# changelog

author: Neal Gompa <ngompa@centosproject.org> - 2.0.18-1
changelog:
  - Update to 2.0.18
    Resolves: rhbz#2028076
  - Fix multilib conflict with SDL_revision.h (rhbz#2008838)
  - Backport fix for building against wayland-1.20+
  - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359)


author: Sergio Correia <scorreia@redhat.com> - 3.1.2-2
changelog:
  - Remove 
   
  if [ $1 -eq 0 ] && [ -x "/usr/lib/systemd/systemd-update-helper" ]; then 
          /usr/lib/systemd/systemd-update-helper remove-system-units from %preun scriptlet, as it was causing troubles when removing audit || : 
  fi 

    Related: RHEL-14896


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-1
changelog:
  - New upstream maintenance release, 3.1.4
  - Prevent scriplets from failing
  - When upgrading, restart the daemon if it's running
  - If uninstalling, stop the daemon
  - auditctl: use pidfd_send_signal for signaling auditd
    Resolves: RHEL-45865
  - Minor doc update
    Resolves: RHEL-5186
  - augenrules: do not exit with failure if in immutable mode
    Resolves: RHEL-40110
  - auditd.service: Disable ProtectControlGroups
    Resolves: RHEL-5197
  - auditctl: correct output when displaying rules with exe/path/dir
    Resolves: RHEL-40243


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-2
changelog:
  - Disable ProtectKernelModules=true in service file
    Resolves: RHEL-59570
  - af_unix plugin: restore original behavior in binary mode
    Resolves: RHEL-59585
  - Support image mode
    Resolves: RHEL-69033
  - Resolve ordering cycle when using remote logging
    Resolves: RHEL-11252
  - Filter syscalls to ensure architecture-specific availability
    Resolves: RHEL-70455


author: Attila Lakatos <alakatos@redhat.com> - 3.1.5-5
changelog:
  - ausearch: correct search for DAEMON related events
  - allow hex digits when interpreting tty data
    Resolves: RHEL-82279
  - Fix TTY hostname in log messages
    Resolves: RHEL-78323


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-22
changelog:
  - Resolve CVE-2024-1975
  - Resolve CVE-2024-1737
  - Resolve CVE-2024-4076
  - Add ability to change runtime limits for max types and records per name


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-16
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Clemens Lang <cllang@redhat.com> - 1:1.1.1k-4
changelog:
  - Fixes CVE-2022-0778 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2063148
  - Disable FIPS mode; it does not work and will not be certified
    Resolves: rhbz#2013669


author: Jindrich Novy <jnovy@redhat.com> - 3:2.224.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.224.0
  - Related: Jira:RHEL-2112


author: Lokesh Mandvekar <lsm5@redhat.com> - 3:2.226.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.226.0
  - Remove dependency on policycoreutils-python-utils
  - Related: Jira:RHEL-2112
  - Related: Jira:RHEL-18316


author: Jindrich Novy <jnovy@redhat.com> - 3:2.227.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.227.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.228.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.228.1
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 3:2.230.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.230.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.231.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.231.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.232.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.232.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 3:2.233.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.233.0
  - Resolves: RHEL-58997


author: Jindrich Novy <jnovy@redhat.com> - 3:2.234.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.234.2
  - Related: RHEL-60277


author: Jindrich Novy <jnovy@redhat.com> - 3:2.235.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.235.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.236.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0
  - Resolves: RHEL-80473


author: Jindrich Novy <jnovy@redhat.com> - 3:2.237.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0
  - Related: RHEL-80816


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.7.19-3.1
changelog:
  - Update containerd binary to v1.7.19
  - Update Golang runtime to 1.21.12, which includes a fix for CVE-2024-24791.


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.7.22-3.1
changelog:
  - Update containerd binary to v1.7.22
  - Update runc binary to v1.1.14
  - Update Golang runtime to 1.22.7


author: Sebastiaan van Stijn <thajeztah@docker.com> - 1.7.24-3.1
changelog:
  - Update containerd binary to v1.7.24
  - Update systemd unit to start containerd service after dbus.service
  - Update runc binary to v1.2.2


author: Paweł Gronowski <pawel.gronowski@docker.com> - 1.7.25-3.1
changelog:
  - Update containerd binary to v1.7.25
  - Update runc binary to v1.2.4
  - Update the license fields to use the recommented SPDX identifier


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Marek Polacek <polacek@redhat.com> 11.4.1-3
changelog:
  - update from releases/gcc-11-branch (RHEL-17638)
    - PRs c++/106310, c++/106890, c++/109666, c++/109761, c++/111357,
  	c++/111512, c++/112795, d/108842, d/110359, d/110511, d/110516,
  	debug/110295, fortran/95947, fortran/103506, fortran/107397,
  	fortran/110288, fortran/110585, fortran/110658, fortran/111837,
  	fortran/111880, libstdc++/95048, libstdc++/99327, libstdc++/104161,
  	libstdc++/104242, libstdc++/108178, libstdc++/111050,
  	libstdc++/111511, libstdc++/112314, libstdc++/112491,
  	middle-end/110200, middle-end/111699, middle-end/111818,
  	middle-end/112733, rtl-optimization/110237, sanitizer/112727,
  	target/96762, target/101177, target/101469, target/105325,
  	target/109800, target/109932, target/110011, target/110044,
  	target/110170, target/110309, target/110741, target/111001,
  	target/111340, target/111367, target/111408, target/111815,
  	target/112672, target/112816, target/112837, target/112845,
  	target/112891, testsuite/66005, tree-optimization/110298,
  	tree-optimization/110731, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111614,
  	tree-optimization/111764, tree-optimization/111917
  - use -fno-stack-protector in some aarch64 tests


author: Marek Polacek <polacek@redhat.com> 11.5.0-1
changelog:
  - update from releases/gcc-11 branch (RHEL-35635)
    - GCC 11.5 release
    - PRs ada/113893, ada/113979, analyzer/104042, c/113262, c/114007, c/114493,
  	c++/89224, c++/92145, c++/92407, c++/97990, c++/99710, c++/100667,
  	c++/100772, c++/101765, c++/103185, c++/104051, c++/111485,
  	c++/111529, c++/113598, c++/113674, c++/114537, c++/114561,
  	c++/114562, c++/114572, c++/114634, c++/114691, d/113125, d/113758,
  	d/114171, debug/111080, debug/112718, driver/115440, fortran/50410,
  	fortran/103715, fortran/104908, fortran/107426, fortran/114474,
  	fortran/114825, gcov-profile/114115, libfortran/110651,
  	libgomp/113192, libquadmath/114533, libstdc++/104259,
  	libstdc++/104606, libstdc++/105417, libstdc++/110054,
  	libstdc++/113250, libstdc++/114147, libstdc++/114401,
  	libstdc++/114750, libstdc++/114803, libstdc++/115269,
  	libstdc++/115454, libstdc++/115575, middle-end/90348,
  	middle-end/95351, middle-end/107385, middle-end/108789,
  	middle-end/110027, middle-end/110115, middle-end/110176,
  	middle-end/111422, middle-end/111632, middle-end/112732,
  	middle-end/113907, middle-end/113921, middle-end/114599,
  	middle-end/114734, middle-end/114753, middle-end/115527,
  	middle-end/115836, objc/101666, objc/101718, preprocessor/105608,
  	rtl-optimization/100303, rtl-optimization/108086,
  	rtl-optimization/110079, rtl-optimization/114768,
  	rtl-optimization/114902, rtl-optimization/115092, sanitizer/97696,
  	sanitizer/111736, sanitizer/114956, sanitizer/115172, target/88309,
  	target/101737, target/101865, target/105522, target/108120,
  	target/108743, target/110411, target/111610, target/111677,
  	target/112397, target/113122, target/113281, target/114049,
  	target/114098, target/114130, target/114184, target/114310,
  	target/114837, target/114846, target/115253, target/115297,
  	target/115360, target/115457, target/115475, target/115611,
  	target/115691, testsuite/113175, testsuite/114034, testsuite/114036,
  	tree-optimization/110386, tree-optimization/110422,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111331, tree-optimization/111407,
  	tree-optimization/111445, tree-optimization/111736,
  	tree-optimization/112495, tree-optimization/112505,
  	tree-optimization/112793, tree-optimization/113372,
  	tree-optimization/113552, tree-optimization/113603,
  	tree-optimization/114027, tree-optimization/114115,
  	tree-optimization/114566, tree-optimization/114876,
  	tree-optimization/115192, tree-optimization/115337,
  	tree-optimization/115843
  - fix FLUSH IOSTAT value (PR libfortran/101255, RHEL-32536)
  - fix conditions for using memcmp in
    std::lexicographical_compare_three_way (PR libstdc++/113960)


author: Marek Polacek <polacek@redhat.com> 11.5.0-2
changelog:
  - fix TARGET_CPU_DEFAULT (PR target/105157, RHEL-50037)
  - libstdc++: Workaround kernel-headers on s390x-linux (RHEL-50054)
  - fix wrong code with memcpy from _Complex (PR tree-optimization/116034)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.gitb1c706d
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: use newly introduced SKIP_LINTING=1
  - packaging: drop stale workarounds


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240815-1.gite217f03
changelog:
  - java: start controlling / disable DTLSv1.0
  - java: disable anon ciphersuites, tying them to NULL
  - java: respect more key size restrictions
  - java: specify jdk.tls.namedGroups system property
  - java: make hash, mac and sign more orthogonal
  - fips-mode-setup: add another scary "unsupported"
  - fips-mode-setup: flashy ticking warning upon use
  - java: use and include jdk.disabled.namedCurves
  - ec_min_size: introduce and use in java, default to 256
  - java: stop specifying jdk.tls.namedGroups in javasystem
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Pavol Zacik <pzacik@redhat.com> - 1:2.3.3op2-28
changelog:
  - RHEL-39940 cups: Cupsd Listen arbitrary chmod 0140777
  - Delete the domain socket file after stopping the cups.socket service
  - Fix cupsd Listener checks


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Jakub Jelinek <jakub@redhat.com> 0.13-6
changelog:
  - DW_FORM_implicit_const handling fixes (sw#27212, sw#27213)
  - temporarily build odr tests with -gdwarf-4 as they are incompatible with
    DWARF 5


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-10
changelog:
  - Disable xwidgets (RHEL-14551)
  - org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
  - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
  - Add protection for LaTeX preview (CVE-2024-30204)
  - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-16
changelog:
  - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library


author: Zdenek Dohnal <zdohnal@redhat.com> - 9.54.0-17
changelog:
  - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
  - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
  - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: Patsy Griffin <patsy@redhat.com> - 2.34-122
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36148)


author: Daiki Ueno <dueno@redhat.com> - 3.8.2-2
changelog:
  - Bump nettle dependency to 3.9.1
  - Skip KTLS test exercising ChaCha20-Poly1305 in TLS 1.2 (RHEL-18498)


author: Daiki Ueno <dueno@redhat.com> - 3.8.3-2
changelog:
  - Fix timing side-channel in deterministic ECDSA (RHEL-28959)
  - Fix potential crash during chain building/verification (RHEL-28954)


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Coiby Xu <coxu@redhat.com> - 1.6.2-1
changelog:
  - ima-setup: run zipl after building initramfs for s390x (RHEL-72293)
  - update to upstream 1.6.2 (RHEL-82793)


author: Coiby Xu <coxu@redhat.com> - 1.6.2-2
changelog:
  - Verify IMA signature to make sure it's correct (RHEL-105471)
  - Drop old libimaevm.so.4 (RHEL-82797)


author: Jan Macku <jamacku@redhat.com> - 10.11.8-1
changelog:
  - netconsole: var/lock -> run/lock
  - netconsole: source sysconfig/network only if it exists
  - netconsole: remove unused variables
  - netconsole: remove trailing whitespaces
  - sync spec with c9s


author: Phil Sutter <psutter@redhat.com> - 1.8.8-5
changelog:
  - nft: un-break among match with concatenation
  - nft: fix ebtables among match when mac+ip addresses are used


author: Phil Sutter <psutter@redhat.com> [1.8.10-1.el9]
changelog:
  - spec: Support for _excludedocs macro in alternatives installation (Phil Sutter) [RHEL-5810]
  - Rebase onto version 1.8.10 (Phil Sutter) [RHEL-14147]


author: Michel Lind <salimma@fedoraproject.org> - 1.8.10-2.2
changelog:
  - Hardcode dist for iptables dependency, since on epel9-next it evaluates to
    el9.next while upstream's disttag is only el9


author: Phil Sutter <psutter@redhat.com> [1.8.10-3.el9]
changelog:
  - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928]
  - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463]
  - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619]
  - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922]


author: Phil Sutter <psutter@redhat.com> [1.8.10-5.el9]
changelog:
  - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264]
  - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264]
  - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264]
  - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497]
  - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497]
  - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497]


author: Ingvar Hagelund <ingvar@redpill-linpro.com> - 5.0.1-5
changelog:
  - Actually, specify pagesizes according to arches, closes #1545539
  - Remove patch disabling thp as this is now handled by configure, see
    upstream issue 526


