# changelog

author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210525-2
changelog:
  - Make intel-06-2d-07, intel-06-4e-03, intel-06-4f-01, intel-06-55-04,
    intel-06-5e-03, intel-06-8c-01, intel-06-8e-9e-0x-0xca,
    and intel-06-8e-9e-0x-dell caveats dependent on intel caveat.
  - Enable 06-8c-01 microcode update by default (#1970611).
  - Enable 06-5e-03 microcode update by default (#1897673).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20210608-1
changelog:
  - Update Intel CPU microcode to microcode-20210608 release (#1921773):
    - Fixes in releasenote.md file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1
changelog:
  - Update Intel CPU microcode to microcode-20220207 release, addresses
    CVE-2021-0127, CVE-2021-0145, and CVE-2021-33120 (#2053253):
    - Removal of 06-86-04/0x01 (SNR B0) microcode at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode (in intel-ucode/06-86-04)
      at revision 0xb00000f;
    - Removal of 06-86-04/0x01 (SNR B0) microcode (in intel-ucode/06-86-05)
      at revision 0xb00000f;
    - Removal of 06-86-05/0x01 (SNR B1) microcode at revision 0xb00000f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xea up to 0xec;
    - Update of 06-4f-01/0xef (BDX-E/EP/EX/ML B0/M0/R0) microcode (in
      intel-06-4f-01/intel-ucode/06-4f-01) from revision 0xb00003e up
      to 0xb000040;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006b06 up
      to 0x2006c0a;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xea up to 0xec;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x88 up to 0x9a;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xea up to 0xec;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xea up
      to 0xec;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xea up
      to 0xec;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x46 up to 0x49;
    - Update of 06-3f-04/0x80 (HSX-EX E0) microcode from revision 0x19 up
      to 0x1a;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015b
      up to 0x100015c;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003102
      up to 0x400320a;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5003102 up to 0x500320a;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002302
      up to 0x7002402;
    - Update of 06-56-03/0x10 (BDX-DE V2/V3) microcode from revision
      0x700001b up to 0x700001c;
    - Update of 06-56-04/0x10 (BDX-DE Y0) microcode from revision 0xf000019
      up to 0xf00001a;
    - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
      0xe000012 up to 0xe000014;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x44 up
      to 0x46;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x20 up
      to 0x24;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x34 up
      to 0x36;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0002a0
      up to 0xd000331;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1a up
      to 0x1c;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa6
      up to 0xa8;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2a up
      to 0x2d;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x16 up
      to 0x22;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x2c up
      to 0x3c;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x11 up
      to 0x15;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x1d up
      to 0x2400001f;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xea up
      to 0xec;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xea
      up to 0xec;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xec
      up to 0xee;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xe8
      up to 0xea;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xea up to 0xec;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x40 up
      to 0x50.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220510-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2090248,
      - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220809-1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115663):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Jakub Martisko <jamartis@redhat.com> - 6.0-56
changelog:
  - Use the C crc implementation instead of the asm (i686 only, other arches already use C)
  Related: rhbz#2045075


author: Ana Cabral <acabral@redhat.com> - 1:1.39.5-1
changelog:
  - Update to 1.39.5 release (development)
  - dhcp: fix ignoring addresses with DHCPv6 otherconf (O flag) (rh #2083968)
  - cloud-setup: reorder addresses to honor "primary_ip_address" (rh #2079849)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.6-1
changelog:
  - Update to 1.39.6 release (development)
  - Implement ACD (address conflict detection) for DHCPv4 (rh #1713380)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.7-1
changelog:
  - Update to 1.39.7 release (development)
  - core: cancel the IP check on deactivation (rh #2080928)
  - core: ensure DHCP is restarted every time the link goes up (rh #2079406)
  - core: fix a leak of L3 configuration memory (rh #2083453)
  - ppp: fix a race with pppd when removing addresses (rh #2085382)
  - wifi: fix a crash when checking WEP supplicant capability (rh #2092782)


author: Thomas Haller <thaller@redhat.com> - 1:1.39.7-2
changelog:
  - fix priority of IPv6 addresses to prefer manual over DHCPv6 over SLAAC (rh #2097293)
  - reverse order of priority for static IPv6 addresses in "ipv6.addresses" (rh #2097293)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.39.8-1
changelog:
  - Update to 1.39.8 release (development)
  - core: make ipv6.addr-gen-mode default configurable (rh #1743161) (rh #2082682)
  - dhcpv6: finish DAD before considering a lease to be good (rh #2096386)
  - core: add connection.wait-activation-delay property (rh #2008337)


author: Vojtech Bubela <vbubela@redhat.com> - 1:1.39.10-1
changelog:
  - Update to 1.39.10 release (development)
  - add support for {rto_min,quickack,advmss} route attributes (rh #2068525)
  - fix empty hostname for "SaveHostname" and make setting hostname async (rh #2090946)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.39.11-1
changelog:
  - Update to 1.39.11 release (development)
  - core: support nm.debug kernel command line option (rh #2102313)
  - ovs: don't ever move unactivated devices to failed state (rh #2077950)
  - dhclient: fix EXTENDED DHCP event handling (rh #2109285)
  - core: make "nmcli net off/on" more robust (rh #2093175)
  - bridge: add reapply support (rh #2092762)
  - bridge: don't reset vlan filtering on external connections (rh #2107647)


author: Ana Cabral <acabral@redhat.com> - 1:1.39.90-1
changelog:
  - Update to 1.39.90 release (release candidate)
  - Add support for MPTCP (rh #2029636)
  - nmcli: fix assertion failure (rh #2092323)
  - bond: fix arp_ip_target option (rh #2117202)
  - nmci: fix test restart_L2_only_lacp (rh #2092361)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-32
changelog:
  - `openssl ecparam -list_curves` lists only FIPS-approved curves in FIPS mode
  - Resolves: rhbz#2091929
  - Ciphersuites with RSA KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - In FIPS mode, signature verification works with keys of arbitrary size
    above 2048 bit, and only with 1024, 1280, 1536, 1792 bits for keys
    below 2048 bits
  - Resolves: rhbz#2091938


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-33
changelog:
  - CVE-2022-1473 openssl: OPENSSL_LH_flush() breaks reuse of memory
  - Resolves: rhbz#2089443
  - CVE-2022-1343 openssl: Signer certificate verification returned
    inaccurate response when using OCSP_NOCHECKS
  - Resolves: rhbz#2089439
  - CVE-2022-1292 openssl: c_rehash script allows command injection
  - Resolves: rhbz#2090361
  - Revert "Disable EVP_PKEY_sign/EVP_PKEY_verify in FIPS mode"
    Related: rhbz#2087234
  - Use KAT for ECDSA signature tests, s390 arch
  - Resolves: rhbz#2086866


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-35
changelog:
  - Add explicit indicators for signatures in FIPS mode and mark signature
    primitives as unapproved.
    Resolves: rhbz#2087234


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-36
changelog:
  - Ciphersuites with RSAPSK KX should be filterd in FIPS mode
  - Related: rhbz#2091994
  - FIPS provider should block RSA encryption for key transport.
  - Other RSA encryption options should still be available if key length is enough
  - Related: rhbz#2091977
  - Improve diagnostics when passing unsupported groups in TLS
  - Related: rhbz#2086554
  - Fix PPC64 Montgomery multiplication bug
  - Related: rhbz#2101346
  - Strict certificates validation shouldn't allow explicit EC parameters
  - Related: rhbz#2085521
  - CVE-2022-2068: the c_rehash script allows command injection
  - Related: rhbz#2098276


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-38
changelog:
  - Fix segfault in EVP_PKEY_Q_keygen() when OpenSSL was not previously
    initialized.
    Resolves: rhbz#2107530
  - Improve AES-GCM performance on Power9 and Power10 ppc64le
    Resolves: rhbz#2103044
  - Improve ChaCha20 performance on Power10 ppc64le
    Resolves: rhbz#2103044


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-39
changelog:
  - Use RSA-OAEP in FIPS RSA encryption/decryption FIPS self-test
  - Use Use digest_sign & digest_verify in FIPS signature self test
  - Use FFDHE2048 in Diffie-Hellman FIPS self-test
    Resolves: rhbz#2112978


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-40
changelog:
  - Deal with DH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115856
  - Deal with ECDH keys in FIPS mode according FIPS-140-3 requirements
    Related: rhbz#2115857
  - Use signature for RSA pairwise test according FIPS-140-3 requirements
    Related: rhbz#2115858
  - Reseed all the parent DRBGs in chain on reseeding a DRBG
    Related: rhbz#2115859
  - Zeroization according to FIPS-140-3 requirements
    Related: rhbz#2115861


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-41
changelog:
  - Zeroize public keys as required by FIPS 140-3
    Resolves: rhbz#2115861
  - Add FIPS indicator for HKDF
    Resolves: rhbz#2118388


author: Steve Dickson <steved@redhat.com> - 1.2.6-1
changelog:
  - Use sysconfig variable in service file (bz 1972094)
  - Make sure policycoreutils is installed before using it (bz 1972133)
  - Make sure /var/lib/rpcbind exists (bz 1972133)
  - Corrected the URL reference (bz 1972117)


author: Steve Dickson <steved@redhat.com> - 1.2.6-4
changelog:
  - Use 
  %setup       -q




  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-double-free.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-envfile.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.3-systemd-tmpfiles.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-runstatdir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-1.2.6-systemd-service.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


  /usr/bin/cat /builddir/build/SOURCES/rpcbind-0.2.4-systemd-rundir.patch | 
  /usr/bin/patch -p1 -s --fuzz=0 --no-backup-if-mismatch


author: Peter Robinson <pbrobinson@fedoraproject.org> 20200421-107
changelog:
  - Update to upstream 20200421 release
  - amdgpu: Update vega20/12/10, renoir, raven, raven2, picasso, navi10/14 for 20.10
  - Bluetooth updates for Intel AX201/AX200, RTL8822C, QCA6390
  - Add firmware for MT7663 Wifi/BT combo and mt8183 SCP devices
  - cxgb4: Update firmware to 1.24.14.0, T6 config update


author: Peter Robinson <pbrobinson@fedoraproject.org> 20200519-108
changelog:
  - Update to upstream 20200519 release
  - Bluetooth updates: Intel 9260/9560/AX200/AX201, new QCA9377
  - wifi: rtw88: support RTL8723DE, update RTL8821C
  - wifi: intel: update 8265/7265D/3168/8000C/9000/9260cc/Qu


author: Peter Robinson <pbrobinson@fedoraproject.org> 20200619-109
changelog:
  - Update to upstream 20200619 release
  - Bluetooth updates: Intel 9260/9560/AX200/AX201
  - mlxsw_spectrum firmware xx.2007.1168
  - rtl_nic firmware for RTL8125B
  - rtw88: RTL8822C firmware v9.9
  - cxgb4 firmware 1.24.17.0
  - mrvl: firmware for Prestera ASIC devices


author: Peter Robinson <pbrobinson@fedoraproject.org> 20200721-110
changelog:
  - Update to upstream 20200721 release
  - Bluetooth updates for Intel AX200/AX201/9560/9260, QCom QCA6390
  - rtl_nic updated RTL8125B
  - WiFi: WCN3991, MT7663, wilc1000 FW v15.4
  - amdgpu: add UVD firmware for SI asics


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20200817-111
changelog:
  - Update to upstream 20200817 release
  - Link Raspberry Pi 3A+ WiFi NVRAM to the 3B+ NVRAM
  - Update RTL8822C BT UART firmware to 0x0599_8A4F
  - i915: Add DMC FW 2.02 for RKL, 2.08 for TGL, HuC FW v7.5.0 for TGL
  - amdgpu: update vega20/12/10, renoir, raven/2, picasso, navi10/14 firmware for 20.30
  - update NXP SDSD-8997 firmware image
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.1036


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20200918-112
changelog:
  - amdgpu firmware for 20.30: navi10/12
  - wl18xx: update firmware file 8.9.0.0.83
  - mt7615: update firmware to 20200814
  - qcom: Add updated a5xx and a6xx microcode
  - mediatek: update MT7915 firmware to 20200819
  - Intel Bluetooth updates 9260/9560/AX201/AX200
  - AMD SEV firmware update
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.1310


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20201022-113
changelog:
  - Update to upstream 20201022 release
  - All symlinks created using WHENCE links option
  - Update Marvell Switchdev firmware with ABI changes
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.1312
  - Cadence MHDP8546 DP bridge
  - Intel Bluetooth updates for: 7265(D1)
  - iwlwifi: update 3168, 7265D, 8000C, 8265, core56-54 firmwares
  - QCA WCN3991 updates
  - TI VPDMA 1b8.bin firmware
  - amdgpu: navi10/12/14/picasso/raven/renoir/vega10/12/20 update to 20.40
  - ice: add comms for Intel E800 series driver, firmware to 1.3.16.0
  - qcom : updated venus firmware
  - i915: Add DG1 DMC v2.02
  - mediatek: VPU: separate venc service
  - ath10k: add SDIO firmware for QCA9377 WiFi
  - rtl_bt: Update RTL8821C BT FW to 0xAA6C_A99E
  - cypress: add Cypress firmware and clm_blob files for:
    43012, 43340, 43362, 4339, 43430, 43455, 4354, 4356, 43570, 4373, 54591


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20201118-115
changelog:
  - Update to upstream 20201118 release
  - rtw88: RTL8822C: Update firmware to v9.9.4
  - amdgpu: update picasso/raven/raven2 VCN firmware
  - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x099A_281A
  - QCA: Update Bluetooth firmware for QCA6390
  - qcom : updated venus firmware files for v5.4
  - QCA : Fixed BT SSR due to command timeout / IO fatal error
  - ath11k: Updated firmware for QCA6390/IPQ8074/IPQ6018
  - ath10l: Updated firmware for QCA9984/QCA9888/QCA6174


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20201218-116
changelog:
  - Update to upstream 20201218 release
  - AMD gpu: Updates for vega10/12/20, renoir, navi10/12/14, raven1/2
  - AMD gpuL add sienna cichlid
  - Update AMD SEV firmware
  - Add Mellanox mlxsw_spectrum xx.2008.2018 firmware
  - i915: Add GuC firmware v49.0.1
  - Intel bluetooth updates for AX200/201/210, 9560, 9260
  - Add Lontium LT9611UXC DSI to HDMI bridge firmware
  - Update QCA WCN3991 firmware
  - Update mediatek MT8173 VPU firmware to v1.1.6


author: Peter Robinson <pbrobinson@fedoraproject.org> 20210208-117
changelog:
  - Update to upstream 20210208 release
  - rtl_bt: Updates for RTL8822C, RTL8821C, added RTL8852A
  - Link Cypress brcmfmac firmwares to old brcm location
  - brcm NVRAM updates for Raspberry Pi, added 96boards Rock960
  - QCom SM8250 (SD865) firmware for Compute, Audio DSPs, Adreno a650, venus VPU-1.0
  - i915: Added firmware for DG1, ADL-S
  - Uodated bluetooth firmware for Intel Bluetooth AX200/201/210
  - rtw88: RTL8821C: Update firmware to v24.8
  - New MT7921 firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2304


author: Peter Robinson <pbrobinson@fedoraproject.org> 20210315-119
changelog:
  - Update to upstream 20210315 release
  - Update to Intel Bluetooth AX200/201 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.6
  - rtw89: 8852a: add firmware v0.9.12.2
  - iwlwifi: updates for 9000-family/7265D/core59-66 (cc, Qu, QuZ, ty)
  - amdgpu: add initial firmware for green sardine
  - Silabs new WF200 firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2406
  - Added Mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20210716-121
changelog:
  - Update to upstream 20210716 release (rhbz 1984973, rhbz 1876310).
    What changed in this release is noted on items below, copied from Fedora's
    linux-firmware changelog done by Peter Robinson
  - update NXP 8897/8997 firmware images
  - rtlwifi: de-dupe rtl8723b/rtl8192e SDIO/USB WiFi firmware
  - Mediatek: update WiFi/bluetooth chip (MT7921)
  - Mediatek: update MT7915 firmware to 20201105
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2946
  - cxgb4: Update firmware to revision 1.26.0.0
  - firmware/i915/guc: Add HuC v7.9.3 for TGL & DG1
  - firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  - firmware/i915/guc: Add GuC v62.0.0 for all platforms
  - nvidia: fix symlinks for tu104/tu106 acr unload firmware
  - iwlwifi: new/updated 8000/9000/other from core60-51 release
  - Update firmware file for Intel Bluetooth AX210/201/200
  - rtw88: 8822c: Update normal firmware to v9.9.10
  - rtl_bt: Update RTL8852A BT(UART I/F) FW to 0xD9A8_A0CD
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x05A8_C6B4
  - rtl_bt: Update RTL8822C BT(USB I/F) FW to 0x09A8_A0CB
  - rtl_bt: Add rtl8761b/rtl8761bu firmware
  - QCA: Update Bluetooth firmware for QCA6174/QCA6390
  - QCA: Add Bluetooth firmware for WCN685x
  - amdgpu: update 21.20 vcn firmware for green sardine, renoir, navi10/12/14
  - amdgpu: add initial dimgrey cavefish firmware from 21.20
  - amdgpu: updated 21.20 firmware for: Picasso, green sardine, arcturus
    vega10/12/20, navi10/12/14, raven1/2, renoir, navy flounder
  - cypress: update firmware: cyw54591/cyw43570 pcie
  - cypress: update firmware: cyw4373/cyw4356/cyw4354/cyw43455/cyw43430/cyw43340/cyw43012 sdio
  - nvidia: Update Tegra194 XUSB firmware to v60.09
  - nvidia: Update Tegra186 XUSB firmware to v55.18
  - nvidia: Update Tegra210 XUSB firmware to v50.26
  - nvidia: Add VIC firmware for Tegra194
  - update firmware for cadence mhdp8546
  - i915: Add ADL-P DMC Support
  - qcom: add gpu firmwares for sc7280
  - qcom: Add venus firmware files for VPU-2.0
  - qcom: update venus firmware files for v5.4
  - qcom: sm8250: update remoteproc firmware
  - qcom: update a650 firmware files
  - QCA: Update Bluetooth firmware for QCA6174
  - WHENCE: link to similar config file for rtl8821a support
  - rtw89: 8852a: update fw to v0.13.8.0
  - rtw88: 8822c: Update normal firmware to v9.9.9
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9A8_7893
  - rtl_bt: Add rtl8723bs_config-OBDA0623.bin symlink
  - rtl_bt: Update RTL8822C BT(UART I/F) FW to 0x59A_76A3
  - rtl_nic: add new firmware for RTL8153 and RTL8156 series
  - Intel: Update firmware for Intel Bluetooth AX210/201/200, 9560, 9260, 8265
  - Intel BT 7265: Fix Security Issues
  - mrvl: prestera: Add Marvell Prestera Switchdev firmware 3.0 version
  - amdgpu: update GPU firmwares from 21.10
  - amdgpu: add initial support for arcturus, navy flounder
  - amdgpu: add new polaris 12 MC firmware
  - amdgpu: update navi10/14 smc firmware
  - cxgb4: Update firmware to revision 1.25.4.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.2438
  - nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.14.A.6
  - brcm: add missing symlink for Pi Zero W NVRAM file
  - brcm: Add a link to enable khadas VIM2's WiFi
  - brcm: Link CM4's WiFi firmware with DMI machine name.
  - brcm: Add nvram for the Chuwi Hi8 (CWI509) tablet
  - brcm: Add nvram for the Predia Basic tablet


author: Herton R. Krzesinski <herton@redhat.com> - 20210919-122
changelog:
  - Update to upstream 20210919 release (rhbz 1979806). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - qed: Add firmware 8.59.1.0
  - Update firmware file for Intel Bluetooth AX211/AX210/AX200/AX201
  - Update firmware file for Intel Bluetooth 9560/9260/8265
  - iwlwifi: add FWs for new So device types with multiple RF modules
  - amdgpu: add initial firmware for Yellow Carp
  - Add firmware for mediatek bluetooth chip (MT7922)
  - Update AMD SEV firmware
  - Update firmware for mediatek bluetooth chip (MT7921)
  - Update RTL8852A BT USB firmware to 0xD9A9_1D69
  - Update RTL8822C BT UART firmware to 0x05A9_1A4A
  - Update RTL8822C BT USB firmware to 0x09A9_1A4A
  - Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  - Update firmware of RTL8153C
  - ice: update package file to 1.3.26.0
  - amdgpu: revert back to older raven2/raven/picasso sdma firmware
  - amdgpu: add initial vangogh support
  - amdgpu: update vega20/vega12/vega10/renoir/raven2/raven firmware from 21.30
  - amdgpu: update polaris12/picasso/dimgrey cavefish/flounder firmware from 21.30
  - amdgpu: update sienna cichlid/navi14/navi12/navi10 firmware from 21.30
  - amdgpu: update green sardine/arcturus firmware from 21.30
  - QCA: Updated firmware files for WCN3991
  - i915: Add v2.03 DMC for RKL
  - i915: Add v2.12 DMC for TGL
  - qca: Add firmware files for BT chip WCN6750
  - iwlwifi: add ty firmware from Core63-43


author: Herton R. Krzesinski <herton@redhat.com> - 20211027-123
changelog:
  - Update to upstream 20211027 release (rhbz 1986659). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - Update AMD cpu microcode
  - QCA: Update Bluetooth firmware for WCN685x
  - bnx2x: Add FW 7.13.20.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  - Update NXP Management Complex firmware to version 10.28.1
  - Update firmware for MT7921 WiFi device
  - rtw89: 8852a: update fw to v0.13.30.0
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth AX201
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth AX200
  - brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  - amdgpu: update VCN firmware for dimgrey cavefish
  - amdgpu: update VCN firmware for navy flounder
  - amdgpu: update VCN firmware for sienna cichlid
  - amdgpu: update VCN firmware for vangogh
  - amdgpu: update VCN firmware for renoir
  - amdgpu: update VCN firmware for picasso
  - amdgpu: update VCN firmware for raven2
  - amdgpu: update VCN firmware for raven
  - amdgpu: Add initial firmware for Beige Goby
  - cxgb4: Update firmware to revision 1.26.2.0
  - Update frimware for mediatek bluetooth chip (MT7921)
  - i915: Update ADLP DMC v2.12


author: Herton R. Krzesinski <herton@redhat.com> - 20211216-124
changelog:
  - Update to upstream 20211216 release (rhbz 2035777). Changes since the
    last update are noted on items below, copied from the git changelog
    of upstream linux-firmware repository
  - amdgpu: update green sardine PSP firmware
  - bnx2x: Add FW 7.13.21.0
  - wilc1000: update WILC1000 firmware to v15.4.1
  - rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  - rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  - cxgb4: Update firmware to revision 1.26.4.0
  - i915: Add DMC firmware v2.14 for ADL-P
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth AX200
  - Update firmware file for Intel Bluetooth AX201
  - amdgpu: update yellow carp dmcub firmware
  - amdgpu: update vangogh DMCUB firmware
  - QCA: Add Bluetooth default nvm file for WCN685x
  - Update ath10k/QCA6174/hw3.0/board-2.bin
  - mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  - QCA: Add Bluetooth firmware for WCN685x
  - Update AMD cpu microcode
  - amdgpu: update raven2 firmware from 21.40
  - amdgpu: update navi14 firmware from 21.40
  - amdgpu: update raven firmware from 21.40
  - amdgpu: update navi12 firmware from 21.40
  - amdgpu: update navi10 firmware from 21.40
  - amdgpu: update vega20 firmware from 21.40
  - amdgpu: update vega12 firmware from 21.40
  - amdgpu: update vega10 firmware from 21.40
  - amdgpu: update picasso firmware from 21.40
  - amdgpu: update vangogh firmware from 21.40
  - amdgpu: update beige goby firmware from 21.40
  - amdgpu: add cyan skillfish firmware from 21.40
  - amdgpu: update dimgrey cavefish firmware from 21.40
  - amdgpu: update green sardine firmware from 21.40
  - amdgpu: update navy flounder firmware from 21.40
  - amdgpu: update renoir firmware from 21.40
  - amdgpu: update arcturus firmware from 21.40
  - amdgpu: update sienna cichlid firmware from 21.40
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  - iwlwifi: add new FWs from core64-96 release
  - iwlwifi: update 9000-family firmwares to core64-96
  - amdgpu: update VCN firmware for green sardine
  - update firmware for mediatek bluetooth chip (MT7921)


author: Herton R. Krzesinski <herton@redhat.com> - 20220209-125
changelog:
  - Update to upstream 20220209 release (rhbz 1967151, 2031174). Changes
    since the last update are noted on items below, copied from the git
    changelog of upstream linux-firmware repository
  - Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  - i915: Add DMC firmware v2.16 for ADL-P
  - mediatek: Update MT8173 VPU firmware to v1.1.7
  - Update firmware file for Intel Bluetooth 9260
  - Update firmware file for Intel Bluetooth 9462
  - Update firmware file for Intel Bluetooth 9560
  - Update firmware file for Intel Bluetooth AX201
  - Update firmware file for Intel Bluetooth AX211
  - Update firmware file for Intel Bluetooth AX210
  - Update firmware file for Intel Bluetooth AX200
  - update firmware for mediatek bluetooth chip (MT7921)
  - update firmware for MT7921 WiFi device
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  - add marvell CPT firmware images
  - update firmware for MT7915
  - iwlwifi: add new FWs from core63-136 release
  - iwlwifi: add new FWs from core66-88 release
  - iwlwifi: update 9000-family firmwares to core66-88
  - add firmware for MT7916
  - Update firmware file for Intel Bluetooth 9462
  - WHENCE: add missing symlink for NanoPi R1
  - amdgpu: update yellow carp dmcub firmware
  - QCA: Add Bluetooth nvm file for WCN685x
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  - QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  - cxgb4: Update firmware to revision 1.26.6.0
  - cnm: add chips&media wave521c firmware
  - rtw88: 8822c: Update normal firmware to v9.9.11
  - i915: Add GuC v69.0.3 for all platforms
  - rtw89: 8852a: update fw to v0.13.33.0


author: Herton R. Krzesinski <herton@redhat.com> - 20220209-126
changelog:
  - Cherry-pick new QCA wifi changes from linux-firmware upstream (rhbz 2035176)
    The changes are listed below.
  - ath11k: add links for WCN6855 hw2.1
  - ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  - ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  - ath10k/ath11k: mark notice.txt as "File:"


author: Vladis Dronov <vdronov@redhat.com> - 6.12-4
changelog:
  - Allow rngd to run as non-privledged user (bz 1965318)
  - Update the rngd.service file
  - Add 3 small upstream patches fixing issues


author: Vladis Dronov <vdronov@redhat.com> - 6.13-1
changelog:
  - Update the sources to 6.13
  - Add important fixes from the upstream
  - Remove Provides: jitterentropy-rngd as it was retired in f29.


author: Vladis Dronov <vdronov@redhat.com> - 6.13-3
changelog:
  - Adjust rngd-wake-threshold.service and post section so udevadm
    is not run in a container (bz 1965318)


author: Vladis Dronov <vdronov@redhat.com> - 6.13-4.git.d207e0b6
changelog:
  - Update to the upstream v6.13 + tip of origin/master + onecpu
    branch + revert of 2ce93190 (bz 1965318)
  - Rebuild rng-tools against the latest jitterentropy library
    3.0.2-2.git.409828cf with fixes for an important issue
  - Adjust Source0 to a more proper one


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-4
changelog:
  - Resolves: #1894485 - rsync is unable to set permissions when chrooted
  - Getting rid of deprecated makeinstall macro


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-7
changelog:
  - Resolves: #1955008 - rsync segfaults in --append mode when file on sender is large (> 2GB) and gets truncated


author: Joe Lawrence <joe.lawrence@redhat.com> [1-1.el9_0]
changelog:
  - kernel: Small table perturb size in the TCP source port generation algorithm can lead to information leak [2087132] {CVE-2022-1012}
  - kernel: a use-after-free write in the netfilter subsystem can lead to privilege escalation to root [2093170] {CVE-2022-1966}
  - kernel: buffer overflow in IPsec ESP transformation code [2087138] {CVE-2022-27666}


author: Yannick Cote <ycote@redhat.com> [1-4.el9_0]
changelog:
  - kernel: posix cpu timer use-after-free may lead to local privilege escalation [2118959] {CVE-2022-2585}


author: Patrik Novotný <panovotn@redhat.com> - 1.2.11-28
changelog:
  - IBM CRC32 optimalization rhbz#1959423
  - Enabled Z hardware-accelerated deflate for compression levels 1 through 6 (#1972057)


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-32
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Thomas Haller <thaller@redhat.com> - 1:1.24.2-1
changelog:
  - Update to 1.24.2 release
  - ifcfg-rh: handle "802-1x.{,phase2-}ca-path" (rh #1841395, CVE-2020-10754)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-0.1
changelog:
  - Update to 1.31.5 (development)
  - build: install D-Bus service files to '/usr' by default (rh #1969428)
  - ethtool: introduce PAUSE support (rh #1959261)
  - resolve conflicts in NetworkManager-libnm-devel multilib packages (rh #1915254)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.0-1
changelog:
  - update to 1.32.0 release
  - DNS: fix lookup of hostname via DNS (rh #1956319)
  - initrd: fix crash parsing empty rd.znet argument (rh #1931284)
  - fix the connection unauthenticated via insecure defaults (rh #1910627, CVE-2020-10754)
  - fix NetworkManager crash when setting 'match.path' and activating a profile (rh #1944977, CVE-2021-20297)


author: Wen Liang <wenliang@redhat.com> - 1:1.32.2-1
changelog:
  - update to 1.32.2 release
  - dhcp/systemd: ignore FORCERENEW requests for DHCPV4 (rh #1966123, CVE-2020-13529)


author: Gris Ge <fge@redhat.com> - 1:1.32.4-1
changelog:
  - Upgrade to 1.32.4 release
  - core/wwan: avoid assertion failure in modem_ip{4,6}_config_result() (rh #1916192)
  - bond: support the peer_notif_delay option (rh #1963854)


author: Ana Cabral <acabral@redhat.com> - 1:1.34.0-0.1
changelog:
  - Upgrade to 1.33.3 release (development) (rh #1996582)
  - Add support of queue_id of bond port (rh #1949127)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.3
changelog:
  - Upgrade to 1.35.3 release (development)
  - device: fix update of the ip-iface property (rh #2026024)


author: Wen Liang <wenliang@redhat.com> - 1:1.36.0-0.4
changelog:
  - Upgrade to 1.35.4 release (development)
  - core: don't reset assume state if the device is unmanaged by parent (rh #2012182)
  - nm-device: clean up IP methods if we lose ifindex (rh #2012934)
  - core: log variant properties in connection diff (rh #2034086)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.6
changelog:
  - Upgrade to 1.35.6 release (development)
  - Move ifup/ifdown scripts to new NetworkManager-initscripts-updown package (rh #2022418)
  - wwan: fix assertion failure in modem/ppp code (rh #2028385)
  - core: fix performance regression with 500vlans test (rh #2028849)
  - core: drop defective BPF filter for netlink sockets that caused hangs (rh #2037411)
  - initrd: add support for rd.znet_ifnames (rh #1980387)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-0.7
changelog:
  - Upgrade to 1.35.7 release (development)
  - core: fix crash related to DHCPv6 leases (rh #2028849)
  - wifi: fix stale ActiveAccessPoint in D-Bus (rh #1983735)
  - libnm: fix dangling pointer in NMObject (rh #2039331)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.8
changelog:
  - Upgrade to 1.35.90 release (release candidate)
  - ovs: remove ovsdb entry on interface removal (rh #2047302)
  - ovs: properly clean up devices on daemon shutdown (rh #2029937)
  - core: avoid losing addresses on handover from initrd to ral root (rh #2047302)
  - core: fix a possibe assertion failure in ACD (rh #2047788)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.9
changelog:
  - Upgrade to 1.35.91 release (release candidate)
  - bond: fix duplicate IPv4 address detection (rh #2028751)
  - core: add support for blackhole routes (rh #1937823) (rh #2013587)
  - core: re-assess IP configuration if one IP family times out (rh #2051904)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-0.10
changelog:
  - Upgrade to 1.35.92 (release candidate)
  - ppp: increase disconnect timeout (rh #2049596)
  - core: finish activation after all objects are committed (rh #2043133)
  - ipv6: add support for multipath routes (rh #1837254)
  - keyfile: do not write empty string list properties (rh #2022623)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-3
changelog:
  - core: preserve external bridge ports during checkpoint rollback (rh #2061711)
  - ovs-port: fix removal of ovsdb entry if the interface goes away (rh #2061709)


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-9.1
changelog:
  - Resolves: #2074784 - A flaw found in zlib v1.2.2.2 through zlib v1.2.11 when compressing certain inputs


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.18-46
changelog:
  - Temporarily dropped a check that validates the logical size specified from
    the table line.
  - Related: rhbz#2071648


author: - Andy Walsh <awalsh@redhat.com> - 8.2.0.21-46
changelog:
  - Fixed a bug where I/O errors on data reads from below a vdo were ignored.
  - Resolves: rhbz#2125708


author: Javier Martinez Canillas <javierm@redhat.com> - 15-12
changelog:
  - Fix firmware update bug in aarch64 caused by shim ignoring arguments
  - Fix a shim crash when attempting to netboot


author: Patsy Griffin <patsy@redhat.com> - 2022d-1
changelog:
  - Rebase to tzdata-2022d
    - Palestine's DST transition will be on October 29, 2022,
      not October 28, 2022.
    - Europe/Uzhgorod and Europe/Zaporozhye are moved to 'backzone'.


author: Patsy Griffin <patsy@redhat.com> - 2022e-1
changelog:
  - Rebase to tzdata-2022e
    - Jordan and Syria cancelled the DST transition planned
      for 2022-10-28, remaining at +03 permanently.


