# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-2
changelog:
  - Bump version to 2.2.4-2
  - Resolves: Bug 1859271 - RFE - Extend log of operations statistics in access log
  - Resolves: Bug 2093981 - RFE - Create Security Audit Log
  - Resolves: Bug 2109891 - Migrate 389 to pcre2
  - Resolves: Bug 2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: Bug 2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: Bug 2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: Bug 2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: Bug 2132697 - RFE - run as non-root
  - Resolves: Bug 2142636 - pam mutex lock causing high etimes, affecting red hat internal sso


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-3
changelog:
  - Bump version to 2.2.4-3
  - Resolves: rhbz#2142636 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: rhbz#2093981 - RFE - Create Security Audit Log
  - Resolves: rhbz#2132697 - [RFE] 389ds: run as non-root
  - Resolves: rhbz#2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: rhbz#2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: rhbz#2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: rhbz#2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: rhbz#2109891 - Migrate 389 to pcre2


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.4-3
changelog:
  - Bump version to 2.3.4-3
  - Resolves: rhbz#2189954 - RFE Improve reponse time to filters containing 'nsrole'
  - Resolves: rhbz#2189946 - RFE support of slapi_memberof for plugins/core server
  - Resolves: rhbz#1974242 - Paged search impacts performance


author: Mark Reynolds <mreynolds@redhat.com> - 2.3.6-2
changelog:
  - Bump version to 2.3.6-2
  - Resolves: rhbz#2225532 - 389-ds-base FTBFS with rust-1.71.0
  - Resolves: rhbz#2218209 - useradd: invalid user ID '389:389': installing 389-ds-base in container fails to create the dirsrv user
  - Resolves: rhbz#2207691 - python3-lib389: Python tarfile extraction needs change to avoid a warning
  - Resolves: rhbz#2179278 - dirsrv failed to start after reboot because "dirsrv" did not have access on /run/dirsrv


author: Simon Pichugin <spichugi@redhat.com> - 2.3.6-3
changelog:
  - Bump version to 2.3.6-3
  - Resolves: rhbz#2236163 - Regression: replication can't be enabled for consumer or hub role


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Paul Howarth <paul@city-fan.org> - 1.0.5-20
changelog:
  - Modernize spec
    - Use %make_install
    - Use %set_build_flags
    - Drop conditionals for building with old distributions
    - Re-format %description to 80 columns
    - Comment patch applications in %prep section


author: Paul Howarth <paul@city-fan.org> - 1.0.5-23
changelog:
  - Don't pass gcc-only compiler flags to other compilers, e.g. clang
    (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from
    Timm Baeder)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.6-1
changelog:
  - Update to 1.43.6 release (development)
  - fix assertion failure when renewing DHCP lease (rh #2179890)
  - emit the dhcp-change dispatcher script event on lease renewal (rh #2179537)
  - ensure the NetworkManager is restarted when dbus is restarted (rh #2161915)
  - add support for the "no-aaaa" resolv.conf option (rh #2176137)                                                                                                              -


author: Thomas Haller <thaller@redhat.com> - 1:1.43.7-1
changelog:
  - Update to 1.43.7 release (development)
  - bond: support port priorities (rh #2152304)
  - ovs: fix autoconnect race (rh #2152864)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.8-1
changelog:
  - Update to 1.43.8 release (development)
  - ipv6ll: don't regenerate the address when it's removed externally (rh #2196441)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.9-1
changelog:
  - Update to 1.43.9 release (development)
  - improve autoconnect logic for port/controller configurations (rh #2121451)
  - fix handling external devices during network off/on (rh #2149012)


author: Thomas Haller <thaller@redhat.com> - 1:1.43.10-1
changelog:
  - Update to 1.43.10 release (development)
  - fix reading infiniband p-key from ifcfg files (rh #2209974)
  - improve autoconnect when selecting controller (rh #2121451)
  - fix managing devices after network reconnect (rh #2149012)
  - better handle ignore-carrier for bond/bridge/team (rh #2180363)
  - cloud-setup: block wait-online while configuration is ongoing (rh #2151040)
  - cloud-setup: avoid leaving half configured system (rh #2207812)
  - cloud-setup: log warning when no provider detected (rh #2214880)
  - cloud-setup: fix RPM description (rh #2214491)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.43.11-1
changelog:
  - update to 1.43.11 release (development)
  - fix assertion about missing ifindex when resetting MAC (rh #2215022)
  - fix wrong order of entries in resolv.conf after reconnect (rh #2218448)
  - do not fail activation when SR-IOV VF parameters can't be applied (rh #2210164)
  - warn that the ifcfg-rh plugin is deprecated (rh #2190375)


author: Wen Liang <wenliang@redhat.com> - 1:1.43.90-1
changelog:
  - update to 1.43.90 release (release candidate)
  - manager: allow controller activation if device is deactivating (rh #2125615)
  - assume: change IPv6 method from "ignore" and "disabled" into "auto" for loopback device (rh #2207878)
  - device: delete software device when lose carrier and is controller (rh #2224479)
  - core: better handle ignore-carrier=no for bond/bridge/team devices (rh #2180363)


author: Fernando Fernandez Mancera <ferferna@redhat.com> - 1:1.44.0-1
changelog:
  - update to 1.44.0 release
  - nmcli: add nmcli version mismatch warning (rh #2173196)
  - checkpoint: preserve devices that were removed and readded (rh #2177590)


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-2
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.32-3
changelog:
  - Add a patch to resolve one more issue found by rpmdiff/rpminspect:
    fix getaddrinfo detection to avoid using gethostbyname.


author: Richard Hughes <rhughes@redhat.com> - 1.2.2-1
changelog:
  - New upstream release
  - Notify systemd when beginning to shutdown
  - Fix possible information disclosure


author: Richard Hughes <rhughes@redhat.com> - 1.2.3-1
changelog:
  - New upstream release
  - Add support for coercing upgrade to distupgrade
  - Append to cron log instead of overwriting it
  - Cancel a transaction if calling Cancel fails or the daemon disappears
  - Remove large transaction size sanity check


author: Milan Crha <mcrha@redhat.com> - 1.2.4-1
changelog:
  - New upstream release
  - Add specific error code when user declined interaction
  - Avoid spurious GObject::notify signal emissions
  - Fix a leak on calling set_locale() a second time
  - Fix a possible use-after-free under pk_client_cancel_cb()
  - Honor install_weak_deps=False
  - Improve thread safety on an operation cancellation
  - Let the finish understand the 'cancelled' exit code
  - Only set polkit interactive flag if method call has too
  - Read update information also when getting list of updates
  - Use 'hy_query_get_advisory_pkgs', if available


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-39
changelog:
  - Fix retrieving an error code after stopping and resuming a CD-ROM playback
    (upstream bug #4108)
  - Fix SDL_Surface reference counter initialization and a possible crash when
    opening a mouse device when using a framebuffer video output (bug #1602687)


author: Petr Pisar <ppisar@redhat.com> - 1.2.15-41
changelog:
  - Fix Windows drivers broken with a patch for CVE-2019-7637 (bug #1677152)
  - Update URL to use secured HTTP protocol


author: Neal Gompa <ngompa13@gmail.com> - 2.0.14-6
changelog:
  - Switch to CMake to build SDL2
  - Build JACK support unconditionally since PipeWire-JACK exists in RHEL 9


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-1
changelog:
  - Rebase to 2.7.0.6-1 [bz#2083464]
  - Adding restart_if implementation for RHEL [bz#2081944]
  - Resolves: bz#2083464
    ([Azure][RHEL-9]Rebase WALinuxAgent to v2.7.0.6)
  - Resolves: bz#2081944
    ([Azure][WALA][9.0] WALA provisions VM failed because of no "ifdown")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-2
changelog:
  - wla-redhat-Fix-command-sequence-for-restarting-net-inter.patch [bz#2098233]
  - Resolves: bz#2098233
    ([Azure][WALA][RHEL-9] [9.1] walinuxagent kills network during boot)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2114830]
  - wla-Update-Log-Collector-default-in-Comments-and-Readme-.patch [bz#2093965]
  - Resolves: bz#2114830
    ([Azure][WALA][RHEL-9.1] Provisioning failed if no ifcfg-eth0)
  - Resolves: bz#2093965
    ([Azure][WALA][RHEL-9] The description of "Logs.Collect" is incorrect)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-4
changelog:
  - wla-redhat-Remove-all-waagent-unit-files-when-uninstalli.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-5
changelog:
  - wla-redhat-Mark-directories-properly-in-the-files-list.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-6
changelog:
  - wla-redhat-Remove-files-inside-WALA-services-directory.patch [bz#2114768]
  - Resolves: bz#2114768
    ([Azure][WALA][RHEL-9] When remove package some files left)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-7
changelog:
  - wla-redhat-Azure-CVM-specific-udev-rules.patch [bz#2162668]
  - Resolves: bz#2162668
    (Add support for importing remotely sealed TPM2 objects)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-8
changelog:
  - wla-redhat-Explicitly-list-udev-rule-requirements-in-the.patch [bz#2165042]
  - Resolves: bz#2165042
    ([9.0.z] /dev/disk/azure/ is created as symlink to sr0 or sda and not as a directory[Azure])


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.7.0.6-9
changelog:
  - wla-redhat-Adjust-tpm2_createprimary-key-attributes-to-m.patch [bz#2167322]
  - Resolves: bz#2167322
    (Adjust TPM primary key creation parameters to match Azure)


author: Matěj Grabovský <mgrabovs@redhat.com> - 2.14.6-8
changelog:
  - Use lazy import in the Python exception handler to avoid slowdown in Python
    startup (rhbz#2007664)


author: Miro Hrončok <mhroncok@redhat.com> - 2.14.6-11
changelog:
  - Make abrt-tui and python3-abrt-container-addon noarch as they contain no architecture-specific content
  - Ensure Python bytecode in noarch subpackages is reproducible


author: Matěj Grabovský <mgrabovs@redhat.com> - 2.15.0-1
changelog:
  - Bump abrt library version to 1:0:1
  - cli: Fix path and glob matching for abrt info etc.
  - abrt-dump-oops: Fix vmcore call trace parsing
  - Use lazy imports in abrt_exception_handler3
  - Don't copy coredump to problem dir
  - Detect Python 3.10 and Perl correctly in abrt-action-save-package-data
  - Fix calls to deprecated methods in tests
  - Update translations


author: Benjamin A. Beasley <code@musicinmybrain.net> - 20211102.0-1
changelog:
  - Update to 20211102.0 (close RHBZ#2019691)
  - Drop --output-on-failure, already in %ctest expansion
  - On s390x, instead of ignoring all tests, skip only the single failing test
  - Use ninja backend for CMake: speeds up build with no downsides
  - Drop patch for armv7hl


author: Benjamin A. Beasley <code@musicinmybrain.net> - 20211102.0-2
changelog:
  - Disable LTO on s390x to work around test failure
  - Skip SysinfoTest.NominalCPUFrequency on all architectures; it fails
    occasionally on aarch64, and upstream says we should not care


author: Ray Strode <rstrode@redhat.com> - 0.6.55-10
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations.
    Resolves: #2057576


author: Tom Stellard <tstellar@redhat.com> - 2.2.53-6
changelog:
  - Spec file cleanups and build fix
  - Add BuildRequires: perl-FileHandle to fix make check
  - Add BuildRequres: gcc [1]
  - Use make_build [2] and make_install[3] macros
  - [1] https://docs.fedoraproject.org/en-US/packaging-guidelines/C_and_C++/#_buildrequires_and_requires
  - [2] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - [3] https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used


author: Al Stone <ahs3@redhat.com> - 20200326-1
changelog:
  - Update to 20200326 source tree, including patch refreshes
  - Removed a couple of patches that got included upstream


author: Al Stone <ahs3@redhat.com> - 20200925-1
changelog:
  - Update to 20200925 source tree
  - Completely revamp the old big-endian patches (maintainability was the goal).
    This results in a much larger patch set, but each patch is more clearly used
    for a specific purpose.
  - The acpinames command has been deprecated upstream; acpiexec provides 
    replacement functionality.


author: Dean Nelson <dnelson@redhat.com> - 20210604-1
changelog:
  - Update to 20210604 source tree.
  - Bring the big-endian patches up-to-date with what has been submitted
    upstream by Al Stone <ahs3@redhat.com> (not accepted currently).


author: Al Stone <ahs3@redhat.com> - 20210604-2
changelog:
  - Running 'iasl -T all' would segfault when dumping the PHAT template;
    fixed AcpiDmDumpPhat() by removing unnecessary assignments from patch
  - Borrowed a patch from upstream to fix Unicode usage in WPBTs


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-19
changelog:
  - use gating and config file from rhel-8.5
  - remove check of periodically changing files
    Resolves: rhbz#1957656
  - config cleanup
    Resolves: rhbz#1957654


author: Zoltan Fridrich <zfridric@redhat.com> - 0.16-20
changelog:
  - fix configuration option with-dbhmactype
  - do not use sha1 and md5 by default
    Resolves: rhbz#1935457
  - fix important static analysis issues
    Resolves: rhbz#1938676


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Ilia Solovykh <ilia.solovykh@virtuozzo.com> - 34.25.0.29-1.30
changelog:
  - Fix for minclass of characters for the new password (digits, uppercase, lowercase, others)
    Resolves: #VSTOR-71934


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> - 34.25.0.29-1.31
changelog:
  - call kdumpctl reset-crashkernel to configure crashkernel= parameter after installation, see #VSTOR-73881


author: Nick Clifton <nickc@redhat.com> - 11.04-1
changelog:
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.12-1
changelog:
  - Annocheck: Add code to handle another glibc function built without LTO.
  - GCC Plugin: Do not run if other plugins are active.  (#2175768)
  - Annocheck: Add code to handle glibc functions built without LTO.
  - Libannocheck: Fix thinko in debugging code.
  - Annocheck: Fix LTO test.
  - Notes: Display notes held in separate dbeuginfo files.
  - Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)
  - LLVM & Clang Plugins: Build with branch protection on AArch64.  (#2164364)
  - Libannocheck: Fix bug causing infinite looping when running tests.
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)


author: Nick Clifton <nickc@redhat.com> - 12.07-1
changelog:
  - Annocheck: Fix lto testing.  (#2177140)
  - gcc-plugin: generate warnings about misspelt -D_FORTIFY_SOURCE and/or -D_GLIBCXX_ASSERTIONS options.
  - gcc-plugin: use a bigger buffer for constructing notes.
  - llvm-plugin: Fix detection of optimization level.  Improve test.
  - clang-plugin: Improve test.
  - configure: More improvements.
  - annocheck: Fix seg-fault when checking for glibc components in string format notes.
  - configure: Simplify.
  - gcc plugin: Add filenames to string notes.  Allow use of ANNOBIN environment variable.
  - llvm plugin: Add workaround for building with LLVM-16.
  - clang plugin: Fix for building with Clang-16.
  - gcc plugin: Keep ELF notes at protocol version 3.
  - Protocol Version 4: String format notes.
  - Annocheck: Update message for LTO tests.  (#2177140)


author: Nick Clifton <nickc@redhat.com> - 12.09-1
changelog:
  - Annocheck: Fix detection of missing plugin options.  (#2189492)
  - Fix generation of auto-generated files.
  - Fix covscan reported errors.


author: Nick Clifton <nickc@redhat.com> - 12.12-1
changelog:
  - Rebuild against LLVM-16.  (#2212739)
  - Annocheck: Check for string notes in separate debug info files.  (#2211694)
  - Annocheck: Add support for el10 and rhel-10 profiles.  (RHEL-526)
  - Annocheck: Suppress more tests for Rust binaries.


author: Nick Clifton <nickc@redhat.com> - 12.28-1
changelog:
  - Tests: Fix obsoleted syntax in plans/ci.fmf  (RHEL-12194)
  - Spec File: Use SPDX licensing.
  - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
  - Annobin: Add future test of these options.
  - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
  - Annobin: Add test for these warnings.
  - LLVM Plugin: Fix building with LLVM version 17.
  - GCC Plugin: Enable string note format by default.
  - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
  - Annocheck: Add test for FIPS compliant GO binaries.
  - Annocheck: Fix double free.  (#2226749)
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.
  - Annocheck: Remove dependency upon binutils-devel.
  - Annocheck: Add detection of known parts of libstdc++-nonshared.a that contain gaps.  (#2217864)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifron <nickc@redhat.com> - 12.31-1
changelog:
  - Update glibc detection heuristics for PPC64.  (RHEL-16453)
  - Fix another atexit test failure.  (#2247481)
  - Fix atexit test failure.
  - Notes: Add support for string format notes.


author: David Moreau-Simard <moi@dmsimard.com> - 5.1.0-1
changelog:
  - Update to latest upstream release
  - Refactor to take into account split from ansible-core after ansible 2.9, see: https://fedoraproject.org/wiki/Changes/Ansible5
  - Remove patches intended for Ansible 2.9
  - Removed packaging macros (soon included in ansible-packaging, see rhbz#2038591)
  - Removed provides/obsoletes on ansible-python3


author: Maxwell G <gotmax@e.email> - 6.3.0-1
changelog:
  - Update to 6.3.0.
  - Stop duplicating docs and licenses.
  - Don't remove tests in %prep that are now handled by setup.py.
  - Hardlink duplicated files and fix rpmlint errors


author: Maxwell G <gotmax@e.email> - 2.13.0-1
changelog:
  - Update to 2.13.0.
  - Re-enable tests that work with newer pytest
  - Patch out python3-mock
  - Manually build manpages to workaround upstream issue.
  - Remove unneeded BRs and switch to pyproject-rpm-macros.
  - Make ansible-base* Obsoletes/Provides compliant with Packaging Guidelines
  - Remove python3-jmespath dependency. json_query is part of community.general.
  - Correct licensing
  - Generate shell completions


author: Thomas Woerner <twoerner@redhat.com> - 1.8.4-1
changelog:
  - Update to version 1.8.4
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.8.4
    Resolves: RHBZ#2125592
  - 'ansible-doc' -l lists most idm modules as 'UNDOCUMENTED'
    Resolves: RHBZ#2125603
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2125616
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2069184


author: Thomas Woerner <twoerner@redhat.com> - 1.9.0-1
changelog:
  - Update to version 1.9.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.0
    Related: RHBZ#2125592
  - pwpolicy: Add support for password check and grace limit
    Resolves: RHBZ#2127911
  - ipaconfig: Do not allow enable_sid set to False
    Resolves: RHBZ#2127446
  - ipaclient: No kinit on controller for deployment using OTP
    Resolves: RHBZ#2127887
  - ipaclient: Configure DNS resolver
    Resolves: RHBZ#2127895
  - New netgroup management module
    Resolves: RHBZ#2127910
  - sudorule: Add support for 'hostmask' parameter
    Resolves: RHBZ#2127913
  - ipaconfig: Fix fail_json calls
    Resolves: RHBZ#2134375
  - ipaconfig: Do not require enable_sid for add_sids or netbios_name
    Resolves: RHBZ#2134505
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132731


author: Thomas Woerner <twoerner@redhat.com> - 1.9.1-1
changelog:
  - Update to version 1.9.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.1
    Resolves: RHBZ#2125592
  - pwpolicy: Allow clearing policy values
    Resolves: RHBZ#2150334
  - Use netgroup_find instead of netgroup_show to workaround IPA bug
    Resolves: RHBZ#2144725


author: Thomas Woerner <twoerner@redhat.com> - 1.9.2-1
changelog:
  - Update to version 1.9.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.9.2
    Resolves: RHBZ#2125592
  - ipabackup: Use ipabackup_item again in copy_backup_to_server
    Resolves: RHBZ#2165953


author: Thomas Woerner <twoerner@redhat.com> - 1.10.0-1
changelog:
  - Update to version 1.10.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.10.0
    Resolves: RHBZ#2170373
  - ipareplica/server: Enable removal from domain with undeployment
    Resolves: RHBZ#2127903
  - ipagroup: Allow multiple group management
    Resolves: RHBZ#2175763
  - ipaserver: Allow deployments with random serial numbers
    Resolves: RHBZ#2127905
  - ipagroup: Fix ensuring external group members (without trust-ad)
    Resolves: RHBZ#2183822
  - ipaclient: Add subid option to select the sssd profile with-subid
    Resolves: RHBZ#2175767
  - ipaclient: Fix allow_repair with removed krb5.conf and DNS lookup
    Resolves: RHBZ#2127883
  - ipaclient: Keep server affinity while deploying as long as possible
    Resolves: RHBZ#2175757


author: Thomas Woerner <twoerner@redhat.com> - 1.11.0-1
changelog:
  - Update to version 1.11.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.0
    Resolves: RHBZ#2170373
  - Multiple service management
    Resolves: RHBZ#2175771
  - New ipacert module
    Resolves: RHBZ#2127907
  - Fix maxsequence handling in ipapwpolicy module
    Resolves: RHBZ#2214294


author: Thomas Woerner <twoerner@redhat.com> - 1.11.1-1
changelog:
  - Update to version 1.11.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.11.1
    Resolves: RHBZ#2170373
  - ipaautomountmap: add support for indirect maps
    Resolves: RHBZ#2050176
  - ipauser: Add support to modify GECOS field
    Resolves: RHBZ#2169372
  - ipauser: Add support for parameter "street"
    Resolves: RHBZ#2215531
  - ipauser: Add support for SMB attributes
    Resolves: RHBZ#2215533
  - ipauser: Support for External IdP attributes
    Resolves: RHBZ#2215536
  - Fix handling of ipapwpolicy attributes usercheck and dictcheck
    Resolves: RHBZ#2215542
  - Update authtypes authind
    Resolves: RHBZ#2215538


author: Thomas Woerner <twoerner@redhat.com> - 1.12.0-1
changelog:
  - Update to version 1.12.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.0
    Resolves: RHEL-13744
  - New idoverridegroup management module.
    Resolves: RHEL-16937
  - New idoverrideuser management module.
    Resolves: RHEL-16942
  - New idview management module.
    Resolves: RHEL-16934
  - New idp management module.
    Resolves: RHEL-16939
  - idoverride{user,group}: Fix delete_continue with state absent
    Resolves: RHEL-16680


author: Thomas Woerner <twoerner@redhat.com> - 1.12.1-1
changelog:
  - Update to version 1.12.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.12.1
    Resolves: RHEL-13744
  - ipauser module lacks the "rename" field.
    Resolves: RHEL-4962
  - Add missing support for rename in ipagroup module
    Resolves: RHEL-13758
  - The IDP module does not support the modification of IDP options
    Resolves: RHEL-17954
  - The IDP module does not support resetting IDP options
    Resolves: RHEL-17957
  - ipauser is not idempotent when random is defined
    Resolves: RHEL-19123
  - ipasudorule: Allow setting groups for runasuser
    Resolves: RHEL-19130
  - Idempotency fixes
    Resolves: RHEL-19132
  - ipadnszone: Add support for per-zone privilege delegation
    Resolves: RHEL-19134
  - Handle data type or empty string in module_utils
    Resolves: RHEL-19136


author: Maxwell G <gotmax@e.email> - 1-7
changelog:
  - Implement %ansible_test_unit and add ansible-packaging-tests metapackage.
  - Require ansible-core at buildtime


author: Maxwell G <gotmax@e.email> - 1-8.1
changelog:
  - Refactor %ansible_collection_url, %ansible_collection_install,
    %ansible_test_unit.
  - Specfiles no longer need to define %collection_namespace or %collection_name
    for the macros to work.
  - Add new %ansible_collections_dir, %ansible_roles_dir, and
    %ansible_collection_filelist macros.
  - Prepare to deprecate %ansible_collection_files
  - Undefine %_package_note_file to stop that file from leaking into collection
    artifacts.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.0-6
changelog:
  - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
    empty - no content was marked for inclusion!)
  - Remove scope from dependencies in pom.xml files (fixes missing
    dependencies, dependencies marked with scope provided are ignored by
    the rpm dependency generator)
  - Drop some more commands: shell, exportreport, mbr (uses parts that
    are not packaged)
  - Resolves: rhbz#2033709


author: vzbuild <vzbuild@acronis.com> 1.19.2
changelog:
  - Fix build with older libastor_client2 (Yuri Per <yuri@acronis.com>)
   - [AR] Add mark_dirty() helper function #ARC-760 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Drop complete flag on stream truncate #ARC-760 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - Remove INTERNAL marker from archive_open_at() (Yuri Per <yuri@acronis.com>)
   - Return extended astor error information #VSTOR-86549 (Yuri Per
  <yuri@acronis.com>) (#VSTOR-86549)
   - Simplify and fix astor error handling (Yuri Per <yuri@acronis.com>)
   - [AR] Log snapshot flag on archive commit (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)


author: vzbuild <vzbuild@acronis.com> 1.19.3
changelog:
  - Set CI0 on existing archives #ARC-761 (Yuri Per <yuri@acronis.com>)
   - [Tests] Check CI0 is added to fully upgraded archive #ARC-761 (Andrey
  Kuleshov <Andrey.Kuleshov@acronis.com>)
   - Disable O_DIRECT on Linux cifs filesystem #ABR-380325 (Yuri Per
  <yuri@acronis.com>) (#ABR-380325)


author: vzbuild <vzbuild@acronis.com> 1.19.4
changelog:
  - Update pcs_io build (Yuri Per <yuri@acronis.com>)
   - Remove hci-aux-storage.repo, it is for master only (Yuri Per
  <yuri@acronis.com>)
   - Correct version and targets.list to 6.2.1, see #VSTOR-88754 (#VSTOR-88754)


author: vzbuild <vzbuild@acronis.com> 1.19.5
changelog:
  - [AR] Rename validate.c to validate_pages.c (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_item.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_slices.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_trees.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_objects.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_orphan.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_hashes.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add last_good.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_refs.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Add validate_segments.c (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Log prev_full_slice_id in slice description (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Minor: move vol_str[] closer to usage (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Fix typo (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [AR] Log segment validation options (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Log metadata validation options (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] archive_ctl: add FTRACE() macro (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] archive_ctl: log start and finish of validation procedures (Andrey
  Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [Tools] archive_ctl: validate slices on --validate-all command (Andrey
  Kuleshov <Andrey.Kuleshov@acronis.com>)


author: vzbuild <vzbuild@acronis.com> 1.19.6
changelog:
  - [AR] Wait for pages that are still writing to cache (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Add ar_pcache_read_async() #ARC-696 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Fix page cache deinitialization order #ARC-696 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Fix page index double insert #ARC-696 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Fix file_map index double-free #ARC-696 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] bvt.py: fix libostor_client download (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] bvt.py: fix astor_client compat so name (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] bvt.py: fix remote path separators (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Add pages from header read buffer into persistent cache (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] archive_ctl: add --pcache-add command (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - Merge orphan commit 3d76ca82bff onto feature/persistcache (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>) (#ABR-382195)
   - [AR] Fix persistent cache lookup error counter (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [Tools] archive_ctl: fix memory leak (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)


author: vzbuild <vzbuild@acronis.com> 1.19.8
changelog:
  - [AR] Fix used persistent cache files could be closed #ARC-785 (Andrey
  Kuleshov <Andrey.Kuleshov@acronis.com>)


author: vzbuild <vzbuild@acronis.com> 1.19.9
changelog:
  - [AR] Fix MADV_FREE value #ARC-799 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Check ar_pfile_t refc under lock #ARC-795 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Don't put to cache data extents completely overlapped by previous
  \#ARC-712 (Andrey Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [Tests] Add duplcate data extents test #ARC-712 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Track number of cached extents in data_map_view #ARC-712 (Andrey
  Kuleshov <Andrey.Kuleshov@acronis.com>)
   - [Tools] Print archive3 library version on -h and -v commands (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - [AR] Add archive_library_version() function (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.19.10
changelog:
  - Update submodules path, see #VSTOR-89749 (#VSTOR-89749)
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (#VSTOR-89749)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 14:3.3-4
changelog:
  - Update License field to SPDX
  - Additionally, the license is corrected; it should have been “BSD” rather
    than “BSD with advertising” under the old system.


author: Kalev Lember <klember@redhat.com> - 2.28.1-1
changelog:
  - Update to 2.28.1
  - Switch to meson build system
  - Update source URLs
  - Tighten -devel subpackage deps
  - Tighten soname globs


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3.13
changelog:
  - Sync with rhel 8.3 + cleanup
  - Add new subpackages - z{14,15}
  - Unlike in rhel8, the base subpackage still needs to be build for z12.
  - Covscan related bugfixes
  - Spec and git cleanup (remove unused patches/sources)


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-100
changelog:
  - New upstream release, 3.0.7
    Resolves: rhbz#2019929 - capability=unknown-capability(39) in audit messages


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-101
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054432 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-102
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2062824 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-103
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2071725 - Default systemd service config blocks audit watch rules in some directories [rhel-9.1.0]


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-2
changelog:
  - Parse auto_reset_crashkernel in kdump
    resolves: rhbz#2042772
  - Add new directives and options for chrony


author: Richard W.M. Jones <rjones@redhat.com> - 1.13.0-4
changelog:
  - Fix parsing of /usr/lib/tmpfiles.d/provision.conf
  - Fix parsing of /etc/kernel/cmdline
    resolves: rhbz#2155136, rhbz#2159282


author: Pavel Březina <pbrezina@redhat.com> - 1.2.5-1
changelog:
  - Rebase to 1.2.5 (RHBZ #2080239)
  - backup-restore now works correctly (RHBZ #2070541)
  - add with-subid to sssd profile (RHBZ #2075192)
  - add with-gssapi to sssd profile (RHBZ #2077893)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-1
changelog:
  - Rebase to 1.2.6 (RHBZ #2142805)
  - update translations (RHBZ #2139642)
  - Change password hashing algorithm from yescrypt back to sha512 (RHBZ #2151145)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.6-2
changelog:
  - Fix Japanese translations (RHBZ #2153364)
  - Update translations (RHBZ #2189498)
  - Do not prompt for password twice when changing password of local user (RHBZ #2228098)


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-38
changelog:
  - bz2170287 - Autofs reports can't connect to sssd, retry for 10
    seconds when real problem is empty LDAP object
    - improve handling of ENOENT in sss setautomntent().
    - dont immediately call function when waiting.
  - Resolves: rhbz#2170287


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-50
changelog:
  - bz2179753 - deadlock while reading amd maps
    - fix return status of mount_autofs().
    - don't close lookup at umount.
    - fix deadlock in lookups.
    - dont delay expire.
    - make amd mapent search function name clear.
    - rename statemachine() to signal_handler().
    - make signal handling consistent.
    - fix incorrect print format specifiers in get_pkt().
    - eliminate last remaining state_pipe usage.
    - add function master_find_mapent_by_devid().
    - use device id to locate autofs_point when setting log priotity.
    - add command pipe handling functions.
    - switch to application wide command pipe.
    - get rid of unused field submnt_count.
    - fix mount tree startup reconnect.
    - fix unterminated read in handle_cmd_pipe_fifo_message() (Coverity).
  - Resolves: rhbz#2179753


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-51
changelog:
  - bz2210161 - autofs fails to start with combination of +auto.master and
    local direct map lookups after upgrading to 5.1.4-93.el8
    - fix memory leak in sasl_do_kinit() (Coverity).
    - fix fix mount tree startup reconnect.
  - Resolves: rhbz#2210161


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-52
changelog:
  - bz2210899 - amd map format netgoup selector function not working
    - fix use_ignore_mount_option description.
    - include addtional log info for mounts.
    - fix amd selector function matching.
    - get rid entry thid field.
    - continue expire immediately after submount check.
    - add buffer length checks to autofs mount_mount().
    - eliminate realpath from mount of submount.
    - eliminate root param from autofs mount and umount.
    - remove redundant fstat from do_mount_direct().
    - get rid of strlen call in handle_packet_missing_direct().
    - remove redundant stat call in lookup_ghost().
    - set mapent dev and ino before adding to index.
    - change to use printf functions in amd parser.
    - dont call umount_subtree_mounts() on parent at umount.
    - dont take parent source lock at mount shutdown.
    - eliminate buffer usage from handle_mounts_cleanup().
    - fix possible use after free in handle_mounts_exit().
    - make submount cleanup the same as top level mounts.
    - add soucre parameter to module functions.
    - add ioctlfd open helper.
    - make open files limit configurable.
  - Resolves: rhbz#2210899


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-53
changelog:
  - bz2215661 - The sss lookup modules handles error return incorrectly in
    some cases
    - fix some sss error return cases.
  - Resolves: rhbz#2215661


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-54
changelog:
  - bz2223236 - When looking up included maps, sometimes autofs does not
    consult all the included files in order
    - fix incorrect matching of cached wildcard key.
  - Resolves: rhbz#2223236


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-55
changelog:
  - bz2223252 - filesystems mount and expire immediately
    - fix expire retry looping.
    - correct day in changelog entry for revision 53.
  - Resolves: rhbz#2223252


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-56
changelog:
  - RHEL-13083 - autofs attempts to mount nonexistant ".hidden" filesystems
    - allow -null map in indirect maps.
  - Resolves: RHEL-13083


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-57
changelog:
  - RHEL-13084 - multi mount detection fails for share with blank+dash causing
    SEGV crash
    - fix multi-mount check.
  - Resolves: RHEL-13084


author: Ian Kent <ikent@redhat.com> - 1:5.1.7-58
changelog:
  - RHEL-19731 - SIGSEGV using hierarchical map entries on reload with
    autofs-5.1.4-109
    - fix get parent multi-mount check in try_remount().
    - fix deadlock in remount.
  - Resolves: RHEL-19731


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-61
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-65
changelog:
  - Resolves: rhbz#2121828 Fix the gating tests by using only local test
    Upstream testsuite will not work as this package code is very old


author: Pavel Cahyna <pcahyna@redhat.com> - 11.0.1-5
changelog:
  - Make nagios-plugin build conditional and disabled on RHEL to avoid
    generating this subpackage that has missing dependencies
  - Fix flags for annobin in Qt tools (bat & tray-monitor) build
  - Add a forgotten RHEL 8 patch to use openssl crypto (random numbers, hmac,
    hashing functions)
    Resolves: rhbz#1935458


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1:2.8-4
changelog:
  - Use C.UTF-8 locale
    See https://fedoraproject.org/wiki/Changes/Remove_glibc-langpacks-all_from_buildroot


author: Jerome Marchand <jmarchan@redhat.com> - 0.26.0-3
changelog:
  - Rebuild with LLVM 16 (rhbz#2050112)
  - Fix compactsnoop (rhbz#2042236)
  - Fix killsnoop documentation (rhbz#2075500)
  - Fix funcslower (rhbz#2075415)
  - Fix deadlock memory usage issue (rhbz#2050112)
  - Fix nfsslower (rhbz#2180934)
  - Use upstream fix for nfsslower unititialized struct issue


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-1
changelog:
  - Rebase to v0.28.0 (RHEL-9976)
  - Rebuild with LLVM 17 (RHEL-10591)
  - Fix bpf-biosnoop out of bound access (RHEL-8664)
  - Fix kvmexit missing VM exit reasons and statistics (RHEL-8702)
  - Fix multi-word array type handling (RHEL-8674)
  - Fix tcpstates -Y (RHEL-8490)
  - Fix bio tools (RHEL-8553)


author: Jerome Marchand <jmarchan@redhat.com> - 0.28.0-5
changelog:
  - Fix libbpf bio tools (RHEL-19368)
  - Add S390x support to libbpf-tools (RHEL-16325)
  - Power enhancements(RHEL-11477)


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-16
changelog:
  - Prevent increased CPU load on large DNS messages (CVE-2023-4408)
  - Prevent assertion failure when nxdomain-redirect is used with
   RFC 1918 reverse zones (CVE-2023-5517)
  - Prevent assertion failure if DNS64 and serve-stale is used (CVE-2023-5679)
  - Specific recursive query patterns may lead to an out-of-memory
    condition (CVE-2023-6516)
  - Prevent increased CPU consumption in DNSSEC validator (CVE-2023-50387
    CVE-2023-50868)


author: Yara Ahmad <yahmad@redhat.com> - 2.35.2-40
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164701)


author: Peng Wu <pwu@redhat.com> - 0.3-33
changelog:
  - Provide OpenType Bitmap fonts
  - Use bitmapfonts2otb.py to combine bitmap fonts
  - Add bitmap-*-opentype-fonts sub packages


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-8
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#2012121
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1971516


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-12
changelog:
  - Fix log message for the LVM devices filter
    Resolves: rhbz#2034277
  - Exclude unusable disks from PartitionFactory
    Resolves: rhbz#2017432


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-13
changelog:
  - Fix getting PV info in LVMPhysicalVolume from the cache
    Resolves: rhbz#2079221
  - Do not crash when changing disklabel on disks with active devices
    Resolves: rhbz#2078803
  - ActionDestroyDevice should not obsolete ActionRemoveMember
    Resolves: rhbz#2076956
  - Correctly set vg_name after adding/removing a PV from a VG
    Resolves: rhbz#2081278
  - Add support for creating LVM cache pools
    Resolves: rhbz#2055200
  - Use LVM PV format current_size in LVMVolumeGroupDevice._remove
    Related: rhbz#2081278


author: Jan Pokorny <japokorn@redhat.com> - 3.4.0-15
changelog:
  - Add a very simple NVMe module
    Resolves: rhbz#2073008
  - Add support for NPIV-enabled zFCP devices
    Resolves: rhbz#1937030
  - Fix removing zFCP SCSI devices
    Related: rhbz#1937030
  - tests: Mark "fake" disks in test_get_related_disks as non-existing
    Resolves: rhbz#2062690


author: Hans de Goede <hdegoede@redhat.com> - 5.56-3
changelog:
  - Drop obsolete udev rule + systemd service to call btattach on BT-HCIs
    connected via UART from userspace, this is all handled in the kernel now
  - Add the btmgmt util to the packaged files


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-27
changelog:
  - Backport upstream PR 120 to fix segfault on invalid unit types
    Resolves: rhbz#2224578
  - Add vendor ID for NVIDIA BMCs
    Resolves: rhbz#2218358
  - Update /var/run to /run in ipmievd.service that systemd warns about
    Resolves: rhbz#2100475
  - Add upstream ipmievd patch to check received msg id against expectation
    Fixes problem where SEL response is not recognized correctly
    when SEL request times out
    Resolves: rhbz#2224569


author: Adrian Reber <adrian@lisas.de> - 1.2.5-1
changelog:
  - Updated to 1.2.5
  - No longer necessary to re-package sources: All problematic files have
    been re-licensed
  - All 19 patches are part of the 1.2.5 release and have been removed


author: Jonathan Wakely <jwakely@redhat.com> - 1.75.0-7
changelog:
  - Build with zstd support (#2091041)
  - Fix rpminspect CI warnings about missing versioned dependencies


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.29.1.el9_4]
changelog:
  - net: Avoid address overwrite in kernel_connect (Davide Caratti) [RHEL-45728 RHEL-30875]
  - net: replace calls to sock->ops->connect() with kernel_connect() (Davide Caratti) [RHEL-45728 RHEL-33410]
  - i40e: fix vf may be used uninitialized in this function warning (Kamal Heib) [RHEL-41638 RHEL-39704] {CVE-2024-36020}
  - cifs: translate network errors on send to -ECONNABORTED (Jay Shin) [RHEL-47047 RHEL-31245]
  - wifi: brcmfmac: pcie: handle randbuf allocation failure (Jose Ignacio Tornos Martinez) [RHEL-44132] {CVE-2024-38575}
  - wifi: iwlwifi: mvm: guard against invalid STA ID on removal (Jose Ignacio Tornos Martinez) [RHEL-43208 RHEL-39803] {CVE-2024-36921}
  - wifi: mac80211: check/clear fast rx for non-4addr sta VLAN changes (Jose Ignacio Tornos Martinez) [RHEL-42906 RHEL-36809] {CVE-2024-35789}
  - wifi: iwlwifi: mvm: don't set the MFP flag for the GTK (Jose Ignacio Tornos Martinez) [RHEL-42886 RHEL-36900] {CVE-2024-27434}
  - wifi: rtl8xxxu: add cancel_work_sync() for c2hcmd_work (Jose Ignacio Tornos Martinez) [RHEL-42860 RHEL-35142] {CVE-2024-27052}
  - wifi: mt76: mt7925e: fix use-after-free in free_irq() (Jose Ignacio Tornos Martinez) [RHEL-42856 RHEL-35148] {CVE-2024-27049}
  - wifi: ath9k: delay all of ath9k_wmi_event_tasklet() until init is complete (Jose Ignacio Tornos Martinez) [RHEL-42743 RHEL-34187] {CVE-2024-26897}
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Jose Ignacio Tornos Martinez) [RHEL-42383 RHEL-35199] {CVE-2023-52651}
  - net: core: reject skb_copy(_expand) for fraglist GSO skbs (Xin Long) [RHEL-41402 RHEL-39781] {CVE-2024-36929}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.30.1.el9_4]
changelog:
  - dmaengine: idxd: add a write() method for applications to submit work (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - dmaengine: idxd: add a new security check to deal with a hardware erratum (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - VFIO: Add the SPR_DSA and SPR_IAX devices to the denylist (Jerry Snitselaar) [RHEL-35840] {CVE-2024-21823}
  - tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer (Mark Salter) [RHEL-49538 RHEL-39308]
  - virtio: delete vq in vp_find_vqs_msix() when request_irq() fails (Jon Maloy) [RHEL-44467] {CVE-2024-37353}
  - phy: ti: phy-omap-usb2: Fix NULL pointer dereference for SRP (Izabela Bakollari) [RHEL-36271 RHEL-26682] {CVE-2024-26600}
  - eeprom: at24: fix memory corruption race condition (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Probe for DDR3 thermal sensor in the SPD case (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Use dev_err_probe for nvmem register failure (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: Add support for 24c1025 EEPROM (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - eeprom: at24: remove struct at24_client (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - at24: Support probing while in non-zero ACPI D state (CKI Backport Bot) [RHEL-42970] {CVE-2024-35848}
  - tcp: Fix shift-out-of-bounds in dctcp_update_alpha(). (CKI Backport Bot) [RHEL-44439] {CVE-2024-37356}
  - cxl/region: Fix cxlr_pmem leaks (cki-backport-bot) [RHEL-44486] {CVE-2024-38391}
  - tls: fix missing memory barrier in tls_init (cki-backport-bot) [RHEL-44480] {CVE-2024-36489}
  - igc: avoid returning frame twice in XDP_REDIRECT (Corinna Vinschen) [RHEL-42714 RHEL-33266] {CVE-2024-26853}
  - ipvlan: Dont Use skb->sk in ipvlan_process_v{4,6}_outbound (Hangbin Liu) [RHEL-44404 RHEL-44402] {CVE-2024-33621}
  - ipvlan: add ipvlan_route_v6_outbound() helper (Davide Caratti) [RHEL-44404 RHEL-32205]
  - ipvlan: properly track tx_errors (Davide Caratti) [RHEL-44404 RHEL-32205]
  - wifi: nl80211: don't free NULL coalescing rule (Jose Ignacio Tornos Martinez) [RHEL-41698 RHEL-39754] {CVE-2024-36941}
  - wifi: iwlwifi: dbg-tlv: ensure NUL termination (Jose Ignacio Tornos Martinez) [RHEL-41658 RHEL-37028] {CVE-2024-35845}
  - mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work (Ivan Vecera) [RHEL-41556 RHEL-37018] {CVE-2024-35852}
  - net: openvswitch: fix overwriting ct original tuple for ICMPv6 (cki-backport-bot) [RHEL-44215] {CVE-2024-38558}
  - wifi: iwlwifi: read txq->read_ptr under lock (Jose Ignacio Tornos Martinez) [RHEL-41520 RHEL-39799] {CVE-2024-36922}
  - wifi: cfg80211: check A-MSDU format more carefully (Jose Ignacio Tornos Martinez) [RHEL-38754 RHEL-37345] {CVE-2024-35937}
  - ice: fix memory corruption bug with suspend and rebuild (Petr Oros) [RHEL-49858 RHEL-17486] {CVE-2024-35911}
  - ipv6: prevent possible NULL deref in fib6_nh_init() (Hangbin Liu) [RHEL-48182 RHEL-45826] {CVE-2024-40961}
  - netns: Make get_net_ns() handle zero refcount net (Paolo Abeni) [RHEL-48117 RHEL-46610] {CVE-2024-40958}
  - net: do not leave a dangling sk pointer, when socket creation fails (Paolo Abeni) [RHEL-48072 RHEL-46610] {CVE-2024-40954}
  - net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (CKI Backport Bot) [RHEL-47902] {CVE-2024-40928}
  - net: netlink: af_netlink: Prevent empty skb by adding a check on len. (Ivan Vecera) [RHEL-43619 RHEL-30344] {CVE-2021-47606}
  - bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (CKI Backport Bot) [RHEL-46921] {CVE-2024-39487}
  - nfs: fix panic when nfs4_ff_layout_prepare_ds() fails (Benjamin Coddington) [RHEL-42732 RHEL-34875] {CVE-2024-26868}
  - efi: fix panic in kdump kernel (Steve Best) [RHEL-42920 RHEL-36998] {CVE-2024-35800}
  - ipv6: fix potential "struct net" leak in inet6_rtm_getaddr() (Hangbin Liu) [RHEL-41735 RHEL-31050] {CVE-2024-27417}
  - netfilter: nf_tables: do not compare internal table flags on updates (Florian Westphal) [RHEL-41682 RHEL-33985] {CVE-2024-27065}
  - ipv6: Fix potential uninit-value access in __ip6_make_skb() (Antoine Tenart) [RHEL-41466 RHEL-39786] {CVE-2024-36903}
  - netfilter: nf_tables: honor table dormant flag from netdev release event path (Florian Westphal) [RHEL-40056 RHEL-33985] {CVE-2024-36005}
  - cifs: fix underflow in parse_server_interfaces() (Paulo Alcantara) [RHEL-34636 RHEL-31245] {CVE-2024-26828}
  - drm/i915/audio: Fix audio time stamp programming for DP (CKI Backport Bot) [RHEL-45843]
  - platform/x86: wmi: Fix opening of char device (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - platform/x86: wmi: remove unnecessary initializations (David Arcari) [RHEL-42548 RHEL-38260] {CVE-2023-52864}
  - rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (CKI Backport Bot) [RHEL-43170] {CVE-2024-36017}
  - netfilter: nft_chain_filter: handle NETDEV_UNREGISTER for inet/ingress basechain (Florian Westphal) [RHEL-40062 RHEL-33985] {CVE-2024-26808}
  - ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr (Jiri Benc) [RHEL-39017 RHEL-32372] {CVE-2024-35969}
  - netfilter: nf_tables: flush pending destroy work before exit_net release (Florian Westphal) [RHEL-38765 RHEL-33985] {CVE-2024-35899}
  - vt: fix unicode buffer corruption when deleting characters (Andrew Halaney) [RHEL-42947 RHEL-24205] {CVE-2024-35823}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.31.1.el9_4]
changelog:
  - net: fix __dst_negative_advice() race (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}
  - net: annotate data-races around sk->sk_dst_pending_confirm (CKI Backport Bot) [RHEL-46798] {CVE-2024-36971}