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-504.el9]
changelog:
  - Bump RHEL MINOR to 9.6 (Rado Vrbovsky)
  - block: initialize integrity buffer to zero before writing it to media (Ming Lei) [RHEL-54768] {CVE-2024-43854}
  - perf/x86/amd/uncore: Fix DF and UMC domain identification (David Arcari) [RHEL-43147]
  - x86/mm/numa: Move early mptable evaluation into common code (David Arcari) [RHEL-43147]
  - x86/cpu: Move leftover contents of topology.c to setup.c (David Arcari) [RHEL-43147]
  - x86/topology: convert to use arch_cpu_is_hotpluggable() (David Arcari) [RHEL-43147]
  - x86/topology: use weak version of arch_unregister_cpu() (David Arcari) [RHEL-43147]
  - x86/topology: Switch over to GENERIC_CPU_DEVICES (David Arcari) [RHEL-43147]
  - x86/topology: remove arch_*register_cpu() exports (David Arcari) [RHEL-43147]
  - x86/topology/intel: Unlock CPUID before evaluating anything (David Arcari) [RHEL-43147]
  - x86/topology/amd: Evaluate SMT in CPUID leaf 0x8000001e only on family 0x17 and greater (David Arcari) [RHEL-43147]
  - x86/topology: Handle bogus ACPI tables correctly (David Arcari) [RHEL-43147]
  - x86/topology/amd: Ensure that LLC ID is initialized (David Arcari) [RHEL-43147]
  - x86/xen: return a sane initial apic id when running as PV guest (David Arcari) [RHEL-43147]
  - x86/cpu/amd: Move TOPOEXT enablement into the topology parser (David Arcari) [RHEL-43147]
  - x86/cpu/amd: Make the NODEID_MSR union actually work (David Arcari) [RHEL-43147]
  - x86/cpu/amd: Make the CPUID 0x80000008 parser correct (David Arcari) [RHEL-43147]
  - x86/topology: Don't update cpu_possible_map in topo_set_cpuids() (David Arcari) [RHEL-43147]
  - x86/topology: Handle the !APIC case gracefully (David Arcari) [RHEL-43147]
  - x86/topology: Don't evaluate logical IDs during early boot (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Add support for the AMD 0x80000026 leaf (David Arcari) [RHEL-43147]
  - x86/topology: Ignore non-present APIC IDs in a present package (David Arcari) [RHEL-43147]
  - x86/apic: Build the x86 topology enumeration functions on UP APIC builds too (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Get rid of cpuinfo::x86_max_cores (David Arcari) [RHEL-43147]
  - docs: move x86 documentation into Documentation/arch/ [partial] (David Arcari) [RHEL-43147]
  - x86/cpu: Remove x86_coreid_bits (David Arcari) [RHEL-43147]
  - x86/mm/numa: Use core domain size on AMD (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Provide __num_[cores|threads]_per_package (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Rename smp_num_siblings (David Arcari) [RHEL-43147]
  - arch/x86/kernel/setup.c: fixup rh_check_supported (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Retrieve cores per package from topology bitmaps (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Use topology logical mapping mechanism (David Arcari) [RHEL-43147]
  - x86/smpboot: Change smp_store_boot_cpu_info() to static (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Provide logical pkg/die mapping (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Simplify cpu_mark_primary_thread() (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Mop up primary thread mask handling (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Use topology bitmaps for sizing (David Arcari) [RHEL-43147]
  - x86/xen/smp_pv: Register the boot CPU APIC properly (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Let XEN/PV use topology from CPUID/MADT (David Arcari) [RHEL-43147]
  - x86/acpi: Dont invoke topology_register_apic() for XEN PV (David Arcari) [RHEL-43147]
  - x86/xen/smp_pv: Count number of vCPUs early (David Arcari) [RHEL-43147]
  - x86/xen/smp_pv: Register fake APICs (David Arcari) [RHEL-43147]
  - x86/mpparse: Switch to new init callbacks (David Arcari) [RHEL-43147]
  - x86/mpparse: Provide separate early/late callbacks (David Arcari) [RHEL-43147]
  - x86/dtb: Rename x86_dtb_init() (David Arcari) [RHEL-43147]
  - x86/mpparse: Prepare for callback separation (David Arcari) [RHEL-43147]
  - x86/xen/smp_pv: Prepare for separate mpparse callbacks (David Arcari) [RHEL-43147]
  - x86/mpparse: Rename default_find_smp_config() (David Arcari) [RHEL-43147]
  - x86/xen/smp_pv: Remove cpudata fiddling (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Assign hotpluggable CPUIDs during init (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Reject unknown APIC IDs on ACPI hotplug (David Arcari) [RHEL-43147]
  - x86/topology: Add a mechanism to track topology via APIC IDs (David Arcari) [RHEL-43147]
  - x86/cpu: Detect real BSP on crash kernels (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Rework possible CPU management (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Sanitize the APIC admission logic (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Use a data structure for topology info (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Simplify APIC registration (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Confine topology information (David Arcari) [RHEL-43147]
  - x86/mpparse: Use new APIC registration function (David Arcari) [RHEL-43147]
  - x86/acpi: Use new APIC registration functions (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Provide separate APIC registration functions (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Move registration out of APIC code (David Arcari) [RHEL-43147]
  - x86/apic/msi: Use DOMAIN_BUS_GENERIC_MSI for HPET/IO-APIC domain search (David Arcari) [RHEL-43147]
  - x86/apic: Use a proper define for invalid ACPI CPU ID (David Arcari) [RHEL-43147]
  - x86/apic: Remove yet another dubious callback (David Arcari) [RHEL-43147]
  - x86/apic: Remove the pointless writeback of boot_cpu_physical_apicid (David Arcari) [RHEL-43147]
  - x86/mpparse: Remove the physid_t bitmap wrapper (David Arcari) [RHEL-43147]
  - x86/apic: Remove check_apicid_used() and ioapic_phys_id_map() (David Arcari) [RHEL-43147]
  - x86/ioapic: Simplify setup_ioapic_ids_from_mpc_nocheck() (David Arcari) [RHEL-43147]
  - x86/ioapic: Make io_apic_get_unique_id() simpler (David Arcari) [RHEL-43147]
  - x86/apic: Get rid of get_physical_broadcast() (David Arcari) [RHEL-43147]
  - x86/ioapic: Replace some more set bit nonsense (David Arcari) [RHEL-43147]
  - x86/platform/ce4100: Dont override x86_init.mpparse.setup_ioapic_ids (David Arcari) [RHEL-43147]
  - x86/apic: Remove unused phys_pkg_id() callback (David Arcari) [RHEL-43147]
  - arch/x86: Fix typos (David Arcari) [RHEL-43147]
  - x86/cpu/topology: Make the APIC mismatch warnings complete (David Arcari) [RHEL-43147]
  - x86/cpu: Remove topology.c (David Arcari) [RHEL-43147]
  - x86/cpu: Make topology_amd_node_id() use the actual node info (David Arcari) [RHEL-43147]
  - x86/cpu: Use common topology code for HYGON (David Arcari) [RHEL-43147]
  - x86/cpu: Use common topology code for AMD (David Arcari) [RHEL-43147]
  - x86/cpu: Provide an AMD/HYGON specific topology parser (David Arcari) [RHEL-43147]
  - x86/cpu: Provide cpuid_read() et al. (David Arcari) [RHEL-43147]
  - x86/cpu: Use common topology code for Intel (David Arcari) [RHEL-43147]
  - x86/cpu: Provide a sane leaf 0xb/0x1f parser (David Arcari) [RHEL-43147]
  - x86/cpu: Move __max_die_per_package to common.c (David Arcari) [RHEL-43147]
  - x86/cpu: Use common topology code for Centaur and Zhaoxin (David Arcari) [RHEL-43147]
  - x86/cpu: Add legacy topology parser (David Arcari) [RHEL-43147]
  - x86/cpu: Provide cpu_init/parse_topology() (David Arcari) [RHEL-43147]
  - drivers: base: Move cpu_dev_init() after node_dev_init() (David Arcari) [RHEL-43147]
  - base/node.c: initialize the accessor list before registering (David Arcari) [RHEL-43147]
  - Revert "x86/topology: Fix max_siblings calculation for some hybrid cpus" (David Arcari) [RHEL-43147]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-505.el9]
changelog:
  - PCI: Revert the cfg_access_lock lockdep mechanism (Myron Stowe) [RHEL-50255]
  - PCI: Make pcie_bandwidth_capable() static (Myron Stowe) [RHEL-50255]
  - x86/pci: Remove OLPC dead code (Myron Stowe) [RHEL-50255]
  - PCI: Clean up accessor macro formatting (Myron Stowe) [RHEL-50255]
  - PCI/ERR: Cleanup misleading indentation inside if conditions (Myron Stowe) [RHEL-50255]
  - PCI: Annotate pci_cache_line_size variables as __ro_after_init (Myron Stowe) [RHEL-50255]
  - PCI: Constify pcibus_class (Myron Stowe) [RHEL-50255]
  - Revert "genirq/msi: Provide constants for PCI/IMS support" (Myron Stowe) [RHEL-50255]
  - Revert "x86/apic/msi: Enable PCI/IMS" (Myron Stowe) [RHEL-50255]
  - Revert "iommu/vt-d: Enable PCI/IMS" (Myron Stowe) [RHEL-50255]
  - Revert "iommu/amd: Enable PCI/IMS" (Myron Stowe) [RHEL-50255]
  - Revert "PCI/MSI: Provide IMS (Interrupt Message Store) support" (Myron Stowe) [RHEL-50255]
  - Revert "PCI/MSI: Provide pci_ims_alloc/free_irq()" (Myron Stowe) [RHEL-50255]
  - PCI: endpoint: pci-epf-test: Clean up pci_epf_test_unbind() (Myron Stowe) [RHEL-50255]
  - PCI: endpoint: pci-epf-test: Simplify pci_epf_test_set_bar() loop (Myron Stowe) [RHEL-50255]
  - PCI: endpoint: pci-epf-test: Remove superfluous code (Myron Stowe) [RHEL-50255]
  - PCI: endpoint: Allocate a 64-bit BAR if that is the only option (Myron Stowe) [RHEL-50255]
  - PCI: endpoint: pci-epf-test: Simplify pci_epf_test_alloc_space() loop (Myron Stowe) [RHEL-50255]
  - PCI: tegra194: Fix probe path for Endpoint mode (Myron Stowe) [RHEL-50255]
  - PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id (Myron Stowe) [RHEL-50255]
  - PCI: rockchip-ep: Set a 64-bit BAR if requested (Myron Stowe) [RHEL-50255]
  - PCI: mt7621: Fix string truncation in mt7621_pcie_parse_port() (Myron Stowe) [RHEL-50255]
  - PCI: endpoint: Remove "core_init_notifier" flag (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Call dw_pcie_ep_init_registers() API directly from all glue drivers (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Rename dw_pcie_ep_init_complete() to dw_pcie_ep_init_registers() (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Introduce dw_pcie_ep_cleanup() API for drivers supporting PERST# (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Rename dw_pcie_ep_exit() to dw_pcie_ep_deinit() (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Remove deinit() callback from struct dw_pcie_ep_ops (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Add Kernel-doc comments for APIs (Myron Stowe) [RHEL-50255]
  - PCI: dwc: ep: Fix DBI access failure for drivers requiring refclk from host (Myron Stowe) [RHEL-50255]
  - PCI: cadence: Set a 64-bit BAR if requested (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: rockchip,rk3399-pcie: Add missing maxItems to ep-gpios (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: rcar-gen4-pci-ep: Add R-Car V4H compatible (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: rcar-gen4-pci-host: Add R-Car V4H compatible (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: layerscape-pci: Convert to YAML format (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: mediatek,mt7621: Add missing child node reg (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: cdns,cdns-pcie-host: Drop redundant msi-parent and pci-bus.yaml (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: ti,am65: Fix remaining binding warnings (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: ti,j721e-pci-host: Add support for J722S SoC (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: rcar-pci-host: Add missing IOMMU properties (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: ti,j721e-pci-host: Add device-id for TI's J784S4 SoC (Myron Stowe) [RHEL-50255]
  - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (Myron Stowe) [RHEL-50255]
  - PCI: of_property: Return error for int_map allocation failure (Myron Stowe) [RHEL-50255]
  - PCI/MSI: Make error path handling follow the standard pattern (Myron Stowe) [RHEL-50255]
  - PCI: hotplug: Remove obsolete sgi_hotplug TODO notes (Myron Stowe) [RHEL-50255]
  - PCI: hotplug: Document unchecked return value of pci_hp_add_bridge() (Myron Stowe) [RHEL-50255]
  - PCI: Do not wait for disconnected devices when resuming (Myron Stowe) [RHEL-50255]
  - x86/pci: Skip early E820 check for ECAM region (Myron Stowe) [RHEL-50255]
  - PCI: Remove unused pci_enable_device_io() (Myron Stowe) [RHEL-50255]
  - ata: pata_cs5520: Remove unnecessary call to pci_enable_device_io() (Myron Stowe) [RHEL-50255]
  - PCI: Update pci_find_capability() stub return types (Myron Stowe) [RHEL-50255]
  - PCI: Remove PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: vmw_pvscsi: Do not use PCI_IRQ_LEGACY instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: pmcraid: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: mpt3sas: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: megaraid_sas: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: ipr: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: hpsa: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - scsi: arcmsr: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - wifi: rtw89: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - wifi: rtw88: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - wifi: ath10k: Refer to INTX instead of LEGACY (Myron Stowe) [RHEL-50255]
  - r8169: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - net: alx: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - net: atlantic: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - net: amd-xgbe: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - VMCI: Use PCI_IRQ_ALL_TYPES to remove PCI_IRQ_LEGACY use (Myron Stowe) [RHEL-50255]
  - RDMA/vmw_pvrdma: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - IB/qib: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - drm/amdgpu: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - mfd: intel-lpss: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - ntb: idt: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - platform/x86: intel_ips: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - tty: 8250_pci: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - usb: hcd-pci: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - ASoC: Intel: avs: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - Documentation: PCI: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - PCI/portdrv: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - PCI/MSI: Use PCI_IRQ_INTX instead of PCI_IRQ_LEGACY (Myron Stowe) [RHEL-50255]
  - PCI: Clarify intent of LT wait (Myron Stowe) [RHEL-50255]
  - PCI: Wait for Link Training==0 before starting Link retrain (Myron Stowe) [RHEL-50255]
  - PCI/EDR: Align EDR_PORT_LOCATE_DSM with PCI Firmware r3.3 (Myron Stowe) [RHEL-50255]
  - PCI/EDR: Align EDR_PORT_DPC_ENABLE_DSM with PCI Firmware r3.3 (Myron Stowe) [RHEL-50255]
  - PCI/DOE: Support discovery version 2 (Myron Stowe) [RHEL-50255]
  - PCI: Lock upstream bridge for pci_reset_function() (Myron Stowe) [RHEL-50255]
  - PCI/ASPM: Clean up ASPM disable/enable mask calculation (Myron Stowe) [RHEL-50255]
  - PCI/ASPM: Consolidate link state defines (Myron Stowe) [RHEL-50255]
  - PCI/AER: Update aer-inject tool source URL (Myron Stowe) [RHEL-50255]
  - PCI: Mask Replay Timer Timeout errors for Genesys GL975x SD host controller (Myron Stowe) [RHEL-50255]
  - of: unittest: Add tests for address translations (Myron Stowe) [RHEL-50255]
  - of: address: Fix address translation when address-size is greater than 2 (Myron Stowe) [RHEL-50255]
  - PCI: of: Destroy changeset when adding PCI device node fails (Myron Stowe) [RHEL-50255]
  - PCI: of_property: Handle interrupt parsing failures (Myron Stowe) [RHEL-50255]
  - PCI: Create device tree node for bridge (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: Drop unneeded quotes (Myron Stowe) [RHEL-50255]
  - PCI/DOE: Relax restrictions on request and response size (Myron Stowe) [RHEL-50255]
  - PCI/DOE: Make mailbox creation API private (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: ti,j721e-pci-host: Simplify 'device-id' schema (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: cdns-ep: Fix 'unevaluatedProperties' warnings (Myron Stowe) [RHEL-50255]
  - dt-bindings: PCI: Fix 'unevaluatedProperties' warnings (Myron Stowe) [RHEL-50255]
  - ptp: annotate data-race around q->head and q->tail (Hangbin Liu) [RHEL-38600]
  - Input: gpio_keys_polled - suppress deferred probe error for gpio (Luiz Capitulino) [RHEL-52234]
  - Input: gpio_keys_polled - simplify with dev_err_probe() (Luiz Capitulino) [RHEL-52234]
  - redhat/configs: enable CONFIG_KEYBOARD_GPIO_POLLED driver (Luiz Capitulino) [RHEL-52234]
  - net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (Mete Durlu) [RHEL-37349] {CVE-2024-35934}
  - net/iucv: fix use after free in iucv_sock_close() (Mete Durlu) [RHEL-53992]
  - tools/virtio: Add dma sync api for virtio test (Eric Auger) [RHEL-3230]
  - virtio_ring: fix syncs DMA memory with different direction (Eric Auger) [RHEL-3230]
  - virtio: packed: fix unmap leak for indirect desc table (Eric Auger) [RHEL-3230]
  - virtio_net: fix missing dma unmap for resize (Eric Auger) [RHEL-3230]
  - virtio_net: avoid data-races on dev->stats fields (Eric Auger) [RHEL-3230]
  - virtio_net: fix the missing of the dma cpu sync (Eric Auger) [RHEL-3230]
  - virtio_net: merge dma operations when filling mergeable buffers (Eric Auger) [RHEL-3230]
  - virtio_ring: introduce dma sync api for virtqueue (Eric Auger) [RHEL-3230]
  - virtio_ring: introduce dma map api for virtqueue (Eric Auger) [RHEL-3230]
  - virtio_ring: introduce virtqueue_reset() (Eric Auger) [RHEL-3230]
  - virtio_ring: separate the logic of reset/enable from virtqueue_resize (Eric Auger) [RHEL-3230]
  - virtio_ring: correct the expression of the description of virtqueue_resize() (Eric Auger) [RHEL-3230]
  - virtio_ring: skip unmap for premapped (Eric Auger) [RHEL-3230]
  - virtio_ring: introduce virtqueue_dma_dev() (Eric Auger) [RHEL-3230]
  - virtio_ring: support add premapped buf (Eric Auger) [RHEL-3230]
  - virtio_ring: introduce virtqueue_set_dma_premapped() (Eric Auger) [RHEL-3230]
  - virtio_ring: put mapping error check in vring_map_one_sg (Eric Auger) [RHEL-3230]
  - virtio_ring: check use_dma_api before unmap desc for indirect (Eric Auger) [RHEL-3230]
  - s390/dasd: fix error recovery leading to data corruption on ESE devices (Mete Durlu) [RHEL-55873]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-506.el9]
changelog:
  - powercap: idle_inject: Simplify if condition (David Arcari) [RHEL-53594]
  - powercap: intel_rapl: Switch to new Intel CPU model defines (David Arcari) [RHEL-53594]
  - powercap: intel_rapl_msr: Switch to new Intel CPU model defines (David Arcari) [RHEL-53594]
  - powercap: intel_rapl_tpmi: Enable PMU support (David Arcari) [RHEL-53594]
  - powercap: intel_rapl: Introduce APIs for PMU support (David Arcari) [RHEL-53594]
  - powercap: intel_rapl: Sort header files (David Arcari) [RHEL-53594]
  - powercap: intel_rapl: Add support for ArrowLake-H platform (David Arcari) [RHEL-53594]
  - Update 9.6 selt-tests (Lucas Zampieri)