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-15
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix bad local IPv6 connection reuse (CVE-2022-27775)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-3
changelog:
  - Treat EPERM as "not available" too (#2017035)
  - test: copy portable profiles into the image if they don't exist there (#2017035)
  - test: introduce `get_cgroup_hierarchy() helper (#2047768)
  - test: require unified cgroup hierarchy for TEST-56 (#2047768)
  - tests: rework test macros to not take code as parameters (#2017035)
  - test: allow to set NULL to intro or outro (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-4
changelog:
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - man: mention System Administrator's Guide in systemctl manpage (#1982596)
  - Net naming scheme for RHEL-9.0 (#2052106)
  - core: decrease log level of messages about use of KillMode=none (#2013213)
  - ci: replace apt-key with signed-by (#2013213)
  - ci: fix clang-13 installation (#2013213)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-7
changelog:
  - test: check systemd RPM macros (#2017035)
  - test: do not assume x86-64 arch in TEST-58-REPART (#2017035)
  - tests: add repart tests for block devices with 1024, 2048, 4096 byte sector sizes (#2017035)
  - test: accept both unpadded and padded partition sizes (#2017035)
  - test: lvm 2.03.15 dropped the static autoactivation (#2017035)
  - test: accept GC'ed units in newer LVM (#2017035)
  - shared: Add more dlopen() tests (#2017035)
  - systemctl: Show how long a service ran for after it exited in status output (#2017035)
  - time-util: introduce TIMESTAMP_UNIX (#2017035)
  - systemctl,man: update docs for `--timestamp=` (#2017035)
  - systemctl: make `--timestamp=` affect the `show` verb as well (#2017035)
  - tests: allow running all the services with SYSTEMD_LOG_LEVEL (#2017035)
  - coredump: raise the coredump save size on 64bit systems to 32G (and lower it to 1G on 32bit systems) (#2017035)
  - repart: fix sector size handling (#2017035)
  - mkdir: allow to create directory whose path contains symlink (#2017035)
  - mkdir: CHASE_NONEXISTENT cannot used in chase_symlinks_and_stat() (#2017035)
  - meson: move efi file lists closer to where they are used (#2017035)
  - meson: move efi summary() section to src/boot/efi (#2017035)
  - meson: report SBAT settings (#2017035)
  - boot: Build BCD parser only on arches supported by Windows (#2017035)
  - meson: Remove efi-cc option (#2017035)
  - meson: Get objcopy location from compiler (#2017035)
  - meson: Use files() for source lists for boot and fundamental (#2017035)
  - meson: Use files() for tests (#2017035)
  - tests: add fuzz-bcd (#2017035)
  - meson: Use files() for fuzzers (#2017035)
  - meson: Add check argument to remaining run_command() calls (#2017035)
  - meson: Use echo to list files (#2017035)
  - test: add a test for mkdir_p() (#2017035)
  - util: another set of CVE-2021-4034 assert()s (#2017035)
  - basic: update CIFS magic (#2017035)
  - shared: be extra paranoid and check if argc > 0 (#2017035)
  - core: check if argc > 0 and argv[0] is set (#2017035)
  - core: check argc/argv uncoditionally (#2017035)
  - test: temporary workaround for #21819 (#2017035)
  - test: don't leak local variable to outer scopes (#2017035)
  - tree-wide: don't use strjoina() on getenv() values (#2017035)
  - man: clarify Environmentfile format (#2017035)
  - test-load-fragment: add a basic test for config_parse_unit_env_file() (#2017035)
  - core/execute: use _cleanup_ in exec_context_load_environment() (#2017035)
  - test-env-file: add tests for quoting in env files (#2017035)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-8
changelog:
  - core: shorten long unit names that are based on paths and append path hash at the end (#2083493)
  - tests: add test case for long unit names (#2083493)
  - tests: reflect that we can now handle devices with very long sysfs paths (#2083493)
  - test: extend the "hashed" unit names coverage a bit (#2083493)
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - ci(Mergify): configuration update (#2087652)
  - ci(Mergify): fix copy&paste bug (#2087652)
  - shared: Fix memory leak in bus_append_execute_property() (#2087652)
  - fuzz: no longer skip empty files (#2087652)
  - networkctl: open the bus just once (#2087652)
  - json: align table (#2087652)
  - fuzz-json: optionally allow logging and output (#2087652)
  - shared/json: reduce scope of variables (#2087652)
  - fuzz-json: also do sorting and normalizing and other easy calls (#2087652)
  - shared/json: wrap long comments (#2087652)
  - shared/json: fix memory leak on failed normalization (#2087652)
  - shared/json: add helper to ref first, unref second (#2087652)
  - basic/alloc-util: remove unnecessary parens (#2087652)
  - fuzz-json: also try self-merge operations (#2087652)
  - shared/json: fix another memleak in normalization (#2087652)
  - shared/json: fix memleak in sort (#2087652)
  - execute: fix resource leak (#2087652)
  - tests: ignore dbus-broker-launcher (#2087652)
  - core/timer: fix memleak (#2087652)
  - timedatectl: fix a memory leak (#2087652)
  - test: fix file descriptor leak in test-psi-util (#2087652)
  - test: fix file descriptor leak in test-tmpfiles.c (#2087652)
  - test: fix file descriptor leak in test-fs-util (#2087652)
  - test: fix file descriptor leak in test-oomd-util (#2087652)
  - test: fix file descriptor leak in test-catalog (#2087652)
  - test: make masking of supplementary services configurable (#2087652)
  - test: fuzz our dbus interfaces with dfuzzer (#2087652)
  - test: skip TEST-21-DFUZZER without ASan (#2087652)
  - core: annotate Reexecute() as NoReply (#2087652)
  - test: always force a new image for dfuzzer (#2087652)
  - test: make dfuzzer less verbose (#2087652)
  - test: drop the at_exit() coredump check (#2087652)
  - test: make the shutdown routine a bit more "robust" (#2087652)
  - tree-wide: drop manually-crafted message for missing variables (#2087652)
  - test: allow overriding $QEMU_MEM when running w/ ASan (#2087652)
  - test: don't test buses we don't ship (#2087652)
  - shutdown: get only active md arrays. (#2047682)
  - bus: Use OrderedSet for introspection (#2068131)
  - logind-session-dbus: allow to set display name via dbus (#2100340)
  - ci: limit which env variables we pass through `sudo` (#2087652)
  - ci(Mergify): Add `ci-waived` logic (#2087652)
  - json: use unsigned for refernce counter (#2087652)
  - macro: check over flow in reference counter (#2087652)
  - sd-bus: fix reference counter to be incremented (#2087652)
  - sd-bus: introduce ref/unref function for track_item (#2087652)
  - sd-bus: do not read unused value (#2087652)
  - sd-bus: do not return negative errno when unknown name is specified (#2087652)
  - sd-bus: use hashmap_contains() and drop unnecessary cast (#2087652)
  - test: shorten code a bit (#2087652)
  - test: add several tests for track item (#2087652)
  - core/slice: make slice_freezer_action() return 0 if freezing state is unchanged (#2087652)
  - core/unit: fix use-after-free (#2087652)
  - core/timer: fix potential use-after-free (#2087652)
  - core: command argument can be longer than PATH_MAX (#2073994)
  - shared/install: consistently use 'lp' as the name for the LookupPaths instance (#2082131)
  - shared/specifier: treat NULL the same as "" (#2082131)
  - shared/install: do not print aliases longer than UNIT_NAME_MAX (#2082131)
  - shared/install-printf: drop now-unused install_path_printf() (#2082131)
  - strv: declare iterator of FOREACH_STRING() in the loop (#2082131)
  - basic/unit-file: split out the subroutine for symlink verification (#2082131)
  - basic/stat-util: add null_or_empty_path_with_root() (#2082131)
  - shared/install: reuse the standard symlink verification subroutine (#2082131)
  - shared/install: add a bit more quoting (#2082131)
  - test: add test for systemctl link & enable (#2082131)
  - tests: add helper for creating tempfiles with content (#2082131)
  - man: clarify the descriptions of aliases and linked unit files (#2082131)
  - basic: add new variable $SYSTEMD_OS_RELEASE to override location of os-release (#2082131)
  - test-os-util: add basic tests for os-release parsing (#2082131)
  - basic/env-file: make load-env-file deduplicate entries with the same key (#2082131)
  - man/os-release: add a note about repeating entries (#2082131)
  - shared/specifier: clarify and add test for missing data (#2082131)
  - shared/specifier: provide proper error messages when specifiers fail to read files (#2082131)
  - shared/install: provide proper error messages when invalid specifiers are used (#2082131)
  - shared/install: move scope into InstallContext (#2082131)
  - shared/specifier: fix %u/%U/%g/%G when called as unprivileged user (#2082131)
  - shared/install: simplify unit_file_dump_changes() (#2082131)
  - shared/install: propagate errors about invalid aliases and such too (#2082131)
  - shared/install: return failure when enablement fails, but process as much as possible (#2082131)
  - systemctl: fix silent failure when --root is not found (#2082131)
  - shared/install: also check for self-aliases during installation and ignore them (#2082131)
  - docs: Correct WantedBy= regarding template units (#2082131)
  - man: fix invalid description of template handling in WantedBy= (#2082131)
  - shared/install: drop unnecessary casts (#2082131)
  - strv: make iterator in STRV_FOREACH() declaread in the loop (#2082131)
  - core: ExecContext::restrict_filesystems is set of string (#2082131)
  - install: when linking a file, create the link first or abort (#2082131)
  - shared/install: split unit_file_{disable,enable}() so _reenable doesn't do setup twice (#2082131)
  - shared/install: fix reenable on linked unit files (#2082131)
  - test-systemctl-enable: extend the test for repeated WantedBy/RequiredBy (#2082131)
  - shared/install: when we fail to chase a symlink, show some logs (#2082131)
  - shared/install: do not try to resolve symlinks outside of root directory (#2082131)
  - test-systemctl-enable: enhance the test for unit file linking (#2082131)
  - shared/install: skip unnecessary chasing of symlinks in disable (#2082131)
  - shared/install: also remove symlinks like .wants/foo@one.service → ../foo@one.service (#2082131)
  - shared/install: create relative symlinks for enablement and aliasing (#2082131)
  - shared/install: when looking for symlinks in .wants/.requires, ignore symlink target (#2082131)
  - shared/install: stop passing duplicate root argument to install_name_printf() (#2082131)
  - basic/unit-file: reverse negative conditional (#2082131)
  - shared/install: split UNIT_FILE_SYMLINK into two states (#2082131)
  - shared/install: fix handling of a linked unit file (#2082131)
  - test-systemctl-enable: make shellcheck happy (#2082131)
  - shared/install: when creating symlinks, accept different but equivalent symlinks (#2082131)
  - test-systemctl-enable: use magic syntax to allow inverted tests (#2082131)
  - test-systemctl-enable: also use freshly-built systemd-id128 (#2082131)
  - test-systemctl-enable: disable the test for %a for now (#2082131)
  - Rename UnitFileScope to LookupScope (#2082131)
  - core: handle lookup paths being symlinks (#2082131)
  - shared/install: use correct cleanup function (#2082131)
  - udev/net_id: avoid slot based names only for single function devices (#2073003)
  - test: import logind test from debian/ubuntu test suite (#2087652)
  - test: drop redundant IMAGE_NAME= (#2087652)
  - test: import timedated test from debian/ubuntu test suite (#2087652)
  - test: introduce assert_not_in() helper function (#2087652)
  - test: drop unnecessary --no-pager option (#2087652)
  - test: support debian/ubuntu specific timezone config file (#2087652)
  - test: import hostnamed tests from debian/ubuntu test suite (#2087652)
  - locale-util: fix memleak on failure (#2087652)
  - locale-util: check if enumerated locales are valid (#2087652)
  - locale-util: align locale entries (#2087652)
  - core: inline an iterator variable (#2087652)
  - locale-setup: merge locale handling in PID1 and localed (#2087652)
  - locale: rename keymap-util.[ch] -> localed-util.[ch] (#2087652)
  - test: add one more path to search keymaps (#2087652)
  - test: introduce inst_recursive() helper function (#2087652)
  - hmac/sha256: move size define to sha256.h (#2087652)
  - tpm2: support policies with PIN (#2087652)
  - cryptenroll: add support for TPM2 pin (#2087652)
  - cryptsetup: add support for TPM2 pin (#2087652)
  - cryptsetup: add libcryptsetup TPM2 PIN support (#2087652)
  - cryptenroll: add TPM2 PIN documentation (#2087652)
  - cryptsetup: add manual TPM2 PIN configuration (#2087652)
  - cryptenroll: add tests for TPM2 unlocking (#2087652)
  - env-util: replace unsetenv_erase() by new getenv_steal_erase() helper (#2087652)
  - test: install libxkbcommon and x11 keymaps (#2087652)
  - test: install C.UTF-8 and English locales (#2087652)
  - test: import localed tests from debian/ubuntu test suite (#2087652)
  - unit: check for mount rate limiting before checking active state (#2087652)
  - tests: make sure we delay running mount start jobs when /p/s/mountinfo is rate limited (#2087652)
  - test: insert space in for loop (#2087652)
  - test: move "do" at the end of line (#2087652)
  - test: use trap RETURN (#2087652)
  - test: ignore the error about our own libraries missing during image creation (#2087652)
  - test: wrap binaries using systemd DSOs when running w/ ASan (#2087652)
  - test: set $ASAN_RT_PATH along with $LD_PRELOAD to the ASan runtime DSO (#2087652)
  - test: drop all LD_PRELOAD-related ASan workarounds (#2087652)
  - test: don't wrap binaries built with ASan (#2087652)
  - test: send stdout/stderr of testsuite units to journal & console (#2087652)
  - test: make the busy loop in TEST-02 less verbose (#2087652)
  - test: always wrap useradd/userdel when running w/ ASan (#2087652)
  - test: don't flush debug logs to the console (#2087652)
  - test: fix a couple of issues found by shellcheck (#2087652)
  - test: pass the initdir to check_result_{qemu,nspawn} hooks (#2087652)
  - test: run the custom check hooks before common checks (#2087652)
  - test: check journal directly instead of capturing console output (#2087652)
  - test: use saved process PID instead of % (#2087652)
  - test: account for ADDR_NO_RANDOMIZE if it's set (#2087652)
  - fuzz-bcd: silence warning about always-true comparison (#2087652)
  - test: disable test_ntp on RHEL (#2087652)
  - core: do not filter out systemd.unit= and run-level specifier from kernel command line (#2087652)
  - test: add a simple test for daemon-reexec (#2087652)
  - test: install /usr/libexec/vi as well (#2087652)
  - test: resize the terminal automagically with INTERACTIVE_DEBUG=yes (#2087652)
  - test: create an ASan wrapper for `getent` and `su` (#2087652)
  - test: mark partition bootable (#2087652)
  - test: bump the data partition size if we don't strip binaries (#2087652)
  - test: use PBKDF2 with capped iterations instead of Argon2 (#2087652)
  - locale: drop unnecessary allocation (#2087652)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-9
changelog:
  - Revert "shared/install: create relative symlinks for enablement and aliasing" (#2118668)
  - glyph-util: add new glyphs for up/down arrows (#2118297)
  - tree-wide: allow ASCII fallback for → in logs (#2118297)
  - tree-wide: allow ASCII fallback for … in logs (#2118297)
  - core: allow to set default timeout for devices (#2116681)
  - man: document DefaultDeviceTimeoutSec= (#2116681)
  - man: update dbus docs (#2116681)
  - hwdb: 60-keyboard: Fix volume-button mapping on Asus TF103C (#2087778)
  - hwdb: CH Pro Pedals not classified correctly due to no buttons (#2087778)
  - hwdb: Add accel orientation quirk for the GPD Pocket 3 (#2087778)
  - hostname: Allow overriding the chassis type from hwdb (#2087778)
  - hwdb: Add Microsoft Surface Pro 1 chassis quirk (#2087778)
  - hwdb: treat logitech craft keyboard as a keyboard (#2087778)
  - test: frequency in mouse DPI is optional (#2087778)
  - hwdb: add two Elecom trackballs (#2087778)
  - hwdb: add new database file for PDA devices (#2087778)
  - hwdb: add support for Surface Laptop 2 & 3 (#22303) (#2087778)
  - hwdb: add HP calculators (#2087778)
  - hwbd: 60-sensor.hwdb: Add Pipo W2Pro (#2087778)
  - hwdb: 60-keyboard: Support the buttons on CZC P10T tablet (#2087778)
  - hwdb: add CST Laser Trackball (#22583) (#2087778)
  - hwdb: Force release calculator key on all HP OMEN laptops (#2087778)
  - Add support for NEC VersaPro VG-S (#2087778)
  - Fix mic mute on Acer TravelMate B311-31 (#22677) (#2087778)
  - Add AV production controllers to hwdb and add uaccess (#2087778)
  - hwdb: Add AV production access to Elgado Stream Deck devices (#2087778)
  - Add HP Elitebook 2760p support (#22766) (#2087778)
  - hwdb: Add mic mute key mapping for HP Elite x360 (#2087778)
  - hwdb: fix parser to work with newer pyparsing (#2087778)
  - hwdb: update for v251 (#2087778)
  - hwdb: update autosuspend entries (#2087778)
  - hwdb: drop boilerplate about match patterns being unstable (#2087778)
  - hwdb: Update 60-keyboard.hwdb (#23074) (#2087778)
  - hwdb: 60-keyboard: Add Acer Aspire One AO532h keymappings (#2087778)
  - hwdb 60-keyboard Add HP/Compaq KBR0133 (#2087778)
  - hwdb: add resolutions for the Vaio FE14 touchpad (#23136) (#2087778)
  - hwdb: Remap micmute to f20 for ASUS WMI hotkeys (#2087778)
  - hwdb: Fix rotation for HP Pro Tablet 408 G1 (#2087778)
  - hwdb: add keyboard mapping for HP ProBook 11G2 (#2087778)
  - hwdb: make sure "ninja update-hwdb" works on f35 (#2087778)
  - hwbd: run "update-hwdb" for v251-rc2 (#2087778)
  - hwdb: run "ninja update-hwdb-autosuspend" for v251-rc2 (#2087778)
  - Fix orientation detection for Asus Transformer T100TAF, copied T100TA rule (#2087778)
  - Fix orientation detection for HP Pavilion X2 10-k010nr (#2087778)
  - fix typo (#2087778)
  - Adding a description of the keyboard shortcut Fn+F12 for the HP EliteBook 845 G7 device. (#23253) (#2087778)
  - hwdb: run "update-hwdb" (#2087778)
  - hwdb: add rammus accelerometer support (#2087778)
  - Add support to set autosuspend delay via hwdb (#2087778)
  - Set autosuspend delay for Fibocom LG850-GL (#2087778)
  - Add HUION Inspiroy H420X to hwdb (#2087778)
  - hwdb: run 'update-hwdb' for v251-rc3 (#2087778)
  - hwdb: add touchpad parameters for Lenovo T15g Gen1 (#23373) (#2087778)
  -  hwdb: Add accel orientation for the I15-TG (#2087778)
  - hwdb: fix accelerometer mount matrix for Aquarius NS483 (#2087778)
  - hwdb: Add Google Hangouts Meet speakermic (#2087778)
  - hwdb: update via ninja -C build update-hwdb (#2087778)
  - hwdb: Add Google Meet speakermic (#2087778)
  - hwdb: Add accel orientation quirk for the Aya Neo Next (#2087778)
  - hwdb: Add HP Dev One (#2087778)
  - hwdb: analyzers: remove generic "STM Device in DFU Mode" (#2087778)
  - hwdb: Add Lenovo ThinkPad C13 Yoga (#2087778)
  - Fix automatic screen rotation for Asus Transformer T100TAM (#2087778)
  - hwdb: Add Acer Aspire A317-33 (#24050) (#2087778)
  - Add ACCEL_MOUNT_MATRIX for OXP Mini (#2087778)
  - Added DERE DBook D10 (#24173) (#2087778)
  - hwdb: analyzers: Clarify the type of devices we want listed (#2087778)
  - hwdb: Add Greaseweazle "drives" to the list of analyzers (#2087778)
  - hwdb: Apply existing accel orientation quirk to all Chromebooks (#2087778)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-11
changelog:
  - scope: allow unprivileged delegation on scopes (#2120604)
  - udev/net_id: add "rhel-9.1" naming scheme (#2121144)


author: systemd maintenance team <systemd-maint@redhat.com> - 250-12
changelog:
  - core/load-fragment: move config_parse_sec_fix_0 to src/shared (#2100464)
  - logind: add option to stop idle sessions after specified timeout (#2100464)
  - tree-wide: fix typo (#2100464)
  - test: several cleanups for TEST-35-LOGIN (#2100464)
  - test: start test user session before idle action setting is changed (#2100464)
  - test: ensure cleanup functions return success (#2100464)
  - test: add test for org.freedesktop.login1.Session SetType (#2100464)
  - test: add a simple test for list-users (#2100464)
  - test: merge grep | awk calls (#2100464)
  - test: wait for user service or slice to be finished (#2100464)
  - test: terminate session and user on cleanup (#2100464)
  - test: do not restart getty@tty2 automatically (#2100464)
  - tests: add test for StopIdleSessionSec= option (#2100464)
  - logind: schedule idle check full interval from now if we couldn't figure out atime timestamp (#2100464)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 2.0.1-2
  ✅ use fonts packaging guidelines as URL
  - 2.0.1-1
  ✅ first 2.x version proposed to Fedora, after FPC approval
     https://meetbot-raw.fedoraproject.org/fedora-meeting-1/2020-02-13/fpc.2020-02-13-17.00.txt


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marian Csontos <mcsontos@redhat.com> - 2.03.09-1
changelog:
  - Fix showing of a dm kernel error when uncaching a volume with cachevol.
  - Fix memleak in syncing of internal cache.
  - Fix pvck dump_current_text memleak.
  - Fix lvmlockd result code on error path for _query_lock_lv().
  - Update pvck man page and help output.
  - Accept more output lines from vdo_format.
  - Prevent raid reshaping of stacked volumes.
  - Writecache and VDO volume handling improvements.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.10-1
changelog:
  - Add integrity with raid capability.
  - Add writecache and integrity support to lvmdbusd.
  - Zero pool metadata on allocation (disable with allocation/zero_metadata=0).
  - Failure in zeroing or wiping will fail command (bypass with -Zn, -Wn).
  - Add lvcreate of new cache or writecache lv with single command.
  - Generate unique cachevol name when default required from lvcreate.
  - Converting RAID1 volume to one with same number of legs now succeeds with a
    warning.
  - Fix conversion to raid from striped lagging type.
  - Fix conversion to 'mirrored' mirror log with larger regionsize.
  - Fix running out of free buffers for async writing for larger writes.
  - Fix support for lvconvert --repair used by foreign apps (i.e. Docker).
  - Add support for VDO in blkdeactivate script.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.11-1
changelog:
  - Fix mpath filtering of NVMe devices.
  - Check if lvcreate passes read_only_volume_list with tags and skips zeroing.
  - Limit pool metadata spare to 16GiB.
  - Improves conversion and allocation of pool metadata.
  - Fix different limits used for metadata by lvm2 and thin-tools.
  - Fix interrupting lvconvert --splitcache command with striped origin volumes.
  - Fix problem with wiping of converted LVs.
  - Fix memleak in scanning.
  - Fix corner case allocation for thin-pools.
  - Fix pvck handling MDA at offset different from 4096.
  - Partial or degraded activation of writecache is not allowed.
  - Enhance error handling in fsadm and handle correct fsck result.
  - Dmeventd lvm plugin ignores higher reserved_stack lvm.conf values.
  - Support using BLKZEROOUT for clearing devices.
  - Fixed interrup handling.
  - Fix block cache when device has too many failing writes.
  - Fix block cache waiting for IO completion with failing disks.
  - Add configure --enable-editline support as an alternative to readline.
  - Enhance reporting and error handling when creating thin volumes.
  - Enable vgsplit for VDO volumes.
  - Lvextend of vdo pool volumes ensure at least 1 new VDO slab is added.
  - Restore lost signal blocking while VG lock is held.
  - Improve estimation of needed extents when creating thin-pool.
  - Use extra 1% when resizing thin-pool metadata LV with --use-policy.
  - Enhance --use-policy percentage rounding.
  - Allow pvmove of writecache origin.
  - Report integrity fields.
  - Integrity volumes defaults to journal mode.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.13-1
changelog:
  - Update to upstream version 2.03.13.
  - Change in obtain_devices_list_from_udev default.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.14-4
changelog:
  - Remove service based autoactivation.
  - New lvmautoactivation(7) man page.
  - Fix missing PVIDs for multipath devices in system.devices file.


author: Guenther Deschner <gdeschner@redhat.com> - 4.12.2-0
changelog:
  - Update to Samba 4.12.2
  - resolves: #1825731, #1828870 - Security fixes for CVE-2020-10700
  - resolves: #1825734, #1828872 - Security fixes for CVE-2020-10704


author: Guenther Deschner <gdeschner@redhat.com> - 4.12.4-0
changelog:
  - Update to Samba 4.12.4
  - resolves: #1849489, #1853255 - Security fixes for CVE-2020-10730
  - resolves: #1849491, #1853256 - Security fixes for CVE-2020-10745
  - resolves: #1849509, #1853276 - Security fixes for CVE-2020-10760
  - resolves: #1851298, #1853259 - Security fixes for CVE-2020-14303


author: Andreas Schneider <asn@redhat.com> - 4.13.0rc1-3
changelog:
  - resolves: #1865831 - Add missing /usr/lib64/samba/krb5 directory
  - resolves: #1866989 - Remove obsolete python3-crypto dependency


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-12
changelog:
  - Add preliminary support for S4U operations in Samba AD DC
    resolves: #1836630 - Samba DC: Remote Desktop cannot access files
  - Fix lookup_unix_user_name to allow lookup of realm-qualified users and groups
    required for upcoming FreeIPA Global Catalog support


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.0-13
changelog:
  - Report 'samba' daemon status back to systemd
  - Support dnspython 2.0.0 or later in samba_dnsupdate


author: Andreas Schneider <asn@redhat.com> - 4.13.0-14
changelog:
  - Fixed dbcheck running in a release tarball
  - Updated internal resolv_wrapper copy to verison 1.1.7


author: Guenther Deschner <gdeschner@redhat.com> - 4.13.1-0
changelog:
  - Update to Samba 4.13.1
  - resolves: #1892631, #1892634 - Security fixes for CVE-2020-14318
  - resolves: #1891685, #1892628 - Security fixes for CVE-2020-14323
  - resolves: #1892636, #1892640 - Security fixes for CVE-2020-14383


author: Alexander Bokovoy <abokovoy@redhat.com> - 4.13.2-2
changelog:
  - rhbz#1892745, rhbz#1900232: smbclient mget crashes (upstream bug 14517)
  - Merge RHEL 8.4 patches:
    - FIPS-related enhancements
    - FreeIPA Global Catalog patches


author: Guenther Deschner <gdeschner@redhat.com> - 4.14.1-0
changelog:
  - Update to Samba 4.14.1
  - resolves: #1941400, #1942496 - Security fixes for CVE-2020-27840
  - resolves: #1941402, #1942497 - Security fixes for CVE-2021-20277


author: Guenther Deschner <gdeschner@redhat.com> - 4.14.2-0
changelog:
  - Update to Samba 4.14.2
  - related: #1941400, #1942496 - Security fixes for CVE-2020-27840
  - related: #1941402, #1942497 - Security fixes for CVE-2021-20277


author: Andreas Schneider <asn@redhat.com> - 4.14.4-1
changelog:
  - resolves: rhbz#1954531 - Update to Samba 4.14.4
  - resolves: rhbz#1949446 - Fix CVE-2021-20254
  - resolves: rhbz#1942378 - Disable nis support


author: Andreas Schneider <asn@redhat.com> - 4.14.4-7
changelog:
  - related: rhbz#1954531 - Fix build issues with gcc
  - resolves: rhbz#1959712 - Add iouring vfs module


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.3-1
changelog:
  - related: rhbz#2013578 - Rebase to Samba 4.15.3
  - resolves: rhbz#2028026 - Fix possible null pointer dereference in winbind
  - resolves: rhbz#2033317 - Winexe: Kerberos Auth is respected via --use-kerberos=desired


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.4-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2039154 - Fix CVE-2021-20316
  - resolves: #2044238 - Failed to authenticate users after upgrade samba package to release samba-4.14.5-7x
  - resolves: #2044239 - [smb] Segmentation fault when joining the domain
  - resolves: #2044241 - filename_convert_internal: open_pathref_fsp [xxx] failed: NT_STATUS_ACCESS_DENIED
  - resolves: #2044255 - Fix CVE-2021-43566


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-100
changelog:
  - related: rhbz#2013578 - Rebase Samba to the the latest 4.15.x release
  - resolves: #2046129 - Fix CVE-2021-44141
  - resolves: #2046154 - Fix CVE-2021-44142
  - resolves: #2044405 - Fix printing no longer works on Windows 7
  - resolves: #2049485 - Fix systemd notifications
  - resolves: #2049604 - Disable NTLMSSP for ldap client connections


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-101
changelog:
  - resolves: #2050111 - [RFE] Change change password change prompt phrasing
  - resolves: #2054110 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-105
changelog:
  - resolves: rhbz#2064765 - Fix 'create krb5 conf = yes` when a KDC has a single
                            IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-108
changelog:
  - resolves: rhbz#2079302 - Fix username map for unix groups
  - resolves: rhbz#2079301 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079305 - Fix UPNs handling in lookup_name*() calls


author: Sahana Prasad <sahana@redhat.com> - 5.57-1
changelog:
  - New upstream release 5.57
  - Fixes #1925229 - client certificate not correctly verified
    when redirect and verifyChain options are used


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 5.58-4
changelog:
  - Stunnel cannot use an encrypted private key being built against OpenSSL 3.0
  - Resolves: rhbz#1976854


author: Clemens Lang <cllang@redhat.com> - 5.62-2
changelog:
  - Fix stunnel in FIPS mode
    Resolves: rhbz#2050617
  - Fail build if tests fail
    Resolves: rhbz#2051083


author: Christopher Engelhard <ce@lcts.de> - 2.1.0-31
changelog:
  - use tarball hosted at new upstream site
  - Fedora's patches have been merged upstream, so use those instead
  - apply various unreleased upstream fixes that deal with compiler warnings


author: Christopher Engelhard <ce@lcts.de> - 2.1.1-1
changelog:
  - Update to 2.1.1
  - Remove all patches merged upstream
  - Switched build to autotools
  - Include upstream pkgconfig module
  - Sysfsutils no longer includes /usr/bin/get_module


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-1
changelog:
  - Rebased to upstream candidate.
  - Resolves: rhbz#1955374
  - Removed all python based tools, and all management should now be done with
    LVM.
  - Resolves: rhbz#1949159
  - vdostats is now a C program
  - Resolves: rhbz#1972302


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-1
changelog:
  - Fixed off-by-one issue in vdostats.
  - Resolves: rhbz#1999056
  - Improved error handling and path validation in vdostats.
  - Resolves: rhbz#2004576


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-1
changelog:
  - Fixed vdostats output issues.
  - Resolves: rhbz#2004576
  - Removed incorrect assumptions about major device numbers in vdostats.
  - Resolves: rhbz#2045885
  - Made improvements to the vdorecover script.
  - Resolves: rhbz#2047543
  - Added a tool to make LVMVDO pools read/write so that support and
    debugging tools may access them.
  - Resolves: rhbz#2047543


author: Michal Židek <mzidek@redhat.com> - 2.2.3-1
changelog:
  - Update to latest released upstream version
  - https://docs.pagure.org/SSSD.sssd/users/relnotes/notes_2_2_3.htm


author: Michal Židek <mzidek@redhat.com> - 2.2.3-2
changelog:
  - Resolves: upstream#4129 - sssctl config-check command does not give proper
                              error messages with line numbers


author: Michal Židek <mzidek@redhat.com> - 2.2.3-3
changelog:
  - Resolves: upstream#4127 - [Doc]Provide explanation on escape character for
                              match rules sss-certmap


author: Michal Židek <mzidek@redhat.com> - 2.2.3-7
changelog:
  - Resolves: upstream#4135 - util/sss_ptr_hash.c: potential double free in
                              `sss_ptr_hash_delete_cb()`


author: Michal Židek <mzidek@redhat.com> - 2.2.3-8
changelog:
  - Resolves: upstream#3630 - Randomize ldap_connection_expire_timeout either
                              by default or w/ a configure option


author: Michal Židek <mzidek@redhat.com> - 2.2.3-11
changelog:
  - Resolves: upstream#4118 - sssd requires timed sudoers ldap entries to be
    specified up to the seconds


author: Michal Židek <mzidek@redhat.com> - 2.2.3-13
changelog:
  - Resolves: upstream#4159 - p11_child should have an option to skip
                              C_WaitForSlotEvent if the PKCS#11 module does not
                              implement it properly


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.4-1
changelog:
  - Update Source to upstream version 0.8.4
    * Previoud patches 0001-0020 & 0031 are included in this commit
  - Rename files
    * Previous patches 0021-0032 are now patches 0012-0022
  - Add 0001-libmultipath-assign-variable-to-make-gcc-happy.patch
  - Add 0002-libmutipath-don-t-close-fd-on-dm_lib_release.patch
  - Add 0003-libmultipath-allow-force-reload-with-no-active-paths.patch
  - Add 0004-libmpathpersist-depend-on-libmultipath.patch
  - Add 0005-multipath-tools-Makefile-more-dependency-fixes-for-p.patch
  - Add 0006-multipath-tools-Makefile.inc-set-Wno-error-clobbered.patch
  - Add 0007-libmultipath-discovery.c-use-z-qualifier-for-size_t.patch
  - Add 0008-libmultipath-eliminate-more-signed-unsigned-comparis.patch
  - Add 0009-libmultipath-set_uint-fix-parsing-for-32bit.patch
  - Add 0010-multipath-tools-Makefile-add-install-dependency.patch
  - Add 0012-libmultipath-fix-condlog-NULL-argument-in-uevent_get.patch
  - Add 0023-RH-work-around-gcc-10-format-truncation-issue.patch
    * The above 10 patches have been submitted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.4-2
changelog:
  - Rebased on top of Martin Wilck's queue of ACKed upstream commits
    * https://github.com/openSUSE/multipath-tools/tree/upstream-queue
    * All previous patches have been reordered, with the exception of
      0011-libdmmp-Add-support-for-upcoming-json-c-0.14.0.patch
      which has been replaced with
      0029-fix-boolean-value-with-json-c-0.14.patch
  - Modify 0054-RH-add-mpathconf.patch
    * remove default enable_foreign and property blacklist_exceptions
      settings, and deal with the builtin default change from
      0031-libmultipath-set-enable_foreign-to-NONE-by-default.patch.
      Fixes bz #1853668
  - Add 0048-Makefile.inc-trim-extra-information-from-systemd-ver.patch
  - Add 0049-kpartx-fix-Wsign-compare-error.patch
    * The above two patches have been submitted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.4-4
changelog:
  - Rebased on top of additional commits staged for upstream
    * Previous patches 0048-0060 are now patches 0053-0054 & 0059-0069
  - Add 0048-libmultipath-add-device-to-hwtable.c.patch
  - Add 0049-master-libmultipath-fix-use-after-free-when-iscsi-lo.patch
  - Add 0050-libmultipath-warn-if-freeing-path-that-holds-mpp-hwe.patch
  - Add 0051-libmultipath-warn-about-NULL-value-of-mpp-hwe.patch
  - Add 0052-libmultipath-fix-mpp-hwe-handling-in-sync_paths.patch
  - Add 0055-libmultipath-remove-code-duplication-in-path-countin.patch
  - Add 0056-libmultipath-count-pending-paths-as-active-on-loads.patch
  - Add 0057-libmultipath-deal-with-flushing-no-maps.patch
  - Add 0058-multipath-deal-with-delegation-failures-correctly.patch
  - Add 0070-multipath-add-libmpathvalid-library.patch
    * adds the libmpathvalid.so library to determine if devices are
      valid multipath paths.
  - Add 0071-libmultipath-add-uid-failback-for-dasd-devices.patch
  - Add 0072-libmultipath-add-ignore_udev_uid-option.patch


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.4-5
changelog:
  - Update CI tests to match RHEL
    * This commit also pulls in changes from Lin Li <lilin@redhat.com>
      and Bruno Goncalves <bgoncalv@redhat.com>


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.4-7
changelog:
  - Add 0073-libmultipath-util-constify-function-arguments.patch
  - Add 0074-libmultipath-constify-file-argument-in-config-parser.patch
  - Add 0075-libmultipath-provide-defaults-for-get-put-_multipath.patch
  - Add 0076-libmpathpersist-allow-using-libmultipath-get-put-_mu.patch
  - Add 0077-multipath-use-get_put-_multipath_config-from-libmult.patch
  - Add 0078-mpathpersist-use-get-put-_multipath_config-from-libm.patch
  - Add 0079-libmultipath-add-udev-and-logsink-symbols.patch
  - Add 0080-multipath-remove-logsink-and-udev.patch
  - Add 0081-libmpathpersist-call-libmultipath_-init-exit.patch
  - Add 0082-mpathpersist-remove-logsink-and-udev.patch
  - Add 0083-multipathd-remove-logsink-and-udev.patch
    * Pull in upsteam library changes
  - Add 0084-libmpathvalid-use-default-_multipath_config-udev-and.patch
  - Add 0085-Revert-libmultipath-add-ignore_udev_uid-option.patch
  - Add 0086-libmultipath-change-log-level-for-null-uid_attribute.patch
  - Add 0087-libmultipath-orphan_paths-avoid-BUG-message.patch
    * update libmpathvalid to use upstream library changes. changes
      submitted upstream


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.5-1
changelog:
  - Update Source to upstream version 0.8.5 plus post tag commits
    * Patches 0001-0102 are from
      https://github.com/openSUSE/multipath-tools/tree/queue and are
      already queued for upstream.
  - Rename files
    * Previous patches 0059-0068 are now patches 0103-0111


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.5-4
changelog:
  - Update Source to upstream version 0.8.5 plus post tag commits
    * Patches 0001-0121 are from
      https://github.com/openSUSE/multipath-tools/tree/queue and are
      already queued for upstream
    * Patches 0122&0123 have been posted for upstream inclusion
  - Rename files
    * Previous patches 0103-0111 are now patches 0124-0132


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-1
changelog:
  - Update Source to upstream version 0.8.6
    * Previous patches 0001-0123 are included in the commit
    * Fixes bz #1951336
  - Rename files
    * Previous patches 0124-0132 are now patches 0001-0009
  - Add 0010-RH-make-parse_vpd_pg83-match-scsi_id-output.patch
    * make scsi wwid fallback code result match the default udev wwid
      code result (Red Hat specific patch)
  - Sync tests with RHEL-8
  - Resolves: bz #1951336


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-3
changelog:
  - Add 0011-multipathd-don-t-fail-to-remove-path-once-the-map-is.patch
  - Add 0012-multipathd-remove-duplicate-orphan_paths-in-flush_ma.patch
  - Add 0013-multipathd-fix-ev_remove_path-return-code-handling.patch
  - Add 0014-multipath-free-vectors-in-configure.patch
  - Add 0015-kpartx-Don-t-leak-memory-when-getblock-returns-NULL.patch
  - Add 0016-multipathd-don-t-rescan_path-on-wwid-change-in-uev_u.patch
    * Above patches Fix bz #1938704
  - Resolves: bz #1938704


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.6-5
changelog:
  - Add 0018-multipath.conf-fix-typo-in-ghost_delay-description.patch
  - Add 0019-mpathpersist-fail-commands-when-no-usable-paths-exis.patch
    * Fixes bz #1982613
  - Add 0020-multipath-print-warning-if-multipathd-is-not-running.patch
    * Fixes bz #1982615
  - Add 0021-libmultipath-deal-with-dynamic-PTHREAD_STACK_MIN.patch
    * Fixes bz #1984921
  - Resolves: bz #1982613, #1982615, #1984921


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Radovan Sroka <rsroka@redhat.com> - 1.8.28-1
changelog:
  - rebase to 1.8.28
  Resolves: rhbz#1761533
  - set always_set_home by default
  Resolves: rhbz#1728687
  - Sync sudoers options from rhel8 to fedora
  Resolves: rhbz#1761781
  - CVE-2019-14287
  Resolves: rhbz#1761584


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-0.1.b1
changelog:
  - update to latest development version 1.9.0b1
  - added sudo_logsrvd and sudo_sendlog to files and their appropriate man pages
  Resolves: rhbz#1787823
  - Stack based buffer overflow in when pwfeedback is enabled
  Resolves: rhbz#1796945
  - fixes: CVE-2019-18634
  - By using ! character in the shadow file instead of a password hash can access to a run as all sudoer account
  Resolves: rhbz#1786709
  - fixes CVE-2019-19234
  - attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user
  Resolves: rhbz#1786705
  - fixes CVE-2019-19232


author: Attila Lakatos <alakatos@redhat.com> - 1.9.0-0.1.b4
changelog:
  - update to latest development version 1.9.0b4
  Resolves: rhbz#1816593
  - setrlimit(RLIMIT_CORE): Operation not permitted warning message fix
  Resolves: rhbz#1773148


author: Radovan Sroka <rsroka@redhat.com> - 1.9.2-1
changelog:
  - rebase to 1.9.2
  Resolves: rhbz#1859577
  - added logsrvd subpackage
  - added openssl-devel buildrequires
  Resolves: rhbz#1860653
  - fixed sudo runstatedir path
  - it was generated as /sudo instead of /run/sudo
  Resolves: rhbz#1868215
  - added /var/lib/snapd/snap/bin to secure_path variable
  Resolves: rhbz#1691996


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Benjamin Berg <bberg@redhat.com> - 1.0.25-1
changelog:
  - Update to 1.0.25
  - Fix a crash after libusb_exit API has been misused
  - Add patchset to fix covscan reports
    Resolves: #1938801


author: Benjamin Berg <bberg@redhat.com> - 1.0.26
changelog:
  - Pull in new upstream libusb containing important regression fixes
    Resolves: #2058730
    Resolves: #1938801


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Bruno Meneguele <bmeneg@redhat.com> - 1.4-1
changelog:
  - Modify some pieces to get closer to Fedora's specfile
  - Remove patch handling memory leak: solved in the rebase
  - Remove patch handling SHA-256 default hash: solved in the rebase
  - Rebase to upstream release v1.4 (rhbz#2026028)


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.264-1
changelog:
  - Rebased to upstream candidate.
  - Related: rhbz#1955374
  - Fixed GCC implicit-fallthrough errors when building for latest kernel
  - Resolves: rhbz#1984814


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-9
changelog:
  - Rebuilt for latest kernel.
  - Related: rhbz#2000926
  - Stopped using bvec_kmap_irq as it has been removed.
  - Removed usage of removed elevator constants
  - Resolves: rhbz#2035003


author: - Andy Walsh <awalsh@redhat.com> - 8.1.0.316-10
changelog:
  - Rebuilt for latest kernel.
  - Related: rhbz#2000926
  - Temporarily disabled creation of sysfs nodes.
  - Related: rhbz#2035003


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-10
changelog:
  - Eliminated uses of "master" as part of the conscious language initiative.
  - Resolves: rhbz#2023970
  - Fixed potential use-after-free error found by Coverity.
  - Resolves: rhbz#1999056
  - Fixed bug which could result in empty flushes being issued to the storage
    below vdo while suspended.
  - Resolves: rhbz#2013057
  - Added optional table line parameters for enabling or disabling
    deduplication and compression.
  - Resolves: rhbz#2007444
  - Adapted to kernel API changes.
  - Resolves: rhbz#2035003


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.287-12
changelog:
  - Adjusted kernel dependencies to grab the right packages.
  - Resolves: rhbz#2022464
  - Rebuilt for latest kernel.
  - Related: rhbz#2000926


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.360-12
changelog:
  - Fixed a compilation issue due to changes in stdarg.h.
  - Resolves: rhbz#2035003
  - Modified the UDS index to handle backing store changes while suspended.
  - Resolves: rhbz#2007803
  - Fixed a bug which prevented the resumption of a suspended read-only vdo.
  - Resolves: rhbz#2004206


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.371-15
changelog:
  - Fixed bugs in the UDS index's handling of backing storage changes.
  - Resolves: rhbz#2007803
  - Resolves: rhbz#2058464


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.1
changelog:
  - Resolves: rhbz#2128902 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict) [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.2
changelog:
  - Resolves: rhbz#2141830 - SSS_CLIENT: fix thread unsafe access to get*ent structs. [rhel-9.1.0.z]
  - Resolves: rhbz#2139870 - Analyzer: Optimize and remove duplicate messages in verbose list [rhel-9.1.0.z]
  - Resolves: rhbz#2142960 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged [rhel-9.1.0.z]
  - Resolves: rhbz#2148988 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around [rhel-9.1.0.z]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4.3
changelog:
  - Resolves: rhbz#2152884 - authenticating against external IdP services okta (native app) with OAuth client secret failed [rhel-9.1.0.z]


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Miro Hrončok <mhroncok@redhat.com> - 5.4.1-6
changelog:
  - Remove some outdated Obsoletes and Provides,
    but keep providing python3-yaml and python3-PyYAML for users
  - Related: rhbz#1990421


author: Yunying Sun <yunying.sun@intel.com> - 3.0.1-1
changelog:
  - Updated to 3.0.1 release
  - Removed ix86 support as so far it supports x86_64 only
  - Updated licenses following upstream


author: Phil Sutter <psutter@redhat.com> - 1.8.7-25
changelog:
  - ebtables: Dump atomic waste
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Use xtables_malloc() in mnl_err_list_node_add()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-29
changelog:
  - libxtables: Boost rule target checks by announcing chain names
  - libxtables: Implement notargets hash table
  - nft: Reject standard targets as chain names when restoring
  - xshared: Merge and share parse_chain()
  - xshared: Prefer xtables_chain_protos lookup over getprotoent
  - nft: Speed up immediate parsing
  - nft: Simplify immediate parsing


author: Miro Hrončok <mhroncok@redhat.com> - 20.3-1
changelog:
  - Update to 20.3
  - Add support for PEP 600: Future manylinux Platform Tags
  - New resolver
  - Fixes: rhbz#1893470


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-4
changelog:
  - Make the python-pip-wheel subpackage versioned (python3-pip-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Tomas Orsava <torsava@redhat.com> - 21.2.3-5
changelog:
  - Conflict with old Python versions that use the old unversioned wheel location
  - Resolves: rhbz#1982668


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Javier Martinez Canillas <javierm@redhat.com> - 2.04-15
changelog:
  - blscfg: Lookup default_kernelopts variable as fallback for options
    Related: rhbz#1765297
  - 10_linux.in: fix early exit due error when reading petitboot version
    Resolves: rhbz#1827397


author: Javier Martinez Canillas <javierm@redhat.com> - 2.04-24
changelog:
  - http: Prepend prefix when the HTTP path is relative as done in efi/http
  - Fix build with rpm-4.16 (thierry.vignaud)


author: Peter Jones <pjones@redhat.com> - 2.04-27
changelog:
  - Attempt to enable dual-signing in f33
  - "Minor" bug fixes.  For f33:
    Resolves: CVE-2020-10713
    Resolves: CVE-2020-14308
    Resolves: CVE-2020-14309
    Resolves: CVE-2020-14310
    Resolves: CVE-2020-14311
    Resolves: CVE-2020-15705
    Resolves: CVE-2020-15706
    Resolves: CVE-2020-15707


author: Javier Martinez Canillas <javierm@redhat.com> - 2.04-33
changelog:
  - Add DNF protected.d fragments for GRUB packages
    Resolves: rhbz#1874541
   - Include keylayouts and at_keyboard modules in EFI builds
   - Add GRUB enhanced debugging features
   - ieee1275: Avoiding many unecessary open/close
   - ieee1275: device mapper and fibre channel discovery support
   - Fix tps-rpmtest failing due /boot/grub2/grubenv attributes mismatch


author: Javier Martinez Canillas <javierm@redhat.com> - 2.04-35
changelog:
  - Remove -fcf-protection compiler flag to allow i386 builds (law)
    Related: rhbz#1915452
  - Unify GRUB configuration file location across all platforms
    Related: rhbz#1918817
  - Add 'at_keyboard_fallback_set' var to force the set manually (rmetrich)
  - Add appended signatures support for ppc64le LPAR Secure Boot (daxtens)


author: Javier Martinez Canillas <javierm@redhat.com> - 2.04-36
changelog:
  - Switch EFI users to new unified config
    Resolves: rhbz#1918817
  - Fix ESC key no longer showing the menu
    Resolves: rhbz#1928595


author: Javier Martinez Canillas <javierm@redhat.com> - 2.06~rc1-1
changelog:
  - Update to 2.06~rc1 to fix a bunch of CVEs
    Resolves: CVE-2020-14372
    Resolves: CVE-2020-25632
    Resolves: CVE-2020-25647
    Resolves: CVE-2020-27749
    Resolves: CVE-2020-27779
    Resolves: CVE-2021-20225
    Resolves: CVE-2021-20233


