# changelog

author: Pavel Alexeev <Pahan@Hubbitus.info> - 0.8.13-1
changelog:
  - Update to 0.8.13 version (bz#1742435).
  - Try build on epel8 (bz#1757824).
  - Completely remove SOURCE1 sysvinit legacy.
  - Reformat with spaces.


author: Simone Caronni <negativo17@gmail.com> - 1.4.23-2
changelog:
  - Remove Thirdparty folder from sources and provide script to recreate tarball.
  - Remove duplicated docs in samples subpackage.


author: Richard Shaw <hobbes1069@gmail.com> - 4.3.2-2
changelog:
  - Add patch to allow prevention of backups being deleted.
  - Add apache.users config file to control permissions and update related SETUP
    documentation.
  - Fix PID file to be created in /run instead of /var/run.


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.3.10-7
changelog:
  - The STACK macro was removed in globus-gsi-credential 7.13. Don't use.
  - EPEL 5 End-Of-Life specfile clean-up
    - Remove Group and BuildRoot tags
    - Remove _pkgdocdir macro definition
    - Don't clear the buildroot in the install section
    - Remove the clean section


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 1.3.11-3
changelog:
  - Add BuildRequires on gcc-c++
  - Remove workaround for changed default linker flags, the change was reverted


author: Michael Schwendt <mschwendt@fedoraproject.org> - 2.1.3-9
changelog:
  - Fix HTML documentation installation location.
  - Replace CUnit-2.1-3-src.tar.bz2 tarball, which really
    is 2.1-2 in disguise according to configure.in, with 2.1-3 as
    published on 2014-04-24.
  - BR libtool
  - Run autoreconf instead of autoconf.
  - Drop --enable-curses because without BuildRequires ncurses-devel it
    would disable itself automatically (and if it were enabled, test programs
    would need to link with ncurses explicitly).


author: Ville Skyttä <ville.skytta@iki.fi> - 3.2.6-15
changelog:
  - Fix source URL and switch to xz tarball (the only one available)
  - Do not own %{_localstatedir}/lib/rpm-state (#907618)
  - Ship gsettings-schema-convert manpage only in -devel (#893767)
  - Install COPYING as %license where available
  - Fix bogus dates in %changelog


author: Paul Howarth <paul@city-fan.org> - 1.6.11-1
changelog:
  - Update to 1.6.11
    - Fix use of a NULL pointer when opening a corrupt database with 'GeoIP_open'
      (GH#87)
  - Drop EL-5 support
    - Drop redundant BuildRoot: and Group: tags
    - Drop EL5-only dependency on GeoIP-GeoLite-data
    - Drop explicit pkgconfig dependency in devel package
    - Drop buildroot cleaning in %install section
    - Drop explicit %clean section


author: Paul Howarth <paul@city-fan.org> - 1.6.12-1
changelog:
  - Update to 1.6.12
    - Populate metro and area code when performing lookups in IPv6 City
      databases; previously this was only done when using IPv4 City
      databases


author: Paul Howarth <paul@city-fan.org> - 2018.06-1
changelog:
  - IPv6 databases are still seeing updates in June 2018
  - IPv4 databases are unchanged from previous release


author: Miro Hrončok <mhroncok@redhat.com> - 1.49-6
changelog:
  - Subpackage python2-GeographicLib has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Severin Gehwolf <sgehwolf@redhat.com> - 2.1.9-6
changelog:
  - Add explicit requirement on javapackages-tools for script which
    uses java-functions. See RHBZ#1600426.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.06.09-21
changelog:
  - Add BuildRequires on gcc-c++
  - Packaging updates
    - Remove Group and BuildRoot tags
    - Don't clear the buildroot in the install section
    - Remove the clean section
    - Install license in licensedir (where applicable)


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 2.06.10-1
changelog:
  - Update to version 2.06.10
  - Drop patches - all fixed in the new version
  - Drop the -ffp-contract=off hack
  - Remove redundant m_outstream->setf(std::ios::fixed)
  - Fix GenEventCopmpare
  - Adjust expected test output for changes in the code