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-507.el9]
changelog:
  - block: fix deadlock between sd_remove & sd_release (CKI Backport Bot) [RHEL-54997] {CVE-2024-42294}
  - gpio: prevent potential speculation leaks in gpio_device_get_desc() (CKI Backport Bot) [RHEL-56213] {CVE-2024-44931}
  - redhat: hmac sign the UKI for FIPS (Vitaly Kuznetsov)
  - Also make vmlinuz-virt.efi world readable (Vitaly Kuznetsov)
  - ice: fix truesize operations for PAGE_SIZE >= 8192 (Petr Oros) [RHEL-37905]
  - ice: fix ICE_LAST_OFFSET formula (Petr Oros) [RHEL-37905]
  - ice: fix page reuse when PAGE_SIZE is over 8k (Petr Oros) [RHEL-37905]
  - usb: cdns3: Fix spelling mistake "supporte" -> "supported" (Martin McConnell) [RHEL-54566]
  - usb: cdns3: fixed memory use after free at cdns3_gadget_ep_disable() (Martin McConnell) [RHEL-54566]
  - usb: cdns3: fix memory double free when handle zero packet (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: fixed issue with incorrect detecting CDNSP family controllers (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: blocked some cdns3 specific code (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled (Martin McConnell) [RHEL-54566]
  - usb: cdns3: fix iso transfer error when mult is not zero (Martin McConnell) [RHEL-54566]
  - usb: cdns3: fix uvc failure work since sg support enabled (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Use dev_err_probe (Martin McConnell) [RHEL-54566]
  - usb: cdns3: starfive: don't misuse /** comment (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: Replace snprintf() with the safer scnprintf() variant (Martin McConnell) [RHEL-54566]
  - usb: cdns3: skip set TRB_IOC when usb_request: no_interrupt is true (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: Fix deadlock issue during using NCM gadget (Martin McConnell) [RHEL-54566]
  - usb:cdnsp: remove TRB_FLUSH_ENDPOINT command (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: Fixes issue with dequeuing not queued requests (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Add PHY mode switch to usb2 PHY (Martin McConnell) [RHEL-54566]
  - usb: cdns3: starfive: Convert to platform remove callback returning void (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Put the cdns set active part outside the spin lock (Martin McConnell) [RHEL-54566]
  - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config (Martin McConnell) [RHEL-54566]
  - usb: cdns3: imx: Rework system PM to avoid duplicated operations (Martin McConnell) [RHEL-54566]
  - usb: cdns3: optimize OUT transfer by copying only actual received data (Martin McConnell) [RHEL-54566]
  - usb: cdns3: improve handling of unaligned address case (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Add StarFive JH7110 USB driver (Martin McConnell) [RHEL-54566]
  - usb: cdns3: imx: simplify clock name usage (Martin McConnell) [RHEL-54566]
  - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (Martin McConnell) [RHEL-54566]
  - usb: cdns3-ti: Convert to platform remove callback returning void (Martin McConnell) [RHEL-54566]
  - usb: cdns3-plat: Convert to platform remove callback returning void (Martin McConnell) [RHEL-54566]
  - usb: cdns3-imx: Convert to platform remove callback returning void (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: Fixes error: uninitialized symbol 'len' (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (Martin McConnell) [RHEL-54566]
  - usb: cdns3: Fix issue with using incorrect PCI device function (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: Fixes issue with redundant Status Stage (Martin McConnell) [RHEL-54566]
  - usb: cdns3: change some trace event __dynamic_array() to __get_buf() (Martin McConnell) [RHEL-54566]
  - usb: cdns3: change trace event cdns3_ring() operation (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: : add scatter gather support for ISOC endpoint (Martin McConnell) [RHEL-54566]
  - usb: cdns3: remove fetched trb from cache before dequeuing (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: fix lack of ZLP for ep0 (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: fix issue with ZLP - added TD_SIZE = 1 (Martin McConnell) [RHEL-54566]
  - usb: cdnsp: Fix issue with Clear Feature Halt Endpoint (Martin McConnell) [RHEL-54566]
  - usb: cdns3: host: fix endless superspeed hub port reset (Martin McConnell) [RHEL-54566]
  - usb: cdns3: adjust the partial logic of cdnsp_pci_remove (Martin McConnell) [RHEL-54566]
  - usb: cdns3: remove dead code (Martin McConnell) [RHEL-54566]
  - Bluetooth: MGMT: Add error handling to pair_device() (CKI Backport Bot) [RHEL-56148] {CVE-2024-43884}
  - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (Myron Stowe) [RHEL-54981] {CVE-2024-42302}
  - ASoC: TAS2781: Fix tasdev_load_calibrated_data() (CKI Backport Bot) [RHEL-55177] {CVE-2024-42278}
  - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (Waiman Long) [RHEL-54775 RHEL-54779] {CVE-2024-43853}
  - net: add and use __skb_get_hash_symmetric_net (Hangbin Liu) [RHEL-54921]
  - net: add and use skb_get_hash_net (Hangbin Liu) [RHEL-54921]
  - net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE (CKI Backport Bot) [RHEL-54921] {CVE-2024-42321}
  - ice: Adjust PTP init for 2x50G E825C devices (Petr Oros) [RHEL-29210]
  - ice: Add NAC Topology device capability parser (Petr Oros) [RHEL-29210]
  - ice: Add support for E825-C TS PLL handling (Petr Oros) [RHEL-29210]
  - ice: Change CGU regs struct to anonymous (Petr Oros) [RHEL-29210]
  - ice: Introduce ETH56G PHY model for E825C products (Petr Oros) [RHEL-29210]
  - ice: Introduce ice_get_base_incval() helper (Petr Oros) [RHEL-29210]
  - ice: Move CGU block (Petr Oros) [RHEL-29210]
  - ice: Add PHY OFFSET_READY register clearing (Petr Oros) [RHEL-29210]
  - ice: Implement Tx interrupt enablement functions (Petr Oros) [RHEL-29210]
  - ice: Introduce helper to get tmr_cmd_reg values (Petr Oros) [RHEL-29210]
  - ice: Introduce ice_ptp_hw struct (Petr Oros) [RHEL-29210]
  - Bluetooth: Fix use-after-free bugs caused by sco_sock_timeout (CKI Backport Bot) [RHEL-17953 RHEL-36378] {CVE-2024-27398}
  - Bluetooth: btintel: Fixe build regression (Bastien Nocera) [RHEL-37353] {CVE-2024-35933}
  - Bluetooth: btintel: Fix null ptr deref in btintel_read_version (CKI Backport Bot) [RHEL-37353] {CVE-2024-35933}
  - Bluetooth: fix connection setup in l2cap_connect (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: HCI: Remove HCI_AMP support (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: Remove HCI_POWER_OFF_TIMEOUT (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: hci_event: Remove code to removed CONFIG_BT_HS (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: Remove usage of the deprecated ida_simple_xx() API (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: Remove BT_HS (Bastien Nocera) [RHEL-38459] {CVE-2024-36013}
  - Bluetooth: qca: add missing firmware sanity checks (CKI Backport Bot) [RHEL-39643] {CVE-2024-36880}
  - Bluetooth: hci_sock: Fix not validating setsockopt user input (Bastien Nocera) [RHEL-37411] {CVE-2024-35963}
  - Bluetooth: SCO: Fix not validating setsockopt user input (Bastien Nocera) [RHEL-37396] {CVE-2024-35967}
  - Bluetooth: L2CAP: Fix not validating setsockopt user input (Bastien Nocera) [RHEL-37404] {CVE-2024-35965}
  - Bluetooth: ISO: Fix not validating setsockopt user input (Bastien Nocera) [RHEL-37406] {CVE-2024-35964}
  - Bluetooth: RFCOMM: Fix not validating setsockopt user input (Bastien Nocera) [RHEL-37400] {CVE-2024-35966}
  - Bluetooth: Fix memory leak in hci_req_sync_complete() (CKI Backport Bot) [RHEL-37378] {CVE-2024-35978}
  - Bluetooth: msft: fix slab-use-after-free in msft_do_close() (CKI Backport Bot) [RHEL-38463] {CVE-2024-36012}
  - rtc: tps6594: Fix memleak in probe (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 pfsm (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 esm (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 rtc drv (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 regulator (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 pinctrl (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 spi (Joel Slebodnick) [RHEL-45915]
  - redhat/configs: add config file for tps6594 i2c (Joel Slebodnick) [RHEL-45915]
  - regulator: tps6594-regulator: Correct multi-phase configuration (Joel Slebodnick) [RHEL-45915]
  - rtc: tps6594: Add driver for TPS6594 RTC (Joel Slebodnick) [RHEL-45915]
  - pinctrl: tps6594: Add driver for TPS6594 pinctrl and GPIOs (Joel Slebodnick) [RHEL-45915]
  - regulator: tps6594-regulator: Fix random kernel crash (Joel Slebodnick) [RHEL-45915]
  - misc: tps6594: Remove redundant dev_err_probe() for platform_get_irq_byname() (Joel Slebodnick) [RHEL-45915]
  - misc: tps6594-esm: Disable ESM for rev 1 PMIC (Joel Slebodnick) [RHEL-45915]
  - misc: tps6594-esm: Convert to platform remove callback returning void (Joel Slebodnick) [RHEL-45915]
  - misc: tps6594-pfsm: Convert to platform remove callback returning void (Joel Slebodnick) [RHEL-45915]
  - misc: tps6594-pfsm: Add driver for TI TPS6594 PFSM (Joel Slebodnick) [RHEL-45915]
  - misc: tps6594-esm: Add driver for TI TPS6594 ESM (Joel Slebodnick) [RHEL-45915]
  - regulator: tps6594-regulator: Add driver for TI TPS6594 regulators (Joel Slebodnick) [RHEL-45915]
  - mfd: tps6594: Add null pointer check to tps6594_device_init() (Joel Slebodnick) [RHEL-45915]
  - mfd: tps6594: Fix an error code in probe() (Joel Slebodnick) [RHEL-45915]
  - mfd: tps6594: Add driver for TI TPS6594 PMIC (Joel Slebodnick) [RHEL-45915]
  - mfd: tps80031: Remove driver (Joel Slebodnick) [RHEL-45915]
  - dt-bindings: mfd: Add TI TPS6594 PMIC (Joel Slebodnick) [RHEL-45915]
  - x86/mce: Implement recovery for errors in TDX/SEAM non-root mode (David Arcari) [RHEL-28497]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-508.el9]
changelog:
  - usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB (Desnes Nunes) [RHEL-52378] {CVE-2024-42226}
  - redhat: set defaults for RHEL 9.5 (Lucas Zampieri)
  - redhat/configs: Make CONFIG_REGULATOR_GPIO built-in (Luiz Capitulino) [RHEL-21095]
  - redhat/configs: enable a bunch of regulators (Luiz Capitulino) [RHEL-21095]
  - md-cluster: fix no recovery job when adding/re-adding a disk (Nigel Croxon) [RHEL-46615]
  - md-cluster: fix hanging issue while a new disk adding (Nigel Croxon) [RHEL-46615]
  - md/raid5: recheck if reshape has finished with device_lock held (Nigel Croxon) [RHEL-46615]
  - md: Don't wait for MD_RECOVERY_NEEDED for HOT_REMOVE_DISK ioctl (Nigel Croxon) [RHEL-46615]
  - md-cluster: Constify struct md_cluster_operations (Nigel Croxon) [RHEL-46615]
  - md/raid5: fix spares errors about rcu usage (Nigel Croxon) [RHEL-46615]
  - md: pass in max_sectors for pers->sync_request() (Nigel Croxon) [RHEL-46615]
  - md: factor out helpers for different sync_action in md_do_sync() (Nigel Croxon) [RHEL-46615]
  - md: replace last_sync_action with new enum type (Nigel Croxon) [RHEL-46615]
  - md: use new helpers in md_do_sync() (Nigel Croxon) [RHEL-46615]
  - md: don't fail action_store() if sync_thread is not registered (Nigel Croxon) [RHEL-46615]
  - md: remove parameter check_seq for stop_sync_thread() (Nigel Croxon) [RHEL-46615]
  - md: replace sysfs api sync_action with new helpers (Nigel Croxon) [RHEL-46615]
  - md: factor out helper to start reshape from action_store() (Nigel Croxon) [RHEL-46615]
  - md: add new helpers for sync_action (Nigel Croxon) [RHEL-46615]
  - md: add a new enum type sync_action (Nigel Croxon) [RHEL-46615]
  - md: rearrange recovery_flags (Nigel Croxon) [RHEL-46615]
  - md/md-bitmap: fix writing non bitmap pages (Nigel Croxon) [RHEL-46615]
  - md: make md_flush_request() more readable (Nigel Croxon) [RHEL-46615]
  - md: change the return value type of md_write_start to void (Nigel Croxon) [RHEL-46615]
  - md: do not delete safemode_timer in mddev_suspend (Nigel Croxon) [RHEL-46615]
  - lib: objagg: Fix general protection fault (Waiman Long) [RHEL-54790 RHEL-54793] {CVE-2024-43846}
  - Revert "x86/topology: Switch over to GENERIC_CPU_DEVICES" (David Arcari) [RHEL-58031]
  - Revert "x86/topology: use weak version of arch_unregister_cpu()" (David Arcari) [RHEL-58031]
  - Revert "x86/topology: convert to use arch_cpu_is_hotpluggable()" (David Arcari) [RHEL-58031]
  - Revert "x86/cpu: Move leftover contents of topology.c to setup.c" (David Arcari) [RHEL-58031]
  - x86/resctrl: Remove redundant variable in mbm_config_write_domain() (David Arcari) [RHEL-57701]
  - x86/resctrl: Read supported bandwidth sources from CPUID (David Arcari) [RHEL-57701]
  - x86/resctrl: Remove hard-coded memory bandwidth limit (David Arcari) [RHEL-57701]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-509.el9]
changelog:
  - RDMA/mana_ib: Set correct device into ib (Maxim Levitsky) [RHEL-54330]
  - net: mana: Fix possible double free in error handling path (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Ignore optional access flags for MRs (Maxim Levitsky) [RHEL-54330]
  - net: mana: Add support for page sizes other than 4KB on ARM64 (Maxim Levitsky) [RHEL-54330]
  - net: mana: Use mana_cleanup_port_context() for rxq cleanup (Maxim Levitsky) [RHEL-54330]
  - net: mana: Allow variable size indirection table (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Process QP error events in mana_ib (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: extend query device (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: set node_guid (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Modify QP state (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Implement uapi to create and destroy RC QP (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Create and destroy RC QP (Maxim Levitsky) [RHEL-54330]
  - net: mana: Fix the extra HZ in mana_hwc_send_request (Maxim Levitsky) [RHEL-54330]
  - net: mana: Enable MANA driver on ARM64 with 4K page size (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: implement uapi for creation of rnic cq (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: boundary check before installing cq callbacks (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: introduce a helper to remove cq callbacks (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: create and destroy RNIC cqs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: create EQs for RNIC CQs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Fix missing ret value (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Configure mac address in RNIC (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Adding and deleting GIDs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Enable RoCE on port 1 (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Implement port parameters (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Create and destroy rnic adapter (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Add EQ creation for rnic adapter (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Use num_comp_vectors of ib_device (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: remove useless return values from dbg prints (Maxim Levitsky) [RHEL-54330]
  - net: mana: Avoid open coded arithmetic (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Prefer struct_size over open coded arithmetic (Maxim Levitsky) [RHEL-54330]
  - net: mana: Add flex array to struct mana_cfg_rx_steer_req_v2 (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Use struct mana_ib_queue for RAW QPs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Use struct mana_ib_queue for WQs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Use struct mana_ib_queue for CQs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Introduce helpers to create and destroy mana queues (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Use virtual address in dma regions for MRs (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Fix bug in creation of dma regions (Maxim Levitsky) [RHEL-54330]
  - net: mana: Assigning IRQ affinity on HT cores (Maxim Levitsky) [RHEL-54330]
  - net: mana: add a function to spread IRQs per CPUs (Maxim Levitsky) [RHEL-54330]
  - cpumask: define cleanup function for cpumasks (Maxim Levitsky) [RHEL-54330]
  - cpumask: add cpumask_weight_andnot() (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Introduce mana_ib_install_cq_cb helper function (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Introduce mana_ib_get_netdev helper function (Maxim Levitsky) [RHEL-54330]
  - RDMA/mana_ib: Introduce mdev_to_gc helper function (Maxim Levitsky) [RHEL-54330]
  - ping: fix address binding wrt vrf (Antoine Tenart) [RHEL-50920]
  - mtd: spi-nor: core: Introduce method for RDID op (Joel Slebodnick) [RHEL-40636]
  - mtd: spi-nor: core: Use auto-detection only once (Joel Slebodnick) [RHEL-40636]
  - mtd: spi-nor: Introduce spi_nor_match_id() (Joel Slebodnick) [RHEL-40636]
  - mtd: spi-nor: Rename method, s/spi_nor_match_id/spi_nor_match_name (Joel Slebodnick) [RHEL-40636]