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.32.1.el9_4]
changelog:
  - REDHAT: Makefile, dont reset dist-git-tmp if set (Lucas Zampieri)
  - net/mlx5e: Fix netif state handling (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - net/mlx5e: Add wrapping for auxiliary_driver ops and remove unused args (Benjamin Poirier) [RHEL-43872 RHEL-43870] {CVE-2024-38608}
  - tun: add missing verification for short frame (Patrick Talbert) [RHEL-50202 RHEL-50203] {CVE-2024-41091}
  - tap: add missing verification for short frame (Patrick Talbert) [RHEL-50264 RHEL-50265] {CVE-2024-41090}
  - vfio/pci: Lock external INTx masking ops (Alex Williamson) [RHEL-43421 RHEL-30023] {CVE-2024-26810}
  - net: bridge: xmit: make sure we have at least eth header len bytes (cki-backport-bot) [RHEL-44299] {CVE-2024-38538}
  - KVM: arm64: Ensure target address is granule-aligned for range TLBI (Sebastian Ott) [RHEL-52248 RHEL-31215]
  - RDMA/rxe: Fix seg fault in rxe_comp_queue_pkt (cki-backport-bot) [RHEL-44250] {CVE-2024-38544}
  - NFSv4: Fix memory leak in nfs4_set_security_label (CKI Backport Bot) [RHEL-52082] {CVE-2024-41076}
  - md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING (Nigel Croxon) [RHEL-46421 RHEL-35393] {CVE-2024-39476}
  - KVM: s390: fix LPSWEY handling (CKI Backport Bot) [RHEL-50074]
  - cxl/port: Fix delete_endpoint() vs parent unregistration race (John W. Linville) [RHEL-39290 RHEL-23582] {CVE-2023-52771}
  - net: ice: Fix potential NULL pointer dereference in ice_bridge_setlink() (Petr Oros) [RHEL-49862 RHEL-17486] {CVE-2024-26855}
  - ice: fix LAG and VF lock dependency in ice_reset_vf() (Petr Oros) [RHEL-49820 RHEL-17486] {CVE-2024-36003}
  - net: wwan: iosm: Fix tainted pointer delete is case of region creation fail (Jose Ignacio Tornos Martinez) [RHEL-47992 RHEL-9429] {CVE-2024-40939}
  - wifi: cfg80211: Lock wiphy in cfg80211_get_station (CKI Backport Bot) [RHEL-47770] {CVE-2024-40911}
  - wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() (CKI Backport Bot) [RHEL-47788] {CVE-2024-40912}
  - wifi: iwlwifi: mvm: check n_ssids before accessing the ssids (CKI Backport Bot) [RHEL-47920] {CVE-2024-40929}
  - wifi: iwlwifi: mvm: don't read past the mfuart notifcation (CKI Backport Bot) [RHEL-48028] {CVE-2024-40941}
  - seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors (Hangbin Liu) [RHEL-48098 RHEL-45826] {CVE-2024-40957}
  - ipv6: fix possible race in __fib6_drop_pcpu_from() (Hangbin Liu) [RHEL-47572 RHEL-45826] {CVE-2024-40905}
  - redhat/configs: Enable CONFIG_DRM_MGAG200_DISABLE_WRITECOMBINE (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Add an option to disable Write-Combine (Jocelyn Falempe) [RHEL-39581 RHEL-28760]
  - drm/mgag200: Fix caching setup for remapped video memory (Scott Weaver) [RHEL-39581 RHEL-24102]
  - Revert "drm/mgag200: Flush the cache to improve latency" (Scott Weaver) [RHEL-39581 RHEL-28760]
  - net: psample: fix flag being set in wrong skb (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: store sampling probability in cb. (Adrian Moreno) [RHEL-47275]
  - net: openvswitch: add psample action (Adrian Moreno) [RHEL-47275]
  - net: psample: allow using rate as probability (Adrian Moreno) [RHEL-47275]
  - net: psample: skip packet copy if no listeners (Adrian Moreno) [RHEL-47275]
  - net: psample: add user cookie (Adrian Moreno) [RHEL-47275]
  - i40e: fix: remove needless retries of NVM update (CKI Backport Bot) [RHEL-48169 RHEL-36692]
  - ice: Reject pin requests with unsupported flags (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Don't process extts if PTP is disabled (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Fix improper extts handling (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: stop destroying and reinitalizing Tx tracker during reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: factor out ice_ptp_rebuild_owner() (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename ice_ptp_tx_cfg_intr (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: don't check has_ready_bitmap in E810 functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: rename verify_cached to has_ready_bitmap (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: pass reset type to PTP reset functions (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: introduce PTP state machine (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: make RX HW timestamp reading code more reusable (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Rename E822 to E82X (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: periodically kick Tx timestamp interrupt (Petr Oros) [RHEL-50388 RHEL-17486]
  - ice: Re-enable timestamping correctly after reset (Petr Oros) [RHEL-50388 RHEL-17486]
  - ptp: introduce helpers to adjust by scaled parts per million (Petr Oros) [RHEL-50388 RHEL-17486]
  - tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc (Andrew Halaney) [RHEL-42566 RHEL-24205] {CVE-2023-52880}
  - netfilter: complete validation of user input (Phil Sutter) [RHEL-47384 RHEL-37212] {CVE-2024-35962}
  - netfilter: validate user input for expected length (Phil Sutter) [RHEL-41668 RHEL-37212] {CVE-2024-35896}
  - scsi: qla2xxx: Fix off by one in qla_edif_app_getstats() (Ewan D. Milne) [RHEL-40051 RHEL-39719] {CVE-2024-36025}
  - x86/xen: Add some null pointer checking to smp.c (Vitaly Kuznetsov) [RHEL-37615 RHEL-33260] {CVE-2024-26908}
  - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (Prarit Bhargava) [RHEL-37615 RHEL-25415]


author: Scott Weaver <scweaver@redhat.com> [5.14.0-427.33.1.el9_4]
changelog:
  - bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq (Kamal Heib) [RHEL-44287] {CVE-2024-38540}
  - netfilter: flowtable: validate pppoe header (Florian Westphal) [RHEL-44430 RHEL-33469] {CVE-2024-27016}
  - crypto: bcm - Fix pointer arithmetic (cki-backport-bot) [RHEL-44116] {CVE-2024-38579}
  - udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). (CKI Backport Bot) [RHEL-51035 RHEL-51033] {CVE-2024-41041}
  - netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (Florian Westphal) [RHEL-42832 RHEL-33985] {CVE-2024-27019}
  - netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: NULL pointer dereference in nf_tables_updobj() (Florian Westphal) [RHEL-42832 RHEL-33985]
  - netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (Florian Westphal) [RHEL-41802 RHEL-33985] {CVE-2024-26925}
  - netfilter: nf_tables: discard table flag update with pending basechain deletion (Florian Westphal) [RHEL-40231 RHEL-33985] {CVE-2024-35897}
  - netfilter: nf_tables: reject table flag and netdev basechain updates (Florian Westphal) [RHEL-40231 RHEL-33985]
  - netfilter: bridge: replace physindev with physinif in nf_bridge_info (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: propagate net to nf_bridge_get_physindev (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nfnetlink_log: use proper helper for fetching physinif (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nf_queue: remove excess nf_bridge variable (Florian Westphal) [RHEL-42966 RHEL-37040] {CVE-2024-35839}
  - netfilter: nft_limit: reject configurations that cause integer overflow (Florian Westphal) [RHEL-40065 RHEL-33985] {CVE-2024-26668}
  - scsi: qedi: Fix crash while reading debugfs attribute (CKI Backport Bot) [RHEL-48339] {CVE-2024-40978}
  - mm/huge_memory: don't unpoison huge_zero_folio (Aristeu Rozanski) [RHEL-47804] {CVE-2024-40914}
  - tipc: force a dst refcount before doing decryption (Xin Long) [RHEL-48375 RHEL-6118] {CVE-2024-40983}
  - netfilter: nft_set_rbtree: skip end interval element from gc (Florian Westphal) [RHEL-41265] {CVE-2024-26581}
  - nvmet: fix a possible leak when destroy a ctrl during qp establishment (CKI Backport Bot) [RHEL-52021 RHEL-52019 RHEL-52020] {CVE-2024-42152}
  - net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (CKI Backport Bot) [RHEL-51756] {CVE-2024-42110}
  - netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get() (Florian Westphal) [RHEL-40265 RHEL-33985] {CVE-2024-35898}
  - netfilter: br_netfilter: remove WARN traps (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: br_netfilter: skip conntrack input hook for promisc packets (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: bridge: confirm multicast packets before passing them up the stack (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_conntrack_bridge: initialize err to 0 (CKI Backport Bot) [RHEL-42882] {CVE-2024-27415}
  - netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (Florian Westphal) [RHEL-42842 RHEL-33985] {CVE-2024-27020}