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 3.2.5-2
changelog:
  - Fix detection of installed Pythia HepMC3 interface
  - Fix endian issue in HEPEVT wrappers
  - Fix doxygen markup syntax


author: Peter Bieringer <pb@bieringer.de> - 8.4.0-2
changelog:
  - update to 8.4.0
  - add upstream patch fixing https://github.com/chrislim2888/IP2Location-C-Library/issues/47


author: Michael Cronenworth <mike@cchtml.com> - 1:6.9.10.64-1
changelog:
  - Update to 6.9.10.64
  - Set threading option (https://src.fedoraproject.org/rpms/ImageMagick/pull-request/2)
  - Enable more image formats (RHBZ#1485823)


author: Paul Howarth <paul@city-fan.org> - 1.0.5-17
changelog:
  - ldconfig scriptlets replaced by RPM File Triggers from Fedora 28
  - Drop legacy BuildRoot: and Group: tags
  - Drop redundant explicit buildroot cleaning
  - Specify all explicitly-used build requirements
  - Use %license where possible
  - Drop %defattr, redundant since rpm 4.4


author: Debarshi Ray <rishi@fedoraproject.org> - 0.19.0-1
changelog:
  - 0.19.0
  - Fix License
  - Explicitly enable JPEG and OpenMP support to avoid surprises
  - Tighten %files, mostly so api/soname changes will no longer be a surpise
  - Use %make_build %ldconfig_scriptlets
  Resolves: #1633708


author: Lubomir Rintel <lkundrak@v3.sk> - 1.10.2-1
changelog:
  - Update to 1.10.2 release (rh #1543498)
  - Don't grab cdc_ether devices on Sierra QMI modems (rh #1712031)


author: Orion Poplawski <orion@cora.nwra.com> - 3.0-15
changelog:
  - Check exit status of all commands in pipes (bug #1151623)
  - Do not use --same-order with -c for tar (bug #1458038)


author: Lubomir Rintel <lkundrak@v3.sk> - 1:1.36.0-1
changelog:
  - Upgrade to 1.36.0 release
  - core: avoid losing L3 configuration the second time it's applied (rh #2043514)
  - ovs: avoid removing OVSDB entries on daemon shutdown (rh #2055665)
  - nmcli: fix defaults for some properties on interactive add (rh #2053603)


author: Thomas Haller <thaller@redhat.com> - 1:1.36.0-3
changelog:
  - core: preserve external bridge ports during checkpoint rollback (rh #2035519)
  - ovs-port: fix removal of ovsdb entry if the interface goes away (rh #1935026)


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.36.0-8
changelog:
  - dhcp: fix "selecting lease failed" problem after receiving a NAK (rh #2105088)
  - core: fix memory leak when removing devices (rh #2105974)


author: Francesco Giudici <fgiudici@redhat.com> - 1.2.8-0.1
changelog:
  - Update to latest development snapshot of NetworkManager-libreswan 1.2.8
  - Introduced IKEv2 support (rh #1557035)
  - Introduced support to more Libreswan properties (rh #1557035)
  - Updated translations


author: David Woodhouse <dwmw2@infradead.org> - 1.2.6-1
changelog:
  - Update to 1.2.6
  - Support all protocols that OpenConnect does (#1714121)
  - Persistent support (#1701157)


author: Josef Ridky <jridky@redhat.com> - 2.0.25-1
changelog:
  - New upstream release 2.0.25 (#1568194)
  - Replace Python2 with Python3
  - Drop OpenIPMI-python2 and set it as Obsolete
  - Introduce new OpenIPMI-python3 package
  - use ldconfig macros
  - remove old systemd dependencies
  - use autosetup


author: Pavel Cahyna <pcahyna@redhat.com> - 2.0.31-3
changelog:
  - Resolve issues found by rpmdiff
    - add explicit Requires: on subpackages to avoid the need to test
      interoperability between the various combinations of old and new
      subpackages
    - add code to restore binary compatibility in libIPMIlanserv.so
      and libOpenIPMIcmdlang.so broken in 2.0.31, while keeping
      compatibility with 2.0.31 as well.