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-510.el9]
changelog:
  - perf: Fix event leak upon exec and file release (Michael Petlan) [RHEL-55606] {CVE-2024-43869}
  - perf: Fix event leak upon exit (Michael Petlan) [RHEL-55603] {CVE-2024-43870}
  - task_work: Introduce task_work_cancel() again (Michael Petlan) [RHEL-55603]
  - task_work: s/task_work_cancel()/task_work_cancel_func()/ (Michael Petlan) [RHEL-55603]
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44213] {CVE-2024-38558}
  - net: drop bad gso csum_start and offset in virtio_net_hdr (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: change maximum number of UDP segments to 128 (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: more strict VIRTIO_NET_HDR_GSO_UDP_L4 validation (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - net: missing check virtio (Laurent Vivier) [RHEL-54891] {CVE-2024-43817}
  - fuse: Initialize beyond-EOF page contents before setting uptodate (CKI Backport Bot) [RHEL-56932] {CVE-2024-44947}
  - wifi: mac80211: Avoid address calculations via out of bounds array indexing (CKI Backport Bot) [RHEL-51285] {CVE-2024-41071}
  - nvme-pci: add missing condition check for existence of mapped data (Maurizio Lombardi) [RHEL-55099] {CVE-2024-42276}
  - sctp: fix association labeling in the duplicate COOKIE-ECHO case (Ondrej Mosnacek) [RHEL-48647]
  - s390/ap: Refine AP bus bindings complete processing (Cédric Le Goater) [RHEL-50373]
  - ice: Add netif_device_attach/detach into PF reset flow (Michal Schmidt) [RHEL-56084]
  - ext4: make sure the first directory block is not a hole (CKI Backport Bot) [RHEL-54975] {CVE-2024-42304}
  - ext4: check dot and dotdot of dx_root before making dir indexed (CKI Backport Bot) [RHEL-54964] {CVE-2024-42305}


author: Rado Vrbovsky <rvrbovsk@redhat.com> [5.14.0-511.el9]
changelog:
  - ipv4: Set scope explicitly in ip_route_output(). (CKI Backport Bot) [RHEL-57748]
  - ACPI: thermal_lib: Initialize temp_decik to zero (Mark Langsdorf) [RHEL-54149]
  - ACPI: thermal_lib: include "internal.h" for function prototypes (Mark Langsdorf) [RHEL-54149]
  - ACPI: thermal: Register thermal zones without valid trip points (Mark Langsdorf) [RHEL-54149]
  - ACPI: thermal: Use library functions to obtain trip point temperature values (Mark Langsdorf) [RHEL-54149]
  - ACPI: thermal_lib: Add functions returning temperature in deci-Kelvin (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: Don't use "proxy" headers (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: Make container_of() no-op where it makes sense (Mark Langsdorf) [RHEL-54149]
  - ACPI: NHLT: Drop redundant types (Mark Langsdorf) [RHEL-54149]
  - ACPI: NHLT: Streamline struct naming (Mark Langsdorf) [RHEL-54149]
  - ACPI: NHLT: Reintroduce types the table consists of (Mark Langsdorf) [RHEL-54149]
  - ACPI: NHLT: Introduce API for the table (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: allow _UID matching for integer zero (Mark Langsdorf) [RHEL-54149]
  - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Ignore camera graph port nodes on all Dell Tiger, Alder and Raptor Lake models (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Force StorageD3Enable on more products (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Avoid enumerating devices with clearly invalid _STA values (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Skip IRQ override on Asus Vivobook Pro N6506MV (Mark Langsdorf) [RHEL-54149]
  - hwmon: (acpi_power_meter) Ensure IPMI space handler is ready on Dell systems (Mark Langsdorf) [RHEL-54149]
  - ACPI: IPMI: Add helper to wait for when SMI is selected (Mark Langsdorf) [RHEL-54149]
  - ACPI: property: Add reference to UEFI DSD Guide (Mark Langsdorf) [RHEL-54149]
  - ACPI/IORT: Handle memory address size limits as limits (Mark Langsdorf) [RHEL-54149]
  - ACPI: PM: s2idle: Evaluate all Low-Power S0 Idle _DSM functions (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Do IRQ override on GMxBGxx (XMG APEX 17 M23) (Mark Langsdorf) [RHEL-54149]
  - ACPICA: Detect FACS even for hardware reduced platforms (Mark Langsdorf) [RHEL-54149]
  - ACPI: AC: Properly notify powermanagement core about changes (Mark Langsdorf) [RHEL-54149]
  - ACPI: EC: Avoid returning AE_OK on errors in address space handler (Mark Langsdorf) [RHEL-54149]
  - ACPI: EC: Abort address space access upon error (Mark Langsdorf) [RHEL-54149]
  - ACPI: APEI: EINJ: Fix einj_dev release leak (Mark Langsdorf) [RHEL-54149]
  - ACPI: EC: Evaluate _REG outside the EC scope more carefully (Mark Langsdorf) [RHEL-54149]
  - ACPICA: Add a depth argument to acpi_execute_reg_methods() (Mark Langsdorf) [RHEL-54149]
  - ACPI: EC: Install address space handler at the namespace root (Mark Langsdorf) [RHEL-54149]
  - ACPI/NUMA: Squash acpi_numa_memory_affinity_init() into acpi_parse_memory_affinity() (Mark Langsdorf) [RHEL-54149]
  - ACPI/NUMA: Squash acpi_numa_slit_init() into acpi_parse_slit() (Mark Langsdorf) [RHEL-54149]
  - ACPI/NUMA: Remove architecture dependent remainings (Mark Langsdorf) [RHEL-54149]
  - x86/numa: Fix SRAT lookup of CFMWS ranges with numa_fill_memblks() (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (Mark Langsdorf) [RHEL-54149]
  - ACPI: platform-profile: add platform_profile_cycle() (Mark Langsdorf) [RHEL-54149]
  - ACPICA: events/evgpeinit: don't forget to increment registered GPE count (Mark Langsdorf) [RHEL-54149]
  - ACPICA: Modify ACPI_OBJECT_COMMON_HEADER (Mark Langsdorf) [RHEL-54149]
  - ACPICA: Fix various spelling mistakes in text files and code comments (Mark Langsdorf) [RHEL-54149]
  - ACPI: disable -Wstringop-truncation (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Add PNP_UART1_SKIP quirk for Lenovo Blade2 tablets (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: utils: Mark SMO8810 accel on Dell XPS 15 9550 as always present (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Do not increase dep_unmet for already met dependencies (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Move LPSS to x86 folder (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Move blacklist to x86 folder (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Move acpi_cmos_rtc to x86 folder (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Introduce a Makefile (Mark Langsdorf) [RHEL-54149]
  - ACPI: LPSS: Remove nested ifdeffery for CONFIG_PM (Mark Langsdorf) [RHEL-54149]
  - ACPI: LPSS: Advertise number of chip selects via property (Mark Langsdorf) [RHEL-54149]
  - ACPI: APEI: EINJ: mark remove callback as __exit (Mark Langsdorf) [RHEL-54149]
  - ACPI: store owner from modules with acpi_bus_register_driver() (Mark Langsdorf) [RHEL-54149]
  - ACPI: DPTF: Add Lunar Lake support (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Introduce typedef:s for struct acpi_hotplug_context members (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Use standard error checking pattern (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Move misleading comment to acpi_dma_configure_id() (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Use list_first_entry_or_null() in acpi_device_hid() (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (Mark Langsdorf) [RHEL-54149]
  - ACPI: Fix Generic Initiator Affinity _OSC bit (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: Indicate support for the Generic Event Device thru _OSC (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: Indicate support for more than 16 p-states thru _OSC (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: Indicate support for _TFP thru _OSC (Mark Langsdorf) [RHEL-54149]
  - ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields() (Mark Langsdorf) [RHEL-54149]
  - ACPI: APEI: EINJ: mark remove callback as non-__exit (Mark Langsdorf) [RHEL-54149]
  - ACPI: PM: Improve kerneldoc comments for suspend and hibernation functions (Mark Langsdorf) [RHEL-54149]
  - ACPI: Document handle_eject_request() arguments (Mark Langsdorf) [RHEL-54149]
  - EINJ: Add CXL error type support (Mark Langsdorf) [RHEL-54149]
  - redhat/configs: Support for CXL protocol Error INJection (Mark Langsdorf) [RHEL-54149]
  - EINJ: Migrate to a platform driver (Mark Langsdorf) [RHEL-54149]
  - ACPI: HMAT: Introduce 2 levels of generic port access class (Mark Langsdorf) [RHEL-54149]
  - base/node / ACPI: Enumerate node access class for 'struct access_coordinate' (Mark Langsdorf) [RHEL-54149]
  - ACPI: HMAT: Remove register of memory node for generic target (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Use IRQ override on Maibenben X565 (Mark Langsdorf) [RHEL-54149]
  - ACPI: CPPC: enable AMD CPPC V2 support for family 17h processors (Mark Langsdorf) [RHEL-54149]
  - ACPI: APEI: Skip initialization of GHES_ASSIST structures for Machine Check Architecture (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Consolidate Device Check and Bus Check notification handling (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Rework Device Check and Bus Check notification handling (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Make acpi_processor_add() check the device enabled bit (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Relocate acpi_bus_trim_one() (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Fix device check notification handling (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Add MAIBENBEN X577 to irq1_edge_low_force_override (Mark Langsdorf) [RHEL-54149]
  - ACPI: pfr_update: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: pfr_telemetry: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: fan: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: GED: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: DPTF: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: AGDI: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: TAD: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: APEI: GHES: Convert to platform remove callback returning void (Mark Langsdorf) [RHEL-54149]
  - ACPI: property: Polish ignoring bad data nodes (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Add DELL0501 handling to acpi_quirk_skip_serdev_enumeration() (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: Move acpi_quirk_skip_serdev_enumeration() out of CONFIG_X86_ANDROID_TABLETS (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Do IRQ override on Lunnen Ground laptops (Mark Langsdorf) [RHEL-54149]
  - ACPI: use %pe for better readability of errors while printing (Mark Langsdorf) [RHEL-54149]
  - ACPI: property: Ignore bad graph port nodes on Dell XPS 9315 (Mark Langsdorf) [RHEL-54149]
  - ACPI: utils: Make acpi_handle_path() not static (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Add IRQ override quirk for ASUS ExpertBook B2502FBA (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Defer enumeration of devices with a _DEP pointing to IVSC device (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: make acpi_bus_type const (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CVA (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Handle fetching EDID that is longer than 256 bytes (Mark Langsdorf) [RHEL-54149]
  - ACPI: cpufreq: Add highest perf change notification (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CGA (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Add DMI quirks for ASUS Vivobook E1504GA and E1504GAB (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Add Infinity laptops to irq1_edge_low_force_override (Mark Langsdorf) [RHEL-54149]
  - ACPI: button: trigger wakeup key events (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Add another DMI match for the TongFang GMxXGxx (Mark Langsdorf) [RHEL-54149]
  - ACPI: EC: Use a threaded handler for dedicated IRQ (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSL: Use spin locks without disabling interrupts (Mark Langsdorf) [RHEL-54149]
  - acpi: numa: Add helper function to retrieve the performance attributes (Mark Langsdorf) [RHEL-54149]
  - acpi: numa: Add setting of generic port system locality attributes (Mark Langsdorf) [RHEL-54149]
  - acpi: Break out nesting for hmat_parse_locality() (Mark Langsdorf) [RHEL-54149]
  - acpi: numa: Add genport target allocation to the HMAT parsing (Mark Langsdorf) [RHEL-54149]
  - acpi: numa: Create enum for memory_target access coordinates indexing (Mark Langsdorf) [RHEL-54149]
  - base/node / acpi: Change 'node_hmem_attrs' to 'access_coordinates' (Mark Langsdorf) [RHEL-54149]
  - acpi, hmat: calculate abstract distance with HMAT (Mark Langsdorf) [RHEL-54149]
  - memory tiering: add abstract distance calculation algorithms management (Mark Langsdorf) [RHEL-54149]
  - lib/firmware_table: tables: Add CDAT table parsing support (Mark Langsdorf) [RHEL-54149]
  - ACPICA: Add a define for size of struct acpi_srat_generic_affinity device_handle (Mark Langsdorf) [RHEL-54149]
  - ACPI: APEI: set memory failure flags as MF_ACTION_REQUIRED on synchronous events (Mark Langsdorf) [RHEL-54149]
  - ACPI: utils: Introduce helper for _DEP list lookup (Mark Langsdorf) [RHEL-54149]
  - ACPI: LPSS: Fix the fractional clock divider flags (Mark Langsdorf) [RHEL-54149]
  - ACPI: NUMA: Fix the logic of getting the fake_pxm value (Mark Langsdorf) [RHEL-54149]
  - ACPI: NUMA: Optimize the check for the availability of node values (Mark Langsdorf) [RHEL-54149]
  - ACPI: NUMA: Remove unnecessary check in acpi_parse_gi_affinity() (Mark Langsdorf) [RHEL-54149]
  - ACPI: watchdog: fix kernel-doc warnings (Mark Langsdorf) [RHEL-54149]
  - acpi: property: Let args be NULL in __acpi_node_get_property_reference (Mark Langsdorf) [RHEL-54149]
  - ACPI: extlog: fix NULL pointer dereference check (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSL: Allow Notify () handlers to run on all CPUs (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSL: Rearrange workqueue selection in acpi_os_execute() (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSL: Rework error handling in acpi_os_execute() (Mark Langsdorf) [RHEL-54149]
  - PNP: ACPI: fix fortify warning (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Add quirk for the Colorful X15 AT 23 Laptop (Mark Langsdorf) [RHEL-54149]
  - ACPI: LPSS: use acpi_dev_uid_match() for matching _UID (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: update acpi_dev_hid_uid_match() to support multiple types (Mark Langsdorf) [RHEL-54149]
  - ACPI: bus: update acpi_dev_uid_match() to support multiple types (Mark Langsdorf) [RHEL-54149]
  - drivers: base: Implement weak arch_unregister_cpu() (Mark Langsdorf) [RHEL-54149]
  - drivers: base: Allow parts of GENERIC_CPU_DEVICES to be overridden (Mark Langsdorf) [RHEL-54149]
  - drivers: base: Use present CPUs in GENERIC_CPU_DEVICES (Mark Langsdorf) [RHEL-54149]
  - ACPI: Move ACPI_HOTPLUG_CPU to be disabled on arm64 and riscv (Mark Langsdorf) [RHEL-54149]
  - hwmon: (acpi_power_meter) Fix 4.29 MW bug (Mark Langsdorf) [RHEL-54149]
  - x86/acpi: Use %rip-relative addressing in wakeup_64.S (Mark Langsdorf) [RHEL-54149]
  - genirq: Set IRQF_COND_ONESHOT in request_irq() (Mark Langsdorf) [RHEL-54149]
  - genirq: Introduce IRQF_COND_ONESHOT and use it in pinctrl-amd (Mark Langsdorf) [RHEL-54149]
  - platform/x86: intel: int0002_vgpio: Pass IRQF_ONESHOT to request_irq() (Mark Langsdorf) [RHEL-54149]
  - pinctrl: amd: Add IRQF_ONESHOT to the interrupt request (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSL: Use a threaded interrupt handler for SCI (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: check for error while searching for backlight device parent (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Fix an error message in DisCo for Imaging support (Mark Langsdorf) [RHEL-54149]
  - ACPI: Run USB4 _OSC() first with query bit set (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Drop should_check_lcd_flag() (Mark Langsdorf) [RHEL-54149]
  - ACPI: property: Replicate DT-aligned u32 properties from DisCo for Imaging (Mark Langsdorf) [RHEL-54149]
  - ACPI: property: Dig "rotation" property for devices with CSI2 _CRS (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Extract MIPI DisCo for Imaging data into swnodes (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Extract _CRS CSI-2 connection information into swnodes (Mark Langsdorf) [RHEL-54149]
  - ACPI: scan: Extract CSI-2 connection graph from _CRS (Mark Langsdorf) [RHEL-54149]
  - device property: Add SOFTWARE_NODE() macro for defining software nodes (Mark Langsdorf) [RHEL-54149]
  - ACPI: property: Support using strings in reference properties (Mark Langsdorf) [RHEL-54149]
  - hwmon: (acpi_power_meter) replace open-coded kmemdup_nul (Mark Langsdorf) [RHEL-54149]
  - PNP: ACPI: replace deprecated strncpy() with strscpy() (Mark Langsdorf) [RHEL-54149]
  - ACPI: AC: Rename ACPI device from device to adev (Mark Langsdorf) [RHEL-54149]
  - acpi, hmat: refactor hmat_register_target_initiators() (Mark Langsdorf) [RHEL-54149]
  - ACPI: AC: Replace acpi_driver with platform_driver (Mark Langsdorf) [RHEL-54149]
  - PNP: ACPI: Fix string truncation warning (Mark Langsdorf) [RHEL-54149]
  - ACPI: tiny-power-button: Eliminate the driver notify callback (Mark Langsdorf) [RHEL-54149]
  - ACPI: resource: Skip IRQ override on ASUS ExpertBook B1502CBA (Mark Langsdorf) [RHEL-54149]
  - ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable (Mark Langsdorf) [RHEL-54149]
  - PM: ACPI: reboot: Reinstate S5 for reboot (Mark Langsdorf) [RHEL-54149]
  - kernel/reboot: Add SYS_OFF_MODE_RESTART_PREPARE mode (Mark Langsdorf) [RHEL-54149]
  - hwmon: (acpi_power_meter) Switch to DEFINE_SIMPLE_DEV_PM_OPS() and pm_sleep_ptr() (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Simplify acpi_video_unregister_backlight() (Mark Langsdorf) [RHEL-54149]
  - ACPI: video: Remove acpi_video_bus from list before tearing it down (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSI: Remove Linux-HPI-Hybrid-Graphics _OSI string (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSI: Remove Linux-Dell-Video _OSI string (Mark Langsdorf) [RHEL-54149]
  - ACPI: OSI: Remove Linux-Lenovo-NV-HDMI-Audio _OSI string (Mark Langsdorf) [RHEL-54149]
  - ACPICA: executer/exsystem: Fix some typo mistakes (Mark Langsdorf) [RHEL-54149]
  - hwmon: (acpi_power_meter) Fix style issues (Mark Langsdorf) [RHEL-54149]
  - arm64: Use do_kernel_power_off() (Mark Langsdorf) [RHEL-54149]
  - efi: Fix efi_power_off() not being run before acpi_power_off() when necessary (Mark Langsdorf) [RHEL-54149]
  - ACPI: power: Switch to sys-off handler API (Mark Langsdorf) [RHEL-54149]
  - ACPICA: executer/exsystem: Inform users about ACPI spec violation (Mark Langsdorf) [RHEL-54149]
  - ACPICA: executer/exsystem: Add units to time variable names (Mark Langsdorf) [RHEL-54149]
  - s390/dasd: Remove DMA alignment (Mete Durlu) [RHEL-58207]
  - pipe: wakeup wr_wait after setting max_usage (Brian Foster) [RHEL-37087] {CVE-2023-52672}
  - fs/pipe: use spinlock in pipe_read() only if there is a watch_queue (Brian Foster) [RHEL-37087]
  - fs/pipe: remove unnecessary spinlock from pipe_write() (Brian Foster) [RHEL-37087]
  - fs/pipe: move check to pipe_has_watch_queue() (Brian Foster) [RHEL-37087]
  - pipe: reduce padding in struct pipe_inode_info (Brian Foster) [RHEL-37087]
  - pipe: make poll_usage boolean and annotate its access (Brian Foster) [RHEL-37087]
  - bonding: fix xfrm real_dev null pointer dereference (CKI Backport Bot) [RHEL-57241] {CVE-2024-44989}
  - bonding: fix null pointer deref in bond_ipsec_offload_ok (CKI Backport Bot) [RHEL-57235] {CVE-2024-44990}
  - ibmveth: Recycle buffers during replenish phase (Mamatha Inamdar) [RHEL-52913]
  - ibmveth: Optimize poll rescheduling process (Mamatha Inamdar) [RHEL-52913]
  - gpio: pca953x: fix pca953x_irq_bus_sync_unlock race (CKI Backport Bot) [RHEL-53831] {CVE-2024-42253}