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Sahana Prasad <sahana@redhat.com> 3.0.0-0.alpha16.1
changelog:
  - Update to alpha 16 version
    Resolves: rhbz#1952901 openssl sends alert after orderly connection close


author: Sahana Prasad <sahana@redhat.com> 3.0.0-0.alpha16.3
changelog:
  - Fix reading SPKAC data from stdin
  - Fix incorrect OSSL_PKEY_PARAM_MAX_SIZE for ed25519 and ed448
  - Return 0 after cleanup in OPENSSL_init_crypto()
  - Cleanup the peer point formats on regotiation
  - Fix default digest to SHA256


author: Sahana Prasad <sahana@redhat.com> 3.0.0-0.alpha16.5
changelog:
  - Fixes system hang issue when booted in FIPS mode (sahana@redhat.com)
  - Temporarily disable downstream FIPS patches
  - Related: rhbz#1977318


author: Sahana Prasad <sahana@redhat.com> 3.0.0-0.alpha16.7
changelog:
  - Fixes override of openssl_conf in openssl.cnf
  - Use AI_ADDRCONFIG only when explicit host name is given
  - Temporarily remove fipsmodule.cnf for arch i686
  - Fixes segmentation fault in BN_lebin2bn
  - Resolves: rhbz#1975847, rhbz#1976845, rhbz#1973477, rhbz#1975855


author: Sahana Prasad <sahana@redhat.com> 3.0.0-0.beta1.3
changelog:
  - Update patch dual-abi.patch to add the #define macros in implementation
    files instead of public header files


author: Sahana Prasad <sahana@redhat.com> - 3.0.0-0.beta2.3
changelog:
  - Fixes core dump in openssl req -modulus
  - Fixes 'openssl req' to not ask for password when non-encrypted private key
    is used
  - cms: Do not try to check binary format on stdin and -rctform fix
  - Resolves: rhbz#1988137, rhbz#1988468, rhbz#1988137


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.0-0.beta2.7
changelog:
  - Removes the dual-abi build as it not required anymore. The mass rebuild
    was completed and all packages are rebuilt against Beta version.
  - Resolves: rhbz#1984097


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.0-2
changelog:
  - Avoid double-free on error seeding the RNG.
  - KTLS and FIPS may interfere, so tests need to be tuned
  - Resolves: rhbz#1952844, rhbz#1961643


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.0-4
changelog:
  - Embed FIPS HMAC in fips.so
  - Enforce loading FIPS provider when FIPS kernel flag is on
  - Related: rhbz#1985362


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.0-7
changelog:
  - Remove algorithms we don't plan to certify from fips module
  - Remove native fipsmodule.cnf
  - Related: rhbz#2026445


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.1-1
changelog:
  - Rebase to upstream version 3.0.1
  - Fixes CVE-2021-4044 Invalid handling of X509_verify_cert() internal errors in libssl
  - Resolves: rhbz#2038910, rhbz#2035148


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-3
changelog:
  - KATS tests should be executed before HMAC verification
  - Restoring fips=yes for SHA1
  - Related: rhbz#2026445, rhbz#2041994


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-8
changelog:
  - Disable SHA1 signature creation and verification by default
  - Set rh-allow-sha1-signatures = yes to re-enable
  - Resolves: rhbz#2031742


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-8
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867
  - pkcs12 export broken in FIPS mode
  - Resolves: rhbz#2049265


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.1-13
changelog:
  - OpenSSL will generate keys with prime192v1 curve if it is provided using explicit parameters
  - Resolves: rhbz#1977867


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-15.1
changelog:
  - Fix invocation of EVP_PKEY_CTX_set_rsa_padding(RSA_PKCS1_PSS_PADDING) before
    setting an allowed digest with EVP_PKEY_CTX_set_signature_md()
  - Resolves: rhbz#2061607


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-19
changelog:
  - Fix TLS connections with SHA1 signatures if rh-allow-sha1-signatures = yes
  - Resolves: rhbz#2063306


author: Clemens Lang <cllang@redhat.com> - 1:3.0.1-20
changelog:
  - Fix acceptance of SHA-1 certificates with rh-allow-sha1-signatures = yes when
    no OpenSSL library context is set
  - Resolves: rhbz#2063306


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Petr Pisar <ppisar@redhat.com> - 37-14
changelog:
  - Fix XML ABI dumps that were generated with a faulty GCC and missed the
    variadic arguments when building without LTO (bug #1863475)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-3
changelog:
  - Limit input size for AES-GCM according to SP800-38D (#2108635)
  - Do not treat GPG verification errors as fatal
  - Remove gnutls-3.7.6-libgnutlsxx-const.patch


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-5
changelog:
  - Block DES-CBC usage in decrypting PKCS#12 bag under FIPS (#2115314)
  - sysrng: reseed source DRBG for prediction resistance


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-6
changelog:
  - Mark RSA SigVer operation approved for known modulus sizes (#2119770)
  - accelerated: clear AVX bits if it cannot be queried through XSAVE


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-12
changelog:
  - fips: mark PBKDF2 with short key and output sizes non-approved
  - fips: only mark HMAC as approved in PBKDF2
  - fips: mark gnutls_key_generate with short key sizes non-approved
  - fips: fix checking on hash algorithm used in ECDSA
  - fips: preserve operation context around FIPS selftests API


author: Lukas Javorsky <ljavorsk@redhat.com> - 2:1.34-4
changelog:
  - added "padding with zeros" info message (#2089298)
  - do not report disk error as file shrank (#2089316)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.12-2
changelog:
  - Fix FIPS POST (#1813384)
  - Fix gnutls-serv --echo to not exit when a message is received (#1816583)


author: Anderson Sasaki <ansasaki@redhat.com> - 3.6.14-2
changelog:
  - Fix memory leak when serializing iovec_t (#1845083)
  - Fix automatic libraries sonames detection (#1845806)


author: Daiki Ueno <dueno@redhat.com> - 3.7.1-1
changelog:
  - Update to upstream 3.7.1 release
  - Remove fipscheck dependency, as it is now calculated with an
    internal tool


author: Daiki Ueno <dueno@redhat.com> - 3.7.2-2
changelog:
  - Remove %defattr invocations which are no longer necessary
  - libpkcs11mock1.* is not installed anymore
  - hobble-gnutls: Remove SRP removal
  - Use correct source URL
  - Switch to using %gpgverify macro


author: Daiki Ueno <dueno@redhat.com> - 3.7.2-4
changelog:
  - Disable GOST cryptography by default (#1945292)
  - Tighten timestamp adjustment when not bootstrapping (#1975482)
  - Re-enable LTO (#1986143)


author: Daiki Ueno <dueno@redhat.com> - 3.7.2-9
changelog:
  - Drop support for GNUTLS_NO_EXPLICIT_INIT envvar in favor of
    GNUTLS_NO_IMPLICIT_INIT (#1999639)
  - Expand documentation of gnutls_{hash,hmac}_copy, mentioning that
    those do not always work (#1999639)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-4
changelog:
  - Specify FIPS140-3 module name and version
  - fips: allow a few more primes in RSA key generation
  - fips: tighten PKCS#12 algorithm checks
  - Correct return value of KTLS stub API


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-7
changelog:
  - Increase GNUTLS_MAX_ALGORITHM_NUM for allowlisting (#2033220)
  - Ensure allowlisting API is called before priority string is constructed (#2042532)
  - Use dlopen for loading libtss2* to avoid OpenSSL dependency (#2057490)


author: Daiki Ueno <dueno@redhat.com> - 3.7.3-9
changelog:
  - Stop using typeof keyword for tss2 function prototypes (#2057490)
  - Ensure allowlist API is called before priority string construction (#1975421)


author: Martin Pitt <mpitt@redhat.com> - 214.1-1
changelog:
  - Updates: Fix unstyled button regression
  - Machines: Fix slow requests when enabling polkit access driver
  - Deprecate cockpit-docker for Fedora, Debian, and Ubuntu development series


author: sanne raymaekers <sanne.raymaekers@gmail.com> - 216-1
changelog:
  - SELinux: Automatic application of solutions that set booleans
  - Machines: Drop virsh backend support
  - Overview: New “last login” banner


author: Martin Pitt <mpitt@redhat.com> - 218-1
changelog:
  - Services: Improved accessibility and mobile support
  - Overview: Add uptime information
  - Disable idle timeout by default
  - Support building without polkit


author: Matej Marusak <mmarusak@redhat.com> - 220-1
changelog:
  - New navigation with integrated switching of hosts
  - Logs: Inline help for filtering
  - Storage: Improve side panel on details page


author: Marius Vollmer <mvollmer@redhat.com> - 221-1
changelog:
  - Support for Cross-Origin-Resource-Policy
  - Accounts: Some buttons are hidden when access is limited
  - Developers: Importing "base1/patternfly.css" is deprecated


author: Martin Pitt <mpitt@redhat.com> - 221.1-1
changelog:
  - Put back missing base1/patternfly.css
  - Services: Don't offer 'Start Service' in Limited Access mode


author: Martin Pitt <mpitt@redhat.com> - 222-1
changelog:
  - Logs: More flexible text filters
  - Services, Dashboard: Hide some buttons when access is limited
  - Webserver: Lock down cockpit.service privileges


author: Katerina Koukiou <kkoukiou@redhat.com> - 223-1
changelog:
  - Webserver: Standard-conformant lifetime of web server Certificate
  - Certificate authentication against Active Directory


author: Matej Marusak <mmarusak@redhat.com> - 225-1
changelog:
  - machines: Add support for VM snapshots
  - developer API: Launch and reattach to a long-running process


author: Katerina Koukiou <kkoukiou@redhat.com> - 228-1
changelog:
  - Accounts: Allow setting weak passwords
  - Changes to remote host logins
  - Machines: Add support for reverting and deleting VM snapshots
  - Drop cockpit-docker code


author: Matej Marusak <mmarusak@redhat.com> - 231-1
changelog:
  - Replace system's graph page with a completely new USE method page
  - Machines: Reimplement the design of the main VMs list
  - Logging of remote IP addresses


author: Marius Vollmer <mvollmer@redhat.com> - 234-1
changelog:
  - machines: Allow editing VM's CPU mode and model
  - machines: Add support for cloning VMs
  - dashboard: So long


author: Matej Marusak <mmarusak@redhat.com> - 237-1
changelog:
  - Restyling updates page in preparation for upcoming features
  - SSH connections to remote machines are only opened when necessary


author: Katerina Koukiou <kkoukiou@redhat.com> - 238-1
changelog:
  - Updates: List outdated software that needs a restart
  - Web server: Preserve permissions of administrator-provided certificates
  - System: Performance page shows busiest CPU cores
  - Machines: VM disk creation supports a custom path


author: Martin Pitt <mpitt@redhat.com> - 238.1-1
changelog:
  - Several UI alignment fixes
  - Updates: Show PackageKit errors properly
  - Re-drop unit tests from built packages
  - Metrics: Don't show swap column when no swap is present
  - Metrics: Don't show duplicate events


author: Martin Pitt <mpitt@redhat.com> - 239-1
changelog:
  - Terminal: Support for changing the font size
  - Machines: Allow editing disk cache mode
  - Logs: Link to related services page
  - SELinux: Restyle to resemble other pages
  - Packaging: Removed ./configure options for distribution specific packages


author: Marius Vollmer <mvollmer@redhat.com> - 240-1
changelog:
  - New localization: Norwegian Bokmål
  - Performance metrics: Journal integration
  - Machines: support authentication against cloud images


author: Martin Pitt <mpitt@redhat.com> - 244.1-1
changelog:
  - storage: use SHA256 for Tang fingerprints
  - testlib: Eliminate dataclass for RHEL/CentOS 8 compatibility


author: Martin Pitt <mpitt@redhat.com> - 245-1
changelog:
  - Metrics: New PCP configuration dialog
  - Storage: Show both SHA256 and SHA1 Tang fingerprints
  - Release: No more cockpit-cache tarball


author: Marius Vollmer <mvollmer@redhat.com> - 246-1
changelog:
  - Improvements to the build system
  - Polish of the Services and Storage pages
  - Updated translations


author: Katerina Koukiou <kkoukiou@redhat.com> - 247-1
changelog:
  - Metrics: Enable Grafana client setup
  - Machines: Share host files with the guest using virtio-fs
  - Machines: Show list of pass-through devices


author: Allison Karlitskaya <allison.karlitskaya@redhat.com> - 248-1
changelog:
  - Metrics: Install missing packages
  - PAM: Deprecate `pam_cockpit_cert` module
  - Build system cleanups


author: Matej Marusak <mmarusak@redhat.com> - 249-1
changelog:
  - storage: Content table improvements
  - common: Add Content-Type for wasm
  - all: Port away from Moment.js


author: Simon Kobyda <skobyda@redhat.com> - 252-1
changelog:
  - Webserver: Drop remotectl utility
  - Shell: Show package version in ‘About web console’ modal
  - Storage: Encryption is presented as a property of a Filesystem


author: Matej Marusak <mmarusak@redhat.com> - 254-1
changelog:
  - Overview: Move last login to Health Card
  - Webserver: Restrict frame embedding to same origin
  - Login: Add Arch Linux branding
  - Users: Add login history


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation: Action required on updates
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Daiki Ueno <dueno@redhat.com> - 2020.2.40-2
changelog:
  - Update to CKBI 2.40 from NSS 3.48
  -    Removing:
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"
  - certdata2pem.py: emit flags for CKA_NSS_{SERVER,EMAIL}_DISTRUST_AFTER


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-2
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "Staat der Nederlanden Root CA - G2"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-6
changelog:
  - remove unnecessarily divisive terms, take 1.
  -   in ca-certificates there are 3 cases:
  -   1) master refering to the fedora master branch in the fetch.sh script.
  -      This can only be changed once fedora changes the master branch name.
  -   2) a reference to the 'master bundle' in this file: this has been changed
  -      to 'primary bundle'.
  -   3) a couple of blacklist directories owned by this package, but used to
  -      p11-kit. New 'blocklist' directories have been created, but p11-kit
  -      needs to be updated before the old blacklist directories can be removed
  -      and the man pages corrected.


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.50-90
changelog:
  -   Update to CKBI 2.50 from NSS 3.67
  -      Removing:
  -       # Certificate "QuoVadis Root CA"
  -       # Certificate "Sonera Class 2 Root CA"
  -       # Certificate "Trustis FPS Root CA"
  -      Adding:
  -       # Certificate "GLOBALTRUST 2020"
  -       # Certificate "ANF Secure Server Root CA"
  -       # Certificate "Certum EC-384 CA"
  -       # Certificate "Certum Trusted Root CA"


author: Tomas Orsava <torsava@redhat.com> - 3.9.9-2
changelog:
  - Read pre-packaged Python wheels from a newly versioned directory
    /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.10-3
changelog:
  - Security fix for CVE-2020-10735
  - Fix the test suite support for Expat >= 2.4.5
  Resolves: rhbz#1834423


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Lukas Nykryn <lnykryn@redhat.com> - 055-6.git20210709
changelog:
  - fix(network-manager): don't pull in systemd-udev-settle
  - fix(dracut.sh): handle '-i' option to include files beginning with '.'
  - fix(dracut.sh): handle symlinks appropriately while using '-i' option
  - fix(squash): create relative symlinks
  - feat(squash): install umount util


author: Lukas Nykryn <lnykryn@redhat.com> - 055-9.git20210812
changelog:
  - fix(kernel-modules): add blk_mq_alloc_disk and
  - fix(network-manager): check for nm-initrd-generator in both
  - fix(cms): reload NetworkManager connections


author: Pavel Valena <pvalena@redhat.com> - 055-30.git20220216
changelog:
  - fix(shutdown): be robust against forced shutdown
  - 95resume: only exclude this module, when swap is netdev
  - fix(qeth_rules): check the existence of
  - fix(fips): handle s390x OSTree systems
  - fix(network): add errors and warnings when network interface
  - fix(url-lib): make pre-pivot hook separetely per
  - fix(dracut-shutdown): add cleanup handler on failure
  - fix(multipath): get config. dir from configuration
  - Do not use recommends for base packages
  - 95nfs: set correct ownership and permissions for statd


author: Pavel Valena <pvalena@redhat.com> - 055-38.git20220322
changelog:
  - revert(lvm): remove snapshot feature
  - revert(lvm): remove lvmetad config changes
  - revert(lvm): remove 69-dm-lvm-metad.rules
  - fix(lvm): replace --partial option
  - feat(lvm): update lvm command options
  - feat(lvm): use generated filter when none is set
  - feat(lvm): only run lvchange for LV that is seen on devices
  - fix(lvm): restore setting LVM_MD_PV_ACTIVATED


author: Pavel Valena <pvalena@redhat.com> - 055-40.git20220404
changelog:
  - fix(kernel-modules): detect block device's hardware driver
  - fix(dracut-initramfs-restore.sh): check if SELINUXTYPE is set


author: Pavel Valena <pvalena@redhat.com> - 055-45.git20220404
changelog:
  - fix(bluetooth): nullglob should not be needed
  - fix(dracut-install): do not fail when SOURCE is optional and
  - fix(test): nullglob should not be needed
  - fix(10i18n): stop leaking shell options
  - docs: do not mention nullglob in cases where it's not needed


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-1 + 0.10.4-4
changelog:
  - New upstream release
  - Switch to SFTP protocol in scp utility by default
  - Enable SCP protocol kill switch
    Related: rhbz#2001002


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-7
changelog:
  - Switch to SFTP protocol in scp utility by default - upstream fixes
    Related: rhbz#2001002
  - Workaround for RHEL 8 incompatibility in scp utility in SFTP mode
    Related: rhbz#2038854


author: Patrick Talbert <ptalbert@redhat.com> - 20220509-126
changelog:
  - Update to upstream 20220509 release (rhbz 2081548, 2081550, 2068137).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - mediatek: Update mt8183 SCP firmware
  - ice: Update package to 1.3.28.0
  - i915: Add DMC v2.06 for DG2
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  - amdgpu: update psp_13_0_8 firmware
  - amdgpu: update gc_10_3_7_rlc firmware
  - amdgpu: update dcn_3_1_6_dmcub firmware
  - ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  - qcom: add firmware files for Adreno a420 & related generations
  - qcom: add firmware files for Adreno a330
  - qcom: add firmware files for Adreno a220
  - i915: Add GuC v70.1.2 for DG2
  - rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  - Mellanox: Add lc_ini_bundle for xx.2010.1006
  - Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: add board-2.bin
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  - ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  - ath11k: WCN6750 hw1.0: add board-2.bin
  - ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  - ath11k: QCN9074 hw1.0: add board-2.bin
  - ath11k: QCA6390 hw2.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  - amdgpu: update yellow carp DMCUB firmware
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - mediatek: Add mt8195 SCP firmware
  - qcom: apq8096: add modem firmware
  - qcom: apq8096: add aDSP firmware
  - rtl_bt: Add firmware and config files for RTL8852C
  - mediatek: Add mt8192 SCP firmware
  - linux-firmware: Update AMD cpu microcode
  - nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  - brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update navi14 VCN firmware
  - amdgpu: update navi12 VCN firmware
  - amdgpu: update navi10 VCN firmware
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add GuC v70.1.1 for all platforms
  - rtw88: 8821c: Update normal firmware to v24.11.00
  - ice: Add wireless edge file for Intel E800 series driver
  - ice: update ice DDP comms package to 1.3.31.0
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - rtl_bt: Add firmware and config files for RTL8852B
  - iwlwifi: add new FWs from core68-60 release
  - ath11k: add links for WCN6855 hw2.1
  - ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  - ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  - ath10k/ath11k: mark notice.txt as "File:"
  - linux-firmware: add firmware for MT7986
  - amdgpu: add firmware for SDMA 5.2.7 IP block
  - amdgpu: add firmware for PSP 13.0.8 IP block
  - amdgpu: add firmware for DCN 3.1.6 IP block
  - amdgpu: add firmware for GC 10.3.7 IP block
  - rtw89: 8852a: update fw to v0.13.36.0
  - iwlwifi: update 9000-family firmwares to core68-60
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update picasso VCN firmware
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - linux-firmware: Update AMD SEV firmware
  - rtw89: 8852a: update fw to v0.13.35.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  - wfx: update to firmware 3.14
  - wfx: add antenna configuration files
  - wfx: rename silabs/ into wfx/
  - linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  - linux-firmware: Update firmware patch for Intel Bluetooth 8260
  - linux-firmware: Update firmware file for Intel Bluetooth 8265
  - linux-firmware: Intel BT 7265: Fix Security Issues
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  - rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  - rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  - amdgpu: Update yellow carp firmware from 21.50
  - amdgpu: Update vega20 firmware from 21.50
  - amdgpu: Update vega12 firmware from 21.50
  - amdgpu: Update vega10 firmware from 21.50
  - amdgpu: Update vangogh firmware from 21.50
  - amdgpu: Update renoir firmware from 21.50
  - amdgpu: Update raven2 firmware from 21.50
  - amdgpu: Update raven firmware from 21.50
  - amdgpu: Update picasso firmware from 21.50
  - amdgpu: Update beige goby firmware from 21.50
  - amdgpu: Update dimgrey cavefish firmware from 21.50
  - amdgpu: Update navy flounder firmware from 21.50
  - amdgpu: Update sienna cichlid firmware from 21.50
  - amdgpu: Update navi14 firmware from 21.50
  - amdgpu: Update navi12 firmware from 21.50
  - amdgpu: Update navi10 firmware from 21.50
  - amdgpu: Update cyan skillfish2 firmware from 21.50
  - amdgpu: Update green sardine firmware from 21.50
  - amdgpu: Update arcturus firmware from 21.50
  - amdgpu: Add aldebaran firmware from 21.50
  - LICENSE.amdgpu: update copyright date
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: update firmware for MT7921 WiFi device


author: Patrick Talbert <ptalbert@redhat.com> - 20220708-127
changelog:
  - Update compressed firmware support patch for upstream changes
  - Update to upstream 20220708 release (rhbz 2040281, 2045911, 2105392).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Correct WHENCE entry for wfx firmware
  - bnx2: Drop unsupported Broadcom NetXtremeII firmware
  - bnx2: drop unsupported firmwares
  - bnx2: sort firmware names in filesystem order
  - Remove old Broadcom Everest (bnx2x) v4/5 firmware
  - drop Token Ring network firmwares
  - Drop TDA7706 radio firmware
  - Drop Intel WiMax firmware
  - Drop Computone IntelliPort Plus serial firmware
  - Drop ATM Ambassador devices firmware
  - brocade: drop old unsupported firmware revs
  - amdgpu: update yellow carp DMCUB firmware
  - linux-firmware: update firmware for MT7622 WiFi device
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - mediatek: Add SCP firmware for MT8186
  - rtw88: 8822c: Update normal firmware to v9.9.13
  - rtw88: 8822c: Update normal firmware to v9.9.12
  - amdgpu: update Yellow Carp VCN firmware
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - qed: update 8.59.1.0 firmware
  - Link some devices that ship with the AW-CM256SM
  - Add initial AzureWave AW-CM256SM NVRAM file
  - Remove the Pine64 Quartz copy of the RPi NVRAM
  - qca: Update firmware files for BT chip WCN6750.
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00409
  - WHENCE: add symlinks for StarFive based boards
  - linux-firmware: wilc1000: update WILC1000 firmware to v15.6
  - brcm: Add NVRAM file 43455 based Wifi/BT module as used on the Quartz64 Model B from Pine64. This file is based on the existing "brcm/brcmfmac43455-sdio.raspberrypi,4-model-b.txt" NVRAM file.
  - iwlwifi: add new FWs from core70-87 release
  - iwlwifi: update 9000-family firmwares to core70-87
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFB8_0634
  - Makefile: replace mkdir by install
  - iwlwifi: remove old unsupported 3160/7260/7265/8000/8265 firmware
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.9
  - WHENCE: ath11k: move regdb.bin before board-2.bin
  - ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00157
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00157
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: add board-2.bin
  - amdgpu: update beige goby firmware for 22.10
  - amdgpu: update renoir firmware for 22.10
  - amdgpu: update dimgrey cavefish firmware for 22.10
  - amdgpu: update vega20 firmware for 22.10
  - amdgpu: update yellow carp firmware for 22.10
  - amdgpu: update vega12 firmware for 22.10
  - amdgpu: update navy flounder firmware for 22.10
  - amdgpu: update vega10 firmware for 22.10
  - amdgpu: update raven2 firmware for 22.10
  - amdgpu: update raven firmware for 22.10
  - amdgpu: update sienna cichlid firmware for 22.10
  - amdgpu: update green sardine firmware for 22.10
  - amdgpu: update PCO firmware for 22.10
  - amdgpu: update vangogh firmware for 22.10
  - amdgpu: update navi14 firmware for 22.10
  - amdgpu: update navi12 firmware for 22.10
  - amdgpu: update navi10 firmware for 22.10
  - amdgpu: update aldebaran firmware for 22.10
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - mediatek: Update mt8192 SCP firmware


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Robert Scheck <robert@fedoraproject.org> - 2:0.94-1
changelog:
  - Rebase to 0.94 (#1742473, #1840079)
  - Drop policykit wrapper for xmtr due to libcap (#1488417, #1488418)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.0-2
changelog:
  - Don't move binaries to /bin, shouldn't be needed after UsrMove
  - Move kbd data (console fonts, keymaps, ...) to /usr
    Resolves: #1809257


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.3.0-1
changelog:
  - Make changes in converted layouts conditionally
  - Use make macros, patch by Tom Stellard <tstellar@redhat.com>
    (https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro)
  - Update to kbd-2.3.0
    Resolves: #1855867


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: John Kacur <jkacur@redhat.com> - 0.6.3-5
changelog:
  - various clean-ups including using 'with' context managers in try-except
  - Fix to ignore UnicodeDecodeError when it occurs
  Resolves: rhbz#2031717


author: Jan Macku <jamacku@redhat.com> - 0.95-1
changelog:
  - clean up spec based on RHEL 8.4.0 spec
  - remove -Werror=format-truncation=1 from configure
  - update to 0.95 (#1880599)


author: Tom Stellard <tstellar@redhat.com> - 2.4.47-5
changelog:
  - Spec file cleanups
  - Add BuildRequres: gcc [1]
  - make_build [2] and make_install [3]
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Simon Pichugin <spichugi@redhat.com> - 2.4.57-4
changelog:
  - Backport Channel Binding support. Related: rhbz#1967853
  - Fix coverity issues. Related: rhbz#1938829


author: John Eckersberg <jeckersb@redhat.com> - 0.2.5-4
changelog:
  - Add BuildRequires for make
    (re: https://fedoraproject.org/wiki/Changes/Remove_make_from_BuildRoot)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-22
changelog:
  - Avoid spirous message on connecting to the machine with ssh-rsa keys
    Related: rhbz#2115246
  - Set minimal value of RSA key length via configuration option
    Related: rhbz#2066882


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-24
changelog:
  - Set minimal value of RSA key length via configuration option - support both names
    Resolves: rhbz#2128352


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Nicola Sella <nsella@redhat.com> - 4.0.19-1
changelog:
  - Update to 4.0.19
  - copr: allow only 2 arguments with copr enable command
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - Add --gpgcheck option to reposync (RhBug:1856818) (RhBug:1856818)
  - Re-introduce yum-groups-manager functionality (RhBug:1826016)
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] add -s to list services (RhBug:1772939) (RhBug:1772939)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Add missing command line option to documentation
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-1
changelog:
  - Update to 4.0.24
  - [repomanage] Allow running only with metadata
  - [repomanage] Enhance documentation (RhBug:1898293)
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280)
  - [versionlock] Work correctly with packages with minorbump part of release (RhBug:1961217)
  - [leaves] Show strongly connected components
  - [needs-restarting] Fix wrong boot time (RhBug:1960437)
  - [playground] Disable playground command, since it doesn't work
  - [copr] on CentOS Stream, enable centos stream chroot instead of not epel 8 (RhBug:1994154)
  - [copr] Avoid using deprecated function distro.linux_distribution() (RhBug:2011550)
  - [copr] don't traceback on empty lines in /etc/os-release


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.24-2
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2029864)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2029871)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.1.0-1
changelog:
  - Add a new subpackage with modulesync command. The command downloads packages from modules and/or creates a repository with modular data. (RhBug:1868047)
  - [repoclosure] Print counts of missing dependencies
  - [reposync] Do not stop downloading packages on the first error (RhBug:2009894)


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Kamil Dudka <kdudka@redhat.com> - 7.71.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2020-8169 - curl: Partial password leak over DNS on HTTP redirect
      CVE-2020-8177 - curl: overwrite local file with -J


author: Vladis Dronov <vdronov@redhat.com> - 6.12-1
changelog:
  - Update to 6.12
  - Drop libsysfs dependency since it is not used anymore
  - Remove jitterentropy-remove-install.patch since we depend on
    a system jitterentropy library now
  - Remove rngd-shutdown.patch since it is the upstream commit 62fbff0a
  - Remove rngd-exit-code-for-list.patch since it is the upstream commit
    fb46dc48
  - Remove pkcs11-path.patch since it is the upstream commit 1993eca9


author: Vladis Dronov <vdronov@redhat.com> - 6.14-4.git.b2b7934e
changelog:
  - Fix udevadm issues on systems lacking it (bz 2057030)
  - Fix a missing working directory issue (bz 2053160)
  - Add some upstream patches
  - Fix tests


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 245.6-1
changelog:
  - Update to latest stable version (some documentation updates, minor
    memory correctness issues) (#1815605, #1827467, #1842067)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246~rc1-1
changelog:
  - New upstream release, see
    https://raw.githubusercontent.com/systemd/systemd/v246-rc1/NEWS.

    This release includes many new unit settings, related inter alia to
    cgroupsv2 freezer support and cpu affinity, encryption and verification.
    systemd-networkd has a ton of new functionality and many other tools gained
    smaller enhancements. systemd-homed gained FIDO2 support.

    Documentation has been significantly improved: sd-bus and sd-hwdb
    libraries are now fully documented; man pages have been added for
    the D-BUS APIs of systemd daemons and various new interfaces.

    Closes #1392925, #1790972, #1197886, #1525593.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246~rc2-1
changelog:
  - New pre-release with incremental fixes
    (#1856037, #1858845, #1856122, #1857783)
  - Enable systemd-resolved (with DNSSEC disabled by default, and LLMNR
    and mDNS support in resolve-only mode by default).
    See https://fedoraproject.org/wiki/Changes/systemd-resolved.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246~rc2-2
changelog:
  - Make /tmp be 50% of RAM again (#1856514)
  - Re-run 'systemctl preset systemd-resolved' on upgrades.
    /etc/resolv.conf is not modified, by a hint is emitted if it is
    managed by NetworkManager.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246.1-1
changelog:
  - A few minor bugfixes
  - Remove /etc/resolv.conf on upgrades (if managed by NetworkManager), so
    that systemd-resolved can take over the management of the symlink.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246.2-1
changelog:
  - A few minor bugfixes
  - Adjust seccomp filter for kernel 5.8 and glibc 2.32 (#1869030)
  - Create /etc/resolv.conf symlink on upgrade (#1867865)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246.3-1
changelog:
  - Update to bugfix version (some networkd fixes, minor documentation
    fixes, relax handling of various error conditions, other fixlets for
    bugs without bugzilla numbers).


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246.4-1
changelog:
  - Update to latest stable version: a rework of how the unit cache mtime works
    (hopefully #1872068, #1871327, #1867930), plus various fixes to
    systemd-resolved, systemd-dissect, systemd-analyze, systemd-ask-password-agent,
    systemd-networkd, systemd-homed, systemd-machine-id-setup, presets for
    instantiated units, documentation and shell completions.
  - Create /etc/resolv.conf symlink upon installation (#1873856)
  - Move nss-mdns before nss-resolve in /etc/nsswitch.conf and disable
    mdns by default in systemd-resolved (#1867830)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246.5-1
changelog:
  - Update to latest stable release (a bunch of small network-related
    fixes in systemd-networkd and socket handling, documentation updates,
    a bunch of fixes for error handling).
  - Also remove existing file when creating /etc/resolv.conf symlink
    upon installation (#1873856 again)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 246.6-1
changelog:
  - Update to latest stable release (various minor fixes: manager,
    networking, bootct, kernel-install, systemd-dissect, systemd-homed,
    fstab-generator, documentation) (#1876905)
  - Do not fail in test because of kernel bug (#1803070)


author: Filipe Brandenburger <filbranden@gmail.com> - 246.6-2
changelog:
  - Build a package with standalone binaries for non-systemd systems.
    For now, only systemd-sysusers is included.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 247~rc2
changelog:
  - New upstream pre-release. See
    https://github.com/systemd/systemd/blob/v247-rc1/NEWS.
    Many smaller and bigger improvements and features are introduced.
    (#1885101, #1890632, #1879216)

    A backwards-incompatible change affects PCI network devices which
    are connected through a bridge which is itself associated with a
    slot. When more than one device was associated with the same slot,
    one of the devices would pseudo-randomly get named after the slot.
    That name is now not generated at all. This changed behaviour is
    causes the net naming scheme to be changed to "v247". To restore
    previous behaviour, specify net.naming-scheme=v245.

    systemd-oomd is built, but should not be considered "production
    ready" at this point. Testing and bug reports are welcome.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 247.1-1
changelog:
  - Latest stable release
  - Fixes #1902819.
  - Files to configure networking with systemd-networkd in a VM or container are
    moved to systemd-networkd subpackage. (They were previously in the -container
    subpackage, which is for container/VM management.)


author: Bastien Nocera <bnocera@redhat.com> - 247.1-2
changelog:
  - Unset fallback-hostname as plenty of applications expected localhost
    to mean "default hostname" without ever standardising it (#1892235)


author: Jonathan Underwood <jonathan.underwood@gmail.com> - 247.2-2
changelog:
  - Add patch to enable crypttab to support disabling of luks read and
    write workqueues (corresponding to
    https://github.com/systemd/systemd/pull/18062/).


author: Anita Zhang <the.anitazha@gmail.com> - 247.3-2
changelog:
  - Changes for https://fedoraproject.org/wiki/Changes/EnableSystemdOomd.
  - Backports consist primarily of PR #18361, #18444, and #18401 (plus some
    additional ones to handle merge conflicts).
  - Create systemd-oomd-defaults subpackage to install unit drop-ins that will
    configure systemd-oomd to monitor and act.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc1-1
changelog:
  - Latest upstream prerelease, see
    https://github.com/systemd/systemd/blob/v248-rc1/NEWS.
  - Fixes #1614751 by only restarting services at the end of transcation.
    Various packages need to be rebuilt to have the updated macros.
  - Fixes #1879028, though probably not completely.
  - Fixes #1925805, #1928235.


author: Yu Watanabe <yuwatana@redhat.com> - 248~rc4-1
changelog:
  - Latest upstream prelease, see
    https://github.com/systemd/systemd/blob/v248-rc4/NEWS.
  - A bunch of documentation updates, correctness fixes, and systemd-networkd
    features.
  - Resolves #1933137, #1935084, #1933873, #1931181, #1933335, #1935062, #1927148.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc4-3
changelog:
  - Fix hang when processing timers during DST switch in Europe/Dublin timezone (#1941335)
  - Fix returning combined IPv4/IPv6 responses from systemd-resolved cache (#1940715)
    (But note that the disablement of caching added previously is
    retained until we can do more testing.)
  - Minor fix to interface naming by udev
  - Fix for systemd-repart --size


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc4-4
changelog:
  - Revert patch that seems to cause problems with dns resolution
    (see comments on https://bodhi.fedoraproject.org/updates/FEDORA-2021-1c1a870ceb)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248~rc4-5
changelog:
  - Do not preset systemd-networkd.service and systemd-networkd-wait-online.service
    on upgrades from before systemd-networkd was split out (#1943263)
  - In nsswitch.conf, move nss-myhostname to the front, before nss-mdns4 (#1943199)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 248-1
changelog:
  - Latest upstream release, see
    https://github.com/systemd/systemd/blob/v248/NEWS.
  - The changes since -rc4 are rather small, various fixes all over the place.
    A fix to how systemd-oomd selects a candidate to kill, and more debug logging
    to make this more transparent.


author: systemd maintenance team <systemd-maint@redhat.com> - 248-3
changelog:
  - rfkill: don't compare values of different signedness (#1931710)
  - rfkill: fix the format string to prevent compilation error (#1931710)


author: systemd maintenance team <systemd-maint@redhat.com> - 248-5
changelog:
  - Revert "rfkill: fix the format string to prevent compilation error" (#1931710)
  - Revert "rfkill: don't compare values of different signedness" (#1931710)
  - rfkill: add some casts to silence -Werror=sign-compare (#1931710)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-2
changelog:
  - basic/unit-name: do not use strdupa() on a path (#1984299)
  - basic/unit-name: adjust comments (#1984299)
  - tmpfiles: don't create resolv.conf -> stub-resolv.conf symlink (#1989472)
  - Copy 40-redhat.rules from RHEL-8 (#1978639)
  - Avoid /tmp being mounted as tmpfs without the user's will (#1959826)
  - unit: don't add Requires for tmp.mount (#1619292)
  - units: add [Install] section to tmp.mount (#1959826)
  - rc-local: order after network-online.target (#1954429)
  - ci: drop CIs irrelevant for downstream (#1960703)
  - ci: reconfigure Packit for RHEL 9 (#1960703)
  - ci: run unit tests on z-stream branches as well (#1960703)
  - Check return value of pam_get_item/pam_get_data functions (#1973210)
  - random-util: increase random seed size to 1024 (#1982603)
  - journal: don't enable systemd-journald-audit.socket by default (#1973856)
  - journald.conf: don't touch current audit settings (#1973856)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-8
changelog:
  - Really don't enable systemd-journald-audit.socket (#1973856)
  - rules: add elevator= kernel command line parameter (#2003002)
  - boot: don't build bootctl when -Dgnu-efi=false is set (#2003130)
  - unit: install the systemd-bless-boot.service only if we have gnu-efi (#2003130)
  - units: don't enable tmp.mount statically in local-fs.target (#2000927)
  - pid1: bump DefaultTasksMax to 80% of the kernel pid.max value (#2003031)
  - sd-device: introduce device_has_devlink() (#2005024)
  - udev-node: split out permission handling from udev_node_add() (#2005024)
  - udev-node: stack directory must exist when adding device node symlink (#2005024)
  - udev-node: save information about device node and priority in symlink (#2005024)
  - udev-node: always update timestamp of stack directory (#2005024)
  - udev-node: assume no new claim to a symlink if /run/udev/links is not updated (#2005024)
  - udev-node: always atomically create symlink to device node (#2005024)
  - udev-node: check stack directory change even if devlink is removed (#2005024)
  - udev-node: shorten code a bit and update log message (#2005024)
  - udev-node: add random delay on conflict in updating device node symlink (#2005024)
  - udev-node: drop redundant trial of devlink creation (#2005024)
  - udev-node: simplify the example of race (#2005024)
  - udev-node: do not ignore unexpected errors on removing symlink in stack directory (#2005024)
  - basic/time-util: introduce FORMAT_TIMESPAN (#2005024)
  - udev/net-setup-link: change the default MACAddressPolicy to "none" (#2009237)
  - set core ulimit to 0 like on RHEL-7 (#1998509)


author: systemd maintenance team <systemd-maint@redhat.com> - 249-9
changelog:
  - test: don't install test-network-generator-conversion.sh w/o networkd (#2017035)
  - meson.build: change operator combining bools from + to and (#2017035)
  - openssl-util: use EVP API to get RSA bits (#2016042)
  - procfs-util: fix confusion wrt. quantity limit and maximum value (#2017035)
  - test-process-util: also add EROFS to the list of "good" errors (#2017035)
  - ci: use C9S chroots in Packit (#2017035)
  - test-mountpointutil-util: do not assert in test_mnt_id() (#2017035)
  - core/mount: add implicit unit dependencies even if when mount unit is generated from /proc/self/mountinfo (#2019468)
  - Drop Patch9001 - https://github.com/systemd/systemd/pull/17050 - Replaced by Patch0046


author: systemd maintenance team <systemd-maint@redhat.com> - 250-5
changelog:
  - Revert "kernel-install: also remove modules.builtin.alias.bin" (#2065061)
  - Revert "kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT" (#2065061)
  - kernel-install: 50-depmod: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: port to /bin/sh (#2065061)
  - kernel-install: fix shellcheck (#2065061)
  - kernel-install: port to /bin/sh (#2065061)
  - kernel-install: 90-loaderentry: error out on nonexistent initrds instead of swallowing them quietly (#2065061)
  - kernel-install: don't pull out KERNEL_IMAGE (#2065061)
  - kernel-install: prefer /boot over /boot/efi for $BOOT_ROOT (#2065061)
  - kernel-install: also remove modules.builtin.alias.bin (#2065061)
  - kernel-install: add new variable $KERNEL_INSTALL_INITRD_GENERATOR (#2065061)
  - kernel-install: k-i already creates $ENTRY_DIR_ABS, no need to do it again (#2065061)
  - kernel-install: prefix errors with "Error:", exit immediately (#2065061)
  - kernel-install: add "$KERNEL_INSTALL_STAGING_AREA" directory (#2065061)
  - kernel-install: add missing log line (#2065061)
  - kernel-install: don't try to persist used machine ID locally (#2065061)
  - kernel-install: add a new $ENTRY_TOKEN variable for naming boot entries (#2065061)
  - kernel-install: only generate systemd.boot_id= in kernel command line if used for naming the boot loader spec files/dirs (#2065061)
  - kernel-install: search harder for kernel image/initrd drop-in dir (#2065061)
  - kernel-install: add new "inspect" verb, showing paths and parameters we discovered (#2065061)
  - bus: Use OrderedSet for introspection (#2066325)


author: Brian C. Lane <bcl@redhat.com> - 3.3-1
changelog:
  - New upstream release v3.3
    Includes the DASD virtio-blk fix.
  - Dropping pre-3.2 changelog entries


author: Brian C. Lane <bcl@redhat.com> - 3.3-2
changelog:
  - tests: Test incomplete resizepart command
  - Fix end_input usage in do_resizepart
    Resolves: rhbz#1701411


author: Brian C. Lane <bcl@redhat.com> - 3.3-3
changelog:
  - Add chromeos_kernel partition flag for gpt disklabels
  - Add bls_boot partition flag for msdos and gpt disklabels


author: Tom Stellard <tstellar@redhat.com> - 3.3-4
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Switch to using %autosetup instead of %setup and git (bcl)
  - Update tests.yml to install git and simplify source usage (bgoncalv)


author: Brian C. Lane <bcl@redhat.com> - 3.3-6
changelog:
  - tests: Add a test for resizepart on a busy partition (bcl)
  - parted: Preserve resizepart End when prompted for busy partition (bcl)
  - tests: Add f2fs to the fs probe test (romain.perier)
  - Add support for the F2FS filesystem (romain.perier)
  - Removed reference to ped_file_system_create (max)


author: Brian C. Lane <bcl@redhat.com> - 3.4-4
changelog:
  - Fix issues that covscan classifies as important
    Resolves: rhbz#1938836
  - Work around a mkswap bug


author: Pavel Cahyna <pcahyna@redhat.com> - 4.0.26-4
changelog:
  - Add dependency on glibc-gconv-extra
    mtools need codepage 850, which was split from glibc into a subpackage.
    (Fedora bug #2021637, RHEL bug #2073843)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-5
changelog:
  - Allow signature verification with smaller RSA keys (#2083846)
  - Allow short salt for KDF (#2114870)
  - Reseed the kernel DRBG by using GRND_RANDOM (#2118695)
  - Address FIPS review comments around selftests (#2118695)
  - Disable RSA-OAEP in FIPS mode (#2118695)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-6
changelog:
  - Fix SHA3 digests with large inputs (#2129150)
  - Fix FIPS RSA PCT (#2128455)
  - Fix RSA FIPS Keygen that non-deterministically fails (#2130275)
  - Get max 32B from getrandom in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-7
changelog:
  - Properly enforce KDF limits in FIPS mode (#2130275)
  - Fix memory leak in large digest test (#2129150)
  - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275)
  - Skip RSA encryption/decryption selftest in FIPS mode (#2130275)


author: Jakub Jelen <jjelen@redhat.com> - 1.10.0-8
changelog:
  - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode
  - Enforce HMAC key lengths in MD API in FIPS mode


