_KEY in RHEL (Sabrina Dubroca)
  - crypto: akcipher - Disable signing and decryption (Vladis Dronov) [RHEL-54183] {CVE-2023-6240}
  - crypto: dh - implement FIPS PCT (Vladis Dronov) [RHEL-54183]
  - crypto: ecdh - disallow plain "ecdh" usage in FIPS mode (Vladis Dronov) [RHEL-54183]
  - crypto: seqiv - flag instantiations as FIPS compliant (Vladis Dronov) [RHEL-54183]
  - [kernel] bpf: set default value for bpf_jit_harden (Artem Savkov) [RHEL-51896]
  - Linux v6.11.0-0.rc5


author: Jan Stancek <jstancek@redhat.com> [6.11.0-0.rc5.23.el10]
changelog:
  - redhat: change dist-git branch to 10.0-beta (Jan Stancek)
  - Revert "KVM: VMX: Always honor guest PAT on CPUs that support self-snoop" (Vitaly Kuznetsov) [RHEL-54353]
  - uki-virt: add systemd-cryptsetup module (Vitaly Kuznetsov) [RHEL-57723]


author: keycloak-httpd-client-install fails to build with Python 3.12 - 1.1.14
changelog:
  - Resolves: rhbz#2155009 - keycloak-httpd-client-install fails to build with
    Python 3.12: ModuleNotFoundError: No module named 'distutils'


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.3-1
changelog:
  - crypto: Correctly convert passphrases from Python to C (vtrefny)
  - tests: Minor NVMe HostNQN fixes (tbzatek)
  - nvme: Generate HostID when missing (tbzatek)
  - Always use "--fs ignore" with lvresize (mvollmer)
  - nvme: Use interim buffer for nvme_get_log_sanitize() (tbzatek)
  - fs: Fix memory leak (vtrefny)
  - fs: Fix leaking directories with temporary mounts (vtrefny)
  - tests: Specificy required versions when importing GLib and BlockDev introspection (biebl)
  - tests: Replace deprecated unittest assert calls (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.0.4-1
changelog:
  - tests: Fix "invalid escape sequence '\#'" warning from Python 3.12 (vtrefny)
  - tests: Fail early when recompilation fails in library_test (vtrefny)
  - lvm-dbus: Replace g_critical calls with bd_utils_log_format (vtrefny)
  - Use log function when calling a plugin function that is not loaded (vtrefny)
  - logging: Default to DEBUG log level if compiled with --enable-debug (vtrefny)
  - nvme: Rework memory allocation for device ioctls (tbzatek)
  - packit: Add configuration for downstream builds (vtrefny)
  - fs: correct btrfs set label description (jvanderwaa)
  - fs: Disable progress for ntfsresize (vtrefny)
  - part: Do not open disk read-write for read only operations (vtrefny)
  - ci: Bump actions/checkout from v3 to v4 (vtrefny)
  - plugins: btrfs: use g_autofree where possible for g_free (jvanderwaa)
  - plugins: use g_autofree for free'ing g_char's (jvanderwaa)
  - spec: Move obsoleted devel subpackages to libblockdev-devel (vtrefny)
  - spec: Obsolete vdo plugin packages (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.1.0-1
changelog:
  - tests: Skip some checks for btrfs errors with btrfs-progs 6.6.3 (vtrefny)
  - Fix missing progress initialization in bd_crypto_luks_add_key (vtrefny)
  - fs: Report reason for open() and ioctl() failures (tbzatek)
  - utils: Add expected printf string annotation (tbzatek)
  - lvm-dbus: Avoid using already-freed memory (tbzatek)
  - lvm-dbus: Fix leaking error (tbzatek)
  - python: Add a deepcopy function to our structs (vtrefny)
  - tests: Remove unreliable nvme attribute checks (tbzatek)
  - tests: Use BDPluginSpec constructor in LVM DBus plugin tests (vtrefny)
  - tests: Avoid setting up intermediary loop device for the nvme target (tbzatek)
  - tests: Default to /tmp for create_sparse_tempfile() (tbzatek)
  - part: Fix potential double free when getting parttype (vtrefny)
  - Mark NVDIMM plugin as deprecated since 3.1 (vtrefny)
  - tests: Remove some obsolete rules to skip tests (vtrefny)
  - fs: Add support for getting filesystem min size for NTFS and Ext (vtrefny)
  - fs: Fix allowed UUID for generic mkfs with VFAT (vtrefny)
  - fs: Add a generic function to check for fs info availability (vtrefny)
  - fs: Add a function to check label format for F2FS (vtrefny)
  - swap: Add support for checking label and UUID format (vtrefny)
  - ci: Remove the custom version command for Packit (vtrefny)
  - ci: Manually prepare spec file for Packit (vtrefny)
  - overrides: Remove unused 'sys' import (vtrefny)
  - Add BDPluginSpec constructor and use it in plugin_specs_from_names (vtrefny)
  - Sync spec with downstream (vtrefny)
  - ci: Add an action to compile libblockdev with different compilers (vtrefny)


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.4
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - with python3-Cython -> python3dist(cython) < 3~~


author: Fedora Release Engineering <releng@fedoraproject.org> - 2:18.1.2-0.5
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
  - revert python3-Cython -> python3dist(cython) < 3~~


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:18.2.1-2
changelog:
  - ceph-18.2.1, incorporate changes from *final* 18.2.1 release from
    https://download.ceph.com/rpm-18.2.1/el9/SRPMS/ceph-18.2.1-0.el9.src.rpm


author: Mike FABIAN <mfabian@redhat.com> - 0.0.62-1
changelog:
  - Update to 0.0.62
  - Get translation changes from CLDR
  - Add more translations from CLDR
  - Add Norwegian keyboard layout to keyboards.xml
    (Resolves: https://github.com/mike-fabian/langtable/issues/16)
  - Add Hang script to Southern Aymara


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231030-1
changelog:
  - Update to upstream 20231030 release
  - Update firmware file for Intel Bluetooth AX203/AX210/AX211/
  - Update firmware file for Intel Bluetooth Magnetor AX101/AX201/AX211
  - rtl_nic: update firmware of RTL8156B
  - Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - i915: Update MTL DMC to v2.17
  - amdgpu: update various firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231111-1
changelog:
  - Update to upstream 20231111 release
  - Move AMD SEV and TEE firmware to amd-ucode package
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Update firmware file for Intel Bluetooth AX101/AX203/AX210/AX211/BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8851b: update fw to v0.29.41.3


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231211-1
changelog:
  - Update to upstream 20231211 release
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - Add a COPYOPTS variable
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - Update firmware for MT7921/MT7922 Bluetooth device
  - Update firmware for MT7921/MT7922 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qcm2290/qrb4210 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - Add firmware for Cirrus CS35L41 for HP G11 Laptops/2024 ASUS Zenbook Laptops
  - add firmware for mt7988 internal 2.5G ethernet phy
  - Update firmware for Magnetor Intel Bluetooth AX101/AX203/AX211
  - Update firmware for SolarF Intel Bluetooth AX101/AX203/AX211
  - Update firmware for Solar Intel Bluetooth AX101/AX203/AX210/AX211


