# changelog

author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Andreas Schneider <asn@redhat.com> - 1.2.7-1
changelog:
  - Update to version 1.2.7
    * Fix unsetting initial XIDs
    * Fix manpage installation
    * Fix cmake-config installation
    * Fixed running with sanitizers
  - resolves: #1690028 - Allow running without RTLD_DEEPBIND


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.5.9-14
changelog:
  - Fixed cleanup crash when processing messages with whitespace only fullname
    Resolves: rhbz#1978901


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.28.7-1
changelog:
  - 1.28.7, urftopdf nor pdftoopvp aren't compiled anymore
  - 1904405 - HP M281fdw: čžš characters printed as squares with "driverless" driver


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1914316
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972353


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-6
changelog:
  - Remove "Revert Terminology cleanups" patch
    Resolves: rhbz#1990982
  - Fix running tests in gating
    Resolves: rhbz#1990237
  - Opt out from using LVM devices file in 9 Beta
    Resolves: rhbz#1984851


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-8
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#2012121
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1971516


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-12
changelog:
  - Fix log message for the LVM devices filter
    Resolves: rhbz#2034277
  - Exclude unusable disks from PartitionFactory
    Resolves: rhbz#2017432


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.5.1-1
changelog:
  - Rebase to release 1.5.1
  - fix CVE-2020-27780: authentication bypass when the user doesn't exist
    and root password is blank (#1901173)


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-7
changelog:
  - kvm-qemu-storage-daemon-Add-vhost-user-blk-help.patch [bz#1962088]
  - kvm-qemu-storage-daemon-Fix-typo-in-vhost-user-blk-help.patch [bz#1962088]
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046201]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2034791]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2034791]
  - Resolves: bz#1962088
    ([QSD] wrong help message for the fuse)
  - Resolves: bz#2046201
    (CVE-2022-0358 qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-9.0])
  - Resolves: bz#2034791
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-8
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#2033708]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#2033708]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#2033708]
  - kvm-Enable-SGX-RH-Only.patch [bz#2033708]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#2033708]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041461]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041461]
  - kvm-iotests-Test-qemu-img-convert-of-zeroed-data-cluster.patch [bz#1882917]
  - kvm-qemu-img-make-is_allocated_sectors-more-efficient.patch [bz#1882917]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2040123]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2040123]
  - kvm-hw-arm-smmuv3-Fix-device-reset.patch [bz#2042481]
  - Resolves: bz#2033708
    ([Intel 9.0 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041461
    (Inconsistent block status reply in qemu-nbd)
  - Resolves: bz#1882917
    (the target image size is incorrect when converting a badly fragmented file)
  - Resolves: bz#2040123
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2042481
    ([aarch64] Launch guest with "default-bus-bypass-iommu=off,iommu=smmuv3" and "iommu_platform=on", guest hangs after system_reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-9
changelog:
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2046659]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2046659]
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2033626]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2033626]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2033626]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2033626]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2033626]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2033626]
  - Resolves: bz#2046659
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2033626
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-10
changelog:
  - kvm-Revert-ui-clipboard-Don-t-use-g_autoptr-just-to-free.patch [bz#2042820]
  - kvm-ui-avoid-compiler-warnings-from-unused-clipboard-inf.patch [bz#2042820]
  - kvm-ui-clipboard-fix-use-after-free-regression.patch [bz#2042820]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2042820]
  - kvm-memory-Fix-incorrect-calls-of-log_global_start-stop.patch [bz#2044818]
  - kvm-memory-Fix-qemu-crash-on-starting-dirty-log-twice-wi.patch [bz#2044818]
  - Resolves: bz#2042820
    (qemu crash when try to copy and paste contents from client to VM)
  - Resolves: bz#2044818
    (Qemu Core Dumped when migrate -> migrate_cancel -> migrate again during guest is paused)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11
changelog:
  - kvm-spec-Remove-qemu-virtiofsd.patch [bz#2055284]
  - Resolves: bz#2055284
    (Remove the qemu-virtiofsd subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.1
changelog:
  - kvm-RHEL-mark-old-machine-types-as-deprecated.patch [bz#2052050]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2059786]
  - kvm-spec-Fix-obsolete-for-spice-subpackages.patch [bz#2059175 bz#2059146]
  - kvm-spec-Obsolete-old-usb-redir-subpackage.patch [bz#2059175 bz#2059146]
  - kvm-spec-Obsolete-ssh-driver.patch [bz#2059175 bz#2059146]
  - Resolves: bz#2052050
    (Mark all RHEL-8 and earlier machine types as deprecated)
  - Resolves: bz#2059786
    ([virtual network][rhel9][vDPA] qemu crash after hot unplug vdpa device)
  - Resolves: bz#2059175
    (Broken upgrade path due to qemu-kvm-hw-usbredir  rename)
  - Resolves: bz#2059146
    (Missing qemu-kvm-block-ssh obsolete breaks upgrade path)


author: <cconte@redhat.com> - 6.2.0-11.el9_0.2
changelog:
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2053584]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2053584]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2038051]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2038051]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2043531]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2043531]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2043531]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2043531]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2043531]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2043531]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2043531]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2043531]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2043531]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2043531]
  - Resolves: bz#2053584
    (watchdog: BUG: soft lockup - CPU#3 stuck for 22s! [cat:2843])
  - Resolves: bz#2038051
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04')
  - Resolves: bz#2043531
    (Guest can not start with SLIC acpi table)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.3
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2071102]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2075635]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2075640]
  - Resolves: bz#2071102
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-9.0.0.z])
  - Resolves: bz#2075635
    (CVE-2022-26353 qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-9] [rhel-9.0.0.z])
  - Resolves: bz#2075640
    (CVE-2022-26354 qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-9] [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.4
changelog:
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2095795]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2095795]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2095795]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2095795]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2095795]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2095795]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2095795]
  - Resolves: bz#2095795
    (PXE boot crash qemu when using multiqueue vDPA [rhel-9.0.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-11.el9_0.5
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2109569]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2109569]
  - Resolves: bz#2109569
    (Stalled IO Operations in VM [rhel-9.0.0.z])


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-4
changelog:
  - Backport ppc hardware flags detection (#2051307)
  - Disable PKCS#1.5 encryption in FIPS mode (#2061328)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Michal Ruprich <mruprich@redhat.com> - 7.5.1-4
changelog:
  - Resolves: #1958155 - Upgrading frr unconditionally creates /etc/frr/frr.conf, breaking existing configuration


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.1
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2061731 - auparse missing information when used with --format-text (rhel-9.0)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.2
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2070706 - Default systemd service config blocks audit watch rules in some directories (rhel 9.0)


author: Remi Collet <rcollet@redhat.com> - 8.0.10-1
changelog:
  - rebase to 8.0.10 #1992513
  - compatibility with OpenSSL 3.0 #1992492
  - snmp:  add sha256 / sha512 security protocol #1936635
  - phar: implement openssl_256 and openssl_512 for phar signatures
  - phar: use sha256 signature by default


author: Petr Menšík <pemensik@redhat.com> - 2.85-3
changelog:
  - Send queries only to best domain-specific server (#2047510)
  - Offer alternate DHCPv6 address if requested is already leased (#1998448)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.19-1
changelog:
  - Update to 0.7.19
  - repo_add_conda: add flag to skip v2 packages
  - fix rare segfault in resolve_jobrules() that could happen if new rules are learnt
  - fix memory leaks


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.20-1
changelog:
  - Update to 0.7.20
  - new SOLVER_EXCLUDEFROMWEAK job to ignore pkgs for weak dependencies
  - support for environments in comps parser
  - fix misparsing of '&' in attributes with libxml2
  - choice rules: treat orphaned packages as newest
  - fix compatibility with Python 3.10


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-11
changelog:
  - CVE-2022-0261 vim: Heap-based Buffer Overflow in block_insert() in src/ops.c
  - CVE-2022-0318 vim: heap-based buffer overflow in utf_head_off() in mbyte.c
  - CVE-2022-0359 vim: heap-based buffer overflow in init_ccline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0319 vim: heap-based out-of-bounds read
  - CVE-2022-0361 vim: Heap-based Buffer Overflow in GitHub repository