author: Konstantin Khorenko <khorenko@virtuozzo.com> [5.14.0-427.33.1.vz9.72.1]
changelog:
  - fs/fuse kio: fixed pcs_rpc refcnt leak and pcs_msg leak (Liu Kui) [VSTOR-91111]
  - dm-qcow2: relax extended l2 compatibility check (Alexander Atanasov) [PSBM-157790]
  - fs/fuse kio: skip looking into response to request from userspace (Liu Kui)
  - fs/fuse kio: fixed krpc abort, implement proper request msg cancellation (Liu Kui)
  - overlayfs: drop a redundant check in ovl_get_lowerstack() (Konstantin Khorenko) [PSBM-157244]
  - overlayfs: fix lowerpaths handling in mnt_id paths options (Konstantin Khorenko) [PSBM-157244]
  - overlayfs: fix lowerpaths handling in dynamic path resolving (Konstantin Khorenko) [PSBM-157244]
  - dm-qcow2: Drop debug warnings on uninitiallized bi_io_vec detections (Konstantin Khorenko) [PSBM-157238]
  - fs: fuse: kio: forgotten rpc xid initialization (Alexey Kuznetsov) [VSTOR-89270]
  - fs: fuse: double completion when lease is lost (Alexey Kuznetsov) [VSTOR-89251]
  - configs: Make cgroup v2 the default hierarcy (Konstantin Khorenko) [PSBM-157370]
  - Revert "configs/cgroup: Make cgroup v1 the default hierarcy" (Konstantin Khorenko) [PSBM-157370]
  - drivers/vhost: Fix uninitialized variable in vhost_work_queue() (Alexander Ivanov) [PSBM-157296]
  - fs/fuse kio: integrate pcs_krpc to kio module (Liu Kui) [VSTOR-82613 VSTOR-82613]
  - fs/fuse kio: adapt pcs_rpc to support pcs_krpc. (Liu Kui) [VSTOR-82613 VSTOR-82613]
  - fs/fuse kio: implement pcs_krpc - export kernel RPC to userspace (Liu Kui) [VSTOR-82613 VSTOR-82613]
  - fs/fuse kio: implement memory region to support zero-copy between userspace and kernel. (Liu Kui) [VSTOR-82613 VSTOR-82613]
  - mm/kmemleak: Fix use of uninitialized pointer in percpu object creation (Pavel Tikhomirov) [PSBM-156004]
  - dm-qcow2: use bio inline vecs in case bi_io_vec is not initiallized (Alexander Atanasov) [PSBM-157238]
  - dm-qcow2: add zstd decompression (Andrey Zhadchenko) [PSBM-157138]
  - ve: fix task_ve use-after-free from reading /proc/pid/stat (Pavel Tikhomirov) [PSBM-157285]
  - irq/proc: add cond_resched to show_interrupts (Pavel Tikhomirov) [VSTOR-88194]
  - ms/fs: fix sysctls.c built (Kefeng Wang) [PSBM-156472]
  - rh/x86: hide unused field in thread_info (fix for drgn) (Alexey Kuznetsov)
  - dm-ploop: do not (endless) resubmit zero length partial IO (Alexander Atanasov) [PSBM-156506]
  - dm: ploop: arithemtic overflow in ploop (Alexey Kuznetsov)
  - ms/neighbour: fix various data-races (Eric Dumazet) [PSBM-153199 VSTOR-81287]
  - configs: Disable automatic NUMA balancing by default in configs dir (Konstantin Khorenko) [PSBM-49131 PSBM-126727 PSBM-156157 PSBM-156155]
  - configs: Disable automatic NUMA balancing by default (Konstantin Khorenko) [PSBM-49131 PSBM-126727 PSBM-156157 PSBM-156155]
  - fs/fuse: pcs: improve workqueue scheduling (Alexey Kuznetsov) [VSTOR-83607 VSTOR-83607]
  - fs/fuse: pcs: force use of crc32c-intel (Alexey Kuznetsov) [VSTOR-83607]
  - fs/fuse: pcs: badly aligned requests were not handled correctly (Alexey Kuznetsov) [VSTOR-83928]
  - mm/memcontrol: Add page cache limit to cgroup-v2 (Pavel Tikhomirov) [PSBM-154207]
  - mm/memcontrol: make memory.oom_guarantee file also available in cgroup-v2 (Pavel Tikhomirov) [PSBM-154224]
  - memcg: fix oom_guarantee overdraft calculation in cgroup-v2 (Pavel Tikhomirov) [PSBM-154224]
  - memcg: fix oom_guarantee to be considered in global oom and in berserker (Pavel Tikhomirov)
  - sched/stat: make cpu.proc.stat file also available in cgroup-v2 (Pavel Tikhomirov) [PSBM-154206]
  - cpuacct: implicitly enable cpuacct controller in cgroup-v2 (Pavel Tikhomirov) [PSBM-154206]
  - ms/nvme-pci: add BOGUS_NID for Intel 0a54 device (Keith Busch)
  - fs/fuse/pcs: remove useless fuse call (Alexey Kuznetsov) [VSTOR-79527]
  - fs/ext4: relax inappropriate memory alignment check (Alexey Kuznetsov) [VSTOR-79527]
  - mm: migrate page private for high-order folios in swap cache correctly (Pavel Tikhomirov) [PSBM-153264]
  - ms/mm: migrate high-order folios in swap cache correctly (Charan Teja Kalla) [PSBM-153264]
  - ms/mm/shmem: fix race in shmem_undo_range w/THP (David Stevens) [PSBM-154569]
  - drivers/vhost/blk: increase max queues to 32 (Andrey Zhadchenko) [PSBM-152241]
  - drm: Disable modeset by default (Konstantin Khorenko) [VSTOR-81614]
  - fs/fuse: hashed write buckets (Alexey Kuznetsov) [VSTOR-79527]
  - ms/netfilter: nf_tables: Modify nla_memdup's flag to GFP_KERNEL_ACCOUNT (Chen Aotian) [PSBM-153598]
  - drivers/vhost: fix missing rcu_read_lock in vhost_work_queue (Pavel Tikhomirov) [PSBM-153264]
  - ms/net: neigh: decrement the family specific qlen (Thomas Zeitlhofer) [PSBM-153018 OVZ-7410]
  - fs/fuse: enhanced splice support (Alexey Kuznetsov) [VSTOR-79527 VSTOR-79527]
  - net: zerocopy over unix sockets (Alexey Kuznetsov) [VSTOR-79527 VSTOR-84977 VSTOR-79527]
  - fs/fuse: fuse queue routing (Alexey Kuznetsov) [VSTOR-79527]
  - configs: Enable in-kernel accelerator for virtio-blk guests in configs dir (Konstantin Khorenko) [PSBM-139414 PSBM-152375]
  - configs: Enable in-kernel accelerator for virtio-blk guests (Konstantin Khorenko) [PSBM-139414 PSBM-152375]
  - drivers/vhost: vhost-blk accelerator for virtio-blk guests (Andrey Zhadchenko) [PSBM-139414 PSBM-142058 PSBM-142852 PSBM-139414 PSBM-152375]
  - drivers/vhost: add ioctl to increase the number of workers (Andrey Zhadchenko) [PSBM-139414 PSBM-142058 PSBM-142852 PSBM-139414 PSBM-152375]
  - ms/vhost: replace single worker pointer with xarray (Mike Christie) [PSBM-152375 PSBM-139414]
  - ms/vhost: convert poll work to be vq based (Mike Christie) [PSBM-152375 PSBM-139414]
  - drivers/vhost: attach cgrous to specififc worker (Andrey Zhadchenko) [PSBM-152375 PSBM-139414]
  - ms/vhost: take worker or vq for flushing (Mike Christie) [PSBM-152375 PSBM-139414]
  - ms/vhost: take worker or vq instead of dev for queueing (Mike Christie) [PSBM-152375 PSBM-139414]
  - ms/vhost, vhost_net: add helper to check if vq has work (Mike Christie) [PSBM-152375 PSBM-139414]
  - ms/vhost: add vhost_worker pointer to vhost_virtqueue (Mike Christie) [PSBM-152375 PSBM-139414]
  - ms/vhost: dynamically allocate vhost_worker (Mike Christie) [PSBM-152375 PSBM-139414]
  - FD: vhost-blk: in-kernel accelerator for virtio-blk guests (Konstantin Khorenko) [PSBM-139414]
  - fs/fuse kio: destroy rdma_cm_id immediately in case cm fails during connection establishment (Liu Kui) [VSTOR-79838]
  - fs/fuse: multithread fuse write (Alexey Kuznetsov)
  - mm: Drop swap_cache_info reporting in vzstat (Konstantin Khorenko) [PSBM-152466]
  - fs/fuse kio: skip truncating dropped cslists (Yuriy Vasilev) [VSTOR-76384]
  - fs/fuse kio: skip handling dropped cslists in pcs_map_notify_addr_change (Yuriy Vasilev) [VSTOR-76384]
  - fs/fuse kio: introduce try_cslist_get() (Yuriy Vasilev) [VSTOR-76384]
  - fs/fuse kio: do not allow getting cslist when refcnt is equal to 0 (Yuriy Vasilev) [VSTOR-76384]
  - ext4/mfsync: do not BUG_ON on wrong set of files (Alexander Atanasov) [VSTOR-78331]
  - sched: Do not set LBF_NEED_BREAK flag if scanned all the tasks (Konstantin Khorenko)
  - configs: commit actual Virtuozzo 9 release and debug configs (Konstantin Khorenko)
  - fuse: pcs: dangerous typo in commit_sync_info() (Alexey Kuznetsov) [VSTOR-77923]
  - fs/fuse kio: always ack RIO_MSG_RDMA_READ_REQ received from csd (Kui Liu) [VSTOR-76834 VSTOR-70758 VSTOR-60807 VSTOR-57903]
  - fs/fuse: make size of qhash and limit of each bucket module parameters (Kui Liu)
  - ms/tty: Make ->set_termios() old ktermios const (Ilpo Järvinen) [PSBM-148793]
  - ms/usb: serial: Make ->set_termios() old ktermios const (Ilpo Järvinen) [PSBM-148793]
  - ms/tty: Make ldisc ->set_termios() old ktermios const (Ilpo Järvinen) [PSBM-148793]
  - ms/serial: dz: Assume previous baudrate is valid (Ilpo Järvinen) [PSBM-148793]
  - ms/treewide: Replace open-coded flex arrays in unions (Kees Cook) [PSBM-148793]
  - ve/userns: remove all hashed entries before freeing user_namespace (Alexander Atanasov) [PSBM-150648]
  - fuse: scalable queue limiting (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: skip bg_queue for async direct io pcs requests (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: pcs: new rpc affinity mode - RSS (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: pcs: split trace_printk (Alexey Kuznetsov) [PSBM-146513]
  - fuse: pcs: rpc timeout was incoherent (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: do not accelerate writes with unknown dirty state (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: error reporting races (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: sync protocol for accelerated cses (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: minor, teach gcc to check for trace format validity (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: implement acceleration for synchronous writes (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: use gratuitous notifications to allow reads from finished replicas (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: a protocol to reenable optimizations after replication finished (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: implement fanout writes (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: cs acceleration for writes (Alexey Kuznetsov) [VSTOR-54040 VSTOR-84977]
  - fuse: better check_zero (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: implement fast access to encrypted CSes (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: direct access to journaled cs (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: direct access to local cs repositories (Alexey Kuznetsov) [VSTOR-54040]
  - fs/fuse: fix flush_bg_queue() (Alexey Kuznetsov) [VSTOR-54040]
  - fs/fuse: fix broken 'fuse_invalidate_files()' (Alexey Kuznetsov) [VSTOR-54040]
  - fuse: call proper fiemap_prep as it is required by new kernel api (Alexey Kuznetsov) [PSBM-151414 PSBM-151424 PSBM-151464 VSTOR-76073]
  - fs/fuse kio: implement zeroing page tails (Alexey Kuznetsov) [VSTOR-75108 VSTOR-75108]
  - dm/dm-ploop: add llseek_hole (Andrey Zhadchenko) [PSBM-145746]
  - dm/dm-ploop: allow to check if cluster is locked (Andrey Zhadchenko) [PSBM-145746]
  - dm/dm-ploop: reinforce some defines (Andrey Zhadchenko) [PSBM-145746]
  - dm/dm-qcow2: add llseek_hole (Andrey Zhadchenko) [PSBM-145746]
  - dm/dm-qcow2: add calc_front_qio_bytes() helper (Andrey Zhadchenko) [PSBM-145746]
  - dm/push_backup: add llseek_hole proxy (Andrey Zhadchenko) [PSBM-145746]
  - dm: add llseek_hole infrastructure (Andrey Zhadchenko) [PSBM-145746]
  - block/fops: add llseek_hole to blockdevops (Andrey Zhadchenko) [PSBM-145746]
  - cgroup: show and allow mounting of cgroup-v2 in containers (Pavel Tikhomirov) [PSBM-149975]
  - cgroup: allow to write to cgroup.subtree_control in CT root cgroup (Pavel Tikhomirov) [PSBM-149975]
  - mm/memcontrol: fix mem_cgroup_enough_memory on cgroup-v2 (Pavel Tikhomirov) [PSBM-149975]
  - mm/memcontrol: fix available memory calculation in mem_cgroup_enough_memory (Pavel Tikhomirov) [PSBM-149975]
  - cgroup: fix uninitiallized use of ctx->root (Pavel Tikhomirov) [PSBM-149975]
  - fs/fuse kio: fix deadlock in establishing rdma connection (Kui Liu) [VSTOR-73616]
  - fs/fuse kio: adjust rdma connection parameters - increase retry counts (Kui Liu)
  - fs/fuse kio: ignore rpc errors with uninitialized addrs (Yuriy Vasilev) [VSTOR-73400 VSTOR-73400]
  - mm/kmemleak: Add support for percpu memory leak detect (Wei Yongjun) [PSBM-141114 PSBM-147626]
  - net/ipv6: resurrect commit a0a9f33bdf8b ("net/ipv6: update flowi6_oif in ip6_dst_lookup_flow if not set") (Alexey Kuznetsov) [VSTOR-71337 VSTOR-71337]
  - fs/fuse kio: implement rpc errors collection (Yuriy Vasilev) [VSTOR-70161 VSTOR-70161]
  - qed: Fix scheduling in a tasklet while getting stats (Konstantin Khorenko) [PSBM-149337]
  - ms/qed/qede: Fix scheduling while atomic (Manish Chopra) [PSBM-149337]
  - ve/kernfs: fix kernfs locking in the control per-VE nodes visibility code (Alexander Atanasov) [PSBM-147624]
  - ploop: rework logging when punch hole or zero range is unsupported (Alexander Atanasov) [PSBM-147401]
  - ve/net: allow AF_ALG sockets inside a Container (Konstantin Khorenko) [PSBM-147375]
  - ms/net, neigh: Fix null-ptr-deref in neigh_table_clear() (Chen Zhongjin)
  - ms/selftests: move_mount_set_group: Fix incorrect kernel headers search path (Mathieu Desnoyers) [PSBM-144416 PSBM-144416]
  - ms/selftests/move_mount_set_group remove unneeded conversion to bool (Yang Guang) [PSBM-144416 PSBM-144416]
  - ms/tests: add move_mount(MOVE_MOUNT_SET_GROUP) selftest (Pavel Tikhomirov) [PSBM-144416 PSBM-144416]
  - ms/tools include UAPI: Update linux/mount.h copy (Arnaldo Carvalho de Melo) [PSBM-144416 PSBM-144416]
  - ms/move_mount: Allow to add a mount into an existing group (Pavel Tikhomirov) [PSBM-144416 PSBM-144416]
  - mount: Rename do_set_group() to do_set_group_old() (Pavel Tikhomirov) [PSBM-144416 PSBM-144416]
  - selftests/prctl: Test managing memory allocation scopes (Alexander Atanasov) [PSBM-141577]
  - prctl: Add option to manage memory allocation scopes (Alexander Atanasov) [PSBM-141577]
  - fs/fuse kio: Do not use sendpage on pages which cannot be sendpaged (Liu Kui) [PSBM-146846 PSBM-146846]
  - configs/cgroup: Make cgroup v1 the default hierarcy (Konstantin Khorenko) [PSBM-146806]
  - ploop: Fallback to zero range for backing stores without punch hole support (Alexander Atanasov) [PSBM-146678]
  - ucounts: Fix ucount incr/decr when uid is changed without changing the underlying user_struct (Nikolay Borisov) [PSBM-145641]
  - dm/push_backup: Allow to stop push_backup at any time (Andrey Zhadchenko) [PSBM-145865]
  - ve/cgroups: Drop lock when stopping workqueue to avoid dead lock (Alexander Atanasov) [PSBM-144580]
  - syslog: Virtualize timestamps in the data reported (Konstantin Khorenko) [PSBM-145313]
  - kmsg: Virtualize timestamps in /dev/ksmg output (Konstantin Khorenko) [PSBM-145313]
  - iptables: Fix percpu counter block leak on error path when creating new netns (Pavel Tikhomirov) [PSBM-141114]
  - FD: mm: Memory cgroup page cache limit (Konstantin Khorenko) [PSBM-78244]
  - mm: Memory cgroup page cache limit (Andrey Ryabinin) [PSBM-77547 PSBM-78244 PSBM-131957 PSBM-134013 PSBM-144609 VSTOR-24395 PSBM-94761 PSBM-131957 PSBM-106384 PSBM-131957 PSBM-101300 PSBM-101300 PSBM-131957 PSBM-139098 PSBM-144609 PSBM-144609]
  - ve/net/gre: Disable ERSPAN support in ip_gre module (Nikolay Borisov) [PSBM-144221]
  - rebase_logs: Add rebase logs for 5.14.0-70.22.1.el9 to 5.14.0-162.6.1.el9 rebase (Konstantin Khorenko) [PSBM-144163]
  - fuse: pcs: missing timeout at authentication phase (Alexey Kuznetsov) [VSTOR-62165 VSTOR-62165]
  - configs: Enable DEBUG_NET for debug kernels (Konstantin Khorenko) [PSBM-143302]
  - ve/module: Calculate sysfs max path size at compile time to avoid static variable (Alexander Atanasov) [PSBM-143836]
  - cgroup_freezer: Print information about unfreezable process (Pavel Tikhomirov) [PSBM-142970]
  - oom: Cast the lockdep spell in the code (Konstantin Khorenko) [PSBM-143283]
  - dm-qcow2: Add device name to log messages (Alexander Atanasov) [PSBM-142999]
  - dm-qcow2: Enable injection fault (Alexander Atanasov) [PSBM-143153]
  - dm-qcow2: Cleanup function names (Alexander Atanasov) [PSBM-143155]
  - ploop: port and fix the standby mode feature (Alexander Atanasov) [PSBM-142759 PSBM-144163]
  - FD: dm-ploop: standby mode (Konstantin Khorenko) [PSBM-143049]
  - blk-cbt: fix count decrement and check in cbt_page_alloc (Pavel Tikhomirov) [PSBM-141114]
  - dm-ploop: add device name to log messages (Alexander Atanasov) [PSBM-142993]
  - FD: balloon: usage information visible by guest: stats reported in OOM/SysRQ (Konstantin Khorenko) [PSBM-142436]
  - drivers/hyperv: Balloon report stats to mm core (Alexander Atanasov) [PSBM-142436]
  - drivers/vmware: Balloon report stats to mm core (Alexander Atanasov) [PSBM-142436]
  - drivers/virtio: Balloon report stats to mm core (Alexander Atanasov) [PSBM-142436]
  - mm: Add counters to be updated by the balloon drivers (Alexander Atanasov) [PSBM-142436]
  - dm-ploop: use helper to initialize kiocb (Alexander Atanasov) [PSBM-142045]
  - dm-ploop: validate file descriptors more strictly (Alexander Atanasov) [PSBM-142046]
  - dm-qcow2: use helper to initialize kiocb (Alexander Atanasov) [PSBM-142050]
  - dm-qcow2: check if files are opened with O_DIRECT (Alexander Atanasov) [PSBM-142050]
  - ms/net: neigh: don't call kfree_skb() under spin_lock_irqsave() (Yang Yingliang) [PSBM-141642]
  - FD: balloon: usage information visible by guest (Konstantin Khorenko) [PSBM-140409 PSBM-140407]
  - virtio_balloon: Create debugfs file with the usage information (Alexander Atanasov) [PSBM-140407]
  - sunrpc: print debug info for kill-tasks (Pavel Tikhomirov) [PSBM-141604]
  - dm-ploop: Allow fault injection for all ploop functions (Alexander Atanasov) [PSBM-136606]
  - dm-ploop: Prefix all ploop functions with ploop_ (Alexander Atanasov) [PSBM-141449]
  - ve/cgroup: fix cgroup file active count vs cgroup_mutex deadlock (Pavel Tikhomirov) [PSBM-140700]
  - neighbour: make proxy_queue.qlen limit per-device (Alexander Mikhalitsyn) [PSBM-140896]
  - ms/neigh: fix possible DoS due to net iface start/stop loop (Denis V. Lunev) [PSBM-140896]
  - Makefile: Fix "make rpm-pkg" in 5.14+ (Alexander Atanasov)
  - Makefile: Expose VZVERSION in stack dump and define the default EXTRAVERSION value (Konstantin Khorenko)
  - fuse: pcs: protection against sync seq numbers wraparound (Alexey Kuznetsov) [VSTOR-55377 VSTOR-55377 VSTOR-62689 VSTOR-62689]
  - fs/fuse kio: wording correction in commit_cs_record (dirtying) (Konstantin Khorenko)
  - rebase_logs: Add rebase logs for 5.14.0-42.el9 to 5.14.0-70.13.1.el9 rebase (Konstantin Khorenko) [PSBM-140371]
  - fsopen/devmnt/fs_context: Add vz devmnt feature support to fs_context (Alexander Mikhalitsyn) [PSBM-133521]
  - net/ipv4: fib_semantics: omit excess rtm_flags (Alexander Mikhalitsyn) [PSBM-135303 PSBM-140280]
  - dm-ploop: Refactor dm target status callback (Alexander Mikhalitsyn) [PSBM-140279]
  - FD: pidns: virtualize pid_max (Konstantin Khorenko) [PSBM-140308]
  - cgroup-v1: Allow setting release_agent from root Container user_ns (Konstantin Khorenko) [PSBM-140174]
  - ms/memcg: enable accounting for nft objects (Vasily Averin) [OVZ-7325 PSBM-128719 PSBM-133990]
  - fuse: Add a new fuse inode state FUSE_I_INVAL_FILES (Liu Kui)
  - fuse: add 'struct fuse_file *ff' field to 'struct fuse_args' (Liu Kui)
  - dm-zero-req: Introduce zero request based target (Konstantin Khorenko) [PSBM-134130 PSBM-134130]
  - FD: dm-ploop: swap speed limit for Containers (Konstantin Khorenko) [PSBM-139285]
  - ploop: allow to disable css inheritance in kthread (Cyrill Gorcunov) [PSBM-139285 PSBM-139303]
  - dm-qcow2: Close race between R1/R2 reading and relocate_refcount_table() (Kirill Tkhai)
  - dm-qcow2: Rename and unexport timer function (Kirill Tkhai)
  - dm-qcow2: Remove useless zeroing in qcow2_service_iter() (Kirill Tkhai)
  - dm-qcow2: Move lock into parse_metadata() (Kirill Tkhai)
  - dm-qcow2: Introduce __handle_md_page() (Kirill Tkhai)
  - dm-qcow2: Use handle_md_page() instead of md_page_find_or_postpone() (Kirill Tkhai)
  - dm-qcow2: Remove arg in parse_metadata() (Kirill Tkhai)
  - dm-qcow2: Prepare handle_md_page() for calling not only from main kwork (Kirill Tkhai)
  - dm-qcow2: Introduce fake_service_qio() (Kirill Tkhai)
  - dm_qcow2: Add bi_op argument to qcow2_service_iter() (Kirill Tkhai)
  - dm-qcow2: Rename MERGE_QIOS_MAX (Kirill Tkhai)
  - dm-qcow2: Pause IO and notify about ENOSPC events (Kirill Tkhai) [PSBM-132049]
  - dm-qcow2: Stop using err_status_lock (Kirill Tkhai)
  - dm-qcow2: Introduce a new helper init_qrq_and_embedded_qio() (Kirill Tkhai)
  - ms/ipc/sem: do not sleep with a spin lock held (Vasily Averin)
  - kernfs/ve: fix strange ve_is_super check in kernfs_d_visible (Pavel Tikhomirov) [PSBM-137997]
  - ve/nf_log_syslog: allow packet logging in ve init netns (Pavel Tikhomirov) [PSBM-138110]
  - ve/net: add is_ve_init_net helper (Pavel Tikhomirov) [PSBM-138110]
  - ve/nf_log_syslog: virtualize packet logging per-ve (Pavel Tikhomirov) [PSBM-138110]
  - ve/net: ip6_vti: skip per net init in ve (Nikita Yushchenko) [PSBM-138093]
  - ve/net: restrict number of net devices for CT (Pavel Tikhomirov) [PSBM-51354 PSBM-92132 PSBM-92132 PSBM-130514]
  - dm-ploop: Print more error information on resize (Kirill Tkhai) [PSBM-137646]
  - ms/scripts/tags.sh: Fix obsolete parameter for ctags (Philip K. Gisslow)
  - vtty: fix slave peer lockdep annotation (Cyrill Gorcunov) [PSBM-136773 PSBM-137884]
  - fuse: disable invalid inode dirtying for vstorage (Alexey Kuznetsov) [PSBM-130883 PSBM-130883]
  - fuse: illegal access to file in vstorage (Alexey Kuznetsov) [PSBM-129289]
  - fuse: fix fiemap looping (Alexey Kuznetsov) [PSBM-129289]
  - fuse: deadlock in map request (Alexey Kuznetsov) [VSTOR-43521 PSBM-129289]
  - fs/fuse: avoid triggering BUG_ON at file close (Alexey Kuznetsov) [VSTOR-43056]
  - fuse: Handle zero req->num_pages in fuse_insert_writeback() (Vasily Averin) [PSBM-127832 PSBM-97813]
  - fs/fuse: released handle could be used in fiemap (Alexey Kuznetsov) [VSTOR-42949]
  - fuse: don't declare FUSE FIEMAP support for any FUSE fs (Konstantin Khorenko) [OVZ-7145]
  - fuse: don't perform getattr on each write (Vasily Averin) [PSBM-99138]
  - fuse: Wait inflight requests only in case of close_wait (Kirill Tkhai) [PSBM-98031]
  - fuse: cleanup fuse_wait_on_page_writeback_or_invalidate (Maxim Patlasov)
  - fuse: relax i_mutex coverage in fuse_fsync (Maxim Patlasov) [PSBM-55919]
  - fuse: queue work for aio_complete (v3) (Maxim Patlasov) [PSBM-54547 VSTOR-45882 VSTOR-45882 VSTOR-45882]
  - fuse: process small sync direct reads synchronously (Maxim Patlasov)
  - fuse: increase min/max_dirty_pages up to 256/512 MB (Vladimir Davydov)
  - fuse: resend interrupted release (Maxim Patlasov) [PSBM-45428 VSTOR-11275]
  - fuse: improve bdi dirty memory limits for fuse (Maxim Patlasov) [PSBM-13700 PSBM-45497]
  - fs/fuse kio: fix compilation warning of 'implicit-fallthrough' (Liu Kui)
  - fs/fuse kio: fix compilation warning of 'variable length array' (Liu Kui)
  - fs/fuse kio: add fuse_destroy_inode() (Liu Kui)
  - fs/fuse kio: remove iov_iter_for_each_range() usage (Liu Kui) [PSBM-154941 PSBM-157056]
  - fs/fuse kio: remove kernel_setsockopt() usage (Liu Kui)
  - fs/fuse kio: remove ib_dma_*_coherent() usage (Liu Kui)
  - fs/fuse kio: remove current_kernel_time() usage (Liu Kui)
  - fs/fuse kio: remove shash_desc::flags usage (Liu Kui)
  - fs/fuse kio: inculde header file <linux/fiemap.h> (Liu Kui)
  - fs/fuse kio: set fc->kdirect_io (Liu Kui)
  - fs/fuse kio: redefine fuse_kio_ops callback functions. (Liu Kui)
  - fs/fuse kio: don't use kio with uninitialized statistic (Ildar Ismagilov) [VSTOR-42099]
  - fs/fuse kio: share stucked requests count for prometheus stats (Ildar Ismagilov) [VSTOR-41021]
  - fs/fuse kio: disable parallel fsyncs and file shrinks (Alexey Kuznetsov) [VSTOR-36154]
  - fs/fuse kio: avoid race condition at file expand (Alexey Kuznetsov) [VSTOR-36154]
  - fs/fuse kio: fix problem with simultaneous map resolving (Ildar Ismagilov) [VSTOR-39656]
  - fs/fuse kio: always use memory registrations for iWarp RDMA reads (Ildar Ismagilov)
  - fs/fuse kio: post rdma work requests only after connection is established (Ildar Ismagilov) [VSTOR-38116]
  - fs/fuse kio: fix processing order of RDMA works during throttle/unthrottle (Ildar Ismagilov) [VSTOR-38354]
  - fuse: enable async_dio for pcs (Maxim Patlasov)
  - fs/fuse kio: int overflow while calculation of pos in map_truncate_tail() (Ildar Ismagilov) [VSTOR-36154]
  - fs/fuse kio: NULL pointer dereference in case of dead map (Ildar Ismagilov) [VSTOR-34510]
  - fs/fuse kio: concurently work shrink and IO operations (Ildar Ismagilov)
  - fs/fuse kio: allocate memory for each RDMA RX buffer separately (Ildar Ismagilov)
  - fs/fuse kio: set the connection params for RDMA properly (Ildar Ismagilov)
  - fs/fuse kio: align CS messages to 512 bytes (Ildar Ismagilov) [VSTOR-33830]
  - fs/fuse kio: add storage_version attribute to control filesystem (Ildar Ismagilov) [VSTOR-33830]
  - fs/fuse kio: implement support RDMA transport (Ildar Ismagilov) [VSTOR-4310]
  - fs/fuse kio: make pcs auth socket independent (Ildar Ismagilov) [VSTOR-4310 VSTOR-44526]
  - fs/fuse kio: make pcs rpc socket independent (Ildar Ismagilov) [VSTOR-4310]
  - fs/fuse kio: drop external cs connection (Pavel Butsykin) [VSTOR-4310]
  - fs/fuse kio: implement internal cs connection (Pavel Butsykin) [VSTOR-4310]
  - fs/fuse kio: missing ireq's completion_data initialization (Ildar Ismagilov) [PSBM-100294]
  - fs/fuse kio: calculate network latency properly (Ildar Ismagilov)
  - fs/fuse kio: show latency in cs_stats properly (Ildar Ismagilov)
  - fs/fuse kio: share bandwith/IOPS for prometheus stats (Sergey Lysanov) [VSTOR-20601]
  - fs/fuse kio: don't wait read requests in case of fsync/flush (Ildar Ismagilov) [VSTOR-11372]
  - fs/fuse kio: add a sanity check on statistic inc (Konstantin Khorenko) [PSBM-96128]
  - fs/fuse kio: set NULL to stat->kio_stat in failure case (Pavel Butsykin)
  - fs/fuse kio: fix fuse_mutex leak in pcs_fuse_stat_fini() (Pavel Butsykin)
  - fs/fuse kio: reset write_iter for canceled msg (Pavel Butsykin) [VSTOR-21044]
  - fs/fuse kio: drop maps on file close (Pavel Butsykin) [VSTOR-24004 PSBM-96165 PSBM-96165]
  - fs/fuse kio: fix length overflow in FALLOC_FL_KEEP_SIZE (Pavel Butsykin) [VSTOR-23781]
  - fs/fuse kio: skip iostat count for unknown req types (Pavel Butsykin) [VSTOR-23620]
  - fs/fuse kio: fix stack overrun in request_end() (Pavel Butsykin)
  - fs/fuse kio: fix inode leak in pcs_fuse_submit() (Pavel Butsykin)
  - fs/fuse kio: cosmetic changes in pcs_fuse_prep_rw() (Pavel Butsykin) [VSTOR-23781]
  - fs/fuse kio: implement cs_stats statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: convert rpc state id to string (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement cs statistics accounting (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: remove useless pcs_cs initialization (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement fstat_lat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement fstat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement requests statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement pcs_strerror() (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: add retry counter for kio requests (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: make interface pcs_kio_req_list() for listing kio reqs (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: make interface pcs_kio_file_list() for listing kio files (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: implement iostat statistics info (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse kio: create sysfs stat directory (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse: add conn_ctl to fuse_conn struct (Pavel Butsykin) [VSTOR-20979]
  - fs/fuse: fix locked kio request send (Pavel Butsykin)
  - fs/fuse kio: simplify processing and sending kio requests (Pavel Butsykin)
  - fs/fuse kio: make req_classify callback (Pavel Butsykin)
  - fs/fuse kio: fix latency time count (Pavel Butsykin)
  - fs/fuse kio: keep fuse_file for requests waiting for shrink (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: style fix in pcs_fuse_submit() (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: add pending kio requests to kqueue (Pavel Butsykin) [VSTOR-23034]
  - fs/fuse kio: forward fuse_file pointer to kpcs_req_send() (Pavel Butsykin) [VSTOR-23034]
  - fuse: do not take fc->lock in fuse_request_send_background() - fixup (Kirill Tkhai)
  - fs/fuse kio: add warning about jumbo chunks (Pavel Butsykin)
  - fs/fuse kio: sync pcs_mds_sys_info struct (Pavel Butsykin)
  - fs/fuse kio: export io_locality (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: add missed sock write in pcs_sock_sendmsg() (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: relax congestion avoidance limits (backport from usermode) (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: fix a typo in worth_to_grow() (Pavel Butsykin) [VSTOR-11050]
  - fs/fuse kio: export fastpath protocol version (Pavel Butsykin) [PSBM-93637]
  - ms/fuse: Wake up req->waitq of only if not background (Kirill Tkhai)
  - fs/fuse kio: fix getting a non-existent pcs inode in kpcs_kill_requests() (Pavel Butsykin)
  - fs/fuse kio: fix double free of pfc in process_pcs_init_reply() (Pavel Butsykin) [VSTOR-20922]
  - fs/fuse: fix unsafe killing fiq->pending requests (Pavel Butsykin)
  - fs/fuse kio: add FUSE_S_FAIL_IMMEDIATELY check in pcs_fuse_submit() (Pavel Butsykin)
  - fs/fuse kio: invalidate files for kio (Pavel Butsykin) [VSTOR-19620]
  - fs/fuse kio: make it possible to enable TRACE/DTRACE in the release kernel (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: disable duplication FUSE_K* messages to debugfs by default (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: bring fuse ktraces to a common view (Pavel Butsykin) [VSTOR-18383]
  - fs/fuse kio: deny unavailable ioctl's in kio (Pavel Butsykin)
  - fs/fuse kio: add support PCS_CS_IO_SYNC flag (Pavel Butsykin) [VSTOR-19396]
  - fs/fuse kio: backport immediate-write attribute handle (Pavel Butsykin) [VSTOR-19396]
  - fs/fuse kio: satisfy pure FALLOC_FL_KEEP_SIZE immediately (Pavel Butsykin) [VSTOR-19317]
  - fs/fuse kio: fix mapping dereference in a dead map (Pavel Butsykin) [VSTOR-19267]
  - fuse: do not wait for completion of inessential writes in fuse fsync (Alexey Kuznetsov) [VSTOR-17311 VSTOR-17311]
  - fs/fuse kio: missed cleanup for interrupted shrink request (Pavel Butsykin) [VSTOR-19074]
  - fs/fuse kio: missed clean di->size.op in failed shrink request (Pavel Butsykin) [VSTOR-18947]
  - fs/fuse kio: retry allocation PCS_IREQ_FLUSH request (Pavel Butsykin) [VSTOR-18475]
  - fs/fuse kio: fix sreq and msg leak in prepare_map_flush_ireq() (Pavel Butsykin) [VSTOR-18475]
  - fs/fuse kio: fix loss of FUSE_FSYNC/FUSE_FLUSH reqs (Pavel Butsykin) [VSTOR-18475]
  - fuse kio: never ignore fuse_req error during PCS_IOC_GETMAP (Anton Nefedov)
  - fuse kio: fix timer setup so it actually delays ireq (Anton Nefedov)
  - fuse kio: Round down extent start in fiemap_process_one() (Alexey Kuznetsov) [VSTOR-15535]
  - fs/fuse kio_pcs: replenish netaddr_cmp() with rdma type (Pavel Butsykin) [VSTOR-17784]
  - fs/fuse kio_pcs: fix update cs state after receiving new map (Pavel Butsykin) [VSTOR-17413]
  - fs/fuse kio_pcs: invalidation maps in setattr kio (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse kio_pcs: cleanup kpcs_setattr_end() (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse kio_pcs: make pcs_map_truncate() easier (Pavel Butsykin) [VSTOR-16863]
  - fs/fuse: add assert on i_mutex in fuse_send_write() (Pavel Butsykin) [VSTOR-16876]
  - fs/fuse kio_pcs: add assert on i_mutex for PUNCH_HOLE and ZERO_RANGE (Pavel Butsykin) [VSTOR-16876]
  - fs/fuse kio_pcs: cleanup in truncate (backport) (Alexey Kuznetsov)
  - fs/fuse kio_pcs: NULL pointer dereference in map_submit()->MAP_ARGS() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: NULL pointer dereference on access m->mapping->chunk_size_bits (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix map leaks in process_ireq_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: simplify pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix map leak in pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: protect valid_for_truncate() by m->lock's (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: fix condition for map resolving in pcs_mapping_truncate() (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: forgotten setting of the next phase (Pavel Butsykin) [PSBM-89539]
  - fs/fuse kio_pcs: make map_truncate_tail() working as the original from libpcs_client (Pavel Butsykin) [PSBM-89539]
  - fuse: Prohibit kio engine from containers (Kirill Tkhai) [VSTOR-16325]
  - fuse kio: Unexport pcs_ioconn_close() and pcs_ioconn_unregister() (Kirill Tkhai)
  - fs/fuse kio_pcs: fix NULL pointer dereference in pcs_mapping_truncate() (Pavel Butsykin)
  - fuse kio: Fix deadlock at pcs_fuse_submit() error path (Kirill Tkhai) [VSTOR-16246]
  - fs/fuse kio_pcs: flush rpc work inside pcs_rpc_destroy() (Pavel Butsykin) [VSTOR-16236]
  - fuse kio: Move abort & destroy block up in pcs_rpc_send() (Kirill Tkhai) [VSTOR-16236]
  - fuse kio: Check for null ep in pcs_rpc_deaccount_msg() (Kirill Tkhai) [VSTOR-16236]
  - fuse kio: Stop self-abuse of rpc counter in rpc_queue_work() (Kirill Tkhai) [VSTOR-16236]
  - fs/fuse kio_pcs: drop old mapping after size growth (Pavel Butsykin)
  - fuse kio: Hold pcs_rpc counter till sio may be freed (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Fix rpc socket leak on rpc_abort() (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Dereference sk_user_data under rcu (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Introduce pcs_sk_kick_queue() (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Destroy rpc in work func (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Add pcs_cleanup_wq (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Reorder callback assignment (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Use sio eof instead of parent to determ abort (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Use __maybe_unused (Kirill Tkhai) [VSTOR-15305]
  - fuse kio: Port "ignore uninitialized CS addresses" commit (Kirill Tkhai) [VSTOR-3415 VSTOR-3415 VSTOR-16083]
  - fuse kio: Refactoring in struct pcs_rpc (Kirill Tkhai)
  - fuse kio: Differ fuse_pcs_kdirect_claim_op() return values (Kirill Tkhai)
  - fuse kio: Do not try to populate fuse_inode::private on second open (Kirill Tkhai)
  - fuse kio: Fix spelling in process_pcs_init_reply() (Kirill Tkhai)
  - fuse kio: Return possibility to handle files served in userspace (Kirill Tkhai) [VSTOR-15947]
  - fuse kio: Fix deadlock in kpcs_req_send() (Kirill Tkhai) [VSTOR-15924]
  - fs/fuse kio_pcs: fix double free of synchronous requests (Pavel Butsykin)
  - fs/fuse kio_pcs: prevention of falling kio reqs to usermode (Pavel Butsykin) [VSTOR-15447]
  - fs/fuse kio_pcs: split kpcs_req_send() (Pavel Butsykin) [VSTOR-15447]
  - fuse kio: Add debug printk into process_pcs_init_reply() (Kirill Tkhai)
  - fuse kio: Protect struct pcs_rpc_engine::{unhashed, ht, nrpcs} (Kirill Tkhai) [VSTOR-15727]
  - fuse kio: Fallback to plain fuse in case of version mismatch (Kirill Tkhai)
  - fuse kio: Reorder process_pcs_init_reply() and free memory on failure (Kirill Tkhai)
  - fuse kio: Introduce cached_op (Kirill Tkhai)
  - fuse kio: Refactoring in fuse_show_options() (Kirill Tkhai)
  - fuse kio: Do not get useless fuse.ko module reference (Kirill Tkhai)
  - fuse kio: Add schedule_timeout() into pcs_rpc_fini_verify() (Kirill Tkhai)
  - fs/fuse kio_pcs: drop rpc connection close in pcs_rpc_engine_fini() (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: remove fuse destroy request (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: fix race between req->end() and request_wait_answer() (Pavel Butsykin) [VSTOR-15378]
  - fs/fuse kio_pcs: time slice for rpc rebinding (Pavel Butsykin) [VSTOR-14031]
  - fs/fuse kio_pcs: improve rpc to cpu binding (Pavel Butsykin) [VSTOR-14031]
  - fuse kio: Do not zero already zeroed fields in pcs_sockio_init (Kirill Tkhai)
  - fuse kio: Do not zero already zeroed fields in pcs_find_get_map() (Kirill Tkhai)
  - fuse kio: Async queueing of fiemap from work (Kirill Tkhai)
  - fuse kio: Introduce fiemap_work (Kirill Tkhai)
  - fuse kio: Move fiter ireq iocount assignment (Kirill Tkhai)
  - fuse kio: Move position advance in fiemap_process_one() (Kirill Tkhai)
  - fuse kio: Kill fiemap_worker() thread (Kirill Tkhai)
  - fuse kio: Move it variable from stack to struct fiemap_iterator (Kirill Tkhai)
  - fuse kio: Extract fiemap iteration from fiemap_worker() to separate function (Kirill Tkhai)
  - fuse kio: Cleanup in pcs_fuse_submit() (Kirill Tkhai)
  - fs/fuse kio_pcs: disable TRACE/DTRACE for release kernel (Pavel Butsykin)
  - fs/fuse kio_pcs: missed *msg_size setting in rpc_get_hdr() (Pavel Butsykin) [VSTOR-13602]
  - fuse/kio: Add socket io fault injection (Kirill Tkhai)
  - fuse kio: Allocate pcs_map from kmem_cache with SLAB_RECLAIM_ACCOUNT flag (Kirill Tkhai) [PSBM-87665]
  - fs/fuse kio_pcs: fix NULL pointer dereference in pcs_flushreq_complete() (Pavel Butsykin) [VSTOR-12570]
  - fs/fuse kio_pcs: style fix in pcs_fuse_submit() (Pavel Butsykin)
  - fuse kio: kio must not fail when not being able to claim a file (Alexey Kuznetsov) [PSBM-86866]
  - fs/fuse kio_pcs: throttle async KIO requests (Pavel Butsykin) [VSTOR-12335]
  - fs/fuse: add non-blocking request flag (Pavel Butsykin) [VSTOR-12335]
  - fuse kio: control internal tracing with module parameter pcs_loglevel (Alexey Kuznetsov)
  - fuse kio: avoid spurious uncork setsockopt on unix socket (Alexey Kuznetsov)
  - fuse kio: logging improvements (Alexey Kuznetsov)
  - fuse kio: Make struct fuse_inode::num_openers int (Kirill Tkhai)
  - fs/fuse kio_pcs: fix NULL pointer dereference inside a dead map (Pavel Butsykin)
  - fuse kio: Fix NULL pointer dereference in pcs_map_get_locked() (Kirill Tkhai) [PSBM-86458]
  - fs/fuse kio_pcs: bugs in integrity protocol for fallocate (Pavel Butsykin) [PSBM-68465]
  - fuse kio: missing local client ID initialization (Alexey Kuznetsov) [VSTOR-11651]
  - fuse kio: Read file attributes every first open (Maxim Patlasov) [PSBM-86234]
  - fuse: Refactor fuse_open_common() (Kirill Tkhai)
  - fuse kio: Make KIO to require writeback_cache (Kirill Tkhai)
  - fs/fuse kio_pcs: fix grow work execution with zero (Pavel Butsykin) [PSBM-85945]
  - fuse kio: error PCS_ERR_CSD_LACKING is non-fatal (Alexey Kuznetsov) [VSTOR-11692]
  - fuse: Teach fuse_blocked_for_wb() handle no files case (Kirill Tkhai)
  - fs/fuse kio_pcs: replace pr_info() with ktrace for ireq fatal error (Pavel Butsykin) [VSTOR-11391]
  - fs/fuse kio_pcs: enable traces for cs sync (Pavel Butsykin) [VSTOR-11651]
  - fuse kio: Check returned FUSE_SETATTR size (Kirill Tkhai)
  - fs/fuse kio_pcs: increment PCS_FAST_PATH_VERSION to 1.1 (Pavel Butsykin)
  - fs/fuse kio_pcs: add handling FUSE_FLUSH in kio_pcs (Pavel Butsykin) [VSTOR-11064]
  - fs/fuse: set inode entry for FUSE_FLUSH request (Pavel Butsykin) [VSTOR-11064]
  - fs/fuse kio_pcs: fix missing hbuf.uid update for ireq split case (Pavel Butsykin) [VSTOR-11315]
  - fs/fuse kio_pcs: handle old map in pcs_cs_submit() (Pavel Butsykin) [VSTOR-11315]
  - fuse kio: support unix socket for local CSes (Alexey Kuznetsov) [VSTOR-9817]
  - fs/fuse kio_pcs: mapped requests have map version preinitialized (Pavel Butsykin)
  - fuse kio: Skip processing of messages above PAGE_SIZE size (Kirill Tkhai) [VSTOR-11208 VSTOR-11208]
  - fuse kio: Get msg size in second argument of pcs_sockio::get_msg() (Kirill Tkhai) [VSTOR-11208 VSTOR-11208]
  - fs/fuse kio_pcs: add more traces for cs requests (Pavel Butsykin)
  - fuse kio: Fix unbalanced queueing and dequeueing pcs_map_entry::sync_work (Kirill Tkhai)
  - fuse kio: Add missed spin_lock into sync_timer_work() (Kirill Tkhai)
  - fuse kio: Add comment to fuse_release() (Kirill Tkhai)
  - fuse kio: Place more pcs_cs_link::cs under rcu dereference (Kirill Tkhai)
  - fuse kio: Wait pending requests on final fput() (Kirill Tkhai)
  - fs/fuse: remove extra check for empty active_list (Pavel Butsykin)
  - fs/fuse kio_pcs: fix NULL pointer dereference in cs_keep_waiting() (Pavel Butsykin)
  - fuse kio: Do not NULL used pcs_cs_link::cs during connection destruction (Kirill Tkhai)
  - fuse kio: Delete excess unlist in pcs_csset_fini() (Kirill Tkhai)
  - fs/fuse kio_pcs: fix out of bounds roles_str[] array access (Pavel Butsykin)
  - fs/fuse kio_pcs: fix double unlock of m->lock in pcs_map_get_locked() (Pavel Butsykin)
  - fs/fuse kio_pcs: pass the file handle for FUSE_SETATTR request (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse: export fuse_release_ff() and __fuse_write_file_get() (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse kio_pcs: handle error of submit_size_grow() (Pavel Butsykin) [VSTOR-10635]
  - fs/fuse kio_pcs: move pcs_ireq_queue_fail() (Pavel Butsykin) [VSTOR-10635]
  - fuse kio: infinite loop in processing congestion queue (Alexey Kuznetsov) [VSTOR-10928]
  - fuse kio: Use dereferenced cs in cslist_destroy() (Kirill Tkhai)
  - fuse kio: Arrange rcu modifiers around accesses to pcs_cs_link::cs (Kirill Tkhai)
  - fuse kio: Handle fuse_map_resolve() failure in pcs_map_queue_resolve() (Kirill Tkhai)
  - fs/fuse kio_pcs: some cleanup ireq_on_error_() (Pavel Butsykin)
  - fuse kio: Fix dereferencing of NULL cs in map_replicating() (Kirill Tkhai) [VSTOR-10820]
  - fuse kio: Fix fix deadlock during change CS address (Kirill Tkhai)
  - fuse kio: Change order around pcs_map_notify_addr_change() (Kirill Tkhai)
  - fuse kio: Wait till cs is unused in pcs_csset_fini() (Kirill Tkhai)
  - fuse kio: Introduce pcs_cs::use_count instead of ::is_probing (Kirill Tkhai)
  - fuse kio: Fix possible use after free in cslist_destroy() (Kirill Tkhai)
  - fuse kio: Fix potential use after free (Kirill Tkhai)
  - fuse kio: Introduce pcs_cs_list_of_cs_link() (Kirill Tkhai)
  - fuse kio: Remove useless code in pcs_cs_destroy() (Kirill Tkhai)
  - fuse kio: invalid assertion (Alexey Kuznetsov)
  - fuse kio: cleanup in token enqueue (Alexey Kuznetsov)
  - fuse kio: Introduce fast path protocol version, (Kirill Tkhai) [VSTOR-10131]
  - fs/fuse kio_pcs: remove s_subtype check (Pavel Butsykin)
  - fuse kio: Cleanup in struct pcs_rpc (Kirill Tkhai)
  - fuse kio: Declare pcs_sockio::parent type (Kirill Tkhai)
  - fuse kio: Do not requeue requests when connection is dead (Kirill Tkhai) [VSTOR-10354]
  - fuse kio_pcs: ports from new user-space (Alexey Kuznetsov)
  - kio: Stop always breaking connection in pcs_sockio_send() in case of EAGAIN. (Kirill Tkhai) [VSTOR-9848]
  - fuse: Try automatically load kio module (Kirill Tkhai)
  - fuse/kio_pcs: use kvmalloc for pcs_fuse_cluster allocation (Oleg Babin)
  - fuse: pcs_kio cancel requests after fused crash (Dmitry Monakhov)
  - fuse/kio_pcs: read is broken by FIEMAP patch (Alexey Kuznetsov) [VSTOR-9727]
  - fuse/kio_pcs/pcs_map: fix process_flush_req lock leakage (Dmitry Monakhov) [VSTOR-8116]
  - fuse/kio_pcs: FIEMAP support (Alexey Kuznetsov)
  - fuse/kio_pcs: full fallocate() support (Alexey Kuznetsov)
  - fuse/kio_pcs: fallocate support at low pcs protocol level (Alexey Kuznetsov)
  - fuse/kio_pcs: adapt prometheus statistics to current vstorage state (Alexey Kuznetsov)
  - fuse: support FS_IOC_FIEMAP in i386 compat mode (Alexey Kuznetsov) [PSBM-83731]
  - fuse/kio_pcs: support FUSE_FSYNC (Alexey Kuznetsov)
  - fuse pcs_kio: fix page zeroing beond EOF (Dmitry Monakhov)
  - fuse kio_pcs: ignore special inodes (Dmitry Monakhov) [VSTOR-8078]
  - fuse kio pcs: implement logging and prometheus statistics collection v2 (Dmitry Monakhov) [PSBM-81741]
  - configs: Enable vStorage in-kernel fast path module build (Konstantin Khorenko) [PSBM-80680 VSTOR-16325]
  - configs: Introduce FUSE_KIO_NULLIO option and disable module build by default (Konstantin Khorenko) [PSBM-80680 VSTOR-16325]
  - configs: Introduce FUSE_KIO_NOOP option and disable module build by default (Konstantin Khorenko) [PSBM-80680 VSTOR-16325]
  - fuse_kio_pcs: implement truncate (Dmitry Monakhov) [PSBM-80680]
  - fio kio: PCS unblock writepath (Dmitry Monakhov) [PSBM-80680]
  - fuse kio: Add pcs engine combo v0.8 (Dmitry Monakhov) [PSBM-80680 PSBM-87665 VSTOR-15801]
  - fuse kio: Add nullio engine (Dmitry Monakhov) [PSBM-80680 VSTOR-16325]
  - fuse kio: minimal noop engine skeleton (Dmitry Monakhov) [PSBM-80680 VSTOR-16325]
  - fuse: add kdirect io engine v0.1 (Dmitry Monakhov) [PSBM-80680 PSBM-131962 PSBM-131962 PSBM-131962 VSTOR-45882 VSTOR-45882]
  - fuse: fix ->end() vs ->waitq ordering (Dmitry Monakhov) [PSBM-80680]
  - fuse: skip invalidate_inode_pages2 on truncate (Maxim Patlasov) [PSBM-76437]
  - fuse: ioctl(FIEMAP) support (Maxim Patlasov) [PSBM-68226 PSBM-129289]
  - fuse: ioctl() to bind fuse device to input queue (Maxim Patlasov)
  - fuse: separate iqueue for clones (Maxim Patlasov)
  - fuse: fuse_prepare_write() cannot handle page from killed request (Maxim Patlasov) [PSBM-54547]
  - fuse: fuse_blocked_for_wb must check rw_files (Maxim Patlasov) [PSBM-57460]
  - fuse: trust server file size unless opened (Maxim Patlasov) [PSBM-57047]
  - fuse: ratelimint dio complains (Maxim Patlasov) [PSBM-55782]
  - fuse: fuse_send_writepage() must check FUSE_S_FAIL_IMMEDIATELY (Maxim Patlasov)
  - fuse: release cleanup (Maxim Patlasov)
  - fuse: fix deadlock in fuse_flush() (Maxim Patlasov) [PSBM-29381]
  - fuse: invalidate_files backward compatibility mode (Maxim Patlasov)
  - fuse: fix writeback/release race (Maxim Patlasov) [PSBM-26148]
  - fuse: report details of aio failure (Maxim Patlasov) [PSBM-23696]
  - fuse: fail lost-lease notification if async_read (Maxim Patlasov)
  - fuse: skip waiting for fuse writeback (Maxim Patlasov)
  - fuse: prevent queueing new requests after (Maxim Patlasov)
  - fuse: kill requests on "lost-lease" event (Maxim Patlasov)
  - fuse: add "killed" bit to fuse request (Maxim Patlasov)
  - fuse: add page_cache bit to fuse request (Maxim Patlasov)
  - fuse: the list of all opened files (Maxim Patlasov)
  - fuse: do not flush files opened ro (Maxim Patlasov) [PSBM-20562]
  - fuse: add mount option to disable close_wait (Maxim Patlasov) [PSBM-131961]
  - fuse: make umount synchronous (Maxim Patlasov) [PSBM-19305]
  - fuse: print initialized flag in conn info (Maxim Patlasov)
  - fuse: extend report on pstorage errors (Maxim Patlasov)
  - fuse: do not use RELEASE on directory (Maxim Patlasov) [PSBM-17195]
  - fuse: add missed fuse_file_put() (Maxim Patlasov)
  - fuse: cleanups in fuse writeback (Maxim Patlasov) [PSBM-16442 PSBM-16442]
  - fuse: implement invalidate_files notification (Maxim Patlasov) [PSBM-16105]
  - fuse: optimize fuse_vma_close() (Maxim Patlasov)
  - fuse: account directio requests into ioacct (Maxim Patlasov)
  - fuse: i_size to be updated on first open (Maxim Patlasov) [PSBM-13636]
  - fuse: reimplement synchronous close (Maxim Patlasov) [PSBM-47206 PSBM-131961]
  - fuse: Wait for real writeback to finish on file (Maxim Patlasov)
  - fuse: some fairness in handling writeback (Maxim Patlasov)
  - fuse: Fuse ctl file with connection info (Maxim Patlasov)
  - fuse: Show open files in fusectl (Maxim Patlasov)
  - fuse: Show active requests in fusectl files (Maxim Patlasov)
  - fuse: fuse-ve-odirect sysctl (Maxim Patlasov) [PSBM-18167]
  - fuse: direct_enable mount option (Maxim Patlasov) [PSBM-18167]
  - fuse: Turn writeback cache on (Maxim V. Patlasov)
  - ms/nfs4: skip locks_lock_inode_wait() in nfs4_locku_done if FL_ACCESS is set (Vasily Averin) [PSBM-136295]
  - net: hide high-order-request warning in pskb_expand_head() (Vasily Averin) [PSBM-136733]
  - net/drivers/slip: disable high-order allocations warnings in slip driver (Vasily Averin) [PSBM-125232]
  - ms/fuse: async processing of F_SETLK with FL_SLEEP flag (Vasily Averin) [PSBM-136851]
  - ms/fuse: drop obsoleted and incorrect restriction in fuse_setlk (Vasily Averin) [PSBM-136851]
  - net: export "net/core/xfrm*" sysctls for containers (Nikita Yushchenko) [PSBM-132916]
  - ms/dccp: don't duplicate ccid when cloning dccp sock (Lin, Zhenpeng) [PSBM-121326]
  - rebase_logs: Add rebase logs for 4.18.0-240.1.1.el8 to 4.18.0-305.3.1.el8 rebase (Konstantin Khorenko) [PSBM-131158]
  - FD: fs: per-CT sync behavior management (Konstantin Khorenko) [PSBM-44684]
  - ve/fs: per-CT sync behavior management (Nikita Yushchenko) [PSBM-44684 PSBM-136885]
  - ve/fs/sync: introduce argument struct for helper routines (Nikita Yushchenko) [PSBM-44684]
  - ve/fs: introduce is_sb_ve_accessible() (Nikita Yushchenko) [PSBM-44684]
  - ve/fs: support per-CT disable of filesystem sync operations (Nikita Yushchenko) [PSBM-44684]
  - dm-qcow2: Add fault injection (Kirill Tkhai) [PSBM-132050]
  - dm-qcow2: Change call_rw_iter() parameter (Kirill Tkhai)
  - dm-qcow2: Move qcow2_get_img_name() and qcow2_get_img_fd() out of mutex (Kirill Tkhai)
  - dm-qcow2: Make qcow2_get_img() use qcow2_ref_inc() (Kirill Tkhai)
  - dm_qcow2: Kill nr_images and introduce img_id instead (Kirill Tkhai)
  - dm-qcow2: Extract similar code from qcow2_get_img_name() and qcow2_get_img_fd() (Kirill Tkhai)
  - dm-qcow2: Return empty string instead of -ENOENT in qcow2_get_fd() (Kirill Tkhai)
  - dm-ploop: Add check to process_update_delta_index() (Kirill Tkhai) [PSBM-129477]
  - dm-ploop: Rename size_in_clus (Kirill Tkhai)
  - ms/tracing: Don't use out-of-sync va_list in event printing (Nikita Yushchenko) [PSBM-135327]
  - configs: Enable e1000 module build (Konstantin Khorenko) [PSBM-135526]
  - ve/acct: Allow process accounting in containers (Evgenii Shatokhin) [PSBM-40587]
  - dm-qcow2: Temporary disable dirty bit check (Kirill Tkhai) [PSBM-136244 PSBM-136216]
  - dm-qcow2: Return empty string instead of -ENOENT in qcow2_get_img_name() (Kirill Tkhai) [PSBM-136241]
  - ve/netfilter: Add autoloading of sockopt modules (Nikita Yushchenko) [PSBM-28910]
  - dm-ploop: Fix obsolete comments (Kirill Tkhai)
  - dm-ploop: Remove unused code (Kirill Tkhai)
  - dm-qcow2: Extend status line - show qcow2 version and cluster size (Kirill Tkhai)
  - ovl: replace capable by ve_capable for indexing feature (Alexander Mikhalitsyn) [PSBM-135561]
  - ve: cgroup -- don't use atomic lock in the sleepable context (Cyrill Gorcunov) [PSBM-135460]
  - dm-qcow2: Do not check for dirty bit if mount is RO (Kirill Tkhai)
  - dm-qcow2: Do not fail .ctr in case dirty bit is set (Kirill Tkhai) [PSBM-128992]
  - xfs: Check alloc_file() results in xfs_open_balloon() (Kirill Tkhai)
  - ext4: Check alloc_file() results in ext4_open_balloon() (Kirill Tkhai)
  - dm-ploop: Remove tracking code (Kirill Tkhai)
  - dm-tracking: Do not return EAGAIN in case of there is no changed clu (Kirill Tkhai)
  - dm-tracking: Track request after it completed (Kirill Tkhai)
  - veth: Functionality to disable MAC changing and MAC filtering feature (Konstantin Khorenko) [PSBM-135200 PSBM-139005]
  - ms/prctl: allow to setup brk for et_dyn executables (Cyrill Gorcunov) [PSBM-125448 PSBM-134962]
  - drivers: build "isci" SAS controller driver (Konstantin Khorenko) [PSBM-135216]
  - ploop: simplify ploop_status (Cyrill Gorcunov)
  - ploop: Provide more info about ENOSPC (Kirill Tkhai) [PSBM-135007]
  - ve/cgroup: hide non-virtualized cgroups in container (Pavel Tikhomirov) [PSBM-134994 PSBM-139099]
  - dm-ploop: Fix usage of bio_vec on stack (Kirill Tkhai) [PSBM-135137]
  - mm: tcache: handle not initialized tcache properly in tcache_shrink_count (Alexander Mikhalitsyn) [PSBM-135139]
  - binfmt_misc: fix mount after umount in CT (Nikita Yushchenko) [PSBM-133968]
  - xfs: Provide a balloon nipple for management (Kirill Tkhai) [PSBM-133811]
  - xfs: Don't show the active balloon to user (Kirill Tkhai) [PSBM-133811]
  - xfs: Never show balloon in readdir results (Kirill Tkhai) [PSBM-133811]
  - xfs: Teach the fs where the balloon inode is (Kirill Tkhai) [PSBM-133811]
  - ve/cgroup: Set release_agent_path for root cgroups separately (Konstantin Khorenko) [PSBM-83887 PSBM-108270 PSBM-134002 PSBM-135190]
  - ve/cgroup: Private per-cgroup-root data container (Valeriy Vdovin) [PSBM-83887 PSBM-108270 PSBM-134002]
  - ve/cgroup: Move release_agent from system_wq to per-ve workqueues (Valeriy Vdovin) [PSBM-83887 PSBM-108270 PSBM-134002 PSBM-136884]
  - ve/cgroup: Implement per-ve workqueue (Valeriy Vdovin) [PSBM-83887 PSBM-108270 PSBM-134002]
  - cgroup/cfs: added 'activate' option to cgroup_add_file (Valeriy Vdovin) [PSBM-134002]
  - mnt_ns: introduce global list of mount namespaces for debug (Konstantin Khorenko) [PSBM-80869 PSBM-127837]
  - scsi: aacraid: resurrect correct arc ctrl checks for Series-6 (Konstantin Khorenko) [PSBM-95736 PSBM-127846]
  - ve/time/ntp: allow CT ntp adjustment time tuning under VE_FEATURE_TIME feature (Konstantin Khorenko) [PSBM-94635 PSBM-127846]
  - ve/time: introduce CT feature to allow setting date/time (Konstantin Khorenko) [PSBM-94635 PSBM-127846]
  - ve/capability: introduce capable() wrapper which honors CT features (Konstantin Khorenko) [PSBM-94635 PSBM-127846]
  - mm: fix hanging shrinker management on long do_shrink_slab (Pavel Tikhomirov) [PSBM-99181 VSTOR-30477 PSBM-99181 PSBM-99181 PSBM-153973]
  - mm/vmscan: add cond_resched() to loop in shrink_slab_memcg() (Andrey Ryabinin) [PSBM-125095]
  - ve/cpu: handle sysfs attributes for CTs (Jan Dakinevich) [PSBM-91808]
  - fs/super: don't destroy super_block in case of leaked inodes (Andrey Ryabinin) [PSBM-95177]
  - mempolicy: prohibit all NUMA API syscalls in VE (Kirill Tkhai) [PSBM-92583 PSBM-127854]
  - mm: Add and use batched version of __tlb_remove_table() (Andrey Ryabinin) [PSBM-101300 PSBM-127854]
  - ve/pid: Export kernel.pid_max via ve cgroup (Pavel Tikhomirov) [PSBM-48397 PSBM-102629]
  - pid_ns: Virtualize pid_max (Kirill Tkhai) [PSBM-127857 PSBM-121530 PSBM-127857 PSBM-135461 PSBM-140308 PSBM-140308]
  - DMA-API: exceeded 7 overlapping mappings of cacheline share (Michael S. Tsirkin) [PSBM-93919 PSBM-127846]
  - commoncap: relax setxattr and removxattr checks (Andrey Zhadchenko) [PSBM-122071]
  - ve/memcg: Account some swapped memory as used in CT in /proc/meminfo (Andrey Ryabinin) [PSBM-102266 PSBM-127850]
  - ve/meminfo: show "MemAvailable: ..." line in CT's meminfo (Jan Dakinevich) [PSBM-90190]
  - fs: Export symbols replace_fd() and create_pipe_files() (Sergey Lysanov) [VSTOR-10187]
  - net/ip6ip: Consider VE_FEATURE_IPIP on new net creation (Kirill Gorkunov) [PSBM-84241]
  - net/gre: Consider VE_FEATURE_IPGRE on new net creation (Kirill Gorkunov) [PSBM-84241]
  - kvm: move actual VM memory shrink out of kvm_lock (Konstantin Khorenko) [PSBM-95077 PSBM-95077 PSBM-100474 PSBM-96262 PSBM-127849]
  - kvm: move VMs which we skip during shrink to vm_list tail (Konstantin Khorenko) [PSBM-95077 PSBM-95077 PSBM-127849]
  - kvm/x86: extend info on emualation failure (Denis Plotnikov) [PSBM-99553 PSBM-127849]
  - kvm/x86: add log printing on emulation failure (Denis Plotnikov) [PSBM-95474 PSBM-68018 PSBM-127849]
  - net/skbuff: WARN if kmalloc_reserve() fails to allocate memory. (Andrey Ryabinin) [VSTOR-21390 PSBM-127844]
  - net/skbuff: Don't waste memory reserves (Andrey Ryabinin) [VSTOR-21390 PSBM-127844]
  - ve/net/neighbour: per-ct limit for neighbour entries (Vasily Averin) [PSBM-87155 PSBM-127837 PSBM-87155 PSBM-153199 VSTOR-81287 PSBM-153199 VSTOR-81287]
  - ve/mount: allow pseudosuper to temporary exceed the container limit (Pavel Tikhomirov) [PSBM-86511 PSBM-127837]
  - net: export "net/*/neigh/*/*" sysctls for Container (Vasily Averin) [PSBM-92107]
  - net: Mark conntrack users in nftables (Kirill Tkhai) [PSBM-51050 PSBM-127783]
  - net: Mark conntrack users in xtables (Kirill Tkhai) [PSBM-51050 PSBM-54823 PSBM-54823 PSBM-127783]
  - net: Primitives to enable conntrack allocation (Stanislav Kinsburskiy) [PSBM-51050 PSBM-54823 PSBM-56500 PSBM-127783]
  - ve/netfilter: Check for permittions while looking for target and match (Kirill Tkhai) [PSBM-28910 PSBM-127783]
  - ve/netfilter: Implement pernet net->ct.max / virtualize "nf_conntrack_max" sysctl (Konstantin Khorenko) [PSBM-18322 PSBM-127783 PSBM-40044 PSBM-127783]
  - ve/netfilter: Implement pernet expect_max / virtualize "net.netfilter.nf_conntrack_expect_max" sysctl (Konstantin Khorenko) [PSBM-18322 PSBM-127783]
  - ve/netfilter: Send iptables/netfilter kernel error messages to Containers (Stanislav Kinsburskiy) [PSBM-18322 PSBM-39077 PSBM-127783]
  - xfs: Allow to mount XFS in non-init userns (Konstantin Khorenko) [PSBM-72401 PSBM-86369 PSBM-127830]
  - net: export net/core/somaxconn sysctl for unprivileged users (Jan Dakinevich) [PSBM-91032 PSBM-128772]
  - ve/device_cgroup: Show all devices allowed in ct to fool docker (Pavel Tikhomirov) [PSBM-123668 PSBM-123630 PSBM-123743 PSBM-131253]
  - ve/device_cgroup: Introduce "devices.extra_list" cgroup file (Konstantin Khorenko) [PSBM-123743]
  - fence-watchdog: Print alive messages (Pavel Tikhomirov)
  - mm/page_alloc: add latency to the page_alloc tracepoint (Andrey Ryabinin)
  - /proc/vz/latency: Show max latency in 2 min instead of 5sec. (Andrey Ryabinin)
  - /proc/vz/latency: distinguish atomic allocations in irq from in task atomics. (Andrey Ryabinin) [PSBM-87797]
  - /proc/<pid>/vz_latency: Add scheduling stats (Andrey Ryabinin) [PSBM-87797]
  - /proc/<pid>/vz_latency: Show maximal allocation latency in the last 2min. (Andrey Ryabinin) [PSBM-87797 PSBM-93675 PSBM-127844]
  - ve/page_alloc, kstat: account allocation latencies per-task and per-thread (Andrey Ryabinin) [PSBM-81395 PSBM-81395 PSBM-81395 PSBM-87797]
  - core: Add glob_kstat, percpu kstat and account mm stat (Kirill Tkhai) [PSBM-33650 PSBM-127780 VSTOR-16659 VSTOR-16659 VSTOR-19040 PSBM-81395 PSBM-127780]
  - ploop: Introduce option "off=" to cut beginning of device (Kirill Tkhai) [PSBM-132445 PSBM-134936]
  - mm/backing-dev: associate writeback with correct blkcg (Andrey Zhadchenko) [PSBM-131253]
  - kernel/cgroup: implement cgroup_get_e_ve_css (Andrey Zhadchenko) [PSBM-131253]
  - x86/cpu: init_cpu_flags -- use raw spinlock (Cyrill Gorcunov) [PSBM-134761]
  - sched/ve: calc_load_ve -- use raw spinlock (Cyrill Gorcunov) [PSBM-134756]
  - ve/cgroup: temporary ignore misc cgroup to let vzctl start container (Pavel Tikhomirov) [PSBM-134002]
  - ve: use rcu_dereference for ve_ns in ve_get_init_css (Kirill Tkhai) [PSBM-134002]
  - cgroup: split cgroup_get_ve_root1 into css and cgroup version (Pavel Tikhomirov) [PSBM-134002]
  - ve/cgroup: Add ve_owner field to cgroup (Valeriy Vdovin) [PSBM-134002]
  - ve/cgroup: Skip non-virtualized roots in cgroup_{,un}mark_ve_roots() (Valeriy Vdovin) [PSBM-134002]
  - ve/fs/inotify: do not impose limit on the number of instances by default (Vladimir Davydov) [PSBM-39048 PSBM-131634]
  - cgroup/net_prio: virtualize ifpriomap per-ve (Pavel Tikhomirov) [PSBM-123766 PSBM-123766]
  - ve: get_curr_ve: first try getting ve with rcu lock (Pavel Tikhomirov) [PSBM-123766 PSBM-123766]
  - ve: add get_curr_ve helper (Pavel Tikhomirov) [PSBM-123766 PSBM-123766]
  - shm: skip shm_destroy if task IPC namespace was changed (Alexander Mikhalitsyn) [PSBM-131142]
  - ve/proc/block: show /proc/diskstats inside a Container (Vasily Averin) [PSBM-90491 PSBM-92107]
  - scsi: ratelimit messages about rejected I/O (Konstantin Khorenko) [PSBM-100118 PSBM-127849]
  - ve/bridge: handle netlink messages AF_BRIDGE / RTM_[GSD]ETLINK sent from inside a Container (Vasily Averin) [PSBM-92107]
  - openvswitch: allow to create ovs bridges inside Containers (Vasily Averin) [PSBM-92107]
  - ms/sock: allow reading and changing sk_userlocks with setsockopt (Pavel Tikhomirov) [PSBM-131580]
  - shmem/ve: virtualize tmpfs default size (Pavel Tikhomirov) [PSBM-127785 PSBM-130518]
  - ve/sysfs: relax sanity check for ns equality in kernfs_find_ns() (Konstantin Khorenko) [PSBM-82259 PSBM-83607 PSBM-127798]
  - ve: prohibit opening proc/self/exe from VE for VD_VE_ENTER_TASK (Pavel Tikhomirov) [PSBM-91689 PSBM-91042]
  - ve/memcg: Virtualize /proc/vmstat view inside CT (Pavel Tikhomirov) [PSBM-127780 PSBM-131992 PSBM-131992 PSBM-132893 PSBM-130829]
  - ve/devtmpfs: lightweight virtualization (Stanislav Kinsburskiy) [PSBM-35077 PSBM-35146 PSBM-131158]
  - ve/kmod/whitelist: Make fib modules autoloadable from CT (Pavel Tikhomirov) [PSBM-125002 PSBM-125002]
  - ve/kmod/whitelist: make nfnetlink_log autoloadable upon request from a CT (Pavel Tikhomirov) [PSBM-121652]
  - ve/kmod/whitelist: Enable autoload for iptables security tables from inside CT (Vasily Averin) [PSBM-98212]
  - ve/kmod/whitelist: Allow "nft_compat" module autoload from inside a Container (Konstantin Khorenko) [PSBM-98948]
  - ve/kmod/whitelist: Allow nf_tables module autoloading on request from CT (Andrey Ryabinin) [PSBM-98211]
  - ve/kmod/whitelist: Allow ts_kmp module autoloading (Kirill Tkhai) [PSBM-97729]
  - ve/kmod/whitelist: Allow conntrack nft-helper-* modules autoloading (Kirill Tkhai) [PSBM-90319]
  - ve/kmod/whitelist: Allow nfnetlink_queue module autoload from CT (Konstantin Khorenko) [PSBM-92694]
  - ve/kmod/whitelist: Allow NFS modules autoload in Containers (Stanislav Kinsburskiy) [PSBM-58178]
  - ve/kmod/whitelist: Allow ip6tables_raw modules autoload upon request from CT (Andrey Ryabinin) [PSBM-50548]
  - ve/kmod/whitelist: Allow netfilter/ipset modules autoload from inside a CT (Pavel Tikhomirov) [PSBM-46102]
  - ve/kmod/whitelist: Allow IPVS modules autoload in CT (Pavel Tikhomirov) [PSBM-63883]
  - ve/kmod/whitelist: Enable vxlan module autoload from inside a Container (Pavel Tikhomirov) [PSBM-53629]
  - ve/kmod/whitelist: Allow dummy module autoloading (Pavel Tikhomirov) [PSBM-43329 PSBM-52061]
  - ve/kmod/whitelist: Add modules to whitelist for c/r sake (Cyrill Gorcunov) [PSBM-46789 PSBM-46789 PSBM-47359 PSBM-127787]
  - ve/kmod/whitelist: List of allowed to autoload in CT modules (non-netfilters) (Konstantin Khorenko) [PSBM-127787]
  - ve/kmod/whitelist: Allow iptables/netfilter modules for autoload from CT (Konstantin Khorenko) [PSBM-99406 PSBM-66435 PSBM-99536 PSBM-127787]
  - ve/kmod: Honor modprobe blacklist on indirect modules autoload from CT (Konstantin Khorenko) [PSBM-127787]
  - ve/kmod/whitelist: Infrustructure for list of modules to autoload from CT (Konstantin Khorenko) [PSBM-127787]
  - ve/sysctl/kmod: Introduce tweak to allow indirect modules load from CT (Konstantin Khorenko) [PSBM-127787]
  - vtty: update termios settings and fix hung (Cyrill Gorunov) [PSBM-134658]
  - ve/vtty: Don't free console mapping until no clients left (Cyrill Gorcunov) [PSBM-39463 PSBM-132299]
  - ve/vtty: Don't close unread master peer if slave is nonzero (Cyrill Gorcunov) [PSBM-41985 PSBM-41672 PSBM-132299]
  - ve/vtty: Make indices to match pcs6 scheme (Cyrill Gorcunov) [PSBM-40088 PSBM-132299]
  - ve/vtty: Don't zap termios fields on slave peer (Cyrill Gorcunov) [PSBM-41057 PSBM-132299]
  - ve/tty: vt -- Implement per VE support for console and terminals (Cyrill Gorcunov) [PSBM-34533 PSBM-34532 PSBM-34107 PSBM-32686 PSBM-32685 PSBM-80049 PSBM-132299 PSBM-132299 PSBM-132299 PSBM-40740 PSBM-132299 PSBM-132299]
  - ve/tty: TIOSAK Secure Attention Key ioctl (Konstantin Khlebnikov) [PSBM-11881]
  - ve/tty: Provide interface for current tty inheritance (Cyrill Gorcunov) [PSBM-76490 PSBM-81687 PSBM-127797]
  - ve/kbd: add file kbd_bind in sysfs, which allow unbind keyboard from tty (v2) (Andrey Vagin)
  - connector: add VE SS hook (Stanislav Kinsburskiy) [PSBM-60227]
  - connector: take VE from socket upon callback (Stanislav Kinsburskiy)
  - connector: containerize "connector" proc entry (Stanislav Kinsburskiy)
  - proc connector: send events to both VEs if not in VE#0 (Stanislav Kinsburskiy)
  - proc connector: use per-ve netlink sender helper (Stanislav Kinsburskiy)
  - proc connector: take namespaces from VE (Stanislav Kinsburskiy) [PSBM-130894]
  - proc connector: pass VE to event fillers (Stanislav Kinsburskiy)
  - proc connector: take number of listeners and per-cpu conters from VE (Stanislav Kinsburskiy)
  - proc connector: call proc-related init and fini routines explicitly (Stanislav Kinsburskiy)
  - proc connector: add per-ve init and fini foutines (Stanislav Kinsburskiy)
  - proc connector: add pid namespace awareness (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exit event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for coredump event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for comm event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for ptrace event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for sid event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for id event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for exec event (Stanislav Kinsburskiy)
  - proc connector: use generic event helper for fork event (Stanislav Kinsburskiy)
  - proc connector: generic proc_event_connector() helper introduced (Stanislav Kinsburskiy)
  - connector: take cn_already_initialized from VE (Stanislav Kinsburskiy)
  - connector: per-ve helpers intoruduced (Stanislav Kinsburskiy)
  - connector: use device stored in VE (Stanislav Kinsburskiy)
  - connector: per-ve init and fini helpers introduced (Stanislav Kinsburskiy) [PSBM-93640]
  - connector: introduce VE-aware get_cdev() helper (Stanislav Kinsburskiy)
  - connector: store all private data on VE structure (Stanislav Kinsburskiy)
  - net/teql: disable "True" (or "trivial") link equalizer inside a CT (Konstantin Khorenko) [PSBM-127780]
  - ve/cgroup: Hide ve cgroup in Containers (Pavel Tikhomirov) [PSBM-80421]
  - drivers/igb: increase link detection timeout up to 5 sec (Konstantin Khorenko) [VSTOR-14627 PSBM-95074 VSTOR-14627]
  - drivers/bnx2x: Limit setting of the max mtu (Andrey Ryabinin) [PSBM-77016]
  - x86/cpuid_fault: Log table updates (Valeriy Vdovin) [PSBM-84029 PSBM-126172]
  - x86/cpuid_fault: Increase max count of cpuid overrides (Valeriy Vdovin) [PSBM-126172]
  - pidns: add proc mount option 'hidepidns=0|1' (Konstantin Khlebnikov) [PSBM-127782]
  - ve/fs/files: Shrink big fdtable on close in is_pseudosuper mode (Kirill Tkhai) [PSBM-78827 PSBM-82984]
  - ve/fs/files: Add fdtable_align() helper (Kirill Tkhai) [PSBM-78827]
  - ve/fs/files: Add new argument to expand_files() (Kirill Tkhai) [PSBM-78827]
  - ve/fs: Allow mount fs in init userns if it's mounted in another userns (Konstantin Khorenko) [PSBM-68599 PSBM-128132]
  - fs: FIEMAP should sync only required range with FIEMAP_FLAG_SYNC (Maxim Patlasov) [PSBM-68226 PSBM-68454 PSBM-127782 PSBM-137869]
  - ve/fs: namespace -- Don't fail on permissions if @ve->devmnt_list is empty (Cyrill Gorcunov) [PSBM-48188 PSBM-58329 PSBM-127782]
  - ve/fs: namespace -- Ignore device permissions during restore (Cyrill Gorcunov) [PSBM-48188 PSBM-127782]
  - ve/fs/ioprio: Confine ioprio_{set, get}(IOPRIO_WHO_USER) to current ve (Vladimir Davydov) [PSBM-127782]
  - fs: Lower ioprio in case of ioprio_set() called from CT (Kirill Tkhai) [PSBM-127782]
  - ms/fs: Revert "Make super_blocks and sb_lock static" (Alexander Mikhalitsyn) [PSBM-127782]
  - ve/fs: Export fs.aio-max-nr via ve cgroup (Cyrill Gorcunov) [PSBM-45646]
  - ve/net/sit: Enable SIT devices in Containers (Vasily Averin) [PSBM-127315]
  - ve/net/ipv6 tunnels: Enable GRE netdevice register inside container (Vasily Averin) [PSBM-127315]
  - xfs: Notify userspace about events (Kirill Tkhai) [PSBM-135476]
  - xfs: Introduce xfs_send_uevent() (Kirill Tkhai) [PSBM-135476]
  - xfs: Zero uuid if it's not valid (Kirill Tkhai) [PSBM-135476]
  - fs: Move s_err_event_sent() and s_abrt_event_sent() to super_block (Kirill Tkhai) [PSBM-135476]
  - fs: Move and make generic ext4_send_uevent_work() (Kirill Tkhai) [PSBM-135476]
  - ext4: Simplify UUID dereference in ext4_send_uevent_work() (Kirill Tkhai) [PSBM-135476]
  - ext4: Kill ext4_uuid_valid() (Kirill Tkhai) [PSBM-135476]
  - fs: add kobj into fs_uevent (Kirill Tkhai) [PSBM-135476]
  - fs: Introduce fs_events_wq to use instead ext4's rsv_conversion_wq (Kirill Tkhai) [PSBM-135476]
  - fs: Make ext4_event_type more generic (Kirill Tkhai) [PSBM-135476]
  - ext4: send abort uevent on ext4 journal abort (Dmitry Monakhov)
  - ext4: add generic uevent infrastructure (Dmitry Monakhov)
  - ms/Revert "ext4: simplify kobject usage" (Konstantin Khorenko) [PSBM-127422]
  - ext4: add mfsync support (Dmitry Monakhov) [PSBM-18567 PSBM-34909 PSBM-34910]
  - jbd2: raid amnesia protection for the journal (Dmitry Monakhov) [PSBM-15484]
  - ext4: make data=writeback mode safe (Kirill Tkhai)
  - jbd2: make shure that we do not miss aborted state (Dmitry Monakhov)
  - ext4: Fix error handling after filesystem abort (Dmitry Monakhov)
  - ve/ext3: treat panic_on_errors as remount-ro_on_errors in CTs (Kirill Tkhai)
  - ext4: don't iterate over sbi->s_es_list more than the number of elements (Konstantin Khorenko) [PSBM-83335 PSBM-127798]
  - Kconfig.openvz: force CGROUP_PERF if compiling VZ Containers code (Konstantin Khorenko) [PSBM-51360]
  - ve/fs/namespace: allow submounts in non-init userns (Konstantin Khorenko) [PSBM-86277 PSBM-127234 PSBM-102629]
  - netlink: add an option to set sk->err from userspace (Andrey Zhadchenko) [PSBM-120976]
  - netlink: add an ability to restore messages in a receive queue (Andrey Vagin) [PSBM-28386 PSBM-101289]
  - netlink: allow to set peeking offset for sockets (Stanislav Kinsburskiy) [PSBM-28386 PSBM-48484 PSBM-28386 PSBM-57921 PSBM-101289]
  - ms/block, bfq: add weight symlink to the bfq.weight cgroup parameter (Angelo Ruocco) [PSBM-101019]
  - ms/cgroup: let a symlink too be created with a cftype file (Angelo Ruocco) [PSBM-101019]
  - ve/aio: Add a handle to checkpoint/restore AIO context (Stanislav Kinsburskiy) [PSBM-42488 PSBM-41425 PSBM-42488 PSBM-42488 PSBM-42488 PSBM-123159 PSBM-128710]
  - ve/fs/aio: aio_nr & aio_max_nr variables virtualization (Stanislav Kinsburskiy) [PSBM-29017 PSBM-47209 PSBM-47209 PSBM-123159]
  - ve: allow writing to features in pseudosuper state (Pavel Tikhomirov) [PSBM-120728]
  - vecalls: Introduce VZCTL_GET_CPU_STAT ioctl (Konstantin Khorenko)
  - ve/net/core: allow to call setsockopt(SO_RCVBUFFORCE) from Containers (Konstantin Khorenko) [PSBM-121791]
  - ve/net/core: allow to call setsockopt(SO_SNDBUFFORCE) from Containers (Konstantin Khorenko) [PSBM-98794]
  - x86: don't enable cpuid faults if /proc/vz/cpuid_override unused #PSBM-121823 (Andrey Ryabinin) [PSBM-121823 PSBM-121823]
  - x86, cpuinfo: Fix race on parallel /proc/cpuinfo read #PSBM-121823 (Andrey Ryabinin) [PSBM-121823 PSBM-121823]
  - x86: Show vcpu cpuflags in cpuinfo (Kirill Tkhai) [PSBM-121823]
  - x86: make ARCH_[SET|GET]_CPUID friends with /proc/vz/cpuid_override (Andrey Ryabinin) [PSBM-121823]
  - arch/x86: introduce cpuid override (Vladimir Davydov) [PSBM-28682 PSBM-33638 PSBM-121823]
  - sched: show CPU stats for a cgroup in cpu.proc.stat file (Evgenii Shatokhin) [PSBM-101155]
  - sched/ve: Do not show loadavg in child VE cpu cgroups (Kirill Tkhai) [PSBM-81572 PSBM-127797]
  - sched: Count loadavg under rq::lock in calc_load_nohz_start() (Kirill Tkhai) [PSBM-68052 PSBM-127780]
  - ve/proc/net/nr_cpus: Cut lines in /proc/net/softnet_stat to number of vcpus in CT (Pavel Tikhomirov) [PSBM-73238 PSBM-127794]
  - sched/stat: account forks per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113]
  - ve/vestat: Introduce /proc/vz/vestat (Konstantin Khorenko)
  - ve/proc/stat: Introduce CPUTIME_USED field in cpustat statistic (Konstantin Khorenko)
  - ve/time/stat: idle time virtualization in /proc/loadavg (Konstantin Khorenko)
  - ve/sched/stat: Introduce handler for getting CT cpu statistics (Konstantin Khorenko)
  - sched/stat: account ctxsw per task group (Vladimir Davydov) [PSBM-18113 PSBM-18113 PSBM-33642 PSBM-127780]
  - sched: Fix task_group "iowait_sum" statistic accounting (Konstantin Khorenko)
  - ve/proc/stat: Wire virtualized /proc/stat handler (Konstantin Khorenko)
  - ve/sched/stat: Introduce functions to calculate vcpustat data (Konstantin Khorenko)
  - ve: uninline ve_get_monotonic() and ve_get_uptime() (Nikita Yushchenko)
  - ve/sched/stat: Add basic infrastructure for vcpu statistics (Konstantin Khorenko)
  - kernel/stat: Introduce kernel_cpustat operation wrappers (Konstantin Khorenko)
  - ext4: Provide a balloon nipple for management (Konstantin Khorenko) [PSBM-41222 PSBM-129392]
  - fs: Revert ee1904ba44bd "make alloc_file() static" (Kirill Tkhai)
  - ext4: Don't show the active balloon to user (Maxim V. Patlasov)
  - ext4: Teach statfs to report reduced disk usage (Maxim V. Patlasov)
  - ve/fs: Allow to mount ext4 in top CT userns (Kirill Tkhai) [PSBM-40100]
  - ext4: Teach the fs where the balloon inode is (Maxim V. Patlasov)
  - ve/coredump: virtualize kernel.core_pattern sysctl (Pavel Tikhomirov) [PSBM-43596 PSBM-106216]
  - ve/prctl_set_mm: allow setting exe link while unprivileged for spfs (Pavel Tikhomirov) [PSBM-26967 PSBM-50867 PSBM-133993]
  - ve/module: export sysfs dentries in containers (Stanislav Kinsburskiy) [PSBM-63892]
  - ve/sysfs: generic sysfs_set_def_perms() helper introduced (Stanislav Kinsburskiy)
  - ve/kernfs: export kernfs_perms_set() helper (Stanislav Kinsburskiy)
  - ve/module: hide module refcounts from container (Andrey Ryabinin) [PSBM-57497]
  - ve: Virtualize sysinfo (Kirill Tkhai) [PSBM-134393 PSBM-134393]
  - ve/time: Use ve_relative_clock in times() syscall and /proc/[pid]/stat (Kirill Tkhai) [PSBM-22925 PSBM-22925 PSBM-33650 PSBM-134393 PSBM-134393]
  - ve: Add interface for ve::clock_[monotonic|bootbased] adjustment (Cyrill Gorcunov) [PSBM-41311 PSBM-41406 PSBM-134393 PSBM-134393]
  - ve/proc: Added separate start time field to task_struct to show in container (Valeriy Vdovin) [PSBM-64123 PSBM-134393 PSBM-134393]
  - ve/time: remove our per-ve times in favor of mainstream time-namespaces (Pavel Tikhomirov) [PSBM-134393 PSBM-134393 PSBM-134393]
  - trusted/ve/mmap: Protect from unsecure library load from CT image (Valeriy Vdovin) [PSBM-129741]
  - trusted/ve/exec: Allow trusted exec change both on boot and on running system (Pavel Tikhomirov) [PSBM-98702 PSBM-129741]
  - trusted/ve/fs/exec: Send SIGSEGV to a process trying to execute untrusted files (Pavel Tikhomirov) [PSBM-98702 PSBM-129741]
  - trusted/ve/fs/exec: Don't allow a privileged user to execute untrusted files (Pavel Tikhomirov) [PSBM-98094 PSBM-129741]
  - trusted/block: Added trusted flag to struct genhd (Valeriy Vdovin) [PSBM-129741]
  - ve/fs: add per-VE limit of mount points (Stanislav Kinsburskiy) [PSBM-34438 PSBM-42825 PSBM-42825 PSBM-69880 PSBM-69880 PSBM-69880 PSBM-127782]
  - ve/vfs: introduce "fs.odirect_enable" sysctl and disable it by default (Konstantin Khorenko) [PSBM-53458 PSBM-68005 PSBM-68656 PSBM-100671 PSBM-104338 PSBM-17903 PSBM-17157 PSBM-34286 PSBM-34285 PSBM-34286 PSBM-156472]
  - ovl: make uuid=off compatible with overlayfs created without it (Pavel Tikhomirov) [PSBM-123536 PSBM-123536]
  - overlayfs: relax capable check for trusted prefix xattrs (Andrey Zhadchenko) [PSBM-124532 PSBM-127858]
  - configs: Set overlayfs nfs_export option to true (Valeriy Vdovin) [PSBM-104961]
  - configs: add/enable options for overlayfs paths absolute resolution (Konstantin Khorenko) [PSBM-58614]
  - overlayfs: add mnt_id paths options (Alexander Mikhalitsyn) [PSBM-58614 PSBM-123508 PSBM-129333]
  - overlayfs: add dynamic path resolving in mount options (Alexander Mikhalitsyn) [PSBM-58614 PSBM-123508 PSBM-129333]
  - kernfs/ve: ignore kernfs 've_perms_map' in cgroups. (Valeriy.Vdovin) [PSBM-104455]
  - ve/kernfs: fix lookup for kernfs superblock (Konstantin Khorenko) [PSBM-85052 PSBM-103433]
  - ve/binfmt_misc: destroy all nodes on ve stop (Valeriy Vdovin) [PSBM-39154]
  - ve/fs/binfmt: virtualization (Valeriy Vdovin) [PSBM-39154 PSBM-39154 PSBM-17903 PSBM-40100 PSBM-47737 PSBM-85685 PSBM-85052 PSBM-103973 PSBM-132709 PSBM-131994]
  - ve/fs/binfmt: move all internal data to structure (Valeriy Vdovin) [PSBM-103973]
  - mnt: allow to add a mount into an existing group (Andrei Vagin) [PSBM-58617 PSBM-58617]
  - tty: Use RCU read lock to iterate tasks and threads in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - tty: Avoid threads files iterations in __do_SAK() (Kirill Tkhai) [PSBM-80340]
  - ve/mm: print OOM info to VE log (Vladimir Davydov)
  - userns: associate user_struct with the user_namespace (Andrey Ryabinin)
  - ve/fs/devmnt: process mount options (Kirill Tkhai) [PSBM-32273 PSBM-40075 PSBM-108196 PSBM-80743 PSBM-127837]
  - ve/devmnt: Introduce ve::devmnt list #PSBM-108196 (Kirill Tkhai) [PSBM-32273 PSBM-34291 PSBM-34291 PSBM-108196 PSBM-108196]
  - ve: patch linux_version_code in vdso (Andrey Ryabinin) [PSBM-121668]
  - ia32: add 32-bit vdso virtualization. (Andrey Ryabinin) [PSBM-121668]
  - ve, x86_64: add per-ve vdso mapping. (Andrey Ryabinin) [PSBM-121668 PSBM-131158 PSBM-123551]
  - loadavg: Fix handling of cfs_rq->nr_unint values (Nikolay Borisov) [PSBM-143355]
  - vzstat: Add kstat_glob.nr_unint_avg real accounting (Konstantin Khorenko)
  - ve/proc/loadavg: Virtualize /proc/loadavg in Containers (Konstantin Khorenko)
  - ve/sysinfo/loadavg: Virtualize loadavg values in sysinfo() (Konstantin Khorenko)
  - ve/sched/loadavg: Calculate avenrun for Containers root cpu cgroups (Konstantin Khorenko) [PSBM-81572 PSBM-81572 PSBM-84967 PSBM-84967 PSBM-84967 PSBM-102573]
  - sched: Make calc_global_load() return true when it's need to update ve statistic (Kirill Tkhai) [PSBM-84967]
  - ve/sched: Link VE root cpu cgroups in separate list (Kirill Tkhai) [PSBM-81572 PSBM-88251]
  - kernel/sched/fair: Fix 'releasing a pinned lock' (Andrey Ryabinin) [PSBM-120800]
  - tmpfs: shmem_fallocate must return ERESTARTSYS (Maxim Patlasov) [PSBM-43399]
  - VE/sysrq-trigger: make it VE-namespace aware (Stanislav Kinsbursky) [PSBM-20664]
  - ipc: WARN if trying to remove ipc object which is absent (Alexander Mikhalitsyn) [PSBM-131142]
  - ipc: add export_operations to mqueue sb (Andrey Zhadchenko) [PSBM-103727]
  - ve/perf: forbid perf events syscall in containers (Pavel Tikhomirov) [PSBM-107217]
  - fs/nfs: more leaks for busy inodes case. (Andrey Ryabinin) [PSBM-95177]
  - ve/sunrpc: Enable rpc_pipefs mounts in Container root user namespace (Vasily Averin) [PSBM-86395 PSBM-127830]
  - ve/sunrpc: Prohibit mounting rpc_pipefs in CT without nfsd feature (Pavel Tikhomirov) [PSBM-87836]
  - nfsd: return file system superblock time granulaty on FSINFO request (Stanislav Kinsburskiy) [PSBM-66572]
  - ve/fs/nfsd: NFSd containerization (Stanislav Kinsburskiy) [PSBM-130825]
  - ve/nfsd: disable legacy recovery tracking for containers (Stanislav Kinsburskiy) [PSBM-43468]
  - ve/nfsd: enable UMH client tracker in a container (Stanislav Kinsbursky) [PSBM-102363]
  - ve/sunrpc/nfsd: containerize kthreads (Stanislav Kinsburskiy) [PSBM-135334]
  - ms/NFS/CIFS/SUNRPC: don't allow to freeze execution (Stanislav Kinsburskiy) [PSBM-50671 PSBM-54822]
  - ve/fs/nfs: NFS containerization (Stanislav Kinsburskiy) [PSBM-127234 PSBM-131949]
  - sunrpc: do not place task to sleep if has to be killed (Stanislav Kinsburskiy) [PSBM-68214]
  - sunrpc: pending tasks kill helper added (Stanislav Kinsburskiy) [PSBM-66510 PSBM-68214]
  - sunrpc: bring back SUNRPC task abort logic (Stanislav Kinsburskiy) [PSBM-66510 PSBM-69434]
  - sunrpc: add "kill-tasks" proc entry (Stanislav Kinsburskiy) [PSBM-66510]
  - ve/umh: enable user mode helper in container (Stanislav Kinsburskiy)
  - ve/umh: create kernel thread for each synchronious UMH request (Stanislav Kinsburskiy)
  - ve/umh: introduce per-container user mode helper macroses and functions (Stanislav Kinsburskiy)
  - ve/umh: add per-container usermodehelper thread (Stanislav Kinsburskiy)
  - ve/umh: init work separately from other subprocess_info parameters (Stanislav Kinsburskiy)
  - ve/umh: make queue function one of the subprocess_info parameters (Stanislav Kinsburskiy)
  - ve/kthreadd: create kthreadd in a containers pid ns (Stanislav Kinsburskiy)
  - ve/kthreadd: add per-ve kthreads creation interface (Stanislav Kinsburskiy) [PSBM-93708]
  - ve/kthreadd: emulate kthreadd by kworker thread, attached to CT (Stanislav Kinsburskiy)
  - ve/netfilter: ve_printk for "nf_conntrack: table full" (Vasily Averin)
  - ve: network rate-limited VE logging helpers introduced (Stanislav Kinsburskiy)
  - ve: use ve_printk() to print VMA address in case of segfault (Stanislav Kinsburskiy)
  - ve: Use ve_printk() for often kernel messages about user actions (Kirill Tkhai)
  - ve/printk: per-CT printk helpers introduced (Stanislav Kinsburskiy) [PSBM-39077 PSBM-54183 PSBM-42313]
  - ve/printk: Introduce ve_printk() (Vladimir Davydov) [PSBM-17899 PSBM-17899 PSBM-105442 PSBM-133985]
  - ve/printk: Virtualize log_wait queue (Konstantin Khorenko) [PSBM-17899 PSBM-17899 PSBM-105442 PSBM-133985]
  - ve/printk: Virtualize syslog_* (Konstantin Khorenko) [PSBM-17899 PSBM-17899 PSBM-105442 PSBM-133985]
  - ve/printk: Virtualize "prb" and "clear_seq" (Vladimir Davydov) [PSBM-17899 PSBM-17899 PSBM-105442 PSBM-133985]
  - ve/printk: Introduce struct "log_state" and virtualize log_buf/log_buf_len (Vladimir Davydov) [PSBM-17899 PSBM-17899 PSBM-105442 PSBM-133985 PSBM-134393 PSBM-135139]
  - dm-tracking: Add tracking_clear cmd (Kirill Tkhai)
  - configs: VZ options (Nikita Yushchenko)
  - configs: Increase default value for vm.mmap_min_addr (Konstantin Khorenko) [PSBM-56697]
  - configs: Limit number of legacy ptys (Konstantin Khorenko) [PSBM-34741]
  - ve/procfs: make /proc/config.gz visible inside Containers (Vasily Averin) [PSBM-92107]
  - configs: provide kernel config via proc (Konstantin Khorenko) [PSBM-92107 PSBM-127850]
  - ve/audit: allow changing loginuid for VE root (Pavel Tikhomirov) [PSBM-64487]
  - ve/mm: add heuristic check for memory overcommit (Pavel Tikhomirov) [PSBM-45695 PSBM-48891 PSBM-129225 PSBM-132893]
  - mm/swap: activate swapped in pages on fault (Andrey Ryabinin) [VSTOR-20859]
  - mm/mecontrol: add memcg_[un]charge_kmem() API (Andrey Ryabinin)
  - mm: Do not leak node data to CT's /proc/vmstat (Kirill Tkhai)
  - mm: memcontrol: add memory.numa_migrate file (Vladimir Davydov) [PSBM-50875 PSBM-152372]
  - mm: default collapse huge pages if there's at least 1/4th ptes mapped (Vladimir Davydov) [PSBM-48885]
  - mm: per-memcg negative dentries accounting (Vasily Averin) [PSBM-104223 OVZ-7225 PSBM-127858 PSBM-125735 PSBM-127858]
  - mm, memcg: add oom counter to memory.stat memcgroup file (Andrey Ryabinin) [PSBM-108287 PSBM-123537 PSBM-131983]
  - mm: memcontrol: add swapin/out stats (Vladimir Davydov) [PSBM-46104 PSBM-130829 PSBM-147959]
  - ve/mm: allow container's root to ignore mlock limit (Andrey Ryabinin) [PSBM-41405]
  - ve/mm: introduce min threshold for dcache (Vladimir Davydov) [PSBM-34161 PSBM-132893]
  - mm: memcontrol: add stats for reclaimable and unreclaimable stats (Vladimir Davydov) [PSBM-132728]
  - mm: issue panic() on bad page/pte bugs if panic_on_warn is set (Andrey Ryabinin) [PSBM-70168]
  - x86: "pages zeroing on free" option introduced (Stanislav Kinsburskiy) [PSBM-33071]
  - mm, cgroup, writeback: Enable per-cgroup writeback for v1 cgroup. (Andrey Ryabinin)
  - fence-watchdog/arptables: add ability to filter by watchdog timeout (Pavel Tikhomirov)
  - fence-watchdog: Add xt_wdog_tmo netfilter match (Pavel Tikhomirov) [PSBM-23253]
  - fence-watchdog: Add fence-watchdog driver (Pavel Tikhomirov) [PSBM-40736]
  - net/drivers/i40e: suppress warning on skb linearization (Jan Dakinevich) [VSTOR-22811 PSBM-127846]
  - net/drivers/i40e: suppress high order allocation warning (Konstantin Khorenko) [VSTOR-18622]
  - fs/pipe: Use kvcalloc for pipe buffers (Cyrill Gorcunov) [PSBM-69201]
  - tty: use kvmalloc for screenbuffer allocation (Oleg Babin) [PSBM-127798]
  - net/sock: teach sock_kmalloc() to call kvmalloc() when possible (Konstantin Khorenko) [PSBM-82593 PSBM-127798]
  - mm: introduce kvmalloc_check() for safe calls to kvmalloc() (Konstantin Khorenko) [PSBM-82593 PSBM-127798]
  - bnx2: Use kvzalloc() to allocate certain internal data (Jan Dakinevich)
  - bnx2x: Suppress warnings on DMA memory allocation (Jan Dakinevich)
  - IB/core: Use kvzalloc to allocate ib_device (Jan Dakinevich)
  - mm/mempool: Use kvmalloc to allocate array of element pointers (Andrey Ryabinin) [VSTOR-14758]
  - net/vhost: Replace kmalloc with kvmalloc for order>=3 (Oleg Babin) [PSBM-81803 PSBM-127797]
  - modules: use kvmalloc when creating sysfs attributes for ELF sections (Evgenii Shatokhin) [PSBM-95050 PSBM-108017]
  - netlink: silence high-order memory allocation warning in netlink_ack (Vasily Averin) [PSBM-120889 PSBM-127858]
  - ipv6: silence high-order allocation warinig in rawv6_sendmsg() (Vasily Averin) [PSBM-122200 PSBM-127858]
  - net: silence high-order-allocation warning in sctp_pack_cookie() (Vasily Averin) [PSBM-122200 PSBM-127858]
  - net: silence high-order allocation warning from UDP with big headers. (Andrey Ryabinin) [PSBM-94717 PSBM-127846]
  - x86/microcode/intel: hide warning on high order allocation for microcode area (Konstantin Khorenko) [PSBM-86662 PSBM-127837]
  - sctp: suppress warnings on high order memory allocation on packet transmit (Konstantin Khorenko) [PSBM-99098 PSBM-127848]
  - vhost: suppress high-order-allocation warning for vhost_log (Vasily Averin) [PSBM-97775 PSBM-127848]
  - sctp: suppress warnings on high order memory allocation on sctp chunk creation (Konstantin Khorenko) [PSBM-93798 PSBM-127848]
  - net/setsockopt: switch high order allocations to kvmalloc() in do_ip_setsockopt() (Konstantin Khorenko) [PSBM-82646 PSBM-127798]
  - include/linux/sockptr: introduce vmemdup_sockptr helper (Andrey Zhadchenko) [PSBM-133996]
  - x86/kvm/vmx: Suppress warning on high-order allocation (Jan Dakinevich)
  - keys, user: Fix high order allocation in user_instantiate() #PSBM-107794 (Andrey Ryabinin) [PSBM-107794 PSBM-108198 PSBM-108198 PSBM-108291 PSBM-108291]
  - net/mlx5: suppress high order allocation (Vasily Averin) [VSTOR-35452]
  - mm: add warning about high order allocations (Andrey Ryabinin) [PSBM-79892 PSBM-82202 PSBM-103814 VSTOR-20383 VSTOR-20349 PSBM-103814]
  - livepatch: added minimal support for failure injection (Evgenii Shatokhin) [PSBM-102582]
  - cbt: Add config (Kirill Tkhai)
  - cbt: introduce changed block tracking (Kirill Tkhai) [PSBM-123819 PSBM-134130 PSBM-137054 PSBM-144163 PSBM-140699 PSBM-141114]
  - ve/proc: virtualize /proc/meminfo in a Container (Konstantin Khorenko) [PSBM-19448 PSBM-34444 PSBM-33650 PSBM-34444 PSBM-127780 PSBM-131992 PSBM-132893 PSBM-131992 PSBM-133988]
  - ve: Replace 0 ppid with 1 (workaround for bad utils) (Kirill Tkhai)
  - ve/proc: print VE id and virtual pid in process status (Stanislav Kinsburskiy)
  - ve: Virtualize /proc/swaps to watch from inside CT (Kirill Tkhai)
  - ve/proc: Show vcpu in do_task_stat() (Kirill Tkhai) [PSBM-101289]
  - ve/proc: restricted proc-entries scope (Stanislav Kinsburskiy) [PSBM-18019 PSBM-18021 PSBM-40359 PSBM-58574 PSBM-55920 OVZ-6834 PSBM-127787]
  - sysctl: Change sysctl::show_unhandled_signals default (Kirill Tkhai)
  - ve/sysctl/net: allow net.ipv4.vs.* in CT init userns (Pavel Tikhomirov) [PSBM-63883 PSBM-63883]
  - ve/sysctl/net: allow "net.unix.max_dgram_qlen" sysctl in CT init userns (Pavel Tikhomirov) [PSBM-54530]
  - introduce ve_net_hide_sysctl helper (Stanislav Kinsburskiy) [PSBM-40044 PSBM-40044 PSBM-54530]
  - ve/sysctl: allow to write kernel/hostname and kernel/domainname entries in container (Stanislav Kinsburskiy) [PSBM-20102 PSBM-20102]
  - ve/sysctl/pidns: allow to change sysctl "ns_last_pid" from containers (Andrew Vagin)
  - ve/sysctl/ipc: mark as virtualized (Konstantin Khorenko)
  - sysctl: make hotplug, printk and mmap_min_addr accessible inside a CT (Konstantin Khorenko)
  - ve/sysctl: implement virtualized methods (Stanislav Kinsburskiy) [PSBM-18032 PSBM-18030 PSBM-29017 PSBM-43596]
  - ve/sysctl: write permission restriction (Konstantin Khlebnikov) [PSBM-18022 PSBM-56704 PSBM-18032 PSBM-18030]
  - trace/osnoise: Fix compiler complain about using "main" local variable (Konstantin Khorenko)
  - netfilter/x_tables: account entry offsets allocations (Vasily Averin) [PSBM-54407 PSBM-127783 PSBM-133990]
  - memcg: charge kmem allocations accounted to UBC in PCS6 to memcg (Vasily Averin) [PSBM-54928 PSBM-54928 PSBM-120694 PSBM-120694 PSBM-120694 PSBM-120694 PSBM-120694 PSBM-133990]
  - ms/ipc: remove memcg accounting for sops objects in do_semtimedop() (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting of ipc resources (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting for pollfd and select bits arrays (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting for pids in nested pid namespaces (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting for scm_fp_list objects (Vasily Averin) [PSBM-133990]
  - ms/memcg: ipv6/sit: account and don't WARN on ip_tunnel_prl structs allocation (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting for VLAN group array (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting for inet_bin_bucket cache (Vasily Averin) [PSBM-133990]
  - ms/memcg: enable accounting for net_device and Tx/Rx queues (Vasily Averin) [PSBM-133990]
  - mm/vmalloc: add v[mz]alloc_account helpers (Vasily Averin) [PSBM-133990]
  - mm/memcg: enable memory.high for cgroup v1. (Vasily Averin) [PSBM-133990]
  - mm/memcg: enable memory.low for cgroup v1 (Vasily Averin) [PSBM-133990]
  - ve/proc/net: virtualize all the network proc entries (Stanislav Kinsburskiy)
  - proc/net: proc_net_*() helpers introduced (Stanislav Kinsburskiy)
  - ve/itimer: add ve_name to warning for a NULL new_value (Dmitry Safonov) [PSBM-49818]
  - ve/lockdep: Taint kernel on circular locking complains (Vladimir Davydov) [PSBM-22010 PSBM-33650]
  - ve/taskstats: allow delivery of task attributes in CT context (Stanislav Kinsburskiy) [PSBM-56171]
  - ve: Allow taskstats via netlink in netns (Vladimir Davydov)
  - ve/netlink: allow IPVS netlink messages to CT init userns (Pavel Tikhomirov) [PSBM-63883]
  - ve/uts_ns: Implement cgroup interface to configure ve's os_release (Kirill Tkhai) [PSBM-32273]
  - ve/block: add ve_capable to check capabilities relative to the current VE (Stanislav Kinsburskiy) [PSBM-39077]
  - ve/fs: add ve_capable to check capabilities relative to the current VE (Andrew Vagin) [PSBM-39077]
  - ve/fs/namei: fix capabilities check in sys_renameat2 () to support Containers (Stanislav Kinsburskiy)
  - ve/fanotify: Use ve-capable instead of plain capable test (Cyrill Gorcunov) [PSBM-41409 PSBM-135311]
  - ve/fs/locks: Make CAP_LEASE work in containers (Evgenii Shatokhin) [PSBM-46199]
  - VE/FS: containerize filesystems access (Stanislav Kinsburskiy)
  - fs: Mask appropriate filesystems FS_VIRTUALIZED (Kirill Tkhai) [PSBM-26968 PSBM-86138 PSBM-128649]
  - fs/ve: add new FS_VE_MOUNT flag to allow mount in container init userns (Stanislav Kinsburskiy) [PSBM-121284]
  - vzstat: Update sched lat in vzmon (Kirill Tkhai)
  - kernel: Export tasklist_lock (Kirill Tkhai)
  - vzstat,sched: Track sched_lat_ve (Kirill Tkhai)
  - vzstat: Add vzstat module and kstat interfaces (Kirill Tkhai) [VSTOR-16659 OVZ-7158 PSBM-127849]
  - mm: Export first_online_pgdat() and next_online_pgdat() (Kirill Tkhai)
  - mm: Export swap_cache_info struct and variable (Kirill Tkhai)
  - vzstat: Add base kstat structures and variables (Kirill Tkhai) [PSBM-81395 PSBM-36448 PSBM-127780]
  - kernel/freezer: don't freeze stopped & about to be ptraced task (Andrey Ryabinin) [PSBM-40683]
  - oom: make berserker more aggressive (Vladimir Davydov)
  - oom: resurrect berserker mode (Vladimir Davydov) [PSBM-17930 PSBM-131983 PSBM-131983 PSBM-131983]
  - proc,memcg: use memcg limits for showing oom_score inside CT (Andrey Ryabinin)
  - memcg: add oom_guarantee (Vladimir Davydov) [PSBM-42320 PSBM-38581 PSBM-37915 PSBM-17930 PSBM-26973 PSBM-20089 PSBM-37915 VSTOR-22575 PSBM-127846 PSBM-132385]
  - exit: clear TIF_MEMDIE after exit_task_work (Vladimir Davydov) [PSBM-44683]
  - oom: do not dump all tasks info on each oom kill (Vladimir Davydov)
  - ve/mm,oom: print information about ve of killed task (Andrey Ryabinin) [PSBM-40610]
  - memcg: do not allow to disable oom from inside a container (Vladimir Davydov)
  - rh/lib/cpumask: Make CPUMASK_OFFSTACK usable without debug dependency (Josh Boyer)
  - ve/quota: allow to manage quota in top CT user ns (Konstantin Khorenko) [PSBM-40281 PSBM-133986]
  - ve/net: introduce vz_security_*_check checks (Stanislav Kinsburskiy) [PSBM-53629 PSBM-127783 PSBM-104225 PSBM-104225 PSBM-133986]
  - ve/kobj: Send events per VE instead of all net-namespaces broadcasting (Stanislav Kinsburskiy) [PSBM-133986]
  - ve/uevent: Use own uevent_seqnum for every VE (Konstantin Khorenko) [PSBM-17903 PSBM-133986]
  - ve/net/vxlan: enable support in a container (Konstantin Khorenko) [PSBM-53629 PSBM-133986]
  - ve/net: ip_vti: skip per net init in ve (Vladimir Davydov) [PSBM-48698 PSBM-133986]
  - ve/net/ip_gre: containerize per-net devices (Kirill Tkhai) [PSBM-24331 PSBM-133986]
  - ve/net/dummy: enable support in a container (Vasily Averin) [PSBM-43329 PSBM-133986]
  - ve/net/cred: add ve_capable to check capabilities relative to the current VE (v2) (Konstantin Khorenko) [PSBM-39077 PSBM-133986]
  - ve/kernel: allow to increase rlimit from inside container (Vladimir Davydov) [PSBM-43410 PSBM-133986]
  - device_cgroup: add device visibility virtualization in CT (Pavel Tikhomirov) [PSBM-131978 PSBM-133986]
  - sched: Return only virtual cpus in sched_getaffinity() (Kirill Tkhai) [PSBM-25367 PSBM-133986]
  - sched: prohibit setting affinity from inside a CT (Konstantin Khorenko) [PSBM-133986]
  - sched: Add cpulimit cgroup interfaces (Kirill Tkhai) [PSBM-133986]
  - sched: Split tg_set_cfs_bandwidth() and export default_cfs_period() (Kirill Tkhai) [PSBM-133986]
  - sched: Port CONFIG_CFS_CPULIMIT feature (Kirill Tkhai) [PSBM-127780 PSBM-108013 PSBM-108013 PSBM-133986 PSBM-142414]
  - sched: Split task_h_load() (Kirill Tkhai) [PSBM-133986]
  - sched: Add primitives to calculate nr running, sleeping, stopped and uninterruptible tasks (Kirill Tkhai) [PSBM-133986]
  - sched: Account cfs_rq::nr_iowait (Kirill Tkhai) [PSBM-93850 PSBM-127846 PSBM-133986]
  - sched: Count rq::nr_sleeping and cfs_rq::nr_unint (Kirill Tkhai) [PSBM-133986]
  - kernel: Account nr_zombie and nr_dead (Kirill Tkhai) [PSBM-133986]
  - sched: disable dumping cfs info on sysrq trigger (Kirill Tkhai) [PSBM-41140 PSBM-133986]
  - sched: Add ve name to sched_show_task() (Kirill Tkhai) [PSBM-133986]
  - ve: allow mounts in non-init but VE-init user namespace (Stanislav Kinsburskiy)
  - ve: introduce ve_init_user_ns() helper (Andrey Ryabinin) [PSBM-41075]
  - ve: Prohibit module load and usermode_helper from inside CT (Kirill Tkhai)
  - ve: Virtualize /proc/cmdline (Kirill Tkhai)
  - ve: Implement per ve randomize_va_space (Kirill Tkhai)
  - ve/net: restrict ethtool to CT root userns and prohibit EEPROM change (Konstantin Khorenko) [PSBM-36290 PSBM-52504]
  - ve/mm/trace: introduce vps_dumpable flag (Konstantin Khorenko) [PSBM-20666 PSBM-92107 PSBM-127780]
  - ptrace: prevent tracing "init" from inside a CT (Konstantin Khorenko)
  - ve/netns: limit number of network namespaces per container (Pavel Tikhomirov) [PSBM-49690]
  - ve/device_cgroup: fake allowing all devices for docker inside VZCT (Pavel Tikhomirov) [PSBM-38691 PSBM-34529]
  - ve/fs: allow devices-realted mounts in VE initial user namespace (Stanislav Kinsburskiy)
  - ve: Implement current_user_ns_initial() helper (Konstantin Khorenko)
  - ve/security: device_cgroup -- Allow manage devices in @pseudosuper state (Cyrill Gorcunov) [PSBM-48421]
  - ve/sysfs: add dentries visibility filter (Stanislav Kinsburskiy)
  - kernfs/sysfs: add ioctl to get fd network namespace tag (Pavel Tikhomirov) [PSBM-105161]
  - ve/kernfs: add new interface to control per-VE nodes visibility (Stanislav Kinsburskiy)
  - ve/kernfs: hide forbidden entries in container (Stanislav Kinsburskiy) [PSBM-138339]
  - ve/kernfs: implement ve-based permissions (Stanislav Kinsburskiy) [PSBM-20892 PSBM-34682 PSBM-104902]
  - kmapset: set of key-value mappings with build-in (Stanislav Kinsburskiy) [PSBM-34437 PSBM-127478]
  - configs: Add more our dm configs (Kirill Tkhai)
  - dm-qcow2: Introduce driver to create block devices over QCOW2 files (Kirill Tkhai) [PSBM-140279]
  - dm-ploop: Set PF_LOCAL_THROTTLE and PF_MEMALLOC_NOIO (Kirill Tkhai)
  - dm: Add dm-tracking target (Kirill Tkhai)
  - dm: Add push backup driver (Kirill Tkhai)
  - dm: Allow singleton target with devices attached (Kirill Tkhai) [PSBM-127989]
  - dm: Introduce dm_requeue_original_rq() (Kirill Tkhai) [PSBM-127989]
  - configs: Build DM_PLOOP as a module (Konstantin Khorenko) [PSBM-134008]
  - dm-ploop: Add ploop target driver (Kirill Tkhai) [PSBM-136783 PSBM-136140 PSBM-138444]
  - dm: Call io_hints even for device-less drivers (Kirill Tkhai) [PSBM-123654]
  - ext4: Care about reserves in case of IO thread (Kirill Tkhai) [PSBM-127225]
  - ploop: Export dm_complete_request() (Kirill Tkhai)
  - fs: Introduce vfs_truncate2() with file argument (Kirill Tkhai)
  - ve/cgroups: fake num_cgroups in /proc/cgroups output (Vasily Averin) [PSBM-33400]
  - ve/cgroups: Introduce subgroups_limit control (Kirill Tkhai) [PSBM-33401 PSBM-69678 PSBM-69678 PSBM-127794 PSBM-144465]
  - ve/cgroup: Allow to write to several safe cgroup files from CT (Kirill Tkhai) [PSBM-44981]
  - cgroup: Mark cgroup CGRP_VE_ROOT (Kirill Tkhai) [PSBM-120670 PSBM-120670 PSBM-134002 PSBM-134002]
  - ve/net/ppp: introduce VE_FEATURE_PPP feature (Stanislav Kinsburskiy)
  - ve/bridge: br_dev_init: check if "bridge" feature is enabled (Evgenii Shatokhin) [PSBM-50009]
  - net: Make ipip feature optional (Stanislav Kinsburskiy) [PSBM-48608]
  - net: Make sit feature optional (Kirill Tkhai)
  - kernel/ve: Add support of VE features mask (Stanislav Kinsburskiy)
  - ve/cgroup: Add pseudosuper state for restore sake (Kirill Tkhai) [PSBM-127848]
  - ve/cred: add ve_capable to check capabilities relative to the current VE (v2) (Kirill Tkhai) [PSBM-39077 PSBM-127846]
  - vzevent: initial patch (Konstantin Khorenko)
  - mm/vmscan: shrink tcache upfront everything else (Andrey Ryabinin) [PSBM-89403]
  - ve/mm/cleancache: count only successful put in the cleancache_puts counter (Andrey Ryabinin) [PSBM-63964]
  - meminfo: show size of tcache (Vladimir Davydov)
  - mm: introduce transcendent file cache (tcache) (Vladimir Davydov) [PSBM-31757 PSBM-120802 PSBM-120802 PSBM-144163]
  - Revert "kref: Remove kref_put_spinlock_irqsave()" (Andrey Ryabinin)
  - memcg: allow to disable cleancache per memcg (Vladimir Davydov) [PSBM-34163]
  - mm/vmscan: Introduce PF_MEMCG_RECLAIM task flag to identify memcg reclaim. (Andrey Ryabinin)
  - Revert "mm: remove cleancache" (Konstantin Khorenko) [PSBM-147375]
  - ve: Add vecalls (Kirill Tkhai) [OVZ-7158 PSBM-127849 PSBM-131070]
  - printf: Add VZVERSION and task_ve_name() to dump_stack_print_info() (Kirill Tkhai)
  - vzdev: initial patch (Konstantin Khorenko)
  - net: Add NETIF_F_VIRTUAL feature to mask devices allowed in CT (Kirill Tkhai) [PSBM-138943 PSBM-135200]
  - ve: Add veowner: skeleton for vz specific sysctl and /proc/ entries (Kirill Tkhai) [PSBM-79882 PSBM-79882 PSBM-127913]
  - ve: Link net and ve_struct (Kirill Tkhai) [PSBM-93640]
  - ve: Add ve cgroup and ve_hook subsys (Kirill Tkhai) [PSBM-82766 PSBM-131412 PSBM-127798 PSBM-144580]
  - net/ipv4/udp_diag.c: author email updated (Konstantin Khorenko) [PSBM-94979]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [5.14.0-427.33.1.vz9.72.2]
changelog:
  - dm-qcow2: fix bvec iteration macro that can get into an endless loop (Alexander Atanasov) [PSBM-157999]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [5.14.0-427.33.1.vz9.72.4]
changelog:
  - fs/fuse kio: fixed a bug in pcs_rpc_cancel_msg (Liu Kui)
  - fs/fuse kio: fixed a bug in krpc recv msg (Liu Kui) [VSTOR-92924]