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Update to upstream 20240115
  - Split out Intel/Cirrus audio firmware, ISP firmware, NXP/TI WiFi Firmware
  - Intel Bluetooth: Update firmware file for AX101/AX203/AX210/AX211
  - Cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - Cirrus: Add firmware for CS35L41 for various Dell laptops
  - update firmware for qat_4xxx devices
  - update firmware for w1u_uart
  - Cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312/DCN314
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - Add firmware for Mediatek WiFi/bluetooth chip (MT7925)
  - ASoC: tas2781/tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ath11k: Updates for WCN6855/WCN6750/IPQ8074
  - ath10k: Updates to WCN3990/QCA9888/QCA4019/QCA6174
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - Cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022/2023 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8550/SM8650 QRD


author: Denys Vlasenko <dvlasenk@redhat.com> - 20240624-4
changelog:
  - linux-firmware ships encrypted zip files (named *.ncf) [rhel-10.0.beta] (RHEL-32183)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
  - qcom: Add AIC100 firmware files
  - amlogic: Update bluetooth firmware binary
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
  - rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
  - rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
  - amdgpu: update DMCUB to v0.0.222.0 for DCN314
  - iwlwifi: add ty/So/Ma firmwares for core88-87 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
  - linux-firmware: add new cc33xx firmware for cc33xx chips
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
  - cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
  - Merge https://github.com/zijun-hu/qca_btfw into qca
  - linux-firmware: Add firmware for Lenovo Thinkbooks
  - amdgpu: update yellow carp firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SDMA 6.0.2 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update psp 13.0.8 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update smu 13.0.0 firmware
  - amdgpu: update SDMA 6.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update picasso firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update SDMA 6.0.1 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update VCN 4.0.5 firmware
  - amdgpu: update PSP 14.0.0 firmware
  - amdgpu: update GC 11.5.0 firmware
  - amdgpu: update navi14 firmware
  - amdgpu: update SMU 13.0.6 firmware
  - amdgpu: update PSP 13.0.6 firmware
  - amdgpu: update GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update aldebaran firmware
  - amdgpu: add support for PSP 14.0.1
  - amdgpu: add support for VPE 6.1.1
  - amdgpu: add support for VCN 4.0.6
  - amdgpu: add support for SDMA 6.1.1
  - amdgpu: add support for GC 11.5.1
  - amdgpu: Add support for DCN 3.5.1
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639
  - cnm: update chips&media wave521c firmware.
  - linux-firmware: Add ordinary firmware for RTL8821AU device
  - amdgpu: add new ISP 4.1.1 firmware
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Amphion: Update vpu firmware
  - linux-firmware: Update firmware file for Intel BlazarU core
  - linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - linux-firmware: Update firmware file for Intel Bluetooth Solar core
  - i915: Add BMG DMC v2.06
  - linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
  - linux-firmware: Update firmware tuning for HP Consumer Laptop
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
  - cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
  - linux-firmware: Add firmware and tuning for Lenovo Y770S
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
  - i915: Update Xe2LPD DMC to v2.20
  - linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
  - linux-firmware: Add firmware for Lenovo Thinkbook 13X
  - ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
  - amdgpu: add DMCUB 3.5 firmware
  - amdgpu: add VPE 6.1.0 firmware
  - amdgpu: add VCN 4.0.5 firmware
  - amdgpu: add UMSCH 4.0.0 firmware
  - amdgpu: add SDMA 6.1.0 firmware
  - amdgpu: add PSP 14.0.0  firmware
  - amdgpu: add GC 11.5.0 firmware
  - amdgpu: update license date
  - Montage: update firmware for Mont-TSSE
  Resolves: RHEL-32183


author: Vojtech Trefny <vtrefny@redhat.com> - 3.9.0-1
changelog:
  - Fix getting default LVM cache metadata size from libblockdev (vtrefny)
  - Fix checking for segment type for cache pools (vtrefny)
  - tests: Enable GFS2 tests (vtrefny)
  - tests: Move 'test_labels' to unit tests (vtrefny)
  - Add a new function to check if a filesystem is empty (vtrefny)
  - tests: Wait for array resync in MD tests (vtrefny)
  - misc: Vagrantfile update (vtrefny)
  - tests: Add a simple unit test for the NVMe module (vtrefny)
  - tests: Add a test case with multiple devices with the same name (vtrefny)
  - tests: Add basic unit tests for device_id (vtrefny)
  - tests: Add a simple test for DeviceTree.get_device_by_device_id (vtrefny)
  - Use get_device_by_device_id instead of _by_name in populator (vtrefny)
  - Add a function to get a device by device ID (vtrefny)
  - Add "device ID" that could be used as a unique device identifier (vtrefny)
  - Fix adding new members to array with redundancy (vtrefny)
  - Correctly set md_uuid when adding/removing member to/from array (vtrefny)
  - tests: Add storage test case for MD RAID (vtrefny)
  - Remove unused pylintcodediff helper script (vtrefny)
  - tests: Add a simple unit test for Btrfs (vtrefny)
  - Generate UUID for newly created btrfs volumes (vtrefny)
  - nvme: Retrieve HostNQN from a first active fabrics connection (tbzatek)
  - ci: Set custom release number for Packit (vtrefny)
  - Support partitioning of hybrid boot disks (vponcova)
  - Fix checking PV free space when removing it from a VG (#2232328) (vtrefny)
  - tests: run_tests script enhancements (vtrefny)
  - Add a BTRFS example (vtrefny)
  - tests: Add a storage test case for BTRFS (vtrefny)
  - Remove support for NVDIMM namespaces (vtrefny)
  - Fix passing extra mkfs arguments to libblockdev (vtrefny)
  - ci: Add a GH action to run blivet-gui test suite on PRs (vtrefny)
  - ci: Add a Dockerfile for building a CI container (vtrefny)
  - ci: Allow installing only build dependencies without test deps (vtrefny)
  - Fix failing tests when running as a non-root user (vtrefny)
  - Add flag to control LVM devices file support (vtrefny)
  - Use libblockdev to check for kernel modules availability (vtrefny)
  - Use libblockdev to remove filesystems instead of calling wipefs (vtrefny)
  - swap: Use libblockdev to check label and UUID format (vtrefny)
  - fs_test: Enable NTFS test case (vtrefny)
  - availability: Remove the unused "lvmdevices" application (vtrefny)
  - availability: Cleanup applications (vtrefny)
  - Remove support for Apple HFS format (vtrefny)
  - Fix raising FormatCreateError in FS._create (vtrefny)
  - Use libblockdev for filesystem mount operation (vtrefny)
  - Use os.statvfs instead of df to get tmpfs size (vtrefny)
  - Use libblockdev to create supported filesystems (vtrefny)
  - Use libblockdev for reading filesystem label (vtrefny)
  - Use libblockdev for getting filesystem info and size (vtrefny)
  - Use libblockdev for filesystem resizing (vtrefny)
  - Use libblockdev for setting and checking filesystem label and UUID (vtrefny)
  - swap: Simplify creating swap with UUID (vtrefny)
  - Use libblockdev for the filesystem sync operation (vtrefny)
  - Add libblockdev filesystem plugin to the list of required plugins (vtrefny)
  - availability: Remove unused "mlabel" application (vtrefny)
  - availability: Simplify checks for LVM VDO and shared LVM support (vtrefny)
  - availability: Do not check e2fsprogs version (vtrefny)
  - Remove JFS support (vtrefny)
  - Remove support for ReiserFS (vtrefny)
  - ci: Update default branch for Packit to 3.9-devel/release (vtrefny)
  - fcoe/iscsi: Use libblockdev to load modules instead of modprobe (vtrefny)
  - Added missing fstab object to SwapSpace (japokorn)
  - misc: Update test dependencies ansible playbook (vtrefny)
  - misc: Simplify the makebumpver script (vtrefny)
  - Do not fail when kpartx is not available (vtrefny)
  - Move kpartx dependency from DMDevice to MultipathDevice (vtrefny)
  - ci: Update default branch for Packit to 3.9-devel/release (vtrefny)
  - Include btrfs volumes names/labels in DeviceTreeBase.names (vtrefny)
  - fixed fstab.read issue (japokorn)
  - Added support for user defined values in fstab (japokorn)
  - Incorporated review comments (japokorn)
  - Fstab support (japokorn)
  - add udev-builtin-path_id property to zfcp-attached SCSI disks (maier)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-1
changelog:
  - Added support for PV grow (japokorn)
  - misc: Add stratis-cli and stratisd to test dependencies (vtrefny)
  - tests: Add a base class for stratis tests (vtrefny)
  - Add a Stratis example with pool encryption using Clevis/Tang (vtrefny)
  - Clear VG UUID from PVs after removing the PV (#2278058) (vtrefny)
  - Use longer timeout for Stratis DBus calls (vtrefny)
  - safe-dbus: Allow using custom timeouts for the DBus calls (vtrefny)
  - Catch JSONDecodeError when parsing Stratis Clevis info (vtrefny)
  - Add support for unlocking locked Stratis pools with Clevis (vtrefny)
  - Add support for creating encrypted Stratis pool with Clevis (vtrefny)
  - Round Stratis Filesystem size down to the nearest sector (vtrefny)
  - Make sure to include stderr when gathering output of stratis tools (vtrefny)
  - Add support for adding new members to existing Stratis pool (vtrefny)
  - Base StratisPoolDevice on ContainerDevice instead of StorageDevice (vtrefny)
  - Ignore invalid/empty UUIDs for NVMe namespaces (vtrefny)
  - lvm: Use more generic exception for inconsistent PV sector sizes (vtrefny)
  - Do not allow creating stratis pools with different sector sizes (vtrefny)
  - availability: Fix starting DBus services (vtrefny)
  - fstab: Use 'mount_type' when writing filesystem type to fstab (vtrefny)
  - Add basic support for BitLocker devices (vtrefny)
  - nvme: Skip startup/write when NVMe plugin isn't available (vtrefny)
  - Fix scanning partitions on RAID arrays (#2269133) (vtrefny)
  - Add a test case with DDF BIOS RAID array (vtrefny)
  - tests: Try to get distro and version from /etc/os-release (vtrefny)
  - availability: Fix checking for DBus service availability (vtrefny)
  - ci: Update packit configuration for 3.10-devel (vtrefny)
  - Remove vim formatting comments (vtrefny)
  - tests: Do not ignore entire test files in pylint (vtrefny)
  - tests: Do not try to import mock and patch from mock (vtrefny)
  - Remove util.stringize and unicodeize functions (vtrefny)
  - Remove Python SIX usage (vtrefny)
  - Remove unused flags and do not read flags from boot command line (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 3.10.0-4
changelog:
  - tests: Try waiting after partition creation for XFS resize test
    Resolves: RHEL-45177
  - Run mkfs.xfs with the force (-f) option by default
    Resolves: RHEL-39384