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0368 vim: Out-of-bounds Read in vim
  - CVE-2022-0417 vim: heap-based-buffer-overflow in ex_retab() of src/indent.c
  - CVE-2022-0408 vim: Stack-based Buffer Overflow in spellsuggest.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-12
changelog:
  - CVE-2022-0413 vim: use after free in src/ex_cmds.c
  - CVE-2022-0443 vim: heap-use-after-free in enter_buffer() of src/buffer.c
  - CVE-2022-0392 vim: heap-based buffer overflow in getexmodeline() in ex_getln.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16.1
changelog:
  - CVE-2022-0554 vim: Use of Out-of-range Pointer Offset in vim prior
  - CVE-2022-0943 vim: Heap-based Buffer Overflow occurs in vim
  - CVE-2022-1154 vim: use after free in utf_ptr2char
  - CVE-2022-1420 vim: Out-of-range Pointer Offset


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16.3
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Sergio Correia <scorreia@redhat.com> - 9-6
changelog:
  - Define log callback function to use with libcryptsetup
    Logs from libcryptsetup now go to stderr and this prevents issues like
    the one reported in https://bugzilla.redhat.com/show_bug.cgi?id=1770395


author: Paul Howarth <paul@city-fan.org> - 3.7.5-1
changelog:
  - Update to 3.75
    - Make build (more) reproducible
    - Removed "portable" from the warnings list, as 32-bit perls (as opposed to
      32-bit platforms) are practically extinct and it warns about a weird subset
      of operations, e.g. 64-bit hex() is not ok, 64-bit addition is fine, makes
      no sense; additionally, other than hex/oct etc. harassment, there is
      nothing in this category that otherwise could be useful
  - Specify all build dependencies
  - Drop ancient obsoletes/provides for removed tests sub-package
  - Drop redundant buildroot cleaning in %install section
  - Simplify find command using -delete
  - Fix permissions verbosely


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Adam Jackson <ajax@redhat.com> - 2.3.4-25
changelog:
  - Fix invoking autogen/configure so the default CFLAGS actually get applied
    Resolves: rhbz#2044881


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-6
changelog:
  - Fix slapd.tmpfiles complaints. Related: rhbz#1969853
  - Use https:// for source Related: rhbz#1973597


author: Simon Pichugin <spichugi@redhat.com> - 2.4.59-2
changelog:
  - Enable BIND_NOW to prevent GOT overwrite attacks.
  - Ignore badfuncs error in rpminspect because it's a false positive
    Related: rhbz#2002747


author: Simon Pichugin <spichugi@redhat.com> - 2.6.2-1
changelog:
  - Update to new major release OpenLDAP 2.6.2
    The client tools parameters '-h' and '-p' are officially deprecated,
    please, use '-H' parameter instead.
    Change STRIP to STRIP_OPTS
    Add export symbols related to LDAP_CONNECTIONLESS
    Related: rhbz#2117752


author: Martin Cermak <mcermak@redhat.com> - 4.6-9
changelog:
  - rhbz2027683: python tapset regression
  - rhbz2027683: systemtap.examples/io/iostat-scsi.stp PR28633


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-6
changelog:
  - Add 0022-multipathd-cli_handlers-cleanup-setting-reply-length.patch
    * Found by corosync
  - Related: bz #1984921


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-1
changelog:
  - Update Source to upstream version 0.8.7 plus upstream staged commits
    * Previous patches 0011-0016 & 0018-0022 are included in the source tarball
    * Fixes bz#2017592
  - Rename files
    * Previous patches 0001-0010 are now patches 0013-0022
  - Modify 0018-RH-add-mpathconf.patch
    * merged with previous patch 0017
  - Add 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch
    * Fixes bz#1984303
  - Fix multipath_conf_syntax test to work with bz #1984303
  - Resolves: bz #1984303, #2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-2
changelog:
  - Modify 0017-RH-use-rpm-optflags-if-present.patch
    * use RPM_LF_FLAGS
  - Modify 0018-RH-add-mpathconf.patch
    * update default config to match multipath changes
  - Modify 0022-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * fix cmocka vpd tests
  - Rename 0023-libmulitpath-add-section-name-to-invalid-keyword-out.patch to
           0023-libmultipath-add-section-name-to-invalid-keyword-out.patch
  - Resolves: bz#2017592


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-3
changelog:
  - Add 0024-libmultipath-use-typedef-for-keyword-handler-functio.patch
  - Add 0025-libmultipath-print-the-correct-file-when-parsing-fai.patch
  - Add 0026-libmultipath-pass-file-and-line-number-to-keyword-ha.patch
  - Add 0027-libmultipath-make-set_int-take-a-range-for-valid-val.patch
  - Add 0028-libmultipath-improve-checks-for-set_str.patch
  - Add 0029-libmultipath-deprecate-file-and-directory-config-opt.patch
  - Add 0030-libmultipath-split-set_int-to-enable-reuse.patch
  - Add 0031-libmultipath-cleanup-invalid-config-handling.patch
  - Add 0032-libmultipath-don-t-return-error-on-invalid-values.patch
    * The above 9 patches fix bz #2017969
  - Add 0033-multipathd-avoid-unnecessary-path-read-only-reloads.patch
    * Fixes bz #2017979
  - Add 0034-multipath-fix-exit-status-of-multipath-T.patch
  - Resolves: bz #2017969, #2017979


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-4
changelog:
  - Add 0035-RH-mpathconf-fix-setting-property_blacklist.patch
  - Add 0036-libmultipath-fix-disassemble-status-for-historical-s.patch
    * Fixes bz #2042032
  - Add 0037-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0038-multipathd-trigger-udev-change-on-path-addition.patch
    * Fixes bz #2028835
  - Resolves: bz #2028835, #2042032


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-5
changelog:
  - Add 0039-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * Fixes bz #2050421
  - Add 0040-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * Fixes bz #2039749
  - Resolves: bz #2039749, #2050421


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-6
changelog:
  - Add 0041-multipathd-handle-fpin-events.patch
  - Add 0042-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
    * Add "marginal_pathgroups fpin" for responding to PFIN-Li events
    * Fixes bz #2053642
  - Modify tests/restate_module
    * Always offline the path with the lowest priority
    * Fixes bz #2052633
  - Resolves: bz #2052633, #2053642


author: Richard Hughes <richard@hughsie.com> 0.7.16-1
changelog:
  - Update to 0.7.15
  - Add UPL short name to SPDX conversion
  - Allow parsing desktop files using as_app_parse_data()
  - Do not preserve restrictive permissions when installing AppStream files
  - Modernize the validation requirements
  - Remove relative path from icon names
  - Support loading YAML from as_store_from_bytes()
  - Update list of allowed metadata licences
  - Update the SPDX license list to v3.5


author: Richard Hughes <richard@hughsie.com> 0.7.17-1
changelog:
  - New upstream release
  - Add "icon-theme" as recognised component type
  - Fix CI by moving 'future' back a bit
  - Make default content rating values match OARS semantics
  - Properly initialize unique_id_mutex


author: Richard Hughes <richard@hughsie.com> 0.7.18-1
changelog:
  - New upstream release
  - Add content rating system APIs from gnome-software
  - Add "validate-version" command
  - Allow timestamp in the future in validate-relax
  - Don't ignore localized strings that are the same as original
  - Fix crash with invalid children of <ul/>
  - Properly initialize mutexes
  - Test launchable tags in validation


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Dominik 'Rathann' Mierzejewski <rpm@greysector.net> 1.0.12-1
changelog:
  - update to 1.0.12 (#1827949)
  - drop obsolete patch
  - fixes CVE-2020-11863, CVE-2020-11864, CVE-2020-11865, CVE-2020-11866


author: Tomas Bzatek <tbzatek@redhat.com> - 1.47-7
changelog:
  - Fix sg_inq parsing in rescan-scsi-bus.sh (#2036005,#2035362)
  - Fix rescan-scsi-bus.sh summary print (#2035382)
  - sg_readcap --zbc man page switch fix (#2036718)
  - Various Covscan fixes (#2044433)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.26-1
changelog:
  - Fix plugin exception reporting
  - Update translations
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Do not use Python slip package


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.27-1
changelog:
  - sedispatch: check read_size
  - SafeConfigParser is deprecated and will be dropped
  - Fix typos in --help, man pages and developer's guide
  - Improve Python 3.10 compatibility
    https://pagure.io/setroubleshoot/issue/58
  - Update translations


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.28-1
changelog:
  - Look for modules in /usr/share/selinux/packages
  - Always use rpm source package for reporting
  - Improve after_first email filter behavior


author: Thomas Haller <thaller@redhat.com> - 1.20.0-1
changelog:
  - Update to 1.20.0 release
  - Drop NotShowIn=GNOME
  - Use wireless-security code from libnma
  - Add flatpak build configuration
  - applet: hide unmanaged ethernet devices in nm-applet
  - applet: fix Wi-Fi scan requests with appindicator
  - editor: fix drop down list for connection.secondaries