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:8.2.2637-16.3
changelog:
  - CVE-2022-1785 vim: Out-of-bounds Write
  - CVE-2022-1897 vim: out-of-bounds write in vim_regsub_both() in regexp.c
  - CVE-2022-1927 vim: buffer over-read in utf_ptr2char() in mbyte.c


author: Pavel Valena <pvalena@redhat.com> - 057-10.git20220721
changelog:
  - fix(dracut.sh): do not fail on irregular files
  - fix(98dracut-systemd): partly revert "emergency mode: use


author: Pavel Valena <pvalena@redhat.com> - 057-13.git20220816
changelog:
  - fix(kernel-modules): always include nvmem driver on
  - fix(drm): add video drivers needed on hyper-v and similar
  - fix(skipcpio): ignore broken pipe


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-5
changelog:
  - sysctl: backport support of systemd glob patterns (and related bz 2116977)
  - Resolves: rhbz#2121090


author: Kalev Lember <klember@redhat.com> - 1.23.90.1-2
changelog:
  - Revert inadvertent soname bump
  - Tighten spec file globs to avoid accidental soname bumps in the future


author: Pavel Raiskup <praiskup@redhat.com> - 1.6-1
changelog:
  - new upstream release
  - drop WITH_SELINUX knob and selinux patches, there's built-in support now
  - drop several patches which were incorporated upstream, except for
    changewarnSegv patch (did not apply, and not needed nowadays)


author: Than Ngo <than@redhat.com> - 3.15.1-2
changelog:
  - Fix compiling with c++
  - Added error message handling for p11sak remove-key command
  - Add BR on make


author: Than Ngo <than@redhat.com> - 3.16.0-3
changelog:
  - Resolves: #1959894, Soft token does not check if an EC key is valid
  - Resolves: #1924120, Event Notification Support


author: Than Ngo <than@redhat.com> - 3.16.0-10
changelog:
  - Resolves: #1987186, pkcstok_migrate leaves options with multiple strings in opencryptoki.conf options without double-quotes


author: Eric Garver <egarver@redhat.com> - 1.0.0-0.3.alpha
changelog:
  - remove dead symlink (firewalld.conf) left over from old package versions
    before installing new file


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Pavel Moravec <pmoravec@redhat.com> - 4.1-4
changelog:
  - [archive] skip copying SELinux context for /proc and /sys everytime
    Resolves: bz1965002
  - Load maps from all archives before obfuscation
    Resolves: bz1967110
  - Multiple fixes in man pages
    Resolves: bz1967111
  - [ds] Mask password and encryption keys in ldif files
    Resolves: bz1967112
  - [report] add --cmd-timeout option
    Resolves: bz1967113
  - [cups] Add gathering cups-browsed logs
    Resolves: bz1967114
  - [sssd] Collect memory cache / individual logfiles
    Resolves: bz1967115
  - Collect ibmvNIC dynamic_debugs
    Resolves: bz1967116
  - [pulpcore] add plugin for pulp-3
    Resolves: bz1967117
  - [saphana] remove redundant unused argument of get_inst_info
    Resolves: bz1967118
  - [networking] Add nstat command support
    Resolves: bz1967119
  - [snapper] add a new plugin
    Resolves: bz1967120


author: Pavel Moravec <pmoravec@redhat.com> - 4.1-6
changelog:
  - [networking] collect also tc filter show ingress
    Resolves: bz1985976
  - [cleaner] Only skip packaging-based files for the IP parser
    Resolves: bz1985982
  - [sssd] sssd plugin when sssd-common
    Resolves: bz1967718
  - Various OCP/cluster/cleanup enhancements
    Resolves: bz1985983
  - [options] allow variant option names in config file
    Resolves: bz1985985
  - [plugins] Set default predicate instead of None
    Resolves: bz1938874
  - [MigrationResults] collect info about conversions and
    Resolves: bz1959779


author: Pavel Moravec <pmoravec@redhat.com> = 4.1-8
changelog:
  - [report,collect] unify --map-file arguments
    Resolves: bz1985985
  - [rhui] add new plugin for RHUI 4
    Resolves: bz1992859
  - [username parser] Load usernames from `last` for LDAP users
    Resolves: bz1992861


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-1
changelog:
  - Rebase on upstream 4.2
    Resolves: bz1998134
  - [report] Implement --estimate-only
    Resolves: bz2011537
  - [omnipath_client] Opacapture to run only with allow changes
    Resolves: bz2011534
  - [unpackaged] deal with recursive loop of symlinks properly
    Resolves: bz2011533
  - [networking] prevent iptables-save commands to load nf_tables
    Resolves: bz2011538
  - [kernel] Capture Pressure Stall Information
    Resolves: bz2011535
  - [processor] Apply sizelimit to /sys/devices/system/cpu/cpuX
    Resolves: bz1869561


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-2
changelog:
  - [firewall_tables] call iptables -t <table> based on nft
    Resolves: bz2011536
  - [report] Count with sos_logs and sos_reports in
    Resolves: bz2011537
  - [foreman] Collect puma status and stats
    Resolves: bz2011507
  - [report] Overwrite pred=None before refering predicate
    Resolves: bz2012858
  - [openvswitch] add commands for offline analysis
    Resolves: bz2019697


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-4
changelog:
  - [report] Calculate sizes of dirs, symlinks and manifest in
    Resolves: bz2011537
  - [report] shutdown threads for timeouted plugins
    Resolves: bz2012859
  - [report] fix filter_namespace per pattern
    Resolves: bz2020778
  - Ensure specific plugin timeouts are only set
    Resolves: bz2023481


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-5
changelog:
  - [clean,hostname_parser] Source /etc/hosts for obfuscation
    Resolves: bz2024893
  - [clean, hostname] Fix unintentionally case sensitive
    Resolves: bz2024892
  - [redhat] update SFTP API version to v2
    Resolves: bz2025611


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-8
changelog:
  - [rhui] New log folder
    Resolves: bz2031777
  - nvidia]:Patch to update nvidia plugin for GPU info
    Resolves: bz2034001
  - [hostname] Fix edge case for new hosts in a known subdomain
    Resolves: bz2024893


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-9
changelog:
  - add oc transport, backport various PRs for OCP
    Resolves: bz2037350
  - [report] Provide better warning about estimate-mode
    Resolves: bz2011537
  - [hostname] Fix loading and detection of long base domains
    Resolves: bz2024893


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-12
changelog:
  - [foreman] Use psql-msgpack-decode wrapper for dynflow >= 1.6
    Resolves: bz2043104
  - [virsh] Call virsh commands in the foreground / with a TTY
    Resolves: bz2041855
  - [ovn_central] Account for Red Hat ovn package naming
    Resolves: bz2043488
  - [clean,parsers] Build regex lists for static items only once
    Resolves: bz2037350


author: Pavel Moravec <pmoravec@redhat.com> = 4.2-15
changelog:
  - [sosnode] Handle downstream versioning for runtime option
    Resolves: bz2037350
  - [options] Fix logging on plugopts in effective sos command
    Resolves: bz2054883
  - [report] Honor plugins' hardcoded plugin_timeout
    Resolves: bz2055548
  - [policies] Set fallback to None sysroot, don't chroot to '/'
    Resolves: bz2011537
  - [ovn_central] Rename container responsable of Red Hat
    Resolves: bz2043488


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-12
changelog:
  - bz1948956 - Using -hosts option does not resolve host from /etc/hosts
    and mount failes
    - Coverity fixes (arising from RHEL-8 bug 1912106)
      - add missing free in handle_mounts().
      - remove redundant if check.
      - fix possible memory leak in master_parse().
      - fix possible memory leak in mnts_add_amdmount().
      - fix double unlock in parse_mount().
      - add length check in umount_subtree_mounts().
      - fix flags check in umount_multi().
      - dont try umount after stat() ENOENT fail.
      - remove redundant assignment in master_add_amd_mount_section_mounts().
      - fix dead code in mnts_add_mount().
      - fix arg not used in error print.
      - fix missing lock release in mount_subtree().
      - fix double free in parse_mapent().
      - refactor lookup_prune_one_cache() a bit.
      - cater for empty mounts list in mnts_get_expire_list().
      - add ext_mount_hash_mutex lock helpers.
  - Resolves: rhbz#1948956


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-13
changelog:
  - bz1942371 - Drop nis support from autofs
      - fix dandling symlink creation if nis support is not available.
      - remove BuildRequires libnsl2-devel.
      - fix incorrect changelog revision.
  - Resolves: rhbz#1942371


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-14
changelog:
  - bz1951344 - the autofs distribution tar has a file with an incompatible
    license.
    - apply first two patches to distribution tar to eliminate
      use of the file with the rejected license.
    - update spec file to use the new sources and not apply the
      first two patches (that have beeny applied to the source tar).
  - Resolves: rhbz#1951344


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-15
changelog:
  - bz1942371 - Drop nis support from autofs
      - fix dangling symlink creation if nis support is not available
        (add missing patch).
    - bz1958489 - autofs amd mounts present in the configuration get
      umounted on reload
      - fix amd section mounts map reload.
    - bz1958486 - autofs amd type host mounts fail for certain host names
      - fix amd hosts mount expire.
  - Related: rhbz#1942371
  - Resolves: rhbz#1958489 rhbz#1958486


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-16
changelog:
  - bz1965870 - autofs: regression in offset ordering
    - fix offset entries order.
    - use mapent tree root for tree_mapent_add_node().
    - eliminate redundant cache lookup in tree_mapent_add_node().
    - fix hosts map offset order.
    - fix direct mount deadlock.
  - bz1965863 - A recent Coverity change can cause an infinit loop on map reload
    - fix lookup_prune_one_cache() refactoring change.
  - bz1966380 - auto.master manpage doesn't mention -null or other built-in maps
    - add missing desciption of null map option.
  - Resolves: rhbz#1965870 rhbz#1965863 rhbz#1966380


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-17
changelog:
  - bz1973892 - /net mount being not cleanly mounted and unmounted
    - correct patch, fix nonstrict offset mount fail handling.
  - Related: rhbz#1973892


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-20
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - fix concat_options() error handling.
  - Resolves: rhbz#1938682


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-21
changelog:
  - bz1938682 - review of important potential issues detected by static analyzers
    in autofs-5.1.7-2.el9
    - correct patch, fix concat_options() error handling.
  - Related: rhbz#1938682


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Than Ngo <than@redhat.com> - 3.18.0-1
changelog:
  - Resolves: #2044179, rebase to 3.18.0
  - Resolves: #2068091, pkcsconf -t failed with Segmentation fault in FIPS mode
  - Resolves: #2066763, Dilithium support not available
  - Resolves: #2064697, OpenSSL 3.0 Compatibility for IBM Security Libraries and Tools
  - Resolves: #2044181, support crypto profiles
  - Resolves: #2044180, add crypto counters


author: Than Ngo <than@redhat.com> - 3.18.0-4
changelog:
  - Related: #2044179, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Jakub Martisko <jamartis@redhat.com> - 28-5.1
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  - Add gating.yaml
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Christopher Snyder <csnyder@redhat.com> 1.27.1-1
changelog:
  - Fix broken zypepr repo print (suttner@atix.de)
  - Fix apt-plugin for subscription-manager (bucher@atix.de)
  - Support to upload zypper repository profile (suttner@atix.de)
  - 1816926: Fix "attach --auto" command; ENT-2242 (jhnidek@redhat.com)
  - 1820001: initConfig method needs to be reinstated (wpoteat@redhat.com)
  - 1774187: Reinitialize logger, when necessary; ENT-1960 (jhnidek@redhat.com)
  - 1796833: New keys.pot with new strings; ENT-2058 (jhnidek@redhat.com)
  - 1775714: Do not install rhsmd and rhsm-icon on rhel8; ENT-1959
    (jhnidek@redhat.com)
  - Various fixes for debian building and packaging (bucher@atix.de)
  - Fix gcc warnings and clang build failures (tstellar@redhat.com)
  - 1569491: rhn-migrate-classic-to-rhsm should try to resolve product ID
    collisions (wpoteat@redhat.com)
  - Remove yum for suse (suttner@atix.de)
  - Add basic build-instructions for debian packages (bucher@atix.de)
  - Make debian build more versatile (bucher@atix.de)
  - Add missing debian-build-dependency for libssl-dev (bucher@atix.de)
  - 1763271: Golden ticket: do not print list of products; ENT-2017
    (jhnidek@redhat.com)
  - Added basic support for Pipenv for subscription-manager; ENT-1755
    (jhnidek@redhat.com)
  - Implement --token option in subscription-manager (shwethakraman57@gmail.com)
  - Fixed saving and reading configuration file from cockpit plugin.
    (jhnidek@redhat.com)
  - cockpit: Be more robust when showing the time for next Insights upload
    (mvollmer@redhat.com)
  - Fixed few issues with initConfig() (jhnidek@redhat.com)
  - 1803783: Added copytruncate option to logrotate conf file; ENT-2114
    (jhnidek@redhat.com)
  - 1804114: New D-Bus method SetAll; ENT-2124 (jhnidek@redhat.com)
  - 1796986: Collect AWS instance id when available (wpoteat@redhat.com)
  - Hint is printed by subscription-manager during registration.
    (jhnidek@redhat.com)
  - Implementation of getting organization using D-Bus API; ENT-1760
    (jhnidek@redhat.com)
  - List user's organization during registration process on CLI
    (jhnidek@redhat.com)
  - Enable building of libdnf product-id plugin on RHEL 7. (jhnidek@redhat.com)
  - Refactoring of DNF subscription-manager plugin; ENT-1906 (jhnidek@redhat.com)
  - 1794826: Added option --force for command refresh; ENT-2033
    (jhnidek@redhat.com)
  - 1794653: corrected missing quotes for config check; ENT-2010
    (crag@redhat.com)
  - Ensure serial existence before comparison (csnyder@redhat.com)
  - D-Bus API: support for pagged list of available subscriptions; ENT-1762
    (jhnidek@redhat.com)
  - 1797386: Allow service plugin for zypper (SLES) to set autorefresh
    (darinlively@gmail.com)
  - 1782910: Log errors in logging set up after set up completes; ENT-1890
    (jhnidek@redhat.com)
  - Add unit test for ASN1 generalized time (khowell@redhat.com)
  - 1667792: added --disable-auto-attach option to register command; ENT-1684
    (jhnidek@redhat.com)
  - ENT-1620: Add option to use our cache of npmjs repository (Nexus)
    (jhnidek@redhat.com)
  - cockpit: Sync with current Cockpit test API (martin@piware.de)
  - Make x509 date parsing handle dates after 2049 (khowell@redhat.com)
  - cockpit: Add 'doc' and 'keywords' into manifest (mmarusak@redhat.com)
  - 1741183: Yum loaded subscription-manager plugin multiple times
    (hyu@redhat.com)
  - 1761566: include kpatch in facts; ENT-1700 (jhnidek@redhat.com)
  - Fixed several issues based on PR review. (jhnidek@redhat.com)
  - 1751200: Cockpit plugin: select registration method; ENT-1651
    (jhnidek@redhat.com)
  - ENT-1682: Update build process to use Fedora Zanata (ojanus@redhat.com)
  - Do not include pycache for container plugin on python2 (csnyder@redhat.com)
  - Make sure to set the mtime of the py files before creating pyc
    (csnyder@redhat.com)
  - cockpit: Install insights-client package on demand (mvollmer@redhat.com)
  - cockpit: CSS fixes for dialog error messages (mvollmer@redhat.com)
  - Fixed unit test and build process specific for suse (jhnidek@redhat.com)
  - cockpit: Update cockpit-component-dialog (mvollmer@redhat.com)
  - Fix downgradability due to conflicts with rhsm-icons (csnyder@redhat.com)
  - Add rhsm-icons package to contain all icons required by gui interfaces
    (csnyder@redhat.com)
  - 1728054: Obsolete sm-plugin-container on RHEL 8 (csnyder@redhat.com)
  - cockpit: Don't use objects as React children for error details
    (mvollmer@redhat.com)
  - Security upgrades of javascript packages (jhnidek@redhat.com)
  - D-BUS API: Better listing of provided products (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.27.2-1
changelog:
  - Update releasers for 8.3 (wpoteat@redhat.com)
  - 1821747: Automatically create /etc/rhsm/syspurpose (jhnidek@redhat.com)


author: William Poteat <wpoteat@redhat.com> 1.27.3-1
changelog:
  - 1771921: Package profiles sends too early when registering a client
    (wpoteat@redhat.com)
  - 1827708: Make rhsmd cron read 'processTimeout' case-
    insensitive (csnyder@redhat.com)
  - Reduced REST API calls during register, when SLA is set; ENT-2229
    (jhnidek@redhat.com)
  - cockpit: Show more Insights details (mvollmer@redhat.com)
  - integration-test: Update mock-insights to use regexp routing
    (mvollmer@redhat.com)
  - 1688702: Generate redhat.repo in off-line mode; ENT-2302 (jhnidek@redhat.com)
  - Fix issue with getPoolsList (jhnidek@redhat.com)
  - 1818932: 1820267: Using 'Simple Content Access' for access mode
    (wpoteat@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.27.4-1
changelog:
  - Fix unit test of getting release information (jhnidek@redhat.com)
  - Send Service-level during registration only once (csnyder@redhat.com)
  - Refactoring of save_sla_to_syspurpose_metadata; ENT-2228 (jhnidek@redhat.com)
  - 1823523: Detect rhsm-icon running without psutil (csnyder@redhat.com)
  - 1830994: Fix warning messages in dnf/yum (jhnidek@redhat.com)
  - 1815624: When in Simple Content Access mode, subscription-manager should not
    complain that subscriptions aren't attached (wpoteat@redhat.com)
  - Bump jquery from 3.4.1 to 3.5.0 in /cockpit
    (49699333+dependabot[bot]@users.noreply.github.com)
  - Bug fix of Makefile for Debian (63191606+mallmaluss@users.noreply.github.com)


author: Christopher Snyder <csnyder@redhat.com> 1.27.5-1
changelog:
  - Revert "1667792: added --disable-auto-attach option to register command;
    ENT-1684" (csnyder@redhat.com)
  - 1834792: Try to terminate rhsmd after timeout; ENT-2368 (jhnidek@redhat.com)
  - 1837244: Fix wrong version provided by subscription-manager version; ENT-2388
    (jhnidek@redhat.com)
  - 1838012: prevent redundant remote syspurpose sync (pmoravec@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.28.0-1
changelog:
  - 1804454: collect uuid on aarch64 system (wpoteat@redhat.com)
  - WIP: Try to fix build of rpms on suse. (jhnidek@redhat.com)
  - 1842474: Update local and cache file during sync(); ENT-2433
    (jhnidek@redhat.com)
  - 1725525: Mark one string for translation; ENT-1680 (jhnidek@redhat.com)
  - 1789457: Syspurpose exception message parsing (wpoteat@redhat.com)
  - Fix building sub-man on Fedora 32 (jhnidek@redhat.com)
  - cockpit: Call run-tests from common to run cockpit integration tests
    (sanne.raymaekers@gmail.com)


author: Till Maas <opensource@till.name> - 8.1-26
changelog:
  - Sync in current files from bash package:
    https://src.fedoraproject.org/rpms/bash/c/739b272e5f5d10cf27a847a44d09eb7f4b6ec89b?branch=master
    https://src.fedoraproject.org/rpms/bash/c/329df36f8bbc303be618f06562ec2c4eebfd1d29?branch=master
    https://src.fedoraproject.org/rpms/bash/c/e3b3cd9cec4a3bd12a792536c0ea131f5ba5bd72?branch=master


author: Petr Pisar <ppisar@redhat.com> - 10.33-12
changelog:
  - Revert a fix for a mismatch with a lookbehind within a lookahead within
    a lookbehind (bug #1743863)


author: Petr Pisar <ppisar@redhat.com> - 10.33-13
changelog:
  - Readd a fix for a mismatch with a lookbehind within a lookahead within
    a lookbehind and fix the regression in matching a lookbehind after
    a condition (bug #1743863)


author: Petr Pisar <ppisar@redhat.com> - 10.33-14
changelog:
  - Fix a crash in JIT match when a subject has a zero length and an invalid
    pointer (upstream bug #2440)


author: Petr Pisar <ppisar@redhat.com> - 10.33-15
changelog:
  - Fix a use after free when freeing JIT memory (upstream bug #2453)
  - Fix thread-safeness in regexec() (upstream bug #2447)


author: Petr Pisar <ppisar@redhat.com> - 10.34-4
changelog:
  - Fix a crash in JITted code when a *THEN verb is used in a lookahead assertion
    (upstream bug #2510)


author: Petr Pisar <ppisar@redhat.com> - 10.34-5
changelog:
  - Fix a memory leak when allocating a JIT stack fails
  - Ensure a newline after the final line in a file is output by pcre2grep
    (upstream bug #2513)
  - Fix processing (?(DEFINE)...) within look-behind assertions
  - Prevent from a stack exhaustion when studying a pattern for nested groups by
    putting a limit of 1000 recursive calls


author: Petr Pisar <ppisar@redhat.com> - 10.34-7
changelog:
  - Fix a crash in JIT when an invalid UTF-8 character is encountered in
    match_invalid_utf mode (upstream bug #2529)


author: Petr Pisar <ppisar@redhat.com> - 10.34-8
changelog:
  - Fix computing an offest for the start of the UTF-16 error when a high
    surrogate is not followed by a valid low surrogate (upstream bug #2527)
  - Fix compiling a lookbehind when preceded by a DEFINE group
    (upstream bug #2531)
  - Make manual pages about pattern syntax available when the library is
    installed (bug #1808612)


author: Petr Pisar <ppisar@redhat.com> - 10.34-9
changelog:
  - Fix a JIT compilation of the Unicode scripts in the extended character classes
    (upstream bug #2432)


author: Petr Pisar <ppisar@redhat.com> - 10.35-2
changelog:
  - Enable shadow stack built-in functions if -fcf-protection compiler flag is
    used by patching a build script (upstream bug #2578)


author: Petr Pisar <ppisar@redhat.com> - 10.35-3
changelog:
  - Fix an infinite loop when a single-byte newline is search in JIT if an
    invalid UTF-8 mode is enabled (upstream bug #2581)


author: Petr Pisar <ppisar@redhat.com> - 10.35-4
changelog:
  - Fix a buffer overread when parsing an unterminated VERSION condition with
    a single-digit minor number at the end of a regular expression
    (ClusterFuzz #23779)
  - Fix an early fail optimization with character ranges and a buffer overread
    in JIT (upstream bug #2621)


author: Petr Pisar <ppisar@redhat.com> - 10.35-6
changelog:
  - Fix escaping test data and only allow slash delimiter after perltest pragma
    (upstream bug #2641)
  - Fix a mismatch when caselessly searching in an invalid UTF-8 text and a start
    optimization is enabled (upstream bug #2642)


author: Petr Pisar <ppisar@redhat.com> - 10.35-7
changelog:
  - Fix matching a character set when JIT is enabled and both Unicode script and
    Unicode class are present (upstream bug #2644)


author: Petr Pisar <ppisar@redhat.com> - 10.36-3
changelog:
  - Fix misparsing long numbers as a backreference and a number without
    a closing bracket as a quantifier (upstream bug #2690)


author: Miro Hrončok <mhroncok@redhat.com> - 0.6.0-8
changelog:
  - Subpackage python2-ptyprocess has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [doc] Add description for new API
  - [API] Add new method for reset of security filters
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - Use libdnf.utils.checksum_{check,value}
  - [doc] Add info that maximum parallel downloads is 20
  - Increase loglevel in case of invalid config options
  - [doc] installonly_limit documentation follows behavior
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Add documentation for config option sslverifystatus (RhBug:1814383)
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - Bugs fixed (RhBug:1916783)
  - Preserve file mode during log rotation (RhBug:1910084)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-1
changelog:
  - Update to 4.10.0
  - Do not assume that a remote rpm is complete if present
  - Use positive percentage for "Failed delta RPMs" message
  - Remove redundant new line in Groups output
  - Format empty group names outputs to <name-unset>
  - [doc] Document default colors
  - Use rpmkeys alone to verify signature
  - Add dnf.error message to explain rpm.error traceback when package not found after resolving a transaction (RhBug:1815327,1887293,1909845)
  - [API] Add method "set_or_append_opt_value" to BaseConfig (RhBug:1967925)
  - Add aliases for commands: info, updateinfo, provides (RhBug:1938333)
  - Add report about demodularized rpms into module info (RhBug:1805260)
  - Remove DNSSEC errors on COPR group email keys
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies (RhBug:1699672)
  - Add support for excluding packages to be installed as weak dependencies (RhBug:1699672)
  - Add fail_fast parameter to download_payloads methods for use in reposync
  - Acquire all relevant locks during "dnf clean"
  - API: Raise CompsError when group/env not found in install_group and install_environment (RhBug:1947958)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-2
changelog:
  - Respect cacheonly in python dnf API (RhBug:2026849)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.10.0-3
changelog:
  - Don't recommend python3-unbound (RhBug:1947925)
  - Recommend rpm-plugin-systemd-inhibit only if systemd (RhBug:1947924)
  - Don't recommend /usr/bin/sqlite3 for bash-completion (RhBug:1947924)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.12.0-1
changelog:
  - Allow destdir option with modulesync command
  - Add documentation for query api flags (RhBug:2035577)
  - Fix swap command to work with local rpm files correctly (RhBug:2036434)
  - Fix regression in verifying signatures using rpmkeys
  - Fix decompression of groups.xml (RhBug:2030255)
  - Fix history undo on a Reason Change (RhBug:2010259,2053014)
  - Remove /usr/bin from sys.path to avoid accidentally importing garbage
  - Fix python3.11 build: remove deprecated, update traceback regex
  - fix dnf mark error when history sqlite missing
  - [doc] clarify effect of --enablerepo and --disablerepo options (RhBug:2031414)
  - [doc] default values for module_obsoletes and module_stream_switch (RhBug: 2051846)
  - dnf.conf: hint users where to find more info about defaults and other options
  - Fix unittests that relied on checksum being at the end of solvfiles
  - completion: remove unnecessary echo
  - Fix remove when no repos are enabled (RhBug:2064341)
  - Add loongarch support for dnf
  - Add spaces between words to fix typos (RhBug:2077296)
  - [doc] Improve "proxy" configuration option documentation (RhBug:2072332)
  - Fix download errors handling in non-english locales (RhBug:2024527)


author: Sumit Bose <sbose@redhat.com> - 0.9.0-6
changelog:
  - Include the latest upstream patches with use-ldaps fixes, man page
    improvements and a new sub-command to create managed service accounts


author: Miro Hrončok <mhroncok@redhat.com> - 0.9.6-19
changelog:
  - Subpackages python2-inotify, python2-inotify-examples have been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Robbie Harwood <rharwood@redhat.com> - 2.06-27.el9_0.7
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2089810


author: Marcel Plch <mplch@redhat.com> - 3.9.0~b4-2
changelog:
  - Remove large, autogenerated Python sources and redundant pycache levels to reduce filesystem footprint


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.0~rc2-2
changelog:
  - Use upstream architecture names on Fedora 34+
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Miro Hrončok <mhroncok@redhat.com> - 3.9.1-4
changelog:
  - Rebuilt to be signed with Fedora 32 compatible signature,
    to fix mock bootstrap chroot on Fedora 32 (and possibly EPELs)
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/OBEFWGCFXHE4EDBXFBZWDUPAJJS7QZAR/


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.5-4
changelog:
  - Stop Recommending setuptools and move the pip Recommendation to python3-devel
  Resolves: rhbz#1947857


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.6-3
changelog:
  - Build only blake2 from the internal hash implementations and use md5,
    sha1, sha256, sha512 and sha3 from OpenSSL
  Related: rhbz#1935437, rhbz#1942527


author: Chris Leech <cleech@redhat.com> - 6.2.1.1-0.gitac87641
changelog:
  - rebase to new upstream v2.1.1
  - enhanced CHAP options are now a configuration to deal with broken targets (#1774746)


author: Christian Glombek <cglombek@redhat.com> - 6.2.1.2-0.git802688d
changelog:
  - Update to upstream v2.1.2
  - Remove systemctl enable calls, as this is now handled by Fedora presets
  - per the guidelines
  - Remove initiator name generation, as this is now handled by an init service
  - Install ghost lockfile and dir to /run instead of /var
  - Rebased/fixed up patches
  - Fixed macros in comments and comments after macros
  - Merged service-file-tweaks.patch and
  - improve-systemd-service-files-for-boot-session-handl.patch
  - into unit-file-tweaks.patch 
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1493296
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1729740
  - Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1834509


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Phil Sutter <psutter@redhat.com> - 1.8.5-1
changelog:
  - Rebase onto upstream version 1.8.5 plus two late fixes
  - Drop explicit iptables-apply installation, upstream fixed that
  - Ship ip6tables-apply along with iptables package


author: Phil Sutter <psutter@redhat.com> - 1.8.5-3
changelog:
  - nft: cache: Check consistency with NFT_CL_FAKE, too
  - nft: Fix command name in ip6tables error message


author: Phil Sutter <psutter@redhat.com> - 1.8.6-3
changelog:
  - Drop obsolete StandardOutput setting from unit file
  - Remove StandardError setting from unit file, its value is default


author: Phil Sutter <psutter@redhat.com> - 1.8.7-4
changelog:
  - Drop bootstrap code again
  - Drop workarounds for F24 and lower
  - Fix iptables-utils summary
  - Ship iptables-apply with iptables-utils
  - Reduce files sections by use of globbing
  - Ship common man pages with iptables-libs
  - Ship *-translate man pages with iptables-nft
  - Move legacy iptables binaries, libraries and headers into sub-packages
  - Introduce compat sub-package to help with above transitions
  - Drop libipulog header from devel package, this belongs to libnetfilter_log
  - Do not ship internal headers in devel package


author: Phil Sutter <psutter@redhat.com> - 1.8.7-11
changelog:
  - Fix License name in spec file
  - Eliminate inet_aton() and inet_ntoa()
  - nft-arp: Make use of ipv4_addr_to_string()
  - Make legacy sub-packages obsolete older non-legacy ones
  - Fix dates in changelog
  - iptables.init: Fix functionality for iptables-nft
  - iptables.init: Ignore sysctl files not suffixed '.conf'
  - iptables.init: Drop unused NEW_MODUTILS check
  - iptables.init: Drop some trailing whitespace


author: Phil Sutter <psutter@redhat.com> - 1.8.7-12
changelog:
  - arptables-nft-helper: Remove bashisms
  - ebtables-helper: Drop unused variable, add a missing quote
  - extensions: libxt_string: Avoid buffer size warning for strncpy()
  - libxtables: Introduce xtables_strdup() and use it everywhere
  - extensions: libebt_ip6: Use xtables_ip6parse_any()
  - iptables-apply: Drop unused variable
  - nft: Avoid buffer size warnings copying iface names
  - nft: Avoid memleak in error path of nft_cmd_new()
  - libxtables: Fix memleak in xtopt_parse_hostmask()
  - extensions: libebt_ip6: Drop unused variables
  - libxtables: Drop leftover variable in xtables_numeric_to_ip6addr()


author: Phil Sutter <psutter@redhat.com> - 1.8.7-13
changelog:
  - extensions: sctp: Fix nftables translation
  - nft: Fix bitwise expression avoidance detection
  - iptables-nft: fix -Z option
  - Do not build legacy sub-packages on RHEL


author: Phil Sutter <psutter@redhat.com> - 1.8.7-15
changelog:
  - doc: Improve deprecation notices a bit
  - nft: cache: Sort chains on demand only
  - nft: Increase BATCH_PAGE_SIZE to support huge rulesets


author: Phil Sutter <psutter@redhat.com> - 1.8.7-18
changelog:
  - Make iptables-nft-services require iptables-services to avoid confusion
  - Add deprecation notice to iptables-extensions man page as well


author: Phil Sutter <psutter@redhat.com> - 1.8.7-19
changelog:
  - Build iptables-services on C9S only
  - Use systemd_ordering in nft-services, too
  - Drop compat package, nft-services serves well for that purpose
  - Make legacy unconditionally provide iptables, it's not built on RHEL


author: Honza Horak <hhorak@redhat.com> - 590-1
changelog:
  - Update to the version 590
  - Also solves the "message overlay" in the terminal
    Resolves: #2062188


author: Tom Callaway <spot@fedoraproject.org> - 5.4.0-4
changelog:
  - apply upstream fix for CVE-2020-15889
  - apply upstream fix for CVE-2020-15945
  - apply upstream fixes for "known bugs"


author: Xavier Delaruelle <xavier.delaruelle@cea.fr> - 4.7.0-1
changelog:
  - Update to 4.7.0 (#1930632)
  - Align spec syntax with upstream spec file
  - Add 'tcl' to the BuildRequires and remove 'man' from this list
  - Fix names of 'procps-ng' and 'man-db' packages on Fedora
  - Only install manpages through make install, other docs are handled by %doc
  - Remove alternatives mechanism for manpages


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.7.22-1
changelog:
  - Update to 0.7.22
  - support strict repository priorities new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
  - support zstd compressed control files in debian packages
  - add an ifdef allowing to rename Solvable dependency members ("requires" is a keyword in C++20)
  - support setting/reading userdata in solv files new functions: repowriter_set_userdata, solv_read_userdata
  - support queying of the custom vendor check function new function: pool_get_custom_vendorcheck
  - support solv files with an idarray block
  - allow accessing the toolversion at runtime
  - support parsing of Debian's Multi-Arch indicator
  - fix segfault on conflict resolution when using bindings
  - fix split provides not working if the update includes a forbidden vendor change
  - reworked choice rule generation to cover more usecases
  - support SOLVABLE_PREREQ_IGNOREINST in the ordering code


author: DJ Delorie <dj@redhat.com> - 1:4.3-5
changelog:
  - Allow users to build with or without guile support as desired.
  - Allow derivative downstreams to default to disabling guile support.