author: Richard W.M. Jones <rjones@redhat.com> - 9.2-1
changelog:
  - Rebase to ntfs-3g 2022.5.17
  - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785,
    CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789
    resolves rhbz#2127235 rhbz#2127242
    (also 2127264 2127250 2127257)


author: Paul Wouters <paul.wouters@aiven.io> - 4.15-1
changelog:
  - Update libreswan to 4.15 for CVE-2024-3652
  - Resolves rhbz#2274448 CVE-2024-3652 libreswan: IKEv1 default AH/ESP
    responder can crash and restart
  - Allow "ipsec import" to try importing PKCS#12 non-interactively if there
    is no password


author: Kalev Lember <klember@redhat.com> - 2.57.0-2
changelog:
  - Update the license tag to reflect the licenses of all rust dependencies
  - Use cargo_license_summary and cargo_license macros
  - Convert to SPDX identifiers


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-5
changelog:
  - libselinux-3.7-3
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit


author: Jiri Denemark <jdenemar@redhat.com> - 10.4.0-1
changelog:
  - Rebased to libvirt-10.4.0 (RHEL-29893)
  - The rebase also fixes the following bugs:
      RHEL-30177, RHEL-35244, RHEL-39024


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-4
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - virt-host-validate: Allow longer list of CPU flags
  - vmx: Be even more lax when trying to comprehend serial ports
  - vmx: Do not require all ID data for VMWare Distributed Switch
  - tests: vhostuser: add virtiofsd json descriptor
  - tests: qemuxmlconf: adjust test case to new virtiofsd
  - qemu: fill capabilities for virtiofsd
  - qemu: do not use deprecated options for new virtiofsd
  - qemu: migration: allow migration for virtiofs
  - virt-host-validate: Drop extra "PASS"
  - qemu: Don't leave beingDestroyed=true on inactive domain


author: Jiri Denemark <jdenemar@redhat.com> - 10.5.0-5
changelog:
  - Synchronize with libvirt-10.5.0-4.el9 (RHEL-30177)
  - qemu: virtiofs: cache: use 'never' instead of 'none'
  - qemu_domain: Strip <acpi/> from s390(x) definitions
  - qemuxmlconftest: Add tests for the ACPI stripping hack on s390
  - vsh: Allow vshReadlineInit() to be called multiple times


author: Peter Hutterer <peter.hutterer@redhat.com>
changelog:
  - SPDX migration: update to SPDX identifiers.
    Turns out the COPYING file references the HPND, not MIT.


author: Brian C. Lane <bcl@redhat.com> 39.4-1
changelog:
  - Exclude more obsoleted libertas firmware packages (awilliam@redhat.com)
  - Revert "test_minimizer: dnf5 wants --use-host-config" (bcl@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 39.5-1
changelog:
  - Explicitly pull in more filesystem packages (awilliam@redhat.com)
  - runtime-postinstall: Turn off lvm monitoring (bcl@redhat.com)
  - runtime-cleanup.tmpl: fix typo 'gschadow' (chris.riches@nutanix.com)
  - runtime-cleanup: Change how logo pixmaps is cleaned up (bcl@redhat.com)
  - runtime-install: only pull in qcom-firmware on aarch64 (awilliam@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 40.0-1
changelog:
  - Remove some unneccessary storage packages from runtime-install (vtrefny@redhat.com)
  - Do not install polkit-gnome for blivet-gui (vtrefny@redhat.com)
  - docs: Update the quickstart example command (vtrefny@redhat.com)


author: Brian C. Lane <bcl@redhat.com> 40.5.1-1
changelog:
  - New lorax documentation - 40.5.1 (bcl@redhat.com)
    Resolves: RHEL-30615
  - Dockerfile.test: Use Fedora 40 for test image (bcl@redhat.com)
  - Change macboot default to false (bcl@redhat.com)
  - Change defaults to Red Hat Enterprise Linux 10 (bcl@redhat.com)
  - runtime-cleanup: wget2-wget has replaced wget (yselkowi@redhat.com)
  - Added example of how to use livemedia-creator in github actions, and still
    build in fedora. (cjshowalter@alaska.edu)
  - Require lorax-templates-rhel when building for ELN, CentOS Stream and RHEL (sgallagh@redhat.com)
  - workflows: Switch to actions/checkout@v4 (bcl@redhat.com)
  - New lorax documentation - 40.5 (bcl@redhat.com)
  - maint: Switch default platform to F40 (bcl@redhat.com)
  - runtime-cleanup: Update to cleanup more (akira@tagoh.org)
  - runtime-install: Update font packages (akira@tagoh.org)
  - mkksiso: Add support for adding an anaconda updates.img (jkonecny@redhat.com)
  - runtime-install: drop kdump-anaconda-addon (awilliam@redhat.com)
  - s390: Escape volid before using it (bcl@redhat.com)
  - aarch64: Escape volid before using it (bcl@redhat.com)
  - runtime-install: drop retired pcmciautils (awilliam@redhat.com)
  - runtime-install: Drop unneeded packages libmlx4, systemd-sysv, and systemd-units (bcl@redhat.com)
  - runtime-install: wget2-wget has replaced wget (awilliam@redhat.com)
  - runtime-cleanup: anaconda's new interface needs stdbuf (kkoukiou@redhat.com)
  - test-in-podman: Fix problem running in github actions (bcl@redhat.com)
  - test: Add pigz to test-packages (bcl@redhat.com)
  - Adjust runtime-postinstall.tmpl for systemd config files move (zbyszek@in.waw.pl)


author: Michal Schorm <mschorm@redhat.com> - 3:10.11.7-1
changelog:
  - Rebase to 10.11.7
  - Patch 10 removed, the main.ssl_cipher test has been fixed
    and re-enabled by upstream and now passes on all architectures


author: Konstantin Kostiuk <kkostiuk@redhat.com> 105.0.3
changelog:
  - Set version to 105.0.3
  - BZ#2090250 - mingw-qemu-ga-win: Add Provides: bundled() to rpm packages [rhel-9]