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.0.21-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#2017428
  - Check the support for the Subscription module on startup (vponcova)
    Resolves: rhbz#1957063
  - Activate DBus modules based on the new configuration options (vponcova)
    Related: rhbz#1957063
  - Add new configuration options for the DBus module activation (vponcova)
    Related: rhbz#1957063
  - Add product config for Rocky Linux (tucklesepk)
    Resolves: rhbz#2019995


author: Martin Kolman <mkolman@redhat.com> - 34.25.0.22-1
changelog:
  - Add base repo name for CentOS Stream after repository renaming (jkonecny)
    Resolves: rhbz#1955331
  - The OPAL compatibility with XFS features is mandatory (vponcova)
    Resolves: rhbz#2008792


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.24-1
changelog:
  - Create the LVM devices file (vslavik)
    Resolves: rhbz#2011329
  - Update outdated system purpose related strings (mkolman)
    Related: rhbz#2015059
  - Always set system purpose from GUI (mkolman)
    Resolves: rhbz#2015059


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.25-1
changelog:
  - Hide the help button on the progress spoke (vponcova)
    Related: rhbz#1995945
  - Enable the built-in help content (vponcova)
    Resolves: rhbz#1995945
  - Remove the provides_web_browser property (vponcova)
    Related: rhbz#1995945
  - Cache the parsed content of the help mapping files (vponcova)
    Related: rhbz#1995945
  - Remove the default_help_pages configuration option (vponcova)
    Related: rhbz#1995945
  - Remove the helpFile attribute (vponcova)
    Related: rhbz#1995945
  - Implement the unified help support (vponcova)
    Related: rhbz#1995945
  - Define a unique id in the main spokes and hubs (vponcova)
    Related: rhbz#1995945
  - Add the Screen class (vponcova)
    Related: rhbz#1995945
  - Enable Closest mirror on CentOS Stream 9 (jkonecny)
    Related: rhbz#1955331
  - Do not modify boot order on UEFI if asked (vslavik)
    Resolves: rhbz#2025953


author: Vladimir Slavik <vslavik@redhat.com> - 34.25.0.26-1
changelog:
  - Write all PVs to LVM devices file (vslavik)
    Resolves: rhbz#2040302
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#2026916
  - Fix the condition for entering the root configuration (vponcova)
    Resolves: rhbz#2026916
  - Move tests for pyanaconda.ui.lib.users to a new file (vponcova)
    Related: rhbz#2026916


author: Vendula Poncova <vponcova@redhat.com> - 34.25.0.27-1
changelog:
  - Use cache when fetching organization data from the GUI (mkolman)
    Resolves: rhbz#2044258
  - Bump subscription-manager version (mkolman)
    Related: rhbz#2048449
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#2048449
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#2048449
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#2048449


author: Radek Vykydal <rvykydal@redhat.com> - 34.25.0.29-1
changelog:
  - Make failure in generating of dracut arguments for iSCSI device non-fatal.
    (rvykydal)
    Resolves: rhbz#2055985
  - Do not generate dracut arguments multiple times for some storage devices
    (rvykydal)
    Related: rhbz#2055985
  - Skip /etc/machine-info during live installs (awilliam)
    Resolves: rhbz#2059565


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.65.0-5.1
changelog:
  - advisory upgrade: filter out advPkgs with different arch
  - Add obsoletes to filtering for advisory candidates


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.44.0-19
changelog:
  - Conditionalized guile support
    Resolves: rhbz#1953974
  - Updated RHEL macros
    Resolves: rhbz#1957653


author: Remi Collet <remi@remirepo.net> - 1.1.0-5
changelog:
  - fix missing HAVE_SSIZE_T macro using patch from
    https://github.com/awesomized/libmemcached/pull/117


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Uri Lublin <uril@redhat.com> - 10.0-3
changelog:
  - Show OS-ID when running 'remote-viewer -V'
    Resolves: rhbz#1953282
  - Clear auth entry fields
    Resolves: rhbz#1953933


author: Daniel P. Berrangé <berrange@redhat.com> - 11.0-1
changelog:
  - Rebase to 11.0 release
  - Add missing dep on libvirt-client for bash completion
  - Resolves: rhbz#2028604, rhbz#2000528


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.1.1-4
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008205


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052831


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.15.0.10-1
changelog:
  - Update to jdk-11.0.15.0+10
  - Update release notes to 11.0.15.0+10
  - Switch to GA mode for release
  - Rebase RH1996182 FIPS patch after JDK-8254410
  - Resolves: rhbz#2073594


author: Francisco Ferrari Bihurriet <fferrari@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - RH2007331: SecretKey generate/import operations don't add the CKA_SIGN attribute in FIPS mode
  - Resolves: rhbz#2107866


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Add additional patch during tarball generation to align tests with ECC changes
  - Related: rhbz#2106516


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.0.8-1
changelog:
  - Update to jdk-11.0.16+8
  - Update release notes to 11.0.16+8
  - Use same tarball naming style as java-17-openjdk and java-latest-openjdk
  - Drop JDK-8257794 patch now upstreamed
  - Print release file during build, which should now include a correct SOURCE value from .src-rev
  - Update tarball script with IcedTea GitHub URL and .src-rev generation
  - Use "git apply" with patches in the tarball script to allow binary diffs
  - Include script to generate bug list for release notes
  - Update tzdata requirement to 2022a to match JDK-8283350
  - Make use of the vendor version string to store our version & release rather than an upstream release date
  - Explicitly require crypto-policies during build and runtime for system security properties
  - Rebase FIPS patches from fips branch and simplify by using a single patch from that repository
  - * RH2036462: sun.security.pkcs11.wrapper.PKCS11.getInstance breakage
  - * RH2090378: Revert to disabling system security properties and FIPS mode support together
  - Rebase RH1648249 nss.cfg patch so it applies after the FIPS patch
  - Enable system security properties in the RPM (now disabled by default in the FIPS repo)
  - Improve security properties test to check both enabled and disabled behaviour
  - Run security properties test with property debugging on
  - Resolves: rhbz#2106516
  - Resolves: rhbz#2099915
  - Resolves: rhbz#2107868


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.16.1.1-1
changelog:
  - Update to jdk-11.0.16.1+1
  - Update release notes to 11.0.16.1+1
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Resolves: rhbz#2121188


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: Antonio Torres <antorres@redhat.com> - 3.0.21-25
changelog:
  - Revert "Allow to connect to partially open LDAP handle"
  - Use infinite timeout (openldap default) when using LDAP+start-TLS
  - Update openssl dependency to not check epoch (was causing detection issues)
    Related: rhbz#1992551


author: Eugene Syromiatnikov <esyr@redhat.com> - 5.13-3
changelog:
  - Address some issues reported by covscan (#1996691).
  - Replace 0141-tests-disable-sockopt-timestamp-on-new-glibc-with-__.patch
    with upstream v5.13-10-g0211fdc "tests: change sockopt-timestamp test
    to use syscall(__NR_recvmsg)"
    and 0154-tests-call-setsockopt-directly-in-sockopt-timestamp.patch.
  - Undo forceful injection of -m64 into CFLAGS/CPPFLAGS to avoid breaking
    mpers and its tests (#1996676).


author: Kalev Lember <klember@redhat.com> - 2:40~beta-2
changelog:
  - Drop libtool as-needed hack as as-needed is in default LDFLAGS now
  - Remove unneeded ldconfig_scriptlets macro call
  - Tighten soname globs


author: Honggang Li <honli@redhat.com> - 4.1.1-2
changelog:
  - Update to 4.1.1
  - Enable psm2 support
  - fbtl-posix: link to common_ompio
  - Revert upstream commit c36d7459b6331c4d
  - Resolve: rhbz#1869443


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Sohan Kunkerkar <skunkerk@redhat.com> - 4.6.0-2
changelog:
  - Rebuild because of Fedora infra issues last week to see if a new build fixes some 
    problems we are seeing.


author: Andrew Hughes <gnu.andrew@redhat.com> - 35.0-6
changelog:
  - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes.
  - Add patch from upstream to fix propagation of LDFLAGS into build system.
  - Resolves: rhbz#2044879


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream version
  - Add a thin glib wrapper around libusb_endpoint_descriptor
  - Fix high number of wakeups when checking the GUsbContext


author: Richard Hughes <richard@hughsie.com> 0.3.4-1
changelog:
  - New upstream version
  - Include the USB bus in the generated platform_id
  - Validate the exported symbol list during check


author: Richard Hughes <richard@hughsie.com> 0.3.5-1
changelog:
  - New upstream version
  - Add a way to get iConfiguration
  - Allow building GtkDoc when building as a subproject


author: Richard Hughes <richard@hughsie.com> 0.3.6-1
changelog:
  - New upstream version
  - Add g_usb_device_get_string_descriptor_bytes()
  - Fix cancellation if cancellable is already cancelled


author: Richard Hughes <richard@hughsie.com> 0.3.8-1
changelog:
  - New upstream version
  - Add new API requested by fwupd
  - Add the GUsbEndpoint methods to the docs
  - Fix hotplug handling and signal emission during enumerate
  - Do not double-reference USB devices
  - Resolves: rhbz#1965885