author: Julien Rische <jrische@redhat.com> - 1.20.1-4
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2068535


author: Julien Rische <jrische@redhat.com> - 1.20.1-5
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode
    Resolves: rhbz#2162461


author: Julien Rische <jrische@redhat.com> - 1.20.1-9
changelog:
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2187722
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2155607
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2178298


author: Julien Rische <jrische@redhat.com> - 1.21.1-1
changelog:
  - New upstream version (1.21.1)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
  - Add support for "pac_privsvr_enctype" KDB string attribute
    Resolves: rhbz#2060421


author: Julien Rische <jrische@redhat.com> - 1.21.1-2
changelog:
  - Fix memory leak in GSSAPI interface
    Resolves: RHEL-27251
  - Fix memory leak in PMAP RPC interface
    Resolves: RHEL-27245
  - Fix memory leak in failing UTF-8 to UTF-16 re-encoding for PAC
    Resolves: RHEL-27253
  - Make TCP waiting time configurable
    Resolves: RHEL-17132


author: Julien Rische <jrische@redhat.com> - 1.21.1-3
changelog:
  - CVE-2024-37370 CVE-2024-37371
    Fix vulnerabilities in GSS message token handling
    Resolves: RHEL-45402 RHEL-45392


author: Julien Rische <jrische@redhat.com> - 1.21.1-4
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: RHEL-55423
  - Fix various issues detected by static analysis
    Resolves: RHEL-58216
  - Remove RSA protocol for PKINIT
    Resolves: RHEL-15323


author: Julien Rische <jrische@redhat.com> - 1.21.1-5
changelog:
  - Support PKCS11 EC client certs in PKINIT
    Resolves: RHEL-74374
  - kdb5_util: fix DB entry flags on modification
    Resolves: RHEL-56059
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: RHEL-4902


author: Julien Rische <jrische@redhat.com> - 1.21.1-9
changelog:
  - Do not block HMAC-MD4/5 in FIPS mode
    Resolves: RHEL-88704
  - Don't issue RC4 session keys by default (CVE-2025-3576)
    Resolves: RHEL-88048
  - Add PKINIT paChecksum2 from MS-PKCA v20230920
    Resolves: RHEL-82647


author: José Expósito <jexposit@redhat.com> - 1.7.0-9
changelog:
  - Fix CVE-2023-43785: out-of-bounds memory access in _XkbReadKeySyms()
  - Fix CVE-2023-43786: stack exhaustion from infinite recursion in
    PutSubImage()
  - Fix CVE-2023-43787: integer overflow in XCreateImage() leading to
    a heap overflow


author: Peter Hutterer <peter.hutterer@redhat.com> - 3.5.13-8
changelog:
  - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230)
  - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232)
  - Fix CVE-2022-4883: compression depends on $PATH (#2160242)


author: José Expósito <jexposit@redhat.com> - 3.5.13-9
changelog:
  - CVE-2023-43786 libX11: stack exhaustion from infinite recursion
    in PutSubImage()
  - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
    a heap overflow
  - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
  - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Kalev Lember <klember@redhat.com> - 0.12.2-2
changelog:
  - Remove no longer needed ldconfig_scriptlets macro call
  - Remove explicit byte compilation as the automatic works for flatpak builds now


author: Florian Weimer <fweimer@redhat.com> - 11.5.0-10
changelog:
  - Exception handling performance improvements (RHEL-105072)
  - libgcc: Use _dl_find_object to find DWARF data in unwinder
  - libgcc: Use lock-free data structures for run-time unwinder registration


author: Kamal Heib <kheib@redhat.com> - 57.0-1
changelog:
  - Rebase to upstream release v57.0
  - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449


author: Jerry James <loganjerry@gmail.com> - 1.1.0-5
changelog:
  - Make mpfr3 and mpfr3-devel subpackages
  - Drop the compat-libmpc package; nothing in Fedora needs it
  - Update project URL
  - Add a -doc subpackage to hold the GFDL-licensed content
  - Drop unnecessary texinfo BR
  - Drop ldconfig_scriptlets; this version cannot appear in distros that need it
  - Make sure there are no rpaths and that -Wl,--as-needed takes effect


author: José Expósito <jexposit@redhat.com> - 0.16-7
changelog:
  - Fix findings from static application security testing (SAST)
    Resolves: https://issues.redhat.com/browse/RHEL-29753


author: Nikola Forró <nforro@redhat.com> - 2:1.6.37-10
changelog:
  - Remove the aarch64 test workaround, the patches causing the failures
    have been dropped in zlib-1.2.11-25


author: Neal Gompa <ngompa13@gmail.com> - 2.4.2-2
changelog:
  - Modernize spec
  - Backport fix for missing __SNR_ppoll symbol (#1777889)
  - Refresh patch to build on aarch64 with upstream version


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-6
changelog:
  - Fix CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570 CVE-2022-3598
    CVE-2022-3627
  - Resolves: CVE-2022-3597 CVE-2022-3626 CVE-2022-3599 CVE-2022-3570
    CVE-2022-3598 CVE-2022-3627


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-8
changelog:
  - Fix CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804
    CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799
    CVE-2022-48281
  - Resolves: CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803
    CVE-2023-0804 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798
    CVE-2023-0799 CVE-2022-48281


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-10
changelog:
  - Fix CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576
  - Resolves: CVE-2023-26965 CVE-2023-3316 CVE-2023-26966 CVE-2023-3576


author: Matej Mužila <mmuzila@redhat.com> - 4.4.0-11
changelog:
  - Fix CVE-2023-40090 CVE-2023-3618 CVE-2023-40745 CVE-2023-41175
  - Resolves: RHEL-5458 RHEL-5455 RHEL-5405 RHEL-5450


author: Steve Dickson <steved@redhat.com> - 1.3.3-1
changelog:
  - bindresvport.c: fix a potential resource leakage (bz 2135405)
  - clnt_raw.c: fix a possible null pointer dereference (bz 2138317)


author: Kalev Lember <klember@redhat.com> - 3.1.0~rc-3
changelog:
  - Obsolete libtracker-control and libtracker-miner
  - Add conflicts with tracker3 packages to help with the upgrade path


author: Kalev Lember <klember@redhat.com> - 1:0.4.0-31
changelog:
  - Use make_build/make_install macros
  - Drop unneeded ldconfig_scriptlets macro call
  - Remove a no longer needed -mmmx CFLAGS addition
  - Disable strict aliasing


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-6
changelog:
  - Add fix for mzbz#1819244
  - Fix tools subpackage dependency
  - Bump the release to "6" to accommodate the 9.1.0.z release bumps


author: Tomas Popela <tpopela@redhat.com> - 1.2.0-7
changelog:
  - Bump the release to "7" to accommodate the 9.1.0.z release bumps as
    libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1


author: Simo Sorce <simo@redhat.com> - 1.1.34-3
changelog:
  - Drop crypto dependency.
  - The "cryptography" implemented in exslt is outdated and bad supporting only
    insecure algorithms (RC4, SHA1, MD5, MD4), and should not be used anyway.


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: Jan Horak <jhorak@redhat.com> - 1.9-28
changelog:
  - Removed NPAPI from the description, since is no longer supported in Mozilla
    products
    Resolves: rhbz#2041339


author: Luboš Uhliarik <luhliari@redhat.com> - 1:1.20.1-16
changelog:
  - Resolves: RHEL-12518 - nginx: HTTP/2: Multiple HTTP/2 enabled web servers are
    vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)


author: Luboš Uhliarik <luhliari@redhat.com> - 2:1.20.1-17
changelog:
  - bump package epoch to resolve RHEL-33939
  - Resolves: RHEL-33939 - Update path for nginx broken for existing CS
    installations


author: Martin Osvald <mosvald@redhat.com> - 3:7.92-1
changelog:
  - New version 7.92
  - Resolves: #2180330 - Rebase nmap for TLS v1.3 support
  - Resolves: #2164833 - Remove duplicate tests


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-4
changelog:
  - FIPS review changes
  -   add PORT_SafeZero to avoid compiler optimizing a way zeroing memory.
  -   update the indicators for this release
  -   allow hashing of longer than int32 values in a single PKCS #11 call.


author: Bob Relyea <rrelyea@redhat.com> - 3.90.0-5
changelog:
  - Pick up validated constant time implementations of p256, p384, and p521
    from upsream
  - More Fips indicator changes


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-2
changelog:
  - Fix MD-5 decode issue in pkcs #12
  - turn off policy processing for pkcs12 and smime
  - restore the rhel9 pkcs12 defaults for pk12util


author: Bob Relyea <rrelyea@redhat.com> - 3.101.0-6
changelog:
  - fix param encoding in pkcs12 pbamac encoding
  - add support for certificate compression in selfserv and tstclient


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.6-0.3.rc3
changelog:
  - Apply upstream patch for upstream bug 221
    - Revert change for false CVE-2020-26159 issue
      https://github.com/kkos/oniguruma/issues/221


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-35
changelog:
  - Relax OpenSSH checks for OpenSSL version
    Resolves: RHEL-4734
  - Limit artificial delays in sshd while login using AD user
    Resolves: RHEL-2469
  - Move users/groups creation logic to sysusers.d fragments
    Resolves: RHEL-5222


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 8.7p1-36
changelog:
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Relax OpenSSH build-time checks for OpenSSL version
    Related: RHEL-4734
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385


author: Zoltan Fridrich <zfridric@redhat.com> - 8.7p1-40
changelog:
  - Correctly audit hostname and IP address
    Resolves: RHEL-22316
  - Make default key sizes configurable in sshd-keygen
    Resolves: RHEL-26454


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-26
changelog:
  - Avoid implicit function declaration when building openssl
    Related: RHEL-1780
  - In FIPS mode, prevent any other operations when rsa_keygen_pairwise_test fails
    Resolves: RHEL-17104
  - Add a directory for OpenSSL providers configuration
    Resolves: RHEL-17193
  - Eliminate memory leak in OpenSSL when setting elliptic curves on SSL context
    Resolves: RHEL-19515
  - POLY1305 MAC implementation corrupts vector registers on PowerPC (CVE-2023-6129)
    Resolves: RHEL-21151
  - Excessive time spent checking invalid RSA public keys (CVE-2023-6237)
    Resolves: RHEL-21654
  - SSL ECDHE Kex fails when pkcs11 engine is set in config file
    Resolves: RHEL-20249
  - Denial of service via null dereference in PKCS#12
    Resolves: RHEL-22486
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Resolves: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-27
changelog:
  - Use certified FIPS module instead of freshly built one in Red Hat distribution
    Related: RHEL-23474


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-1
changelog:
  - Rebase to OpenSSL 3.2.2. Fixes CVE-2024-2511, CVE-2024-4603, CVE-2024-4741,
    and Minerva attack.
    Resolves: RHEL-32148
    Resolves: RHEL-36792
    Resolves: RHEL-38514
    Resolves: RHEL-39111


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-1
changelog:
  - Rebasing OpenSSL to 3.5
    Resolves: RHEL-80854
    Resolves: RHEL-50208
    Resolves: RHEL-50210
    Resolves: RHEL-50211
    Resolves: RHEL-85954


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-2
changelog:
  - OpenSSL ignores "rh-allow-sha1-signatures = yes" option on RHEL-9
    Resolves: RHEL-88910
  - PKCS#12 should not default to pbmac1 in FIPS mode in RHEL-9
    Resolves: RHEL-88912
  - Fix `openssl speed` running in FIPS mode
    Resolves: RHEL-89860
  - pkeyutl ecdsa signature with sha1 shouldn't work by default
    Resolves: RHEL-89861
  - Expose settable params for EVP_SKEY
    Resolves: RHEL-89862
  - Restore RHEL9-style indicators defines
    Resolves: RHEL-89859
  - Enable sslkeylog support
    Resolves: RHEL-90854


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.5.0-4
changelog:
  - Compact patches for better maintainability
    Related: RHEL-80854
  - Make hybrid MLKEM work with our FIPS provider (3.0.7)
    Resolves: RHEL-95239


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-2
changelog:
  - Move fips.so to a seprate subpackage
    Reverts FIPS self test for SLH-DSA
    Add Suggests to try to prefer the openssl-fips-provider package
    over the fips-provider-next package by default
    Revolves: RHEL-102408
    Related: RHEL-80854


author: Simo Sorce <simo@redhat.com> - 1:3.5.1-3
changelog:
  - Add custom define to disable symbol versioning in downstream patched code
    Also add stricter Suggests for openssl-fips-provider
    Resolves: RHEL-104236
  - Fix Requires/Provider to fix default install of fips providers
    Resolves: RHEL-104856


author: Pavol Žáčik <pzacik@redhat.com> - 1:3.5.1-4
changelog:
  - Make openssl speed test signatures without errors
    Resolves: RHEL-95502
  - Build tests in check and without LTO
    Resolves: RHEL-111633


author: Victor Toso <victortoso@redhat.com> - 20221130-1
changelog:
  - Update for new release (v20221130)
    Resolves: rhbz#2135751
  - Add rhel-8.8 and rhel-9.2 prereleases
    Related: rhbz#2135751


author: Colin Walters <walters@verbum.org> - 2024.4-3
changelog:
  - Backport
    https://github.com/ostreedev/ostree/pull/3205/commits/e47b37096343efa3bea8295f3f44c4dc90cc04e2