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.0
changelog:
  - Set version to 106.0.0
  - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win
  - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0


author: Konstantin Kostiuk <kkostiuk@redhat.com> 106.0.1
changelog:
  - Set version to 106.0.1
  - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism
  - RHEL-581 - Use the SPDX vocabulary to specify the license


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.26.0-1
changelog:
  - update to 1.26.0
  - add Sergey Kandaurov's PGP public key
  - add Roman Arutyunyan's PGP public key
  - remove Maxim Dounin's PGP public key
  - enable experimental HTTP/3 module
  - refresh patches
  - update default config http2 directive
  - remove outdated custom error pages, reducing maintenance burden


author: John Wolfe <jwolfe@vmware.com> - 12.3.0-3
changelog:
  - Address CVE-2023-34058 - BZ 2246963 - SAML token signature token bypass.
  - Address CVE-2023-34059 - BZ 2246962 - vmware-user-suid-wrapper
    file descriptor hijack vulnerability


author: John Wolfe <jwolfe@vmware.com> - 12.3.5-1
changelog:
  - Package new upstream version of open-vm-tools-12.3.5-22544099.
    . fix for CVE-2023-34058 - another SAML token signature bypass vulnerability.
    . fix for CVE-2023-34059 - a file descriptor hijack vulnerability in the
                               vmware-user-suid-wrapper.
    . address https://github.com/vmware/open-vm-tools/issues/310
  - Remove CVE-2023-34058.patch and CVE-2023-34059.patch as no longer needed.


author: Paul Howarth <paul@city-fan.org> - 2.143-1
changelog:
  - Update to 2.143 (rhbz#2216187)
    - Fix regression with implicit minimum value and multiple requirements (GH#38)
  - Don't package perlcritic.rc


author: Paul Howarth <paul@city-fan.org> - 2.206-1
changelog:
  - Update to 2.206
    - Drop rt.cpan.org from SUPPORT section
    - Add instructions to deal with build failure on Ubuntu/Debian (GH#7)


author: Jitka Plesnikova <jplesnik@redhat.com> - 5.001-1
changelog:
  - 5.001 bump (rhbz#2242077)
    Since this version, MySQL 8.x has to be used for build
  - Package tests


author: Michel Lind <salimma@fedoraproject.org> - 4.1.3-1
changelog:
  - Fix CVE-2023-41915
  - Update upstream source URL; pmix/pmix redirects to openpmix/openpmix
  - Use SPDX license identifier


author: Jindrich Novy <jnovy@redhat.com> - 5:5.2.1-1
changelog:
  - podman-5.2.1-1.el10
  - update to https://github.com/containers/podman/releases/tag/v5.2.1
  - Related: RHEL-34195


author: Filip Janus <fjanus@redhat.com> - 16.1-5
changelog:
  - Add versioned provide to the default version
  - Obsolete versioned is no more needed since only default stream provides
    postgresql symbol


author: Brian C. Lane <bcl@redhat.com> - 3.52-1
changelog:
  - Deprecate %packages --instLangs and --excludeWeakdeps kickstart options (vponcova)
  - Deprecate timezone --isUtc, --ntpservers and --nontp kickstart options (vponcova)
  - Fix the assert_removed check in the unit tests (vponcova)
  - Remove the repo --ignoregroups kickstart option in Fedora 40 (vponcova)
  - Remove the logging --level kickstart option in Fedora 40 (vponcova)
  - Remove the method kickstart command in Fedora 40 (vponcova)
  - Remove the autostep kickstart command in Fedora 40 (vponcova)
  - requirements: Add setuptools (bcl)


author: Brian C. Lane <bcl@redhat.com> - 3.52.1-1
changelog:
  - New release: 3.52.1 (bcl)
    Resolves: RHEL-30566
  - docs: Generate RHEL10 docs (bcl)
  - Makefile: Use .z for scratch builds too (bcl)
  - rhel10: autopart on RHEL does not support --type=btrfs (bcl)
  - rhel10: Add test for btrfs command deprecation (bcl)
  - rhel10: Add missing rhsm and syspurpose commands (bcl)
  - Update RHEL 9 handler (bcl)
  - Update RHEL 10 handler classes (bcl)
  - tox.ini: Only test with Python 3.12 to speed things up (bcl)
  - Add RHEL 10 handler (RHEL-30566) (bcl)
  - Use .z version for new builds, start with 3.52.0 (bcl)
  - workflow: Use python 3.12.2 for tests (bcl)
  - workflow: Bump checkout and setup-python actions to new versions (bcl)


author: Brian Stinson <bstinson@redhat.com> - 10.0-43
changelog:
  - Remove shim-ia32 from the installed packages since we don't produce shim-ia32
    any more. (bstinson) Rerelease


author: Parag Nemade <pnemade AT redhat DOT com> - 10.0-44
changelog:
  - Resolves: RHEL-32728 (pnemade)
  - runtime-install: Update font packages
  - runtime-cleanup: Update font packages


author: Brian C. Lane <bcl@redhat.com> - 10.0-45
changelog:
  - tools: Add support for Jira RHEL-XXX issues (bcl)
    Related: RHEL-22656
  - Makefile: Fix clog target (bcl)
    Related: RHEL-22656
  - aarch64: Replace spaces and escape characters in isolabel with '-' (bcl)
    Resolves: RHEL-22656
  - s390: Replace spaces and escape characters in isolabel with '-' (bcl)
    Resolves: RHEL-22658
  - ppc: Remove unused ppc templates and config files (bcl)
    Resolves: RHEL-35394
  - Drop gdisk from the boot.iso (bcl)
    Resolves: RHEL-38339
  - tests: Name the test iso RHEL 10 instead of 9
    Resolves: RHEL-38199
  - Add prefixdevname to Anaconda image
    Related: RHEL-30010
  - spec: Update URL to point to gitlab project
    Resolves: RHEL-32959


author: Stephen Gallagher <sgallagh@redhat.com> - 2021.06-1
changelog:
  - Update to 2021.06-1
  - bundler: Handle archaic license metadata
  - bundler: Warn about bundled dependencies with no license metadata


author: Packit <hello@packit.dev> - 0.2.5-1
changelog:
  - 0.2.5 (Jan Rodak)
  - Show referenced OVAL State (Jan Rodak)
  - Parse reference in filter (Jan Rodak)
  - Show OVAL Variables and referenced OVAL endpoints in report (Jan Rodak)
  - Remove UUID from headings (Jan Rodak)
  - Move function (Jan Rodak)
  - Display in report OVAL object that references to other OVAL Objects (Jan Rodak)
  - Resolve parsing of referenced OVAL Objects and OVAL Variables (Jan Rodak)
  - Add OVAL Variable structure and parser (Jan Rodak)
  - Rework OVAL Object and State (Jan Rodak)
  - Parse mapping between OVAL var and values and propagate them (Jan Rodak)
  - Remove namesapace for attributes (Jan Rodak)
  - Show OVAL states in report (Jan Rodak)
  - Parse attributes of elements in OVAL state and Parse all OVAL states in OVAL test (Jan Rodak)
  - Show OVAL objects in report (Jan Rodak)
  - Parse attributes of elements in OVAL object (Jan Rodak)
  - Removing the processing of collected objects (Jan Rodak)
  - Use an empty string instead of None when the text of the set-value element is empty (Jan Rodak)
  - Fix deprecation warning (Jan Rodak)
  - Remove product detection from the tmt plan (Jan Rodak)
  - Increase vm memory (Jan Rodak)
  - Add python3 dependency (Jan Rodak)
  - Adjust the build of content (Jan Rodak)
  - Automatic product detection to build content by CPE identifier (Jan Rodak)
  - Remove whitespaces (Jan Rodak)
  - Show explanation of score computation in report (Jan Rodak)
  - Add explanation of score computation (Jan Rodak)
  - Parse system attribute from score element (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.6-1
changelog:
  - 0.2.6 (Jan Rodak)
  - Extend the condition to account empty strings in href (Jan Černý)
  - Add comments for the pylint tool (Jan Černý)
  - Add special classes to table element (Jan Černý)
  - Account for missing reference href attribute (Jan Černý)
  - Add pragmas to avoid PEP8 warnings (Jan Černý)
  - Present references in a table (Jan Černý)
  - Collapse CPE tree when is true (Jan Rodak)
  - Fix typo (Jan Rodak)
  - Add titles (Jan Rodak)
  - Fix performace of generation of graphs (Jan Rodak)
  - Rearrange fields of rule detail and OVAL definition detail (Jan Rodak)
  - Fix bugs in html (Jan Rodak)