author: Stephen Gallagher <sgallagh@redhat.com> - 9.1-1.1
changelog:
  - Sign grub2 on ppc64le properly
  - Related: rhbz#1873860
  - Enable switcheroo-control.service
  - Resolves: rhbz#2049627


author: Ales Matej <amatej@redhat.com> - 0.47.0-1
changelog:
  - Update to 0.47.0
  - Add prereq_ignoreinst & regular_requires properties for pkg (RhBug:1543449)
  - Reset active modules when no module enabled or default (RhBug:1767351)
  - Add comment option to transaction (RhBug:1773679)
  - Failing to get module defauls is a recoverable error
  - Baseurl is not exclusive with mirrorlist/metalink (RhBug: 1775184)
  - Add new function to reset all modules in C API (dnf_context_reset_all_modules)
  - [context] Fix to preserve additionalMetadata content (RhBug:1808677)
  - Fix filtering of DepSolvables with source rpms (RhBug:1812596)
  - Add setter for running kernel protection setting
  - Handle situation when an unprivileged user cannot create history database (RhBug:1634385)
  - Add query filter: latest by priority
  - Add DNF_NO_PROTECTED flag to allow empty list of protected packages
  - Remove 'dim' option from terminal colors to make them more readable (RhBug:1807774,1814563)
  - [context] Error when main config file can't be opened (RhBug:1794864)
  - [context] Add function function dnf_context_is_set_config_file_path


author: Nicola Sella <nsella@redhat.com> - 0.48.0-1
changelog:
  - Update to 0.48.0
  - swdb: Catch only SQLite3 exceptions and simplify the messages
  - MergedTransaction list multiple comments (RhBug:1773679)
  - Modify CMake to pull *.po files from weblate
  - Optimize DependencyContainer creation from an existing queue
  - fix a memory leak in dnf_package_get_requires()
  - Fix memory leaks on g_build_filename()
  - Fix memory leak in dnf_context_setup()
  - Add `hy_goal_favor` and `hy_goal_disfavor`
  - Define a cleanup function for `DnfPackageSet`
  - dnf-repo: fix dnf_repo_get_public_keys double-free
  - Do not cache RPMDB
  - Use single-quotes around string literals used in SQL statements
  - SQLite3: Do not close the database if it wasn't opened (RhBug:1761976)
  - Don't create a new history DB connection for in-memory DB
  - transaction/Swdb: Use a single logger variable in constructor
  - utils: Add a safe version of pathExists()
  - swdb: Handle the case when pathExists() fails on e.g. permission
  - Repo: prepend "file://" if a local path is used as baseurl
  - Move urlEncode() to utils
  - utils: Add 'exclude' argument to urlEncode()
  - Encode package URL for downloading through librepo (RhBug:1817130)
  - Replace std::runtime_error with libdnf::RepoError
  - Fixes and error handling improvements of the File class
  - [context] Use ConfigRepo for gpgkey and baseurl (RhBug:1807864)
  - [context] support "priority" option in .repo config file (RhBug:1797265)


author: Nicola Sella <nsella@redhat.com> - 0.54.2-1
changelog:
  - Update to 0.54.2
  - history: Fix dnf history rollback when a package was removed (RhBug:1683134)
  - Add support for HY_GT, HY_LT in query nevra_strict
  - Fix parsing empty lines in config files
  - Accept '==' as an operator in reldeps (RhBug:1847946)
  - Add log file level main config option (RhBug:1802074)
  - Add protect_running_kernel configuration option (RhBug:1698145)
  - Context part of libdnf cannot assume zchunk is on (RhBug:1851841,1779104)
  - Fix memory leak of resultingModuleIndex and handle g_object refs
  - Redirect librepo logs to libdnf logs with different source
  - Introduce changelog metadata in commit messages
  - Add hy_goal_lock
  - Update Copr targets for packit and use alias
  - Enum/String conversions for Transaction Store/Replay
  - utils: Add a method to decode URLs
  - Unify hawkey.log line format with the rest of the logs


author: Nicola Sella <nsella@redhat.com> - 0.55.0-1
changelog:
  - Update to 0.55.0
  - Add vendor to dnf API (RhBug:1876561)
  - Add formatting function for solver error
  - Add error types in ModulePackageContainer
  - Implement module enable for context part
  - Improve string formatting for translation
  - Remove redundant printf and change logging info to notice (RhBug:1827424)
  - Add allow_vendor_change option (RhBug:1788371) (RhBug:1788371)


author: Nicola Sella <nsella@redhat.com> - 0.55.2-1
changelog:
  - Update to 0.55.2
  - Improve performance of query installed() and available()
  - Swdb: Add a method to get the current transaction
  - [modules] Add special handling for src artifacts (RhBug:1809314)
  - Better msgs if "basecachedir" or "proxy_password" isn't set (RhBug:1888946)
  - Add new options module_stream_switch
  - Support allow_vendor_change setting in dnf context API
  - Fix couple of sanitizer builds in specfile


author: Nicola Sella <nsella@redhat.com> - 0.58.0-1
changelog:
  - Update to 0.58.0
  - Option: Add reset() method
  - Add OptionBinds::getOption() method
  - [context] Add dnf_repo_conf_from_gkeyfile() and dnf_repo_conf_reset()
  - [context] Add support for options: minrate, throttle, bandwidth, timeout
  - [context] Remove g_key_file_get_string() from dnf_repo_set_keyfile_data()
  - Allow loading ext metadata even if only cache (solv) is present
  - Add ASAN_OPTIONS for test_libdnf_main
  - [context,API] Functions for accessing main/global configuration options
  - [context,API] Function for adding setopt
  - Add getter for modular obsoletes from ModuleMetadata
  - Add ModulePackage.getStaticContext() and getRequires()
  - Add compatible layer for MdDocuments v2
  - Fix modular queries with the new solver
  - Improve formatting of error string for modules
  - Change mechanism of module conflicts
  - Fix load/update FailSafe


author: Nicola Sella <nsella@redhat.com> - 0.60.0-1
changelog:
  - Update to 0.60.0
  - Fix repo.fresh() implementation
  - build-sys: Add ENABLE_STATIC option
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - Apply proxy certificate options
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - build-sys: Clean up message about Python bindings
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Fix problematic language
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Support main config file option "installonlypkgs".
  - Support main config file option "protected_packages".
  - Properly handle multiple collections in updateinfo.xml (RhBug:1804234)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.63.0-1
changelog:
  - Fix: Fully set ssl in newHandle function
  - [conf] Add options for working with certificates used with proxy
  - lock: Switch return-if-fail to assert to quiet gcc -fanalyzer
  - Modify module NSVCA parsing - context definition (RhBug:1926771)
  - [context] Fix: dnf_package_is_installonly (RhBug:1928056)
  - Add getApplicablePackages to advisory and isApplicable to advisorymodule
  - Keep isAdvisoryApplicable to preserve API
  - Run ModulePackageContainerTest tests in tmpdir, merge interdependent
  - [context] Support config file option "proxy_auth_method", defaults "any"
  - Hardening: add signature check with rpmcliVerifySignatures (RhBug:1932079)
  - Do not allow 1 as installonly_limit value (RhBug:1926261)
  - Add a config option to check TLS certificate revocation status (using OCSP stapling), defaults to false (RhBug:1814383)
  - ModuleProfile: add isDefault()
  - ModulePackage: add getDefaultProfile()
  - Add new dnf_context_module_install() C API
  - Fix a crash when [media] section in .treeinfo is missing for bootable media (RhBug:1946024)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.65.0-1
changelog:
  - Update to 0.65.0
  - Implement logic for demodularization of modular rpms (RhBug:1805260)
  - DnfContext: fix handling of default module profiles
  - ModuleMetadata: gracefully handle modules with no defaults
  - Remove failovermethod config option (RhBug:1961083)
  - Add support for excluding packages to be installed as weak dependencies
  - Add support for autodetecting packages to be excluded from being installed as weak dependencies
  - Turn off strict validation of modulemd documents (RhBug:2004853,2007166,2007167)


author: Anderson Sasaki <ansasaki@redhat.com> - 0.4.10-3
changelog:
  - Added support for "pin-source" within PKCS#11 URI (#1670026)
  - Search objects in all matching tokens (#1760751)
  - Set flag RSA_FLAG_EXT_PKEY for RSA keys (#1760541)
  - Fixed various bugs


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> 1.5.0-1
changelog:
  - 1.5.0 release (#1824326)
  - include upstream patch to fix 32-bit platform compile, reported at
    https://github.com/Yubico/libfido2/issues/210


author: Jiri Hnidek <jhnidek@redhat.com> 4-1
changelog:
  * Tue Jul 26 2022 Jiri Hnidek <jhnidek@redhat.com> 3-1
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - test: drop unused reference-image file (ptoscano@redhat.com)
  - Drop the static npm-shrinkwrap.json (ptoscano@redhat.com)
  - Bump cockpit test API to 273 + run-tests scheduler fix (martin@piware.de)
  - spec: suggest insights-client on RHEL (ptoscano@redhat.com)
  - tito: remove autogenerated spec file before tagging (ptoscano@redhat.com)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-4.1
changelog:
  - Resolves: rhbz#2072959 - Use right sdap_domain in ad_domain_info_send [rhel-9.0.0.z]
  - Resolves: rhbz#2089251 - pam_sss_gss ceased to work after upgrade to 8.6 [rhel-9.0.0.z]


author: systemd maintenance team <systemd-maint@redhat.com> - 250-6.1
changelog:
  - shutdown: get only active md arrays. (#2087677)
  - test: lvm 2.03.15 dropped the static autoactivation (#2087677)
  - ci: limit which env variables we pass through `sudo` (#2087677)
  - shared: Fix memory leak in bus_append_execute_property() (#2087677)


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-9
changelog:
  - Add 0045-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2084356
  - Add 0046-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2084358
  - Add 0047-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0048-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0049-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0050-libmultipath-make-protocol_name-global.patch
  - Add 0051-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0052-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0053-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0054-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0055-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0056-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement the feature from bz #2084365
  - Add 0057-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2084357
  Resolves: bz #2084365, #2084357, #2084358, #2084365


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-11
changelog:
  - Add 0059-multipathd-Add-missing-ctype-include.patch
  - Add 0060-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119896


author: Florian Weimer <fweimer@redhat.com> - 2.34-1
changelog:
  - Switch to glibc 2.34 release tarball:
  - Update ChangeLog.old/ChangeLog.23.
  - Prepare for glibc 2.34 release.
  - po/nl.po: Update Dutch translation.
  - Update install.texi, and regenerate INSTALL.
  - Update translations.
  - Update NEWS.
  - NEWS: Fix typos, grammar, and missing words
  - elf: Fix audit regression


author: Florian Weimer <fweimer@redhat.com> - 2.34-4
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 4ed990e5b97a61f29f929bdeb36c5b2abb547a64:
  - Add MADV_POPULATE_READ and MADV_POPULATE_WRITE from Linux 5.14 to
    bits/mman-linux.h
  - Update kernel version to 5.14 in tst-mman-consts.py
  - Update syscall lists for Linux 5.14
  - Use Linux 5.14 in build-many-glibcs.py
  - Fix failing nss/tst-nss-files-hosts-long with local resolver
  - iconvconfig: Fix behaviour with --prefix [BZ #28199]
  - nptl: Fix race between pthread_kill and thread exit (swbz#12889, #1994068)
  - nptl: pthread_kill, pthread_cancel should not fail after exit
    (swbz#19193, #1994068)
  - support: Add support_wait_for_thread_exit
  - MIPS: Setup errno for {f,l,}xstat
  - x86-64: Use testl to check __x86_string_control
  - elf: Fix missing colon in LD_SHOW_AUXV output (swbz#28253, #1995648)
  - librt: add test (swbz#28213, #1994264)
  - CVE-2021-38604: fix NULL pointer dereference in mq_notify
    (swbz#28213, #1994264)
  - Linux: Fix fcntl, ioctl, prctl redirects for _TIME_BITS=64 (bug 28182)
  - iconv_charmap: Close output file when done
  - copy_and_spawn_sgid: Avoid double calls to close()
  - gaiconf_init: Avoid double-free in label and precedence lists
  - gconv_parseconfdir: Fix memory leak
  - ldconfig: avoid leak on empty paths in config file


author: Florian Weimer <fweimer@redhat.com> - 2.34-6
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 33adeaa3e2b9143c38884bc5aa65ded222ed274e:
  - nptl: Avoid setxid deadlock with blocked signals in thread exit [BZ #28361]
  - Use support_open_dev_null_range io/tst-closefrom, misc/tst-close_range, and
    posix/tst-spawn5 (BZ #28260)
  - support: Add support_open_dev_null_range
  - nptl: Fix type of pthread_mutexattr_getrobust_np,
    pthread_mutexattr_setrobust_np (bug 28036)
  - nptl: pthread_kill needs to return ESRCH for old programs (bug 19193)


author: Florian Weimer <fweimer@redhat.com> - 2.34-7
changelog:
  - Drop glibc-rh1992702-*.patch, applied upstream.  (#1992702)
  - Sync with upstream branch release/2.34/master,
    commit a996d13b8a2e101bedbb1bdaa7ffcfea3b959bb2:
  - Add missing braces to bsearch inline implementation [BZ #28400]
  - Suppress -Wcast-qual warnings in bsearch
  - linux: Revert the use of sched_getaffinity on get_nproc (BZ #28310)
  - linux: Simplify get_nprocs
  - misc: Add __get_nprocs_sched
  - nptl: pthread_kill must send signals to a specific thread [BZ #28407]
  - support: Add check for TID zero in support_wait_for_thread_exit


author: Florian Weimer <fweimer@redhat.com> - 2.34-8
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6548a9bdba95b3e1fcdbd85445342467e4b0cd4f:
  - Avoid warning: overriding recipe for .../tst-ro-dynamic-mod.so
  - ld.so: Initialize bootstrap_map.l_ld_readonly [BZ #28340]
  - ld.so: Replace DL_RO_DYN_SECTION with dl_relocate_ld [BZ #28340]
  - Handle NULL input to malloc_usable_size [BZ #28506]
  - elf: Avoid deadlock between pthread_create and ctors [BZ #28357]
  - timex: Use 64-bit fields on 32-bit TIMESIZE=64 systems (BZ #28469)
  - y2038: Use a common definition for stat for sparc32
  - elf: Replace nsid with args.nsid [BZ #27609]
  - S390: Add PCI_MIO and SIE HWCAPs
  - support: Also return fd when it is 0


author: Florian Weimer <fweimer@redhat.com> - 2.34-10
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 387bff63dc2dccd62b09aa26dccf8cdc5f3c985c:
  - powerpc64[le]: Fix CFI and LR save address for asm syscalls [BZ #28532]
  - linux: Use /proc/stat fallback for __get_nprocs_conf (BZ #28624)
  - nptl: Do not set signal mask on second setjmp return [BZ #28607]
  - s390: Use long branches across object boundaries (jgh instead of jh)
  - elf: Earlier missing dynamic segment check in _dl_map_object_from_fd
  - gconv: Do not emit spurious NUL character in ISO-2022-JP-3 (bug 28524)


author: Florian Weimer <fweimer@redhat.com> - 2.34-15
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 06865865151579d1aa17d38110060a68b85c5d90:
  - pthread/tst-cancel28: Fix barrier re-init race condition
  - Use $(pie-default) with conformtest
  - Run conform/ tests using newly built libc
  - nptl: Add one more barrier to nptl/tst-create1


author: Florian Weimer <fweimer@redhat.com> - 2.34-17
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 2fe2af88abd13ae5636881da2e26f461ecb7dfb5
  - i386: Remove broken CAN_USE_REGISTER_ASM_EBP (bug 28771)
  - Update syscall lists for Linux 5.15
  - powerpc: Fix unrecognized instruction errors with recent GCC
  - timezone: test-case for BZ #28707
  - timezone: handle truncated timezones from tzcode-2021d and later (BZ #28707)
  - Fix subscript error with odd TZif file [BZ #28338]
  - AArch64: Check for SVE in ifuncs [BZ #28744]
  - intl/plural.y: Avoid conflicting declarations of yyerror and yylex
  - Linux: Fix 32-bit vDSO for clock_gettime on powerpc32
  - linux: Add sparck brk implementation
  - Update sparc libm-test-ulps
  - Update hppa libm-test-ulps
  - riscv: align stack before calling _dl_init [BZ #28703]
  - riscv: align stack in clone [BZ #28702]
  - powerpc64[le]: Allocate extra stack frame on syscall.S
  - elf: Fix tst-cpu-features-cpuinfo for KVM guests on some AMD systems [BZ #28704]
  - nss: Use "files dns" as the default for the hosts database (bug 28700)
  - arm: Guard ucontext _rtld_global_ro access by SHARED, not PIC macro
  - mips: increase stack alignment in clone to match the ABI
  - mips: align stack in clone [BZ #28223]


author: Florian Weimer <fweimer@redhat.com> - 2.34-21
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 3438bbca90895d32825a52e31a77dc44d273c1c1:
  - Linux: Detect user namespace support in io/tst-getcwd-smallbuff
  - realpath: Avoid overwriting preexisting error
  - CVE-2021-3999: getcwd: Set errno to ERANGE for size == 1
  - tst-realpath-toolong: Fix hurd build
  - CVE-2021-3998: realpath: ENAMETOOLONG for result larger than PATH_MAX
  - stdlib: Fix formatting of tests list in Makefile
  - stdlib: Sort tests in Makefile
  - support: Add helpers to create paths longer than PATH_MAX
  - powerpc: Fix unrecognized instruction errors with recent binutils
  - x86: use default cache size if it cannot be determined [BZ #28784]
  - CVE-2022-23218: Buffer overflow in sunrpc svcunix_create (bug 28768)
  - sunrpc: Test case for clnt_create "unix" buffer overflow (bug 22542)
  - CVE-2022-23219: Buffer overflow in sunrpc clnt_create for "unix" (bug 22542)
  - socket: Add the __sockaddr_un_set function
  - Disable debuginfod in printer tests [BZ #28757]
  - Update syscall lists for Linux 5.16


author: Florian Weimer <fweimer@redhat.com> - 2.34-22
changelog:
  - Sync with upstream branch release/2.34/master,
    commit aa601d024424c40ae9a69b0c4e394a70ea0570c8:
  - x86: Use CHECK_FEATURE_PRESENT to check HLE [BZ #27398]
  - x86: Filter out more Intel CPUs for TSX [BZ #27398]
  - Fix glibc 2.34 ABI omission (missing GLIBC_2.34 in dynamic loader)
  - x86: Fix __wcsncmp_evex in strcmp-evex.S [BZ# 28755]
  - x86: Fix __wcsncmp_avx2 in strcmp-avx2.S [BZ# 28755]


author: Florian Weimer <fweimer@redhat.com> - 2.34-24
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 008003dc6e83439c5e04a744b7fd8197df19096e:
  - tst-socket-timestamp-compat.c: Check __TIMESIZE [BZ #28837]
  - Linux: Only generate 64 bit timestamps for 64 bit time_t recvmsg/recvmmsg
  - linux: Fix ancillary 64-bit time timestamp conversion (BZ #28349, BZ#28350)
  - support: Add support_socket_so_timestamp_time64


author: Florian Weimer <fweimer@redhat.com> - 2.34-25
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6eaf10cbb78d22eae7999d9de55f6b93999e0860:
  - socket: Do not use AF_NETLINK in __opensock
  - hurd if_index: Explicitly use AF_INET for if index discovery
  - Linux: Simplify __opensock and fix race condition [BZ #28353]
  - linux: __get_nprocs_sched: do not feed CPU_COUNT_S with garbage [BZ #28850]


author: Sergio Correia <scorreia@redhat.com> - 3.0.1-4
changelog:
  - Enable default RHEL configuration
    This enables syscall auditing by default.
    Resolves: rhbz#1924561


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.1
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2061731 - auparse missing information when used with --format-text (rhel-9.0)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101.2
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2070706 - Default systemd service config blocks audit watch rules in some directories (rhel 9.0)


author: Jeff Law <law@redhat.com> - 2.8.3-3
changelog:
  - TRACECMD_LIBRARY can reference things in TRACEEVENT_LIBRARY, so
    link TRACEEVENT_LIBRARY after TRACECMD_LIBRARY.


author: Tomáš Mráz <tmraz@redhat.com> 1.8.5-4
changelog:
  - FIPS selftest is run directly from the constructor
  - FIPS module is implicit with kernel FIPS flag


author: Pete Walter <pwalter@fedoraproject.org> - 65.1-1
changelog:
  - Update to 65.1
  - Add a patch from gentoo to fix the build on s390x
  - Drop arm test disabling patches as they are no longer needed


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.14-1
changelog:
  - Update to 3.9.14
  - Security fixes for CVE-2020-10735 and CVE-2021-28861
  Resolves: rhbz#2120642, rhbz#1834423, rhbz#2128249


author: Al Stone <ahs3@redhat.com> - 20190816-1
changelog:
  - Update to 20190816 source tree, including patch refeshes.
  - Add a patch to fix a non-zero exit from iasl -T ALL that actually succeeds
  - Remove the "template" tests; they have been subsumed by aslts.sh as they
    should be


author: Al Stone <ahs3@redhat.com> - 20191018-2
changelog:
  - Upstream does not build from source -- this release not pushed into
    the archives and noted here just for record keeping


author: Al Stone <ahs3@redhat.com> - 20191213-1
changelog:
  - Update to 20191213 source tree, including patch refeshes.
  - badexit patch no longer needed, so removed
  - GCC10 enforces -fno-common now, catching multiple places where linkage
    is not explicitly stated; added a patch to resolve the linker errors


author: Al Stone <ahs3@redhat.com> - 20200214-1
changelog:
  - Update to 20200214 source tree, including patch refreshes
  - Add patch to fix up issues where strings and 4-byte quantities
    get interchanged; C strings want to be null terminated now, but
    AML does not so using strncpy is painful.
  - Add patch for s390x specific issue (dbtest), where initializing a
    string on the stack behaves a little differently 
  - "PCC" is a defined Register() type, but "PlatformCommChannel" was
    being used instead; put it back to "PCC" as it should be in pcc.patch
  - Add another big-endian patch to compensate for changes to nsutils.c


author: Al Stone <ahs3@redhat.com> - 20200326-1
changelog:
  - Update to 20200326 source tree, including patch refreshes
  - Removed a couple of patches that got included upstream


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Kamil Dudka <kdudka@redhat.com> - 8.32-2
changelog:
  - make mknod work again in chroot without /proc being mounted (#1811038)
  - ls: restore 8.31 behavior on removed directories


author: Kamil Dudka <kdudka@redhat.com> - 8.32-17
changelog:
  - ls: fix crash printing SELinux context for unstatable files (#1921249)
  - split: fix --number=K/N to output correct part of file (#1921246)
  - expr: fix invalid read with unmatched \(...\) (#1919775)


author: Kamil Dudka <kdudka@redhat.com> - 8.32-22
changelog:
  - weaken the dependency on glibc-doc to reduce minimal installations
  - drop the last use of ncurses no longer needed (#1830318)
  - utimens: fix confusing arg type in internal func


author: Petr Kubat <pkubat@redhat.com> - 5.2.4-7
changelog:
  - Use relative path for COPYING files so that rpm moves them to correct place
    Related: rhbz#1741074


author: Julien Rische <jrische@redhat.com> - 1.19.1-14
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.19.1-20
changelog:
  - Fix OpenSSL 3 MD5 encyption in FIPS mode
  - Allow libkrad UDP/TCP connection to localhost in FIPS mode
  - Resolves: rhbz#2068458


author: Julien Rische <jrische@redhat.com> - 1.19.1-21
changelog:
  - Fix libkrad client cleanup
  - Allow use of larger RADIUS attributes in krad library
  - Resolves: rhbz#2100351


author: Julien Rische <jrische@redhat.com> - 1.19.1-22
changelog:
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2068935


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.67.0-1
changelog:
  - Fix handling transaction id in resolveTransactionItemReason (RhBug:2010259,2053014)
  - Remove deprecated assertions (RhBug:2027383)
  - Skip rich deps for autodetection of unmet dependencies (RhBug:2033130, 2048394)
  - Increase required rpm version since we use `rpmdbCookie()`
  - Add 'loongarch' support
  - Use dnf solv userdata to check versions and checksum (RhBug:2027445)
  - context: Substitute all repository config options (RhBug:2076853)


author: Lukas Hrazky <lhrazky@redhat.com> - 0.67.0-2
changelog:
  - Add obsoletes to filtering for advisory candidates
  - advisory upgrade: filter out advPkgs with different arch


author: Miro Hrončok <mhroncok@redhat.com> - 4.4.0-5
changelog:
  - Subpackage python2-decorator has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Dan Radez <dradez@redhat.com> - 4.8.0-6
changelog:
  - adding workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1914843
  - while we wait for upstream fix: https://github.com/pexpect/pexpect/issues/669


author: Petr Lautrbach <plautrba@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
      were dropped from libsepol.


author: Petr Lautrbach <plautrba@redhat.com> - 4.4.0-0.1.20201102git05e90ee
changelog:
  - Update to 05e90ee
  - Add /usr/bin/sechecker
  - Adapt to new libsepol filename transition structures
  - Rebuild with libsepol.so.2


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: David Rheinsberg <david.rheinsberg@gmail.com> - 22-3
changelog:
  - Drop dbus-daemon -> dbus-broker live system conversion. New setups will
    automatically pick up dbus-broker as default implementation. If you upgrade
    from pre-F30, you will not get any auto upgrade anymore. Deinstalling the
    dbus-daemon package will, however, automatically pick up dbus-broker.


author: Miro Hrončok <mhroncok@redhat.com> - 45.2.0-1
changelog:
  - Upgrade to 45.2.0 (#1775943)
  - https://setuptools.readthedocs.io/en/latest/history.html#v45-2-0
  - No longer supports Python 2


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-7
changelog:
  - Make the python-setuptools-wheel subpackage versioned (python3-setuptools-wheel),
    and move its contents to a versioned directory /usr/share/python3-wheels
  - Resolves: rhbz#1982668


author: Miro Hrončok <mhroncok@redhat.com> - 1:2.8.0-7
changelog:
  - Subpackage python2-dateutil has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Martin Osvald <mosvald@redhat.com> - 2.13.6-1
changelog:
  - csh.login: set PATH again (if empty) to prevent interpreter error (#1744106)
  - aliases: add pcp user (#1744091)
  - lang.csh: fix several variable substitution bugs and typos (#1746749)
  - don't set LANG as a per-shell variable
  - fix lang.csh script so it doesn't break tcsh -e scripts II (#1620004)
  - use full path for non-builtins in csh.cshrc, csh.login, lang.csh, lang.sh and profile (#1747493)


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-4
changelog:
  - Install an improved sample config
  - Fix permissions of osf-related configs
  - rule: Fix for potential off-by-one in cmd_add_loc()
  - netlink_delinearize: Fix suspicious calloc() call
  - netlink: Avoid memleak in error path of netlink_delinearize_obj()
  - netlink: Avoid memleak in error path of netlink_delinearize_table()
  - netlink: Avoid memleak in error path of netlink_delinearize_chain()
  - netlink: Avoid memleak in error path of netlink_delinearize_set()
  - json: Drop pointless assignment in exthdr_expr_json()
  - evaluate: Mark fall through case in str2hooknum()
  - parser_json: Fix for memleak in tcp option error path
  - parser_bison: Fix for implicit declaration of isalnum
  - main: fix nft --help output fallout from 719e4427
  - tests: add icmp/6 test where dependency should be left alone
  - payload: check icmp dependency before removing previous icmp expression


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-8
changelog:
  - tests: cover baecd1cf2685 ("segtree: Fix segfault when restoring a huge interval set")
  - segtree: Fix segfault when restoring a huge interval set


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-10
changelog:
  - tests: shell: better parameters for the interval stack overflow test
  - tests: shell: $NFT needs to be invoked unquoted


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-11
changelog:
  - tests: py: add dnat to port without defining destination address
  - evaluate: fix inet nat with no layer 3 info
  - include: missing sctp_chunk.h in Makefile.am
  - exthdr: Implement SCTP Chunk matching
  - scanner: sctp: Move to own scope
  - scanner: introduce start condition stack
  - json: Simplify non-tcpopt exthdr printing a bit


author: Than Ngo <than@redhat.com> - 3.17.0-8
changelog:
  - Resolves: #2127873, do not touch opencryptoki.conf if it is in place already and even if it is unchanged


author: Mark Wielaard <mjw@fedoraproject.org> - 0.178-1
changelog:
  - New upstream release.
    - debuginfod: New server, client tool and library to index and fetch
                  ELF/DWARF files addressed by build-id through HTTP.
    - doc: There are now some manual pages for functions and tools.
    - backends: The libebl libraries are no longer dynamically loaded
                through dlopen, but are now compiled into libdw.so directly.
    - readelf: -n, --notes now takes an optional "SECTION" argument.
               -p and -x now also handle section numbers.
               New option --dyn-sym to show just the dynamic symbol table.
    - libcpu: Add RISC-V disassembler.
    - libdw: Abbrevs and DIEs can now be read concurrently by multiple
             threads through the same Dwarf handle.
    - libdwfl: Will try to use debuginfod when installed as fallback to
               retrieve ELF and DWARF debug data files by build-id.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.178-3
changelog:
  - Add elfutils-debuginfod-client Provides and Requires with depsuffix
    to get multilib dependencies correct. Add %{version}-%{release} to
    keep subpackages in sync.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.179-1
changelog:
  - New upstream release.
    debuginfod-client:
    - When DEBUGINFOD_PROGRESS is set and the program doesn't
      install its own debuginfod_progressfn_t show download
      progress on stderr.
    - DEBUGINFOD_TIMEOUT is now defined as seconds to get at
      least 100K, defaults to 90 seconds.
    - Default to $XDG_CACHE_HOME/debuginfod_client.
    - New functions debuginfod_set_user_data,
      debuginfod_get_user_data, debuginfod_get_url and
      debuginfod_add_http_header.
    - Support for file:// URLs.

    debuginfod:
    - Performance improvements through highly parallelized scanning
      and archive content caching.
    - Uses libarchive directly for reading rpm archives.
    - Support for indexing .deb/.ddeb archives through dpkg-deb
      or bsdtar.
    - Generic archive support through -Z EXT[=CMD]. Which can be
      used for example for arch-linux pacman files by using
      -Z '.tar.zst=zstdcat'.
    - Better logging using User-Agent and X-Forwarded-For headers.
    - More prometheus metrics.
    - Support for eliding dots or extraneous slashes in path names.

    debuginfod-find:
    - Accept /path/names in place of buildid hex.

    libelf:
    - Handle PN_XNUM in elf_getphdrnum before shdr 0 is cached
    - Ensure zlib resource cleanup on failure.

    libdwfl:
    - dwfl_linux_kernel_find_elf and dwfl_linux_kernel_report_offline
      now find and handle a compressed vmlinuz image.

    readelf, elflint:
    - Handle PT_GNU_PROPERTY.

    translations:
    - Updated Ukrainian translation.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.180-1
changelog:
  - New upstream release.
    elflint: Allow SHF_EXCLUDE as generic section flag when --gnu is given.
    libdw, readelf: Handle GCC LTO .gnu.debuglto_ prefix.
    libdw: Use correct CU to resolve file names in dwarf_decl_file.
    libdwfl: Handle debugaltlink in dwfl_standard_find_debuginfo.
    size: Also obey radix printing for bsd format.
    nm: Explicitly print weak 'V' or 'T' and common 'C' symbols.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.180-5
changelog:
  - Remove elfutils-libelf-devel-static and elfutils-devel-static subpackages.
  - Remove duplicate listing of sysconfig/debuginfod (config) file.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.181-1
changelog:
  - Upgrade to upstream 0.181
    - libelf: elf_update now compensates (fixes up) a bad sh_addralign
      for SHF_COMPRESSED sections.
    - libdebuginfod: configure now takes --enable-libdebuginfod=dummy or
      --disable-libdebuginfod for bootstrapping.
      DEBUGINFOD_URLS now accepts "scheme-free" urls
      (guessing at what the user meant, either http:// or file://)
    - readelf, elflint: Handle aarch64 bti, pac bits in dynamic table and
      gnu property notes.
    - libdw, readelf: Recognize DW_CFA_AARCH64_negate_ra_state. Allows
      unwinding on arm64 for code that is compiled for PAC
      (Pointer Authentication Code) as long as it isn't enabled.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@fedoraproject.org> - 0.183-1
changelog:
  - Upgrade to upstream 0.183
    - debuginfod: New thread-busy metric and more detailed error metrics.
      New --fdcache-mintmp and tracking of filesystem freespace.
    - debuginfod-client: DEBUGINFOD_SONAME macro added to debuginfod.h can
      be used to dlopen the libdebuginfod.so library.
      New function debuginfod_set_verbose_fd and DEBUGINFOD_VERBOSE
      environment variable.
    - config: profile.sh and profile.csh won't export DEBUGINFOD_URLS
      unless configured --enable-debuginfod-urls[=URLS]
    - elflint, readelf: Recognize SHF_GNU_RETAIN.
      Handle SHT_X86_64_UNWIND as valid relocation target type.


author: Mark Wielaard <mjw@redhat.com> - 0.185-1
changelog:
  - Upgrade to upstream 0.185
    - debuginfod-client: Simplify curl handle reuse so downloads which
                         return an error are retried.
    - elfcompress: Always exit with code 0 when the operation succeeds
                   (even when nothing was done). On error the exit code
                   is now always 1.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Nick Clifton <nickc@redhat.com> - 2.34-1
changelog:
  - Rebase to GNU Binutils 2.34.  (#1793098)
  - Retire: binutils-improved-note-merging.patch
  - Retire: binutils-CVE-2019-17451.patch
  - Retire: binutils-CVE-2019-17450.patch
  - Retire: binutils-addr2line-fixes.patch


author: Nick Clifton <nickc@redhat.com> - 2.34-5
changelog:
  - Rebase to tip of GNU Binutils 2.34 branch, brining in LTO fixes.
  - Retire: binutils-nm-lto-plugin.patch


author: Nick Clifton <nickc@redhat.com> - 2.34-6
changelog:
  - Enhance the error message displayed by the BFD library when it fails to load a plugin.  (#1836618)


author: Jeff Law <law@redhat.com> - 2.34-9
changelog:
  - Fix configure test compromised by LTO.  Add appropriate BuildRequires
    and force rebuliding the configure files in the appropriate dirs
  - Fix various warnings exposed by LTO.


author: Nick Clifton <nickc@redhat.com> - 2.35.1-1
changelog:
  - Rebase to GNU Binutils 2.35.1 release.
  - Retire: binutils-gas-dwarf-level-4.patch
  - Retire: binutils-aarch64-plt-sh_entsize.patch
  - Retire: binutils-ppc-rename-xvcvbf16sp-to-xvcvbf16spn.patch
  - Retire: binutils-dwarf-5-fixes.patch


author: Nick Clifton <nickc@redhat.com> - 2.35.1-41
changelog:
  - Prevent an illegal memory access when reading relocations for secondary reloc sections.  (#1937784)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-1
changelog:
  - Fix an illegal memory access when parsing a corrupt ELF file.  (#1950481)
  - Fix excessive memory consumption parsing corrupt DWARF information. (#1947969)
  - Rebase to GNU Binutils 2.35.2.
  - Retire: binutils-2.35.1-update.patch
  - Retire: binutils-gas-auto-dwarf-5.patch
  - Retire: binutils-DWARF-5-line-number-parsing.patch


author: Nick Clifton <nickc@redhat.com> - 2.35.2-2
changelog:
  - Fix potential buffer corruption in sha1 code in libiberty library.  (#1954138)
  - Fix potential buffer corruption in sha1 code in linker.  (#1954139)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.1-7
changelog:
  - make avahi and nss-mdns recommended in main package - so users with older printers
    can install cups without it


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.1-9
changelog:
  - 1826330 - CVE-2020-3898 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3-2
changelog:
  - 1838455 - ipp/socket backends connect to turned off device for eternity (contimeout is not applied)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3-6
changelog:
  - fix patch errors in failover patch
  - cgi script creates a bad uri in web ui
  - ipptool doesn't support mdns uris


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3-16
changelog:
  - backport cups-ipptool-mdns-uri.patch from upstream
  - backport cups-prioritize-print-color-mode.patch from upstream


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3-20
changelog:
  - fix memory leak during device discovery
  - remove logrotate patches and support - journal is now default
  - remove eggcups patch - seems to cause no harm
  - journal is in Fedora for long time - no need to mention it is Fedora syslog
  - fix packaging of printerapp manpages
  - wheel is now in system groups by default
  - remove old scripts for older migrations
  - CREDITS is now in markdown format, so we don't need to convert
  - fix requires on nss-mdns for cups-printerapp
  - take SNMP OID from upstream
  - rename unit files and update their patches


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3-20
changelog:
  - make unit files writeable by root
  - remove %post scriptlet - it is covered by drop-in now
  - remove cups-filter-debug.patch
  - backport cups-synconclose.patch from upstream


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op1-3
changelog:
  - remove nss-mdns dependency - let the user decide whether use resolved or nss-mdns
  - remove cups dependency on cups-ipptool - actually not needed


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op1-4
changelog:
  - fix for CVE-2020-10001
  - recommend nss-mdns for Fedora to have a working default for now
  - 1921881 - [abrt] cups: __strcmp_avx2(): help.cgi killed by SIGSEGV
  - 1909980 - cupsd crashes on parsing malformed Brother PPD


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-6
changelog:
  - 1960160 - PreserveJobHistory/JobFiles aren't applied after the first cupsd restart right after successful print


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-9
changelog:
  - 2018948 - Unauthenticated users can't move print jobs in Web UI
  - 1999955 - Printing of banner before PCL file only prints banner
  - 2006713 - Trying to restart and hold a job doesn't work


author: Tom Stellard <tstellar@redhat.com> - 3.1-2
changelog:
  - Use make macros
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use -fno-semantic-interposition and more make macros


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-4
changelog:
  - Use libsepol.so.2
  - Convert matchpathcon to selabel_lookup()
  - Change userspace AVC setenforce and policy load messages to audit
    format
  - Remove trailing slash on selabel_file lookups
  - Use kernel status page by default


author: Petr Lautrbach <plautrba@redhat.com> - 3.2-3
changelog:
  - selinux_check_passwd_access_internal(): respect deny_unknown
  - Silence -Wstringop-overflow warning from gcc 10.3.1
  - Fixed misc compiler and static analyzer findings


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Phil Sutter <psutter@redhat.com> - 1:0.9.8-13
changelog:
  - tests: extend dtype test case to cover expression with integer type
  - evaluate: set evaluation context for set elements


author: Phil Sutter <psutter@redhat.com> [1.0.4-2.el9]
changelog:
  - intervals: Do not sort cached set elements over and over again (Phil Sutter) [1917398]
  - intervals: do not empty cache for maps (Phil Sutter) [1917398]
  - intervals: do not report exact overlaps for new elements (Phil Sutter) [1917398]
  - rule: collapse set element commands (Phil Sutter) [1917398]
  - tests: shell: runtime set element automerge (Phil Sutter) [1917398]


author: Jeff Law <law@redhat.com> - 1:1.9.11-4
changelog:
  - Fix buglet exposed by gcc-11 -Warray-parameter
  - Temporarily disable -Wstringop-overflow due to false positive in gcc-11


author: Jeff Law <law@redhat.com> - 1:1.9.11-5
changelog:
  - Re-enable -Wstringop-overflow and instead make the problematical
    pointer volatile to avoid the false positive diagnostic


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-1
changelog:
  - The patches are for SSL3 compatibility. These can probably be
    removed when upstream tboot fully implements SSL3.
  - Upgrade to latest upstream.
  - Remove trousers dependency.
    Resolves: rhbz#1922002
    Resolves: rhbz#1870520
    Resolves: rhbz#1927374


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-2
changelog:
  - Bump the NVR as a result of including the gating.yaml file in
    the git repo.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-3
changelog:
  - Add the -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m32 -march=i686 -mtune=generic -msse2 -mfpmath=sse -mstackrealign -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection and -Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  macros to assure the
    build meets RHEL security requirements.
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.2-4
changelog:
  - From Miroslave Vadkerti:
    Onboarding tests to RHEL9 in BaseOS CI requires action, adding
    test configuration in our "dispatcher" configuration for RHEL9:
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/blob/production/brew-dispatcher-rhel9.yaml
    Test config was added for tboot in the following MR.
    https://gitlab.cee.redhat.com/baseos-qe/citool-config/-/merge_requests/2686
    Resolves: rhbz#1922002


author: Tony Camuso <tcamuso@redhat.com> - 1:1.10.5-1
changelog:
  - Upgrade to tboot-1.10.5-1 for fixes and updates.
  - Added a Requires line to install grub2-efi-x64-modules
  - Added a scriptlet to the tboot.spec file to automatically install
    grub2-efi-x64-modules and move them to the correct directory.
  - Removed three patches that are no longer needed.
  - Added two patches from upstream, one for a fix, the other cosemetic.
  - Resolves: rhbz#2041766
    Resolves: rhbz#2040083


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-19
changelog:
  - IBM CRC32 optimalization for POWER 8+ architectures re-add
  - fixed firefox crash duer to zlib (#1741266)
  - added test for crc32


author: Ondrej Dubaj <odubaj@redhat.com> - 1.2.11-20
changelog:
  - Added -DDFLTCC parameter to configure to enable 
  - Z hardware-accelerated deflate for s390x architectures (#1659433)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.1.16-1
changelog:
  - Update to 0.1.16
  - Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
  - Fix memory leaks and resource leaks