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-11
changelog:
  - Set default sasldb database to GDBM instead of BerkeleyDB
  - Add the migration tool from BerkeleyDB
  - Add some PLAIN auth tests
  - Resolves rhbz#1947971


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Mark Wielaard <mjw@redhat.com> - 3.17.0-8
changelog:
  - Add gdbserver_tests-update-filters-for-newer-glibc-gdb.patch
  - Add helgrind-and-drd-suppression-libc-and-libpthread.patch
  - Remove valgrind-3.9.0-helgrind-race-supp.patch
  - Enable run_full_regtest.


author: Mark Wielaard <mjw@redhat.com> - 3.18.1-5
changelog:
  - Add valgrind-3.18.1-dhat-tests-copy.patch
  - Add valgrind-3.18.1-s390x-EXRL.patch
  - Add valgrind-3.18.1-ppc64-lxsibzx-lxsihzx.patch
  - Add valgrind-3.18.1-ppc-pstq.patch
  - Add valgrind-3.18.1-ppc-pstq-tests.patch
  - Add valgrind-3.18.1-gdbserver_tests-hwcap.patch
  - Add valgrind-3.18.1-rust-v0-demangle.patch
  - Add valgrind-3.18.1-arm64-doubleword-cas.patch
  - Add valgrind-3.18.1-arm64-ldaxp-stlxp.patch
  - Add valgrind-3.18.1-arm64-atomic-align.patch
  - Add valgrind-3.18.1-amd64-more-spec-rules.patch
  - Add valgrind-3.18.1-condvar.patch
  - Add valgrind-3.18.1-demangle-namespace.patch


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Michel Alexandre Salim <salimma@centosproject.org> - 1.5.1-1
changelog:
  - Rebase to the latest upstream version
  - Enable optional gz, xz/lzma, and lz4 support in the zstd tool
  - Disable amd64 assembly on non-x86_64 architectures (rhbz#2035802)
    this should avoid the issue where an executable stack is created
  - Re-enable CET protections (rhbz#2039353)
    Resolves: rhbz#2039488


author: Neal Gompa <ngompa@datto.com> - 1.6.0-1
changelog:
  - Update to upstream 1.6.0
    resolves: rhbz#1883910
  - Enable all missing features
  - Fix linking to external lz4 library
  - Minor spec cleanups


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.14-1
changelog:
  - dovecot updated to 2.3.14, pigeonhole to 0.5.14
  - use OpenSSL's implementation of HMAC
  - Remove autocreate, expire, snarf and mail-filter plugins.
  - Remove cydir storage driver.
  - Remove XZ/LZMA write support. Read support will be removed in future release.


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.15-1
changelog:
  - dovecot updated to 2.3.15, pigeonhole updated to 0.5.15
  - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in
    JWT tokens. This may be used to supply attacker controlled keys to
    validate tokens, if attacker has local access (#1979833)
  - CVE-2021-33515: On-path attacker could have injected plaintext commands
    before STARTTLS negotiation that would be executed after STARTTLS
    finished with the client
  - Add TSLv1.3 support to min_protocols.


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Steve Dickson <steved@redhat.com> 2.5.4-3
changelog:
  - mount.nfs: insert 'sloppy' at beginning of the options (bz 1987070)
  - spec: Fix dependency problems with nfsdclnts (bz 1924708)
  - nfsdcltrack: Fix printf format (bz 1995316)


author: Alice Mitchell <ajmitchell@redhat.com> 2.5.4-5
changelog:
  - triggerun doesn't work correctly unless the epoch is given (bz 1937811)
  - Restored the nfs-utils-2.5.4-mount-sloppy.patch (bz 1987070)
  - General memory fixes (bz 1938822)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.4-1
changelog:
  - Use Decimal for Device.getSize() operations, return a
    float (#1801355)
  - Update the 'twine upload' line in the Makefile
  - Don't intentionally prohibit Python 2 usage (#67)
  - mips64 support


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.5-1
changelog:
  - Require at least libparted 3.3 and python 3.7 (dcantrell)
  - pedmodule.c: Fix partition enum flag handling (bcl)
  - Add support for chromeos_kernel and bls_boot partition flags (bcl)
  - Move exception declarations to _pedmodule.c (dcantrell)


author: David Cantrell <dcantrell@redhat.com> - 1:3.11.7-1
changelog:
  - Upgrade to pyparted-3.11.7 (BZ#1890443)
  - Set PY_SSIZE_T_CLEAN for the build (bcl)
  - add nvme support
  - Update RELEASE file to make last step be "make pypi" (dcantrell)


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.5-1
changelog:
  - apply patch from Matthias Gerstner of the SUSE security team to fix a
    possible race condition in the mkhomedir helper (CVE-2020-10737)
  - only process SELinux contexts if SELinux is not disabled (Alexander Bokovoy)


author: Nalin Dahyabhai <nalin@redhat.com> - 0.34.6-1
changelog:
  - update license on src/buffer.h
  - change /var/run -> /run in systemd service file (Orion Poplawski)


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Davide Caratti <dcaratti@redhat.com> - 2.9-15
changelog:
  - Disable 'badfuncs' in rpminspect tests
  - Build with -fPIE, and enable verbose build log
  - enable CONFIG_SUITEB192


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.18.1.el9_0]
changelog:
  - NFSv4: Fix free of uninitialized nfs4_label on referral lookup. (Benjamin Coddington) [2101858 2086367]
  - NFSv4 only print the label when its queried (Benjamin Coddington) [2101854 2057327]
  - crypto: fips - make proc files report fips module name and version (Simo Sorce) [2093384 2080499]
  - net: sched: fix use-after-free in tc_new_tfilter() (Ivan Vecera) [2071707 2090410] {CVE-2022-1055}