author: Konstantin Khorenko <khorenko@virtuozzo.com> [5.14.0-427.33.1.vz9.72.5]
changelog:
  - configs.local: Enable PSI pressure monitoring by default for cgroup v2 (Pavel Tikhomirov) [VSTOR-92223]
  - configs: Enable PSI pressure monitoring by default for cgroup v2 (Pavel Tikhomirov) [VSTOR-92223]


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-1
changelog:
  - Rebase on bpftrace 0.16.0 (rhbz#2121920)
  - Rebuild for LLVM 15 (rhbz#2118995)
  - Download the cereal library (not packaged into RHEL9)
  - Fixed several tools (rhbz#1975148, rhbz#2088577, rhbz#2128208, rhbz#2073675,
    rhbz#2073770)
  - Resolve conflicts between bpftrace and bcc manpages (rhbz#2075076)


author: Viktor Malik <vmalik@redhat.com> - 0.16.0-2
changelog:
  - Fix missing kprobe attachpoints for bio* tools (s390x, ppc64le)
  - Rebuild for libbpf 1.0.0
  - Resolves: rhbz#2157829
  - Related: rhbz#2157592


author: Viktor Malik <vmalik@redhat.com> - 0.17.0-1
changelog:
  - Rebase on bpftrace 0.17.0 (RHEL-286)
  - Fix runqlat.bt, tcpdrop.bt, and undump.bt on aarch64 (rhbz#2170838)


author: Viktor Malik <vmalik@redhat.com> - 0.19.1-1
changelog:
  - Rebase on bpftrace 0.19.1 (RHEL-10693)
  - Rebuild for LLVM 17 (RHEL-10592)
  - Enhancements and fixes for PowerPC (RHEL-3690, RHEL-11476)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: Neal Gompa <ngompa13@gmail.com> - 4.20.2-1
changelog:
  - New upstream release
  - Properly split out libraries into libs subpackages
  - Slightly modernize the spec


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.33.1-3
changelog:
  - Rebuild for CVEs:
    CVE-2023-39318 CVE-2023-39319 CVE-2023-39321 CVE-2023-39322
  - Related: Jira:RHEL-2779


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.5-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/70b792d)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.6-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/f843563)
  - Related: RHEL-2112


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/b95e962)
  - Resolves: RHEL-28230


author: Jindrich Novy <jnovy@redhat.com> - 2:1.33.7-2
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.33
    (https://github.com/containers/buildah/commit/997beea)
  - Resolves: RHEL-28731


author: Jerry James <loganjerry@gmail.com> - 1.10.14-1
changelog:
  - Version 1.10.14
  - Remove no longer needed no-unixsocket.patch
  - Add workaround for compiling tests with JDK 11


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-5
changelog:
  - Resolves: rhbz#2014523 - c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.17.1-6
changelog:
  - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 1.19.1-1
changelog:
  - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9]
  - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9]
  - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9]
  - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0]
  - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-90.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-90.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Global Chambersign Root"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-3
changelog:
  - Switch from autotools to meson; enable the tests, since the meson build system
    permits us to use a shared boost library
  - Install examples in the -doc subpackage


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-4
changelog:
  - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual
    Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name
    of a future package that continues to provide API/ABI version 1.0 after the
    upgrade.