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - Make keeping connection more reliable (jhnidek@redhat.com)
  - Small improvements of keep alive (jhnidek@redhat.com)
  - Keep TCP/TLS connection alive and close connection properly
    (jhnidek@redhat.com)
  - ENT-4700: Switch away from 'imp' (mhorky@redhat.com)
  - ENT-4088: Fix flake8 error E731 (mhorky@redhat.com)
  - ENT-4048: Fix flake8 error E501 (mhorky@redhat.com)
  - ENT-240: Add --no-progress-messages CLI option (mhorky@redhat.com)
  - ENT-240: Use spinner to indicate that API communication is pending
    (mhorky@redhat.com)
  - ENT-240: Make verbose messages translatable (mhorky@redhat.com)
  - ENT-240: Make subscription-manager more verbose (mhorky@redhat.com)
  - 2075455: enable sslverifystatus on repos if advertized by CP
    (ptoscano@redhat.com)
  - RepoUpdateActionCommand: lazy load the consumer auth (ptoscano@redhat.com)
  - 2043331: Do not delete installed SCA cert during registration
    (jhnidek@redhat.com)
  - Remove Group tag from .spec file for RHEL/Fedora (jhnidek@redhat.com)
  - 2073354: Print correct status, when access mode has changed
    (jhnidek@redhat.com)
  - flake8: ignore the build directory (ptoscano@redhat.com)
  - Remove ownership of /etc/rhsm (csnyder@redhat.com)
  - Update translation files (noreply@weblate.org)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Revert "build: pin flake8 to < 4" (ptoscano@redhat.com)
  - build: simplify flake8 run (ptoscano@redhat.com)
  - flake8: improve the config a bit (ptoscano@redhat.com)
  - jenkins: run stylish.sh with -e (ptoscano@redhat.com)
  - flake8: simplify/update config (ptoscano@redhat.com)
  - tests: remove unused exception variable (ptoscano@redhat.com)
  - Drop cockpit sources & related bits (ptoscano@redhat.com)
  - cockpit: test with split subscription-manager-cockpit (ptoscano@redhat.com)
  - Remove print statements from test suite (mhorky@redhat.com)
  - Run CI's pytest with verbose flag (mhorky@redhat.com)
  - Optimize rhsmlib DBus test strings (mhorky@redhat.com)
  - Change names of some directories in test/ (mhorky@redhat.com)
  - Reorder rhsmlib tests (mhorky@redhat.com)
  - refresh: clear also the release status (ptoscano@redhat.com)
  - 2074110: clear the release cache on release change (ptoscano@redhat.com)
  - Add gcp_license_codes to system facts. (jhnidek@redhat.com)
  - Pass version to make in debian/rules using 'pkg-info.mk' (reisner@atix.de)
  - Refactored rpm-version to pkg-version (reisner@atix.de)
  - Ignore black commit hashes (mhorky@redhat.com)
  - Add check to YumPluginManager.enable_pkg_plugins() if system is using yum/dnf
    to prevent warnings on debian based systems (reisner@atix.de)
  - Extend HardwareCollector.get_distribution() to return ID and ID_LIKE
    (reisner@atix.de)
  - Format code with black==22.3.0 (mhorky@redhat.com)
  - Add Black to CI (mhorky@redhat.com)
  - Translated using Weblate (Georgian) (temuri.doghonadze@gmail.com)
  - Fix few grammar mistakes in rhsm.conf and man page (jhnidek@redhat.com)
  - 2058662: Fix inaccurate module status in combined profile
    (jhnidek@redhat.com)
  - Add file .git-blame-ignore-revs (mhorky@redhat.com)
  - Update configuration files for flake8 (mhorky@redhat.com)
  - Use double quotes for strings (mhorky@redhat.com)
  - Format the code with black (mhorky@redhat.com)
  - Custom facts should not influence unit tests of cloud-what
    (jhnidek@redhat.com)
  - Drop redhat-uep.pem (ptoscano@redhat.com)
  - Move redhat-entitlement-authority.pem to container plugin
    (ptoscano@redhat.com)
  - Drop subscription-manager-rhsm-certificates package (ptoscano@redhat.com)
  - spec: relax subscription-manager-rhsm-certificates requires
    (ptoscano@redhat.com)
  - test: Rely on insights-client.service to succeed in testSubAndInAndFail
    (mvollmer@redhat.com)
  - integration-tests: Run testSubAndInAndFail with "setenforce 0"
    (mvollmer@redhat.com)
  - integration-test: Use custom TLS certs for mock-insights
    (mvollmer@redhat.com)
  - Keep the user namespace from the host (csnyder@redhat.com)
  - tracking return values of tests (jmolet@redhat.com)
  - Adding containers for development and test (csnyder@redhat.com)
  - Drop old git-checkcommits bits (ptoscano@redhat.com)
  - tests: drop no more needed bits (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase (ptoscano@redhat.com)
  - Drop the rel-eng directory for old tito versions (ptoscano@redhat.com)
  - tests: switch away from SyspurposeTestBase.assertRaisesNothing()
    (ptoscano@redhat.com)
  - tests: use write_to_file_utf8() from syspurpose.utils (ptoscano@redhat.com)
  - tests: directly use tempfile.TemporaryDirectory() (ptoscano@redhat.com)
  - tests: use Capture from the main sub-man fitxure module (ptoscano@redhat.com)
  - tests: switch from assert_equal_dict() to assertEqual() (ptoscano@redhat.com)
  - tests: switch from assert_string_equals() to assertEqual()
    (ptoscano@redhat.com)
  - cockpit: bump API version to 264 (ptoscano@redhat.com)
  - cockpit: simplify skipUnlessDistroFamily() to properly skip tests
    (ptoscano@redhat.com)
  - cockpit: drop rhel-atomic bits (ptoscano@redhat.com)
  - cockpit: bump candlepin minimum waiting time to 10 seconds
    (ptoscano@redhat.com)
  - integration-test: Updates for newer insights-client (mvollmer@redhat.com)
  - 2018221: Cockpit use "Organization ID" in label (jhnidek@redhat.com)
  - 2059631: rhsm.conf: fix typo in comment (ptoscano@redhat.com)
  - 2057053: Improve API of detection of cloud-what (jhnidek@redhat.com)
  - 1935446: Revert "Revert "1935446: Use updated cert with SHA-256 algorithm""
    (ptoscano@redhat.com)
  - cockpit: set $RPM_BUILD_ROOT w/ installing (ptoscano@redhat.com)
  - 2057053: Facts: do no use heuristics detection of cloud (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (suanand@redhat.com)
  - Translated using Weblate (Italian) (toscano.pino@tiscali.it)
  - Improve azure determination method (suttner@atix.de)
  - 2056896: Handle all exceptions of gathering data properly
    (jhnidek@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.29-1
changelog:
  - Translated using Weblate (Japanese) (suanand@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5215: Handle all exceptions caused by network problems
    (mhorky@redhat.com)
  - ENT-5215: Handle errors raised in DNF plugin (mhorky@redhat.com)
  - Make TestProfileManager subclass of SubManFixture (mhorky@redhat.com)
  - ENT-5054: Drop singleton implementation in rhsmlib/utils.py
    (mhorky@redhat.com)
  - Rename test file for rhsm/utils.py (mhorky@redhat.com)
  - ENT-5054: Create singleton decorators in rhsm/utils.py (mhorky@redhat.com)
  - zypper: drop dead python-dmidecode usage (ptoscano@redhat.com)
  - facts: drop DmiFirmwareInfoCollector (ptoscano@redhat.com)
  - facts: switch to DmidecodeFactCollector for DMI facts (ptoscano@redhat.com)
  - facts: add dmidecode parser and facts collector (ptoscano@redhat.com)
  - cloud-what: switch MiniHostCollector to dmidecode(1) (ptoscano@redhat.com)
  - 2096446: Make 'rhsm-debug' autocomplete --no-progress-messages
    (mhorky@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Translated using Weblate (Korean) (simmon@nplob.com)
  - 2092014: Do not use injections in rhsm (mhorky@redhat.com)
  - ci: run rpmlint as part of stylish (ptoscano@redhat.com)
  - build: switch rpmlint check to rpmlint 2.x (ptoscano@redhat.com)
  - ci: drop stylish job from Jenkins (ptoscano@redhat.com)
  - ci: add black & flake8 check using GitHub Actions (ptoscano@redhat.com)
  - build: install files without exec permissions (ptoscano@redhat.com)
  - 2092014: Disable progress messages when sub-man RPM is not installed
    (mhorky@redhat.com)


author: Christopher Snyder <csnyder@redhat.com> 1.29.30-1
changelog:
  - Fix issue, when connection is not shared (jhnidek@redhat.com)
  - Unit tests: Add stub class for SyspurposeComplianceStatusCache
    (jhnidek@redhat.com)
  - ENT-4664: Ensure tests clean up after themselves (mhorky@redhat.com)
  - Refactoring of cloud-what unit tests (jhnidek@redhat.com)
  - 2111035: Do not allow reusing TCP connection for rhsm.service
    (jhnidek@redhat.com)
  - spec: remove redundant License from python3-cloud-what (ptoscano@redhat.com)
  - Ensure tests don't fail when run under root (mhorky@redhat.com)
  - Fix issue with unit tests (jhnidek@redhat.com)
  - 2111757: Make parsing of HTTP headers more reliable (jhnidek@redhat.com)
  - Translated using Weblate (Chinese (Simplified) (zh_CN)) (ljanda@redhat.com)
  - Update translation files (noreply@weblate.org)
  - ENT-5286: Unify environment variable evaluation (mhorky@redhat.com)
  - Use dmidecode on aarch64 (jhnidek@redhat.com)
  - New extraction for translatable strings (ptoscano@redhat.com)
  - Increase security level for zypper repos managed by sub-man (suttner@atix.de)
  - ENT-5271: Fix spelling of Candlepin API endpoint description
    (mhorky@redhat.com)


author: Pino Toscano <ptoscano@redhat.com> 1.29.30.1-1
changelog:
  - tito: add rhel 9.1 releaser (ptoscano@redhat.com)
  - 2151829: do not detect containers in OCP as such (ptoscano@redhat.com)
  - tests: extend InContainerTests for path checks (ptoscano@redhat.com)
  - [1.29.30] 2142611: Clear progress messages properly (mhorky@redhat.com)
  - Fix possible parsing issues of dmidecode output (mhorky@redhat.com)
  - cockpit: disable the reference branch for sub-man-cockpit
    (ptoscano@redhat.com)


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.3
changelog:
  - update from trunk
    - PRs ada/97504, analyzer/96608, analyzer/97489, analyzer/97514,
  	analyzer/97568, analyzer/97608, bootstrap/97451, c++/82239, c++/86773,
  	c++/91741, c++/94799, c++/95132, c++/96241, c++/96575, c++/96675,
  	c++/96742, c++/97328, c++/97438, c++/97511, c++/97573, c/94722,
  	c/97463, fortran/45516, fortran/97454, gcov-profile/97461, ipa/97445,
  	ipa/97576, ipa/97586, libstdc++/94268, libstdc++/95592,
  	libstdc++/95609, libstdc++/95917, libstdc++/96713, libstdc++/97512,
  	libstdc++/97570, lto/96680, lto/97524, middle-end/92942,
  	middle-end/97521, middle-end/97552, rtl-optimization/97249,
  	rtl-optimization/97439, rtl-optimization/97497, sanitizer/97414,
  	target/87767, target/95151, target/95458, target/97360, target/97502,
  	target/97506, target/97535, testsuite/81690, testsuite/97590,
  	tree-optimization/66552, tree-optimization/97164,
  	tree-optimization/97360, tree-optimization/97456,
  	tree-optimization/97457, tree-optimization/97466,
  	tree-optimization/97467, tree-optimization/97486,
  	tree-optimization/97488, tree-optimization/97496,
  	tree-optimization/97500, tree-optimization/97501,
  	tree-optimization/97503, tree-optimization/97505,
  	tree-optimization/97515, tree-optimization/97520,
  	tree-optimization/97538, tree-optimization/97539,
  	tree-optimization/97546, tree-optimization/97555,
  	tree-optimization/97560, tree-optimization/97567,
  	tree-optimization/97615
  - for ELN default to -march=x86-64-v2 for x86 64-bit compilation and
    for s390x to -march=z13 -mtune=arch13


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.4
changelog:
  - update from trunk
    - PRs ada/97805, ada/97859, analyzer/97668, analyzer/97893, bootstrap/57076,
  	bootstrap/97666, bootstrap/97857, c++/25814, c++/52830, c++/63287,
  	c++/67453, c++/78209, c++/81660, c++/87765, c++/88115, c++/88982,
  	c++/89565, c++/90799, c++/91318, c++/93107, c++/93907, c++/95808,
  	c++/97388, c++/97412, c++/97453, c++/97479, c++/97518, c++/97523,
  	c++/97632, c++/97663, c++/97670, c++/97675, c++/97762, c++/97790,
  	c++/97871, c++/97877, c++/97895, c++/97905, c++/97918, c/90628,
  	c/97748, c/97860, d/97644, d/97842, d/97843, debug/97060, debug/97599,
  	debug/97718, driver/97574, fortran/90111, fortran/92793,
  	fortran/94358, fortran/95847, fortran/97652, fortran/97655,
  	fortran/97768, fortran/97782, ipa/97578, ipa/97660, ipa/97695,
  	ipa/97698, ipa/97816, jit/87291, libstdc++/55394, libstdc++/66146,
  	libstdc++/83938, libstdc++/84323, libstdc++/88101, libstdc++/92285,
  	libstdc++/92546, libstdc++/93421, libstdc++/93456, libstdc++/94971,
  	libstdc++/95989, libstdc++/96269, libstdc++/96958, libstdc++/97415,
  	libstdc++/97600, libstdc++/97613, libstdc++/97719, libstdc++/97729,
  	libstdc++/97731, libstdc++/97758, libstdc++/97798, libstdc++/97828,
  	libstdc++/97869, lto/97290, lto/97508, middle-end/85811,
  	middle-end/95673, middle-end/97267, middle-end/97556,
  	middle-end/97579, middle-end/97840, middle-end/97862,
  	middle-end/97879, objc/77404, objc/90707, objc/97854, other/97911,
  	pch/86674, pch/97593, preprocessor/97858, rtl-optimization/92180,
  	rtl-optimization/97705, sanitizer/95634, target/31799, target/85486,
  	target/91489, target/93449, target/96307, target/96770, target/96791,
  	target/96933, target/96967, target/96998, target/97140, target/97194,
  	target/97205, target/97326, target/97528, target/97532, target/97540,
  	target/97638, target/97682, target/97685, target/97715, target/97726,
  	target/97727, target/97730, target/97870, target/97873,
  	testsuite/80219, testsuite/85303, testsuite/97117, testsuite/97688,
  	testsuite/97788, testsuite/97797, testsuite/97803,
  	tree-optimization/80928, tree-optimization/83072,
  	tree-optimization/91029, tree-optimization/93781,
  	tree-optimization/94406, tree-optimization/96671,
  	tree-optimization/96789, tree-optimization/97223,
  	tree-optimization/97424, tree-optimization/97558,
  	tree-optimization/97609, tree-optimization/97623,
  	tree-optimization/97626, tree-optimization/97633,
  	tree-optimization/97650, tree-optimization/97678,
  	tree-optimization/97690, tree-optimization/97693,
  	tree-optimization/97706, tree-optimization/97709,
  	tree-optimization/97721, tree-optimization/97725,
  	tree-optimization/97732, tree-optimization/97733,
  	tree-optimization/97736, tree-optimization/97737,
  	tree-optimization/97741, tree-optimization/97746,
  	tree-optimization/97753, tree-optimization/97760,
  	tree-optimization/97761, tree-optimization/97764,
  	tree-optimization/97765, tree-optimization/97767,
  	tree-optimization/97769, tree-optimization/97780,
  	tree-optimization/97806, tree-optimization/97812,
  	tree-optimization/97830, tree-optimization/97835,
  	tree-optimization/97838, tree-optimization/97886,
  	tree-optimization/97888, tree-optimization/97897,
  	tree-optimization/97901
  - add BuildRequires: make and Requires: make, the latter for -flto reasons


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.5
changelog:
  - update from trunk
    - PRs c++/94695, c++/97427, c++/97839, c++/97846, c++/97881, c++/97904,
  	c/95630, d/97889, libstdc++/97948, tree-optimization/95853


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.6
changelog:
  - update from trunk
    - PRs bootstrap/94982, bootstrap/97622, bootstrap/97933, c++/97899, c/97958,
  	fortran/85796, libstdc++/67791, libstdc++/97935, libstdc++/97936,
  	libstdc++/97944, middle-end/97943, middle-end/97956,
  	rtl-optimization/95862, target/91816, target/97534, target/97950,
  	tree-optimization/96929, tree-optimization/97849,
  	tree-optimization/97964


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.7
changelog:
  - update from trunk
    - PRs bootstrap/97983, c++/80780, c++/90629, c++/93093, c++/97187,
  	c++/97947, c++/97975, c++/97993, c++/98019, c++/98054, c++/98072,
  	c++/98104, c++/98107, c++/98115, c++/98116, c/65455, c/92935, c/97880,
  	c/98087, d/87788, d/87818, d/98025, debug/97989, fortran/95342,
  	fortran/98010, fortran/98011, fortran/98013, ipa/88702, ipa/98057,
  	ipa/98075, jit/97867, libgcc/97543, libgcc/97643, libstdc++/65480,
  	libstdc++/68735, libstdc++/93121, libstdc++/98001, libstdc++/98003,
  	middle-end/89428, middle-end/92936, middle-end/92940,
  	middle-end/93195, middle-end/93197, middle-end/94527,
  	middle-end/97373, middle-end/97595, middle-end/98070,
  	middle-end/98082, middle-end/98099, other/98027, plugins/98059,
  	preprocessor/97602, rtl-optimization/97459, rtl-optimization/97777,
  	rtl-optimization/97954, rtl-optimization/98037, target/96607,
  	target/96906, target/97642, target/97770, target/97939, target/98063,
  	target/98079, target/98086, testsuite/98002, testsuite/98036,
  	testsuite/98085, tree-optimization/14799, tree-optimization/88702,
  	tree-optimization/96679, tree-optimization/96708,
  	tree-optimization/97630, tree-optimization/97953,
  	tree-optimization/97979, tree-optimization/97997,
  	tree-optimization/98024, tree-optimization/98048,
  	tree-optimization/98064, tree-optimization/98066,
  	tree-optimization/98084


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.8
changelog:
  - update from trunk
    - PRs ada/98230, bootstrap/98188, c++/57111, c++/59238, c++/68451,
  	c++/78173, c++/91506, c++/93083, c++/96299, c++/97093, c++/97517,
  	c++/98043, c++/98103, c++/98122, c++/98126, c++/98130, c++/98187,
  	c++/98193, c/97981, c/98200, d/98277, fortran/90207, fortran/98016,
  	fortran/98022, gcov-profile/98273, libstdc++/98108, libstdc++/98226,
  	lto/98275, middle-end/94600, middle-end/98160, middle-end/98166,
  	middle-end/98183, middle-end/98190, middle-end/98205,
  	middle-end/98264, rtl-optimization/97092, rtl-optimization/97421,
  	rtl-optimization/98212, rtl-optimization/98229, sanitizer/98204,
  	target/58901, target/66791, target/92469, target/94440, target/95294,
  	target/96226, target/96470, target/97865, target/97872, target/98100,
  	target/98147, target/98152, target/98161, target/98162, target/98219,
  	target/98274, testsuite/95900, testsuite/98123, testsuite/98156,
  	testsuite/98239, testsuite/98240, testsuite/98242, testsuite/98244,
  	tree-optimization/95582, tree-optimization/96094,
  	tree-optimization/96232, tree-optimization/96272,
  	tree-optimization/96344, tree-optimization/96685,
  	tree-optimization/97559, tree-optimization/97929,
  	tree-optimization/98069, tree-optimization/98113,
  	tree-optimization/98117, tree-optimization/98137,
  	tree-optimization/98169, tree-optimization/98174,
  	tree-optimization/98180, tree-optimization/98182,
  	tree-optimization/98191, tree-optimization/98192,
  	tree-optimization/98199, tree-optimization/98211,
  	tree-optimization/98213, tree-optimization/98235,
  	tree-optimization/98256
    - C++20 modules support
    - fix up __patchable_function_entries handling when gcc is configured
      against recent binutils (#1907945)
  - fix up handling of non-memory VIEW_CONVERT_EXPRs in PRE
    (PR tree-optimization/98282)


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.10
changelog:
  - apply workaround for profiledbootstrap x86_64 failure
  - put g++-mapper-server into the right directory


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.11
changelog:
  - update from trunk
    - PRs bootstrap/98300, bootstrap/98380, bootstrap/98412, c++/67343,
  	c++/93480, c++/96840, c++/98340, c++/98343, c++/98353, c++/98383,
  	c/98047, c/98260, d/98067, fortran/83118, fortran/92587,
  	fortran/96012, fortran/98284, fortran/98307, go/98402,
  	libstdc++/46447, libstdc++/93151, libstdc++/96083, libstdc++/98319,
  	libstdc++/98344, libstdc++/98370, libstdc++/98374, libstdc++/98377,
  	middle-end/98366, other/98400, other/98409, rtl-optimization/98271,
  	rtl-optimization/98276, rtl-optimization/98289,
  	rtl-optimization/98347, sanitizer/97868, target/96793, target/98146,
  	target/98177, target/98280, tree-optimization/96239,
  	tree-optimization/97750, tree-optimization/98272,
  	tree-optimization/98279, tree-optimization/98378,
  	tree-optimization/98407


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.12
changelog:
  - update from trunk
    - PRs analyzer/97072, analyzer/97074, analyzer/98073, analyzer/98223,
  	analyzer/98293, analyzer/98564, analyzer/98580, bootstrap/98324,
  	bootstrap/98506, c++/82099, c++/95768, c++/96045, c++/96504,
  	c++/97597, c++/98206, c++/98305, c++/98316, c++/98329, c++/98332,
  	c++/98353, c++/98413, c++/98441, c++/98469, c++/98515, c++/98551,
  	c/98029, d/98427, fortran/83118, fortran/93701, fortran/93794,
  	fortran/93833, fortran/97612, fortran/97694, fortran/97723,
  	fortran/98022, fortran/98458, libstdc++/98384, middle-end/98160,
  	middle-end/98578, other/98437, rtl-optimization/97144,
  	rtl-optimization/97978, rtl-optimization/98214,
  	rtl-optimization/98334, rtl-optimization/98403, target/89057,
  	target/96793, target/97269, target/98461, target/98482, target/98495,
  	target/98521, target/98522, target/98567, target/98585,
  	testsuite/98489, testsuite/98566, tree-optimization/56719,
  	tree-optimization/94785, tree-optimization/94802,
  	tree-optimization/94994, tree-optimization/95401,
  	tree-optimization/95582, tree-optimization/95771,
  	tree-optimization/96239, tree-optimization/96782,
  	tree-optimization/96928, tree-optimization/96930,
  	tree-optimization/98282, tree-optimization/98291,
  	tree-optimization/98302, tree-optimization/98308,
  	tree-optimization/98371, tree-optimization/98381,
  	tree-optimization/98393, tree-optimization/98428,
  	tree-optimization/98464, tree-optimization/98474,
  	tree-optimization/98513, tree-optimization/98514,
  	tree-optimization/98516, tree-optimization/98544,
  	tree-optimization/98560, tree-optimization/98568


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.13
changelog:
  - update from trunk
    - PRs analyzer/98628, c++/97284, c++/98481, c++/98556, c++/98611, c++/98620,
  	c/98592, debug/97714, jit/98615, libstdc++/98613,
  	rtl-optimization/98603, target/97875, target/97969, target/98612,
  	testsuite/98225, testsuite/98602, tree-optimization/91403,
  	tree-optimization/95731, tree-optimization/95852,
  	tree-optimization/95867, tree-optimization/98526,
  	tree-optimization/98550, tree-optimization/98629
    - fix ICEs in print_mem_ref (#1915400, #1915437, #1915781, PR c/98597)


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.14
changelog:
  - update from trunk
    - PRs ada/98595, analyzer/98679, bootstrap/98696, c++/63707, c++/98231,
  	c++/98372, c++/98538, c++/98591, c++/98626, c++/98642, fortran/98661,
  	ipa/98652, jit/98586, libgomp/65099, libstdc++/98466, libstdc++/98471,
  	preprocessor/95253, target/70454, target/71233, target/88836,
  	target/95905, target/96938, target/98667, target/98671, target/98676,
  	testsuite/96098, testsuite/96147, tree-optimization/92645,
  	tree-optimization/96376, tree-optimization/96669,
  	tree-optimization/96681, tree-optimization/96688,
  	tree-optimization/96691, tree-optimization/98455,
  	tree-optimization/98597, tree-optimization/98640,
  	tree-optimization/98674, tree-optimization/98685
    - fix up pmovzx permutation SSE4.1 patterns (#1916240, PR target/98670)


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.15
changelog:
  - update from trunk
    - PRs debug/98708, debug/98716, ipa/98222, libstdc++/98725, target/97847,
  	testsuite/97299, testsuite/97494, testsuite/97987,
  	tree-optimization/96271
    - fix miscompilation of portable signed multiplication overflow check
      (#1916576, PR tree-optimization/98727)
    - switch to DWARF 5 by default
  - fix PRs c++/98672, c++/98687, c++/98742, middle-end/98638,
  	  tree-optimization/98721


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.16
changelog:
  - fix DWARF5 -g -flto -ffat-lto-objects, so that LTO sections can be stripped
    off later (PR debug/98765)
  - fix GOMP_task caller stack corruption on s390x
  - libgccjit DWARF5 fixes (PR debug/98751)


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.17
changelog:
  - update from trunk
    - PRs ada/98740, c++/41437, c++/58993, c++/71879, c++/82613, c++/95434,
  	c++/96623, c++/97399, c++/97966, c++/98333, c++/98530, c++/98545,
  	c++/98624, c++/98659, c++/98744, fortran/96320, fortran/98476,
  	fortran/98565, fortran/98757, fortran/98763, gcov-profile/98739,
  	ipa/97673, ipa/98330, ipa/98690, middle-end/98664, middle-end/98773,
  	middle-end/98793, rtl-optimization/92294, rtl-optimization/98694,
  	rtl-optimization/98722, rtl-optimization/98777, sanitizer/95693,
  	target/79251, target/96372, target/96891, target/98065, target/98093,
  	target/98348, target/98636, testsuite/97301, testsuite/98241,
  	testsuite/98795, tree-optimization/47059, tree-optimization/90248,
  	tree-optimization/96674, tree-optimization/98255,
  	tree-optimization/98535, tree-optimization/98758,
  	tree-optimization/98766, tree-optimization/98786
    - ensure for empty CUs -gdwarf-5 emits at least the required 0th directory
      and filename entry in the .debug_line section (#1919243, PR debug/98796)
  - fix aarch64 bug where emitted ubfix insn can't be assembled
    (PR target/98681)


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.18
changelog:
  - update from trunk
    - PRs ada/98228, bootstrap/98839, c++/33661, c++/88548, c++/94775,
  	c++/96137, c++/97474, c++/97566, c++/97874, c++/98463, c++/98646,
  	c++/98770, c++/98841, c++/98843, c++/98847, d/98806, debug/98331,
  	debug/98811, fortran/67539, fortran/70070, fortran/86470,
  	fortran/93924, fortran/93925, fortran/96843, fortran/98472,
  	fortran/98517, libstdc++/66414, lto/85574, middle-end/98726,
  	middle-end/98807, rtl-optimization/80960, rtl-optimization/97684,
  	rtl-optimization/98144, rtl-optimization/98863, sanitizer/98828,
  	target/97701, target/98730, target/98799, target/98827, target/98833,
  	target/98849, target/98853, testsuite/98771, testsuite/98870,
  	tree-optimization/97260, tree-optimization/97627,
  	tree-optimization/98854, tree-optimization/98866


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.19
changelog:
  - update from trunk
    - PRs analyzer/93355, analyzer/96374, analyzer/98575, analyzer/98918,
  	c++/20408, c++/84494, c++/90926, c++/95192, c++/96199, c++/96462,
  	c++/96905, c++/97804, c++/97878, c++/98295, c++/98326, c++/98355,
  	c++/98531, c++/98570, c++/98717, c++/98802, c++/98835, c++/98899,
  	c++/98926, c++/98929, c++/98944, c++/98947, c++/98951, c++/98994,
  	c/97882, c/97932, d/98910, d/98921, debug/98656, driver/98943,
  	fortran/91862, fortran/98913, libstdc++/70303, libstdc++/99021,
  	lto/96591, lto/98912, lto/98971, middle-end/97172, middle-end/97487,
  	middle-end/97971, middle-end/98465, middle-end/98974,
  	middle-end/99004, preprocessor/98882, rtl-optimization/96015,
  	target/97510, target/98172, target/98537, target/98743, target/98957,
  	testsuite/98243, testsuite/98325, tree-optimization/97960,
  	tree-optimization/98287, tree-optimization/98499,
  	tree-optimization/98848, tree-optimization/98855,
  	tree-optimization/98863, tree-optimization/98928,
  	tree-optimization/98937, tree-optimization/99017


author: Jakub Jelinek <jakub@redhat.com> 11.0.0-0.20
changelog:
  - update from trunk
    - PRs analyzer/94596, analyzer/98969, analyzer/99196, c++/94034, c++/94546,
  	c++/95468, c++/95888, c++/96251, c++/96926, c++/97246, c++/97582,
  	c++/97742, c++/98718, c++/98741, c++/98988, c++/99023, c++/99030,
  	c++/99031, c++/99033, c++/99035, c++/99039, c++/99040, c++/99062,
  	c++/99063, c++/99071, c++/99072, c++/99074, c++/99116, c++/99132,
  	c++/99150, c++/99153, c++/99174, c++/99208, c/97172, c/99055, c/99136,
  	c/99224, debug/96997, debug/98755, fortran/98342, fortran/98686,
  	fortran/98897, fortran/98979, fortran/99010, fortran/99027,
  	fortran/99043, fortran/99060, fortran/99111, fortran/99124,
  	fortran/99146, fortran/99171, fortran/99206, fortran/99226,
  	inline-asm/98096, inline-asm/99123, ipa/97346, ipa/99003, ipa/99029,
  	ipa/99034, jit/99126, libfortran/95647, libfortran/98825,
  	libgcc/99236, libstdc++/88881, libstdc++/97549, libstdc++/98389,
  	libstdc++/99058, libstdc++/99077, libstdc++/99096, libstdc++/99181,
  	libstdc++/99261, middle-end/38474, middle-end/99007, middle-end/99109,
  	middle-end/99122, preprocessor/96391, rtl-optimization/96264,
  	rtl-optimization/98439, rtl-optimization/98791,
  	rtl-optimization/98872, rtl-optimization/99054, sanitizer/99106,
  	sanitizer/99168, target/85074, target/96166, target/97417,
  	target/98491, target/98657, target/98931, target/98998, target/99025,
  	target/99041, target/99100, target/99104, target/99113, target/99134,
  	target/99157, testsuite/99173, translation/99167,
  	tree-optimization/38474, tree-optimization/92879,
  	tree-optimization/98772, tree-optimization/99002,
  	tree-optimization/99024, tree-optimization/99026,
  	tree-optimization/99079, tree-optimization/99142,
  	tree-optimization/99149, tree-optimization/99165,
  	tree-optimization/99204, tree-optimization/99220,
  	tree-optimization/99225


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.1
changelog:
  - update from trunk
    - PRs ada/98996, ada/99020, ada/99095, ada/99264, analyzer/96374,
  	analyzer/99193, bootstrap/92002, bootstrap/98590, c++/82959,
  	c++/88146, c++/90333, c++/94521, c++/95451, c++/95615, c++/95616,
  	c++/95675, c++/95822, c++/96078, c++/96330, c++/96443, c++/96474,
  	c++/96960, c++/97034, c++/97587, c++/98118, c++/98318, c++/98810,
  	c++/98990, c++/99009, c++/99103, c++/99120, c++/99166, c++/99170,
  	c++/99176, c++/99213, c++/99245, c++/99251, c++/99287, c++/99294,
  	c++/99344, c++/99362, c++/99365, c++/99374, c++/99377, c++/99389,
  	c/99137, c/99275, c/99304, c/99323, c/99324, c/99325, c/99363,
  	d/99337, debug/66668, debug/99090, debug/99319, fortran/57871,
  	fortran/99300, fortran/99303, fortran/99355, gcov-profile/97461,
  	gcov-profile/99105, gcov-profile/99385, gcov-profile/99406, ipa/98078,
  	ipa/98338, libbacktrace/98818, libfortran/81986, libfortran/99218,
  	libgomp/98738, libstdc++/99265, libstdc++/99270, libstdc++/99301,
  	libstdc++/99382, libstdc++/99396, middle-end/93235, middle-end/94655,
  	middle-end/95757, middle-end/96963, middle-end/97172,
  	middle-end/97855, middle-end/99276, middle-end/99281,
  	middle-end/99295, middle-end/99322, other/99288,
  	rtl-optimization/99376, target/44107, target/48097, target/95798,
  	target/98996, target/99085, target/99234, target/99271, target/99279,
  	target/99313, target/99321, target/99381, testsuite/99233,
  	tree-optimization/80635, tree-optimization/99253
  - fix debug info for __fp16 constants (PR debug/99388)


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.2
changelog:
  - update from trunk
    - PRs c++/90448, c++/96268, c++/96749, c++/97973, c++/98480, c++/98704,
  	c++/99047, c++/99108, c++/99238, c++/99248, c++/99285, c++/99423,
  	c++/99436, c++/99459, c++/99472, c++/99496, c++/99500, c++/99507,
  	c++/99508, c++/99509, c++/99528, c++/99601, c++/99613, c++/99617,
  	fortran/49278, fortran/96983, fortran/97927, fortran/98858,
  	fortran/99125, fortran/99205, fortran/99345, fortran/99514,
  	fortran/99545, ipa/99517, libstdc++/99172, libstdc++/99341,
  	libstdc++/99413, libstdc++/99536, libstdc++/99537, middle-end/97631,
  	middle-end/98266, middle-end/99502, middle-end/99641, objc++/49070,
  	sanitizer/98920, target/98092, target/98959, target/99070,
  	target/99094, target/99102, target/99422, target/99437, target/99454,
  	target/99463, target/99464, target/99492, target/99504, target/99542,
  	target/99563, target/99592, target/99600, testsuite/97680,
  	testsuite/98245, testsuite/99292, testsuite/99498, testsuite/99626,
  	testsuite/99636, tree-optimization/98834, tree-optimization/99305,
  	tree-optimization/99489, tree-optimization/99510,
  	tree-optimization/99523, tree-optimization/99544
    - fix ARM ICE in neon_output_shift_immediate (#1922599, PR target/99593)
  - avoid false positive aarch64 -Wpsabi notes in some cases (PR target/91710)
  - fix a -fcompare-debug failure caused by C FE bug (PR debug/99230)
  - fix up -gdwarf-5 -gsplit-dwarf ranges handling (PR debug/99490)
  - fix up handling of > 64 bit constants in dwarf2out (PR debug/99562,
    PR debug/66728)
  - reject invalid C++ structured bindings that need reference to void
    (PR c++/99650)
  - include private isl 0.18 in the package instead of relying on old
    distro version


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.3
changelog:
  - update from trunk
    - PRs analyzer/99614, c++/99239, c++/99283, c++/99318, c++/99425, c++/99456,
  	c++/99480, c++/99687, c/99588, fortran/93660, fortran/99688,
  	rtl-optimization/99680, target/97252, target/97926, target/98914,
  	target/99540, target/99581, target/99652, target/99660, target/99661,
  	target/99663, target/99679, target/99702, target/99704, target/99733,
  	tree-optimization/99296, tree-optimization/99656,
  	tree-optimization/99694, tree-optimization/99721


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.4
changelog:
  - update from trunk
    - PRs ada/99802, analyzer/93695, analyzer/99044, analyzer/99716,
  	analyzer/99771, bootstrap/98860, c++/90664, c++/91217, c++/91416,
  	c++/94751, c++/97900, c++/97938, c++/98352, c++/99331, c++/99445,
  	c++/99565, c++/99583, c++/99584, c++/99586, c++/99643, c++/99672,
  	c++/99705, c++/99745, c++/99790, c++/99815, c++/99831, c++/99869,
  	d/91595, d/99691, debug/99334, fortran/99369, fortran/99602,
  	fortran/99651, fortran/99818, fortran/99840, ipa/98265, ipa/99122,
  	ipa/99466, ipa/99751, libstdc++/99533, lto/99447, middle-end/65182,
  	rtl-optimization/97141, rtl-optimization/98726,
  	rtl-optimization/99863, target/96974, target/97653, target/98119,
  	target/98136, target/98209, target/99037, target/99133, target/99216,
  	target/99555, target/99718, target/99724, target/99727, target/99744,
  	target/99753, target/99766, target/99773, target/99786, target/99808,
  	target/99813, target/99820, target/99822, testsuite/98125,
  	tree-optimization/48483, tree-optimization/55060,
  	tree-optimization/59970, tree-optimization/61112,
  	tree-optimization/61677, tree-optimization/61869,
  	tree-optimization/96573, tree-optimization/96974,
  	tree-optimization/97009, tree-optimization/98268,
  	tree-optimization/99726, tree-optimization/99746,
  	tree-optimization/99777, tree-optimization/99807,
  	tree-optimization/99824, tree-optimization/99825,
  	tree-optimization/99856, tree-optimization/99863,
  	tree-optimization/99882


author: Marek Polacek <polacek@redhat.com> 11.0.1-0.3.1
changelog:
  - for %{rhel} == 9, default to -march=z14 -mtune=z15 on s390x and
    to -mcpu=power9 -mtune=power9 on ppc64le


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.5
changelog:
  - update from trunk
    - PRs analyzer/98599, analyzer/99042, analyzer/99212, analyzer/99774,
  	analyzer/99886, analyzer/99906, analyzer/100011, c++/41723, c++/49951,
  	c++/52202, c++/52625, c++/58123, c++/80456, c++/83476, c++/88742,
  	c++/90215, c++/90479, c++/90674, c++/91241, c++/91849, c++/91933,
  	c++/92918, c++/93085, c++/93295, c++/93314, c++/93867, c++/94529,
  	c++/95317, c++/95486, c++/95870, c++/96311, c++/96673, c++/96873,
  	c++/97121, c++/97134, c++/97679, c++/97974, c++/98440, c++/98800,
  	c++/98852, c++/99008, c++/99066, c++/99118, c++/99180, c++/99201,
  	c++/99380, c++/99478, c++/99700, c++/99803, c++/99806, c++/99833,
  	c++/99844, c++/99850, c++/99859, c++/99874, c++/99885, c++/99899,
  	c++/99901, c++/99961, c++/99994, c++/100006, c++/100032, c++/100054,
  	c++/100078, c++/100079, c++/100091, c++/100101, c++/100111, c/98852,
  	c/99420, c/99972, c/99990, d/99812, d/99914, d/99917, debug/99830,
  	fortran/63797, fortran/99307, fortran/99817, fortran/100018,
  	fortran/100094, jit/100096, libfortran/78314, libgomp/99984,
  	libstdc++/96657, libstdc++/99402, libstdc++/99433, libstdc++/99805,
  	libstdc++/99985, libstdc++/99995, libstdc++/100044, libstdc++/100060,
  	lto/98599, lto/99849, lto/99857, middle-end/55288, middle-end/84877,
  	middle-end/84991, middle-end/84992, middle-end/86058,
  	middle-end/90779, middle-end/98088, middle-end/99883,
  	middle-end/99989, preprocessor/99446, rtl-optimization/98601,
  	rtl-optimization/98689, rtl-optimization/99596,
  	rtl-optimization/99905, rtl-optimization/99929,
  	rtl-optimization/100066, sanitizer/99877, sanitizer/100114,
  	target/87763, target/99246, target/99647, target/99648, target/99748,
  	target/99767, target/99781, target/99872, target/100028,
  	target/100048, target/100056, target/100067, target/100075,
  	testsuite/99955, testsuite/100071, testsuite/100073,
  	tree-optimization/82800, tree-optimization/97513,
  	tree-optimization/98736, tree-optimization/99873,
  	tree-optimization/99880, tree-optimization/99924,
  	tree-optimization/99947, tree-optimization/99954,
  	tree-optimization/100053
  - for %{rhel} == 9, default to -march=z14 -mtune=z15 on s390x and
    to -mcpu=power9 -mtune=power9 on ppc64le


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.6
changelog:
  - update from trunk and releases/gcc-11 branch
    - GCC 11.1-rc1
    - PRs ada/99360, c++/97536, c/100143, d/98058, d/98457, d/98494, d/98584,
  	d/99794, demangler/100177, fortran/100110, libstdc++/95983,
  	libstdc++/100146, libstdc++/100164, preprocessor/100142,
  	rtl-optimization/99927, target/100108, testsuite/100176,
  	tree-optimization/100081
  - fix a cprop -fcompare-debug bug (PR rtl-optimization/100148)


author: Jakub Jelinek <jakub@redhat.com> 11.0.1-0.7
changelog:
  - update from trunk and releases/gcc-11 branch
    - GCC 11.1-rc2
    - PRs libstdc++/100179, target/100182


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-1
changelog:
  - update from releases/gcc-11-branch
    - GCC 11.1 release
    - PRs c++/93383, c++/95291, c++/96380, c++/99200, c++/99683, c++/100161,
  	debug/100255, fortran/100154, fortran/100218, libstdc++/100290,
  	rtl-optimization/100254, target/98952, target/100200,
  	tree-optimization/100239
  - fix ICE in aarch64_add_offset_1_temporaries (PR target/100302)


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-2
changelog:
  - update from releases/gcc-11-branch
    - PRs c++/98032, c++/100319, c++/100362, c/100450, fortran/100274,
  	ipa/100308, libgomp/100352, libstdc++/99006, libstdc++/99453,
  	libstdc++/100259, libstdc++/100298, libstdc++/100384,
  	rtl-optimization/84878, rtl-optimization/100225,
  	rtl-optimization/100230, rtl-optimization/100263,
  	rtl-optimization/100411, target/99988, target/100217, target/100232,
  	target/100236, target/100270, target/100305, target/100311,
  	target/100375, target/100402, tree-optimization/96513,
  	tree-optimization/100253, tree-optimization/100278,
  	tree-optimization/100329, tree-optimization/100414
  - fix build with removed linux/cyclades.h header (PR sanitizer/100379)
  - fix up mausezahn miscompilation (#1958887, PR tree-optimization/100566)


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-3
changelog:
  - update from releases/gcc-11-branch
    - PRs bootstrap/100552, c++/100205, c++/100261, c++/100281, c++/100367,
  	c++/100372, c++/100489, c++/100502, c++/100634, c++/100644,
  	c++/100659, c/100550, fortran/98411, fortran/100551, fortran/100602,
  	fortran/100633, fortran/100656, ipa/100513, libstdc++/100361,
  	libstdc++/100479, libstdc++/100630, middle-end/100471,
  	middle-end/100508, middle-end/100509, preprocessor/100392,
  	target/94177, target/99725, target/99960, target/99977, target/100419,
  	target/100563, target/100626, target/100767, testsuite/96488,
  	tree-optimization/100492, tree-optimization/100519