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Zoltan Fridrich <zfridric@redhat.com> - 0.25.2-1
changelog:
  - Update to new upstream release 0.25.2
    Resolves: RHEL-14834
  - Add IBM specific mechanisms and attributes
    Resolves: RHEL-10570


author: Peng Wu <pwu@redhat.com> - 1.48.7-3
changelog:
  - Update pango-emoji-table.h for emoji 14 support
  - Add pango-update-emoji.patch
  - Resolves: #2119674


author: Tom Callaway <spot@fedoraproject.org> - 0.44-1
changelog:
  - Update to 0.44
    - Support Perls with COW disabled
    - Bump B::COW requirement for testing
  - Disable tests until B::COW is packaged


author: Tom Stellard <tstellar@redhat.com> - 1.642-7
changelog:
  - Spec file cleanups: Use make_build and make_install macros
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Jitka Plesnikova <jplesnik@redhat.com> - 1.94-1
changelog:
  - Resolves: RHEL-40758
  - Update to 1.94
    - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
      3.2, and LibreSSL 3.5-3.8
    - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
      compile, it should now be much easier to identify the cause
    - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
      function are now exposed, enabling fine-grained control over the
      initialisation and configuration of both libraries
    - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
      in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
      and SSL_CTX_set_psk_use_session_callback() (on the client side)
    - libssl functions implementing server-side TLS 1.2 PSK authentication are
      now exposed, in particular SSL_CTX_set_psk_server_callback()
    - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
      TLS server to set a callback function that is executed when the server
      processes a ClientHello message
    - Many more libcrypto/libssl constants and functions are now exposed; see the
      release notes for the 1.93 developer releases for a full list
  - Package tests


author: Tom Stellard <tstellar@redhat.com> - 0.36-3
changelog:
  - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake


author: Petr Pisar <ppisar@redhat.com> - 3:1.302177-1
changelog:
  - Update to 1.302177
    - Minor fix to author downstream test
    - No significant changes since the last trial
    - Fix Test::More's $TODO inside intercept (#862)


author: Paul Howarth <paul@city-fan.org> - 3:1.302180-1
changelog:
  - Update to 1.302180
    - Move try_sig_mask to the only module that uses it
    - Inherit warnings bitmask in cmp_ok string eval
    - Update copyright date
    - Improved API for intercept {} and what it returns
    - Bump minimum List::Util version (for uniq)


author: Paul Howarth <paul@city-fan.org> - 3:1.302181-1
changelog:
  - Update to 1.302181
    - Put try_sig_mask back where it goes (and add test to prevent this in the
      future)
    - Drop new List::Util requirement back down


author: Paul Howarth <paul@city-fan.org> - 1:0.238-1
changelog:
  - Update to 0.238
    - Move the prerequisite Test::More from being a runtime prerequisite to a
      test time / build time prerequisite (GH#11)


author: Tomas Korbar <tkorbar@redhat.com> - 2:3.5.9-20
changelog:
  - Backport dns SRV record resolution feature (RFC6186)
    Resolves: rhbz#2134789
  - Fix building in ZUUL CI
    Resolves: rhbz#2193363


author: Wim Taymans <wtaymans@redhat.com> - 15.0-1
changelog:
  - Update to 15.0
  - convert to meson build
  - esound, gconf, oss are no longer supported
  - Resolves: rhbz#1961581


author: Charalampos Stratakis <cstratak@redhat.com> - 3.9.19-1
changelog:
  - Update to 3.9.19
  - Security fixes for CVE-2023-6597 and CVE-2024-0450
  - Fix tests for XMLPullParser with Expat with fixed CVE
  Resolves: RHEL-33679, RHEL-33691


author: Tomáš Hrnčiar <thrnciar@redhat.com> - 3.9.21-1
changelog:
  - Update to 3.9.21
  - Security fix for CVE-2024-11168 and CVE-2024-9287
  Resolves: RHEL-64889
  Resolves: RHEL-69942


author: Tomas Popela <tpopela@redhat.com> - 1.20.1-1
changelog:
  - Update to 1.20.1
  - Resolves: rhbz#2016905
  - Ship python3-cairo-devel in CRB
  - Resolves: rhbz#2053665


author: Tomas Popela <tpopela@redhat.com> - 3.40.1-6
changelog:
  - Fix the multilib problems by backporting fixes done by mhroncok from Fedora:
  - Move pure Python modules to a noarch subpackage
  - Ensure Python bytecode installed in multilib packages is bit-to-bit identical
    Resolves: rhbz#1915764


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-25
changelog:
  - Followup on #2166383
  - Add compat scripts calling external find-debug, sepdebugcrcfix and debugedit
  - Add %__find_debuginfo macro


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-26
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-27
changelog:
  - Fix short circuiting of version strings in expressions (RHEL-15688)
  - Fix description of whatconflicts in the man page (RHEL-6303)
  - Expose and document rpmdb --verifydb operation (RHEL-14591)
  - Fixes to the file handling backport


author: Florian Festi <ffesti@redhat.com> - 4.16.1.3-29
changelog:
  - Actually add --verifydb to the man page (RHEL-14591)
  - Don't warn about missing user/group on skipped files (RHEL-18037)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-30
changelog:
  - Don't segfault on missing priority tag (RHEL-35249)
  - Use unsigned integers for buildtime too for Y2K38 safety (RHEL-22602)
  - Rebuild against libimaevm.so.4 (RHEL-32505)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-31
changelog:
  - Fix potential use of uninitialized pipe array (RHEL-22604)
  - Fix potential use of uninitialized pgp struct (RHEL-22605)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)
  - Add SourceLicense tag to spec syntax (RHEL-28798)
  - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-33
changelog:
  - Fix root relocation regression (RHEL-28967)
  - Don't confuse OpenScanHub with false array overrun (RHEL-22607)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-35
changelog:
  - Fix %patch N applying Patch0 implicitly (RHEL-6294)
  - Issue deprecation warning for number-less %patch (RHEL-6294)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-37
changelog:
  - Allow parametric macros to opt out of option processing (RHEL-67161)
  - Report unsafe symlinks during installation as a specific case (RHEL-33393)
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)


author: Michal Domonkos <mdomonko@redhat.com> - 4.16.1.3-38
changelog:
  - Add support for spec local file attributes and generators (RHEL-52772)
  - Store configurable digest(s) on packages in rpmdb (RHEL-35619)
  - Fix a hard link race condition in brp-strip (RHEL-74011)


author: Tomas Orsava <torsava@redhat.com> - 12-8
changelog:
  - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes
    tags on CentOS/RHEL
  - Resolves: rhbz#1990421


author: Sérgio Basto <sergio@serjux.com> - 4.1-57
changelog:
  - ncurses-compat-libs was dropped in F37, to workaround and fix FTI (fails to
    install), since F37 we use ncurses-libs


author: Michal Domonkos <mdomonko@redhat.com> - 208-1
changelog:
  - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961)
  - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767)


author: Vladis Dronov <vdronov@redhat.com> - 6.15-1
changelog:
  - Update to the upstream v6.15 @ 172bf0e3 (bz 2075977)
  - Allow rngd process to drop privileges with "-D user:group"
  - Fix an error building with jitterentropy-3.4.0
  - Add a requirement for selinux-policy of a certain version
  - Fix a build failure on ppc64
  - Small edits in test scripts


author: Vladis Dronov <vdronov@redhat.com> - 6.15-2
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ 6dcc9ec2 (bz 2124605)
  - Do not require selinux-policy if it is not present


author: Vladis Dronov <vdronov@redhat.com> - 6.15-3
changelog:
  - Update to the upstream v6.15 + tip of origin/master @ cb8cc624 (bz 2156554)
  - Fix a number of issues found by covscan code scanner
  - Add a jitter init timeout for tests
  - Add a start condition for the FIPS mode (bz 2154804)


author: Vladis Dronov <vdronov@redhat.com> - 6.16-1
changelog:
  - Update to the upstream v6.16 + tip of origin/master @ 0e560296 (bz 2174916)
  - Get rid of text relocations in -fPIE build
  - Add a hint for opensc package (bz 1845854)


author: Michal Ruprich <mruprich@redhat.com> - 3.2.3-17
changelog:
  - Resolves: #2116669 - zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.49-1
changelog:
  - Update virtlogd policy
  Resolves: RHEL-69433
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Allow qemu-ga the dac_override and dac_read_search capabilities
  Resolves: RHEL-52476
  - Allow ip the setexec permission
  Resolves: RHEL-62923
  - Allow alsa get attributes filesystems with extended attributes
  Resolves: RHEL-61472
  - Allow bacula execute container in the container domain
  Resolves: RHEL-21168
  - Allow httpd get attributes of dirsrv unit files
  Resolves: RHEL-46808
  - Update samba-bgqd policy
  Resolves: RHEL-69517
  - Allow samba-bgqd read cups config files
  Resolves: RHEL-69517
  - Update policy for samba-bgqd
  Resolves: RHEL-69517
  - Update bootupd policy for the removing-state-file test
  Resolves: RHEL-66584
  - Allow qatlib search the content of the kernel debugging filesystem
  Resolves: RHEL-53864
  - Allow qatlib connect to systemd-machined over a unix socket
  Resolves: RHEL-53864
  - Update qatlib policy for v24.02 with new features
  Resolves: RHEL-53864


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.50-1
changelog:
  - Allow auditctl signal auditd
  Resolves: RHEL-68969
  - Fix the cups_read_pid_files() interface to use read_files_pattern
  Resolves: RHEL-69517
  - Dontaudit systemd-coredump the sys_resource capability
  Resolves: RHEL-46339
  - Allow rpcd read network sysctls
  Resolves: RHEL-1558
  - Allow irqbalance setpcap capability in the user namespace
  Resolves: RHEL-69564
  - Allow traceroute_t bind rawip sockets to unreserved ports
  Resolves: RHEL-54561
  - Allow svirt_t the sys_rawio capability
  Resolves: RHEL-56955
  - Change /run/sysctl\.d(/.*)? fc entry to /var/run/sysctl\.d(/.*)?
  Resolves: RHEL-56988
  - Exclude container-selinux manpage from selinux-policy-doc
  Resolves: RHEL-69916


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.51-1
changelog:
  - Allow rsyslog read systemd-logind session files
  Resolves: RHEL-73839
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  Resolves: RHEL-72860
  - Allow svirt_t read sysfs files
  Resolves: RHEL-70839
  - Allow xdm dbus chat with power-profiles-daemon
  Resolves: RHEL-61117
  - Update power-profiles-daemon policy
  Resolves: RHEL-61117
  - Confine power-profiles-daemon
  Resolves: RHEL-61117
  - Allow virtqemud domain transition to nbdkit
  Resolves: RHEL-56029
  - Add nbdkit interfaces defined conditionally
  Resolves: RHEL-56029
  - Confine the switcheroo-control service
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.52-1
changelog:
  - Add the files_read_root_files() interface
  Resolves: RHEL-70849
  - Dontaudit systemd-logind remove all files
  Resolves: RHEL-59145
  - Add the files_dontaudit_read_all_dirs() interface
  Resolves: RHEL-59145
  - Add the files_dontaudit_delete_all_files() interface
  Resolves: RHEL-59145
  - Allow rhsmcertd notify virt-who
  Resolves: RHEL-77152
  - Allow irqbalance to run unconfined scripts conditionally
  Resolves: RHEL-1556
  - Backport bootupd policy from current Fedora rawhide
  Resolves: RHEL-70849
  - Support using systemd containers
  Resolves: RHEL-76352
  - Allow svirt_t connect to unconfined_t over a unix domain socket
  Resolves: RHEL-37539
  - Allow virt_domain to use pulseaudio - conditional
  Resolves: RHEL-1379
  - Allow telnetd read network sysctls
  Resolves: RHEL-58825
  - Allow alsa watch generic device directories
  Resolves: RHEL-61472
  - Update switcheroo policy
  Resolves: RHEL-24268


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.53-1
changelog:
  - Allow svirt_t to connect to nbdkit over a unix stream socket
  Resolves: RHEL-56029
  - Allow power-profiles-daemon the bpf capability
  Resolves: RHEL-61117
  - Allow systemd-machined the kill user-namespace capability
  Resolves: RHEL-76352


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.54-1
changelog:
  - Confine tuned-ppd
  Resolves: RHEL-69526
  - Make tuned work with mls policy
  Resolves: RHEL-69526
  - Allow afterburn to mount and read config drives
  Resolves: RHEL-79319


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.55-1
changelog:
  - Allow tuned-ppd read sssd public files
  Resolves: RHEL-69526
  - Allow systemd-journal-upload read init pid files
  Resolves: RHEL-62196
  - Label SetroubleshootPrivileged.py with setroubleshootd_exec_t
  Resolves: RHEL-77319
  - Allow chronyd-restricted sendto to chronyc
  Resolves: RHEL-82308
  - Allow chronyc sendto to chronyd-restricted
  Resolves: RHEL-82308


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.56-1
changelog:
  - Remove 3 permissive domains
  Resolves: RHEL-82674
  - Allow tuned-ppd dbus chat with xdm
  Resolves: RHEL-87203
  - Allow system-dbusd list systemd-machined directories
  Resolves: RHEL-85379
  - Allow NetworkManager create and use icmp_socket
  Resolves: RHEL-83529
  - Allow journalctl connect to systemd-userdbd over a unix socket
  Resolves: RHEL-82673
  - allow gdm and iiosensorproxy talk to each other via D-bus
  Resolves: RHEL-80697
  - Allow varnishd execute the prlimit64() syscall
  Resolves: RHEL-77995
  - Allow system_dbusd_t r/w unix stream sockets of unconfined_service_t
  Resolves: RHEL-61928
  - Add the getattr permission to 2 dontaudit interfaces
  Resolves: RHEL-59145