author: Packit <hello@packit.dev> - 0.2.7-1
changelog:
  - 0.2.7 (Jan Rodak)
  - Add tool tip to search bar (Jan Rodak)
  - Enable search by reference (Jan Rodak)
  - Add generation search infromation (Jan Rodak)
  - Use macro for generation of list items (Jan Rodak)
  - Create two-tier display of Evaluation Characteristics (Jan Rodak)
  - Add title (Jan Rodak)
  - Reduce complexity of function generate_referenced_endpoints (Jan Rodak)
  - Use default dict (Jan Rodak)
  - Fix JSON schema (Jan Rodak)
  - Use correct orthography of addresses types acronyms (Jan Rodak)
  - Add function to update known references (Jan Rodak)
  - Change the presentation of referenced endpoints (Jan Rodak)
  - Add new elements (Jan Rodak)
  - Add onclick function (Jan Rodak)
  - Add map of OVAL endpoints (Jan Rodak)
  - Add target addresses to report (Jan Rodak)
  - Add target addresses to model (Jan Rodak)
  - Fix width of pre element (Jan Rodak)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.3
changelog:
  - Correctly audit hostname and IP address (RHEL-22316)
  - Make default key sizes configurable in sshd-keygen (RHEL-26454)


author: Zoltan Fridrich <zfridric@redhat.com> - 9.6p1-1.5
changelog:
  - Build OpenSSH without ENGINE API
    Resolves: RHEL-45507
  - Remove pam_ssh_agent_auth subpackage
    Resolves: RHEL-45002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-2.0
changelog:
  - Temporary disabling self-test
    Related: RHEL-42635
  - Change ssh-keygen defaults in FIPS mode
    Resolves: RHEL-37324
  - Use FIPS-compatible API for key derivation RHEL-10
    Resolves: RHEL-43592


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.8p1-3
changelog:
  - sshd doesn't propose to enter password again when a non-existing user is specified
    Resolves: RHEL-11981
  - Reenabling self-test on rpm build
    Related: RHEL-42635


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 0.5.3-2
changelog:
  - We run tests with specially crafted OpenSSL configuration, not the system one
    Resolves: RHEL-25983


author: Paul Howarth <paul@city-fan.org> - 0.46-1
changelog:
  - Update to 0.46
    - Fix backwards compatibility with older perls
    - Bump MANIFEST to include extra tests
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 4.09-1
changelog:
  - Update to 4.09
    - Updated backportPP with JSON::PP 4.11
    - Fix a test to pass under perl with core bool support


author: Miro Hrončok <mhroncok@redhat.com> - 1.8.1-1
changelog:
  - On Python older than 3.11, use tomli instead of deprecated toml
  - Fix literal % handling in %{pyproject_files} on RPM 4.19


author: Python Maint <python-maint@redhat.com> - 1.10.0-1
changelog:
  - Add %_pyproject_check_import_allow_no_modules for automated environments
  - Fix handling of tox 4 provision without an explicit tox minversion
  - Fixes: rhbz#2240590


author: Miro Hrončok <mhroncok@redhat.com> - 1.11.0-1
changelog:
  - Add the -l/-L flag to %pyproject_save_files
  - The -l flag can be used to assert at least 1 License-File was detected
  - The -L flag explicitly disables this check (which remains the default)
  - Prevent incorrect usage of %pyproject_buildrequires -R with -x/-e/-t
  - Fixes: rhbz#2244282
  - Show a better error message when %pyproject_install finds no wheel
  - Fixes: rhbz#2242452
  - Fix %pyproject_buildrequires -w when the build backend is already installed and pip isn't
  - Fixes: rhbz#2169855


author: Miro Hrončok <miro@hroncok.cz> - 1.12.0-1
changelog:
  - Namespace pyproject-rpm-macros generated text files with %{python3_pkgversion}
  - That way, a single-spec can be used to build packages for multiple Python versions
  - Fixes: rhbz#2209055


author: Miro Hrončok <mhroncok@redhat.com> - 3.11-10
changelog:
  - Don't assume %_smp_mflags only ever contains -jX, use -j%_smp_build_ncpus directly
  - Fixes: rhbz#2179149


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-1
changelog:
  - Rebase to QEMU 9.0.0 [RHEL-28852]
  - Resolves: RHEL-28852
    (Rebase qemu-kvm to QEMU 9.0.0 for RHEL 10.0 beta)
  - Resolves: RHEL-23771
    ([qemu-kvm] Disable passthrough of pmem device)
  - Resolves: RHEL-34024
    (Remove RDMA migration support
  - Resolves: RHEL-30366
    (Check/fix machine type compatibility for QEMU 9.0.0 [x86_64][rhel-10.0 Beta])
  - Resolves: RHEL-30367
    (Check/fix machine type compatibility for QEMU 9.0.0 [aarch64][rhel-10.0 Beta])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-2
changelog:
  - kvm-Enable-vhost-user-snd-pci-device.patch [RHEL-37563]
  - Resolves: RHEL-37563
    (Enable 'vhost-user-snd-pci' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-3
changelog:
  - kvm-qtest-x86-numa-test-do-not-use-the-obsolete-pentium-.patch [RHEL-28972]
  - kvm-tests-qtest-libqtest-add-qtest_has_cpu_model-api.patch [RHEL-28972]
  - kvm-tests-qtest-x86-check-for-availability-of-older-cpu-.patch [RHEL-28972]
  - kvm-target-cpu-models-x86-Remove-the-existing-deprecated.patch [RHEL-28972]
  - kvm-x86-cpu-deprecate-cpu-models-that-do-not-support-x86.patch [RHEL-28971]
  - kvm-virtio-gpu-fix-v2-migration.patch [RHEL-36329]
  - kvm-rhel-9.4.0-machine-type-compat-for-virtio-gpu-migrat.patch [RHEL-36329]
  - kvm-s390x-remove-deprecated-rhel-machine-types.patch [RHEL-39898]
  - kvm-s390x-select-correct-components-for-no-board-build.patch [RHEL-39898]
  - kvm-target-s390x-Add-a-CONFIG-switch-to-disable-legacy-C.patch [RHEL-39898]
  - kvm-target-s390x-cpu_models-Disable-everything-up-to-the.patch [RHEL-39898]
  - kvm-target-s390x-Revert-the-old-s390x-CPU-model-disablem.patch [RHEL-39898]
  - kvm-Revert-monitor-use-aio_co_reschedule_self.patch [RHEL-43409 RHEL-43410]
  - kvm-aio-warn-about-iohandler_ctx-special-casing.patch [RHEL-43409 RHEL-43410]
  - Resolves: RHEL-28972
    (x86: Remove the existing deprecated CPU models on RHEL10)
  - Resolves: RHEL-28971
    (Consider deprecating CPU models like "Nehalem" / "IvyBridge" on RHEL 10)
  - Resolves: RHEL-36329
    ([RHEL10.0.beta][stable_guest_abi]Failed to migrate VM with (qemu) qemu-kvm: Missing section footer for 0000:00:01.0/virtio-gpu qemu-kvm: load of migration failed: Invalid argument)
  - Resolves: RHEL-39898
    (s390: Remove the legacy CPU models on RHEL10)
  - Resolves: RHEL-43409
    (aio=io_uring: Assertion failure `luringcb->co->ctx == s->aio_context' with block_resize)
  - Resolves: RHEL-43410
    (aio=native: Assertion failure `laiocb->co->ctx == laiocb->ctx->aio_context' with block_resize)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-4
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-46239]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-46239]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-46239]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-46239]
  - Resolves: RHEL-46239
    (CVE-2024-4467 qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-5
changelog:
  - kvm-nbd-server-do-not-poll-within-a-coroutine-context.patch [RHEL-40959]
  - kvm-nbd-server-Mark-negotiation-functions-as-coroutine_f.patch [RHEL-40959]
  - kvm-qio-Inherit-follow_coroutine_ctx-across-TLS.patch [RHEL-40959]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-40959]
  - Resolves: RHEL-40959
    (Qemu hang when quit dst vm after storage migration(nbd+tls))