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.14.2-7
changelog:
  - Working (but weak, dependent on SHA1) source signature verification
  - Added API/ABI version to descriptions


author: Josh Stone <jistone@redhat.com> - 1.71.0-2
changelog:
  - Relax the suspicious_double_ref_op lint (rhbz2225471)
  - Enable the profiler runtime for native hosts (rhbz2213875)


author: Kaleb S. KEITHLEY <kkeithle[at]redhat.com> - 2:16.1.0-0.5.snapshot
changelog:
  - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
  -  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13


author: vzbuild <vzbuild@acronis.com> 1.8.101
changelog:
  - Correct targets.list for storage-6.3-u1
   - Correct Makefile.version for hci-6.3.1-vz
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (Konstantin
  Volkov <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-5
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1990926)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012261)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.14-6
changelog:
  - Certificate format validation when adding the SCEP server's CA
    (#1492112)
  - Replace some SHA1 usages with SHA256 in the unit tests


author: Roland Grunberg <rgrunber@redhat.com> - 3.2.9-5
changelog:
  - Set maven-javadoc-plugin source to 1.8 for Java 11 build.
  - Ignore 5 test failures from upstream when run on Java 9 or above.


author: Fedora Release Engineering <releng@fedoraproject.org> - 4.0-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add BuildRequires: make
  - drop dnssrv service and timer


author: Miroslav Lichvar <mlichvar@redhat.com> 4.2-1
changelog:
  - update to 4.2 (#2051441)
  - fully switch from nettle to gnutls (#1953463 #1954483)
  - use NTP servers from DHCPv6 NTP server option (#2047415)
  - drop obsolete workaround in scriptlet


author: Camilla Conte <cconte@redhat.com> - 23.1.1-2
changelog:
  - 0007-rhel-make-sure-previous-hostname-file-ends-with-a-ne.patch [bz#2184608]
  - Resolves: bz#2184608


author: Camilla Conte <cconte@redhat.com> - 23.1.1-4
changelog:
  - 0009-Make-user-vendor-data-sensitive-and-remove-log-permi.patch [bz#2190083]
  - Resolves: bz#2190083


author: Camilla Conte <cconte@redhat.com> - 23.1.1-5
changelog:
  - 0010-Do-not-generate-dsa-and-ed25519-key-types-when-crypt.patch [bz#2187164]
  - Resolves: bz#2187164


author: Camilla Conte <cconte@redhat.com> - 23.1.1-6
changelog:
  - 0011-Revert-Manual-revert-Use-Network-Manager-and-Netplan.patch
  - 0012-Revert-Revert-Add-native-NetworkManager-support-1224.patch
  - 0013-net-sysconfig-do-not-use-the-highest-autoconnect-pri.patch
  - 0014-net-sysconfig-cosmetic-fix-tox-formatting.patch
  - 0015-nm-generate-ipv6-stateful-dhcp-config-at-par-with-sy.patch [bz#2207716]
  - 0016-network_manager-add-a-method-for-ipv6-static-IP-conf.patch [bz#2196284]
  - 0017-net-sysconfig-enable-sysconfig-renderer-if-network-m.patch [bz#2194050]
  - 0018-network-manager-Set-higher-autoconnect-priority-for-.patch [bz#2196231]
  - 0019-Set-default-renderer-as-sysconfig-for-c9s-RHEL-9.patch [bz#2209349]
  - Resolves: bz#2118235 bz#2194050 bz#2196231 bz#2196284 bz#2207716 bz#2209349


author: Miroslav Rezanina <mrezanin@redhat.com> - 23.1.1-7
changelog:
  - 0020-Revert-Set-default-renderer-as-sysconfig-for-c9s-RHE.patch
  - 0021-Set-default-renderer-as-sysconfig-for-centos-rhel-41.patch [bz#2209349]
  - Resolves: bz#2209349


author: Camilla Conte <cconte@redhat.com> - 23.1.1-8
changelog:
  - 0022-test-fixes-update-tests-to-reflect-AUTOCONNECT_PRIOR.patch [bz#2217865]
  - 0023-test-fixes-remove-NM_CONTROLLED-no-from-tests.patch [bz#2217865]
  - 0024-Revert-limit-permissions-on-def_log_file.patch [bz#2217865]
  - 0025-test-fixes-changes-to-apply-RHEL-specific-config-set.patch [bz#2217865]
  - 0026-Enable-SUSE-based-distros-for-ca-handling-2036.patch [bz#2217865]
  - 0027-Handle-non-existent-ca-cert-config-situation-2073.patch [bz#2217865]
  - 0028-logging-keep-current-file-mode-of-log-file-if-its-st.patch [bz#2222498]
  - 0029-DS-VMware-modify-a-few-log-level-4284.patch [bz#2225374]
  - Resolves: bz#2217865 bz#2222498 bz#2225374


author: Camilla Conte <cconte@redhat.com> - 23.1.1-9
changelog:
  - 0030-NM-renderer-set-default-IPv6-addr-gen-mode-for-all-i.patch [bz#2188388]
  - Resolves: bz#2188388


author: Packit <hello@packit.dev> - 299-1
changelog:
  - Kdump: Show location of kdump to verify the successful configuration test
  - Storage: Support for no-overprovisioning with Stratis
  - Storage: Cockpit can now add caches to encrypted Stratis pools


author: Packit <hello@packit.dev> - 300-1
changelog:
  - Celebrating the Nürnberg life release!
  - Storage: Support for growing block devices of a Stratis pool


author: Martin Pitt <mpitt@redhat.com> - 300.2-1
changelog:
  - Keep administrative access after a page reload (RHEL-5765)
  - spec: Move to BuildRequires: python3-devel (RHEL-2215)
  - Lots of test stabilizations


author: Martin Pitt <mpitt@redhat.com> - 300.3-1
changelog:
  - Fix crash with large file uploads (RHEL-5341)
  - Fix connecting to older bridges, in particular RHEL 8 (RHEL-3537)


author: Jindrich Novy <jnovy@redhat.com> - 84.1-1
changelog:
  - update to https://github.com/cockpit-project/cockpit-podman/releases/tag/84.1
  - Related: RHEL-2112


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Drop moment.js dependency
  - Tests: Assert pause state with a later command in rec1
  - CI: Update image to ubuntu 20.04


author: Richard Hughes <richard@hughsie.com> 1.4.4-1
changelog:
  - New upstream version
  - Actually install the installed tests
  - Port manpages to xsltproc and DocBook 5


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Robbie Harwood <rharwood@redhat.com> - 3.2.1-14
changelog:
  - Fix CVE-2016-10152 (hardcoded DNS fallback)
  - Fix CVE-2016-10151 (weak SUID check)
  - Move package to autosetup


author: Sahana Prasad <sahana@redhat.com> - 1:1.1.1k-2
changelog:
  - Remove support for building FIPS mode binaries for the
    compat libraries
  - Ships openssl11.cnf as the configuration file.
  - Resolves: rhbz#1993795
  - Related: rhbz#1947584


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20141121-15
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Jindrich Novy <jnovy@redhat.com> - 2:2.1.2-2
changelog:
  - update to latest content of https://github.com/containers/conmon/releases/tag/2.1.2
    (https://github.com/containers/conmon/commit/2bc95ee697e87d5f7b77063cf83fc32739addafe)
  - Related: #2061316


author: Phil Sutter <psutter@redhat.com> - 1.4.5-15
changelog:
  - conntrack: fix compiler warnings
  - src: fix strncpy -Wstringop-truncation warnings
  - connntrack: Fix for memleak when parsing -j arg
  - Drop pointless assignments
  - Don't call exit() from signal handler
  - read_config_yy: Drop extra argument from dlog() call
  - helpers: ftp: Avoid ugly casts
  - Fix potential buffer overrun in snprintf() calls
  - cache: Fix features array allocation
  - hash: Flush tables when destroying


author: Jindrich Novy <jnovy@redhat.com> - 3:2.215.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.215.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.216.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.216.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.217.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.217.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.218.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.218.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.219.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.219.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.0
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.221.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.221.1
  - Related: #2176063


author: Jindrich Novy <jnovy@redhat.com> - 3:2.229.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.229.0
  - Resolves: RHEL-28925


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-4
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2000051


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.3.9.3
changelog:
  - Build from sources, see #VSTOR-60430 (#VSTOR-60430)
   - Build from sources, see #VSTOR-60430 (#VSTOR-60430)


author: vzbuild <vzbuild@acronis.com> 1.3.13.101
changelog:
  - Correct targets.list for hci-6.3-u1
   - Correct Makefile.version for hci-6.3.1-vz
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (Konstantin
  Volkov <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.3.13.102
changelog:
  - Correct submodules, see #VSTOR-93829 (#VSTOR-93829)
   - Correct targets.list for hci-6.3-u1 (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-6.3.1-vz (vzbuild <vzbuild@acronis.com>)
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (#VSTOR-89749)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: David Malcolm <dmalcolm@redhat.com> - 11.2.1-10
changelog:
  - update from releases/gcc-11-branch (#2063255)
    - PRs ada/98724, ada/104258, ada/104767, ada/104861, c++/58646, c++/59950,
  	c++/61611, c++/95036, c++/100468, c++/101030, c++/101095, c++/101371,
  	c++/101515, c++/101767, c++/102045, c++/102123, c++/102538,
  	c++/102740, c++/102990, c++/103057, c++/103186, c++/103291,
  	c++/103299, c++/103337, c++/103711, c++/103769, c++/103968,
  	c++/104107, c++/104108, c++/104284, c++/104410, c++/104472,
  	c++/104513, c++/104568, c++/104667, c++/104806, c++/104847,
  	c++/104944, c++/104994, c++/105035, c++/105061, c/82283, c/84685,
  	c/104510, c/104711, d/104659, d/105004, debug/104337, debug/104517,
  	debug/104557, fortran/66193, fortran/99585, fortran/100337,
  	fortran/103790, fortran/104211, fortran/104311, fortran/104331,
  	fortran/104430, fortran/104619, fortran/104811, go/100537,
  	libgomp/104385, libstdc++/101231, libstdc++/102358, libstdc++/103904,
  	libstdc++/104442, lto/104237, lto/104333, lto/104617,
  	middle-end/95115, middle-end/99578, middle-end/100464,
  	middle-end/100680, middle-end/100775, middle-end/100786,
  	middle-end/104307, middle-end/104402, middle-end/104446,
  	middle-end/104786, middle-end/104971, middle-end/105032,
  	preprocessor/104147, rtl-optimization/104544, rtl-optimization/104589,
  	rtl-optimization/104777, rtl-optimization/104814, sanitizer/102656,
  	sanitizer/104449, sanitizer/105093, target/79754, target/87496,
  	target/99708, target/99754, target/100784, target/101324,
  	target/102140, target/102952, target/102957, target/103307,
  	target/103627, target/103925, target/104090, target/104208,
  	target/104219, target/104253, target/104362, target/104448,
  	target/104451, target/104453, target/104458, target/104462,
  	target/104469, target/104502, target/104674, target/104681,
  	target/104688, target/104775, target/104890, target/104910,
  	target/104923, target/104963, target/104998, target/105000,
  	target/105052, target/105058, target/105068, testsuite/103556,
  	testsuite/103586, testsuite/104730, testsuite/104759,
  	testsuite/105055, tree-optimization/45178, tree-optimization/100834,
  	tree-optimization/101636, tree-optimization/102819,
  	tree-optimization/102893, tree-optimization/103169,
  	tree-optimization/103361, tree-optimization/103489,
  	tree-optimization/103544, tree-optimization/103596,
  	tree-optimization/103641, tree-optimization/103864,
  	tree-optimization/104263, tree-optimization/104288,
  	tree-optimization/104511, tree-optimization/104601,
  	tree-optimization/104675, tree-optimization/104782,
  	tree-optimization/104931, tree-optimization/105094
  - fix x86 vector initialization expansion fallback (PR target/105123)
  - drop patch 22 (gcc11-libsanitizer-pthread.patch;
    upstreamed as r11-9607-ga8dd74bfb921ed)


author: Jakub Jelinek <jakub@redhat.com> 11.3.1-2
changelog:
  - update from releases/gcc-11-branch (#2077536)
    - GCC 11.3 release
    - PRs c++/98249, c++/99893, c++/100608, c++/101051, c++/101532, c++/101677,
  	c++/101717, c++/101894, c++/102869, c++/103105, c++/103328,
  	c++/103341, c++/103455, c++/103706, c++/103885, c++/103943,
  	c++/104008, c++/104079, c++/104225, c++/104507, c++/104565,
  	c++/105003, c++/105064, c++/105143, c++/105186, c++/105256, c/101585,
  	debug/105203, fortran/102992, fortran/104210, fortran/104228,
  	fortran/104570, fortran/105138, gcov-profile/105282, ipa/103083,
  	ipa/103432, jit/100613, libstdc++/90943, libstdc++/100516,
  	libstdc++/103630, libstdc++/103638, libstdc++/103650,
  	libstdc++/103955, libstdc++/104098, libstdc++/104301,
  	libstdc++/104542, libstdc++/104859, libstdc++/105021,
  	libstdc++/105027, middle-end/104497, middle-end/105165,
  	rtl-optimization/104985, rtl-optimization/105028,
  	rtl-optimization/105211, target/80556, target/100106, target/104117,
  	target/104474, target/104853, target/104894, target/105214,
  	target/105257, tree-optimization/99121, tree-optimization/104880,
  	tree-optimization/105053, tree-optimization/105070,
  	tree-optimization/105189, tree-optimization/105198,
  	tree-optimization/105226, tree-optimization/105232,
  	tree-optimization/105235
  - fix bogus -Wuninitialized warning on va_arg with complex types on x86_64
    (PR target/105331)
  - remove bogus assertion in std::from_chars (PR libstdc++/105324)


author: Marek Polacek <polacek@redhat.com> 11.3.1-4
changelog:
  - update from releases/gcc-11-branch (#2117632)
    - PRs analyzer/105252, analyzer/105365, analyzer/105366, c++/65211,
  	c++/82980, c++/86193, c++/90107, c++/97296, c++/101442, c++/101698,
  	c++/102071, c++/102177, c++/102300, c++/102307, c++/102479,
  	c++/102629, c++/104066, c++/104142, c++/104646, c++/104669,
  	c++/105245, c++/105265, c++/105289, c++/105304, c++/105321,
  	c++/105386, c++/105398, c++/105725, c++/105761, c++/105774,
  	c++/105795, c++/105852, c++/105925, c++/106024, c++/106361,
  	c++/107358, c/41041, c/106016, c/106981, c/107001, d/106139,
  	d/106638, debug/106261, fortran/82868, fortran/100029, fortran/100040,
  	fortran/100097, fortran/100098, fortran/100132, fortran/100136,
  	fortran/100245, fortran/103413, fortran/103504, fortran/103693,
  	fortran/103694, fortran/104313, fortran/104849, fortran/105012,
  	fortran/105230, fortran/105243, fortran/105310, fortran/105633,
  	fortran/105691, fortran/105813, fortran/105954, fortran/106121,
  	fortran/106817, fortran/106857, fortran/106985, fortran/106986,
  	fortran/107054, ipa/100413, ipa/105600, ipa/105739, libgomp/106045,
  	libstdc++/65018, libstdc++/84110, libstdc++/93602, libstdc++/96592,
  	libstdc++/99290, libstdc++/100823, libstdc++/101709, libstdc++/102447,
  	libstdc++/103664, libstdc++/103848, libstdc++/103853,
  	libstdc++/103911, libstdc++/103992, libstdc++/104217,
  	libstdc++/104443, libstdc++/104602, libstdc++/104731,
  	libstdc++/105128, libstdc++/105284, libstdc++/105375,
  	libstdc++/105502, libstdc++/105671, libstdc++/105915,
  	libstdc++/106162, libstdc++/106248, libstdc++/106320,
  	libstdc++/106607, libstdc++/106695, lto/106334, lto/106540,
  	middle-end/103193, middle-end/104869, middle-end/104966,
  	middle-end/105140, middle-end/105998, middle-end/106027,
  	middle-end/106030, middle-end/106144, middle-end/106331,
  	middle-end/106492, preprocessor/97498, preprocessor/105732,
  	rtl-optimization/104637, rtl-optimization/105041,
  	rtl-optimization/105333, rtl-optimization/105559,
  	rtl-optimization/106032, rtl-optimization/106187, sanitizer/105396,
  	sanitizer/105729, target/96072, target/99184, target/99685,
  	target/101322, target/101891, target/102059, target/102146,
  	target/103197, target/103353, target/104257, target/104829,
  	target/105147, target/105162, target/105209, target/105292,
  	target/105339, target/105349, target/105463, target/105472,
  	target/105854, target/105879, target/105970, target/105981,
  	target/106017, target/106091, target/106355, target/106491,
  	target/106721, target/107061, target/107064, target/107183,
  	target/107248, target/107304, target/107364, target/107748,
  	testsuite/105095, testsuite/105266, testsuite/105433,
  	testsuite/106345, tree-optimization/103116, tree-optimization/105148,
  	tree-optimization/105163, tree-optimization/105173,
  	tree-optimization/105250, tree-optimization/105263,
  	tree-optimization/105312, tree-optimization/105368,
  	tree-optimization/105431, tree-optimization/105437,
  	tree-optimization/105528, tree-optimization/105618,
  	tree-optimization/105726, tree-optimization/105860,
  	tree-optimization/106112, tree-optimization/106131,
  	tree-optimization/106189, tree-optimization/106513,
  	tree-optimization/106892, tree-optimization/106934
  - fix the detection of Sapphire Rapids in host_detect_local_cpu
  - fix -Wmismatched-dealloc documentation (#2116635)


author: Marek Polacek <polacek@redhat.com> 11.4.1-2
changelog:
  - update from releases/gcc-11-branch (#2193180)
    - GCC 11.4 release
    - PRs bootstrap/90543, c++/53932, c++/69410, c++/92752, c++/98056,
  	c++/98821, c++/100295, c++/100474, c++/101118, c++/101869,
  	c++/102780, c++/103871, c++/104527, c++/105406, c++/105996,
  	c++/106188, c++/106675, c++/106713, c++/106740, c++/107065,
  	c++/107163, c++/107179, c++/107558, c++/107579, c++/107864,
  	c++/108138, c++/108180, c++/108365, c++/108468, c++/108474,
  	c++/108607, c++/108975, c++/108998, c++/109096, c++/109164, c/107127,
  	c/107465, c/109151, d/107592, d/108050, d/108877, d/109108,
  	debug/106719, debug/108573, debug/108716, debug/108967, driver/106624,
  	fortran/85877, fortran/95107, fortran/96024, fortran/96025,
  	fortran/99036, fortran/103259, fortran/104332, fortran/106209,
  	fortran/106945, fortran/107576, fortran/107872, fortran/108131,
  	fortran/108349, fortran/108420, fortran/108421, fortran/108451,
  	fortran/108453, fortran/108501, fortran/108502, fortran/108527,
  	fortran/108529, fortran/108609, fortran/108937, fortran/109186,
  	fortran/109511, fortran/109846, ipa/105685, ipa/106124, ipa/107944,
  	libquadmath/87204, libquadmath/94756, libstdc++/91456,
  	libstdc++/103934, libstdc++/104866, libstdc++/104875,
  	libstdc++/105844, libstdc++/106183, libstdc++/107801,
  	libstdc++/107814, libstdc++/108030, libstdc++/108118,
  	libstdc++/108265, libstdc++/108636, libstdc++/108856,
  	libstdc++/108952, libstdc++/109064, libstdc++/109261,
  	libstdc++/109949, lto/109263, middle-end/104450, middle-end/104464,
  	middle-end/106190, middle-end/107317, middle-end/108237,
  	middle-end/108264, middle-end/108435, middle-end/108459,
  	middle-end/108546, middle-end/108625, middle-end/108685,
  	middle-end/108854, other/108560, other/109306,
  	rtl-optimization/106751, rtl-optimization/107482,
  	rtl-optimization/108193, rtl-optimization/108596,
  	rtl-optimization/109585, target/70243, target/90458, target/96373,
  	target/98776, target/100758, target/104871, target/104921,
  	target/105554, target/105599, target/106736, target/106875,
  	target/107568, target/107714, target/107863, target/108272,
  	target/108348, target/108589, target/108699, target/108807,
  	target/108812, target/108881, target/109067, target/109140,
  	target/109276, testsuite/47334, testsuite/103823, testsuite/108151,
  	testsuite/108973, testsuite/108985, tree-optimization/105484,
  	tree-optimization/106809, tree-optimization/107107,
  	tree-optimization/107212, tree-optimization/107254,
  	tree-optimization/107323, tree-optimization/107451,
  	tree-optimization/107554, tree-optimization/107898,
  	tree-optimization/107997, tree-optimization/108068,
  	tree-optimization/108076, tree-optimization/108095,
  	tree-optimization/108199, tree-optimization/108498,
  	tree-optimization/108688, tree-optimization/108692,
  	tree-optimization/108821, tree-optimization/108950,
  	tree-optimization/109176, tree-optimization/109410,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109573,
  	tree-optimization/109724, tree-optimization/109778
    - PRs fortran/100607, libstdc++/109822, target/109954,
  	tree-optimization/109505


author: Marek Polacek <polacek@redhat.com> 11.4.1-2.1
changelog:
  - fix ICE on pr96024.f90 on big-endian hosts (PR fortran/96024, #2213211)
  - use -fno-stack-protector to fix bit-field aarch64 tests (#2213221)


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.0-5
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix segfault for the "l" command of gdb
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for other issues


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.2-2
changelog:
  - Fix an assertion failure in the gdb's copy_type()
  - Fix for "bt" command printing "bogus exception frame" warning


author: Lianbo Jiang <lijiang@redhat.com> - 8.0.4-2
changelog:
  - Fix the "dis -lr" not displaying the source file names
    and line numbers
  - Fix incorrect symbol translation by the 'struct blk_mq_ops'


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Never leave behind .repodata lock on exit (RhBug:1906831)
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-2
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:2055032)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.14
changelog:
  - vz7: systemd-autofs-restart.sh: fix error condition check (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147268)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.15
changelog:
  - zdtm: add overlayfs_nestedns test (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - overlayfs: do mount in mntns of lower/upper/workdir mounts (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - mount-v2: add remove_plain_mountpoint helper (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - mount-v2: export bind_plain_to_other_mntns helper (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - mount-v2: export create_plain_mountpoint helper (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - overlayfs: replace ret with exit_code in __overlayfs_mount (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - overlayfs: remove cwd recovery in overlayfs_mount (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)
   - overlayfs: call overlayfs_mount in child process (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147254)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.16
changelog:
  - mount-v2: copy flags to wide mount helpers (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-148010)
   - overlayfs: fix error handling in __overlayfs_mount (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.17
changelog:
  - filesystems: do binfmt_misc_restore only once (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147930)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.18
changelog:
  - soccr: do not disable tcp repair when sending unsent data (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147346)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.19
changelog:
  - sk-unix: ignore closed or non-empty in-flight sockets (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147983)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.20
changelog:
  - Revert "soccr: do not disable tcp repair when sending unsent data" (Pavel
  Tikhomirov <ptikhomirov@virtuozzo.com>) (#PSBM-147346 #PSBM-148050)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.21
changelog:
  - mount: skip source check for autofs mounts in bindmount search (Pavel
  Tikhomirov <ptikhomirov@virtuozzo.com>) (#PSBM-148081)


author: VZ Auto Builder <builder@virtuozzo.com> 3.18.0.22
changelog:
  - spfs: do mount request from mount namespace of nfs mount (Pavel Tikhomirov
  <ptikhomirov@virtuozzo.com>) (#PSBM-147276)
   - mount-v2: bind dev proc and sysfs for spfs into restored mount namespace
  (Pavel Tikhomirov <ptikhomirov@virtuozzo.com>) (#PSBM-147276)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git94f0e2c
changelog:
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (disabled in ELN)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git8dcf74d
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Alexander Sosedkin <asosedkin@redhat.com> - 20231016-1.git77ceb0b
changelog:
  - openssl: fix SHA1 and NO-ENFORCE-EMS interaction
  - bind: fix a typo that led to duplication of ECDSAPxxxSHAxxx


author: Clemens Lang <cllang@redhat.com> - 20231108-1.git994ae09
changelog:
  - turn ssh_etm into an etm@SSH tri-state (RHEL-15925)
  - fips-mode-setup: increase chroot-friendliness (RHEL-11350)
  - fips-mode-setup: Fix usage with --no-bootcfg (RHEL-11350)


author: Clemens Lang <cllang@redhat.com> - 20231109-1.git0ceff7f
changelog:
  - Restore support for scoped ssh_etm directives (RHEL-15925)
  - Print matches in syntax deprecation warnings (RHEL-15925)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
changelog:
  - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - fips-finish-install: Create/remove /etc/system-fips on ostree systems
  - java: disable ChaCha20-Poly1305 where applicable


author: Ondrej Kozina <okozina@redhat.com> - 2.4.3-1
changelog:
  - Update to cryptsetup 2.4.3.
  - patch: Fix typo in repair command prompt.
    Resolves: #2022309 #2023316 #2032782


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-2
changelog:
  - Fix FIPS related bugs.
  - Abort encryption when header and data devices are same.
  - Resolves: #2150251 #2148841


author: Daniel Zatovic <dzatovic@redhat.com> - 2.6.0-3
changelog:
  - patch: Disallow use of internal kenrel crypto driver names in "capi"
  - patch: Also disallow active devices with internal kernel names
  - patch: Fix init_by_name to allow unknown cipher format in dm-crypt
  - patch: Fix reencryption to fail properly for unknown cipher
  - patch: Fix activation of LUKS2 with capi format cipher and kernel
  - Resolves: #2212771


author: Vladis Dronov <vdronov@redhat.com> - 15.9-10
changelog:
  - Bring in important patches from the upstream (39fb38..eaea31 in a git repo)
  - Fix the upstream tarball URL
  - Remove outdated patch files


author: Vladis Dronov <vdronov@redhat.com> - 15.9-14
changelog:
  - Add distrubution patches which were not upstreamed (bz 2072635)
  - Add self-tests
  - Add OSCI harness


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.4-101
changelog:
  - resolves: rhbz#2216712 - Fix broken symlink for libwbclient
  - resolves: rhbz#2214327 - Fix segfault of winbind child when listing users with `winbind scan trusted domains = yes`
  - resolves: rhbz#2211605 - Fix access of Samba share with veto files = /.*/
  - resolves: rhbz#2207692 - Fix Python tarfile extraction to avoid a warning


author: Pavel Filipenský <pfilipen@redhat.com> - 4.18.5-100
changelog:
  - resolves: rhbz#2222895 - Fix CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968


author: Andreas Schneider <asn@redhat.com> - 4.18.6-100
changelog:
  - related: rhbz#2190415 - Update to version 4.18.6
  - resolves: rhbz#2211617 - Fix the rpcclient dfsgetinfo command


author: Andreas Schneider <asn@redhat.com> - 4.19.3-100
changelog:
  - resolves: RHEL-16476 - Update to version 4.19.3
  - resolves: RHEL-11362 - Fix security issues:
    CVE-2023-4091 CVE-2023-42669
  - resolves: RHEL-18030 - Logging Format Enhancement
  - resolves: RHEL-1960 - Fix smbget issues with DFS shares
  - resolves: RHEL-2118 - Fix force user/group issues with 'allow trusted domains = yes'
  - resolves: RHEL-16875 - Fix memory corruption in libnss_winbind
  - resolves: RHEL-19243 - Fix smbget password interactive authentication


author: Andreas Schneider <asn@redhat.com> - 4.19.4-100
changelog:
  - related: RHEL-16476 - Update to version 4.19.4
  - resolves: RHEL-2109 - Add support for certificate auto enrollment
  - resolves: RHEL-20761 - Add missing requirements for samba-gpupdate
  - resolves: RHEL-19566 - Fix smbget interactive authentication
  - resolves: RHEL-21001 - Fix samba-gpupdate paths for RHEL


author: Andreas Schneider <asn@redhat.com> - 4.19.4-102
changelog:
  - resolves: RHEL-22157 - Don't require NDES for samba-gpupdate
  - resolves: RHEL-20897 - Fix site name fetching for samba-gpupdate


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - 2217177 - Delays printing to lpd when reserved ports are exhausted
  - 2217284 - The command "cancel -x <job>" does not remove job files
  - 2217954 - Enlarge backlog queue for listen() in cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-19
changelog:
  - CVE-2023-34241 cups: use-after-free in cupsdAcceptClient() in scheduler/client.c
  - CVE-2023-32324 cups: heap buffer overflow may lead to DoS


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-22
changelog:
  - RHEL-14931 cupsd memory leak in cupsdDeleteJob() with "PreserveJobHistory Off"
  - RHEL-15308 cupsd fails to open cups-files.conf and the resulting error message is lost


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.3.3op2-23
changelog:
  - RHEL-19205 Recommend new cups-filters subpackages with weak dep for better upgrade exp
  - RHEL-19495 cupsGetJobs fails to connect if poll() gets POLLOUT|POLLHUP in revents


author: Kamil Dudka <kdudka@redhat.com> - 7.76.1-24
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-26
changelog:
  - unify the upload/method handling (CVE-2023-28322)
  - fix host name wildcard checking (CVE-2023-28321)


author: Jacek Migacz <jmigacz@redhat.com> - 7.76.1-28
changelog:
  - return error if hostname too long for remote resolve (CVE-2023-38545)
  - fix cookie injection with none file (CVE-2023-38546)
  - cap SFTP packet size sent (RHEL-14697)
  - lowercase the domain names before PSL checks (CVE-2023-46218)


author: Bryan Gurney <bgurney@redhat.com> - 71.1-7
changelog:
  - Pull in fixes from upstream v72 and v73 (Jeff Moyer)
  - Fix enable-namespace all reporting errors incorrectly
  - Add support for inject-smart on papr scm
  - Related: rhbz#2040075
  - Related: rhbz#1873851
  - Related: rhbz#1880578
  - Related: rhbz#1922538
  - Related: rhbz#2087707


author: Jeff Moyer <jmoyer@redhat.com> - 71.1-8
changelog:
  - Backport changes up to v74, excluding the config file changes. (Jeff Moyer)
    This includes support for the CXL commands, and adds the following
    packages: cxl-cli, cxl-devel, cxl-libs
  - Resolves: rhbz#2132167


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 2.1.27-12
changelog:
  - Incorporate the upstream gdbm specific patch from
    https://github.com/cyrusimap/cyrus-sasl/pull/554
  - Resolves rhbz#1947971


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 0.5.12.2
changelog:
  - dash_la.py: add 'vstorage-target' command (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90709)
   - dash_la.py: Add 'ploop' command (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90709)
   - dash_la.py: separate '/bin' & '/sbin' directories (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90709)
   - Add 'ostor-s3-cmd' command (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90651)
   - Add 'ostor-s3-admin' command (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90651)
   - Add 'ostor-ctl' command (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90651)
   - Run 'vstorage' command in real root (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>)
   - Attach same directories for 'ls' & 'stat' commands (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>)
   - Add read-only docker commands (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90717)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 0.5.12.3
changelog:
  - Make filesystem read-only when switching to real root (root <root@klm-
  master.vstoragedomain>) (#VSTOR-81420)
   - Make mounts private when attaching directories (root <root@klm-
  master.vstoragedomain>) (#VSTOR-81420)
   - Get rid of struct mount_entry (root <root@klm-master.vstoragedomain>) (#VSTOR-81420)
   - Switch to real mount namespace (root <root@klm-master.vstoragedomain>) (#VSTOR-81420)
   - Add 'ovs-ofctl' command (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90719)
   - Add command 'ovs-vsctl' (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90719)
   - Add 'virsh' command (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90723)


author: vzbuild <vzbuild@acronis.com> 0.5.12.4
changelog:
  - Initialize python in isolated mode (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Add 'cp', 'mv', 'rm' commands (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Make 'journalctl -f' work (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Drop network capabilities (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 0.5.12.5
changelog:
  - Use 'linux/capability.h' instead of 'sys/capability.h' (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Initialize python in isolated mode (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Add 'cp', 'mv', 'rm' commands (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Make 'journalctl -f' work (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)
   - Drop network capabilities (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-81420)


author: vzbuild <vzbuild@acronis.com> 0.5.12.6
changelog:
  - Add commands 'archive_ctl' & 'archive_io_ctl' (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-90529)
   - Run 'top' & 'htop' under non-root user (Eugene Kolomeetz
  <Evgeny.Kolomeetz@acronis.com>) (#VSTOR-91480)
   - Free 'dirs' array (Eugene Kolomeetz <Evgeny.Kolomeetz@acronis.com>)
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (Konstantin
  Volkov <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)


author: vzbuild <vzbuild@acronis.com> 0.5.12.7
changelog:
  - Do not attach whole /proc for 'journalctl' command (Eugene Kolomeetz
  <evgeny.kolomeetz@virtuozzo.com>)
   - Attach /proc for 'systemctl' & 'journalctl' commands (Eugene Kolomeetz
  <evgeny.kolomeetz@virtuozzo.com>)
   - Disable built-in 'kill' command (Eugene Kolomeetz
  <evgeny.kolomeetz@virtuozzo.com>) (#VSTOR-91548)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 0.5.12.101
changelog:
  - Correct version, see #VSTOR-93829 (#VSTOR-93829)
   - Correct targets.list for hci-6.3-u1 (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-6.3.1-vz (vzbuild <vzbuild@acronis.com>)


author: Bryan Gurney <bgurney@redhat.com> - 1.10-8.el9
changelog:
  - Supersede uninitialized value patch with upstream version
  - Add upstream patch: common: fix mismatch between prototype and body
  - Makefile: bypass check-doc in check target
  - Related: rhbz#1985096


author: Bryan Gurney <bgurney@redhat.com> - 1.10.1-1
changelog:
  - Update to PMDK version 1.10.1
  - Related: rhbz#1874208
  - Remove BuildRequires line for libfabric-devel
  - Related: rhbz#2009502


author: Jakub Martisko <jamartis@redhat.com> - 28-6
changelog:
  - Fix a stack buffer over-read in the c-shquote library
  - Fix null pointer reference when supplying a malformed XML config file
  Resolves: CVE-2022-31212
  Resolves: CVE-2022-31213


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Eugene Syromiatnikov <esyr@redhat.com> - 3.6-13
changelog:
  - Change "Requires: genisoimage" dependency to "Requires: /usr/bin/mkisofs"
    to enable xorriso-provided drop-in replacement implementation usage.


author: Sérgio Basto <sergio@serjux.com> - 1.0.123-1
changelog:
  - Update to 1.0.123
  - Undefine mangle_shebangs (#1654765)
  - Remove old scriplets, %{_datadir} and /usr/share is the same
    and %{_sbindir} and /usr/sbin is also the same


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-6
changelog:
  - Fix lvresize resizing LUKS device only when resizing FS is enabled.
  - Improve lvresize handling of renamed volumes.
  - Fix random unmount when resizing volume backed by thin pool.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.21-3
changelog:
  - Fix lvresize fail in case of multiple mountpoints.
  - Fix allocator for RAID LVs allocating multiple legs on single device.
  - Fix device id handling of WWIDs with trailing spaces.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.23-2
changelog:
  - Add warning message when mirror images have (r)efresh bit set.
  - Document lv_attr volume type bit (g) for raid+integrity in lvs(8).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-13
changelog:
  - Add 0062-multipathd-factor-out-the-code-to-flush-a-map-with-n.patch
  - Add 0063-libmultipath-return-success-if-we-raced-to-remove-a-.patch
  - Add 0064-multipathd-Handle-losing-all-path-in-update_map.patch
  - Resolves: bz #2125357


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-14
changelog:
  - Add 0065-multipathd-ignore-duplicated-multipathd-command-keys.patch
    * Fixes bz #2133999
  - Add 0066-multipath-tools-use-run-instead-of-dev-shm.patch
    * Fixes bz #2133989
  - Resolves: bz #2133989, #2133999


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-15
changelog:
  - Add 0067-kpartx-hold-device-open-until-partitions-have-been-c.patch
    * Fixes bz #2141860
  - Add 0068-libmultipath-cleanup-remove_feature.patch
  - Add 0069-libmultipath-cleanup-add_feature.patch
  - Add 0070-multipath-tests-tests-for-adding-and-removing-featur.patch
  - Add 0071-libmultipath-fix-queue_mode-feature-handling.patch
  - Add 0072-multipath-tests-tests-for-reconcile_features_with_qu.patch
  - Add 0073-libmultipath-prepare-proto_id-for-use-by-non-scsi-de.patch
  - Add 0074-libmultipath-get-nvme-path-transport-protocol.patch
  - Add 0075-libmultipath-enforce-queue_mode-bio-for-nmve-tcp-pat.patch
    * Fixes bz #2033080
  - Resolves: bz #2033080, #2141860


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-17
changelog:
  - Add 0077-libmultipath-don-t-leak-memory-on-invalid-strings.patch
  - Add 0078-libmutipath-validate-the-argument-count-of-config-st.patch
  - Resolves: bz #2145225


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-18
changelog:
  - Add 0079-libmultipath-use-select_reload_action-in-select_acti.patch
  - Add 0080-libmultipath-select-resize-action-even-if-reload-is-.patch
  - Add 0081-libmultipath-cleanup-ACT_CREATE-code-in-select_actio.patch
  - Add 0082-libmultipath-keep-renames-from-stopping-other-multip.patch
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-19
changelog:
  - Fix bugzilla linked to the changes (was previously linked to
    the wrong bug, 2162536)
  - Resolves: bz #2166467


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-20
changelog:
  - Add 0083-multipath.rules-fix-smart-bug-with-failed-valid-path.patch
  - Add 0084-libmultipath-limit-paths-that-can-get-wwid-from-envi.patch
  - Change how the installation dir for kpartx_id is specified
  - Resolves: bz #1926147


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-21
changelog:
  - Add 0085-multipathd-make-pr-registration-consistent.patch
  - Add 0086-libmultipath-make-prflag-an-enum.patch
  - Add 0087-multipathd-handle-no-active-paths-in-update_map_pr.patch
  - Add 0088-libmpathpersist-fix-resource-leak-in-update_map_pr.patch
  - Resolves: bz #2164869