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-5
changelog:
  - update from releases/gcc-11-branch
    - PRs bootstrap/100731, c++/91706, c++/91859, c++/95719, c++/100065,
  	c++/100102, c++/100580, c++/100666, c++/100796, c++/100797,
  	c++/100862, c++/100946, c++/100963, c++/101029, c++/101078, c/100902,
  	c/100920, d/100882, d/100935, d/100964, d/100967, d/100999,
  	debug/100852, fortran/82376, fortran/98301, fortran/99839,
  	fortran/100965, ipa/100791, libstdc++/98842, libstdc++/100475,
  	libstdc++/100577, libstdc++/100631, libstdc++/100639,
  	libstdc++/100676, libstdc++/100690, libstdc++/100768,
  	libstdc++/100770, libstdc++/100824, libstdc++/100833,
  	libstdc++/100889, libstdc++/100894, libstdc++/100900,
  	libstdc++/100982, libstdc++/101034, libstdc++/101055,
  	middle-end/100576, middle-end/100898, middle-end/101009,
  	preprocessor/100646, rtl-optimization/100342, rtl-optimization/100590,
  	rtl-optimization/101008, target/100333, target/100885, target/100887,
  	target/101046, testsuite/100750, tree-optimization/100934,
  	tree-optimization/100981


author: Jakub Jelinek <jakub@redhat.com> 11.1.1-6
changelog:
  - update from releases/gcc-11-branch
    - PRs c++/100876, c++/100879, c++/101106, c/100619, c/100783, fortran/95501,
  	fortran/95502, fortran/100283, fortran/101123, inline-asm/100785,
  	libstdc++/91488, libstdc++/95833, libstdc++/100806, libstdc++/100940,
  	middle-end/100250, middle-end/100307, middle-end/100574,
  	middle-end/100684, middle-end/100732, middle-end/100876,
  	middle-end/101062, middle-end/101167, target/99842, target/99939,
  	target/100310, target/100777, target/100856, target/100871,
  	target/101016


author: Marek Polacek <polacek@redhat.com> 11.2.1-1
changelog:
  - update from releases/gcc-11-branch (#1986836)
    - GCC 11.2 release
    - PRs middle-end/101586, rtl-optimization/101562
  - enable LTO profiledbootstrap on x86_64, i?86, ppc64le and s390x for rhel9
    (#1986141)


author: Marek Polacek <polacek@redhat.com> 11.2.1-2.2
changelog:
  - bootstrap with -Wl,-z,relro,-z,now, apply libgcc hardening patch (#1988450)
  - fix libsanitizer with non-constant SIGSTKSZ (#1992727)


author: Marek Polacek <polacek@redhat.com> 11.2.1-6
changelog:
  - update from releases/gcc-11-branch (#1996858)
  - build target shared libraries with -Wl,-z,relro,-z,now
  - add mwaitintrin.h on x86 (#2013860)
  - improve generated code with extern thread_local constinit vars
    with trivial dtors
  - add support for C++20 #__VA_OPT__
  - add bundled(libbacktrace) and bundled(libffi) provides (#1993932)


author: Marek Polacek <polacek@redhat.com> 11.2.1-7
changelog:
  - update from releases/gcc-11-branch (#1996858)
    - PRs ada/100486, c++/70796, c++/92746, c++/93286, c++/94490, c++/102642,
  	c++/102786, debug/101378, debug/103046, debug/103315, fortran/87711,
  	fortran/87851, fortran/97896, fortran/99061, fortran/99348,
  	fortran/102521, fortran/102685, fortran/102715, fortran/102745,
  	fortran/102816, fortran/102817, fortran/102917, fortran/103137,
  	fortran/103138, fortran/103392, gcov-profile/100520, ipa/102714,
  	ipa/102762, ipa/103052, ipa/103246, ipa/103267, libstdc++/96416,
  	libstdc++/98421, libstdc++/100117, libstdc++/100153, libstdc++/100748,
  	libstdc++/101571, libstdc++/101608, libstdc++/102894,
  	libstdc++/103022, libstdc++/103086, libstdc++/103133,
  	libstdc++/103240, libstdc++/103381, middle-end/64888,
  	middle-end/101480, middle-end/102431, middle-end/102518,
  	middle-end/103059, middle-end/103181, middle-end/103248,
  	middle-end/103384, preprocessor/103130, rtl-optimization/102356,
  	rtl-optimization/102842, target/101985, target/102976, target/102991,
  	target/103205, target/103274, target/103275, testsuite/102690,
  	tree-optimization/100393, tree-optimization/102139,
  	tree-optimization/102505, tree-optimization/102572,
  	tree-optimization/102788, tree-optimization/102789,
  	tree-optimization/102798, tree-optimization/102970,
  	tree-optimization/103192, tree-optimization/103204,
  	tree-optimization/103237, tree-optimization/103255,
  	tree-optimization/103435
  - fix up #__VA_OPT__ handling (PR preprocessor/103415)


author: Marek Polacek <polacek@redhat.com> 11.2.1-8
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs ada/103538, analyzer/101962, bootstrap/103688, c++/85846, c++/95009,
  	c++/98394, c++/99911, c++/100493, c++/101715, c++/102229, c++/102933,
  	c++/103012, c++/103198, c++/103480, c++/103703, c++/103714,
  	c++/103758, c++/103783, c++/103831, c++/103912, c++/104055, c/97548,
  	c/101289, c/101537, c/103587, c/103881, d/103604, debug/103838,
  	debug/103874, fortran/67804, fortran/83079, fortran/101329,
  	fortran/101762, fortran/102332, fortran/102717, fortran/102787,
  	fortran/103411, fortran/103412, fortran/103418, fortran/103473,
  	fortran/103505, fortran/103588, fortran/103591, fortran/103606,
  	fortran/103607, fortran/103609, fortran/103610, fortran/103692,
  	fortran/103717, fortran/103718, fortran/103719, fortran/103776,
  	fortran/103777, fortran/103778, fortran/103782, fortran/103789,
  	ipa/101354, jit/103562, libfortran/103634, libstdc++/100017,
  	libstdc++/102994, libstdc++/103453, libstdc++/103501,
  	libstdc++/103549, libstdc++/103877, libstdc++/103919,
  	middle-end/101751, middle-end/102860, middle-end/103813, objc/103639,
  	preprocessor/89971, preprocessor/102432, rtl-optimization/102478,
  	rtl-optimization/103837, rtl-optimization/103860,
  	rtl-optimization/103908, sanitizer/102911, target/102347,
  	target/103465, target/103661, target/104172, target/104188,
  	tree-optimization/101615, tree-optimization/103523,
  	tree-optimization/103603, tree-optimization/103995


author: Marek Polacek <polacek@redhat.com> 11.2.1-9
changelog:
  - update from releases/gcc-11-branch (#2047296)
    - PRs fortran/104127, fortran/104212, fortran/104227, target/101529
  - fix up va-opt-6.c testcase


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.2
changelog:
  - add support for relocation of the PCH data (pch/71934, #2044917)
  - remove 30_threads/future/members/poll.cc (#2050090)
  - avoid overly-greedy match in dejagnu regexp (#2050089)


author: Marek Polacek <polacek@redhat.com> 11.2.1-9.3
changelog:
  - use _thread_db_sizeof_pthread to obtain struct pthread size (#2034494)
  - add --enable-host-pie, build the compilers as PIE (#2044917)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
  - Retry mirrorlist/metalink downloads several times (RhBug:1741931)
  - Improve variable substitutions in URLs and add ${variable} support


author: Nicola Sella <nsella@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Decode package URL when using for local filename (RhBug:1817130)
  - Fix memory leak in lr_download_metadata() and lr_yum_download_remote()
  - Download sources work when at least one of specified is working (RhBug:1775184)
  - Enable building on OSX


author: Nicola Sella <nsella@redhat.com> - 1.13.0-1
changelog:
  - Update to 1.13.0
  - Add support for working with certificates used with proxy
  - Drop Python 2 support
  - Fix: lr_perform() - Avoid 100% CPU usage
  - Add support for pkcs11 certificate and key for repository authorization
  - Fix default value for LRO_SSLVERIFYSTATUS
  - Don't use max_ranges to determine if we expect zchunk callback
  - Prefer HTTP over FTP mirrors when zchunk is enabled
  - Fixed mem leaks and typos


author: Pavla Kratochvilova <pkratoch@redhat.com> - 1.14.0-1
changelog:
  - Update to 1.14.0
  - Reposync does not re-download unchanged packages (RhBug:1931904)
  - Return "calculated" checksum if requested w/caching
  - Fixed memory leaks and segfault


author: Michal Fabik <mfabik@redhat.com> 2.12.0-1
changelog:
  - ureport: Allow printf-like data attaching
  - plugins: reporter-rhtsupport: Avoid runtime warning
  - Update translations
  - lib: Don't include Nettle in a public interface
  - ureport: Drop HTTP header table
  - glib_support: Use g_strsplit
  - glib_support: Drop type initialization
  - client-python: Drop yumdebuginfo
  - lib: Use Nettle for computing SHA-1 digests
  - Move augeas lenses to new subdirectory


author: Michal Fabik <mfabik@redhat.com> 2.13.0-2
changelog:
  - Support new "time" and "time_for_children" kernel namespaces
  - Remove preprocessor namespacing in favor of function name prefixes
  - client-python: Accomodate for multiple debug directories
  - gui-wizard-gtk: Wrap event log messages
  - lib: Drop D-Bus code 
  - plugins: reporter-rhtsupport: Drop unused debugging code 
  - Update translations


author: Michal Fabik <mfabik@redhat.com> 2.14.0-3
changelog:
  - forbidden_words: Add potentially sensitive env vars
  - lib: Add version script for libreport
  - lib: compress: Use libarchive
  - Replace various utility functions with stock GLib ones
  - gtk,lib: Update symbol list
  - dd: Update dd_get_owner to handle error return values
  - dirsize: Don't pick .lock'd dirs for deletion
  - setgid instead of setuid the abrt-action-install-debuginfo-to-abrt-cache
  - Various coding style improvements
  - Various memory management fixes
  - lib: Check for errors when opening files
  - gtk-helpers: Check return value
  - doc: Exclude more files with --without-bugzilla
  - lib: Don’t use external executables for decompression
  - lib: Decommission libreport_list_free_with_free
  - Drop Red Hat Customer Portal reporter
  - ureport: Drop Strata integration
  - lib: Remove creates-items tag parsing in event definitions


author: Merlin Mathesius <mmathesi@redhat.com> - 2.14.0-6
changelog:
  - Updates so ELN builds in a Fedora-like reporting configuration, even though
    the %{rhel} macro is set.


author: Matěj Grabovský <mgrabovs@redhat.com> - 2.14.0-10
changelog:
  - Add fix for https://bugzilla.redhat.com/show_bug.cgi?id=1883337
  - Add fix for https://bugzilla.redhat.com/show_bug.cgi?id=1883410


author: Richard Hughes <richard@hughsie.com> 0.1.13-1
changelog:
  - New upstream release
  - Export xb_silo_query_full()
  - Show the XPath that was used in the query in the error message


author: Richard Hughes <richard@hughsie.com> 0.1.14-1
changelog:
  - New upstream release
  - Do not use libuuid
  - Ignore adaptors added with xb_builder_source_add_converter()


author: Richard Hughes <richard@hughsie.com> 0.1.15-1
changelog:
  - New upstream release
  - Add xb_builder_source_add_simple_adapter()
  - Allow reversing the query results


author: Richard Hughes <richard@hughsie.com> 0.2.0-1
changelog:
  - New upstream release which breaks API and ABI
  - Add the missing TEXT:INTE XPath support
  - Add variant of xb_silo_query_with_root() avoiding XbNode creation
  - Add XB_BUILDER_SOURCE_FLAG_WATCH_DIRECTORY flag
  - Allow specifying the node cache behaviour for the query
  - Avoid recursion when setting flags if possible
  - Avoid using weak pointers when building the silo
  - Do not allocate opcodes individually
  - Do not show a critical warning for invalid XML
  - Do not unconditionally create GTimer objects
  - Do not use the node cache when building indexes
  - Lazy load more arrays to reduce RSS usage


author: Richard Hughes <richard@hughsie.com> 0.2.1-1
changelog:
  - New upstream release
  - Do not assume g_content_type_guess() always returns valid results
  - Fix getting translated results in gnome-software
  - Update the header location to reflect the new API


author: Richard Hughes <richard@hughsie.com> 0.3.0-1
changelog:
  - New upstream release
  - Add a new object to contain query context data
  - Allow collapsing empty XML tags if no children or text
  - Allow marking elements as tokenized from xb-tool
  - Allow optimized searching when comparing tokens
  - Cancel the GFileMonitor before unreffing it
  - Do not allocate a 128Mb buffer for each xb_builder_source_ctx_get_bytes()
  - Do not error when creating a query if the element doesn’t exist
  - Fix a parse failure for a double comment
  - Fix various errors or missing annotations in docs
  - Make handling of single-result queries more robust
  - Support mmap()ing the source file to get bytes
  - Support query caching with xb_silo_lookup_query()
  - Support UTF-8 for upper-case() and lower-case()
  - Use g_str_match_string() for non-ASCII search queries
  - Write search tokens into the built silo


author: Richard Hughes <richard@hughsie.com> 0.3.3-1
changelog:
  - New upstream release
  - Add locking for file monitors
  - Add support for LZMA decompression
  - Clarify GMainContext usage and signal emission
  - Respect XB_BUILDER_NODE_FLAG_IGNORE when exporting
  - Use the chosen chunk size when reading from a stream
  - Use the correct pkgconfig export package name in the GIR file
  - Always run xb-tool queries with the optimizer
  - Ensure tokens handling works when XbOpcode is not zero-inited
  - Use stack-allocated XbStack instances for running a machine
  - Resolves: rhbz#1965891


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-13.20191026
changelog:
  - update to 6.1-20191026 (CVE-2019-17594 CVE-2019-17595)
  - restore rxvt-unicode-256color terminfo (Robbie Harwood) (#1430935)
  - conflict/obsolete rxvt-unicode (sub)packages with terminfo (#1430935)
  - drop old obsoletes and conflicts


author: Miroslav Lichvar <mlichvar@redhat.com> 6.1-14.20191109
changelog:
  - update to 6.1-20191109
  - remove LDFLAGS from pkgconfig files and ncurses-config scripts (#1771137)


author: Fedora Release Engineering <releng@fedoraproject.org> - 6.2-4.20200222
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Use make macros
  - Remove MIT definition
  - Add BuildRequires: make


author: Robbie Harwood <rharwood@redhat.com> - 2.06-37
changelog:
  - CVE fixes for 2022-06-07
  - CVE-2022-28736 CVE-2022-28735 CVE-2022-28734 CVE-2022-28733
  - CVE-2021-3697 CVE-2021-3696 CVE-2021-3695
  - Resolves: #2070688


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200508-1
changelog:
  - Update Intel CPU microcode to microcode-20200508 release (#1783103):
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x46
      up to 0x78.
  - Change the URL to point to the GitHub repository since the microcode download
    section at Intel Download Center does not exist anymore.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200520-1
changelog:
  - Update Intel CPU microcode to microcode-20200520 release (#1783103):
    - Update of 06-2d-06/0x6d (SNB-E/EN/EP C1/M0) microcode from revision 0x61f
      up to 0x621;
    - Update of 06-2d-07/0x6d (SNB-E/EN/EP C2/M1) microcode from revision 0x718
      up to 0x71a.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200602-1
changelog:
  - Update Intel CPU microcode to microcode-20200602 release, addresses
    CVE-2020-0543, CVE-2020-0548, CVE-2020-0549 (#1795354, #1795356, #1827184):
    - Update of 06-3c-03/0x32 (HSW C0) microcode from revision 0x27 up to 0x28;
    - Update of 06-3d-04/0xc0 (BDW-U/Y E0/F0) microcode from revision 0x2e
      up to 0x2f;
    - Update of 06-45-01/0x72 (HSW-U C0/D0) microcode from revision 0x25
      up to 0x26;
    - Update of 06-46-01/0x32 (HSW-H C0) microcode from revision 0x1b up to 0x1c;
    - Update of 06-47-01/0x22 (BDW-H/Xeon E3 E0/G0) microcode from revision 0x21
      up to 0x22;
    - Update of 06-4e-03/0xc0 (SKL-U/Y D0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000151
      up to 0x1000157;
    - Update of 06-55-04/0xb7 (SKX-SP H0/M0/U0, SKX-D M1) microcode
      (in intel-06-55-04/intel-ucode/06-55-04) from revision 0x2000065
      up to 0x2006906;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400002c
      up to 0x4002f01;
    - Update of 06-55-07/0xbf (CLX-SP B1) microcode from revision 0x500002c
      up to 0x5002f01;
    - Update of 06-5e-03/0x36 (SKL-H/S R0/N0) microcode from revision 0xd6
      up to 0xdc;
    - Update of 06-8e-09/0x10 (AML-Y22 H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-09/0xc0 (KBL-U/Y H0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0a/0xc0 (CFL-U43e D0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-8e-0c/0x94 (AML-Y42 V0, CML-Y42 V0, WHL-U V0) microcode
      from revision 0xca up to 0xd6;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode from revision
      0xca up to 0xd6;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E3 U0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0b/0x02 (CFL-S B0) microcode from revision 0xca up to 0xd6;
    - Update of 06-9e-0c/0x22 (CFL-H/S P0) microcode from revision 0xca
      up to 0xd6;
    - Update of 06-9e-0d/0x22 (CFL-H R0) microcode from revision 0xca up to 0xd6.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200602-3
changelog:
  - Do not update 06-4e-03 (SKL-U/Y) and 06-5e-03 (SKL-H/S/Xeon E3 v5) to revision
    0xdc, use 0xd6 by default (#1846119).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-1
changelog:
  - Update Intel CPU microcode to microcode-20200609 release (#1845967):
    - Fixed a typo in the release note file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-2
changelog:
  - Blacklist latest microcode revision for 06-[89]e-0x CPUs (AML-Y,
    CFL-H/S/U/Xeon E, CML-Y, KBL-G/H/S/X/U/Y/Xeon E3 v6, WHL-U) on Dell systems,
    use revision 0xae/0xb4/0xb8 by default, provide the latest revision
    and intermediate revision 0xca in caveats (#1807960, #1846097).


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20200609-3
changelog:
  - Add README file to the documentation directory.
  - Add publicly-sourced codenames list to supply to gen_provides.sh; update
    the latter to handle the somewhat different format.
  - Add SUMMARY.intel-ucode file containing metadata information from
    the microcode file headers.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201027-1
changelog:
  - Update Intel CPU microcode to microcode-20201027 release, addresses
    CVE-2020-8694, CVE-2020-8695, CVE-2020-8696, CVE-2020-8698
    (#1893266, #1893254, #1893234):
    - Addition of 06-55-0b/0xbf (CPX-SP A1) microcode at revision 0x700001e;
    - Addition of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode at revision 0x68;
    - Addition of 06-a5-02/0x20 (CML-H R1) microcode at revision 0xe0;
    - Addition of 06-a5-03/0x22 (CML-S 6+2 G1) microcode at revision 0xe0;
    - Addition of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode at revision 0xe0;
    - Addition of 06-a6-01/0x80 (CML-U 6+2 v2 K0) microcode at revision
      0xe0;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xdc up to 0xe2;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006906 up
      to 0x2006a08;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xdc up to 0xe2;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xd6 up
      to 0xe0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xd6 up to 0xde;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xd6 up
      to 0xde;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xd6 up
      to 0xde;
    - Update of 06-3f-02/0x6f (HSX-E/EN/EP/EP 4S C0/C1/M1/R2) microcode
      from revision 0x43 up to 0x44;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000157
      up to 0x1000159;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4002f01
      up to 0x4003003;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x5002f01 up to 0x5003003;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x38 up
      to 0x40;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x16 up
      to 0x1e;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x16 up
      to 0x18;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0x78
      up to 0xa0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xca
      up to 0xe0.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20201112-1
changelog:
  - Update Intel CPU microcode to microcode-20201112 release (#1896912):
    - Addition of 06-8a-01/0x10 (LKF B2/B3) microcode at revision 0x28;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x32 up
      to 0x34;
    - Updated releasenote file.


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1.20220510.1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-0005, CVE-2022-21131, CVE-2022-21136, CVE-2022-21151 (#2086750):
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-97-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      at revision 0x1f;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode at
      revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) at revision 0x41c;
    - Addition of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) at revision 0x41c;
    - Addition of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode at revision 0x41c;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      at revision 0x1f;
    - Addition of 06-97-02/0x03 (ADL-HX C0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) at revision 0x1f;
    - Addition of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      at revision 0x1f;
    - Addition of 06-bf-05/0x03 (ADL C0) microcode at revision 0x1f;
    - Update of 06-4e-03/0xc0 (SKL-U/U 2+3e/Y D0/K1) microcode (in
      intel-06-4e-03/intel-ucode/06-4e-03) from revision 0xec up to 0xf0;
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006c0a up
      to 0x2006d05;
    - Update of 06-5e-03/0x36 (SKL-H/S/Xeon E3 N0/R0/S0) microcode (in
      intel-06-5e-03/intel-ucode/06-5e-03) from revision 0xec up to 0xf0;
    - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
      intel-06-8c-01/intel-ucode/06-8c-01) from revision 0x9a up to 0xa4;
    - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
      microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
      revision 0xec up to 0xf0;
    - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xec up
      to 0xf0;
    - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
      intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xec up
      to 0xf0;
    - Update of 06-37-09/0x0f (VLV D0) microcode from revision 0x90c up
      to 0x90d;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015c
      up to 0x100015d;
    - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x400320a
      up to 0x4003302;
    - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
      0x500320a up to 0x5003302;
    - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002402
      up to 0x7002501;
    - Update of 06-5c-09/0x03 (APL D0) microcode from revision 0x46 up
      to 0x48;
    - Update of 06-5c-0a/0x03 (APL B1/F1) microcode from revision 0x24 up
      to 0x28;
    - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x36 up
      to 0x38;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000331
      up to 0xd000363;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x38 up
      to 0x3a;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1c up
      to 0x1e;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xa8
      up to 0xb0;
    - Update of 06-8a-01/0x10 (LKF B2/B3) microcode from revision 0x2d up
      to 0x31;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x22 up
      to 0x26;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3c up
      to 0x3e;
    - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x15 up
      to 0x16;
    - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x2400001f
      up to 0x24000023;
    - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xec up
      to 0xf0;
    - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xec
      up to 0xf0;
    - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xee
      up to 0xf0;
    - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xea
      up to 0xf0;
    - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
      0xec up to 0xf0;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x50 up
      to 0x53.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1792264
    - oracle: turned off NUMA balancing
      resolves: rhbz#1782233
    - man: documented the possibility to apply multiple profiles
      resolves: rhbz#1794337
    - cpu-partitioning: disabled kernel.timer_migration
      resolves: rhbz#1797629
    - profiles: new profile optimize-serial-console
      resolves: rhbz#1840689
    - added support for a post-loaded profile
      resolves: rhbz#1798183
    - plugins: new irqbalance plugin
      resolves: rhbz#1784645
    - throughput-performance: added architecture specific tuning for Marvell ThunderX
      resolves: rhbz#1746961
    - throughput-performance: added architecture specific tuning for AMD
      resolves: rhbz#1746957
    - scheduler: added support for cgroups
      resolves: rhbz#1784648


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.14.0-2
changelog:
  - scheduler: fixed isolated_cores to work with cgroups
    related: rhbz#1784648
  - throughput-performance: fix performance regression on AMD platforms
    related: rhbz#1746957


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.15.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1874052
    - added plugin service for linux services control
      resolves: rhbz#1869991
    - scheduler: added default_irq_smp_affinity option
      resolves: rhbz#1896348
    - bootloader: skip boom managed BLS snippets
      resolves: rhbz#1901532
    - scheduler: added perf_process_fork option to enable processing of fork
      resolves: rhbz#1894610
    - scheduler: added perf_mmap_pages option to set perf buffer size
      resolves: rhbz#1890219
    - bootloader: fixed cmdline duplication with BLS and grub2-mkconfig
      resolves: rhbz#1777874


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1944643
    - realtime: disabled kvm.nx_huge_page kernel module option in
      realtime-virtual-host profile
      resolves: rhbz#1976825
    - realtime: explicitly set 'irqaffinity=~<isolated_cpu_mask>' in kernel
      command line
      resolves: rhbz#1974820
    - scheduler: added abstraction for the sched_* and numa_* variables which
      were previously accessible through the sysctl
      resolves: rhbz#1952687
    - recommend: fixed wrong profile on ppc64le bare metal servers
      resolves: rhbz#1959889


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.16.0-3
changelog:
  - scheduler: allow exclude of processes from the specific cgroup(s)
    Resolves: rhbz#1980715
  - Switched to the configparser from the configobj
    Resolves: rhbz#1936386


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.17.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#2003838
    - cpu-partitioning: fixed no_balance_cores on newer kernels
      resolves: rhbz#1874596


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.18.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#2003838
    - tuned-gui: fixed creation of new profile


author: Packit <hello@packit.dev> - 270-1
changelog:
  - Services: User-created timer deletion
  - System Diagnostics: Working with diagnostic reports has been improved


author: Packit <hello@packit.dev> - 272-1
changelog:
  - Firewall: Edit custom services
  - Services: Pin services as favorites
  - Login: Dark mode
  - Unprivileged cockpit/ws container mode


author: Packit <hello@packit.dev> - 273-1
changelog:
  - Metrics: Display CPU temperature
  - Networking: Suggest netmask and gateway addresses
  - Software Updates: Optionally reboot after updating
  - cockpit/ws container: Support modern SSH keys


author: Packit <hello@packit.dev> - 274-1
changelog:
  - ws: Fix segfault with channel closing (#17492)
  - Services: Fix time picker behaviour in Timer creation dialog
  - Metrics: Improve CPU temperature sensors detection


author: Steve Dickson <steved@redhat.com> 2.5.4-11
changelog:
  - nfs.man: adding new mount option max_connect (bz 2106848)
  - systemd: Fix format-overflow warning (bz 2106896)


author: Steve Dickson <steved@redhat.com> 2.5.4-12
changelog:
  - idmapd: Fix error status when nfs-idmapd exits (bz 2001764)
  - mount.nfs Fix error reporting for already mounted shares (bz 2054300)
  - rpcctl - fix failure when setting xprt offline and online (bz 2081934)
  - rpc-pipefs-generator: allocate enough space (bz 2109420)


author: Steve Dickson <steved@redhat.com> 2.5.4-15
changelog:
  - Fix uninstall warnings (bz 2048023)
  - rpc-statd.service: Stop rpcbind and rpc.stat in an exit race (bz 2112941)


author: Miro Hrončok <mhroncok@redhat.com> - 0.62-23
changelog:
  - Subpackage python2-libuser has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Jakub Hrozek <jhrozek@redhat.com> - 0.62-26
changelog:
  - Temporarily disable tests, nothing changed since forever so this should be
    safe and would unblock FTBFS
  - Related: rhbz#1817666 - libuser fails to build with Python 3.9: FAIL: tests/fs_test


author: Tomas Halman <thalman@redhat.com> - 0.63-5
changelog:
  - Enable audit library in the build
  - Resolves: rhbz#1923043 - libuser doesn't audit events around the account lifecycle


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.0.2-1
changelog:
  - Update to 3.0.2
  - Add support for --releasever (RhBug:1591627)
  - Fix minor memory leaks (RhBug:1702283)
  - Use help2man to generate a man page (RhBug:1612520)
  - Allow downgrade for all transactions microdnf does (RhBug:1725863)
  - Add options --best and --nobest for transactions (RhBug:1679476)


author: Ales Matej <amatej@redhat.com> - 3.3.0-1
changelog:
  - Update to 3.3.0
  - Fix: do not download metadata in remove command
  - Add repolist command (RhBug:1584952) 
  - Add repoquery command (RhBug:1769245)


author: Ales Matej <amatej@redhat.com> - 3.4.0-1
changelog:
  - Add reinstall command
  - Add "--setopt=tsflags=test" support
  - Add "--setopt=reposdir=<path>" and "--setopt=varsdir=<path1>,<path2>,..." support
  - Add "--config=<path_to_config_file>" support
  - Add "--disableplugin", "--enableplugin" support (RhBug:1781126)
  - Add "--noplugins" support
  - Add "--setopt=cachedir=<path_to_cache_directory>" support
  - Add "--installroot=<path_to_installroot_directory>" support
  - Add "--refresh" support
  - Support "install_weak_deps" conf option and "--setopt=install_weak_deps=0/1"
  - Respect reposdir from conf file
  - Respect "metadata_expire" conf file opton (RhBug:1771147)
  - Fix: Don't print lines with (null) in transaction report (RhBug:1691353)
  - [repolist] Print padding spaces only if output is terminal


author: Nicola Sella <nsella@redhat.com> - 3.5.0-1
changelog:
  - Update to 3.5.0
  - Add module enable and disable commands
  - Add reports of module changes
  - Add "module enable" command
  - Add subcommands support
  - Print info about obsoleted packages before transaction (RhBug:1855542)


author: Nicola Sella <nsella@redhat.com> - 3.6.0-1
changelog:
  - Update to 3.6.0
  - spec: Sync summary and description from openSUSE
  - Add support for setting a platform module ID
  - Add dependency for DNF configurations skeleton
  - Add support for setting allow_vendor_change


author: Nicola Sella <nsella@redhat.com> - 3.7.1-1
changelog:
  - Update to 3.7.1
  - [download] fix: unwanted dependency on newer glib 
  - [download] Support for "--resolve" and "--alldeps" arguments 
  - [download] New get_packages_query function
  - Support "--setopt=keepcache=0/1"
  - [download] Support "--archlist=" argument
  - [download] Move package download code to "download_packages" function
  - [download] several optimizations
  - Don't set default value of "assumeyes" to TRUE 
  - Support for user confirmation and assumeyes, assumeno, defaultyes
  - Extend "--setopt" to support repository options 
  - Added alias "update" to "upgrade" command
  - Command "update" renamed to "upgrade"
  - Add support for command aliases
  - dnf-data requirement only for Fedora and future RHEL
  - Relicense to GPLv2+ [errata corrige: not in 3.5.1-1]
  - Sync summary and description from openSUSE [errata corrige: not in 3.6.0-1]


author: Pavla Kratochvilova <pkratoch@redhat.com> - 3.8.0-1
changelog:
  - Update to 3.8.0
  - distrosync: Fix style issues and plugin build with Meson 
  - Add distro-sync subcommand
  - Add "makecache" command


author: Petr Lautrbach <plautrba@redhat.com> - 3.3-3
changelog:
  - allow spaces in user/group names (#2049665)
  - Fall back to semanage_copy_dir when rename() fails (#2068085)


author: Jakub Jelen <jjelen@redhat.com> - 8.2p1-3 + 0.10.3-9
changelog:
  - Simplify reference to crypto policies in configuration files
  - Unbreak gssapi authentication with GSSAPITrustDNS over jump hosts
  - Correctly print FIPS mode initialized in debug mode
  - Enable SHA2-based GSSAPI key exchange methods (#1666781)
  - Do not break X11 forwarding when IPv6 is disabled
  - Remove fipscheck dependency as OpenSSH is no longer FIPS module
  - Improve documentation about crypto policies defaults in manual pages


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-1 + 0.10.3-10
changelog:
  - New upstream release (#1840503)
  - Unbreak corner cases of sshd_config include
  - Fix order of gssapi key exchange algorithms


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-3 + 0.10.3-10
changelog:
  - Do not lose PIN when more slots match PKCS#11 URI (#1843372)
  - Update to new crypto-policies version on server (using sshd_config include)
  - Move redhat configuraion files to larger number to allow simpler override
  - Move sshd_config include before any other definitions (#1824913)


author: Jakub Jelen <jjelen@redhat.com> - 8.3p1-4 + 0.10.3-10
changelog:
  - Remove openssh-ldap subpackage (#1871025)
  - pkcs11: Do not crash with invalid paths in ssh-agent (#1868996)
  - Clarify documentation about sftp-server -m (#1862504)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-3 + 0.10.4-1
changelog:
  - Unbreak seccomp filter on arm (#1897712)
  - Add a workaround for Debian's broken OpenSSH (#1881301)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-4 + 0.10.4-1
changelog:
  - Remove "PasswordAuthentication yes" from vendor configuration as it is
    already default and it might be hard to override.
  - Fix broken obsoletes for openssh-ldap (#1902084)


author: Jakub Jelen <jjelen@redhat.com> - 8.4p1-5 + 0.10.4-1
changelog:
  - Use /usr/share/empty.sshd instead of /var/empty/sshd
  - Allow emptu labels in PKCS#11 tokens (#1919007)
  - Drop openssh-cavs subpackage


author: Than Ngo <than@redhat.com> - 3.18.0-5
changelog:
  - opencryptoki C_GenerateKeyPair() fails after generating > 500 RSA keys with CEX7 crypto cards
  Resolves: #2128611


author: Jakub Jelen <jjelen@redhat.com> - 0.20.0-1
changelog:
  - New upstream release (#1749357)
  - Fixes for various security issues identified by fuzzing (#1765223, #1765231, #1782520, #1782951, #1782956)


author: Jakub Jelen <jjelen@redhat.com> - 0.22.0-2
changelog:
  - Unbreak detection of unentrolled smart cards (#2007029)
  - Enable file caching by default except for pkcs15-init (#2000626)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1:0.4-0.44.b46
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  - Use standard make_build and make_install macros in spec file.


author: Jeff Makey <jeff@makey.net> - 1:0.4-0.46.b47
changelog:
  - New upstream release 0.4b47
  - Update main URL.
  - Drop dump-glibc_xattr patch, now applied upstream.
  - Drop documentation conversion from ISO-8859-1 to UTF-8, now applied upstream.
  - Print correct name of archive table of contents file (#1727392).


author: Josef Ridky <jridky@redhat.com> - 1:0.4-0.51.b47
changelog:
  - rename spec file to restore
  - add gating.yaml
  - changes between .47 and .51 had to be stripped due of wrong sync
    between centos and dist-git


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20220207-1.20220809.1
changelog:
  - Update Intel CPU microcode to microcode-20220510 release, addresses
    CVE-2022-21233 (#2115662):
    - Update of 06-55-04/0xb7 (SKX-D/SP/W/X H0/M0/M1/U0) microcode (in
      intel-06-55-04/intel-ucode/06-55-04) from revision 0x2006d05 up
      to 0x2006e05;
    - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x100015d
      up to 0x100015e;
    - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000363
      up to 0xd000375;
    - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3a up
      to 0x3c;
    - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x1e up
      to 0x20;
    - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xb0
      up to 0xb2;
    - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x26 up
      to 0x28;
    - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x3e up
      to 0x40;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode from revision
      0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-97-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-97-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode from revision 0x1f
      up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-97-05)
      from revision 0x1f up to 0x22;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
      0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
      intel-ucode/06-9a-03) from revision 0x41c up to 0x421;
    - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
      intel-ucode/06-9a-04) from revision 0x41c up to 0x421;
    - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x41c
      up to 0x421;
    - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x53 up
      to 0x54;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-02) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode (in intel-ucode/06-bf-02)
      from revision 0x1f up to 0x22;
    - Update of 06-97-02/0x03 (ADL-HX/S 8+8 C0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-97-05/0x03 (ADL-S 6+0 K0) microcode (in
      intel-ucode/06-bf-05) from revision 0x1f up to 0x22;
    - Update of 06-bf-02/0x03 (ADL C0) microcode (in intel-ucode/06-bf-05)
      from revision 0x1f up to 0x22;
    - Update of 06-bf-05/0x03 (ADL C0) microcode from revision 0x1f up
      to 0x22.


author: Patsy Griffin <patsy@redhat.com> - 2022f-1
changelog:
  - Rebase to tzdata-2022f
    - Mexico will stop observing DST except near the US border.
    - Chihuahua moved to -06 year round starting on 2022-10-30.
    - Fiji no longer observes DST.


author: Patsy Griffin <patsy@redhat.com> - 2022g-1
changelog:
  - Rebase to tzdata-2022g
    - The northern edge of the Mexican state of Chihuahua will
      change time zone to agree with nearby US locations on
      2022-11-30.
    - Added a new Zone America/Ciudad_Juarez that splits from
      America/Ojinaga.


author: Kamil Dudka <kdudka@redhat.com> - 1:4.7.0-6
changelog:
  - disable -flto on ppc64le to make test-float pass (#1789115)
  - do not compile with -D__SUPPORT_SNAN__ (#1294016)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-106
changelog:
  - resolves: rhbz#2065376 - Fix 'create krb5 conf = yes` when a KDC has a single IP address.
  - resolves: rhbz#2076504 - PAM Kerberos authentication fails with a clock skew error


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.2-101
changelog:
  - resolves: rhbz#2093833 - Fix weak dependency on logrotate
  - resolves: rhbz#2096813 - Fix printer displays only after 300 seconds timeout


author: Pavel Filipenský <pfilipen@redhat.com> - 4.16.3-101
changelog:
  - related: rhbz#2077487 - Rebase Samba to 4.16.3
  - resolves: rhbz#2097655 - The pcap background queue process should not be stopped
  - resolves: rhbz#2100105 - Fix net ads info LDAP server and LDAP server name


author: Brian C. Lane <bcl@redhat.com> - 3.5-1
changelog:
  - Rebase to upstream release 3.5
  - Drop patches included in new upstream tar
  - Add upstream patches for new type command
  - Add upstream patch for swap flag on DASD
    Resolves: rhbz#1999333


author: Tomáš Mráz <tmraz@redhat.com> - 20200527-1.gitb234a47
changelog:
  - explicitly enable DHE-DSS in gnutls config if enabled in policy
  - use grubby with --update-kernel=ALL to avoid breaking kernelopts
  - OSPP subpolicy: Allow GCM for SSH protocol
  - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges
  - if the policy in FIPS mode is not a FIPS policy print a message
  - openssl: Add SignatureAlgorithms support


author: Tomáš Mráz <tmraz@redhat.com> - 20200527-2.gitb234a47
changelog:
  - require the base package from scripts subpackage
  - add Recommends for fips-mode-setup to the scripts subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 20200610-1.git7f9d474
changelog:
  - openssh server: new format of configuration to be loaded by config include
  - fallback to FIPS policy instead of the default-config in FIPS mode
  - java: Document properly how to override the crypto policy
  - reorder the signature algorithms to follow the order in default openssl list


author: Tomáš Mráz <tmraz@redhat.com> - 20200625-1.gitb298a9e
changelog:
  - DEFAULT policy: Drop DH < 2048 bits, TLS 1.0, 1.1, SHA-1
  - make the NEXT policy just an alias for DEFAULT as they are now identical
  - policies: introduce sha1_in_dnssec value for BIND
  - add SHA1 and FEDORA32 policy modules to provide backwards compatibility
    they can be applied as DEFAULT:SHA1 or DEFAULT:FEDORA32
  - avoid duplicates of list items in resulting policy


author: Tomáš Mráz <tmraz@redhat.com> - 20200702-1.gitc40cede
changelog:
  - OSPP subpolicy: remove AES-CCM
  - openssl: handle the AES-CCM removal properly
  - openssh/libssh: drop CBC ciphersuites from DEFAULT and FIPS
  - add AD-SUPPORT subpolicy which re-enables RC4 for Kerberos
  - gnutls: disallow X448/ED448 in FIPS policy
  - merge fips-mode-setup package into the scripts subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 20200813-1.git66d4068
changelog:
  - libreswan: enable X25519 group
  - libreswan: properly disable FFDH in ECDHE-ONLY subpolicy
  - libreswan: add generation of authby parameter based on sign property
  - libssh: Add diffie-hellman-group14-sha256


author: Tomáš Mráz <tmraz@redhat.com> - 20200918-1.git85dccc5
changelog:
  - add RSA-PSK algorithm support
  - add GOST algorithms support for openssl
  - add GOST-ONLY policy and fix GOST subpolicy
  - update-crypto-policies: added --check parameter to perform
    comparison of actual configuration files with the policy


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210213-1.git5c710c0
changelog:
  - exclude RC4 from LEGACY
  - introduce rc4_md5_in_krb5 to narrow AD_SUPPORT's impact
  - an assortment of small fixes


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210218-1.git2246c55
changelog:
  - require 2048 bit params in LEGACY
  - require TLSv1.2/DTLSv1.2 in all policies
  - disable DSA
  - disable 3DES in LEGACY
  - drop FFDHE-1024 from LEGACY
  - drop (sub)policies we're not going to offer in RHEL-9


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210628-1.gitdd7d273
changelog:
  - implement scoped policies, e.g., cipher@SSH = ...
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol, sha1_in_dnssec
  - deprecate unscoped form of protocol property
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS
  - openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes
  - libssh: respect ssh_certs
  - restrict FIPS:OSPP further
  - improve Python 3.10 compatibility
  - update documentation
  - expand upstream test coverage
  - FUTURE: disable CBC ciphers for all backends but krb5
  - openssl: LEGACY must have SECLEVEL=1, enabling SHA1
  - disable DHE-DSS in LEGACY
  - bump LEGACY key size requirements from 1023 to 1024
  - add javasystem backend
  - *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  - set %verify(not mode) for backend sometimes-symlinks-sometimes-not
  - gnutls: use allowlisting


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210707-1.git29f6c0b
changelog:
  - gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
  - packaging: adapt to the RHEL-9 %check-time testing tools availability


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210914-1.git97d08ef
changelog:
  - gnutls: reorder ECDSA-SECPMMMR1-SHANNN together with ECDSA-SHANNN
  - fix several issues with update-crypto-policies --check


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
changelog:
  - gnutls: enable SHAKE, needed for Ed448
  - fips-mode-setup: improve handling FIPS plus subpolicies
  - FIPS: disable SHA-1 HMAC
  - FIPS: disable CBC ciphers except in Kerberos


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
changelog:
  - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
  - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
  - fips-mode-setup: catch more inconsistencies, clarify --check


author: Sumit Bose <sbose@redhat.com> - 0.17.0-8
changelog:
  - LDAP socket timeout, fix duplicated logs and new Samba command line options
    Resolves: rhbz#2038260
    Resolves: rhbz#2038268
    Resolves: rhbz#2028530


author: Patsy Griffin <patsy@redhat.com> - 2020a-1
changelog:
  - Rebase to tzdata-2020a
    - Morocco will spring forward on 2020-05-31 rather than
      previously predicted 2020-05-24.
    - Canada's Yukon region changed to year round UTC -07
      effective 2020-03-08.
    - America/Godthab was renamed to America/Nuuk.


author: Jiri Vanek <jvanek@redhat.com> - 2020a-2
changelog:
  - bumped  source/target to 1.6 for tzdata for jdk6/7
  - bumped  source/target to 1.8 for tzdata for jdk8


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.12.1-5
changelog:
  - Replace arch-dependent /usr/include/urcu/config.h with arch-independent
    stub when needed. (bz# 1951223)
  - Added CI gating tests
  - Resolves: bz #1951223


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Igor Raits <ignatenkobrain@fedoraproject.org> - 4.0.16-1
changelog:
  - Update to 4.0.16
    + [versionlock] Take obsoletes into account (RhBug:1627124)
    + Move args "--set-enabled", "--set-disabled" from DNF (RhBug:1727882)
    + Add missing arguments --set-enabled/--set-diabled into error message
    + Warn when --enablerepo/--disablerepo args were passed (RhBug:1727882)
    + [copr] add support for enabling/disabling runtime dependencies
    + [copr] no-liability text to be always printed


author: Nicola Sella <nsella@redhat.com> - 4.0.18-1
changelog:
  - [needs-restarting] Fix plugin fail if needs-restarting.d does not exist
  - [needs-restarting] add kernel-rt to reboot list
  - Fix debug-restore command
  - [config-manager] enable/disable comma separated pkgs (RhBug:1830530)
  - [debug] Use standard demands.resolving for transaction handling
  - [debug] Do not remove install-only packages (RhBug:1844533)
  - return error when dnf download failed
  - README: Reference Fedora Weblate instead of Zanata
  - [reposync] Add latest NEVRAs per stream to download (RhBug: 1833074)
  - copr: don't try to list runtime dependencies


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.36.0-5
changelog:
  - Fix DHCP loses lease when restarting (rh #2094715)
  - core: set "src" attribute for routes from DHCPv4 (rh #2094778)
  - platform: workaround for preserving IPv6 address order (rh #2094715)


author: Eugene Syromiatnikov <esyr@redhat.com> - 4:20191115-5
changelog:
  - Re-generate initramfs not only for the currently running kernel,
    but for several recently installed kernels as well (#1773338).


author: Lukas Slebodnik <lslebodn@fedoraproject.org> - 0.10.0-1
changelog:
  - rhbz#1691300 - libtevent-0.10.0 is available
  - rhbz#1737644 - libldb, libtalloc, libtevent, libtdb: Remove Python 2 subpackages from Fedora 31+


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.4-1
changelog:
  - New version
    Resolves: rhbz#1818417
  - Added all glibc langpacks to allow more locale sensitive tests to run
  - Added perl-FileHandle requirement for the filename-lineno.pl test


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Martin Gieseking <martin.gieseking@uos.de> - 1.1.8-1
changelog:
  - Updated to new release.
  - Dropped version-related patch which has been applied upstream (BZ #1527850).