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.19.1.el9_0]
changelog:
  - KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2100903 2074832]
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092248 2055566]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092248 2055566]
  - powerpc/64s/hash: Make hash faults work in NMI context (Desnes A. Nunes do Rosario) [2092253 2062762]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.20.1.el9_0]
changelog:
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ming Lei) [2106024 2066297] {CVE-2022-0494}
  - ahci: Add a generic 'controller2' RAID id (Tomas Henzl) [2099740 2078880]
  - ahci: remove duplicated PCI device IDs (Tomas Henzl) [2099740 2042790]
  - gfs2: Stop using glock holder auto-demotion for now (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: buffered write prefaulting (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Align read and write chunks to the page cache (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Pull return value test out of should_fault_in_pages (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Clean up use of fault_in_iov_iter_{read,write}able (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Variable rename (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix filesystem block deallocation for short writes (Andreas Gruenbacher) [2097306 2082193]
  - iomap: iomap_write_end cleanup (Andreas Gruenbacher) [2097306 2082193]
  - iomap: iomap_write_failed fix (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Don't re-check for write past EOF unnecessarily (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: No short reads or writes upon glock contention (Andreas Gruenbacher) [2097306 2082193]
  - fs/iomap: Fix buffered write page prefaulting (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Make sure not to return short direct writes (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Remove dead code in gfs2_file_read_iter (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix gfs2_file_buffered_write endless loop workaround (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Minor retry logic cleanup (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Disable page faults during lockless buffered reads (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Fix should_fault_in_pages() logic (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Initialize gh_error in gfs2_glock_nq (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Make use of list_is_first (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Switch lock order of inode and iopen glock (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: cancel timed-out glock requests (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: Expect -EBUSY after canceling dlm locking requests (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: gfs2_setattr_size error path fix (Andreas Gruenbacher) [2097306 2082193]
  - gfs2: assign rgrp glock before compute_bitstructs (Bob Peterson) [2097306 2082193]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.21.1.el9_0]
changelog:
  - ibmvnic: fix race between xmit and reset (Gustavo Walbon) [2103085 2061556]
  - scsi: core: sysfs: Fix setting device state to SDEV_RUNNING (Chris Leech) [2098251 2095440]
  - scsi: core: sysfs: Fix hang when device state is set via sysfs (Chris Leech) [2098251 2095440]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.22.1.el9_0]
changelog:
  - PCI: vmd: Revert 2565e5b69c44 ("PCI: vmd: Do not disable MSI-X remapping if interrupt remapping is enabled by IOMMU.") (Myron Stowe) [2109974 2084146]
  - PCI: vmd: Assign VMD IRQ domain before enumeration (Myron Stowe) [2109974 2084146]
  - rhel config: Set DMAR_UNITS_SUPPORTED (Jerry Snitselaar) [2105326 2094984]
  - iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2105326 2094984]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.23.1.el9_0]
changelog:
  - block: limit request dispatch loop duration (Ming Lei) [2111395 2066297]
  - block: ensure plug merging checks the correct queue at least once (Ming Lei) [2111395 2066297]
  - net/mlx5e: Don't block routes with nexthop objects in SW (Mohammad Kabat) [2092535 2061799]
  - net/mlx5e: Fix wrong usage of fib_info_nh when routes with nexthop objects are used (Mohammad Kabat) [2092535 2049450]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.24.1.el9_0]
changelog:
  - nvme: fix RCU hole that allowed for endless looping in multipath round robin (Gopal Tiwari) [2117756 2108624]
  - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2117756 2066146]
  - nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2117756 2066146]
  - nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2117756 2066146]
  - block: fix surprise removal for drivers calling blk_set_queue_dying (Gopal Tiwari) [2117755 2066146]
  - nvme-tcp: fix bogus request completion when failing to send AER (Gopal Tiwari) [2117755 2066146]
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2117755 2066146]
  - kvm: x86: Add CPUID support for Intel AMX (David Arcari) [2108203 1924149]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.25.1.el9_0]
changelog:
  - powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2121719 2063682]
  - iavf: Fix deadlock in initialization (Ivan Vecera) [2119477 2037976]
  - iavf: Fix reset error handling (Ivan Vecera) [2119477 2037976]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Ivan Vecera) [2119477 2037976]
  - iavf: Fix adminq error handling (Ivan Vecera) [2119477 2037976]
  - iavf: Fix missing state logs (Ivan Vecera) [2119477 2037976]
  - iavf: Fix VLAN_V2 addition/rejection (Ivan Vecera) [2119477 2037976]
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Ivan Vecera) [2119477 2037976]
  - iavf: Fix issue with MAC address of VF shown as zero (Ivan Vecera) [2119477 2037976]
  - Revert "iavf: Fix deadlock occurrence during resetting VF interface" (Ivan Vecera) [2119477 2037976]
  - iavf: Fix hang during reboot/shutdown (Ivan Vecera) [2119477 2037976]
  - iavf: Fix double free in iavf_reset_task (Ivan Vecera) [2119477 2037976]
  - iavf: Fix adopting new combined setting (Ivan Vecera) [2119477 2037976]
  - iavf: Fix handling of vlan strip virtual channel messages (Ivan Vecera) [2119477 2037976]
  - iavf: Fix __IAVF_RESETTING state usage (Ivan Vecera) [2119477 2037976]
  - iavf: Fix missing check for running netdev (Ivan Vecera) [2119477 2037976]
  - iavf: Fix deadlock in iavf_reset_task (Ivan Vecera) [2119477 2037976]
  - iavf: Fix race in init state (Ivan Vecera) [2119477 2037976]
  - iavf: Fix locking for VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS (Ivan Vecera) [2119477 2037976]
  - iavf: Fix init state closure on remove (Ivan Vecera) [2119477 2037976]
  - iavf: Add waiting so the port is initialized in remove (Ivan Vecera) [2119477 2037976]
  - iavf: Rework mutexes for better synchronisation (Ivan Vecera) [2119477 2037976]
  - iavf: Remove non-inclusive language (Ivan Vecera) [2119477 2037976]
  - iavf: Fix incorrect use of assigning iavf_status to int (Ivan Vecera) [2119477 2037976]
  - iavf: stop leaking iavf_status as "errno" values (Ivan Vecera) [2119477 2037976]
  - iavf: remove redundant ret variable (Ivan Vecera) [2119477 2037976]
  - iavf: Add usage of new virtchnl format to set default MAC (Ivan Vecera) [2119477 2037976]
  - iavf: refactor processing of VLAN V2 capability message (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for 50G/100G in AIM algorithm (Ivan Vecera) [2119477 2037976]
  - iavf: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2119477 2037976]
  - iavf: remove an unneeded variable (Ivan Vecera) [2119477 2037976]
  - iavf: Fix limit of total number of queues to active queues of VF (Ivan Vecera) [2119477 2037976]
  - iavf: switch to napi_build_skb() (Ivan Vecera) [2119477 2037976]
  - iavf: Restrict maximum VLAN filters for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 offload enable/disable (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 hotpath (Ivan Vecera) [2119477 2037976]
  - iavf: Add support VIRTCHNL_VF_OFFLOAD_VLAN_V2 during netdev config (Ivan Vecera) [2119477 2037976]
  - iavf: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 negotiation (Ivan Vecera) [2119477 2037976]
  - virtchnl: Add support for new VLAN capabilities (Ivan Vecera) [2119477 2037976]
  - virtchnl: Use the BIT() macro for capability/offload flags (Ivan Vecera) [2119477 2037976]
  - virtchnl: Remove unused VIRTCHNL_VF_OFFLOAD_RSVD define (Ivan Vecera) [2119477 2037976]
  - iavf: do not override the adapter state in the watchdog task (again) (Ivan Vecera) [2119477 2037976]
  - iavf: missing unlocks in iavf_watchdog_task() (Ivan Vecera) [2119477 2037976]
  - iavf: Fix reporting when setting descriptor count (Ivan Vecera) [2119477 2037976]
  - iavf: restore MSI state on reset (Ivan Vecera) [2119477 2037976]
  - iavf: Fix displaying queue statistics shown by ethtool (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor string format to avoid static analysis warnings (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor text of informational message (Ivan Vecera) [2119477 2037976]
  - iavf: Fix static code analysis warning (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor iavf_mac_filter struct memory usage (Ivan Vecera) [2119477 2037976]
  - iavf: Enable setting RSS hash key (Ivan Vecera) [2119477 2037976]
  - iavf: Add trace while removing device (Ivan Vecera) [2119477 2037976]
  - iavf: return errno code instead of status code (Ivan Vecera) [2119477 2037976]
  - iavf: Log info when VF is entering and leaving Allmulti mode (Ivan Vecera) [2119477 2037976]
  - iavf: Add change MTU message (Ivan Vecera) [2119477 2037976]
  - iavf: Fix VLAN feature flags after VFR (Ivan Vecera) [2119477 2037976]
  - iavf: Fix refreshing iavf adapter stats on ethtool request (Ivan Vecera) [2119477 2037976]
  - iavf: Fix deadlock occurrence during resetting VF interface (Ivan Vecera) [2119477 2037976]
  - iavf: Prevent changing static ITR values if adaptive moderation is on (Ivan Vecera) [2119477 2037976]
  - iavf: Restore VLAN filters after link down (Ivan Vecera) [2119477 2037976]
  - iavf: Fix for setting queues to 0 (Ivan Vecera) [2119477 2037976]
  - iavf: Fix for the false positive ASQ/ARQ errors while issuing VF reset (Ivan Vecera) [2119477 2037976]
  - iavf: validate pointers (Ivan Vecera) [2119477 2037976]
  - iavf: prevent accidental free of filter structure (Ivan Vecera) [2119477 2037976]
  - iavf: Fix failure to exit out from last all-multicast mode (Ivan Vecera) [2119477 2037976]
  - iavf: don't clear a lock we don't hold (Ivan Vecera) [2119477 2037976]
  - iavf: free q_vectors before queues in iavf_disable_vf (Ivan Vecera) [2119477 2037976]
  - iavf: check for null in iavf_fix_features (Ivan Vecera) [2119477 2037976]
  - iavf: Fix return of set the new channel count (Ivan Vecera) [2119477 2037976]
  - iavf: Fix kernel BUG in free_msi_irqs (Ivan Vecera) [2119477 2037976]
  - iavf: Add helper function to go from pci_dev to adapter (Ivan Vecera) [2119477 2037976]
  - iavf: Combine init and watchdog state machines (Ivan Vecera) [2119477 2037976]
  - iavf: Add __IAVF_INIT_FAILED state (Ivan Vecera) [2119477 2037976]
  - iavf: Refactor iavf state machine tracking (Ivan Vecera) [2119477 2037976]
  - iavf: fix double unlock of crit_lock (Ivan Vecera) [2119477 2037976]
  - iavf: use mutexes for locking of critical sections (Ivan Vecera) [2119477 2037976]
  - iavf: fix locking of critical sections (Ivan Vecera) [2119477 2037976]
  - iavf: do not override the adapter state in the watchdog task (Ivan Vecera) [2119477 2037976]
  - redhat: nvme/tcp mistakenly uses blk_mq_tag_to_rq(nvme_tcp_tagset(queue)) (John Meneghini) [2118698 2112031]
  - x86/platform/uv: Log gap hole end size (Frank Ramsay) [2107732 2074097]
  - x86/platform/uv: Update TSC sync state for UV5 (Frank Ramsay) [2107732 2074097]
  - x86/platform/uv: Update NMI Handler for UV5 (Frank Ramsay) [2107732 2074097]
  - cpufreq: intel_pstate: Add Ice Lake server to out-of-band IDs (Steve Best) [2099417 2072886]
  - [s390] RDMA/mlx5: Fix number of allocated XLT entries (Mete Durlu) [2092270 2088360]