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 1.3.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1
  - Related: RHEL-27608


author: Jindrich Novy <jnovy@redhat.com> - 1.3.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2
  - Related: RHEL-60277


author: systemd maintenance team <systemd-maint@redhat.com> - 252-38
changelog:
  - tools: fix the file name that "meson setup" generates (RHEL-30372)
  - tools: explicitly specify "setup" subcommand (RHEL-30372)
  - fuzz: pass -Dc_args=/-Dcpp_args= to fuzzer targets (RHEL-30372)
  - fuzz: don't panic without a C++ compiler (RHEL-30372)
  - meson: use ternary op for brevity (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-39
changelog:
  - enable FIDO2 support (RHEL-36276)
  - netif-naming-scheme: disable NAMING_BRIDGE_MULTIFUNCTION_SLOT (RHEL-44630)
  - netif-naming-scheme: make actually possible to use rhel-9.5 scheme (RHEL-44630)
  - generator: "uninline" generator_open_unit_file and generator_add_symlink (RHEL-33436)
  - ci: add support for rhel-only parameters (RHEL-30372)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-41
changelog:
  - timedatectl: setting set_local_rtc to 1 will throw Warning as well, use log_warning() (#33489) (RHEL-45020)
  - cryptsetup-tokens: fix pin asserts (RHEL-36276)
  - cryptenroll: Use CTAP2.1 credProtect extension (RHEL-36276)
  - kernel-install: check machine ID (RHEL-50672)
  - kernel-install: ignore errors when reading /etc/machine-id (RHEL-50672)
  - hwdb: Add Lenovo G580 (RHEL-5950)
  - Fix key toggle and programmable button for Positivo N14ZP (RHEL-5950)
  - hwdb: Add accel orientation quirk for the Acer Switch V 10 SW5-017 2-in-1 (RHEL-5950)
  - hwdb: fix Compaq N14KP6 key toggle touchpad (#25404) (RHEL-5950)
  - hwdb: remove fuzz and deadzone for Simucube wheel bases. (RHEL-5950)
  - hwdb: Add support for Elgato Stream Pedal (#25550) (RHEL-5950)
  - hwdb: add Clevo touchpad toggle key quirks (RHEL-5950)
  - hwdb: add Dell Inspiron N4010 touchpad corrections (RHEL-5950)
  - hwdb: add Positivo-vaio Pro PW key toggle touchpad (#25669) (RHEL-5950)
  - Add mount matrix for VisionBook 12Wr Tab (RHEL-5950)
  - Update 60-evdev.hwdb (#25704) (RHEL-5950)
  - hwdb: Add additional Dell models that require ACCEL_LOCATION=base (#25724) (RHEL-5950)
  - hwdb: drop trailing space (RHEL-5950)
  - hwdb: add comments about matching entries (RHEL-5950)
  - hwdb: also add a generic entry for DualPoint Stick (RHEL-5950)
  - hwdb: Add mount matrix for CSL Panther Tab HD (RHEL-5950)
  - hwdb: Fix mount matrix for CSL Panther Tab HD (#25752) (RHEL-5950)
  - hwdb: Fn+F5 fix for MSI Bravo 15-B5DX (#25788) (RHEL-5950)
  - hwdb: change definition of PROXIMITY_NEAR_LEVEL for sensors (RHEL-5950)
  - hwdb: Add mic-mute, control-center and screen-rotation mappings for MSI laptops (RHEL-5950)
  - Prevents airplane mode toggle for HP Spectre 16 (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Added Tablet Teclast X98 Air 3G (C5J6) (RHEL-5950)
  - hwdb: remove spurious whitespace (RHEL-5950)
  - hwdb: Add Dell models that require ACCEL_LOCATION=base (RHEL-5950)
  - Fix Positivo MASTER-N1110 key toggle touchpad (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: Add mount matrix for Linx 1020 (RHEL-5950)
  - hwdb: Add mic mute key mappings for Dell G16 Series (RHEL-5950)
  - hwdb: Add Chuwi Hi10X (N4120 version) iio matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for System76 Pangolin 12 (RHEL-5950)
  - hwdb: Prevent activation of airplane mode on HP ENVY x360 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update autosuspend db (RHEL-5950)
  - hwdb: ieee1394-unit-function: add MOTU 896 mk3 Hybrid (RHEL-5950)
  - Add hwdb sensor entry for Lenovo IdeaPad Duet 3 10IGL5 (82AT). (RHEL-5950)
  - Fix Positivo-vaio VJPW12F11X key toggle touchpad (RHEL-5950)
  - hwdb: Add HP Envy x360 Convertible 15-cn0xxx to existing entry (RHEL-5950)
  - hwdb: add override for IdeaPad5 insert key (RHEL-5950)
  - hwdb: update database (RHEL-5950)
  - hwdb: Add HP ENVY x360 2-in-1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: fix swapped buttons for Logitech Lift left (RHEL-5950)
  - Revert "hwdb: fix swapped buttons for Logitech Lift left" (RHEL-5950)
  - hwdb: update 70-mouse.hwdb (#26782) (RHEL-5950)
  - hwdb: 60-keyboard.hwdb: Fix modalias for Thinkpad X200 Tablet (#26795) (RHEL-5950)
  - Add rebrands of Medion Akoya notebooks/tablets (RHEL-5950)
  - hwdb: fix Wifi toggling for Haier 7G-Series/JWU (#25293) (#26878) (RHEL-5950)
  - hwdb: drop boilerplate about match patterns in two more cases (RHEL-5950)
  - hwdb: Fix incorrect touchpad dimensions on Thinkpad L14 Gen1 (#26937) (RHEL-5950)
  - hwdb: drop redundant entry (RHEL-5950)
  - hwdb: Fixed thumb buttons reversed on CHERRY MW 2310 (#26992) (RHEL-5950)
  - hwdb: Move MSI touchpad-toggle mapping to generic MSI section (RHEL-5950)
  - update 60-sensor.hwdb with toshiba tablet (#27103) (RHEL-5950)
  - hwdb: Add support for "Passion Model P612F" (RHEL-5950)
  - hwdb: fix ambiguous glob pattern for Lenovo machines (RHEL-5950)
  - hwdb: add matrix for Asus BR1100F (#27197) (RHEL-5950)
  - hwdb: add accelerometer mount matrix for Lenovo Yoga Tablet 2 851F/L (RHEL-5950)
  - hwdb: Fix rotation for BMAX Y13 (RHEL-5950)
  - hwdb: disable entry for Logitech USB receiver used by G502 X (RHEL-5950)
  - hwdb: add hardware rfkill key for Dell Latitude E6* models (#27462) (RHEL-5950)
  - hwdb: do not include '#' in modalias (RHEL-5950)
  - hwdb: add landscape IdeaPad Miix 310 sensor orientation (#27555) (RHEL-5950)
  - Fix Positivo CF40CM-V2 key toggle touchpad (RHEL-5950)
  - hwdb: fix keyboard entry for IdeapadFlex5 (#27643) (RHEL-5950)
  - hwdb: fix Positivo CG15D key toggle touchpad and programmable keys (#27689) (RHEL-5950)
  - hwdb: add support for Elgato Stream Deck mini (gen 2) (RHEL-5950)
  - hwdb: fix arrow keys on HP Elite Dragonfly G3 (RHEL-5950)
  - hwdb: add support for Jun Tab2/Dere T11 to 60-sensor.hwdb (#28092) (RHEL-5950)
  - hwdb: fix volume control keys on Lenovo IdeaPad Flex 5 (14ARE05) (RHEL-5950)
  - hwdb: Add override for headset form-factors (RHEL-5950)
  - hwdb : add support for Archos 101 Cesium Educ to 60-sensor.hwdb (RHEL-5950)
  - hwdb: drop trailing white space (RHEL-5950)
  - hwdb: merge multiple keyboard entries with same setting (RHEL-5950)
  - hwdb: make matching modalias for Archos 101 Cesium Educ more strict (RHEL-5950)
  - hwdb update for v246-rc1 (RHEL-5950)
  - update hwdb autosuspend data for v254 (RHEL-5950)
  - hwdb: add support for Archos 101 Cesium to 60-sensor.hwdb (#28270) (RHEL-5950)
  - Hwdb: Add Sanwa Direct 400-MA128 external trackpad (#28272) (RHEL-5950)
  - hwdb: drop POINTINGSTICK_CONST_ACCEL (RHEL-5950)
  - Add alternate name for MX Ergo as found on some devices (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: run update-hwdb (RHEL-5950)
  - hwdb: Mute SW rfkill keys on MSI Wind U100 (RHEL-5950)
  - Update 60-sensor.hwdb (#28804) (RHEL-5950)
  - hwdb: Added config for RCA W101SA23T1 (#29041) (RHEL-5950)
  - Update 60-input-id.hwdb: add TEX Shinobi (#29068) (RHEL-5950)
  - hwdb: keyboard: D330 FnLk toggle (RHEL-5950)
  - hwdb: Add Logitech G502 X (RHEL-5950)
  - hwdb: ieee1394-unit-function: remove superfluous Weiss Engineering DAC1 entry (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering DAC202 (Maya edition) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engineering INT203 entry with older firmware (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Weiss Engieering MAN301 (RHEL-5950)
  - hwdb: Add quirk for teclast x3 plus (G4K3) rotation (#29202) (RHEL-5950)
  - hwdb: add mic mute key mappings for Acer Predator Triton 300 SE (RHEL-5950)
  - hwdb: Bush tablet rotation support (#29268) (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Miglia Technology Harmony Audio (HA02) (RHEL-5950)
  - add support for hp pavilion gaming 15 lid switch (#29304) (RHEL-5950)
  - Fix Positivo N14EP6 key toggle touchpad and programmable keys (#29448) (RHEL-5950)
  - add udev rule for micmute (f20) (RHEL-5950)
  - hwdb,rules: mark host-to-host network devices as only requiring link local addressing (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update hwdb autosuspend rules (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add accelerometer data for Librem11 (#29974) (RHEL-5950)
  - hwdb: PNP/ACPI lists on uefi.org are now in CSV format (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: rename .html=>.csv (RHEL-5950)
  - hwdb/acpi-update.py: streamline python code (RHEL-5950)
  - hwdb: Mark Dell platform accel sensor location to base (RHEL-5950)
  - hwdb: add Predator PHN16-71 (RHEL-5950)
  - Update 60-autosuspend.hwdb (#30131) (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Sony DVMC-DA1 (RHEL-5950)
  - hwdb: ieee1394-unit-function: arrangement for Sony DVMC-DA1 (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - hwdb: update (RHEL-5950)
  - Adding Trekstor Primebook C13 rotation to 60-sensor.hwdb (#30415) (RHEL-5950)
  - Add three Dell platforms to sensor accel location base (RHEL-5950)
  - Add Bosto BT-12HD series to hwdb (RHEL-5950)
  - hwdb: Add override for headset form-factor for the Corsair Void Elite (RHEL-5950)
  - hwdb: add Teclast X98 Pro sensor info (#30859) (RHEL-5950)
  - hwdb: Correct display rotation on Chuwi Ubook X N4100 (#24248) (RHEL-5950)
  - hwdb: ieee1394-unit-function: adjustment of entries with device attributes available in Linux v6.8 (RHEL-5950)
  - 60-evdev.hwdb: Add support for Huion Inspiroy 2 L (#31241) (RHEL-5950)
  - hwdb: add resolution setting for GAOMON S620 (RHEL-5950)
  - hwdb: Remove version check in CH Pro Pedals rule (RHEL-5950)
  - hwdb: Add support for MetawillBook01 to 60-sensor.hwdb Add accel orientation quirk for the METAPHYUNI MetawillBook01 2-in-1 laptop (RHEL-5950)
  - hwdb: Add headset form-factor override for Xbox Wireless Dongle (RHEL-5950)
  - hwdb: Add support for Elgato Stream Deck Plus (RHEL-5950)
  - Fix: Chuwi UBook X (CWI535) screen rotation matrix (RHEL-5950)
  - hwdb: Add touchpad toggle mapping for Kvadra LE14U/LE15U (RHEL-5950)
  - hwdb: Add touchpad configuration for ThinkPad E495 (RHEL-5950)
  - Fix Positivo N14NPE-N and N15NPE-N key toggle touchpad and search key (RHEL-5950)
  - Update USB ids of hwdb (RHEL-5950)
  - Added resolution for Huion Kamvas Pro 19 (RHEL-5950)
  - hwdb: Add mapping for ACPI quickstart keys on Toshiba Z830 (RHEL-5950)
  - hwdb: fix Asus T300FA rotation matrix (#31973) (RHEL-5950)
  - Fixed resolution for pen and touchpad (RHEL-5950)
  - hwdb: fix missing colon (#32108) (RHEL-5950)
  - hwdb: update for v256 (RHEL-5950)
  - autosuspend: update for v256 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: Add a common Logitech M185/M225 mouse variant (RHEL-5950)
  - hwdb: Add mapping for Samsung GalaxyBook - 550X (#32616) (RHEL-5950)
  - hwdb: Add mapping for Xiaomi Mipad 2 bottom bezel capacitive buttons (RHEL-5950)
  - hwdb: ieee1394-unit-function: add Tascam IF-FW/DM mkII (RHEL-5950)
  - hwdb: Add a Logitech MX Master 3S (connected via Bolt Receiver) (RHEL-5950)
  - Fix Positivo N14EPE and N15EPE key toggle touchpad and search key (RHEL-5950)
  - hwdb: update Dere N12 / Juno Tablet 3 accelerometer (#32765) (RHEL-5950)
  - hwdb: updated Librem 11 accelerometer (#32772) (RHEL-5950)
  - hwdb: ID_INPUT_XYZ allows an empty string (RHEL-5950)
  - hwdb: ASRock LED Controller classified incorrectly as joystick due to buttons and axis (#32775) (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb.d/60-keyboard.hwdb: enable Clevo quirk for model V5x0TU (RHEL-5950)
  - hwdb: Enable JP-IK LEAP W502's touchpad toggle key (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - Update autosuspend hwdb (RHEL-5950)
  - hwdb: Lenovo IdeaPad Z500 Touchpad Toggle (#33039) (RHEL-5950)
  - hwdb: add a vmbus id for HyperV Video device (RHEL-5950)
  - hwdb: Add Logitech MX Master 3S Bluetooth ID (RHEL-5950)
  - hwdb: Lenovo 16G6IRL volume keys and friends (#33107) (RHEL-5950)
  - hwdb: added hwdb rules for micmute and power button on Acer Nitro AN 515-58 (#32867) (RHEL-5950)
  - Fix key toggle touchpad and programmable buttom for Positivo N14AP7 (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add keyboard mappings for the Ayaneo Kun face buttons (RHEL-5950)
  - Update hwdb (RHEL-5950)
  - hwdb: add support for AIPTEK Media Tablet Ultimate (#33371) (RHEL-5950)
  - hwdb: add scancodes for AYANEO devices (#33378) (RHEL-5950)
  - Add OrangePi NEO Scancodes (RHEL-5950)
  - hwdb: Fix Logitech G915 TKL (Bluetooth) appearing as a mouse (RHEL-5950)
  - hwdb: fix keyboard of RedmiBook Pro 15 2022 (#33465) (RHEL-5950)
  - Added mised EVDEV_ABS_35 & EVDEV_ABS_36 for GAOMON s620 (RHEL-5950)
  - hwdb: Add some HP IR cameras (RHEL-5950)
  - hwdb: add more AV controllers (RHEL-5950)
  - Fix key toggle touchpad button for multilaser ul154 (#33630) (RHEL-5950)
  - hwdb: Added StarLabs StarLite position sensor mapping (RHEL-5950)
  - 70-mouse.hwdb: Added Glorious Model O DPI (RHEL-5950)
  - Update 60-sensor.hwdb (RHEL-5950)
  - Add MSI Claw AT Keyboard Scancodes. (RHEL-5950)
  - Add or fix mount matrix for multiple handhelds. (#33586) (RHEL-5950)
  - Revert "hwdb: Added StarLabs StarLite position sensor mapping" (RHEL-5950)
  - hwdb: fix accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: add backslash and touchpad toggle mapping for Aquarius Cmp NS483 (RHEL-5950)
  - hwdb: Add mic mute key mapping for Dell Pro Rugged series (RHEL-5950)
  - hwdb: fix MXC6655 accelerometer mount matrix for Aquarius Cmp NS483 (RHEL-5950)
  - add udev rules for trezor hw wallet devices (RHEL-5950)
  - hwdb: add axis range corrections for the Lenovo Thinkpad E16 (RHEL-5950)
  - hwdb: fix auto rotate on Asus Q551LB (#33921) (RHEL-5950)
  - udev: add hwdb execution for hidraw subsystem devices (RHEL-5950)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-43
changelog:
  - udev-builtin-net_id: skip non-directory entry earlier (RHEL-50103)
  - udev-builtin-net_id: return earlier when hotplug slot is not found (RHEL-50103)
  - udev-builtin-net_id: split-out pci_get_hotplug_slot() and pci_get_hotplug_slot_from_address() (RHEL-50103)
  - udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT (RHEL-50103)
  - Include <threads.h> if possible to get thread_local definition (RHEL-50651)
  - add APIs for detecting confidential virtualization (RHEL-50651)
  - detect-virt: add --cvm option (RHEL-50651)
  - detect-virt: add --list-cvm option (RHEL-50651)
  - unit: add "cvm" option for ConditionSecurity (RHEL-50651)
  - dbus: add 'ConfidentialVirtualization' property to manager object (RHEL-50651)
  - core: log detected confidential virtualization type (RHEL-50651)
  - core: set SYSTEMD_CONFIDENTIAL_VIRTUALIZATION env for generators (RHEL-50651)
  - udev: add 'conf-virt' constant for confidential virtualization tech (RHEL-50651)
  - confidential-virt: split caching of CVM detection into separate method (RHEL-50651)
  - confidential-virt: add detection for s390x target (RHEL-50651)
  - man/systemd-detect-virt: list known CVM technologies (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-44
changelog:
  - Revert "udev-builtin-net_id: use firmware_node/sun for ID_NET_NAME_SLOT" (RHEL-50103)
  - fundamental: share constants for confidential virt detection (RHEL-50651)
  - efi: add helper API for detecting confidential virtualization (RHEL-50651)
  - efi: don't pull kernel cmdline from SMBIOS in a confidential VM (RHEL-50651)
  - Fix detection of TDX confidential VM on Azure platform (RHEL-50651)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-49
changelog:
  - logind: tighten for which classes of sessions we do stop-on-idle (RHEL-24340)
  - Fix configuration for Packit 1.0.0 (RHEL-70884)
  - udev/net_id: introduce naming scheme for RHEL-9.6 (RHEL-25515)
  - hwdb: Fix accelerometer mount matrix for ASUS T100TAS (RHEL-49810)
  - hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x dGPU (RHEL-49810)
  - hwdb: add entry for Dell AlpsPS/2 ALPS DualPoint TouchPad (RHEL-49810)
  - hwdb: Mark Apple Wireless keyboards as not having NumLock LED (RHEL-49810)
  - update keyboard hwdb to add acer Predator PHN16-72 (RHEL-49810)
  - hwdb: death to tabs! (RHEL-49810)
  -  hwdb.d/60-keyboard.hwdb: add Clevo mic mute quirk for V5x iGPU, NV41PZ (RHEL-49810)
  - Add ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max. (RHEL-49810)
  - Add HUAWEI MateBook D 15 AMD ACCEL properties (RHEL-49810)
  - hwdb: add Kensington SlimBlade Pro trackball (Bluetooth mode) (RHEL-49810)
  - hwdb: Add accel orientation quirk for the IdeaPad Duet 3 10IGL5-LTE (RHEL-49810)
  - hwdb: add keymaps for Acer Nitro 5 AN515-47 (#34493) (RHEL-49810)
  - hwdb: make key map match comment for one laptop (RHEL-49810)
  - hwdb: there's KEY_BRIGHTNESS_AUTO these days, hence hook it up where a FIXME suggests that (RHEL-49810)
  - hwdb: use KEY_ROTATE_DISPLAY for various cases of display rotation keys (RHEL-49810)
  - hwbd: use newer KEY_PICKUP_PHONE, KEY_HANGUP_PHONE, KEY_SELECTIVE_SCREENSHOT, KEY_NOTIFICATION_CENTER keycodes where appropriate (RHEL-49810)
  - hwdb: add SCAI SKU prefix for Samsung keyboard mapping (#34648) (RHEL-49810)
  - tree-wide: drop doubled empty lines (RHEL-49810)
  - hwdb: move key 66/65 handling from specific to generic HP laptop coverage (RHEL-49810)
  - hwdb: fix key toggle touchpad and programmable buttom for Positivo V142N (#34725) (RHEL-49810)
  - hwdb: add Stream Deck Neo (#34903) (RHEL-49810)
  - hwdb: update autosuspend rules (RHEL-49810)
  - hwdb: import newest autosuspend rules from chromeos (RHEL-49810)
  - update hwdb (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: fix broken numpad paren keys on Lenovo Thinkbook 16 G6+ 2024 (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: add new Cube Mix Plus (i18D) rotation info (RHEL-49810)
  - hwdb: Add quirk for Logitech MX Keys for Mac (RHEL-49810)
  - hwdb: add support for PineTab2 to 60-sensor.hwdb (#35304) (RHEL-49810)
  - hwdb: add entry for Chuwi Hi10 X1 (#35331) (RHEL-49810)
  - hwdb: update (RHEL-49810)
  - hwdb: Make 3D mice work out-of-the-box (RHEL-49810)
  - hwdb: Add Chuwi MiniBook X trackpad fuzz (RHEL-49810)
  - Update hwdb (RHEL-49810)
  - hwdb: disable inclusion of the PCI domain in MANA network interface naming (RHEL-49810)
  - hwdb: move down touchpad toggle section from generic to product specific (RHEL-49810)
  - hwdb: add scancodes for HP Elitebook 2170p runnning coreboot (RHEL-49810)
  - hwdb: Make remote controllable lights work out-of-the-box (RHEL-49810)
  - hwdb: fix key toggle touchpad for VAIO VJFH52 (#35645) (RHEL-49810)
  - hwdb: comment out the entry for Logitech MX Keys for Mac (RHEL-49810)
  - 60-sensor.hwdb: Loosen model mask to include entire series (RHEL-49810)
  - Correct ACCEL_MOUNT_MATRIX for Chuwi Hi10 Max (RHEL-49810)
  - hwdb: Add macro keys for HP 430 Programmable Wireless Keypad (RHEL-49810)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-50
changelog:
  - journal: again create user journals for users with high uids (RHEL-70103)
  - install: don't translate unit instances to paths when reenabling them (RHEL-5956)
  - test-systemctl-enable: fix typo (RHEL-5956)
  - udev: Handle PTP device symlink properly on udev action 'change' (RHEL-59088)
  - systemctl: print warning about missing /proc only as debug message (RHEL-3906)
  - repart: avoid use of uninitialized TPM2B_PUBLIC data (RHEL-56793)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-51
changelog:
  - ci: use ubuntu 22:04 for deploy of man pages (RHEL-70884)
  - man/tmpfiles: fix off-by-one in example (RHEL-74015)
  - test: drop removed SCSI passthrough feature (RHEL-70884)
  - nspawn: call json_dispatch() with a correct pointer (RHEL-55266)
  - varlink,json: introduce new varlink_dispatch() helper (RHEL-55266)
  - json: add json_dispatch_const_user_group_name() (RHEL-55266)
  - sd-varlink: add new sd_varlink_error_is_invalid_parameter() helper (RHEL-55266)
  - userdb: return ESRCH if userdb service refuses a user/group name as invalid (RHEL-55266)
  - test: rename assert.sh to util.sh (RHEL-55301)
  - core: Don't GC unit if it is in cgroup_empty_queue (RHEL-55301)
  - core: Handle cgroup pruning in on_cgroup_empty_event (RHEL-55301)
  - Fix failing test (RHEL-55301)
  - unit: don't gc unit in oom queue (RHEL-55301)
  - core: do not GC units/jobs that are in the D-Bus queue (RHEL-55301)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-52
changelog:
  - man: be even clearer that tmpfiles user/group/mode are applied on existing inodes (RHEL-15051)
  - unit: always return 1 in log_kill (RHEL-78170)
  - ci: enable mkosi workflow for z-stream branches (RHEL-79977)
  - ci(mkosi): bump fedora version from 39 to 41 (RHEL-79977)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-53
changelog:
  - man: mention that rhel-9.0 net naming scheme is the same as v251 (RHEL-86891)
  - backlight: Drop support for actual_brightness (RHEL-86714)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-54
changelog:
  - unit: add conditions and deps to make oomd.socket and .service consistent (RHEL-90417)
  - udev/net_id: introduce naming scheme for RHEL-9.7 (RHEL-25516)
  - Add a set of assertion macros to tests.h (ASSERT_OK(), ASSERT_EQ(), ASSERT_GE(), ASSERT_LE()) that log the failed condition before crashing and convert test-gpt.c test file to use them (RHEL-103753)
  - Follow up with the PR #31819 (RHEL-103753)
  - Added more ASSERT macro and also make some test file to use them (RHEL-103753)
  - sd-event: drop inotify event from buffer when no event source is triggered (RHEL-103753)
  - test: add test case for issue #38265 (RHEL-103753)
  - test: answer 2nd mdadm --create question for compat with new version (RHEL-79977)
  - sysusers: cross-check user and group names too (RHEL-72572)
  - test-sysusers: check group creation with matching user entry (RHEL-72572)
  - user-sessions: do not remove /etc/nologin (RHEL-85467)
  - hwdb: f20 → micmute (RHEL-72697)
  - hwdb: f21 → touchpad_toggle (RHEL-72697)
  - hwdb: f22 → touchpad_on (RHEL-72697)
  - hwdb: f23 → touchpad_off (RHEL-72697)
  - hwdb: drop some now redundant mappings (RHEL-72697)
  - hwdb: Add micmute for System76 (RHEL-72697)
  - hwdb: Add newer System76 Pangolins (RHEL-72697)
  - hwdb: WALTOP International Corp. Slim Tablet Stylus (RHEL-72697)
  - hwdb: add MSI Claw 8 AT Keyboard Scancodes (#36180) (RHEL-72697)
  - Adds asus T103HAF rotation matrix to 60-sensor.hwdb (#36177) (RHEL-72697)
  - hwdb: fix screen rotation for EXO Wings 2in1 w1125 (#36283) (RHEL-72697)
  - hwdb: XBox Series Elite controller modalias entry has been added. (#36305) (RHEL-72697)
  - hwdb: add front button support for MSI Claw 7 AI+ A2VM (RHEL-72697)
  - hwdb: add accel orientation and location for the BMAX Y14 (RHEL-72697)
  - hwdb.d: add support for Akoya P15645 (RHEL-72697)
  - hwdb.d: add ANP09 Intel n100 tablet sensor configuration (#36390) (RHEL-72697)
  - hwdb: add axis range corrections for the Lenovo Yoga Slim 7 14ARE05 (RHEL-72697)
  - hwdb: add GOLD WARRIOR SIM PhoenixRC 10411R (RHEL-72697)
  - hwdb: add Code Mercenaries Hard- und Software GmbH Virtual RC USB (RHEL-72697)
  - hwdb: Add accel orientation quirk for the GPD Pocket 4 (RHEL-72697)
  - hwdb: add rotation profile matrix for Rog Ally X (2024) (#36591) (RHEL-72697)
  - hwdb: fix backspace not working on HP Pavilion laptop (#36777) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO NB02 devices (RHEL-72697)
  - hwdb: add G-Mode key support (#37175) (RHEL-72697)
  - hwdb/keyboard: Map FN key on TUXEDO InfinityFlex 14 Gen1 (RHEL-72697)
  - hwdb: add HP 150 Wired Mouse (#37341) (RHEL-72697)
  - Add emulated release to G-Mode key (RHEL-72697)
  - hwdb: keyboard: Add Alienware special keys (RHEL-72697)
  - hwdb: add bladeRF SDR devices (RHEL-72697)
  - hwdb: append ID_SOFTWARE_RADIO to hwdb parser (RHEL-72697)
  - hwdb.d: reword and simplify boilerplate texts (RHEL-72697)
  - hwdb.d: update/expand boilerplate on various hwdb files (RHEL-72697)
  - hwdb: say that settings can be also set to 0 (RHEL-72697)
  - hwdb: add Analog Devices PLUTO SDR (RHEL-72697)
  -  hwdb: append ID_MM_DEVICE_IGNORE to hwdb parser (RHEL-72697)
  - hwdb: run "update-hwdb" (RHEL-72697)
  - hwdb: run "update-hwdb-autosuspend" (RHEL-72697)
  - hwdb: add missing PLUTO SDR vendor name (RHEL-72697)
  - hwdb: add Ettus Research SDR devices (RHEL-72697)
  - hwdb: add RTL-SDR devices (RHEL-72697)
  - hwdb: merge entries for Ettus Research B200 (RHEL-72697)
  - hwdb: make Saitek PLC Pro Flight Rudder Pedals a joystick (#37601) (RHEL-72697)
  - hwdb: fix touchpad for ASUS X1504ZA (#37696) (RHEL-72697)
  - hwdb: add support for Loupedeck devices (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Mic Toggle (RHEL-72697)
  - hwdb: Added Beacn and TC-Helicon Audio controllers (#37798) (RHEL-72697)
  - hwdb: Add support for Lenovo IdeaPad Slim 5 series (RHEL-72697)
  - hwdb: Add hwbd definitions for maker tools (RHEL-72697)
  - hwdb: Add accel orientation quirk for the Microtech e-tab Pro (RHEL-72697)
  - hwdb: add 70-maker-tools.hwdb to meson.build (RHEL-72697)
  - hwdb: fix typo in 70-maker-tools.hwdb (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - Fix Positivo K116J search key and www shortcut (RHEL-72697)
  - hwdb: Acer Nitro ANV15-51 Nitro Sense Toggle (RHEL-72697)
  - hwdb: several cleanups (RHEL-72697)
  - hwdb: disable Asus ROG keyboards sending poweroff (RHEL-72697)
  - hwdb: update (RHEL-72697)
  - hwdb: update autosuspend rules (RHEL-72697)
  - hwdb: set touchpad resolution for ThinkPad T14 Gen2a (RHEL-72697)
  - Revert "hwdb: disable Asus ROG keyboards sending poweroff" (RHEL-72697)
  - hwdb: Add launch emoji keyboard mapping for Asus M1607KA (RHEL-72697)
  - Enable KEY_PERFORMANCE key present on Linux 6.17 (RHEL-72697)
  - flush_ports: flush POSIX message queues properly (RHEL-90860)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install (RHEL-83932)
  - kernel-install: add --entry-type=type1|type2 option to kernel-install.in (RHEL-83932)
  - kernel-install: do not mix || and && (RHEL-83932)
  - man/kernel-install: mention --entry-type= option in the man page (RHEL-83932)
  - cgroup: add support for memory.peak (RHEL-95797)
  - core: include peak memory in unit_log_resources() (RHEL-95797)
  - run: include peak memory in output (RHEL-95797)
  - core: ensure init.scope is realized after drop-ins have been loaded (RHEL-103488)
  - core: add possibility to not track certain unit types (RHEL-89796)