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-6
changelog:
  - kvm-Enable-vhost-user-scmi-devices.patch [RHEL-50165]
  - Resolves: RHEL-50165
    (Enable 'vhost-user-scmi-pci' and 'vhost-user-scmi' in qemu-kvm for RHIVOS)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-7
changelog:
  - kvm-linux-aio-add-IO_CMD_FDSYNC-command-support.patch [RHEL-51901]
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52599]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52599]
  - Resolves: RHEL-51901
    (qemu-kvm: linux-aio: add support for IO_CMD_FDSYNC command[RHEL-10])
  - Resolves: RHEL-52599
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-10.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-8
changelog:
  - kvm-x86-cpu-update-deprecation-string-to-match-lowest-un.patch [RHEL-54260]
  - Resolves: RHEL-54260
    ([RHEL10] Need to update the deprecated CPU model warning message)


author: Miroslav Rezanina <mrezanin@redhat.com> - 9.0.0-9
changelog:
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52599]
  - Resolves: RHEL-52599
    (CVE-2024-7409 qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-10.0])


author: Gaël Chamoulaud <gchamoul@redhat.com> - 1-5
changelog:
  - Disable RHSM config option manage_repos during installation
  - Enable rhcd auto-enablement only for RHEL>=8


author: Gaël Chamoulaud <gchamoul@redhat.com> - 1-6
changelog:
  - Split preset insights-client and rhcd. RHEL7 compatibility.
  - Add autoregistration when insights-client manually unregister


author: Yaakov Selkowitz <yselkowi@redhat.com> - 90.2-2
changelog:
  - Placeholder build for RHEL 10 until branding is available
  - Provide: system-logos(httpd-logo-ng) for httpd subpackage
  - Drop deps neeed by splashtolss.sh since we don't use it anymore


author: Rich Megginson <rmeggins@redhat.com> - 1.87.1-0.1
changelog:
  - Resolves: RHEL-50291 : storage - Fingerprint storage RHEL System Role managed config files
  - s390x issue fix requires fix for architecture fact


author: Rich Megginson <rmeggins@redhat.com> - 1.87.2-0.1
changelog:
  - Resolves: RHEL-55235 : System Roles: No module documentation
  - Fix storage role tests_lvm_pool_pv_grow issue with pvcreate hang on el7
  - podman - skip quadlet tests on non-x86_64 arch
  - journald - fix the test pattern that looks for the max size
  - network - fix the bond tests issue with firewall
  - sshd - add new parameters for openssh 9.8


author: Rich Megginson <rmeggins@redhat.com> - 1.88.0-0.1
changelog:
  - Resolves: RHEL-55296 : ha_cluster - Fixes for new pcs and ansible
  - fix gather_facts issue with fapolicyd
  - fix gather_facts issue with ha_cluster
  - fix bond test firewall issue with network


author: Rich Megginson <rmeggins@redhat.com> - 1.88.2-0.1
changelog:
  - Resolves: RHEL-55296 : ha_cluster - Fixes for new pcs and ansible
  - several fixes for ostree issues


author: Rich Megginson <rmeggins@redhat.com> - 1.88.4-0.1
changelog:
  - Resolves: RHEL-53897 : kernel_settings - fix: Use tuned files instead of using it as a module
  - recent tuned in el9 changed the profile directory back to the old one
  - so had to change the role to detect directory


author: Rich Megginson <rmeggins@redhat.com> - 1.88.7-0.1
changelog:
  - Resolves: RHEL-57100 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - fapolicyd - fix method used to read from journald to determine when daemon is listening
  - storage - fix tests to use blkid instead of lsblk to get partition table
  - storage - skip stratis tests on el8
  - logging - tests_combination.yml needs fact gathering


author: Rich Megginson <rmeggins@redhat.com> - 1.88.7-0.2
changelog:
  - Resolves: RHEL-57100 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - fapolicyd - fix method used to read from journald to determine when daemon is listening
  - storage - fix tests to use blkid instead of lsblk to get partition table
  - storage - skip stratis tests on el8
  - logging - tests_combination.yml needs fact gathering
  - same as 1.88.7-0.1 but needed to bump N-V-R and rebuild for exception


author: Rich Megginson <rmeggins@redhat.com> - 1.88.8-0.1
changelog:
  - Resolves: RHEL-57100 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - podman - previous fix broke ansible 2.9 + el8 with volume cleanup
  - logging - test issue with imuxsock and journald - restart dbus-broker


author: Rich Megginson <rmeggins@redhat.com> - 1.88.9-0.1
changelog:
  - Resolves: RHEL-57100 : podman - fails to configure and run containers with podman rootless using different username and groupname
  - logging - test issue with imuxsock and loginctl used by podman - restart systemd-logind to fix podman tests
  - updates collection README for new Automation Hub format


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.0-2
changelog:
  - Ensure central package ops log via rpm-plugin-audit recommends (#1476926)
  - Own our Python module directory (#2248555)
  - Fix sysusers.d generator barfing on legit content (#2246236)


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.1-1
changelog:
  - Allow logwatch read logind sessions files
  Resolves: RHEL-30441
  - Allow sulogin relabel tty1
  Resolves: RHEL-30440
  - Dontaudit sulogin the checkpoint_restore capability
  Resolves: RHEL-30440
  - Allow postfix smtpd map aliases file
  Resolves: RHEL-35544
  - Ensure dbus communication is allowed bidirectionally
  Resolves: RHEL-35783
  - Allow various services read and write z90crypt device
  Resolves: RHEL-28539
  - Allow dhcpcd use unix_stream_socket
  Resolves: RHEL-33081
  - Allow xdm_t to watch and watch_reads mount_var_run_t
  Resolves: RHEL-36073
  - Allow plymouthd log during shutdown
  Resolves: RHEL-30455
  - Update rpm configuration for the /var/run equivalency change
  Resolves: RHEL-36094


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.2-1
changelog:
  - Allow all domains read and write z90crypt device
  Resolves: RHEL-28539
  - Allow dhcpc read /run/netns files
  Resolves: RHEL-39510
  - Allow bootupd search efivarfs dirs
  Resolves: RHEL-39514