author: Herton R. Krzesinski <herton@redhat.com> [5.14.0-70.26.1.el9_0]
changelog:
  - redhat/configs enable CONFIG_ICE_HWTS (Petr Oros) [2108204 2037974]
  - redhat/configs enable CONFIG_ICE_SWITCHDEV (Petr Oros) [2108204 2037974]
  - ice: Fix VF not able to send tagged traffic with no VLAN filters (Petr Oros) [2119290 2116964]
  - ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2119290 2116964]
  - ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2119290 2116964]
  - ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2119290 2116964]
  - ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2119290 2116964]
  - ice: Fix promiscuous mode not turning off (Petr Oros) [2119290 2116964]
  - ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2119290 2116964]
  - ice: do not setup vlan for loopback VSI (Petr Oros) [2119290 2116964]
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2119290 2116964]
  - ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2119290 2116964]
  - ice: Fix max VLANs available for VF (Petr Oros) [2119290 2116964]
  - ice: change devlink code to read NVM in blocks (Petr Oros) [2119290 2116964]
  - ice: Fix memory corruption in VF driver (Petr Oros) [2108204 2037974]
  - ice: Fix queue config fail handling (Petr Oros) [2108204 2037974]
  - ice: Sync VLAN filtering features for DVM (Petr Oros) [2108204 2037974]
  - ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2108204 2037974]
  - ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2108204 2037974]
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2108204 2037974]
  - ice: fix crash when writing timestamp on RX rings (Petr Oros) [2108204 2037974]
  - ice: fix PTP stale Tx timestamps cleanup (Petr Oros) [2108204 2037974]
  - ice: clear stale Tx queue settings before configuring (Petr Oros) [2108204 2037974]
  - ice: Fix race during aux device (un)plugging (Petr Oros) [2108204 2037974]
  - ice: fix use-after-free when deinitializing mailbox snapshot (Petr Oros) [2108204 2037974]
  - ice: wait 5 s for EMP reset after firmware flash (Petr Oros) [2108204 2037974]
  - ice: Protect vf_state check by cfg_lock in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
  - ice: Fix incorrect locking in ice_vc_process_vf_msg() (Petr Oros) [2108204 2037974]
  - ice: Fix memory leak in ice_get_orom_civd_data() (Petr Oros) [2108204 2037974]
  - ice: fix crash in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2108204 2037974]
  - ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (Petr Oros) [2108204 2037974]
  - ice: clear cmd_type_offset_bsz for TX rings (Petr Oros) [2108204 2037974]
  - ice: xsk: fix VSI state check in ice_xsk_wakeup() (Petr Oros) [2108204 2037974]
  - ice: synchronize_rcu() when terminating rings (Petr Oros) [2108204 2037974]
  - ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (Petr Oros) [2108204 2037974]
  - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (Petr Oros) [2108204 2037974]
  - ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2108204 2037974]
  - ice: Fix MAC address setting (Petr Oros) [2108204 2037974]
  - ice: Clear default forwarding VSI during VSI release (Petr Oros) [2108204 2037974]
  - ice: xsk: Fix indexing in ice_tx_xsk_pool() (Petr Oros) [2108204 2037974]
  - ice: xsk: Stop Rx processing when ntc catches ntu (Petr Oros) [2108204 2037974]
  - ice: don't allow to run ice_send_event_to_aux() in atomic ctx (Petr Oros) [2108204 2037974]
  - ice: fix 'scheduling while atomic' on aux critical err interrupt (Petr Oros) [2108204 2037974]
  - ice: add trace events for tx timestamps (Petr Oros) [2108204 2037974]
  - ice: fix return value check in ice_gnss.c (Petr Oros) [2108204 2037974]
  - ice: destroy flow director filter mutex after releasing VSIs (Petr Oros) [2108204 2037974]
  - ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() (Petr Oros) [2108204 2037974]
  - ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2108204 2037974]
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2108204 2037974]
  - ice: cleanup long lines in ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2108204 2037974]
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2108204 2037974]
  - ice: convert ice_reset_vf to take flags (Petr Oros) [2108204 2037974]
  - ice: convert ice_reset_vf to standard error codes (Petr Oros) [2108204 2037974]
  - ice: make ice_reset_all_vfs void (Petr Oros) [2108204 2037974]
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2108204 2037974]
  - ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2108204 2037974]
  - ice: fix a long line warning in ice_reset_vf (Petr Oros) [2108204 2037974]
  - ice: introduce VF operations structure for reset flows (Petr Oros) [2108204 2037974]
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2108204 2037974]
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2108204 2037974]
  - ice: use ice_is_vf_trusted helper function (Petr Oros) [2108204 2037974]
  - ice: log an error message when eswitch fails to configure (Petr Oros) [2108204 2037974]
  - ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2108204 2037974]
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2108204 2037974]
  - ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2108204 2037974]
  - ice: remove unused definitions from ice_sriov.h (Petr Oros) [2108204 2037974]
  - ice: convert vf->vc_ops to a const pointer (Petr Oros) [2108204 2037974]
  - ice: remove circular header dependencies on ice.h (Petr Oros) [2108204 2037974]
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2108204 2037974]
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2108204 2037974]
  - ice: Fix FV offset searching (Petr Oros) [2108204 2037974]
  - ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2108204 2037974]
  - ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2108204 2037974]
  - ice: change "can't set link" message to dbg level (Petr Oros) [2108204 2037974]
  - ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2108204 2037974]
  - ice: Add support for inner etype in switchdev (Petr Oros) [2108204 2037974]
  - ice: Fix curr_link_speed advertised speed (Petr Oros) [2108204 2037974]
  - ice: Don't use GFP_KERNEL in atomic context (Petr Oros) [2108204 2037974]
  - ice: stop disabling VFs due to PF error responses (Petr Oros) [2108204 2037974]
  - ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2108204 2037974]
  - ice: introduce VF accessor functions (Petr Oros) [2108204 2037974]
  - ice: factor VF variables to separate structure (Petr Oros) [2108204 2037974]
  - ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2108204 2037974]
  - ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2108204 2037974]
  - ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2108204 2037974]
  - ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2108204 2037974]
  - ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2108204 2037974]
  - ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2108204 2037974]
  - ice: store VF pointer instead of VF ID (Petr Oros) [2108204 2037974]
  - ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2108204 2037974]
  - ice: add TTY for GNSS module for E810T device (Petr Oros) [2108204 2037974]
  - ice: initialize local variable 'tlv' (Petr Oros) [2108204 2037974]
  - ice: check the return of ice_ptp_gettimex64 (Petr Oros) [2108204 2037974]
  - ice: fix concurrent reset and removal of VFs (Petr Oros) [2108204 2037974]
  - ice: fix setting l4 port flag when adding filter (Petr Oros) [2108204 2037974]
  - ice: Match on all profiles in slow-path (Petr Oros) [2108204 2037974]
  - ice: enable parsing IPSEC SPI headers for RSS (Petr Oros) [2108204 2037974]
  - ice: Simplify tracking status of RDMA support (Petr Oros) [2108204 2037974]
  - ice: fix IPIP and SIT TSO offload (Petr Oros) [2108204 2037974]
  - ice: fix an error code in ice_cfg_phy_fec() (Petr Oros) [2108204 2037974]
  - ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2108204 2037974]
  - ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2108204 2037974]
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2108204 2037974]
  - ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2108204 2037974]
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2108204 2037974]
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2108204 2037974]
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2108204 2037974]
  - ice: Adjust naming for inner VLAN operations (Petr Oros) [2108204 2037974]
  - ice: Use the proto argument for VLAN ops (Petr Oros) [2108204 2037974]
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Petr Oros) [2108204 2037974]
  - ice: Introduce ice_vlan struct (Petr Oros) [2108204 2037974]
  - ice: Add new VSI VLAN ops (Petr Oros) [2108204 2037974]
  - ice: Add helper function for adding VLAN 0 (Petr Oros) [2108204 2037974]
  - ice: Refactor spoofcheck configuration functions (Petr Oros) [2108204 2037974]
  - ice: Remove likely for napi_complete_done (Petr Oros) [2108204 2037974]
  - ice: add support for DSCP QoS for IDC (Petr Oros) [2108204 2037974]
  - ice: respect metadata on XSK Rx to skb (Petr Oros) [2108204 2037974]
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2108204 2037974]
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2108204 2037974]
  - ice: Remove useless DMA-32 fallback configuration (Petr Oros) [2108204 2037974]
  - ice: Use bitmap_free() to free bitmap (Petr Oros) [2108204 2037974]
  - ice: Optimize a few bitmap operations (Petr Oros) [2108204 2037974]
  - ice: Slightly simply ice_find_free_recp_res_idx (Petr Oros) [2108204 2037974]
  - ice: improve switchdev's slow-path (Petr Oros) [2108204 2037974]
  - ice: replay advanced rules after reset (Petr Oros) [2108204 2037974]
  - net: fixup build after bpf header changes (Petr Oros) [2108204 2037974]
  - net: Don't include filter.h from net/sock.h (Petr Oros) [2108204 2037974]
  - ice: Add flow director support for channel mode (Petr Oros) [2108204 2037974]
  - ice: switch to napi_build_skb() (Petr Oros) [2108204 2037974]
  - ice: xsk: fix cleaned_count setting (Petr Oros) [2108204 2037974]
  - ice: xsk: allow empty Rx descriptors on XSK ZC data path (Petr Oros) [2108204 2037974]
  - ice: xsk: allocate separate memory for XDP SW ring (Petr Oros) [2108204 2037974]
  - ice: xsk: return xsk buffers back to pool when cleaning the ring (Petr Oros) [2108204 2037974]
  - ice: trivial: fix odd indenting (Petr Oros) [2108204 2037974]
  - ice: support crosstimestamping on E822 devices if supported (Petr Oros) [2108204 2037974]
  - ice: exit bypass mode once hardware finishes timestamp calibration (Petr Oros) [2108204 2037974]
  - ice: ensure the hardware Clock Generation Unit is configured (Petr Oros) [2108204 2037974]
  - ice: implement basic E822 PTP support (Petr Oros) [2108204 2037974]
  - ice: convert clk_freq capability into time_ref (Petr Oros) [2108204 2037974]
  - ice: introduce ice_ptp_init_phc function (Petr Oros) [2108204 2037974]
  - ice: use 'int err' instead of 'int status' in ice_ptp_hw.c (Petr Oros) [2108204 2037974]
  - ice: PTP: move setting of tstamp_config (Petr Oros) [2108204 2037974]
  - ice: introduce ice_base_incval function (Petr Oros) [2108204 2037974]
  - ice: Fix E810 PTP reset flow (Petr Oros) [2108204 2037974]
  - ice: Don't put stale timestamps in the skb (Petr Oros) [2108204 2037974]
  - ice: Use div64_u64 instead of div_u64 in adjfine (Petr Oros) [2108204 2037974]
  - ice: use modern kernel API for kick (Petr Oros) [2108204 2037974]
  - ice: tighter control over VSI_DOWN state (Petr Oros) [2108204 2037974]
  - ice: use prefetch methods (Petr Oros) [2108204 2037974]
  - ice: update to newer kernel API (Petr Oros) [2108204 2037974]
  - ice: support immediate firmware activation via devlink reload (Petr Oros) [2108204 2037974]
  - ice: reduce time to read Option ROM CIVD data (Petr Oros) [2108204 2037974]
  - ice: move ice_devlink_flash_update and merge with ice_flash_pldm_image (Petr Oros) [2108204 2037974]
  - ice: move and rename ice_check_for_pending_update (Petr Oros) [2108204 2037974]
  - ice: devlink: add shadow-ram region to snapshot Shadow RAM (Petr Oros) [2108204 2037974]
  - ice: Remove unused ICE_FLOW_SEG_HDRS_L2_MASK (Petr Oros) [2108204 2037974]
  - ice: Remove unnecessary casts (Petr Oros) [2108204 2037974]
  - ice: Propagate error codes (Petr Oros) [2108204 2037974]
  - ice: Remove excess error variables (Petr Oros) [2108204 2037974]
  - ice: Cleanup after ice_status removal (Petr Oros) [2108204 2037974]
  - ice: Remove enum ice_status (Petr Oros) [2108204 2037974]
  - ice: Use int for ice_status (Petr Oros) [2108204 2037974]
  - ice: Remove string printing for ice_status (Petr Oros) [2108204 2037974]
  - ice: Refactor status flow for DDP load (Petr Oros) [2108204 2037974]
  - ice: Refactor promiscuous functions (Petr Oros) [2108204 2037974]
  - ice: refactor PTYPE validating (Petr Oros) [2108204 2037974]
  - ice: Add package PTYPE enable information (Petr Oros) [2108204 2037974]
  - ice: safer stats processing (Petr Oros) [2108204 2037974]
  - ice: fix adding different tunnels (Petr Oros) [2108204 2037974]
  - ice: fix choosing UDP header type (Petr Oros) [2108204 2037974]
  - ice: ignore dropped packets during init (Petr Oros) [2108204 2037974]
  - ice: rearm other interrupt cause register after enabling VFs (Petr Oros) [2108204 2037974]
  - ice: fix FDIR init missing when reset VF (Petr Oros) [2108204 2037974]
  - net/ice: Remove unused enum (Petr Oros) [2108204 2037974]
  - net/ice: Fix boolean assignment (Petr Oros) [2108204 2037974]
  - ice: avoid bpf_prog refcount underflow (Petr Oros) [2108204 2037974]
  - ice: fix vsi->txq_map sizing (Petr Oros) [2108204 2037974]
  - net/ice: Add support for enable_iwarp and enable_roce devlink param (Petr Oros) [2108204 2037974]
  - ice: Hide bus-info in ethtool for PRs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: Clear synchronized addrs when adding VFs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: fix error return code in ice_get_recp_frm_fw() (Petr Oros) [2108204 2037974]
  - ice: Fix clang -Wimplicit-fallthrough in ice_pull_qvec_from_rc() (Petr Oros) [2108204 2037974]
  - ice: Add support to print error on PHY FW load failure (Petr Oros) [2108204 2037974]
  - ice: Add support for changing MTU on PR in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: send correct vc status in switchdev (Petr Oros) [2108204 2037974]
  - ice: support for GRE in eswitch (Petr Oros) [2108204 2037974]
  - ice: low level support for tunnels (Petr Oros) [2108204 2037974]
  - ice: VXLAN and Geneve TC support (Petr Oros) [2108204 2037974]
  - ice: support for indirect notification (Petr Oros) [2108204 2037974]
  - ice: Add tc-flower filter support for channel (Petr Oros) [2108204 2037974]
  - ice: enable ndo_setup_tc support for mqprio_qdisc (Petr Oros) [2108204 2037974]
  - ice: Add infrastructure for mqprio support via ndo_setup_tc (Petr Oros) [2108204 2037974]
  - ice: fix an error code in ice_ena_vfs() (Petr Oros) [2108204 2037974]
  - ice: Refactor PR ethtool ops (Petr Oros) [2108204 2037974]
  - ice: Manage act flags for switchdev offloads (Petr Oros) [2108204 2037974]
  - ice: Forbid trusted VFs in switchdev mode (Petr Oros) [2108204 2037974]
  - ice: introduce XDP_TX fallback path (Petr Oros) [2108204 2037974]
  - ice: optimize XDP_TX workloads (Petr Oros) [2108204 2037974]
  - ice: propagate xdp_ring onto rx_ring (Petr Oros) [2108204 2037974]
  - ice: do not create xdp_frame on XDP_TX (Petr Oros) [2108204 2037974]
  - ice: unify xdp_rings accesses (Petr Oros) [2108204 2037974]
  - ice: ndo_setup_tc implementation for PR (Petr Oros) [2108204 2037974]
  - ice: ndo_setup_tc implementation for PF (Petr Oros) [2108204 2037974]