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Tom Stellard <tstellar@redhat.com> - 3.1-2
changelog:
  - Use make macros
  - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use set_build_flags and -fno-semantic-interposition


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-4
changelog:
  - Drop deprecated functions and duplicated symbols
  - Dange library version to libsepol.so.2
  - temporary ship -compat with libsepol.so.1
  - Re-enable LTO flags


author: Petr Lautrbach <plautrba@redhat.com> - 3.1-5
changelog:
  - Drop and obsolete libsepol-compat subpackage
  - cil: Give error for more than one true or false block


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.23.22-1
changelog:
  - Release 0.23.22 (Daiki Ueno)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.0-1
changelog:
  - common: Only check strndup behavior when replacement is used (Daiki Ueno)
  - Release 0.24.0 (Daiki Ueno)
  - Release 0.23.22 (Daiki Ueno)
  - rpc: Tighten attribute array check with manual enumeration (Daiki Ueno)
  - Check for SUN_LEN and provide fallback (Claes Nästén)
  - Do not define _XOPEN_SOURCE in compat.c on Solaris (Claes Nästén)
  - make autogen.sh a bit more portable (Claes Nästén)
  - rpc-server: Disable parsing CKF_ARRAY_ATTRIBUTE (Daiki Ueno)
  - Update README.md (Daiki Ueno)
  - README.md: Suggest using only meson sub-commands instead of ninja (Daiki Ueno)
  - p11-kit: Add missing <limits.h> include for SIZE_MAX (Daiki Ueno)
  - packit: drop synced_files (Tomas Tomecek)
  - packit: fedora renamed master branch to rawhide (Tomas Tomecek)
  - Fix minor typo (Yuri Chornoivan)
  - po: Add trust/trust.c to POTFILES.in (Daiki Ueno)
  - po: Update POTFILES.in (Daiki Ueno)
  - trust: Make more strings translatable (Daiki Ueno)
  - p11-kit: Make more strings translatable (Daiki Ueno)
  - common: Enable message translation in p11_tool_main (Daiki Ueno)
  - meson: Make sure to set PROJECT_NAME and ENABLE_NLS for 'nls' option (Daiki Ueno)
  - build: Add fuzz/meson.build in the distribution (Daiki Ueno)
  - fuzz: Move the directory out of build/ (Daiki Ueno)
  - Release all library/mock resources before exit (David Cook)
  - Add separate oss-fuzz Makefile target (David Cook)
  - Add build targets for future additional fuzzers (David Cook)
  - Build fuzzer target from meson/ninja (David Cook)
  - Explicit dependency for virtual-fixed-generated.h (David Cook)
  - Build fuzzer target from automake (David Cook)
  - rpc_fuzzer: Clean up buffer before exit (David Cook)
  - New set of fuzzer seeds (David Cook)
  - github: Remove unnecessary SRCDIR envvar (Daiki Ueno)
  - github: Use runuser instead of su for building and testing (Daiki Ueno)
  - github: Use composite action to simplify the main recipe (Daiki Ueno)
  - github: Use pre-built container image for building (Daiki Ueno)
  - README.md: Add GitHub workflow status (Daiki Ueno)
  - travis: Remove configurations other than FreeBSD (Daiki Ueno)
  - autotools: Fix for VPATH build (Daiki Ueno)
  - github actions: Initial CI setup (Anderson Toshiyuki Sasaki)
  - modules: p11_kit_initialize_module: Remove redundant module unref (Daiki Ueno)
  - server: Account for NUL byte at the end of Unix domain socket path (Daiki Ueno)
  - compat: Expose FreeBSD specific issetugid, getresuid, and getresgid (Daiki Ueno)
  - compat: Remove <unistd.h> inclusion from compat.h (Daiki Ueno)
  - compat: Avoid unused variables warning in fdwalk emulation (Daiki Ueno)
  - compat: Pacify ASan complaints on intentionally leaked buffer (Daiki Ueno)
  - meson: Link trust/client modules explicitly to -ldl (Daiki Ueno)
  - p11-kit/lists.c: Add stdint.h to fix compilation (Daniel Engberg)
  - Follow-up to arithmetic overflow fix (David Cook)
  - Check for arithmetic overflows before allocating (David Cook)
  - Check attribute length against buffer size (David Cook)
  - Fix bounds check in p11_rpc_buffer_get_byte_array (David Cook)
  - Fix buffer overflow in log_token_info (David Cook)
  - common: Don't assume __STDC_VERSION__ is always defined (Daiki Ueno)
  - compat: getauxval: correct compiler macro for FreeBSD (Daiki Ueno)
  - compat: fdwalk: add guard for Linux specific local variables (Daiki Ueno)
  - meson: Add missing libtasn1 dependency (Daiki Ueno)
  - travis: Add freebsd build (Daiki Ueno)
  - anchor: Prefer persistent format when storing anchor (Daiki Ueno)
  - travis: Run "make check" along with "make distcheck" for coverage (Daiki Ueno)
  - travis: Use python3 as the default Python interpreter (Daiki Ueno)
  - travis: Route to Ubuntu 20.04 base image (Daiki Ueno)
  - meson: Set -fstack-protector for MinGW64 cross build (Daiki Ueno)
  - meson: expand ternary operator in function call for compatibility (Daiki Ueno)
  - meson: Use custom_target for generating external XML entities (Daiki Ueno)
  - meson: Allow building manpages without gtk-doc (Jan Alexander Steffens (heftig))
  - Rename is_path_component to is_path_separator (Alexander Sosedkin)
  - Use is_path_component in one more place (Alexander Sosedkin)
  - Remove more duplicate separators in p11_path_build (Alexander Sosedkin)
  - common: Fix infloop in p11_path_build (Daiki Ueno)
  - Use inclusive language on certificate distrust (Daiki Ueno)
  - proxy: C_CloseAllSessions: Make sure that calloc args are non-zero (Daiki Ueno)
  - build: Use calloc in a consistent manner (Daiki Ueno)
  - meson: Allow override of default bashcompdir. Fixes meson regression (issue #322).  Pass -Dbashcompdir=/xxx to meson. (John Hein)
  - common: Check for a NULL locale before freeing it (Tavian Barnes)
  - p11_test_copy_setgid: Skip setgid tests on nosuid filesystems (Anders Kaseorg)
  - unix-peer: replace incorrect include1 (Rosen Penev)
  - test-compat: Skip getprogname test if BUILDDIR contains a symlink (Daiki Ueno)
  - add trust-extract-compat into EXTRA-DIST (Xℹ Ruoyao)
  - meson: install trust-extract-compat (Xℹ Ruoyao)
  - rename trust-extract-compat.in to trust-extract-compat (Xℹ Ruoyao)


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Martin Osvald <mosvald@redhat.com> - 2.13.7-7
changelog:
  - Move /var/log/lastlog ownership to systemd (#2066753)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2066767)
  - bashrc: Don't set up VTE-specific PROMPT_COMMAND (#2026892)


author: Yannick Cote <ycote@redhat.com> [1-1.el9_1]
changelog:
  - kernel: nfsd buffer overflow by RPC message over TCP with garbage data [2143187] {CVE-2022-43945}
  - kernel: i915: Incorrect GPU TLB flush can lead to random memory access [2147591] {CVE-2022-4139}
  - kernel: memory corruption in AX88179_178A based USB ethernet device. [2142785] {CVE-2022-2964}
  - kernel: watch queue race condition can lead to privilege escalation [2141637] {CVE-2022-2959}


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.34-1
changelog:
  - Allow stalld setsched and sys_nice
  Resolves: rhbz#2092864
  - Allow rhsmcertd to create cache file in /var/cache/cloud-what
  Resolves: rhbz#2092333
  - Update policy for samba-dcerpcd
  Resolves: rhbz#2083509
  - Add support for samba-dcerpcd
  Resolves: rhbz#2083509
  - Allow rabbitmq to access its private memfd: objects
  Resolves: rhbz#2056565
  - Confine targetcli
  Resolves: rhbz#2020169
  - Add policy for wireguard
  Resolves: 1964862
  - Label /var/cache/insights with insights_client_cache_t
  Resolves: rhbz#2062136
  - Allow ctdbd nlmsg_read on netlink_tcpdiag_socket
  Resolves: rhbz#2094489
  - Allow auditd_t noatsecure for a transition to audisp_remote_t
  Resolves: rhbz#2081907


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.35-1
changelog:
  -Add the corecmd_watch_bin_dirs() interface
  Resolves: rhbz#1965013
  - Update rhcd policy
  Resolves: rhbz#1965013
  - Allow rhcd search insights configuration directories
  Resolves: rhbz#1965013
  - Add the kernel_read_proc_files() interface
  Resolves: rhbz#1965013
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2081425
  - Allow transition to insights_client named content
  Resolves: rhbz#2081425
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2081425
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2081425
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2081425
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2081425
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2081425
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2081425
  - Fix insights client
  Resolves: rhbz#2081425
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2081425
  - Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
  Resolves: rhbz#2081425
  - Allow stalld get scheduling policy of kernel threads
  Resolves: rhbz#2096776
  - Update samba-dcerpcd policy for kerberos usage
  Resolves: rhbz#2096521
  - Allow winbind_rpcd_t connect to self over a unix_stream_socket
  Resolves: rhbz#2096255
  - Allow dlm_controld send a null signal to a cluster daemon
  Resolves: rhbz#2095884
  - Allow dhclient manage pid files used by chronyd
  The chronyd_manage_pid_files() interface was added.
  - Resolves: rhbz#2094155
  Allow install_t nnp_domtrans to setfiles_mac_t
  - Resolves: rhbz#2073010
  - Allow rabbitmq to use systemd notify
  Resolves: rhbz#2056565
  - Allow ksmctl create hardware state information files
  Resolves: rhbz#2021131
  - Label /var/target with targetd_var_t
  Resolves: rhbz#2020169
  - Allow targetclid read generic SSL certificates
  Resolves: rhbz#2020169


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.36-1
changelog:
  - Allow targetclid read generic SSL certificates (fixed)
  Resolves: rhbz#2020169
  - Fix file context pattern for /var/target
  Resolves: rhbz#2020169
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#1965013


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.37-1
changelog:
  - Allow targetclid read /var/target files
  Resolves: rhbz#2020169
  - Update samba-dcerpcd policy for kerberos usage 2
  Resolves: rhbz#2096521
  - Allow samba-dcerpcd work with sssd
  Resolves: rhbz#2096521
  - Allow stalld set scheduling policy of kernel threads
  Resolves: rhbz#2102224


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.38-1
changelog:
  - Allow some domains use sd_notify()
  Resolves: rhbz#2056565
  - Revert "Allow rabbitmq to use systemd notify"
  Resolves: rhbz#2056565
  - Update winbind_rpcd_t
  Resolves: rhbz#2102084
  - Update chronyd_pid_filetrans() to allow create dirs
  Resolves: rhbz#2101910
  - Allow keepalived read the contents of the sysfs filesystem
  Resolves: rhbz#2098130
  - Define LIBSEPOL version 3.4-1
  Resolves: rhbz#2095688


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.39-1
changelog:
  - Add support for systemd-network-generator
  Resolves: RHBZ#2111069
  - Allow systemd work with install_t unix stream sockets
  Resolves: rhbz#2111206
  - Allow sa-update to get init status and start systemd files
  Resolves: RHBZ#2061844


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.40-1
changelog:
  - Allow systemd-modules-load write to /dev/kmsg and send a message to syslogd
  Resolves: RHBZ#2088257
  - Allow systemd_hostnamed label /run/systemd/* as hostnamed_etc_t
  Resolves: RHBZ#1976684
  - Allow samba-bgqd get a printer list
  Resolves: rhbz#2112395
  - Allow networkmanager to signal unconfined process
  Resolves: RHBZ#2074414
  - Update NetworkManager-dispatcher policy
  Resolves: RHBZ#2101910
  - Allow openvswitch search tracefs dirs
  Resolves: rhbz#1988164
  - Allow openvswitch use its private tmpfs files and dirs
  Resolves: rhbz#1988164
  - Allow openvswitch fsetid capability
  Resolves: rhbz#1988164


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.41-1
changelog:
  - Allow unconfined domains to bpf all other domains
  Resolves: RHBZ#2112014
  - Allow stalld get and set scheduling policy of all domains.
  Resolves: rhbz#2105038
  - Allow unconfined_t transition to targetclid_home_t
  Resolves: RHBZ#2106360
  - Allow samba-bgqd to read a printer list
  Resolves: rhbz#2118977
  - Allow system_dbusd ioctl kernel with a unix stream sockets
  Resolves: rhbz#2085392
  - Allow chronyd bind UDP sockets to ptp_event ports.
  Resolves: RHBZ#2118631
  - Update tor_bind_all_unreserved_ports interface
  Resolves: RHBZ#2089486
  - Remove permissive domain for rhcd_t
  Resolves: rhbz#2119351
  - Allow unconfined and sysadm users transition for /root/.gnupg
  Resolves: rhbz#2121125
  - Add gpg_filetrans_admin_home_content() interface
  Resolves: rhbz#2121125
  - Update rhcd policy for executing additional commands
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution
  Resolves: rhbz#2119507
  - Add rpm setattr db files macro
  Resolves: rhbz#2119507
  - Add userdom_view_all_users_keys() interface
  Resolves: rhbz#2119507
  - Allow gpg read and write generic pty type
  Resolves: rhbz#2119507
  - Allow chronyc read and write generic pty type
  Resolves: rhbz#2119507


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.42-1
changelog:
  - Label /var/log/rhc-worker-playbook with rhcd_var_log_t
  Resolves: rhbz#2119351
  - Update insights-client policy (auditctl, gpg, journal)
  Resolves: rhbz#2107363


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.43-1
changelog:
  - Update rhcd policy for executing additional commands 5
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 4
  Resolves: rhbz#2119351
  - Allow rhcd create rpm hawkey logs with correct label
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 3
  Resolves: rhbz#2119351
  - Allow sssd to set samba setting
  Resolves: rhbz#2121125
  - Allow journalctl read rhcd fifo files
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 5
  Resolves: rhbz#2121125
  - Confine insights-client systemd unit
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 4
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 3
  Resolves: rhbz#2121125
  - Allow rhcd execute all executables
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 2
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 2
  Resolves: rhbz#2121125


author: Davide Caratti <dcaratti@redhat.com> - 1:2.10-4
changelog:
  - Explicitly allow/disallow unsafe legacy renegotiation on configuration base.
    Resolves: rhbz#2077973


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Andrea Claudi <aclaudi@redhat.com> - 5.13.0-5.el9
changelog:
  - Add build and runtime dependency on libbpf (Andrea Claudi) [1994520]
  - Use TC_LIB_DIR environment variable (Andrea Claudi) [1994545]
  - Re-add iproute-doc package on the specfile (Andrea Claudi) [1994581]


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-1
changelog:
  - Update to version 0.9.4
    https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  - Removed inclusion of OpenSSH server configuration file from
    libssh_server.config
  - Added patch to re-enable algorithms using sha1 in sshd for testing
  - resolves: #1822529 - CVE-2020-1730


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.4-3
changelog:
  - Do not return error when server properly closed the channel (#1849069)
  - Add a test for CVE-2019-14889
  - Do not parse configuration file in torture_knownhosts test


author: Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
changelog:
  - Update to version 0.9.5
    https://www.libssh.org/2020/09/10/libssh-0-9-5/
  - Removed patch to re-enable algorithms using sha1 in sshd for testing
  - The algorithms supported by sshd are now automatically detected for testing
  - Resolves: #1862457 - CVE-2020-16135


author: Norbert Pocs <npocs@redhat.com> - 0.9.6-1
changelog:
  - Fix CVE-CVE-2021-3634 libssh: possible heap-based buffer
    overflow when rekeying
  - Fix static analyzer issues in rhbz#1938795
  - Rebase to version 0.9.6
  - Resolves: rhbz#1994607, rhbz#1938795, rhbz#2009669


author: Tomáš Mráz <tmraz@redhat.com> 1.4.1-1
changelog:
  - Disable python2 bindings in Fedora 31 and above
  - Add conditionals for Python2 and Python3
  - pam_pwquality: Abort the retry loop if user requests it
  - Allow setting retry, enforce_for_root, and local_users_only options
    in the pwquality.conf config file


author: Tomáš Mráz <tmraz@redhat.com> 1.4.2-1
changelog:
  - Fix previous release regression in handling retry, enforce_for_root,
    and local_users_only options


author: Tomáš Mráz <tmraz@redhat.com> 1.4.3-1
changelog:
  - Multiple translation updates
  - Add usersubstr check for substrings of N characters from the username
    patch by Danny Sauer


author: Paul Wouters <pwouters@redhat.com> - 1.4.4-2
changelog:
  - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-11
changelog:
  - Allow NetworkManager manage dhcpd unit files
  - Update ninfod policy to add nnp transition from systemd to ninfod
  - Remove container interface calling by named_filetrans_domain.


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-12
changelog:
  - Allow rngd create netlink_kobject_uevent_socket and read udev runtime files
  - Allow ssh-keygen create file in /var/lib/glusterd
  - Update ctdbd_manage_lib_files() to also allow mmap ctdbd_var_lib_t files
  - Merge ipa and ipa_custodia modules
  - Allow NetworkManager_ssh_t to execute_no_trans for binary ssh_exec_t
  - Introduce daemons_dontaudit_scheduling boolean
  - Modify path for arping in netutils.fc to match both bin and sbin
  - Change file context for /var/run/pam_ssh to match file transition
  - Add file context entry and file transition for /var/run/pam_timestamp


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-13
changelog:
  - Update networkmanager_read_pid_files() to allow also list_dir_perms
  - Update policy for NetworkManager_ssh_t
  - Allow glusterd synchronize between master and slave
  - Allow spamc_t domain to read network state
  - Allow strongswan use tun/tap devices and keys
  - Allow systemd_userdbd_t domain logging to journal


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-14
changelog:
  - Allow chronyc_t domain to use nsswitch
  - Allow nscd_socket_use() for domains in nscd_use() unconditionally
  - Add allow rules for lttng-sessiond domain
  - Label dirsrv systemd unit files and add dirsrv_systemctl()
  - Allow gluster geo-replication in rsync mode
  - Allow nagios_plugin_domain execute programs in bin directories
  - Allow sys_admin capability for domain labeled systemd_bootchart_t
  - Split the arping path regexp to 2 lines to prevent from relabeling
  - Allow tcpdump sniffing offloaded (RDMA) traffic
  - Revert "Change arping path regexp to work around fixfiles incorrect handling"
  - Change arping path regexp to work around fixfiles incorrect handling
  - Allow read efivarfs_t files by domains executing systemctl file


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-15
changelog:
  - Add fetchmail_uidl_cache_t type for /var/mail/.fetchmail.pid
  - Support multiple ways of tlp invocation
  - Allow qemu-kvm read and write /dev/mapper/control
  - Introduce logrotate_use_cifs boolean
  - Allow ptp4l_t sys_admin capability to run bpf programs
  - Allow to getattr files on an nsfs filesystem
  - httpd: Allow NoNewPriv transition from systemd
  - Allow rhsmd read process state of all domains and kernel threads
  - Allow rhsmd mmap /etc/passwd
  - Allow systemd-logind manage efivarfs files
  - Allow initrc_t tlp_filetrans_named_content()
  - Allow systemd_resolved_t to read efivarfs
  - Allow systemd_modules_load_t to read efivarfs
  - Introduce systemd_read_efivarfs_type attribute
  - Allow named transition for /run/tlp from a user shell
  - Allow ipsec_mgmt_t mmap ipsec_conf_file_t files
  - Add file context for /sys/kernel/tracing


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-17
changelog:
  - Allow pdns server to read system state
  - Allow irqbalance nnp_transition
  - Fix description tag for the sssd_connect_all_unreserved_ports tunable
  - Allow journalctl process set its resource limits
  - Add sssd_access_kernel_keys tunable to conditionally access kernel keys
  - Make keepalived work with network namespaces
  - Create sssd_connect_all_unreserved_ports boolean
  - Allow hypervkvpd to request kernel to load a module
  - Allow systemd_private_tmp(dirsrv_tmp_t)
  - Allow microcode_ctl get attributes of sysfs directories
  - Remove duplicate files_dontaudit_list_tmp(radiusd_t) line
  - Allow radiusd connect to gssproxy over unix domain stream socket
  - Add fwupd_cache_t file context for '/var/cache/fwupd(/.*)?'
  - Allow qemu read and write /dev/mapper/control
  - Allow tlp_t can_exec() tlp_exec_t
  - Dontaudit vpnc_t setting its process scheduling
  - Remove files_mmap_usr_files() call for particular domains
  - Allow dirsrv_t list cgroup directories
  - Crete the kerberos_write_kadmind_tmp_files() interface
  - Allow realmd_t dbus chat with accountsd_t
  - Label systemd-growfs and systemd-makefs       as fsadm_exec_t
  - Allow staff_u and user_u setattr generic usb devices
  - Allow sysadm_t dbus chat with accountsd
  - Modify kernel_rw_key() not to include append permission
  - Add kernel_rw_key() interface to access to kernel keyrings
  - Modify systemd_delete_private_tmp() to use delete_*_pattern macros
  - Allow systemd-modules to load kernel modules
  - Add cachefiles_dev_t as a typealias to cachefiles_device_t
  - Allow libkrb5 lib read client keytabs
  - Allow domain mmap usr_t files
  - Remove files_mmap_usr_files() call for systemd domains
  - Allow sshd write to kadmind temporary files
  - Do not audit staff_t and user_t attempts to manage boot_t entries
  - Add files_dontaudit_manage_boot_dirs() interface
  - Allow systemd-tty-ask-password-agent read efivarfs files


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-18
changelog:
  - Allow oddjob_t process noatsecure permission for ipa_helper_t
  - Allow keepalived manage its private type runtime directories
  - Update irqbalance runtime directory file context
  - Allow irqbalance file transition for pid sock_files and directories
  - Allow systemd_private_tmp(dirsrv_tmp_t) instead of dirsrv_t
  - Allow virtlogd_t manage virt lib files
  - Allow systemd set efivarfs files attributes
  - Support systemctl --user in machinectl
  - Allow chkpwd_t read and write systemd-machined devpts character nodes
  - Allow init_t write to inherited systemd-logind sessions pipes


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-19
changelog:
  - Additional support for keepalived running in a namespace
  - Remove systemd_dbus_chat_resolved(pcp_pmie_t)
  - virt: remove the libvirt qmf rules
  - Allow certmonger manage dirsrv services
  - Run ipa_helper_noatsecure(oddjob_t) only if the interface exists
  - Allow domain dbus chat with systemd-resolved
  - Define file context for /var/run/netns directory only
  - Revert "Add support for fuse.glusterfs"


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-22
changelog:
  - Allow virtlockd only getattr and lock block devices
  - Allow qemu-ga read all non security file types conditionally
  - Allow virtlockd manage VMs posix file locks
  - Allow smbd get attributes of device files labeled samba_share_t
  - Label /tmp/krb5_0.rcache2 with krb5_host_rcache_t
  - Add a new httpd_can_manage_courier_spool boolean
  - Create interface courier_manage_spool_sockets() in courier policy to allow to search dir and allow manage sock files
  - Revert "Allow qemu-kvm read and write /dev/mapper/control"
  - Revert "Allow qemu read and write /dev/mapper/control"
  - Revert "Dontaudit and disallow sys_admin capability for keepalived_t domain"
  - Dontaudit pcscd_t setting its process scheduling
  - Dontaudit thumb_t setting its process scheduling
  - Allow munin domain transition with NoNewPrivileges
  - Add dev_lock_all_blk_files() interface
  - Allow auditd manage kerberos host rcache files
  - Allow systemd-logind dbus chat with fwupd


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-23
changelog:
  - Revert "Add support for /sys/fs/kdbus and allow login_pgm domain to access it."
  - Revert "Add interface to allow types to associate with cgroup filesystems"
  - Revert "kdbusfs should not be accessible for now."
  - Revert "kdbusfs should not be accessible for now by default for shipped policies. It should be moved to kdbus.pp"
  - Revert "Add kdbus.pp policy to allow access /sys/fs/kdbus. It needs to go with own module because this is workaround for now to avoid SELinux in enforcing mode."
  - Remove the legacy kdbus module
  - Remove "kdbus = module" from modules-targeted-base.conf


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-24
changelog:
  - Add ipa_helper_noatsecure() interface unconditionally
  - Conditionally allow nagios_plugin_domain dbus chat with init
  - Revert "Update allow rules set for nrpe_t domain"
  - Add ipa_helper_noatsecure() interface to ipa.if
  - Label /usr/libexec/qemu-pr-helper with virtd_exec_t
  - Allow kadmind manage kerberos host rcache
  - Allow nsswitch_domain to connect to systemd-machined using a unix socket
  - Define named file transition for sshd on /tmp/krb5_0.rcache2
  - Allow systemd-machined create userdbd runtime sock files
  - Disable kdbus module before updating


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.6-25
changelog:
  - Allow certmonger fowner capability
  - The nfsdcld service is now confined by SELinux
  - Change transitions for ~/.config/Yubico
  - Allow all users to connect to systemd-userdbd with a unix socket
  - Add file context for ~/.config/Yubico
  - Allow syslogd_t domain to read/write tmpfs systemd-bootchart files
  - Allow login_pgm attribute to get attributes in proc_t
  - Allow passwd to get attributes in proc_t
  - Revert "Allow passwd to get attributes in proc_t"
  - Revert "Allow login_pgm attribute to get attributes in proc_t"
  - Allow login_pgm attribute to get attributes in proc_t
  - Allow passwd to get attributes in proc_t
  - Allow traceroute_t and ping_t to bind generic nodes.
  - Create macro corenet_icmp_bind_generic_node()
  - Allow unconfined_t to node_bind icmp_sockets in node_t domain


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-1
changelog:
  - Bump version as Fedora 33 has been branched
  - Allow php-fpm write access to /var/run/redis/redis.sock
  - Allow journalctl to read and write to inherited user domain tty
  - Update rkt policy to allow rkt_t domain to read sysfs filesystem
  - Allow arpwatch create and use rdma socket
  - Allow plymouth sys_chroot capability
  - Allow gnome-initial-setup execute in a xdm sandbox
  - Add new devices and filesystem interfaces


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-2
changelog:
  - Allow openvswitch fowner capability and create netlink sockets
  - Allow additional permissions for gnome-initial-setup
  - Add to map non_security_files to the userdom_admin_user_template template
  - kernel/filesystem: Add exfat support (no extended attributes)


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-4
changelog:
  - Allow chronyd_t to accept and make NTS-KE connections
  - Allow domain write to an automount unnamed pipe
  - Label /var/run/zincati/public/motd.d/* as motd_var_run_t
  - Allow login programs to (only) read MOTD files and symlinks
  - Relabel /usr/sbin/charon-systemd as ipsec_exec_t
  - Confine systemd-sleep service
  - Add fstools_rw_swap_files() interface
  - Label 4460/tcp port as ntske_port_t
  - Add lvm_dbus_send_msg(), lvm_rw_var_run() interfaces


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-5
changelog:
  - Remove empty line from rshd.fc
  - Allow systemd-logind read swap files
  - Add fstools_read_swap_files() interface
  - Allow dyntransition from sshd_t to unconfined_t
  - Removed adding to attribute unpriv_userdomain from userdom_unpriv_type template


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-6
changelog:
  - rpc.fc: Include /etc/exports.d dir & files
  - Create chronyd_pid_filetrans() interface
  - Change invalid type redisd_t to redis_t in redis_stream_connect()
  - Revert "Removed adding to attribute unpriv_userdomain from userdom_unpriv_type template"
  - Allow init dbus chat with kernel
  - Allow initrc_t create /run/chronyd-dhcp directory with a transition
  - Drop gcc from dependencies in Travis CI
  - fc_sort.py: Use "==" for comparing integers.
  - re-implement fc_sort in python
  - Remove invalid file context line
  - Drop git from dependencies in Travis CI


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-8
changelog:
  - Set correct default file context for /usr/libexec/pcp/lib/*
  - Introduce rpmdb_t type
  - Allow slapd manage files/dirs in ldap certificates directory
  - Revert "Allow certmonger add new entries in a generic certificates directory"
  - Allow certmonger add new entries in a generic certificates directory
  - Allow slapd add new entries in ldap certificates directory
  - Remove retired PCP pmwebd and pmmgr daemons (since 5.0)
  - Let keepalived bind a raw socket
  - Add default file context for /usr/libexec/pcp/lib/*
  - squid: Allow net_raw capability when squid_use_tproxy is enabled
  - systemd: allow networkd to check namespaces
  - Add ability to read init_var_run_t where fs_read_efivarfs_files is allowed
  - Allow resolved to created varlink sockets and the domain to talk to it
  - selinux: tweak selinux_get_enforce_mode() to allow status page to be used
  - systemd: allow all systemd services to check selinux status
  - Set default file context for /var/lib/ipsec/nss
  - Allow user domains transition to rpmdb_t
  - Revert "Add miscfiles_add_entry_generic_cert_dirs() interface"
  - Revert "Add miscfiles_create_generic_cert_dirs() interface"
  - Update miscfiles_manage_all_certs() to include managing directories
  - Add miscfiles_create_generic_cert_dirs() interface
  - Add miscfiles_add_entry_generic_cert_dirs() interface
  - Revert "Label /var/run/zincati/public/motd.d/* as motd_var_run_t"


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-9
changelog:
  - Allow varnish map its private tmp files
  - Allow dovecot bind to smtp ports
  - Change fetchmail temporary files path to /var/spool/mail
  - Allow cups_pdf_t domain to communicate with unix_dgram_socket
  - Set file context for symlinks in /etc/httpd to etc_t
  - Allow rpmdb rw access to inherited console, ttys, and ptys
  - Allow dnsmasq read public files
  - Announce merging of selinux-policy and selinux-policy-contrib
  - Label /etc/resolv.conf as net_conf_t only if it is a plain file
  - Fix range for unreserved ports
  - Add files_search_non_security_dirs() interface
  - Introduce logging_syslogd_append_public_content tunable
  - Add miscfiles_append_public_files() interface


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-10
changelog:
  - Allow Xephyr connect to 6000/tcp port and open user ptys
  - Allow kexec manage generic tmp files
  - Update targetd nfs & lvm
  - Add interface rpc_manage_exports
  - Merge selinux-policy and selinux-policy-contrib repos


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-11
changelog:
  - Allow systemd-logind manage init's pid files
  - Allow tcsd the setgid capability
  - Allow systemd-resolved manage its private runtime symlinks
  - Update systemd_resolved_read_pid() to also read symlinks
  - Update systemd-sleep policy
  - Add groupadd_t fowner capability
  - Migrate to GitHub Actions
  - Update README.md to reflect the state after contrib and base merge
  - Add README.md announcing merging of selinux-policy and selinux-policy-contrib
  - Adapt .travis.yml to contrib merge
  - Merge contrib into the main repo
  - Prepare to merge contrib repo
  - Move stuff around to match the main repo


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-12
changelog:
  - Allow dovecot_auth_t stat /proc filesystem
  - Allow sysadm_u user and unconfined_domain_type manage perf_events
  - Allow pcp-pmcd manage perf_events
  - Add manage_perf_event_perms object permissions set
  - Add perf_event access vectors.
  - Allow sssd, unix_chkpwd, groupadd stat /proc filesystem
  - Allow stub-resolv.conf to be a symlink
  - sysnetwork.if: avoid directly referencing systemd_resolved_var_run_t
  - Create the systemd_dbus_chat_resolved() compatibility interface
  - Allow nsswitch-domain write to systemd-resolved PID socket files
  - Add systemd_resolved_write_pid_sock_files() interface
  - Add default file context for "/var/run/chrony-dhcp(/.*)?"
  - Allow timedatex dbus chat with cron system domain
  - Add cron_dbus_chat_system_job() interface
  - Allow systemd-logind manage init's pid files


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-13
changelog:
  - Label /dev/isst_interface as cpu_device_t
  - Dontaudit firewalld dac_override capability
  - Allow ipsec set the context of a SPD entry to the default context
  - Build binary RPMs in CI
  - Add SRPM build scripts for COPR


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-14
changelog:
  - Allow domain read usermodehelper state information
  - Remove all kernel_read_usermodehelper_state() interface calls
  - .copr: improve timestamp format
  - Allow wireshark create and use rdma socket
  - Allow domain stat /proc filesystem
  - Remove all kernel_getattr_proc() interface calls
  - Revert "Allow passwd to get attributes in proc_t"
  - Revert "Allow dovecot_auth_t stat /proc filesystem"
  - Revert "Allow sssd, unix_chkpwd, groupadd stat /proc filesystem"
  - Allow sssd read /run/systemd directory
  - Label /dev/vhost-vdpa-[0-9]+ as vhost_device_t


author: Petr Lautrbach <plautrba@redhat.com> - 3.14.7-15
changelog:
  - Update specfile to not verify md5/size/mtime for active store files
  - Add /var/mnt equivalency to /mnt
  - Rebuild with SELinux userspace 3.2-rc1 release


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-17
changelog:
  - Update .copr/make-srpm.sh to use rawhide as DISTGIT_BRANCH
  - Dontaudit setsched for rndc
  - Allow systemd-logind destroy entries in message queue
  - Add userdom_destroy_unpriv_user_msgq() interface
  - ci: Install build dependencies from koji
  - Dontaudit vhostmd to write in /var/lib/rpm/ dir and allow signull rpm
  - Add new cmadmin port for bfdd dameon
  - virtiofs supports Xattrs and SELinux
  - Allow domain write to systemd-resolved PID socket files
  - Label /var/run/pcsd-ruby.socket       socket with cluster_var_run_t type
  - Allow rhsmcertd_t domain transition to kpatch_t
  - Revert "Add kpatch_exec() interface"
  - Revert "Allow rhsmcertd execute kpatch"
  - Allow openvswitch create and use xfrm netlink sockets
  - Allow openvswitch_t perf_event write permission
  - Add kpatch_exec() interface
  - Allow rhsmcertd execute kpatch
  - Adds rule to allow glusterd to access RDMA socket
  - radius: Lexical sort of service-specific corenet rules by service name
  - VQP: Include IANA-assigned TCP/1589
  - radius: Allow binding to the VQP port (VMPS)
  - radius: Allow binding to the BDF Control and Echo ports
  - radius: Allow binding to the DHCP client port
  - radius: Allow net_raw; allow binding to the DHCP server ports
  - Add rsync_sys_admin tunable to allow rsync sys_admin capability
  - Allow staff_u run pam_console_apply
  - Allow openvswitch_t perf_event open permission
  - Allow sysadm read and write /dev/rfkill
  - Allow certmonger fsetid capability
  - Allow domain read usermodehelper state information


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-18
changelog:
  - Allow lockdown confidentiality for domains using perf_event
  - define lockdown class and access
  - Add perfmon capability for all domains using perf_event
  - Allow ptp4l_t bpf capability to run bpf programs
  - Revert "Allow ptp4l_t sys_admin capability to run bpf programs"
  - access_vectors: Add new capabilities to cap2
  - Allow systemd and systemd-resolved watch dbus pid objects
  - Add new watch interfaces in the base and userdomain policy
  - Add watch permissions for contrib packages
  - Allow xdm watch /usr directories
  - Allow getty watch its private runtime files
  - Add watch permissions for nscd and sssd
  - Add watch permissions for firewalld and NetworkManager
  - Add watch permissions for syslogd
  - Add watch permissions for systemd services
  - Allow restorecond watch /etc dirs
  - Add watch permissions for user domain types
  - Add watch permissions for init
  - Add basic watch interfaces for systemd
  - Add basic watch interfaces to the base module
  - Add additional watch object permissions sets and patterns
  - Allow init_t to watch localization symlinks
  - Allow init_t to watch mount directories
  - Allow init_t to watch cgroup files
  - Add basic watch patterns
  - Add new watch* permissions


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-19
changelog:
  - Bump version as Fedora 34 has been branched off rawhide
  - Allow xdm watch its private lib dirs, /etc, /usr
  - Allow systemd-importd create /run/systemd/machines.lock file
  - Allow rhsmcertd_t read kpatch lib files
  - Add integrity lockdown permission into dev_read_raw_memory()
  - Add confidentiality lockdown permission into fs_rw_tracefs_files()
  - Allow gpsd read and write ptp4l_t shared memory.
  - Allow colord watch its private lib files and /usr
  - Allow init watch_reads mount PID files
  - Allow IPsec and Certmonger to use opencryptoki services


author: Zdenek Pytela <zpytela@redhat.com> - 3.14.7-20
changelog:
  - Allow userdomain watch various filesystem objects
  - Allow systemd-logind and systemd-sleep integrity lockdown permission
  - Allow unconfined_t and kprop_t to create krb5_0.rcache2 with the right context
  - Allow pulseaudio watch devices and systemd-logind session dirs
  - Allow abrt-dump-journal-* watch generic log dirs and /run/log/journal dir
  - Remove duplicate files_mounton_etc(init_t) call
  - Add watch permissions to manage_* object permissions sets
  - Allow journalctl watch generic log dirs and /run/log/journal dir
  - Label /etc/resolv.conf as net_conf_t even when it's a symlink
  - Allow SSSD to watch /var/run/NetworkManager
  - Allow dnsmasq_t to watch /etc
  - Remove unnecessary lines from the new watch interfaces
  - Fix docstring for init_watch_dir()
  - Allow xdm watch its private lib dirs, /etc, /usr