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.3-1
changelog:
  - Allow virtqemud manage nfs files when virt_use_nfs boolean is on
  Resolves: RHEL-40205
  - Allow virt_driver_domain read files labeled unconfined_t
  Resolves: RHEL-40262
  - Allow virt_driver_domain dbus chat with policykit
  Resolves: RHEL-40346
  - Escape "interface" as a file name in a virt filetrans pattern
  Resolves: RHEL-34769
  - Allow setroubleshootd get attributes of all sysctls
  Resolves: RHEL-40923
  - Allow qemu-ga read vm sysctls
  Resolves: RHEL-40829
  - Allow sbd to trace processes in user namespace
  Resolves: RHEL-39989
  - Allow request-key execute scripts
  Resolves: RHEL-38920
  - Update policy for haproxyd
  Resolves: RHEL-40877


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.4-1
changelog:
  - Confine libvirt-dbus
  Resolves: RHEL-37822
  - Allow sssd create and use io_uring
  Resolves: RHEL-43448
  - Allow virtqemud the kill capability in user namespace
  Resolves: RHEL-44996
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  Resolves: RHEL-44191
  - Allow virtqemud read vm sysctls
  Resolves: RHEL-40938
  - Allow svirt_t read vm sysctls
  Resolves: RHEL-40938
  - Allow rshim get options of the netlink class for KOBJECT_UEVENT family
  Resolves: RHEL-40859
  - Allow systemd-hostnamed read the vsock device
  Resolves: RHEL-45309
  - Allow systemd (PID 1) manage systemd conf files
  Resolves: RHEL-45304
  - Allow journald read systemd config files and directories
  Resolves: RHEL-45304
  - Allow systemd_domain read systemd_conf_t dirs
  Resolves: RHEL-45304
  - Label systemd configuration files with systemd_conf_t
  Resolves: RHEL-45304
  - Allow dhcpcd the kill capability
  Resolves: RHEL-43417
  - Add support for libvirt hooks
  Resolves: RHEL-41168


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.5-1
changelog:
  - Allow to create and delete socket files created by rhsm.service
  Resolves: RHEL-40857
  - Allow svirt read virtqemud fifo files
  Resolves: RHEL-40350
  - Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
  Resolves: RHEL-37822
  - Allow virtqemud read virt-dbus process state
  Resolves: RHEL-37822
  - Allow virtqemud run ssh client with a transition
  Resolves: RHEL-43215
  - Allow virtnetworkd exec shell when virt_hooks_unconfined is on
  Resolves: RHEL-41168
  - Allow NetworkManager the sys_ptrace capability in user namespace
  Resolves: RHEL-46717
  - Update keyutils policy
  Resolves: RHEL-38920
  - Allow ip the setexec permission
  Resolves: RHEL-41182


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.6-1
changelog:
  - Allow virtnodedevd run udev with a domain transition
  Resolves: RHEL-39890
  - Allow virtnodedev_t create and use virtnodedev_lock_t
  Resolves: RHEL-39890
  - Allow svirt attach_queue to a virtqemud tun_socket
  Resolves: RHEL-44312
  - Label /run/systemd/machine with systemd_machined_var_run_t
  Resolves: RHEL-49567
  - Allow to create and delete socket files created by rhsm.service


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.7-1
changelog:
  - Add the swtpm.if interface file for interactions with other domains
  Resolves: RHEL-47274
  - Allow virtproxyd create and use its private tmp files
  Resolves: RHEL-40499
  - Allow virtproxyd read network state
  Resolves: RHEL-40499
  - Allow virtqemud domain transition on swtpm execution
  Resolves: RHEL-47274
  Resolves: RHEL-49763
  - Allow virtqemud relabel virt_var_run_t directories
  Resolves: RHEL-47274
  Resolves: RHEL-45464
  Resolves: RHEL-49763
  - Allow virtqemud domain transition on passt execution
  Resolves: RHEL-45464
  - Allow virt_driver_domain create and use log files in /var/log
  Resolves: RHEL-40239
  - Allow virt_driver_domain connect to systemd-userdbd over a unix socket
  Resolves: RHEL-44932
  Resolves: RHEL-44898
  - Update stalld policy for bpf usage
  Resolves: RHEL-50356
  - Allow boothd connect to systemd-userdbd over a unix socket
  Resolves: RHEL-45907
  - Allow linuxptp configure phc2sys and chronyd over a unix domain socket
  Resolves: RHEL-46011
  - Allow systemd-machined manage runtime sockets
  Resolves: RHEL-49567
  - Allow ip command write to ipsec's logs
  Resolves: RHEL-41222
  - Allow init_t nnp domain transition to firewalld_t
  Resolves: RHEL-52481
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-50377
  - Allow postfix_domain map postfix_etc_t files
  Resolves: RHEL-46327


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.8-1
changelog:
  - Add virt_create_log() and virt_write_log() interfaces
  Resolves: RHEL-47274
  - Update libvirt policy
  Resolves: RHEL-45464
  Resolves: RHEL-49763
  - Allow svirt_tcg_t map svirt_image_t files
  Resolves: RHEL-47274
  - Allow svirt_tcg_t read vm sysctls
  Resolves: RHEL-47274
  - Additional updates stalld policy for bpf usage
  Resolves: RHEL-50356


author: Zdenek Pytela <zpytela@redhat.com> - 40.13.9-1
changelog:
  - Allow virtqemud relabelfrom also for file and sock_file
  Resolves: RHEL-49763
  - Allow virtqemud relabel user tmp files and socket files
  Resolves: RHEL-49763
  - Update virtqemud policy for libguestfs usage
  Resolves: RHEL-49763
  - Label /run/libvirt/qemu/channel with virtqemud_var_run_t
  Resolves: RHEL-47274


author: Kalev Lember <klember@redhat.com> - 45.0-2
changelog:
  - Package review fixes (rhbz#2241553)
  - Add SourceLicense tag to distinguish between the license of the app
    itself and its crate deps
  - Slightly change virtual provides for bundled aperture crate to better
    match other rust packages


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta1-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-29303 - Issue discovered by static analyzer.
  - Resolves: RHEL-11181 - sssd[4022110]: gencache_init: Failed to create directory: //.cache/samba - Permission denied
  - Resolves: RHEL-4986 - [RFE] sssd use systemd-sysusers
  - Resolves: RHEL-4974 - sssd status shows error "krb5_kt_start_seq_get failed: Permission denied" when running as unprivileged user 'sssd'


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-1
changelog:
  - Resolves: RHEL-40253 - Rebase SSSD for RHEL 10-beta
  - Resolves: RHEL-43259 - sudo does not work any more with krb ticket


author: Alexey Tikhonov <atikhono@redhat.com> - 2.10.0~beta2-2
changelog:
  - Resolves: RHEL-51891 - [RHEL-10]logrotate.service fails to start because /var/log/sssd has insecure permission
  - Resolves: RHEL-52400 - SYSDB: remove index on dataExpireTimestamp [rhel-10]
  - Resolves: RHEL-50243 - Please install sssd-polkit-rules by default


author: Joe Orton <jorton@redhat.com> - 1.14.2-21
changelog:
  - restore plaintext password storage by default (per upstream)
  - restrict symbols exposed by DSOs built for httpd


author: Kalev Lember <klember@redhat.com> - 45.0-1
changelog:
  - Update to 45.0
  - Remove and obsolete libsysprof-ui subpackage
  - Drop RHEL libunwind build conditionals as it's no longer an optional dep