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-22
changelog:
  - Add 0089-RH-Add-mpathcleanup.patch
    * Fixes RHEL-782
  - Add 0090-RH-make-listing-return-an-error-if-the-config-file-i.patch
  - Install mpathcleanup
    * Fixes RHEL-781
  - Resolves: #781, #782


author: Martin Osvald <mosvald@redhat.com> - 12:4.4.2-18.b1
changelog:
  - Fix for CVE-2022-2928
  - Fix for CVE-2022-2929
  - Use systemd-sysusers for dhcp user and group (#2095396)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 2.15.1.15
changelog:
  - Merge upstream debian-security patches,
  cb4e9fc072682060ea19fd9aed594b4e7a829b44
  50b1566fa466f431a81d7d79fa54f12c54ab339b
  6ed7f3b1399e6ad4414445735da118f1cd90fd59 , see #VSTOR-46250 (#VSTOR-46250)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 2.15.1.101
changelog:
  - Switch to 6.0.0 and python3, see #VSTOR-71061 (#VSTOR-71061)
   - Switch to 6.0.0, correct spec file, see #VSTOR-71061 (#VSTOR-71061)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 2.15.1.102
changelog:
  - Replace dib-python with direct python3 calls, see #VSTOR-72817 (#VSTOR-72817)
   - Add shebang to guest tools install script, Call kpartx remove in umount, not
  cleanup, see #VSTOR-72817 (#VSTOR-72817)


author: Artem Vasiliev <artem.vasiliev@virtuozzo.com> 1.0.42
changelog:
  - Add CCPP logrotate VSTOR-86950
   - Remove legacy /var/run PIDFile constant in service file ONAPP-1225


author: Konstantin Khorenko <khorenko@virtuozzo.com> 1.0.44
changelog:
  - rules: Drop rules related to Containers #PSBM-159323 (#PSBM-159323)
   - disp-helper.service: Update After: conditions #PSBM-158467 (#PSBM-158467)
   - target: Fix vzbuild machinery to enforce vzbuild br (#PSBM-158467)
   - Limit env variables for scripts execution, see #VSTOR-89534 (Konstantin
  Volkov <Konstantin.Volkov@acronis.com>)


author: Aleksandr Leskin <aleksandr.leskin@virtuozzo.com> 1.0.45
changelog:
  - improve sending reports tries #VSTOR-96393
   - added error logs for PrepareResults method #VSTOR-96393
   - fixed compilation warning about converting a string constant to 'char*'
   - fixed compilation warning about boost::placeholders


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.8.2
changelog:
  - Add text=True for subprocess.check_output where it is required (Anton
  Kurbatov <Anton.Kurbatov@acronis.com>) (#VSTOR-70974)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.9.1
changelog:
  - Decrease timeout for libvirt_stats, see #VSTOR-76882 (#VSTOR-76882)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-6.1.0-vz (vzbuild <vzbuild@acronis.com>)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.10.1
changelog:
  - Added freezer backup support to collector, see #VSTOR-83330 (#VSTOR-83330)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-6.2.0-vz (vzbuild <vzbuild@acronis.com>)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 1.10.2
changelog:
  - VSTOR-75558 Filter out the Azure credentials from stored data. (Artem
  Vasiliev <artem.vasiliev@virtuozzo.com>) (#VSTOR-75558)


author: Inga.Piass <ipyass@virtuozzo.com> 1.11.1
changelog:
  - Merged in PR-91406 (pull request #47) (Artem Vasiliev
  <artem.vasiliev@virtuozzo.com>) (#VSTOR-91406)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-6.3.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (Konstantin
  Volkov <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)


author: Artem Vasiliev <artem.vasiliev@virtuozzo.com> 1.11.101
changelog:
  - Fix wrong underscore parameters.
   - VSTOR-75558 Delete customer sensitive information from CEP report (#VSTOR-75558)
   - Correct targets.list for sdi-6.3u1 (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-6.3.1-vz (vzbuild <vzbuild@acronis.com>)


author: Lichen Liu <lichliu@redhat.com> - 1:3.5-2
changelog:
  - Add processor support from SMBIOS-3.6.0
  - Consistently use read_file when reading from a dump file


author: Lukas Hrazky <lhrazky@redhat.com> - 4.14.0-1
changelog:
  - Update to 4.14.0
  - Add doc related to --destdir and --downloadonly options (RhBug:2100811)
  - Fix broken dependencies error reporting (RhBug:2088422)
  - Add support for group upgrade rollback (RhBug:2016070)
  - Expose plugin unload method to API (RhBug:2047251)
  - Fix upgrade from file to noarch pkg (RhBug:2006018)
  - Allow passing plugin parameters with dashes in names (RhBug:1980712)
  - Don't include resolved advisories for obsoletes with sec. filters (RhBug:2101421)
  - Add only relevant pkgs to upgrade transaction (RhBug:2097757)
  - doc: Describe how gpg keys are stored for `repo_ggpcheck` (RhBug:2020678)
  - bash-completion: use sqlite cache when available


author: Nicola Sella <nsella@redhat.com> - 4.14.0-3
changelog:
  - Move system-upgrade plugin to core (RhBug:2131288)
  - offline-upgrade: add support for security filters (RhBug:1939975,2139326)
  - Fix plugins unit tests + unload plugins upon their deletion


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-6
changelog:
  - Add reboot option to DNF Automatic (RhBug:2124793)
  - Omit src RPMs from check-update (RhBug:2151910,2203069)
  - automatic: Fix online detection with proxy (RhBug:2022440,2189851)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-8
changelog:
  - Return an error when transaction fails (RhBug:2170093,2212262)
  - Document symbols in `dnf history list` output (RhBug:2172067,2218113)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.14.0-9
changelog:
  - Fix japanese translations (RHEL-11345)
  - Fix substitution in kay-value-pair list in add_new_repo (RHEL-6396)
  - base: Add obsoleters of only latest versions (RHEL-6304)


author: Denis Silakov <dsilakov@virtuozzo.com> 0.8
changelog:
  - No need in pyc
   - Adopt makefile
   - Adopt for dnf, VZP-1500
   - Fix config location
   - Adopt for dnf


author: Nicola Sella <nsella@redhat.com> - 4.3.0-2
changelog:
  - Move system-upgrade plugin to core (RhBug:2054235)
  - offline-upgrade: add support for security filters (RhBug:1939975)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-6
changelog:
  - Fix boot time derivation for systems with no rtc (RhBug:2166444,2182157)
  - system-upgrade: Add --poweroff option to reboot subcommand (RhBug:2157844)
  - Doc update for reposync (RhBug:2132383,2182004)
  - reposync: Implement --safe-write-path option (RhBug:1898089,2203766)
  - Enable the leaves and show-leaves DNF plugins (RhBug:2134638)


author: Jaroslav Rohel <jrohel@redhat.com> - 4.3.0-7
changelog:
  - Remove patch: "reposync: Implement --safe-write-path option (RhBug:1898089,2203766)" (RhBug:2207946)


author: Timothy Redaelli <tredaelli@redhat.com> - 21.11.2-1
changelog:
  - Rebase to 21.11.2 (#2126159)
  - Includes fixes for CVE-2022-2132 (#2107173) and CVE-2022-28199 (#2123616)


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-1
changelog:
  - Update to 1.20.9 (#1949336)
  - flex is not required anymore, doxygen is only needed if you call make doc
  - The dpkg-gettext.pl and controllib.pl are long obsolete, can be removed.
  - dpkg hasn't package install-info for a long time.
  - and others reviews


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-4
changelog:
  - add %config(noreplace) to avoid clean up databases on upgrades and to be
    compliant with silverblue


author: Pavel Valena <pvalena@redhat.com> - 057-20.git20221213
changelog:
  - refactor(url-lib): write curl output directly to file
  - fix(dracut-initramfs-restore.sh): initramfs detection not
  - fix(90kernel-modules): install blk modules using symbol
  - fix(squash): build ld cache for squash loader
  - test(16-DMSQUASH): make it pass on arch
  - feat(dmsquash-live): add new dmsquash-live-autooverlay module


author: Pavel Valena <pvalena@redhat.com> - 057-38.git20230725
changelog:
  - fix(dracut.sh): use dynamically uefi's sections offset
  - fix(dracut.sh): handle imagebase for uefi
  - fix(dracut.sh): use gawk for strtonum
  - fix(rngd): install system service file
  - fix(nvmf): nvme list-subsys prints the address using commas
  - fix(nvmf): don't try to validate network connections in
  - fix(nvmf): no need to load the nvme module
  - fix(nvmf): don't create did-setup file
  - fix(nvmf): don't use "finished" queue for autoconnect
  - fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes
  - fix(nvmf): avoid calling "exit" in a cmdline hook
  - fix(nvmf): run cmdline hook before parse-ip-opts.sh
  - feat(nvmf): set rd.neednet=1 if tcp records encountered
  - fix(nvmf): install 8021q module unconditionally
  - fix(nvmf): support /etc/nvme/config.json
  - feat(nvmf): add code for parsing the NBFT


author: Pavel Valena <pvalena@redhat.com> - 057-43.git20230816
changelog:
  - feat(spec): include modules for IMA
  - fix(dracut): there can be \ at the end on line in awk script
  - fix(rngd): spacing
  - fix(integrity): do not enable EVM if there is no key
  - fix(fips): include openssl's fips.so and openssl.cnf


author: Pavel Valena <pvalena@redhat.com> - 057-51.git20231114
changelog:
  - fix(dracut.sh): correct wrong systemd variable paths
  - fix(hwdb): follow shfmt-recommended format
  - feat(dracut): add --sbat option to add sbat policy to UKI
  - feat(systemd): install systemd-sysroot-fstab-check
  - fix(dracut.spec): add jq dependency to network subpackage
  - fix(fcoe-uefi): exit early on empty vlan


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Fix shellcheck warnings
  - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
  - fix load_override for non-PCI bus
  - Make sure driverctl had loaded all the overrides before basic.target


author: Hangbin Liu <haliu@redhat.com> - 1.5.3-5
changelog:
  - Update spec file
  - Update Makefile license
  - Update obsoleted m4 macros
  - Install new command dwdump


author: Hangbin Liu <haliu@redhat.com> - 1.5.4-1
changelog:
  - Update to version 1.5.4
  - Support packet drop reason reporting when included in netlink message
  - fix some minor compilation warnings/errors
  - clean up some comments about deadline support
  - convert configure.ac to use AM_PROG_LIBTOOL from outdated LT_INIT
  - Fix missing SOL_NETLINK define in glibc < 2.24
  - Fix licensing issues that didn't make sense
  - ignore ENOBUFS errors on data socket
  - adding arm64 travis ci testing
  - man page updates
  - move to libnl3 from libnl


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-6
changelog:
  - Gating rebuild [bz#1974188]
  - Resolves: bz#1974188
    (Define tests, including gating tests, for dtc)


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.18-1
changelog:
  - New release: 1.18
  - Use debugging info to pretty print raw data
  - Store percpu variables in vmlinux BTF.
  - Fixes to address segfaults on the gdb testsuite binaries
  - Bail out on partial units for now, avoiding segfaults and providing warning to user.


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.19-1
changelog:
  - New release: 1.19
  - Split BTF
  - DWARF workarounds for DW_AT_declaration
  - Support cross-compiled ELF binaries with different endianness
  - Support showing typedefs for anonymous types
  - Speedups using libbpf algorithms
  - See changes-v1.19 for a complete and more detailed list of changes


author: Arnaldo Carvalho de Melo <acme@redhat.com> - 1.20-1
changelog:
  - New release: v1.20
  - btf_encoder:
  - Improve ELF error reporting using elf_errmsg(elf_errno())
  - Improve objcopy error handling.
  - Fix handling of 'restrict' qualifier, that was being treated as a 'const'.
  - Support SHN_XINDEX in st_shndx symbol indexes
  - Cope with functions without a name
  - Fix BTF variable generation for kernel modules
  - Fix address size to match what is in the ELF file being processed.
  - Use kernel module ftrace addresses when finding which functions to encode.
  - libbpf:
  - Allow use of packaged version.
  - dwarf_loader:
  - Support DW_AT_data_bit_offset
  - DW_FORM_implicit_const in attr_numeric() and attr_offset()
  - Support DW_TAG_GNU_call_site, standardized rename of DW_TAG_GNU_call_site.
  - build:
  - Fix compilation on 32-bit architectures.


author: Jiri Olsa <jolsa@redhat.com> - 1.21-1
changelog:
  - remove ftrace filter
  - New release: v1.21
  - DWARF loader:
  - Handle DWARF5 DW_OP_addrx properly
  - Handle subprogram ret type with abstract_origin properly
  - Check .notes section for LTO build info
  - Check .debug_abbrev for cross-CU references
  - Permit merging all DWARF CU's for clang LTO built binary
  - Factor out common code to initialize a cu
  - Permit a flexible HASHTAGS__BITS
  - Use a better hashing function, from libbpf
  - btf_encoder:
  - Add --btf_gen_all flag
  - Match ftrace addresses within ELF functions
  - Funnel ELF error reporting through a macro
  - Sanitize non-regular int base type
  - Add support for the floating-point types
  - Pretty printer:
  - Honour conf_fprintf.hex when printing enumerations


author: Jiri Olsa <jolsa@redhat.com> - 1.22-1
changelog:
  - New release: v1.22
  - Resolves: rhbz#2010414
  - Introduce -j/--jobs option to specify the number of threads to use.
  - Multithreaded DWARF loading, requires elfutils >= 0.178.
  - Preparatory work for multithreaded BTF encoding, the focus for 1.23.
  - Allow encoding BTF to a separate file.
  - Show all different types with the same name, not just the first one found.
  - Stop assuming that reading from stdin means pretty, add --prettify.
  - Improve type resolution for the --header command line option.
  - Do not consider the ftrace filter when encoding BTF for kernel functions.
  - Lock calls to non-thread safe elfutils' dwarf_decl_file() and dwarf_decl_line().
  - Change hash table size to one that performs better with current typical vmlinux files.
  - Allow tweaking the hash table size from the command line.
  - Add --kabi_prefix to avoid deduplication woes when using _RH_KABI_REPLACE().
  - Add --with_flexible_array to show just types with flexible arrays.
  - Support btfdiff with a detached BTF file.
  - Introduce sorted type output (--sort).
  - Disable incomplete CTF encoder.


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-2
changelog:
  - edk2-ArmVirt-add-VirtioSerialDxe-to-ArmVirtQemu-builds.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtio.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-factor-out-IsVirtioPc.patch [RHEL-643]
  - edk2-ArmVirt-PlatformBootManagerLib-set-up-virtio-serial-.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-use-TPL_NOTIFY.patch [RHEL-643]
  - edk2-OvmfPkg-VirtioSerialDxe-Remove-noisy-debug-print-on-.patch [RHEL-643]
  - edk2-OvmfPkg-PlatformInitLib-limit-phys-bits-to-46.patch [bz#2174749]
  - edk2-Revert-OvmfPkg-disable-dynamic-mmio-window-rhel-only.patch [bz#2174749]
  - edk2-UefiCpuPkg-MpInitLib-fix-apic-mode-for-cpu-hotplug.patch [bz#2124143]
  - edk2-OvmfPkg-PlatformInitLib-check-PcdUse1GPageTable.patch [RHEL-644]
  - edk2-OvmfPkg-OvmfPkgIa32X64-enable-1G-pages.patch [RHEL-644]
  - edk2-OvmfPkg-MicrovmX64-enable-1G-pages.patch [RHEL-644]
  - Resolves: RHEL-643
    (add virtio serial support to armvirt)
  - Resolves: bz#2174749
    ([edk2] re-enable dynamic mmio window)
  - Resolves: bz#2124143
    (ovmf must consider max cpu count not boot cpu count for apic mode [rhel-9])
  - Resolves: RHEL-644
    (enable gigabyte pages)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-3
changelog:
  - edk2-OvmfPkg-AmdSev-fix-BdsPlatform.c-assertion-failure-d.patch [bz#2190244]
  - edk2-OvmfPkg-IoMmuDxe-add-locking-to-IoMmuAllocateBounceB.patch [bz#2211060]
  - edk2-OvmfPkg-AmdSevDxe-Shim-Reboot-workaround-RHEL-only.patch [bz#2218196]
  - Resolves: bz#2190244
    ([EDK2] [AMDSERVER 9.3 Bug] OVMF AP Creation Fixes)
  - Resolves: bz#2211060
    (SEV-es guest randomly stuck at boot to hard drive screen from powerdown and boot again)
  - Resolves: bz#2218196
    (Add vtpm devices with OVMF.amdsev.fd causes VM reset)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20230524-4
changelog:
  - edk2-OvmfPkg-ResetVector-Fix-assembler-bit-test-flag-chec.patch [RHEL-9943]
  - Resolves: RHEL-9943
    ([EDK2][AMDSERVER Bug] OvmfPkg/ResetVector: Fix assembler bit test flag check [rhel-9.3.0.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-1
changelog:
  - Rebase to edk2-stable202311 [RHEL-12323]
  - Switch to OpenSSL 3.0 [RHEL-49]
  - Resolves: RHEL-12323
    (Rebase EDK2 for RHEL 9.4)
  - Resolves: RHEL-49
    (consume / bundle RHEL-9 OpenSSL (version 3.0.x) in RHEL-9 edk2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-2
changelog:
  - edk2-OvmfPkg-RiscVVirt-use-gEfiAuthenticatedVariableGuid-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-stop-accepting-gEfiVariableG.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-sanity-check-variables.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-3
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411.patch [RHEL-21155]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4117.patch [RHEL-21155]
  - edk2-SecurityPkg-Adding-CVE-2022-36763-to-SecurityFixes.y.patch [RHEL-21155]
  - Resolves: RHEL-21155
    (CVE-2022-36763 edk2: heap buffer overflow in Tcg2MeasureGptTable() [rhel-9])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-4
changelog:
  - edk2-OvmfPkg-VirtNorFlashDxe-add-casts-to-UINTN-and-UINT3.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-clarify-block-write-logic-fi.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-add-a-loop-for-NorFlashWrite.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-allow-larger-writes-without-.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-ValidateFvHeader-unwritten-s.patch [RHEL-20963]
  - edk2-OvmfPkg-VirtNorFlashDxe-move-DoErase-code-block-into.patch [RHEL-20963]
  - Resolves: RHEL-20963
    ([rhel9] guest fails to boot due to ASSERT error)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-5
changelog:
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-4118.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpm2MeasureBootLib-SECURITY-PATCH-411-2.patch [RHEL-21157]
  - edk2-SecurityPkg-DxeTpmMeasureBootLib-SECURITY-PATCH-411-3.patch [RHEL-21157]
  - edk2-SecurityPkg-Updating-SecurityFixes.yaml-after-symbol.patch [RHEL-21157]
  - edk2-OvmfPkg-Sec-Setup-MTRR-early-in-the-boot-process.patch [RHEL-21704]
  - edk2-MdePkg-ArchitecturalMsr.h-add-defines-for-MTRR-cache.patch [RHEL-21704]
  - edk2-UefiCpuPkg-MtrrLib.h-use-cache-type-defines-from-Arc.patch [RHEL-21704]
  - edk2-OvmfPkg-Sec-use-cache-type-defines-from-Architectura.patch [RHEL-21704]
  - Resolves: RHEL-21157
    (CVE-2022-36764 edk2: heap buffer overflow in Tcg2MeasurePeImage() [rhel-9])
  - Resolves: RHEL-21704
    (vGPU VM take several minutes to show tianocore logo if firmware is ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20231122-6
changelog:
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Add-Unit-tests-to-CI-and-create-Host-Test.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45230-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Pa.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Un.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45231-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Patc.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Ip6Dxe-SECURITY-PATCH-CVE-2023-45232-Unit.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p2.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p3.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-UefiPxeBcDxe-SECURITY-PATCH-CVE-2023-4523p4.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Adds-a-SecurityFix.yaml-file.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-SECURITY-PATCH-CVE-2023-45229-Re.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Removes-duplicate-check-and-repl.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Dhcp6Dxe-Packet-Length-is-not-updated-bef.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - edk2-NetworkPkg-Updating-SecurityFixes.yaml.patch [RHEL-21841 RHEL-21843 RHEL-21845 RHEL-21847 RHEL-21849 RHEL-21851 RHEL-21853]
  - Resolves: RHEL-21841
    (CVE-2023-45229 edk2: Integer underflow when processing IA_NA/IA_TA options in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21843
    (CVE-2023-45230 edk2: Buffer overflow in the DHCPv6 client via a long Server ID option [rhel-9])
  - Resolves: RHEL-21845
    (CVE-2023-45231 edk2: Out of Bounds read when handling a ND Redirect message with truncated options [rhel-9])
  - Resolves: RHEL-21847
    (CVE-2023-45232 edk2: Infinite loop when parsing unknown options in the Destination Options header [rhel-9])
  - Resolves: RHEL-21849
    (TRIAGE CVE-2023-45233 edk2: Infinite loop when parsing a PadN option in the Destination Options header [rhel-9])
  - Resolves: RHEL-21851
    (CVE-2023-45234 edk2: Buffer overflow when processing DNS Servers option in a DHCPv6 Advertise message [rhel-9])
  - Resolves: RHEL-21853
    (TRIAGE CVE-2023-45235 edk2: Buffer overflow when handling Server ID option from a DHCPv6 proxy Advertise message [rhel-9])


author: Alexander Ivanov <alexander.ivanov@virtuozzo.com> - vz-20231122-6.vz9.1
changelog:
  - OvmfPkg: mark VBE shim reserved for Windows 2008
  - SecurityPkg: Do not enable Secure Boot implicitly #VSTOR-82474 #VSTOR-82135


author: Mark Wielaard <mjw@redhat.com> - 0.187-4
changelog:
  - Upgrade to elfutils 0.187
    - debuginfod: Support -C option for connection thread pooling.
    - debuginfod-client: Negative cache file are now zero sized instead
      of no-permission files.
    - addr2line: The -A, --absolute option, which shows file names
      includingthe full compilation directory is now the
      default.  To get theold behavior use the new option --relative.
    - readelf, elflint: Recognize FDO Packaging Metadata ELF notes
    - libdw, debuginfo-client: Load libcurl lazily only when files need
      to be fetched remotely. libcurl is now never loaded when
      DEBUGINFOD_URLS is unset. And whenDEBUGINFOD_URLS is set,
      libcurl is only loaded when the debuginfod_begin function is
      called.
  - Add elfutils-0.187-csh-profile.patch
  - Add elfutils-0.187-debuginfod-client-fd-leak.patch
  - Add elfutils-0.187-mhd_no_dual_stack.patch
  - Add elfutils-0.187-mhd_epoll.patch


author: Frank Ch. Eigler <fche@redhat.com> - 0.187-5
changelog:
  - rhbz2088774: ship /etc/profile.d/debuginfod* files even without
                 default DEBUGINFOD_URLS.


author: Mark Wielaard <mjw@redhat.com> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Jacek Migacz <jmigacz@redhat.com> - 1:27.2-9
changelog:
  - Fix etags local command injection vulnerability (#2175190)
  - Fix htmlfontify.el command injection vulnerability (#2175179)
  - Fix ruby-mode.el local command injection vulnerability (#2175142)
  - Fix ob-latex.el command injection vulnerability (#2180590)


author: Jacek Migacz <jmigacz@redhat.com> - 12.3-1
changelog:
  - Fix build failure on CentOS Stream. Related: rhbz#1951306
  - Revert patch for FSF addresses (it became obsolete with 12.2)
  - Remove Obsoletes and Provides tetex-preview


author: Sundeep Anand <suanand@redhat.com> - 0.21-6
changelog:
  - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
    Add gettext-0.21-disable-libtextstyle.patch
    Do not build libtextstyle, as it depends on libcroco
    which is now unmaintained and has known security bugs.
    Obsolete libtextstyle and libtextstyle-devel packages.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Use “from unittest import mock” instead of just “import mock”.
  - Update emoji annotations from CLDR
  - Translation update from Weblate for zh_CN (still 100% complete)


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-1
changelog:
  - Update to 2.10.5
  - Run the voikko tests only for libvoikko version >= 4.3
  - Adapt voikko test cases to the newest voikko version
    libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
  - Log a warning when language is “fi” and “import libvoikko” failed
  - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
  - Update emoji annotations from CLDR, switching “no” and “nb”
    See: https://unicode-org.atlassian.net/browse/CLDR-2698
  - Remove icon in emoji-picker.appdata.xml (to avoid warnings
    from appstream-util and appstreamcli).


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-2
changelog:
  - Use the voikko build requires only for Fedora. They are only
    needed to run the voikko test cases during build.


author: Mike FABIAN <mfabian@redhat.com> - 2.10.5-3
changelog:
  - Remove gnome-desktop-testing and ibus-desktop-testing from the requires
    of the ibus-typing-booster-tests subpackage


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0
  - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
  - Don’t let dialog action area of setup tool expand.
  - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
  - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
  - Elide extremely long candidates in the lookup table in the middle.
  - If a candidate contains newlines, replace the newlines with arrows in the lookup table.
  - If a commit string contains new-lines, commit it in several chunks
    and forward Return between the chunks.
  - Update emoji annotations from CLDR
  - Put the remote icon back in emoji-picker.appdata.xml, it was a
    false positive by appstreamcli
  - Translation update from Weblate (pt_PT updated, 100% complete now)
  - Skip the inscript2 test cases if these transliterations are not available.


author: Mike FABIAN <mfabian@redhat.com> - 2.11.0-3
changelog:
  - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.6.6-19
changelog:
  - 1664367 - [RFE] Add support for 885915 encoding in enscript
  - remove old Obsoletes/Provides
  - fix gnulib CVE


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-0.1.alpha
changelog:
  - Update to 5.0.0-alpha (#1989523)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Remove createmodule.sh and createmodule.py utilities ('module sh-to-mod'
    should be used instead)
  - Remove configure options that have been made default starting version 5.0
  - Remove compat subpackage
  - Run non-regression tests in quick mode


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.0.0-1
changelog:
  - Update to 5.0.0 (#2004402)
    + Based on spec by Xavier Delaruelle in Fedora Rawhide. Thanks a lot!
  - Configuration guide example.txt is replaced by more up to date INSTALL.txt
    document


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 8-24
changelog:
  - Fix macros.build-constraints' %limit_build
    - number of CPUs will never be set to less than 1
    - this now outputs build flag overrides to be used with %make_build etc.
    - add documentation


author: Jeff Law <law@redhat.com> - 1.1.2-7
changelog:
  - Force C++14 as this code is not C++17 ready
  - Fix sprintf format issue
  - Fix ordered comparison of a pointer against zero issue
  -


author: Jack Magne <jmagne@redhat.com> - 1.1.2-14
changelog:
  Resolves: rhbs #2007544,2000928,2000929
  - Bugzilla Bug  2007544 - The esc provides outdated configuration for opensc
  - Bugzilla Bug  2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0]
  - Bugzilla Bug  2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0]


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Milan Crha <mcrha@redhat.com> - 3.40.4-10
changelog:
  - Related: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add dependency on newly introduced evolution-data-server-ui


author: Milan Crha <mcrha@redhat.com> - 3.40.4-8
changelog:
  - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage)
  - Add requirement on ui subpackage into ui-devel subpackage


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-4
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993247

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993284


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018421

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003670


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.10-10
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Tomas Korbar <tkorbar@redhat.com> - 2.4.7-1
changelog:
  - Rebase to version 2.4.7
  - Resolves: rhbz#2067201
  - Resolves: CVE-2022-25313
  - Resolves: CVE-2022-25314
  - Resolves: CVE-2022-25236


author: Tomas Korbar <tkorbar@redhat.com> - 2.5.0-2
changelog:
  - Fix parsing of large tokens
  - Reject direct parameter entity recursion
  - Resolves: RHEL-29699
  - Resolves: RHEL-29696


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.25.3-2
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
  - Add upstreamed patches:
    0001-libfakeroot.c-define-_STAT_VER-if-not-already-define.patch
    0002-libfakeroot.c-add-wrappers-for-new-glibc-2.33-symbol.patch
    0003-libfakeroot.c-fix-compile-error-with-DEBUG-enabled.patch
    0004-configure.ac-fix-__xmknod-at-pointer-argument.patch
  - Add patch "STAT_VER changes for different architectures"


author: Radovan Sroka <rsroka@redhat.com> - 1.0.3-3
changelog:
  RHEL 9 BETA
  - SELinux prevents fapolicyd from watch_mount/watch_with_perm on /dev/shm
  Resolves: rhbz#1932225
  Resolves: rhbz#1977731


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-101
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespaces in trust files
  - use full paths in trust files
  Resolves: rhbz#2032408
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#2015307
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014449


author: Radovan Sroka <rsroka@redhat.com> - 1.1-100
changelog:
  RHEL 9.0.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#2032408
  - introduce rules.d
  Resolves: rhbz#2054740
  - remove pretrans scriptlet
  Resolve: rhbz#2051481


author: Radovan Sroka <rsroka@redhat.com> - 1.1-104
changelog:
  RHEL 9.1.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069123
  - Faulty handling of static applications
  Resolves: rhbz#2096457


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102
changelog:
  RHEL 9.1.0 ERRATUM
  - rebase fapolicyd to the latest stable vesion
  Resolves: rhbz#2100041
  - fapolicyd gets way too easily killed by OOM killer
  Resolves: rhbz#2097385
  - fapolicyd does not correctly handle SIGHUP
  Resolves: rhbz#2070655
  - Introduce ppid rule attribute
  Resolves: rhbz#2102558
  - fapolicyd often breaks package updates
  Resolves: rhbz#2111244
  - drop libgcrypt in favour of openssl
  Resolves: rhbz#2111938
  - Remove dnf plugin
  Resolves: rhbz#2113959
  - fapolicyd.rules doesn't advertise that using a username/groupname instead of uid/gid also works
  Resolves: rhbz#2115849


author: Radovan Sroka <rsroka@redhat.com> - 1.1.3-102.7
changelog:
  RHEL 9.1.0.Z ERRATUM
  - statically linked app can execute untrusted app
  Resolves: rhbz#2137254
  - fapolicyd ineffective with systemd DynamicUser=yes
  Resolves: rhbz#2137263


author: Chris Leech <cleech@redhat.com> - 1.0.34-0.git14ef0d2
changelog:
  - upstream 1.0.34
  - drop gcc warning diabling patch, upstream fixes exist for these issues now
  - #1961180 FCoE interface name regressions


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62.1
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29668


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 6.4.24-1
changelog:
  - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272)
    Resolves: #2005307, #1999276


author: Matvey Kolesnikov <matvey.kolesnikov@acronis.com> 8.14.2
changelog:
  - Updated to 8.14.2
  - Enable FIPS support (VSTOR-89677)
  - Fix huge amount of useless warning logs ('has no content yet') in /var/log/messages (VSTOR-89048)


author: Ondrej Vasik <ovasik@redhat.com> - 3.11-1
changelog:
  - drop ownership for /etc/xinet.d (#1691146)
  - drop ownership for /usr/lib64/tls, /usr/lib64/sse2 (#1702329)


author: Pavel Raiskup <praiskup@redhat.com> - 3.14-4
changelog:
  - /proc and /sys made %ghost to allow filesystem package updates in rootless
    container environments (rhbz#1548403)


author: Eric Sandeen <sandeen@redhat.com> 3.25-3
changelog:
  - Fix segfault with external IO engines and multiple threads
  - Enable dev-dax, pmemblk, libpmem engines for ppc64le


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-1
changelog:
  - Rebase to 2.6.4
  - Fix build failure due to missing include and `reallocarray' prototype
  - Add gettext-devel, automake and libtool to build dependencies, and
    execute `autoreconf -i' to regenerate files after patching configure.ac


author: Arjun Shankar <arjun@redhat.com> - 2.6.4-6
changelog:
  - Re-work flex subpackages and provide shared libraries (#1327851):
  - Remove and obsolete the flex-devel subpackage containing static libraries
  - Provide shared libraries in a new subpackage named libfl2
  - Provide development files in a new subpackage named libfl-devel
  - Provide static libraries in a new subpackage named libfl-static


author: Adam Jackson <ajax@redhat.com> - 1.3.5-9
changelog:
  - Remove BuildRequires xprop entirely. If present, the configure script will call
    it looking for a property on the root window that Fedora's X server does not
    set, and which would not work anyway since there is no X server running in the
    buildroot, so we can just remove the dependency.


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 8.1.1-4
changelog:
  - Backport fix handling of formattable types implicitly convertible to pointers (fixes: rhbz#2059736)


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.9.18-0.6.20200715git0cd2e4a
changelog:
  - Use newest code from upstream, fixes build
  - Update foma-harden-build.patch
  - Package the pkgconfig file


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.9.18-0.9.20200928gitb44022c
changelog:
  - Fix typo in spec
  - Rewrite patch, name it foma-harden-build-fedora.patch and explain the need for it


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.10.0-0.1.20210601gitdfe1ccb
changelog:
  - Upstream "release" 0.10.0
  - The release has not been made into a tarball yet
  - Fixes bugs, including segfaults, so I'm using the git checkout in Fedora


author: Fabio Alessandro Locati <fale@fedoraproject.org> - 5.13.1-2
changelog:
  - Provide the right font configuration
  - Drop ttf format since upstream affirms that otf is to be preferred


author: Akira TAGOH <tagoh@redhat.com> - 2.13.94-2
changelog:
  - Fix the score calculation on matching for multiple values.
  - Enable 11-lcdfilter-default.conf.
    Resolves: rhbz#1965684
  - Rebase to the latest release.
    Resolves: rhbz#2023161


author: Akira TAGOH <tagoh@redhat.com> - 2.13.95-1
changelog:
  - New upstream release.
  - Update deps to font(notosans)
    https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts


author: Akira TAGOH <tagoh@redhat.com> - 2.14.0-1
changelog:
  - New upstream release.
  - Rebase to 2.14 and revert Noto Default change happened in f36.
    Resolves: rhbz#2075393


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Benjamin Berg <bberg@redhat.com> - 1.94.0-3
changelog:
  - Use GFDL abbreviation as GFDLv1.1+ is not listed
  - Install PAM module into /usr
  - Pull in further test fixes


author: Pavel Cahyna <pcahyna@redhat.com> - 1.6.14-2
changelog:
  - Apply upstream patch 41d0d70f
    ipmi-config: fix incorrect output of IPv6_Dynamic_Address_Source_Type


author: Antonio Torres <antorres@redhat.com> - 3.0.21-31
changelog:
  - Update OpenSSL 3.0 support backport to current v3.0.x branch state
  - Add "--enable-fips-workaround" to build options
    Related: rhbz#2083699


author: Antonio Torres <antorres@redhat.com> - 3.0.21-34
changelog:
  - Use GID / UID 95 as it's reserved for FreeRADIUS (https://pagure.io/setup/blob/07f8debf03dfb0e5ed36051c13c86c8cd00cd241/f/uidgid#_107)
    Resolves: #2095403


author: Ondrej Holy <oholy@redhat.com> - - 2:2.4.1-4
changelog:
  - CVE-2022-39282: Fix length checks in parallel driver (#2136152)
  - CVE-2022-39283: Add missing length check in video channel (#2136154)
  - CVE-2022-39316, CVE-2022-39317: Add missing length checks in zgfx (#2145140)
  - CVE-2022-39318: Fix division by zero in urbdrc channel (#2145140)
  - CVE-2022-39319: Add missing length checks in urbdrc channel (#2145140)
  - CVE-2022-39320: Ensure urb_create_iocompletion uses size_t (#2145140)
  - CVE-2022-39347: Fix path validation in drive channel (#2145140)
  - CVE-2022-41877: Add missing length check in drive channel (#2145140)


author: Ondrej Holy <oholy@redhat.com> - 2:2.11.2-1
changelog:
  - Update to 2.11.2 (RHEL-4290, RHEL-4292, RHEL-4296, RHEL-4298, RHEL-4300,
    RHEL-4302, RHEL-4304, RHEL-4306, RHEL-4308, RHEL-4310, RHEL-4312,
    RHEL-10060)


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Akira TAGOH <tagoh@redhat.com> - 1.0.10-6.el9.2
changelog:
  - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310
    Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063


author: Michal Ruprich <mruprich@redhat.com> - 0.17-85
changelog:
  - Use make_build macro and remove hard-coded gcc
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make


author: Richard Hughes <richard@hughsie.com> 1.5.9-4
changelog:
  - Rebuilt to use redhatsecureboot503 signatures
  - Undo last Fedora sync to use the RHEL-specific patches
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.1-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Dell TBT4 Docking stations
  - Resolves: rhbz#1974347
  - Resolves: rhbz#1991426


author: Richard Hughes <richard@hughsie.com> 1.7.4-1
changelog:
  - New upstream release
  - Backport Fedora 34 changes
  - Include support for Lenovo TBT4 Docking stations
  - Do not cause systemd-modules-load failures
  - Build against a new enough pesign
  - Resolves: rhbz#2007520


author: Richard Hughes <richard@hughsie.com> 1.7.4-3
changelog:
  - Disable the Logitech bulkcontroller plugin to avoid adding a dep to protobuf-c
    which lives in AppStream, not BaseOS.
  - Use the efi_vendor variable from EFI-RPM
  - Resolves: rhbz#2064904


author: Richard Hughes <rhughes@redhat.com> 1.7.9-2
changelog:
  - Include the new dbx updates on the filesystem; clients typically do not have LVFS enabled.
  - Resolves: rhbz#2120708


author: Richard Hughes <richard@hughsie.com> 1.8.10-1
changelog:
  - Rebase to latest upstream release to fix multiple ESP detection problems
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Richard Hughes <richard@hughsie.com> 1.8.10-2
changelog:
  - Rebuild because distrobaker did entirely the wrong thing.
  - Resolves: rhbz#2128384, needed for rhbz#2119436 and rhbz#2128384


author: Lukas Javorsky <ljavorsk@redhat.com> - 26.4.9-2
changelog:
  - Explicitly require the 'procps-ng' package
  - Otherwise it will not require it in the lightweight systems (e.g. containers)
  - and Galera won't work properly


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 10.97-1
changelog:
  - Annocheck: Add test for binaries built by cross compilers.
  - Annocheck: Improve heuristic used to detect binaries without code. (#2144533)


author: Nick Clifton <nickc@redhat.com> - 11.02-1
changelog:
  - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
  - Annocheck: Add more special glibc filenames.  (#2158100)


author: Nick Clifton <nickc@redhat.com> - 11.05-1
changelog:
  - Annocheck: Fix handling of empty files.  (#2159292)
  - Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
  - Annocheck: Fix memory leaks.


author: Nick Clifton <nickc@redhat.com> - 11.06-1
changelog:
  - Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
  - Spec file: Enable annotated building.


author: Nick Clifton <nickc@redhat.comn> - 2.38-17
changelog:
  - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216446)


author: Nick Clifton <nickc@redhat.comn> - 2.38-17.1
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2220917)


author: Nick Clifton <nickc@redhat.comn> - 2.38-18
changelog:
  - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages.  (#2216456)


author: Marek Polacek <polacek@redhat.com> 12.2.1-4
changelog:
  - update from releases/gcc-12 branch (#2110583)
  - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST
    (PR libstdc++/107468)


author: Kevin Buettner - 11.2-2
changelog:
  - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
    (This is a workaround for the bogus warning/error that we now see
    on i686 regarding a "may write a terminating nul past the end of
    the destination" message for the sprintf() call in
    global_symbol_searcher::search() in gdb/symtab.c.)


author: Kevin Buettner - 11.2-3
changelog:
  - Backport upstream patch which removes sizes from debuginfod download
    messages when the size is not available (RHBZ 2068280, Aaron Merey).


author: Marek Polacek <polacek@redhat.com> - 12.0-3
changelog:
  - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in
    the -runtime subpackage (#2009528)


author: Nick Clifton <nickc@redhat.com> - 12.14-1
changelog:
  - Annocheck: Do not ignore separate debuginfo files that do not contain any DWARF.  (#2144553)
  - Annocheck: Ignore /dev/null filename in string notes.
  - Annocheck: More tweaks to glibc detection heuristics.  (#2215968)


author: Nick Clifton <nickc@redhat.com> - 12.16-1
changelog:
  - Spec File: Rebuild with annobin annotation.  (#2217814)
  - Annocheck: Ignore weak/undef function symbols when checking to see if a binary contains code.  (#2217840)
  - Annocheck: Add --suppress-version-warnings option.


author: Nick Clifton <nickc@redhat.com> - 12.20-1
changelog:
  - Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
  - GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-12
changelog:
  - Spec File: Enable building with GTS-13 gcc.  (#2217819)
  - Spec File: Sync version number with c8s.


author: Marek Polacek <polacek@redhat.com> 13.1.1-1
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - GCC 13.1 release
    - PRs c/107041, target/109566
  - remove libcc1


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Marek Polacek <polacek@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch (#2188499)
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Kevin Buettner <kevinb@redhat.com> - 12.1-13
changelog:
  - Backport fix for problems associated with GCC 13's self-move warning.
    (Jan-Benedict Glaw)
  - Tweak gdb-6.6-buildid-locate-rpm.patch so that running GDB's configure
    script will not error out due to GCC 13's warnings.


author: Keith Seitz <keiths@redhat.com> - 12.1-14
changelog:
  From Sergey Mende:
  - Backport upstream patch "gdb: call check_typedef at beginning of
    dwarf_expr_context::fetch_result". (Simon Marchi)


author: Kevin Buettner <kevinb@redhat.com> - 12.1-16
changelog:
  - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
    and $_gdb_minor will be obtained correctly.


author: Keith Seitz <keiths@redhat.com> - 12.1-2.el9
changelog:
  - Backport binutls/29699 "Fix an illegal memory access when parsing..."
    (Nick Clifton, RHBZ 2153228)


author: Filip Januš <fjanus@redhat.com> - 2.2.5-12
changelog:
  - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
  - Resolves: #1599032


author: Filip Januš <fjanus@redhat.com> - 2.3.1-1
changelog:
  - Upstream released new version 2.3.1
  - patch bug615 is no more needed - fixed by upstream in release
  - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
    x390s - XFAIL_TEST definition for x390s is no more necessary


author: Filip Januš <fjanus@redhat.com> - 2.3.2-1
changelog:
  - Add condition if fedora for packages not available in RHEL
  - enable avif support
  - use bcond
  - rebase to version 2.3.2


author: Filip Januš <fjanus@redhat.com> - 1.18.1-3
changelog:
  - Resolves: #1799391
  - After upgrade GCC to version gcc version 10.0.1 build fails
  - Patch gdbm_gcc_10.patch was added


author: Tomas Popela <tpopela@redhat.com> - 2.42.6-3
changelog:
  - Backport fixes for CVE-2021-46829 and CVE-2021-44648
  - Resolves: rhbz#2115213
  - Resolves: rhbz#2044346


author: Ray Strode <rstrode@redhat.com> - 40.1-15
changelog:
  - Fix accountsservice user templates
    Resolves: #2062827
  - Properly force Xorg on matrox cards
    Related: #2074013
  - Fix typo that prevents the correct session type from being
    used when user switching.
    Resolves: #2074014


author: Ray Strode <rstrode@redhat.com> - 40.1-23
changelog:
  - Make /var/log/gdm tmpfiles.d snippet match files manifest
    to fix installability test
    Related: RHEL-19410


author: Sandro Mani <manisandro@gmail.com> - 5.2.1-5
changelog:
  - Fix several defects found by Coverity scan
  - Generate HTML docs with consistent section IDs to avoid multilib difference


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-8
changelog:
  - Resolve use after free introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-9
changelog:
  - Resolve s390x crashes introduced by fixes for CVE-2023-24593/CVE-2023-25180
  - Related: #2181196
  - Related: #2181200


author: Michael Catanzaro <mcatanzaro@redhat.com> - 2.68.4-11
changelog:
  - Really fix authentication failures when sd-bus clients connect to GDBus servers
  - Resolves: #2217771


author: brian@bstinson.com - 2.28-42
changelog:
  - Adapted from Fedora's glibc32 package: https://src.fedoraproject.org/rpms/glibc32/tree/74c2744f44def24f5911291159547e77352641a2


author: Robert-André Mauchin <zebob.m@gmail.com> - 0.13.2-10
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Joonas Sarajärvi <muep@iki.fi> - 0.9.9.8-1
changelog:
  - New upstream release (#1823615)
  - pkgconfig support is no longer supported in upstream and not shipped


author: Tamar Shacked <tshacked@redhat.com> - 6.0-56.3
changelog:
  - Rebase with latest RHGS-3.5.4
  - Fix changlog chronological order by removing unneeded changelogs
  - fixes bug bz#1939340


author: Neal Gompa <ngompa13@gmail.com> - 1.10.0-1
changelog:
  - Rebase to 1.10.0 (rhbz#1810432)
  - Remove upstreamed patches
  - Backport fixes from upstream for pkgconfig files
  - Refresh pkgconfig dependency information patch