author: systemd maintenance team <systemd-maint@redhat.com> - 252-55
changelog:
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - build: add some coloring to --version output (RHEL-100353)
  - core: output log cycle path in one log message, not many (RHEL-100353)
  - core: make log cycle messages recognizable via message IDs (RHEL-100353)
  - core: change ordering cycle log message log levels (RHEL-100353)
  - core: cast log_oom() got void (RHEL-100353)
  - core: when removing a job from a transaction, include in structured log message which (RHEL-100353)
  - catalog: add entries for the order cycle log messages (RHEL-100353)
  - tree-wide: check more log message format in log_struct() and friends (RHEL-100353)
  - core/transaction: do not attempt to log "n/a" as a journal field (RHEL-100353)


author: Frank Ch. Eigler <fche@redhat.com> - 5.0-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Martin Cermak <mcermak@redhat.com> - 5.1-4
changelog:
  - RHEL-50107.patch:  Make systemtap compatible with kernel
    commit 68cbd415dd4b .  Related: RHEL-56962 .


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-82
changelog:
  - Changing LD_FLAGS to RPM_LD_FLAGS
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Christian Kellner <ckellner@redhat.com> - 0.99.11-2
changelog:
  - Add systemd service snippets
  - Use macros for _unitdir and _udevrulesdir
  - Mark _datadir/gtk-doc as directory


author: Karel Zak <kzak@redhat.com> 2.37.4-12
changelog:
  - fix #2133396 - Internal testsuite for cramfs fails on s390x
  - fix #2174748 - enable uuidd cont-clock by default
  - fix #2182169 - lscpu: backport ARM human-readable names from upstream
  - fix #2189947 - libuuid - downport cache related patch
  - fix #2203324 - zram module does not have algorithms mentioned in zramctl command
  - fix #2209267 - Add additional documentation on devices being auto-mounted if a device exists within fstab.
  - fix #2215082 - For the 'sfdisk' man page to further clarify the expected behavior and intended use of the -d option


author: Karel Zak <kzak@redhat.com> 2.37.4-16
changelog:
  - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1)
  - fix RHEL-21257 - logger sending process start time not current time with log messages
  - fix RHEL-16071 - issues in libblkid
  - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value
  - fix RHEL-14612 - Userspace mount options are not preserved for NFS


author: Karel Zak <kzak@redhat.com> 2.37.4-19
changelog:
  - fix RHEL-34165 - lsipc: fix semaphore USED counter
  - fix RHEL-25265 - libblkid: Check offset in LUKS2 header
  - fix RHEL-25559 - more: fix poll() use


author: Peter Hutterer <peter.hutterer@redhat.com> 2.32-1
changelog:
  - xkeyboard-config 2.32
  - build with meson now
  - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev
    these days.


author: Peter Hutterer <peter.hutterer@redhat.com> 2.32-3
changelog:
  - Restore the xorg ruleset, console-setup and possibly others are still
    using those (#1951875)
  - Allow for a "custom" layout
  - Don't mark the DTD document as XML document (#1952283)
  - Remove a duplicate keyboard layout to prevent a crash in gnome-desktop's
    xkbinfo


author: Jakub Martisko <jamartis@redhat.com> - 3.0-31
changelog:
  - Add the missing linker flags
  - Add the patch that allows to configure the linker flags from the spec file
    Resolves: rhbz #2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-33
changelog:
  - Disable the asm implementation of some functions and use the C instead
  - This should fix some of the annocheck issues
    Related: rhbz#2044902


author: Jakub Martisko <jamartis@redhat.com> - 3.0-34
changelog:
  - Fix the regression introduced in 3.0-33 that caused some of the zip build flags to be dropped
  Resolves: rhbz#2162688


author: Jakub Martisko <jamartis@redhat.com> - 3.0-35
changelog:
  - Fix the annocheck issus from 3-0-33 without reintroducing the regression from 3.0-34
  Related: rhbz#2162688


author: Matej Mužila <mmuzila@redhat.com> - 1.2.11-34
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-37
changelog:
  - Rebased Power 8 optimization patches
  - Fix for Unnecessary IFUNC resolver for crc32_z
  - Fix for python3.11 broken libxml2 and lxml on s390x