author: systemd maintenance team <systemd-maint@redhat.com> - 256-6
changelog:
  - doc: add downstream CONTRIBUTING document (RHEL-40924)
  - ci: allow `policy` as rhel-only keyword (RHEL-40924)
  -  ci: run mkosi test only for Fedora and CentOS Stream (RHEL-40924)
  - taint: remove unused variable `usr_sbin` (RHEL-40924)
  - packit: drop the libarchive workaround (RHEL-40924)
  - packit: drop the dependency on python3-zstd (RHEL-40924)
  - coredump: by default process and store core files up to 1GiB (RHEL-46778)
  - don't ship systemd-ssh-generator harder (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-8
changelog:
  - Avoid /tmp being mounted as tmpfs without the user's will (RHEL-40924)
  - unit: don't add Requires for tmp.mount (RHEL-40924)
  - units: add [Install] section to tmp.mount (RHEL-40924)
  - units: don't enable tmp.mount statically in local-fs.target (RHEL-40924)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-12
changelog:
  - netif-naming-scheme: add rhel-9.5 scheme (RHEL-44416)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-44416)
  - man/net-naming-scheme: add missing period (RHEL-44416)
  - Revert "packit: drop the dependency on python3-zstd" (RHEL-36636)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-13
changelog:
  - systemctl: do not try to acquire triggering units for template units (RHEL-55132)
  - core/unit: add one assertion for u->manager (RHEL-55734)
  - core/service: destroy runtime data when Type=oneshot services exit (RHEL-55734)
  - cgroup-util: Ignore kernel threads in cg_kill_items() (RHEL-55746)
  - cgroup-util: Don't try to open pidfd for kernel threads (RHEL-55746)
  - cgroup-util: fix typo (RHEL-55746)
  - netif-naming-scheme: rename rhel-10.0 to rhel-10.0.beta (RHEL-55728)
  - net-naming-scheme: disable NAMING_FIRMWARE_NODE_SUN (RHEL-55728)
  - net-naming-scheme: remove NAMING_FIRMWARE_NODE_SUN from 9.5 (RHEL-55728)
  - make systemd-ukify subpackage arch dependent (RHEL-52634)


author: systemd maintenance team <systemd-maint@redhat.com> - 256-14
changelog:
  - Revert "cgroup-util: Don't try to open pidfd for kernel threads" (RHEL-52634)
  - ukify: Skip test on architectures without UEFI (RHEL-52634)


author: Frank Ch. Eigler <fche@redhat.com> - 5.1-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases

    * Thu Jan 25 2024 Frank Ch. Eigler <fche@redhat.com> - 5.1-17062192g5fd8daba
  - Automated weekly rawhide release
  - Applied spec changes from upstream git


author: Than Ngo <than@redhat.com> - 12:20230311-14
changelog:
  - texlive should use it's own xpdf based library
  - fixed rpminspect issues
  - fixed source urls
  Related: RHEL-34826


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.21.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2182117
    - plugin_scheduler: fix perf fd leaks
      resolves: rhbz#2173938
    - allow skipping rollback when restarting TuneD or switching profile
      resolves: rhbz#2203142
    - function_calc_isolated_cores: no errors for offline CPUs
      resolves: rhbz#2217015


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17121
    - print all arguments of failing commands in error messages
      resolves: RHEL-3689
    - plugin_sysctl: added support for sysctl names with slash
      resolves: RHEL-3707
    - tuned-adm: added support for moving devices between plugin instances
      resolves: RHEL-15141
    - api: added methods for retrieval of plugin instances and devices
      resolves: RHEL-15137
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
      resolves: RHEL-16469
    - hotplug: do not report ENOENT errors on device remove
      resolves: RHEL-11342
    - plugin_sysctl: expand variables when reporting overrides
      resolves: RHEL-18972
    - plugin_acpi: new plugin which handles ACPI platform_profile
      resolves: RHEL-16966
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
      resolves: RHEL-20767
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
      resolves: RHEL-21129
    - scheduler: add option for ignoring IRQs affinity
      resolves: RHEL-21923
    - plugin_intel_uncore: new plugin for uncore setting


author: Benson Muite <benson_muite@emailplus.org> - 1.13.1-3
changelog:
  - Fix type declaration error
  - Fix to enable use of GCC 13
  - Use SPDX license identifier
  - Fix build requires #RBZ2166925


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 7.3.0-2
changelog:
  - Switched from bcond to bcond_with for compatibility with el8 and el9
  - haproxy builddep on systems with haproxy2
  - Disable pcre2-jit only for fedora <= 37 on 32bit x86


author: Richard W.M. Jones <rjones@redhat.com> - 1:1.42.2-1
changelog:
  - New upstream release 1.42.2
  - Uses PCRE2 instead of PCRE.
  - Remove Obsolete/Provides etc used for upgrades from Fedora 31.
  - libguestfs-tools-c was renamed to guestfs-tools in Fedora 34.


author: John Kacur <jkacur@redhat.com> - 2.6-5
changelog:
  - Added the following upstream patches
    rt-tests-Fix-warnings.patch
    rt-tests-cyclictest-Remove-histogram-totals.patch
    rt-tests-cyclictest-Replace-histogram-code-with-libr.patch
    rt-tests-cyclicdeadline-Add-histogram-support.patch
    rt-tests-cyclics-Fix-json-segfault-when-not-using-hi.patch
    rt-tests-cyclicdeadline-Print-the-histogram-regardle.patch
    rt-tests-cyclicdeadline-Remove-dead-verbose-code-in-.patch
    rt-tests-oslat-should-use-MHz-not-Mhz.patch
    rt-tests-oslat-convert-to-nanoseconds-correctly.patch
  - Added gating.yaml
  - Added tests dir
  Resolves: RHEL-30184


author: Yaakov Selkowitz <yselkowi@redhat.com> - 0.5.5-4
changelog:
  - Adapt tests to mariadb 10.11
  - Avoid rubygem-eventmachine build dependency in RHEL
  - Adapt tests to openssl 3.2


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.69 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.69


author: Matthew Burket <mburket@redhat.com> - 0.1.70-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.70 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.70


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: John Kacur <jkacur@redhat.com> - 0.17.01-2
changelog:
  - Update the License field to the SPDX format using the tools
    license-fedora2spdx and verified by license-validate


author: John Kacur <jkacur@redhat.com> - 0.17.08-3
changelog:
  - Rebase to V0.17.08 Upstream
  - ARM: Don't declare inlined yield helper if yield not available
  Resolves: RHEL-33305


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-7
changelog:
  - Unbreak Podman's downstream Fedora CI
  - Update the BuildRequires on golang to reflect reality
  Resolves: RHEL-30245


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.5-8
changelog:
  - Unbreak Podman's downstream Fedora CI (part 2)
  - Backport some new upstream tests
  Resolves: RHEL-30245


author: Jens Petersen <petersen@redhat.com> - 15.0.0-1
changelog:
  - https://www.unicode.org/versions/Unicode15.0.0/ (#2126234)
  - http://blog.unicode.org/2022/09/announcing-unicode-standard-version-150.html


author: Victor Toso <victortoso@redhat.com> - 0.13.0-1
changelog:
  - Update to 0.13.0
    Release 0.13.0 drops usbredirserver binary so we now have renamed
    usbredir-server pacakge to usbredir-tools which is more befitting what it
    contains


author: Hedayat Vatankhah <hedayat.fwd@gmail.com> - 33.003-1
changelog:
  - Update to latest upstream version: 33.003, and increase the priority of
    vazirmatn font so that it'll be used in Qt apps in fa locale too


author: William Poteat <wpoteat@redhat.com> 1.31.25-1
changelog:
  - 2099925: Drop support for RHEVM on RHEL 9 (jhnidek@redhat.com)
  - Update virt-who-config.5 (s10w.1ife.31@gmail.com)
  - Big optimization and refactoring of Nutanix code (jhnidek@redhat.com)


author: Brian C. Lane <bcl@redhat.com> - 35.11-1
changelog:
  - New release: 35.11 (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (49699333+dependabot[bot])
  - CI: Update terraform hash (bcl)
  - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0 (49699333+dependabot[bot])
  - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (49699333+dependabot[bot])
  - docs: fix typo/formatting in HACKING.md (idiez)
  - Add release creation documentation (bcl)


author: Olivier Fourdan <ofourdan@redhat.com> - 23.2.4-1
changelog:
  - xwayland 23.2.4 - (#2254280)
    CVE fix for: CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