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-9
changelog:
  - Move the .hmac files to the fipscheck subfolder
  - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
  Resolves: rhbz#1980758


author: Jakub Martisko <jamartis@redhat.com> - 1:6.2.0-13
changelog:
  - Fix: previous commit removed one function from the library and thus broke the ABI
  - function gmpn_preinv_divrem_1 should now not be removed
  Related: rhbz#2044216


author: Matej Grabovsky <mgrabovs@redhat.com> 1.4.0-1
changelog:
  - New upstream release
  - Handle connection and string decoding errors gracefully
  - Bump required abrt and libreport versions to 2.14.0
  - Update translations


author: Kalev Lember <klember@redhat.com> - 40~rc-1
changelog:
  - Update to 40.rc
  - Make -extras subpackage require the main package
  - Drop move-adwaita-backgrounds.patch
  - Remove old obsoletes


author: Bastien Nocera <bnocera@redhat.com> - 3.34.3-4
changelog:
  + gnome-bluetooth-3.34.3-4
  - Revert “Require PulseAudio _or_ Pipewire for Bluetooth audio”
  - Closes: #1928166


author: Felipe Borges <feborges@redhat.com> - 40.0-25
changelog:
  - Backport translations for Multitasking panel
  - Make Multitasking panel capable of handling Right-to-Left locales
    Resolves: #2105228


author: Milan Crha <mcrha@redhat.com> - 3.40.0-4
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)


author: Milan Crha <mcrha@redhat.com> - 3.40.0-5
changelog:
  - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage)
  - backport upstream fix to use external browser for OAuth2


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Florian Müllner <fmuellner@redhat.com> - 40.10-4
changelog:
  - Fix struts on login screen
    Resolves: #2145185
  - Allow gnome portal to access introspection API
    Resolves: #2079194


author: Milan Crha <mcrha@redhat.com> - 41.0-2
changelog:
  - Resolves: #2012699 (Backport changes from Fedora 35)
  - Add patch to mark compulsory only repos, not apps from it
  - Resolves: #2011176 (flathub repo can't be added through gnome-software)
  - Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
  - Resolves: #2010353 (Optional repos cannot be disabled)
  - Resolves: #2010740 (Refresh on repository setup change)
  - Resolves: #2009063 (Correct update notifications)


author: Milan Crha <mcrha@redhat.com> - 41.5-2
changelog:
  - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
  - Resolves: #2129021 (Hide some errors in non-debug builds)


author: Debarshi Ray <rishi@fedoraproject.org> - 3.40.1-1
changelog:
  - Update to 3.40.1
  - Rebase the patches
  - Backport yet-to-be-released patches from upstream to avoid translation
    conflicts
  Resolves: #1959384


author: Peter Jones <pjones@redhat.com> - 3.0.9-3
changelog:
  - Fix some minor rpmlint complaints
  - Pull recent patches from upstream
  - Add support for ELF constructors and destructors
  - Fix a minor licensing problem


author: Peter Jones <pjones@redhat.com> - 3.0.11-1
changelog:
  - Update to 3.0.11 (via patches generated from git)
  - Plus newer upstream fixes (also via patches generated from git)
  - Fix shell exit failures in make
  - Fix .reloc section generation
  - Fix CHAR8 definition
  - Fix "make DESTDIR=..."
  - Change the installed .a/.o layout
  - Provide makefiles for consumers to use.
  - Make the -devel noarch since it's just headers.
  - Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
    These will go away once we've migrated everything using them in fedora
    to use the newer make system...


author: Peter Jones <pjones@redhat.com> - 3.0.11-2
changelog:
  - Make a compat subpackage to provide the old paths to our libraries, linker
    script, and includes.


author: Jakub Jelen <jjelen@redhat.com> - 2.3.3-3
changelog:
  - Mark SHA-1 digest as weak to follow SHA-1 disablement in RHEL9 (#2070722)
  - Fix interaction with SSH by not requiring the MD5 digest (#2073567)
  - Fix creation of AEAD packets (#2128058)


author: Daiki Ueno <dueno@redhat.com> - 3.7.6-14
changelog:
  - cipher: add restriction on CCM tag length under FIPS mode (#2137807)
  - nettle: mark non-compliant RSA-PSS salt length to be not-approved (#2143266)


author: vzbuild <vzbuild@acronis.com> 1.17.1
changelog:
  - Switch master branch to rhel9, see #VSTOR-66536 (#VSTOR-66536)
   - Lint code (Yuri Per <yuri@acronis.com>)


author: vzbuild <vzbuild@acronis.com> 1.18.501
changelog:
  - Correct targets.list for sdi-6.3u1
   - Correct Makefile.version for hci-6.3.1-vz
   - Correct version for 6.3.0 (Konstantin Volkov <Konstantin.Volkov@acronis.com>)
   - Correct version and targets.list for 6.3.0 (Andrey Kuleshov
  <Andrey.Kuleshov@acronis.com>)
   - Correct sources for git@bitbucket.org 2nd run, see #VSTOR-89749 (Konstantin
  Volkov <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)
   - Correct sources for bitbucket.org, see #VSTOR-89749 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>) (#VSTOR-89749)


author: David Benoit <dbenoit@redhat.com> 3.0.9-9
changelog:
  - Delete remove-fedora-dependency-automation.patch
  - Bundle golist in /usr/libexec
  - Related: rhbz#2043107


author: Maxwell G <gotmax@e.email> - 1-4
changelog:
  - Redfine %goinstallflags
    Relates: rhbz#2098400
  - Add support for `%golang_arches_future` and `%gometa -f`.
    Relates: rhbz#2121796
  - Add go-rpm-macros-golist-symlink
    Relates: rhbz#2100618


author: Maxwell G <gotmax@e.email> - 1-5
changelog:
  - Fix %goinstall flags definition
  - go-srpm-macros-epel: Pull in go-rpm-macros-epel if go-rpm-macros is installed.


author: David Benoit <dbenoit@redhat.com> - 1.19.4-1
changelog:
  - Rebase to Go 1.19.4
  - Fix ppc64le linker issue
  - Remove defunct patches
  - Remove downstream generated FIPS mode patches
  - Add golang-fips/go as the source for FIPS mode patches
  - Resolves: rhbz#2144539


author: David Benoit <dbenoit@redhat.com> - 1.19.6-1
changelog:
  - Rebase to Go 1.19.6
  - Resolves: rhbz#2174429
  - Fix memory leak
  - Resolves: rhbz#2157602
  - Enable tests in check phase


author: Carl George <carl@redhat.com> - 1.20.4-2
changelog:
  - Add go-toolset subpackage to ensure golang and go-toolset are published together
  - Resolves: rhbz#2117248


author: Alejandro Sáez <asm@redhat.com> - 1.20.8-1
changelog:
  - Rebase to Go 1.20.8
  - Remove fix-memory-leak-evp-sign-verify.patch as it is already included in the source
  - Resolves: RHEL-2775


author: David King <amigadave@amigadave.com> - 1.68.0-6
changelog:
  - Add Requires on python-markdown for g-ir-doc-tool (#1979144)
  - Add license texts and documentation files (#1979144)


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.0.0-4
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
    CVE-2022-27191, CVE-2022-29526, CVE-2022-30629


author: Maxim Nestratov <maxim.nestratov@acronis.com> 0.7.1
changelog:
  - shuffle records respecing priority to support load balancing (Dmitry Andreev
  <Dmitry.Andreev@acronis.com>) (#VSTOR-63343)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.5.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.4.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.3.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.2.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.1.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.0.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-4.7.0-vz (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>)
   - Correct targets.list for master (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>)
   - Correct targets.list for 4.6.0 (Konstantin Volkov
  <Konstantin.Volkov@acronis.com>)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 0.7.2
changelog:
  - Build from sources, see #VSTOR-60430 (#VSTOR-60430)
   - Bring coredns_sqlbackend from ACI, see #VSTOR-60430 (#VSTOR-60430)


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 20200215-5
  💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
    valid


author: Mike FABIAN <mfabian@redhat.com> - 20200402-1
changelog:
  - Update to upstream snapshot tarball (fixes U+1F9D1 U+200D U+1F3A8 "artist"
    and many other sequences)


author: Akira TAGOH <tagoh@redhat.com> - 20201206-1
changelog:
  - Updates to 20201206.
    Resolves: rhbz#1899847
  - Refactoring spec file.
  - Fix invalid metainfo files.
    Resolves: rhbz#1830709


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.20.7-20
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  - Add upstream commits for git master which contains patches 9, 10 and 11
  - Add GCC10 fix
  - Cleanups


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.8-1
changelog:
  - update to 9.0.8 tagged upstream community sources, see CHANGELOG
  - do not list /usr/share/grafana/conf twice
  - drop makefile in favor of create_bundles.sh script
  - sync provides/obsoletes with CentOS versions
  - drop husky patch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 9.0.9-1
changelog:
  - update to 9.0.9 tagged upstream community sources, see CHANGELOG
  - resolve CVE-2022-35957 grafana: Escalation from admin to server admin when auth proxy is used (rhbz#2125530)


author: Stan Cox <scox@redhat.com> 9.0.9-2
changelog:
  - resolve CVE-2022-39229 grafana: Using email as a username can prevent other users from signing in
  - resolve CVE-2022-2880 CVE-2022-41715 grafana: various flaws


author: Stan Cox <scox@redhat.com> 9.2.10-3
changelog:
  - bumps exporter-toolkit to v0.7.3, sanitize-url@npm to 6.0.2, skip problematic s390 tests, License AGPL-3.0-only.


author: Sam Feifer <sfeifer@redhat.com> 9.2.10-6
changelog:
  - resolve RHEL-12665
  - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work
  - testing is turned off due to test failures caused by testing date mismatch


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.0.0-1
changelog:
  - update to 3.0.0 tagged upstream community sources, see CHANGELOG
  - bundle golang dependencies and (optionally) node.js dependencies


author: Andreas Gerstmayr <agerstmayr@redhat.com> 3.1.0-1
changelog:
  - update to 3.1.0 tagged upstream community sources, see CHANGELOG
  - remove unused cryptographic implementations


author: Jose Noguera <jnoguera@redhat.com> - 0.12.0-1
changelog:
  - Update to 0.12.0
  - Add ability to configure maximum number of boot attempts via env var and config file.
  - Add How does it work section to README.
  - Add CI via GitHub Actions and unit testing with BATS.
  - Add update platforms DNS resolutiona and connection checker as health checks out of the box


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.14.0-1
changelog:
  - Release 0.14.0 (Peter Robinson)
  - Updated testing documentation (Jose Noguera)
  - README updated with TOC and improved explanations (Jose Noguera)
  - Add watchdog-triggered boot check #2 (Jose Noguera)
  - Update specfile and README to reflect changes in subpackage layout. (Jose Noguera)
  - Ensure all required health checks are run #52 (Jose Noguera)


author: Adam Williamson <awilliam@redhat.com> - 3.4-5
changelog:
  - Backport fix for upstream #28105 to fix zgrep
    Resolves: rhbz#1872913
  - Remove some non-portable tests that fail on armv7hl (Paul Eggert)
    Resolves: rhbz#1863830


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-73
changelog:
  - search command: add flag to only search root dev
  - Resolves: #RHEL-20526
  - Resolves: #CVE-2023-4001


author: Tomas Popela <tpopela@redhat.com> - 40.0-6
changelog:
  - Require the Source Code Pro font instead of only recommending it to not break
    systems updated from 9.0.0.
    Resolves: rhbz#2093975


author: Susi Lehtola <jussilehtola@fedoraproject.org> - 2.5-1
changelog:
  - Update to 2.5.
  - Updated license tag (the license that applies to the binaries) to GPLv3+.
  - Bring spec file up to date by relying on recommended macros in build phase.
  - Arched requires for base package in gsl-devel.


author: Julien Rische <jrische@redhat.com> - 0.8.4-5
changelog:
  - Add an option for minimum lifetime
  - Resolves: rhbz#2184333
  - Remove unused patch files
  - Fix date typographical error in changelog


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-2
changelog:
  - Patch CVE-2023-44429: AV1 codec parser heap-based buffer overflow
  - Patch CVE-2023-44446: MXF demuxer use-after-free
  - Resolves: RHEL-17030, RHEL-17039


author: Wim Taymans <wtaymans@redhat.com> - 1.22.1-4
changelog:
  - CVE-2023-40474: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40475: Integer overflow leading to heap overwrite in MXF
  - CVE-2023-40476: Integer overflow in H.265 video parser
  - ZDI-CAN-22300: buffer overflow vulnerability
  - Resolves: RHEL-19501, RHEL-19505, RHEL-19506, RHEL-20201


author: Wim Taymans <wtaymans@redhat.com> - 1.18.4-6
changelog:
  - Fixes for CVE-2022-1920, CVE-2022-1921, CVE-2022-1922, CVE-2022-1923,
    CVE-2022-1924, CVE-2022-1925, CVE-2022-2122
    Resolves: rhbz#2131034, rhbz#2131039, rhbz#2131045, rhbz#2131049,
              rhbz#2131054, rhbz#2131060, rhbz#2131064


author: Kalev Lember <klember@redhat.com> - 1.33-1
changelog:
  - Update to 1.33
  - Switch to meson build system
  - Explicitly byte-compile python files using py_byte_compile macro


author: Kalev Lember <klember@redhat.com> - 3.24.25-2
changelog:
  - Backport upstream patches to fix regressions in Compose file parsing
  - Backport upstream patch to further tweak scrollbar transitions and size


author: Kalev Lember <klember@redhat.com> - 3.24.3-1
changelog:
  - Update to 3.24.3
  - Use https source URLs
  - Re-enable LTO now that we have upstream fix in place (#1898054)
  - Switch to meson build system
  - Tighten soname globs


author: Richard W.M. Jones <rjones@redhat.com> - 1.46.1-6
changelog:
  - Clean up NetworkManager connection files
  - Add the copy-patches.sh script from virt-v2v
    resolves: rhbz#1980922


author: Richard W.M. Jones <rjones@redhat.com> - 1.48.2-5
changelog:
  - Rebase to guestfs-tools 1.48.2
    resolves: rhbz#2059286
  - Default to --selinux-relabel in various tools
    resolves: rhbz#2075718, rhbz#2089748
  - Add lvm system.devices cleanup operation to virt-sysprep
    resolves: rhbz#2072493
  - Refactor virt-customize --install, --update options in common submodule
  - Add support for Clevis & Tang
    resolves: rhbz#1809453
  - Fix CVE-2022-2211 Denial of Service in --key parameter
    resolves: rhbz#2102721
  - Fix virt-sysprep and LUKS-on-LVM guests
    resolves: rhbz#2106286


author: Rex Dieter <rdieter@fedoraproject.org> - 5:2.0.14-7
changelog:
  - avoid linking all guile-devel consumers to libgc
  - BR: gcc
  - use %{make_build},%{make_install}
  - %check: make non-fatal


author: Tom Stellard <tstellar@redhat.com> - 5.3.3-3
changelog:
  - Fix warning building with clang
  - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]


author: Jason L Tibbitts III <tibbs@math.uh.edu> - 3.7.4-16
changelog:
  - Change dependency from ghostscript to ghostscript-x11 to match the
    reorganized ghostscript package.


author: Jakub Martisko <jamartis@redhat.com> - 1.12-1
changelog:
  - Rebase to gzip 1.12
  - Resolves an arbitrary-file-write vulnerability in zgrep
    Resolves: rhbz#2073343
    Resolves: rhbz#1870675


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-6
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
    harfbuzz: integer overflow in the component hb-ot-shape-fallback.c


author: Parag Nemade <pnemade AT redhat DOT com> - 2.7.4-7
changelog:
  - Resolves:rh#2103849 CVE-2022-33068
  - Fix Covscan compiler warning for inclusion of parenthesis
  - Update tests.yaml


author: Filip Januš <fjanus@redhat.com> - 1.5-1
changelog:
  - Nwe upstream version 1.5
  - Add patch to solve inconsistency between configure.ac and filename
  - Add Build requirement autoconf


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-4
changelog:
  - 1912147 - Enable matching for '<model>_series' drivers in PPD search algorithm
  - rework optional gui messages


author: Zdenek Dohnal <zdohnal@redhat.com> - 3.20.11-5
changelog:
  - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary
  - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.53-11
changelog:
  - Resolves: #2162500 - CVE-2006-20001 httpd: mod_dav: out-of-bounds read/write
    of zero byte
  - Resolves: #2162486 - CVE-2022-37436 httpd: mod_proxy: HTTP response splitting
  - Resolves: #2162510 - CVE-2022-36760 httpd: mod_proxy_ajp: Possible request
    smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-1
changelog:
  - Resolves: #2184403 - rebase httpd to 2.4.57
  - Resolves: #2177753 - CVE-2023-25690 httpd: HTTP request splitting with
    mod_rewrite and mod_proxy


author: Luboš Uhliarik <luhliari@redhat.com> - 2.4.57-2
changelog:
  - Resolves: #2186645 - Fix issue found by covscan in httpd package
  - Resolves: #2173295 - Include Apache httpd module mod_authnz_fcgi


author: Joe Orton <jorton@redhat.com> - 2.4.57-6
changelog:
  - Resolves: RHEL-5071 - mod_dav_fs: add DavLockDBType
  - mod_dav_fs: add global mutex around lockdb interaction


author: Joe Orton <jorton@redhat.com> - 2.4.57-8
changelog:
  - mod_xml2enc: fix media type handling
    Resolves: RHEL-17686
  - mod_dav: add DavBasePath
    Resolves: RHEL-6600


author: Parag Nemade <pnemade AT redhat DOT com> - 5.1-3
changelog:
  - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file
  - Added gating tests


author: Parag Nemade <pnemade AT redhat DOT com> - 1.0.3-21
changelog:
  - Remove the duplicate source file committed to this package git repository
  - Update URL tag and files section to be more verbose


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.38.20190303git
changelog:
  - hpvd-Enable-build-on-aarch64.patch [bz#2020148]
  - Resolves: bz#2020148
    ([Hyper-V][RHEL9.0][ARM] No hyperv-daemons package built for aarch64 platform)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.39.20190303git
changelog:
  - hpvd-hv_set_ifconfig.sh-Use-nmcli-commands.patch [bz#2026371]
  - hpvd-Use-filename-for-connection-profile.patch [bz#2026371]
  - Resolves: bz#2026371
    ([RHEL9][Hyper-V]The /usr/libexec/hypervkvpd/hv_set_ifconfig need update for RHEL9 since the ifdown/ifup was not supported on RHEL9)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.40.20190303git
changelog:
  - hpvd-hypervkvpd.service-ordering-fixes.patch [bz#2103188]
  - Resolves: bz#2103188
    ([Hyper-V][RHEL-9] hypervkvpd.service service ordering)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.41.20190303git
changelog:
  - hpvd-redhat-hv_set_if_config-Workaround-for-gateway-numbe.patch [bz#2122115]
  - hpvd-tools-hv-Remove-an-extraneous-the.patch [bz#2139457]
  - hpvd-tools-hv-kvp-remove-unnecessary-void-conversions.patch [bz#2139457]
  - Resolves: bz#2122115
    ([Hyper-V][RHEL-9] Cannot set gateway properly when set static IPADDR0,NETMASK0,GATEWAY in ifcfg-eth0)
  - Resolves: bz#2139457
    ([Hyper-V][RHEL9.2] Update Hyper-V-Daemons)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0-0.42.20190303git
changelog:
  - hpvd-vmbus_testing-fix-wrong-python-syntax-for-integer-va.patch [bz#2218931]
  - Resolves: bz#2218931
    ([Hyper-V] [RHEL-9] /usr/sbin/vmbus_testing python script prints: "SyntaxWarning: "is" with a literal.")


author: Peter Robinson <pbrobinson@fedoraproject.org> - 4.2-2
changelog:
  - Move eeprog to i2c-tools (shouldn't have been in eepromer sub package)
  - Drop/obsolete eepromer subpackage, deprecated for 6 years
  - Drop python2 conditionals
  - Minor cleanups


author: Kamal Heib <kheib@redhat.com> - 46.0-1
changelog:
  - Rebase to upstream release v46.0
  - Resolves: rhbz#2159650, rhbz#2167513, rhbz#2170367, rhbz#2189721 rhbz#2209688


author: Takao Fujiwara <tfujiwar@redhat.com> - 1.5.11-10
changelog:
  - Replace kasumi with kausmi-unicode
  - Delete to require intltool
  - Delete to call gettext.bind_textdomain_codeset()


author: Mike FABIAN <mfabian@redhat.com> - 1.4.2-1
changelog:
  - Update to  1.4.2
  - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%,
    id (Indonesian) 100%, ja_JP (Japanese) 100%.
  - Translation updates: zh_CN, pt_BR


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.8.3-1
changelog:
  - Update to 1.8.3
  - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
    Resolves: https://github.com/definite/ibus-table-chinese/pull/14
  - Add SUGGESTION_MODE = TRUE to the wubi tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/15
  - Support pinyin mode also for stroke5 table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/12
  - Use nicer values for symbol and status prompt
    Resolves: https://github.com/definite/ibus-table-chinese/pull/8
  - update jyutping table; add cantonyale table
    Resolves: https://github.com/definite/ibus-table-chinese/pull/11
  - Update jyutping and cantonese tables
    Resolves: https://github.com/definite/ibus-table-chinese/pull/9


author: Mike FABIAN <mfabian@redhat.com> - 1.3.10-1
changelog:
  - update to latest upstream 1.3.10
  - latex: add most of Unicode 9.0 block Mathematical Alphanumeric Symbols
    (thanks to Pavel Zorin-Kranich)


author: Mike FABIAN <mfabian@redhat.com> - 1.3.11-1
changelog:
  - update to latest upstream 1.3.11
  - Add Vietnamese input methods Telex and VNI
    (thanks to Nguyễn Gia Phong <vn.mcsinyx@gmail.com>)
  - Extend russian translit for latin slavic layouts
    (thanks to Marek Nečada <marek@necada.org>)


author: Mike FABIAN <mfabian@redhat.com> - 1.3.12-1
changelog:
  - update to latest upstream 1.3.12
  - Integrate traditional Mongolian (mongol_bichig.txt) table
    (Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/23)
  - improvements in the latex.txt table
    (https://github.com/moebiuscurve/ibus-table-others/pull/22)
  - improvements in the mathwriter-ibus.txt table


author: Martin Gieseking <martin.gieseking@uos.de> - 0.32.3-1
changelog:
  - Updated to version 0.32.3.
  - Dropped patch to fix https://savannah.nongnu.org/bugs/?52319 (applied upstream)


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.2-1
changelog:
  - Rebase to JSS 5.0.2
  - Bug 2029838 - SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.0.3-1
changelog:
  - Rebase to JSS 5.0.3
  - Bug 2046023 - CVE-2021-4213 jss: memory leak in TLS connection leads to OOM [rhel-9.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.2.1-1
changelog:
  - Rebase to JSS 5.2.1
  - Bug 2100807 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 5.3.0-0.3.beta2
changelog:
  - Rebase to JSS 5.3.0-beta2
  - Bug 2017098 - pki pkcs12-cert-add command failing with 'Unable to validate PKCS #12 file: Digests do not match' exception


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.0.3-1
changelog:
  - Bug #2033109 Invalid certificates with creation of subCA (pkispawn single step)[rhel-9.0.0]
  - Bug #2013141 kra-key-retrieve failed to accept xml input format to generate .p12 key through cli
  - Bug #2029838 SHA1withRSA being listed in signing certificates while approving certificate via Agent page in browser


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-0.4.beta3
changelog:
  - Rebase to PKI 11.2.0-beta3
  - Bug #2062808 Drop SHA-1 use from authentication challenges [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.0-1
changelog:
  - Rebase to PKI 11.2.0
  - Bug #2084639 ipa cert-request ssl error
  - Bug #2099312 SKI field is not reflected back in generated CSR
  - Bug #2095197 PKI cert-fix operation failing


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.2.1-1
changelog:
  - Rebase to PKI 11.2.1
  - Bug #2107336 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-9.1.0]


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-0.2.beta1
changelog:
  - Rebase to PKI 11.3.0-beta1
  - Bug #1849834 - [RFE] Provide EST Responder (RFC 7030)
  - Bug #1883477 - [RFE] Automatic expired certificate purging
  - Bug #2091999 - Error displayed should be user friendly in case RSNv3 certificate serial number collision
  - Bug #2106452 - softhsm2: Unable to create cert: Private key not found
  - Bug #2106459 - CVE-2022-2393 pki-core: Improper authentication/authorization with caServerKeygen_DirUserCert profile


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 11.3.0-1
changelog:
  - Rebase to PKI 11.3.0
  - Bug #2091993 - IdM Install fails on RHEL 8.5 Beta when DISA STIG is applied
  - Bug #2122409 - pki-tomcat/kra unable to decrypt when using RSA-OAEP padding in RHEL9 with FIPS enabled


author: Jeff Law <law@redhat.com> - 2.3.0-3
changelog:
  - Touch a couple autoconf related files to prevent undesired rebuilding
    if %configure changes one or more configure files.


author: Robert Scheck <robert@fedoraproject.org> 1.0-0.21.pre4
changelog:
  - Added patch from upstream to choose first "running" interface,
    rather than first "up" interface (#1403025)
  - Added patch from upstream to support scales beyond 1 Gbps


author: Bruno Meneguele <bmeneg@redhat.com> - 1.3.2-9
changelog:
  - Use upstream accepted patch for the memory leak
  - Make SHA-256 the default hash algorithm (rhbz#1934949)


author: Martin Kolman <mkolman@redhat.com> - 0.3.84-1
changelog:
  - Adjust to logging command changes in Anaconda (#1891621) (mkolman)
  - Make sure the output from custom_getpass() is serialized after stdout (lkundrak)


author: Martin Kolman <mkolman@redhat.com> - 0.3.86-1
changelog:
  - Drop python-nose from the dependencies (#1916799) (vponcova)
  - Add the makeupdates script (vponcova)
  - Remove deprecated support for add-ons (vponcova)
  - Don't run installation tasks of add-ons in a meta task (vponcova)
  - Migrate COPR builds from Jenkins to Packit (jkonecny)
  - Add documentation for the new test solution (jkonecny)
  - Add support for custom Anaconda COPR repository (jkonecny)
  - Use `make test` to run TMT tests locally (jkonecny)
  - Add TMT configuration to get Anaconda COPR build (jkonecny)
  - Add Packit support for initial-setup (jkonecny)
  - Update and use setup.py for archive creation (jkonecny)
  - Fix ChangeLog generation in Makefile (jkonecny)


author: Martin Kolman <mkolman@redhat.com> - 0.3.89-1
changelog:
  - Include scripts in the updates image (vponcova)
  - Drop build time dependency on the anaconda package (mkolman)


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.1-1
changelog:
  - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova)
    Resolves: rhbz#1962198


author: Martin Kolman <mkolman@redhat.com> - 0.3.90.2-1
changelog:
  - Disable multi TTY handler when running in SSH session (#1951577) (mkolman)
    Resolves: rhbz#1951577


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.0-6
changelog:
  - Resolves: rhbz#2110014 ldap bind occurs when admin user changes password with gracelimit=0
  - Resolves: rhbz#2112901 RFE: Allow grace login limit to be set in IPA WebUI
  - Resolves: rhbz#2115495 group password policy by default does not allow grace logins
  - Resolves: rhbz#2116966 ipa-replica-manage displays traceback: Unexpected error: 'bool' object has no attribute 'lower'


author: Rafael Jeffman <rjeffman@redhat.com> - 4.10.0-7
changelog:
  - Resolves: rhbz#2124547 Attempt to log in as "root" user with admin's password in Web UI does not properly fail
  - Resolves: rhbz#2137555 Attempt to log in as "root" user with admin's password in Web UI does not properly fail [rhel-9.1.0.z]


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-1
changelog:
  - Resolves: rhbz#2141315 [Rebase] Rebase ipa to latest 4.10.x release for RHEL 9.2
  - Resolves: rhbz#2094673 ipa-client-install should just use system wide CA store and do not specify TLS_CACERT in ldap.conf
  - Resolves: rhbz#2117167 After leapp upgrade on ipa-client ipa-server package installation failed. (`REQ_FULL_WITH_MEMBERS` returns object from wrong domain)
  - Resolves: rhbz#2127833 Password Policy Grace login limit allows invalid maximum value
  - Resolves: rhbz#2143224 [RFE] add certificate support to ipa-client instead of one time password
  - Resolves: rhbz#2144736 vault interoperability with older RHEL systems is broken
  - Resolves: rhbz#2148258 ipa-client-install does not maintain server affinity during installation
  - Resolves: rhbz#2148379 Add warning for empty targetattr when creating ACI with RBAC
  - Resolves: rhbz#2148380 OTP token sync always returns OK even with random numbers
  - Resolves: rhbz#2148381 Deprecated feature idnssoaserial in IdM appears when creating reverse dns zones
  - Resolves: rhbz#2148382 Introduction of URI records for kerberos breaks location functionality


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-2
changelog:
  - Resolves: rhbz#2148887 MemberManager with groups fails
  - Resolves: rhbz#2150335 idm:client is missing dependency on krb5-pkinit


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-4
changelog:
  - Resolves: rhbz#2161284 'ERROR Could not remove /tmp/tmpbkw6hawo.ipabkp' can be seen prior to 'ipa-client-install' command was successful
  - Resolves: rhbz#2164403 ipa-trust-add with --range-type=ipa-ad-trust-posix fails while creating an ID range
  - Resolves: rhbz#2162677 RFE: Implement support for PKI certificate and request pruning
  - Resolves: rhbz#2167312 - Backport latest test fixes in python3-ipatests


author: Florence Blanc-Renaud <flo@redhat.com> - 4.10.1-5
changelog:
  - Resolves: rhbz#2162656 Passwordless (GSSAPI) SSH not working for subdomain
  - Resolves: rhbz#2166326 Removing the last DNS type for ipa-ca does not work
  - Resolves: rhbz#2167473 RFE - Add a warning note about possible performance impact of the Auto Member rebuild task
  - Resolves: rhbz#2168244 requestsearchtimelimit=0 doesn't seems to be work with ipa-acme-manage pruning command


author: Rob Crittenden <rcritten@redhat.com> - 0.9-7
changelog:
  - debug='True' in ipahealthcheck.conf doesn't enable debug output (#2079861)
  - Validate value formats in the ipahealthcheck.conf file (#2079739)
  - Validate output_type options from ipahealthcheck.conf file (#2079698)


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-2.el9
changelog:
  - macvlan: Add bclim parameter (Andrea Claudi) [2186945]
  - Update kernel headers (Andrea Claudi) [2186945]


author: Andrea Claudi <aclaudi@redhat.com> - 6.2.0-5.el9
changelog:
  - tc: add missing separator (Andrea Claudi) [RHEL-337]
  - u32: fix TC_U32_TERMINAL printing (Andrea Claudi) [RHEL-586]


author: Phil Sutter <psutter@redhat.com> - 7.11-8
changelog:
  - Ship iptables-translate utility with ipset package
  - Add missing function to libipset.map and bump library version
  - Fix all debug mode warnings
  - ipset-translate: allow invoking with a path name
  - Fix IPv6 sets nftables translation
  - Fix typo in ipset-translate man page
  - tests: add tests ipset to nftables
  - add ipset to nftables translation infrastructure
  - lib: Detach restore routine from parser
  - lib: split parser from command execution


author: Phil Sutter <psutter@redhat.com> - 1.8.9-1
changelog:
  - Make iptables-xml a relative symlink
  - Drop not needed xtables.conf
  - Ship iptables.xslt with iptables-legacy package
  - Ship ebtables-translate tool with iptables-nft package
  - Update to 1.8.9.


author: Phil Cameron <pcameron@redhat.com> - 1.2.1-1
changelog:
  - Makefile: protect mandatory compile flags
  - packet capture: don't reuse socket for multiple receive functions
  - TPACKET_V[23]: continue even if mlock() fails
  - ipmon: fix division by zero
  - fix: detstats(), ifstats(): handle packets with incorrect header checksum
  - fix: positionptr(): properly allocate newly created interfaces
  - fix: detstats(): properly account non-IP packets
  - fix: properly init curses (fixes view on some utf-8 terminals)
  - fix: cidr_split_address(): fix buffer overflow
  - ipmon: printentry(): fix printing of huge values
  - build: use correct libraries (wide version of -lpanel)
  - fix unsafe handling of printf() args (RedHat Bugzilla: 1842690)
  - fix the CPU hog if the interface gets removed (RedHat Bugzilla: 1572750)
  - introduce packet capturing abstraction: add recvmmsg(), TPACKET_V2 and TPACKET_V3 mmap()ed capturing modules: this allow us to capture in multigigabit speeds
  - add partial support for IPoIB interfaces (full support cannot be done because the kernel interface doesn't give us source address) (RedHat Bugzilla: 1140211)
  - merge rvnamed-ng into iptraf-ng
  - allow scrolling with Home, End, PageUp and PageDown keys
  - show dropped packet count
  - pktsize: print in and out counters
  - ifstats: show total packet rate and packet drop across all interfaces
  - ipmon: show OSPF protocol version
  - hostmon, ipmon: update screen only when needed (vastly reduces CPU usage and also reduces packet drops)
  - update source code to compile cleanly on modern gcc
  - numerous code refactoring/cleaning up all over the source tree


author: Cole Robinson <aintdiscole@gmail.com> - 20200823-1.git4bd064de.git
changelog:
  - Update to newer git snapshot, synced with qemu.git
  - Re-enable HTTPS support, with edk2 fix included (bz 1820836)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-4.git4bd064de
changelog:
  - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
  - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
  - Resolves: bz#1956931
    (ipxe-roms-qemu list: Clean out old ROMs)
  - Resolves: bz#1957246
    (boot vm from pxe failed)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-5.git4bd064de
changelog:
  - ipxe-Disable-SHA-1.patch [bz#1935932]
  - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
  - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
  - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
  - Resolves: bz#1935932
    (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
  - Resolves: bz#1971981
    (Please replace genisoimage with xorriso)
  - Resolves: bz#1980138
    (install qemu rom symlinks so qemu doesn't have to)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200823-6.git4bd064de
changelog:
  - ipxe-Add-ping-command-support.patch [bz#1985658]
  - ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
  - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
  - ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
  - ipxe-Build-hwcert-subpackage.patch [bz#1985658]
  - Resolves: bz#1985658
    (carry forward rhel8 ipxe packaging changes)


author: Kairui Song <kasong@redhat.com> - 2:1.8.0-2
changelog:
  - Disable the communication socket when UI is disabled. Resolves: rhbz1951292
  - drop NoNewPrivs from irqbalance service. Resolves: rhbz1963152


author: Tao Liu <ltao@redhat.com> - 2:1.8.0-5
changelog:
  - Document migrateval. Resolves: rhbz2071959
  - Confine irqbalance to systems where it is useful. Resolves: rhbz2063930
  - Wrong EnvironmentFile in irqbalance.service. Resolves: rhbz2058509


author: Tao Liu <ltao@redhat.com> - 2:1.9.2-3
changelog:
  - Use misc/irqbalance.env as irqbalance.sysconfig
  - Use new rpm macros: autosetup and make_build
  - Use irqbalance-1.9.0-environment-file
  - Remove _hardened_build
  - Remove triggerun -- irqbalance < 2:0.56-3
  - Use SPDX licence


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Jan Stancek <jstancek@redhat.com> - 20230404-134
changelog:
  - Update to upstream 20230404 release (rhbz 2183603).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: Amphion: Update vpu firmware
  - iwlwifi: add new FWs from core78-32 release
  - iwlwifi: update 9000-family firmwares to core78-32
  - amdgpu: Update SDMA 6.0.1 firmware
  - amdgpu: Add PSP 13.0.11 firmware
  - amdgpu: Update PSP 13.0.4 firmware
  - amdgpu: Update GC 11.0.1 firmware
  - amdgpu: Update DCN 3.1.4 firmware
  - amdgpu: Add GC 11.0.4 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.15
  - linux-firmware: Update firmware file for Intel Bluetooth AX101
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9462
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: add firmware files for NXP BT chipsets
  - rtw89: 8852b: update format-1 fw to v0.29.29.0
  - rtw89: 8852b: add format-1 fw v0.29.26.0
  - rtw89: 8852b: rollback firmware to v0.27.32.1
  - i915: Update MTL DMC to v2.12
  - i915: Update ADLP DMC to v2.19
  - mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
  - iwlwifi: update core69 and core72 firmwares for So device


author: Jan Stancek <jstancek@redhat.com> - 20230525-135
changelog:
  - Update to upstream 20230525 release (rhbz 2178579).
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amdgpu: update yellow carp firmware for amd.5.5 release
  - amdgpu: update navi14 firmware for amd.5.5 release
  - amdgpu: update navi12 firmware for amd.5.5 release
  - amdgpu: update vega20 firmware for amd.5.5 release
  - amdgpu: update vega12 firmware for amd.5.5 release
  - amdgpu: update navi10 firmware for amd.5.5 release
  - amdgpu: update vega10 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.11 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.4 firmware for amd.5.5 release
  - amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.4 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.1 firmware for amd.5.5 release
  - amdgpu: update 13.0.8 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.7 firmware for amd.5.5 release
  - amdgpu: update vangogh firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.4 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.7 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.7 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.2 firmware for amd.5.5 release
  - amdgpu: update renoir firmware for amd.5.5 release
  - amdgpu: update VCN 4.0.0 firmware for amd.5.5 release
  - amdgpu: update SMU 13.0.0 firmware for amd.5.5 release
  - amdgpu: update PSP 13.0.0 firmware for amd.5.5 release
  - amdgpu: update GC 11.0.0 firmware for amd.5.5 release
  - amdgpu: update green sardine firmware for amd.5.5 release
  - amdgpu: update beige goby firmware for amd.5.5 release
  - amdgpu: update dimgrey cavefish firmware for amd.5.5 release
  - amdgpu: update arcturus firmware for amd.5.5 release
  - amdgpu: update vcn 3.1.2 firmware for amd.5.5 release
  - amdgpu: update psp 13.0.5 firmware for amd.5.5 release
  - amdgpu: update GC 10.3.6 firmware for amd.5.5 release
  - amdgpu: update navy flounder firmware for amd.5.5 release
  - amdgpu: update sienna cichlid firmware for amd.5.5 release
  - amdgpu: update aldebaran firmware for amd.5.5 release
  - amdgpu: DMCUB updates for various AMDGPU asics
  - ice: update ice DDP comms package to 1.3.40.0
  - rtlwifi: Add firmware v6.0 for RTL8192FU
  - rtlwifi: Update firmware for RTL8188EU to v28.0
  - cirrus: Add firmware and tuning files for HP G10 series laptops
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - WHENCE: comment out duplicate MediaTek firmware
  - i915: Add GuC v70.6.6 for MTL
  - amdgpu: update DCN 3.1.6 DMCUB firmware
  - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
  - Group all Conexant V4L devices together
  - rtl_nic: update firmware of USB devices
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: update firmware for MT7981
  - qca: Update firmware files for BT chip WCN6750
  - mt76xx: Move the old Mediatek WiFi firmware to mediatek
  - rtl_bt: Add firmware and config files for RTL8851B
  - linux-firmware: Update AMD cpu microcode
  - linux-firmware: add firmware for MT7981
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update qat firmware
  - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - linux-firmware: update firmware for MT7916
  - rtw89: 8852b: update format-1 fw to v0.29.29.1
  - rtw89: 8852c: update fw to v0.27.56.13
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin


author: Jan Stancek <jstancek@redhat.com> - 20230625-137
changelog:
  - Fix PSR-SU issues with kernel 6.2 or later (rhbz 2218668)
  - Update to upstream 20230625 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Makefile, copy-firmware: support xz/zstd compressed firmware
  - copy-firmware: silence the last shellcheck warnings
  - copy-firmware: drop obsolete backticks, quote
  - copy-firmware: tweak sed invocation
  - copy-firmware: quote deskdir and dirname
  - check_whence: error if symlinks are in-tree
  - check_whence: error if File: is actually a link
  - check_whence: strip quotation marks
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - fix broken cirrus firmware symlinks
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - amdgpu: DMCUB updates for various AMDGPU asics
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - ice: update ice DDP comms package to 1.3.40.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Jan Stancek <jstancek@redhat.com> - 20230726-138
changelog:
  - Navi32 dGPU firmware (rhbz 2047486)
  - CVE-2023-20593 linux-firmware: hw: amd: Cross-Process Information Leak (rhbz 2227156)
  - Update to upstream 20230726 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - linux-firmware: Update AMD fam17h cpu microcode
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update green sardine VCN firmware
  - amdgpu: update renoir VCN firmware
  - amdgpu: update raven VCN firmware
  - amdgpu: update raven2 VCN firmware
  - amdgpu: update Picasso VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Jan Stancek <jstancek@redhat.com> - 20230814-139
changelog:
  - CVE-2023-20569 linux-firmware: hw amd: Return Address Predictor velunerability leading to information disclosure (rhbz 2230418)
  - [AMDCLIENT 9.3 Bug] Linux FW update to fix multi monitor behind TBT3 dock & random flickers (rhbz 2227845)
  - amdgpu: partially revert firmware for GC 11.0.0 and GC 11.0.2
  - linux-firmware: Update AMD cpu microcode
  - Merge branch 'for-upstream' of http://git.chelsio.net/pub/git/linux-firmware
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cxgb4: Update firmware to revision 1.27.4.0
  - Merge branch 'rb3-update' of https://github.com/lumag/linux-firmware
  - Merge https://github.com/pkshih/linux-firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - linux-firmware: Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - Merge branch 'dmc-adlp_2.20-mtl_2.13' of git://anongit.freedesktop.org/drm/drm-firmware
  - Merge branch 'for-upstream' of https://github.com/CirrusLogic/linux-firmware
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models


author: Scott Weaver <scweaver@redhat.com> - 20230926-140
changelog:
  - [Intel 9.4 FEAT] [SPR][EMR] QAT firmware update available (rhbz 2238636)
  - [AMDCLIENT 9.4 Feature] Sub-Feature: AMD PMF Linux FW (rhbz 2227340)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - linux-firmware: Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release
  - linux-firmware: amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - linux-firmware: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - WHENCE: Don't compress qcom json files
  - WHENCE: amd-ucode: Use new RawFile keyword
  - Create symlinks for all firmware that is duplicate using rdfind
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - copy-firmware: Introduce 'RawFile' keyword
  - copy-firmware: Support additional compressor options
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX203
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth AX200
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: update firmware for qat_4xxx devices
  - linux-firmware: Update AMD SEV firmware
  - amdgpu: update DMCUB to 0.0.181.0 for various AMDGPU ASICs
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - amdgpu: DMCUB updates for various AMDGPU asics
  - amdgpu: DMCUB updates for various AMDGPU asics
  - cirrus: Add CS35L41 firmware for HP G11 models


author: Scott Weaver <scweaver@redhat.com> - 20231030-141
changelog:
  - CVE-2022-46329 linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14264)
  - amd-ucode early loading broken [RHEL-15387]
  - Update to upstream 20231030 release.
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX210
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX101
  - Intel Bluetooth: Update firmware file for Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX201
  - Intel Bluetooth: Update firmware file for Intel Bluetooth Magnetor AX211
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - rtl_nic: update firmware of RTL8156B
  - linux-firmware: Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - linux-firmware: add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - linux-firmware: Add firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX201
  - linux-firmware: Update firmware file for Intel Bluetooth AX211
  - linux-firmware: Update firmware file for Intel Bluetooth AX210
  - linux-firmware: Update firmware file for Intel Bluetooth 9560
  - linux-firmware: Update firmware file for Intel Bluetooth 9260
  - i915: Update MTL DMC to v2.17
  - amdgpu: update raven firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.7 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.8 firmware from 5.7 branch
  - amdgpu: update GC 10.3.7 firmware from 5.7 branch
  - amdgpu: update DCN 3.1.6 firmware from 5.7 branch
  - amdgpu: update SDMA 5.2.6 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.5 firmware from 5.7 branch
  - amdgpu: update GC 10.3.6 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.0 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.0 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.0 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.0 firmware from 5.7 branch
  - amdgpu: update GC 11.0.0 firmware from 5.7 branch
  - amdgpu: update vega20 firmware from 5.7 branch
  - amdgpu: update beige goby firmware from 5.7 branch
  - amdgpu: update vega12 firmware from 5.7 branch
  - amdgpu: update vega10 firmware from 5.7 branch
  - amdgpu: update dimgrey cavefish firmware from 5.7 branch
  - amdgpu: update picasso firmware from 5.7 branch
  - amdgpu: update navy flounder firmware from 5.7 branch
  - amdgpu: update vangogh firmware from 5.7 branch
  - amdgpu: update green sardine firmware from 5.7 branch
  - amdgpu: update sienna cichlid firmware from 5.7 branch
  - amdgpu: update PSP 13.0.11 firmware from 5.7 branch
  - amdgpu: update GC 11.0.4 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.1 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.4 firmware from 5.7 branch
  - amdgpu: update GC 11.0.1 firmware from 5.7 branch
  - amdgpu: update navi14 firmware from 5.7 branch
  - amdgpu: update renoir firmware from 5.7 branch
  - amdgpu: update navi12 firmware from 5.7 branch
  - amdgpu: update VCN 4.0.4 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.7 firmware from 5.7 branch
  - amdgpu: update SDMA 6.0.2 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.7 firmware from 5.7 branch
  - amdgpu: update GC 11.0.2 firmware from 5.7 branch
  - amdgpu: update yellow carp firmware from 5.7 branch
  - amdgpu: update navi10 firmware from 5.7 branch
  - amdgpu: update raven2 firmware from 5.7 branch
  - amdgpu: update SMU 13.0.10 firmware from 5.7 branch
  - amdgpu: update PSP 13.0.10 firmware from 5.7 branch
  - amdgpu: update GC 11.0.3 firmware from 5.7 branch
  - amdgpu: update aldebaran firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules


author: Scott Weaver <scweaver@redhat.com> - 20240109-142
changelog:
  - [DELL 9.3 BUG]System resume failed from suspend and auto reboot with WCN6856 (1/10 fail rate) (RHEL-4431)
  - [DELL 9.3 FEAT] - linux-firmware: Include to support QCA WIFI-7 WCN7850 Module: wifi firmware support (RHEL-10212)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - linux-firmware: update firmware for w1u_uart
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - linux-firmware: add firmware for mediatek bluetooth chip (MT7925)
  - linux-firmware: add firmware for MT7925
  - ASoC: tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ASoC: tas2781: Add dsp firmware for different laptops
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.36
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00309-
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2023 Models
  - cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 QRD
  - qcom: Add Audio firmware for SM8550 QRD
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - linux-firmware: Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - linux-firmware: add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  - linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  - linux-firmware: update firmware for MT7922 WiFi device
  - linux-firmware: update firmware for MT7921 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qrb4210 firmware
  - qcom: update qcm2290 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP G11 Laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 on 2024 ASUS Zenbook Laptops
  - linux-firmware: add firmware for mt7988 internal 2.5G ethernet phy
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - linux-firmware: ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8852b: update fw to v0.29.29.4
  - rtw89: 8851b: update fw to v0.29.41.3


author: Scott Weaver <scweaver@redhat.com> - 20240219-143
changelog:
  - [AMDCLIENT 9.4 Bug] Update PHX 1/2 firmware to fix some PSR related issues (RHEL-25408)
    Changes since the last update are noted on items below, copied from
    the git changelog of upstream linux-firmware repository.
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Intel IPU3 ImgU: Move firmware file under intel/ipu
  - Intel IPU6: Move firmware binaries under ipu/
  - linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - amdgpu: DMCUB Updates for DCN321: 7.0.38.0
  - amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
  - linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
  - linux-firmware: Fix filenames for some CS35L41 firmwares for HP
  - linux-firmware: wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - linux-firmware: intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - Revert "amdgpu: DMCUB updates for various AMDGPU ASICs"
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8650 MTP
  - linux-firmware: Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: update raven2 firmware
  - amdgpu: update raven firmware
  - amdgpu: update SDMA 5.2.7 firmware
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update VCN 3.1.2 firmware
  - amdgpu: update SDMA 5.2.6 firmware
  - amdgpu: update PSP 13.0.5 firmware
  - amdgpu: update GC 10.3.6 firmware
  - amdgpu: add GC 11.0.1 rlc_1 firmware
  - amdgpu: update vega20 firmware
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: update SMU 13.0.0 firmware
  - amdgpu: update PSP 13.0.0 firmware
  - amdgpu: update GC 11.0.0 firmware
  - amdgpu: update vega12 firmware
  - amdgpu: update vega10 firmware
  - amdgpu: update beige goby firmware
  - amdgpu: update picasso firmware
  - amdgpu: update dimgrey cavefish firmware
  - amdgpu: update vangogh firmware
  - amdgpu: update navy flounder firmware
  - amdgpu: update green sardine firmware
  - amdgpu: update sienna cichlid firmware
  - amdgpu: update PSP 13.0.11 firmware
  - amdgpu: update GC 11.0.4 firmware
  - amdgpu: update VCN 4.0.2 firmware
  - amdgpu: update PSP 13.0.4 firmware
  - amdgpu: update GC 11.0.1 firmware
  - amdgpu: update arcturus firmware
  - amdgpu: update navi14 firmware
  - amdgpu: add VCN 4.0.3 firmware
  - amdgpu: add SDMA 4.4.2 firmware
  - amdgpu: add SMU 13.0.6 firmware
  - amdgpu: add PSP 13.0.6 firmware
  - amdgpu: Add GC 9.4.3 firmware
  - amdgpu: update renoir firmware
  - amdgpu: update VCN 4.0.4 firmware
  - amdgpu: update SMU 13.0.7 firmware
  - amdgpu: update PSP 13.0.7 firmware
  - amdgpu: update GC 11.0.2 firmware
  - amdgpu: update navi12 firmware
  - amdgpu: update yellow carp firmware
  - amdgpu: update SMU 13.0.10 firmware
  - amdgpu: update SDMA 6.0.3 firmware
  - amdgpu: update PSP 13.0.10 firmware
  - amdgpu: update GC 11.0.3 firmware
  - amdgpu: update navi10 firmware
  - amdgpu: update aldebaran firmware
  - linux-firmware: Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
  - amdgpu: DMCUB updates for DCN314
  - qcom: Update the firmware for Adreno a630 family of GPUs
  - cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - linux-firmware: Add firmware for Cirrus CS35L41 for various Dell laptops
  - linux-firmware: update firmware for qat_4xxx devices
  - cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312
  - amdgpu: DMCUB updates for DCN314
  - Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
  - Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210


author: Fabio Valentini <decathorpe@gmail.com> - 1.2.2-1
changelog:
  - Update to version 1.2.2.
  - Drop custom maven-compiler-plugin overrides in favor of upstream settings.