  - ice: Allow changing lan_en and lb_en on all kinds of filters (Petr Oros) [2108204 2037974]
  - ice: cleanup rules info (Petr Oros) [2108204 2037974]
  - ice: allow deleting advanced rules (Petr Oros) [2108204 2037974]
  - ice: allow adding advanced rules (Petr Oros) [2108204 2037974]
  - ice: create advanced switch recipe (Petr Oros) [2108204 2037974]
  - ice: manage profiles and field vectors (Petr Oros) [2108204 2037974]
  - ice: implement low level recipes functions (Petr Oros) [2108204 2037974]
  - ice: add port representor ethtool ops and stats (Petr Oros) [2108204 2037974]
  - ice: switchdev slow path (Petr Oros) [2108204 2037974]
  - ice: rebuild switchdev when resetting all VFs (Petr Oros) [2108204 2037974]
  - ice: enable/disable switchdev when managing VFs (Petr Oros) [2108204 2037974]
  - ice: introduce new type of VSI for switchdev (Petr Oros) [2108204 2037974]
  - ice: set and release switchdev environment (Petr Oros) [2108204 2037974]
  - ice: allow changing lan_en and lb_en on dflt rules (Petr Oros) [2108204 2037974]
  - ice: manage VSI antispoof and destination override (Petr Oros) [2108204 2037974]
  - ice: allow process VF opcodes in different ways (Petr Oros) [2108204 2037974]
  - ice: introduce VF port representor (Petr Oros) [2108204 2037974]
  - ice: Move devlink port to PF/VF struct (Petr Oros) [2108204 2037974]
  - ice: support basic E-Switch mode control (Petr Oros) [2108204 2037974]
  - ethernet: use eth_hw_addr_set() for dev->addr_len cases (Petr Oros) [2108204 2037974]
  - ethernet: use eth_hw_addr_set() instead of ether_addr_copy() (Petr Oros) [2108204 2037974]
  - ice: Use xdp_buf instead of rx_buf for xsk zero-copy (Petr Oros) [2108204 2037974]
  - ice: Only lock to update netdev dev_addr (Petr Oros) [2108204 2037974]
  - ice: restart periodic outputs around time changes (Petr Oros) [2108204 2037974]
  - ice: fix Tx queue iteration for Tx timestamp enablement (Petr Oros) [2108204 2037974]
  - devlink: Add 'enable_iwarp' generic device param (Petr Oros) [2108204 2037974]
  - i40e: Fix tunnel checksum offload with fragmented traffic (Ivan Vecera) [2119479 2037980]
  - i40e: Fix call trace in setup_tx_descriptors (Ivan Vecera) [2119479 2037980]
  - i40e: Fix calculating the number of queue pairs (Ivan Vecera) [2119479 2037980]
  - i40e: Fix adding ADQ filter to TC0 (Ivan Vecera) [2119479 2037980]
  - i40e: i40e_main: fix a missing check on list iterator (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Get rid of redundant 'fallthrough' (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Diversify return values from xsk_wakeup call paths (Ivan Vecera) [2119479 2037980]
  - i40e, xsk: Terminate Rx side of NAPI when XSK Rx queue gets full (Ivan Vecera) [2119479 2037980]
  - i40e: Add Ethernet Connection X722 for 10GbE SFP+ support (Ivan Vecera) [2119479 2037980]
  - i40e: Add vsi.tx_restart to i40e ethtool stats (Ivan Vecera) [2119479 2037980]
  - i40e: Add tx_stopped stat (Ivan Vecera) [2119479 2037980]
  - i40e: Add support for MPLS + TSO (Ivan Vecera) [2119479 2037980]
  - i40e: little endian only valid checksums (Ivan Vecera) [2119479 2037980]
  - i40e: stop disabling VFs due to PF error responses (Ivan Vecera) [2119479 2037980]
  - Revert "i40e: Fix reset bw limit when DCB enabled with 1 TC" (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat for tracking busy rx pages (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat for tracking pages waived (Ivan Vecera) [2119479 2037980]
  - i40e: Add a stat tracking new RX page allocations (Ivan Vecera) [2119479 2037980]
  - i40e: Aggregate and export RX page reuse stat (Ivan Vecera) [2119479 2037980]
  - i40e: Remove rx page reuse double count (Ivan Vecera) [2119479 2037980]
  - i40e: Fix race condition while adding/deleting MAC/VLAN filters (Ivan Vecera) [2119479 2037980]
  - i40e: Add new version of i40e_aq_add_macvlan function (Ivan Vecera) [2119479 2037980]
  - i40e: Add new versions of send ASQ command functions (Ivan Vecera) [2119479 2037980]
  - i40e: Add sending commands in atomic context (Ivan Vecera) [2119479 2037980]
  - i40e: Remove unused RX realloc stat (Ivan Vecera) [2119479 2037980]
  - i40e: Disable hw-tc-offload feature on driver load (Ivan Vecera) [2119479 2037980]
  - i40e: Fix reset path while removing the driver (Ivan Vecera) [2119479 2037980]
  - i40e: Fix reset bw limit when DCB enabled with 1 TC (Ivan Vecera) [2119479 2037980]
  - i40e: respect metadata on XSK Rx to skb (Ivan Vecera) [2119479 2037980]
  - i40e: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Ivan Vecera) [2119479 2037980]
  - i40e: Remove useless DMA-32 fallback configuration (Ivan Vecera) [2119479 2037980]
  - i40e: fix unsigned stat widths (Ivan Vecera) [2119479 2037980]
  - i40e: Fix for failed to init adminq while VF reset (Ivan Vecera) [2119479 2037980]
  - i40e: Fix queues reservation for XDP (Ivan Vecera) [2119479 2037980]
  - i40e: Fix issue when maximum queues is exceeded (Ivan Vecera) [2119479 2037980]
  - i40e: Increase delay to 1 s after global EMP reset (Ivan Vecera) [2119479 2037980]
  - i40e: remove variables set but not used (Ivan Vecera) [2119479 2037980]
  - i40e: Remove non-inclusive language (Ivan Vecera) [2119479 2037980]
  - i40e: Update FW API version (Ivan Vecera) [2119479 2037980]
  - i40e: Minimize amount of busy-waiting during AQ send (Ivan Vecera) [2119479 2037980]
  - i40e: Add ensurance of MacVlan resources for every trusted VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix incorrect netdev's real number of RX/TX queues (Ivan Vecera) [2119479 2037980]
  - i40e: Fix for displaying message regarding NVM version (Ivan Vecera) [2119479 2037980]
  - i40e: fix use-after-free in i40e_sync_filters_subtask() (Ivan Vecera) [2119479 2037980]
  - i40e: Fix to not show opcode msg on unsuccessful VF MAC change (Ivan Vecera) [2119479 2037980]
  - i40e: switch to napi_build_skb() (Ivan Vecera) [2119479 2037980]
  - i40e: Fix NULL pointer dereference in i40e_dbg_dump_desc (Ivan Vecera) [2119479 2037980]
  - i40e: Fix pre-set max number of queues for VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix failed opcode appearing if handling messages from VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix display error code in dmesg (Ivan Vecera) [2119479 2037980]
  - i40e: Fix creation of first queue by omitting it if is not power of two (Ivan Vecera) [2119479 2037980]
  - i40e: Fix warning message and call stack during rmmod i40e driver (Ivan Vecera) [2119479 2037980]
  - i40e: Fix ping is lost after configuring ADq on VF (Ivan Vecera) [2119479 2037980]
  - i40e: Fix changing previously set num_queue_pairs for PFs (Ivan Vecera) [2119479 2037980]
  - i40e: Fix NULL ptr dereference on VSI filter sync (Ivan Vecera) [2119479 2037980]
  - i40e: Fix correct max_pkt_size on VF RX queue (Ivan Vecera) [2119479 2037980]
  - i40e: Fix freeing of uninitialized misc IRQ vector (Ivan Vecera) [2119479 2037980]
  - i40e: Fix spelling mistake "dissable" -> "disable" (Ivan Vecera) [2119479 2037980]
  - i40e: add support for PTP external synchronization clock (Ivan Vecera) [2119479 2037980]
  - i40e: improve locking of mac_filter_hash (Ivan Vecera) [2119479 2037980]
  - netfilter: nf_tables: sanitize nft_set_desc_concat_parse() (Florian Westphal) [2108199 2096401] {CVE-2022-1972}
  - netfilter: nf_tables: stricter validation of element data (Florian Westphal) [2104591 2104592] {CVE-2022-34918}


author: Release Engineering <releng@rockylinux.org> - 5.14.0-70.26.1
changelog:
  - Porting to 9.0, debranding and Rocky branding with new release pkg (Sherif Nagy)
  - Porting to 9.0, debranding and Rocky branding (Louis Abel)


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Alfredo Moralejo <amoralej@redhat.com> - 1-4
changelog:
  - First release for CentOS Stream 9
  - Removed repo for qpid-proton until it is available in CentOS mirrors