author: Marian Koncek <mkoncek@redhat.com> - 2.3.3-4
changelog:
  - Avoid possible NullPointerException
  - Resolves: rhbz#1993889
  - Load native library from the correct location
  - Resolves: rhbz#1994935


author: Charalampos Stratakis <cstratak@redhat.com> - 2.13.1-1
changelog:
  - Update to 2.13.1 (#1831402)
  - Fix docs build failures with Sphinx 3 (#1823532)
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b05-0.1.ea
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b05 (EA)
  - Update release notes for 8u322-b05.
  - Switch to EA mode.
  - Require tzdata 2021c as of JDK-8274407.
  - Require tzdata 2021e as of JDK-8275766.
  - Update tarball generation script to use git following shenandoah-jdk8u's move to github
  - Resolves: rhbz#2022823


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-1
changelog:
  - Update to aarch64-shenandoah-jdk8u322-b06 (GA)
  - Update release notes for 8u322-b06.
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039398


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-2
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Introduce architecture restriction logic for the gdb test. (RH2041970)
  - Replace GCC 11 patch to remove use of the register keyword with correct fix to ADLC build (JDK-8281098)
  - Adjust JDK8199936/PR3533 -mstackrealign patch to instead pass -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2022823


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-3
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023387


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-4
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052821


author: Jiri Vanek <jvanek@redhat.com> - 1:1.8.0.322.b06-6
changelog:
  - Storing and restoring alternatives during update manually
  - Family extracted to globals
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008202


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-7
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052833


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.322.b06-9
changelog:
  - Remove 'java --version' test as this is not supported on java-1.8.0-openjdk
  - Resolves: rhbz#2058487


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.2.ea
changelog:
  - Refactor build functions so we can build just HotSpot without any attempt at installation.
  - Sync gdb test with java-1.8.0-openjdk.
  - Improve architecture restrictions for the gdb test.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Add backport of JDK-8257794 to fix bogus assert on slowdebug x86-32 Zero builds
  - Related: rhbz#2052834


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.8-0.3.ea
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023530


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-1
changelog:
  - Update to jdk-11.0.14.0+9
  - Update release notes to 11.0.14.0+9
  - Switch to GA mode for final release.
  - Resolves: rhbz#2039395


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.0.9-2
changelog:
  - Separate crypto policy initialisation from FIPS initialisation, now they are no longer interdependent
  - Resolves: rhbz#2052820


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-1
changelog:
  - Update to jdk-11.0.14.1+1
  - Update release notes to 11.0.14.1+1
  - Require tzdata 2021e as of JDK-8275766.
  - Resolves: rhbz#2052834


author: Jiri Vanek <jvanek@redhat.com> - 1:11.0.14.1.1-4
changelog:
  - Storing and restoring alterntives during update manually
  - Fixing Bug 2001567 - update of JDK/JRE is removing its manually selected alterantives and select (as auto) system JDK/JRE
  -- The move of alternatives creation to posttrans to fix:
  -- Bug 1200302 - dnf reinstall breaks alternatives
  -- Had caused the alternatives to be removed, and then created again,
  -- instead of being added, and then removing the old, and thus persisting
  -- the selection in family
  -- Thus this fix, is storing the family of manually selected master, and if
  -- stored, then it is restoring the family of the master
  - Resolves: rhbz#2008205


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.14.1.1-6
changelog:
  - Detect NSS at runtime for FIPS detection
  - Turn off build-time NSS linking and go back to an explicit Requires on NSS
  - Resolves: rhbz#2052831


author: Severin Gehwolf <sgehwolf@redhat.com> - 1:17.0.1.0.12-2
changelog:
  - Use 'sql:' prefix in nss.fips.cfg as F35+ no longer ship the legacy
    secmod.db file as part of nss
  - Resolves: rhbz#2023537


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-1
changelog:
  - January 2022 security update to jdk 17.0.2+8
  - Rebase RH1995150 & RH1996182 patches following JDK-8275863 addition to module-info.java
  - Rename libsvml.so to libjsvml.so following JDK-8276025
  - Drop JDK-8276572 patch which is now upstream
  - Resolves: rhbz#2039392


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-2
changelog:
  - Update tapsets from IcedTea 6.x repository with fix for JDK-8015774 changes (_heap->_heaps) and @JAVA_SPEC_VER@
  - Update icedtea_sync.sh with a VCS mode that retrieves sources from a Mercurial repository
  - Related: rhbz#2022826


author: Jiri Vanek <jvanek@redhat.com> - 1:17.0.2.0.8-4
changelog:
  - Replaced tabs by sets of spaces to make rpmlint happy
  - javadoc-zip gets its own provides next to plain javadoc ones
  - Resolves: rhbz#2022826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-4
changelog:
  - Restructure the build so a minimal initial build is then used for the final build (with docs)
  - This reduces pressure on the system JDK and ensures the JDK being built can do a full build
  - Turn off bootstrapping for slow debug builds, which are particularly slow on ppc64le.
  - Handle Fedora in distro conditionals that currently only pertain to RHEL.
  - Run OpenJDK normalizer script on the spec file to fix further rogue whitespace
  - Sync gdb test with java-1.8.0-openjdk and improve architecture restrictions.
  - Introduce stapinstall variable to set SystemTap arch directory correctly (e.g. arm64 on aarch64)
  - Need to support noarch for creating source RPMs for non-scratch builds.
  - Replace -mstackrealign with -mincoming-stack-boundary=2 -mpreferred-stack-boundary=4 on x86_32 for stack alignment
  - Support a HotSpot-only build so a freshly built libjvm.so can then be used in the bootstrap JDK.
  - Explicitly list JIT architectures rather than relying on those with slowdebug builds
  - Disable the serviceability agent on Zero architectures even when the architecture itself is supported
  - Resolves: rhbz#2022826


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.2.0.8-5
changelog:
  - Fix FIPS issues in native code and with initialisation of java.security.Security
  - Resolves: rhbz#2023531


author: Jerry James <loganjerry@gmail.com> - 0:7.0.12-1
changelog:
  - Update to 7.0.12
  - Convert License tag to SPDX
  - Add bootstrap build mode
  - Add patch to fix javadoc errors in the JavaCharStream template
  - Add patch to remove duplicate @Deprecated annotations


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.0.0-10
changelog:
  - Introduce javapackages-extra and javapackages-common subpackages
  - Drop metadata for com.sun:tools and sun.jdk:jconsole
  - Re-enable tests
  - Re-add manpages
  - Drop bootstrap mode


author: Jiri Vanek <jvanek@redhat.com> - 0.2-0.1.20210701c15dd4c
changelog:
  - criu-devel moved to BR
  - now requires criu-libs
  - enabled debuginfo generation
  - excluded i686 build as criu is 64b only
  - .so file moved out of jar. Required teo patches:
  - added and applied patch0 output_loc.patch
  - added and applied patch1 load_library.patch
  - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.3.20210802a3007aa
changelog:
  - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9.
  - This also ensures use of the standard build flags and installs the jar in the expected location.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 0.2-0.4.20210807b2d3751
changelog:
  - Update to latest upstream version with renamed package and consistent use of "jigawatts"
  - Drop library patch which is no longer needed.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.0~SNAPSHOT^20210827.a5f8e31-1
changelog:
  - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release.
  - Resolves: rhbz#1972029


author: Andrew Hughes <gnu.andrew@redhat.com> - 1.21.0.0.0-4
changelog:
  - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds
  - Resolves: rhbz#2071920


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2.git.d18d5863-1
changelog:
  - Update to the upstream v3.0.2 + tip of origin/master
    with fixes for an important issue:
    https://github.com/nhorman/rng-tools/pull/123
    https://github.com/smuellerDD/jitterentropy-library/issues/37
  - Add important upstream fixes for the one CPU case (bz 1974132)


author: Vladis Dronov <vdronov@redhat.com> - 3.0.2-2.git.409828cf
changelog:
  - Update to the latest upstream commits upto 409828cf (bz 1973157)
  - Add clock_gettime() software time source
  - Add a code for choosing between software and hardware time sources
    https://github.com/smuellerDD/jitterentropy-library/pull/57
    https://bugzilla.redhat.com/show_bug.cgi?id=1974132


author: Vladis Dronov <vdronov@redhat.com> - 3.3.1-2
changelog:
  - Update to the upstream v3.3.1 @ 887c9871 (bz 2015560)
  - Fix a security issue found by a covscan in jitterentropy library


author: Björn Esser <besser82@fedoraproject.org> - 0.14-2
changelog:
  - Add a patch to backport fixes applied on upstream master branch
  - Re-enable RDRAND as json-c can detect broken implementations in CPUs now
  - Disable -Werror during build


author: Björn Esser <besser82@fedoraproject.org> - 0.14-6
changelog:
  - Build using Ninja instead of Make
  - Add a patch to move Doxyfile into doc subdir
  - Remove pre-built html documentation
  - Update Doxyfile during %prep
  - Add a patch to apply some optimizations to arraylist
  - Hardlink the files in %_pkgdocdir


author: Benjamin A. Beasley <code@musicinmybrain.net> - 3.9.1-4
changelog:
  - Handle bundled Hedley: add virtual Provides and commentary, and incorporate
    its license in the License field


author: Zamir SUN <zsun@fedoraproject.org> - 0-0.17.20191127gitbd56a60
changelog:
  - Workaround "multiple definition of `yyin'"
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559


author: Cestmir Kalina <ckalina@redhat.com> - 0.24
changelog:
  - Fix annocheck failures
  - Fix osci tier0 test reference
  - Fix ET_DYN vmlinux namespace support
  - Resolves: rhbz#2038913
  - Resolves: rhbz#2045976
  - Resolves: rhbz#2038892


author: Akira TAGOH <tagoh@redhat.com> - 2.5-35
changelog:
  - Drop gtk2 dependency completely.
  - Make anthy build conditionally for Fedora release only.
    Resolves: rhbz#1939777
  - Fix build fail without anthy-devel.


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.4.0-4
changelog:
  - Fix layout->keymap conversion broken by change in xkeyboard-config
    (patch by Peter Hutterer)
    Resolves: #1950406


author: Kairui Song <kasong@redhat.com> - 006-4.20210721gitd046d22
changelog:
  - Update to latest git snapshot (20210721). Resolves: bz1937035, bz1959203
  - Apply RHEL only patch to enable kdump by default


author: Kairui Song <kasong@redhat.com> - 006-5.20210805gitce26db0
changelog:
  - Update to latest git snapshot, automated installation won't be blocked. Resolves: bz1986969
  - Update RHEL only patch, fix inst.kdump_addon=0 not working issue. Resolves: bz1986942


author: Kairui Song <kasong@redhat.com> - 006-7.20210812git5b74c1d
changelog:
  - Update to latest git snapshot, fix kdump spoke is incomplete after luks device is deleted. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-8.20210818git400359b
changelog:
  - Update to latest git snapshot, fix installation failure when reuse old partition. Resolves: bz1937035


author: Kairui Song <kasong@redhat.com> - 006-9.20210819git2026d20
changelog:
  - Update to latest git snapshot, fix encryption warning still present after disabling encryption. Resolves: bz1937035


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-10
changelog:
  - Add conflicts of kernel-srpm-macros with kernel-rpm-macros < 185-9
    as macros.kmp, kmodtool, and rpmsort were moved from the latter
    to the former.


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-11
changelog:
  - Work around a change in type of __crc_* symbols for some kmods printed by nm
    on ppc64le and s390x
  - Resolves: #2055464


author: Eugene Syromiatnikov <esyr@redhat.com> - 1.0-13
changelog:
  - Handle symvers.xz in kabi.attr (#2209253).
  - Fix indirect __crc_* sumbols parsing in find-provides.ksyms
    and find-requires.ksyms to avoid matching multiple sections
    producing bogus duplicate provides for kmods that have both __kcrctab
    and __kcrctab_gpl sections (#2115811, #2178935).
  - Call "readelf -R" on a correct section in find-requires.ksyms.
  - Rewrite section data extraction in find-provides.ksyms and find-requires.ksyms
    to avoid garbage at the end of extracted sections, causing unnecessary awk
    complaints (#2115811).
  - Perform section parsing inside the awk script in find-provides.ksyms
    and find-requires.ksyms to avoid hitting command line argument limit
    when handling large .rodata sections (#2178935).


author: Tao Liu <ltao@redhat.com> - 2.0.25-13
changelog:
  - kdump-lib: Add the CoreOS kernel dir to the boot_dirlist
  - kdump-lib: attempt to fix BOOT_IMAGE detection
  - kdump-lib: change how ostree based systems are detected
  - kdump-lib: clear up references to Atomic/CoreOS


author: Tao Liu <ltao@redhat.com> - 2.0.25-14
changelog:
  - Install nfsv4-related drivers when users specify nfs dumping via dracut_args
  - Revert "ppc64: tackle SRCU hang issue"
  - sysconfig: add zfcp.allow_lun_scan to KDUMP_COMMANDLINE_REMOVE on s390


author: Tao Liu <ltao@redhat.com> - 2.0.26-2
changelog:
  - Rebase makedumpfile to upstream latest(8e8b8814be1)
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile


author: Tao Liu <ltao@redhat.com> - 2.0.26-3
changelog:
  - Rebase makedumpfile to v1.7.3
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel


author: Tao Liu <ltao@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdump-lib: fix prepare_cmdline
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS


author: Tao Liu <ltao@redhat.com> - 2.0.26-5
changelog:
  - Add lvm thin provision to kdump supported-kdump-targets.txt
  - mkdumprd: Use the correct syntax to redirect the stderr to null


author: Tao Liu <ltao@redhat.com> - 2.0.26-6
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()
  - Simplify the management of the kernel parameter crashkernel
  - kdump-lib: fix the matching pattern for debug-kernel
  - kdump-lib: always specify version in is_squash_available


author: Tao Liu <ltao@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix temporary directory location
  - kdump-lib: Match 64k debug kernel in prepare_kdump_bootinfo()


author: - Andy Walsh <awalsh@redhat.com> - 8.1.1.371-15
changelog:
  - Fixed bugs in the UDS index's handling of backing storage changes.
  - Resolves: rhbz#2007803
  - Resolves: rhbz#2058464


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 3.6.0.6025.1
changelog:
  - Correct repo to hci-80.0.0-vz, see #VSTOR-60430 (#VSTOR-60430)
   - scst_vdisk: enable the "ploop_standby_check" static key in module init. (Liu
  Kui <Kui.Liu@acronis.com>) (#PSBM-142759)
   - Set build version and date at compile time, see #VSTOR-40388 (Liu Kui
  <Kui.Liu@acronis.com>) (#VSTOR-40388)
   - Exclude DLM from SCST build (#VSTOR-18130) (Liu Kui <Kui.Liu@acronis.com>) (#VSTOR-18130)
   - Port patches that implement command processing latency histograms per I_T_L
  nexus. (Liu Kui <Kui.Liu@acronis.com>) (#VSTOR-18751)
   - vdisk: port over following 2 patches: (Liu Kui <Kui.Liu@acronis.com>)
   - vdisk: set the alua_standby sense code if a backing store is in standby mode
  (Andrei Vagin <avagin@openvz.org>) (#VSTOR-14003)
   - Print volume id for FLUSH error (Sergey Lysanov <slysanov@virtuozzo.com>)
   - scst: add a BUG_ON() to catch double addition the session to shutdown list
  (Ildar Ismagilov <Ildar.Ismagilov@acronis.com>) (#VSTOR-46586)
   - iscsi-scst: Avoid possible deadlock between atomic and non-atomic commands
  fix for #VSTOR-43126 (azaitsev <azaitsev@acronis.com>) (#VSTOR-43126)
   - iscsi-scst/usr: fix invalid listen_socket_put (Sergey Lysanov
  <Sergey.Lysanov@acronis.com>) (#VSTOR-39531)
   - iscsi-scst/usr: add more tracing during login (Sergey Lysanov
  <Sergey.Lysanov@acronis.com>)
   - isert-scst: per-connection work to avoid socket lock contention (Ildar
  Ismagilov <Ildar.Ismagilov@acronis.com>)
   - PR: adjust verbosity (Sergey Lysanov <Sergey.Lysanov@acronis.com>)
   - Set timeout for STPG command (Sergey Lysanov <slysanov@virtuozzo.com>) (#VSTOR-29437)
   - Added targets.list (VZ Auto Builder <dsilakov@virtuozzo.com>)
   - [scst] Improve logging (Sergey Lysanov <slysanov@virtuozzo.com>)
   - iscsi-scst/usr: decrease length of backlog queue for listen socket (Sergey
  Lysanov <slysanov@virtuozzo.com>) (#VSTOR-27956)
   - Introduce SCST_VSTORAGE_VERSION to show build version in sysfs (Sergey
  Lysanov <slysanov@virtuozzo.com>) (#VSTOR-27479)
   - [scst] Added ability to change logging mode (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - [scst_vdisk] Disable block cache size by default (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Makefile: added increase_version target (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Enable blocking and PR tracing by default (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - blk_cache: disable bug_on if LRU list is empty (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-24337)
   - [scst] Make scst tracing through relayfs (#VSTOR-26516) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-26516)
   - Added new ioctl to scst_event device (#VSTOR-25093) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-25093)
   - Enable block cache for COMPARE AND WRITE (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Disable block cache for COMPARE AND WRITE cmd by default (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Fix high order allocation in qla2x00t module (#VSTOR-23976) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-23976)
   - Decrease log verbosity for persistent reservations (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Replace mutex by spinlock in blk cache (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Make __blk_cache_get function inplace (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Replace kmem_cache_zalloc by kmem_cache_alloc in blk cache (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Don't reset block before adding it to the cache. (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Add evictions stats to blk cache (Sergey Lysanov <slysanov@virtuozzo.com>)
   - Replace spinlock by mutex in blk_cache (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Add blk cache to scst_vdisk (#VSTOR-22495) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-22495)
   - Introduce block cache for COMPARE AND WRITE command (#VSTOR-22495) (Sergey
  Lysanov <slysanov@virtuozzo.com>) (#VSTOR-22495)
   - [SCST] Process RESERVE_OUT with all_tg_pt flag only for one device (Sergey
  Lysanov <slysanov@virtuozzo.com>)
   - 1. disable XCOPY support #VSTOR-21518 2. disable unmap because expanded ploop
  does not support it (Andrey Zaitsev <azaitsev@virtuozzo.com>) (#VSTOR-21518)
   - Print volume id for BLOCKIO error (Sergey Lysanov <slysanov@virtuozzo.com>)
   - Process VOLUME_NOT_EXIST error and abort PR command (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Cleanup aborted bit of PR command (#VSTOR-21392) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-21392)
   - Fixed compilation errors due to kernel API changes (Liu Kui
  <Kui.Liu@acronis.com>)
   - Introduce gracefull shutdown for hanged PR requests (#VSTOR-20485) (Sergey
  Lysanov <slysanov@virtuozzo.com>) (#VSTOR-20485)
   - Add volatile keyword for watchdog timestamp (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Added ALL_TG_PT flag support in PR REGISTER OUT command (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Invalidate PR state when watchdog is changing state. (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Fixed trying to vfree() nonexistent vm area (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Limit the maximum number of registrants (#VSTOR-20011) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-20011)
   - Add watchdog for PR state invalidation (#VSTOR-20012) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-20012)
   - Close pipe to usermode helper after write (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Fixed invalid read size in WARN_ON (Sergey Lysanov <slysanov@virtuozzo.com>)
   - Fixed aligning buf size to page size (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Added scst_vstor.c to compilation (Sergey Lysanov <slysanov@virtuozzo.com>)
   - Cluster operations for PR synchronizing (#VSTOR-18130) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-18130)
   - Test program for PR usermode helper (#VSTOR-10187) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-10187)
   - Added pr_user_helper attribute to disk (#VSTOR-18130) (Sergey Lysanov
  <slysanov@virtuozzo.com>) (#VSTOR-18130)
   - Add vstorage node id attribute for setup SCST in cluster mode. (Sergey
  Lysanov <slysanov@virtuozzo.com>)
   - qla2x00t: separate cmds buffer from scsi_qla_host (Anton Nefedov
  <anton.nefedov@virtuozzo.com>)
   - qla2x00t: suppress high-order allocation warnings for DMA allocs (Anton
  Nefedov <anton.nefedov@virtuozzo.com>) (#VSTOR-18589)
   - qla2x00t: switch a few large allocations to kvzalloc() (Anton Nefedov
  <anton.nefedov@virtuozzo.com>) (#VSTOR-18589)
   - vdisk: allow to set a blkio cgroup for a backstore (Andrei Vagin
  <avagin@openvz.org>) (#VSTOR-13791)
   - Add Makefile.version (Sergey Lysanov <slysanov@virtuozzo.com>)
   - Fixed compilation in debug mode (Sergey Lysanov <slysanov@virtuozzo.com>)
   - [SCSTD] Start listen on the specified portal address (#VSTOR-14184) (Sergey
  Lysanov <slysanov@virtuozzo.com>) (#VSTOR-14184)
   - Return EEXIST error if iscsi attribute already exist (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - Disable FILEIO and default stpgd script from build (Sergey Lysanov
  <slysanov@virtuozzo.com>)
   - [v2] scst: run a user helper before the rtpg command (Andrei Vagin
  <avagin@openvz.org>)
   - scst/include/backport.h: Fix the build against CentOS 8-stream (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_vdisk: Unbreak the RHEL 9 build (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - Add security scan configuration to exclude git commit hash (Liu Kui
  <Kui.Liu@acronis.com>)
   - Rebase to SCST v3.6 ( up to commit 67a5f642e680b). (Liu Kui
  <Kui.Liu@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.3.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct targets.list for master (vzbuild <vzbuild@acronis.com>)
   - Correct Makefile.version for hci-5.2.0-vz (vzbuild <vzbuild@acronis.com>)
   - Correct make procedure
   - Correct requirements
   - vzkernel -> kernel, see #VSTOR-54875 (#VSTOR-54875)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 3.6.0.6025.2
changelog:
  - Pull request #17: VSTOR-66094 need to fix scst build with new kernel on rhel9
  (Andrey Zaitsev <Andrey.Zaitsev@acronis.com>) (#VSTOR-66094)
   - scst: Unbreak the RHEL 9.1 build (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_targ: Revert "scst: Fix __scst_init_cmd()" (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_targ: Use 'atomic_inc_return' to check 'dev->dev_cmd_count' (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_main: Fix up the error handling (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_copy_mgr, initial inquiry: Fix up the error handling (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - iscsi-scst: Fix up the error handling to avoid crash (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - iscsi-scst: Make exit_tx() return void (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Port to Linux kernel v5.19 (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_lib: Port to Linux kernel v5.19 (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t/doc/qla2x00t-howto.html: Add information about initiator and target
  modes (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t: Remove pci-dma-compat wrapper API (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Remove unused zero_copy flag (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_sysfs: Use default_groups in kobj_type (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_mem: Use default_groups in kobj_type (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_lib: Port to Linux kernel v5.18 (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst/include/backport.h: Move bsg_job_sense() under scsi related backport
  (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t: Clean up set_bsg_result() function (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - iscsi-scst: Port to Linux kernel v5.18 (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_lib: Rename obsolete goto label (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Port to Linux kernel v5.18 (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst: Replace zero-length arrays with flexible-array members (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_targ: Fix tgt_dev_cmd_count ref counter management (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst/include/backport.h: Remove WQ_NON_REENTRANT definition (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove support for kernel versions before 3.10 (Chesnokov
  Gleb <Chesnokov.G@raidix.com>)
   - qla2x00t: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - fcst: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - ib_srpt: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - iscsi-scst: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst_local: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst_copy_mgr: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst_targ: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - dev_handlers: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst_dlm: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst_lib: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst: Remove support for kernel versions before 3.10 (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - scst/include/backport.h: Remove support for kernel versions before 3.10
  (Chesnokov Gleb <Chesnokov.G@raidix.com>)


author: Konstantin Volkov <Konstantin.Volkov@acronis.com> 3.6.0.6025.3
changelog:
  - Pull request #20: VSTOR-71053 need to fix scst build with new 9.2 kernel on
  rhel9 (Kui Liu <Kui.Liu@acronis.com>) (#VSTOR-71053)
   - scst_targ: Check prepare_to_wait_exclusive_head() return value (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_user: Simplify signal pending check (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst: Confirm percpu refs has scheduled and switched to atomic (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst: Use scst_wait_event_...() with INTERRUPTIBLE sleep (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Make __scst_ext_blocking_done() static (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Enable scst_sync_ext_block_dev() to handle signals (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Split scst_ext_block_dev() for clarity and easier maintenance (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst.h: Refactor wait_event_locked() to enhance usability and clarity (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst.h: Unify names in prepare_to_wait_exclusive_head() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst: Unbreak the non-DLM build (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h: Unbreak the RHEL 9.3 build (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix NULL pointer dereference in target mode (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Backport to older kernel versions (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Drop redundant pci_enable_pcie_error_reporting() (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst: Remove support for RHEL5/6 (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_pres,scst_dlm: Fix broken UNIT ATTENTION for remote PR registrants
  (Brian Meagher <brian.meagher@ixsystems.com>)
   - scsi-scstd: Check initiator name provided during login (Brian Meagher
  <brian.meagher@ixsystems.com>)
   - scst: Unbreak the build for kernel versions <= 6.3 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_local: Declare SCSI host template const (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t: Declare SCSI host template const (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Declare SCSI host template const (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Refer directly to the qla2xxx_driver_template (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst: Port to Linux kernel v6.4 (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst: Remove scst_module.c file (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_lib,scst_sysfs: Add aen_disabled setting (Brian Meagher
  <brian.meagher@ixsystems.com>)
   - scst_lib: Avoid holding scst_mutex during sess_tgt_dev_list access (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst: Use RCU read lock when accessing sess_tgt_dev_list (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix memory leak in qla2x00_probe_one() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst: Unbreak the RHEL 9.2 build (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Synchronize the IOCB count to be in order (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Perform lockless command completion in abort path (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Add option to disable FC2 Target support (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove the unused variable wwn (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Simplify if condition evaluation (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Make qla_trim_buf() and __qla_adjust_buf() static (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix printk() format string (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.08.200-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Backport to older kernel versions (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Select qpair depending on which CPU post_cmd() gets called
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix clang warning (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Reduce memory usage during low I/O (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix stall session after app start (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix performance dip due to lock contention (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Relocate/rename vp map (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove dead code (GNN ID) (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove dead code (GPNID) (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove dead code (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.08.100-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix IOCB resource check warning (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove increment of interface err cnt (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix erroneous link down (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove unintended flag clearing (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix stalled login (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix exchange oversubscription for management commands (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix exchange oversubscription (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix DMA-API call trace on NVMe LS requests (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix link failure in NPIV environment (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Check if port is online before sending ELS (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Port to Linux kernel v6.3 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Use better sense data for transport error (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix LUN parsing for ABORT_TASK_SET (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix crash when I/O abort times out (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Initialize vha->unknown_atio_[list, work] for NPIV hosts
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove duplicate of vha->iocb_work initialization (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove unused variable 'found_devs' (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix set-but-not-used variable warnings (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Use transport-defined speed mask for supported_speeds (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix serialization of DCBX TLV data request (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove unused declarations for qla2xxx (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix spelling mistake "definiton" -> "definition" (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.07.900-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Define static symbols (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Backport to older kernel versions (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Enhance driver tracing with separate tunable and more (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Add NVMe parameters support in Auxiliary Image Status (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Add debugfs create/delete helpers (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix response queue handler reading stale packets (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Revert "qla2x00t-32gbit: Fix response queue handler reading
  stale packets" (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Log message "skipping scsi_scan_host()" as informational
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Avoid flush_scheduled_work() usage (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Always wait for qlt_sess_work_fn() from qlt_stop_phase1()
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove unused qlt_tmr_work() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove unused del_sess_list field (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Drop DID_TARGET_FAILURE use (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Port to Linux kernel v6.1 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Disable ATIO interrupt coalesce for quad port ISP27XX (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.07.800-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update manufacturer details (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix sparse warning for dport_data (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix discovery issues in FC-AL topology (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix imbalance vha->vref_count (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix dropped IKE message (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix response queue handler reading stale packets (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Zero undefined mailbox IN registers (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix incorrect display of max frame size (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Revert "qla2x00t-32gbit: Fix disk failure to rediscover"
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Check correct variable in qla24xx_async_gffid() (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.07.700-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix erroneous mailbox timeout after PCI error injection
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix losing FCP-2 targets on long port disable with I/Os
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Add debug prints in the device remove path (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix losing target when it reappears during delete (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix losing FCP-2 targets during port perturbation tests
  (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix crash due to stale SRB access around I/O timeouts (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Turn off multi-queue for 8G adapters (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Wind down adapter after PCIe error (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Add a new v2 dport diagnostic feature (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Fix excessive I/O error messages by default (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.07.600-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix slow session teardown (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Reduce N2N thrashing at app_start time (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix no logout on delete for N2N (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix session thrash (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Tear down session if keys have been removed (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix no login after app start (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Reduce disruption due to multiple app start (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Send LOGO for unexpected IKE message (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix I/O timeout due to over-subscription (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Update version to 10.02.07.500-k (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix n2n login retry for secure device (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix n2n discovery issue with secure target (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Remove old doorbell interface (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Add retry for ELS passthrough (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Synchronize NPIV deletion with authentication
  application (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Fix potential stuck session in sa update (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Backport to older kernel versions (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Add bsg interface to read doorbell events (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Wait for app to ack on sess down (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: bsg refactor (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: edif: Reduce Initiator-Initiator thrashing (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t-32gbit: Remove unused 'ql_dm_tgt_ex_pct' parameter (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove setting of 'req' and 'rsp' parameters (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Remove unneeded variable (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove unneeded flush_workqueue() (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove free_sg command flag (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Change the default qlini_mode to exclusive (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Change preferred context for scst_cmd_init_done() (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Do not call scst_unregister_target() twice (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix crash during deregistering an NPIV port (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix missed DMA unmap for aborted commands (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix typos in comments (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Update version to 10.02.07.400-k (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Increase max limit of ql2xnvme_queues (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Use correct feature type field during RFF_ID processing
  (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix stuck session of PRLI reject (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Reduce false trigger to login (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix laggy FC remote port session recovery (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix hang due to session stuck (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix N2N inconsistent PLOGI (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix crash during module load unload test (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix missed DMA unmap for NVMe ls requests (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix loss of NVMe namespaces after driver reload test (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix disk failure to rediscover (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix incorrect reporting of task management failure (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Use named initializers for q_dev_state (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Use named initializers for port_[d]state_str (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove unused qla_sess_op_cmd_list from scsi_qla_host_t
  (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Add qla2x00_async_done() for async routines (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Update version to 10.02.07.300-k (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Check for firmware dump already collected (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Add devids and conditionals for 28xx (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix T10 PI tag escape and IP guard options for 28XX adapters
  (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Fix clang warning (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix warning for missing error code (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix device reconnect in loop topology (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Add ql2xnvme_queues module param to configure number of NVMe
  queues (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix wrong FDMI data for 64G adapter (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Add retry for exec firmware (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix scheduling while atomic (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix premature hw access after PCI error (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix warning message due to adisc being flushed (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix stuck session in gpdb (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Implement ref count for SRB (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Refactor asynchronous command initialization (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t: Stop using the SCSI pointer (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Stop using the SCSI pointer (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Restore support for sysfs hw_target attribute (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Backport to older kernel versions (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Synchronize rport dev_loss_tmo setting (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Format log strings only if needed (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Fix off by one bug in qla_edif_app_getfcinfo() (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix mailbox direction flags in qla2xxx_get_adapter_id()
  (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Update version to 10.02.07.200-k (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Fix EDIF bsg (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Fix inconsistent check of db_flags (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Increase ELS payload (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Reduce connection thrash (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Tweak trace message (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Replace list_for_each_safe with
  list_for_each_entry_safe (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Flush stale events and msgs on session down (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Fix app start delay (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Fix app start fail (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Turn off target reset during issue_lip (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix gnl list corruption (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Relogin during fabric disturbance (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Compilation fix for kernel versions before v5.16 (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: add ->map_queues support for nvme (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix unmap of already freed sgl (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix a memory leak in an error path of qla2x00_process_els()
  (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Return -ENOMEM if kzalloc() fails (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove a declaration (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix excessive messages during device logout (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Restore initiator in dual mode (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove redundant initialization of pointer req (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Update version to 10.02.07.100-k (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix use after free in eh_abort path (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Move heartbeat handling from DPC thread to workqueue (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Call process_response_queue() in Tx path (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix kernel crash when accessing port_speed sysfs file (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: edif: Use link event to wake up app (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Fix crash in NVMe abort path (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Check for firmware capability before creating QPair (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Display 16G only as supported speeds for 3830c card (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Backport the BSG code (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Add support for mailbox passthru (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - qla2x00t-32gbit: Remove support for RHEL6 (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst/include/backport.h: Fix the RHEL 9.0 build (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h: Fix building on RHEL 8.8 (Robert Blackhart
  <robert@robertblackhart.com>)
   - scst_vdisk: Introduce the function vdev_set_t10_dev_id() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_vdisk, scstadmin: Allow t10_dev_id to be stored before cluster_mode
  (Brian Meagher <brian.meagher@ixsystems.com>)
   - scst_vdisk: Add lb_per_pb_exp attribute (Brian Meagher
  <brian.meagher@ixsystems.com>)
   - scst: Port to Linux kernel v6.3 (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_sysfs: Add support for cluster_name (Brian Meagher
  <brian.meagher@ixsystems.com>)
   - scst_disk: Fix use of uninitialized variable (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_disk: Add cluster SCSI sync state mode support to dev_disk (Brian
  Meagher <brian.meagher@ixsystems.com>)
   - scst_lib: Port to Linux kernel v6.3 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Fix bio_kmalloc usage for RHEL 9.1 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Fix bio_kmalloc usage to match change in Linux kernel v5.19 (Brian
  Meagher <brian.meagher@ixsystems.com>)
   - scst_lib: Fix sense data regression for pass-through commands. (Brian Meagher
  <brian.meagher@ixsystems.com>)
   - scst_lib, scst_vdisk: Port to Linux kernel v6.2 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h: Do not set rq->end_io to NULL (Brian Meagher
  <brian.meagher@ixsystems.com>)
   - scst: Backport the PTR_ERR_OR_ZERO() function (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_vdisk, qla2x00t-32gbit: Use PTR_ERR_OR_ZERO instead of IS_ERR and
  PTR_ERR (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_targ: Fix error handling in scst_mgmt_cmd_exec() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - qla2x00t: Fix use of uninitialized struct field (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scripts/kernel-functions: Improve gcc 12 support (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_sysfs: Unify output format for scst_luns_mgmt_show() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_copy_mgr: Serialize scst_cm_desig_list list updates (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_copy_mgr: Introduce scst_cm_dev_free_designators() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_copy_mgr: Fix scst_cm_desig_list list corruption (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_copy_mgr: Introduce scst_cm_get_free_lun() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst: Drop support for detect() method (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_event: Use a private workqueue instead of the system workqueue (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst: Remove deprecated create_workqueue() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Improve the use of scst_release_acg_wq (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h: Remove unused workqueues backport (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - ib_srpt: Port to Linux kernel v6.1 (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - iscsi-scst: Remove cm_listen conftest (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Port to Linux kernel v6.1 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_dlm: Port to Linux kernel v6.1 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scripts: Remove references to the ibmvstgt, mpt and mvsas_tgt drivers (Gleb
  Chesnokov <gleb.chesnokov@scst.dev>)
   - scst_lib: Fix handling of a SENSE with buffer size 0 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Fix handling of an INQUIRY with buffer size 0 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib: Fix quoted string split across lines (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h: Remove support for RHEL5 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_mem: Check for errors in scst_sgv_pools_init() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_mem: Allow NULL 'pool' pointer in sgv_pool_destroy() (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h: Fix the register_shrinker() backport (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - iscsi-scst: Fix a typo in SCSTTarget RA (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_mem: Port to Linux kernel v6.0 (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst: Remove else after a break or return (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst: Remove unnecessary null check (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst/include/backport.h, scst_sysfs: Prefer 'unsigned int' over bare
  'unsigned' (Gleb Chesnokov <gleb.chesnokov@scst.dev>)
   - iscsi-scst: Fix spelling mistake in comment (Gleb Chesnokov
  <gleb.chesnokov@scst.dev>)
   - scst_lib, scst_vdisk: Remove unlikely from IS_ERR_OR_NULL (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - ib_srpt: Remove the obsolete max_sge_delta kernel module parameter (Bart Van
  Assche <bvanassche@acm.org>)
   - ib_srpt: Remove obsolete parameters and update documentation (Bart Van Assche
  <bvanassche@acm.org>)
   - scst_lib: Fix memory leak reported by Coverity (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Introduce the primitives for [de]activating a virt device (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - scst_tg: Fix usage of the on_alua_state_change_*() callback functions (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - scst_tg: Introduce __scst_tg_have_tgt() (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - iscsi-scst: Suppress a Coverity taint complaint (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - iscsi-scst/usr/iscsi_adm.c: Fix use of uninitialized struct field (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - iscsi-scst: Fix use of uninitialized struct field (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_lib: Simplify redundant boolean expression (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Make vdev_sysfs_process_active_store() more readable (Gleb
  Chesnokov <Chesnokov.G@raidix.com>)
   - scst: Display default SCST module parameters values (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_main: Use bool type for boolean module params (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - scst_vdisk: Always mark manually set thin_provisioned sysfs attributes as
  [key] (Gleb Chesnokov <Chesnokov.G@raidix.com>)
   - scst_lib: Fix use of uninitialized ini_unchecked_isa_dma (Gleb Chesnokov
  <Chesnokov.G@raidix.com>)
   - Bump the minimal kernel version requirements (Chesnokov Gleb
  <Chesnokov.G@raidix.com>)
   - Correct targets.list for v3.6 (vzbuild <vzbuild@acronis.com>)
   - Technical release up, see #VSTOR-71038 (#VSTOR-71038)