author: Markus Neteler <neteler@mundialis.de> 2.0.1-1
changelog:
  - New 2.0.1 upstream release
  - PCL support dropped as per release notes
  - added BuildRequires gcc-c++ as per RHBZ #1551327 (removing gcc and gcc-c++ from default buildroot)
  - further dependency cleanup


author: Markus Neteler <neteler@mundialis.de> 2.1.0-3
changelog:
  - commented out vertical datums due to size for initial Fedora upload
  - cleanup upon review by Sandro Mani, BZ#1838686


author: Ankur Sinha <ankursinha AT fedoraproject DOT org> - 0.72.0-1
changelog:
  - Update to latest upstream release
  - Add gcc/g++ to BRs
  - Remove unneeded patch
  - Remove unneeded sources
  - Use qt5
  - Update appdata info


author: Sérgio Basto <sergio@serjux.com> - 4.40-20
changelog:
  - PySolFC-music is just date and don't need require pygame. pygame is required
    in main package depending if it runs on python 2 or on python 3


author: Tom Callaway <spot@fedoraproject.org> - 4.2.1-1
changelog:
  - update to 4.2.1
  - disable the R test suite due to unknown failures on i686/x86_64 in koji (and only in koji)


author: Tom Callaway <spot@fedoraproject.org> - 4.2.1-3
changelog:
  - fix issue where Renviron was setting R_LIBS_SITE to an empty string, which makes it hard to find Fedora's noarch
    packages being installed into /usr/share.


author: Iñaki Úcar <iucar@fedoraproject.org> - 4.2.1-4
changelog:
  - Remove ancient (RHEL 5/6) zlibhack
  - Remove conditional paths for ancient RHEL (< 8) and Fedora (< 32)
  - Simplify Java and LTO handling
  - Simplify BLAS configuration, use openblas-openmp if flexiblas is not available
  - Cleanup Requires and BuildRequires + sorting + indentation
  - Remove unused files and patches
  - Remove redundant flags


author: Iñaki Úcar <iucar@fedoraproject.org> - 4.2.2-1
changelog:
  - Update to 4.2.2
  - Run new compact-pdf target
  - Remove obsolete MAKEINFO and texinfo hack
  - Re-enable tests


author: Stephen Gallagher <sgallagh@redhat.com> - 2.0.1-1
changelog:
  - Update to RBTools 2.x
  - https://www.reviewboard.org/docs/releasenotes/rbtools/2.0.1/
  - https://www.reviewboard.org/docs/releasenotes/rbtools/2.0/


author: Wim Taymans <wtaymans@redhat.com> - 1.2.15-38
changelog:
  - fix CVEs
  - Resolves: rhbz#1716209, rhbz#1716210, rhbz#1716211, rhbz#1716212,
              rhbz#1716213, rhbz#1716214, rhbz#1716215, rhbz#1716216,
  	    rhbz#1716217, rhbz#1716218, rhbz#1716219


author: Wim Taymans <wtaymans@redhat.com> - 2.0.10-2
changelog:
  - Fix CVE-2019-13616 SDL: heap-based buffer overflow in SDL blit
    functions in video/SDL_blit*.c
  - Resolves: rhbz#1756279


author: Mukundan Ragavan <nonamedotc@fedoraproject.org> - 5.1.1-1
changelog:
  - Update to 5.1.1
  - Remove format security patch - not needed anymore
  - Edit patches to be version specific
  - Renamed patch4 to be consistent with others
  - Minor spec file housekeeping


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.46-8.el8
changelog:
  - wla-Fix-handling-of-gen2-disks-with-udev-rules-1954.patch [bz#1859037]
  - Resolves: bz#1859037
    ([Azure][WALA]Cannot create /dev/disk/azure/resource softlinks in Gen2 VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-2.el8
changelog:
  - wla-Fixed-faulty-check-for-run_command-2093.patch [bz#1903074]
  - Resolves: bz#1903074
    ([Azure][WALA] Miss report "hostnamectl set-hostname --static] failed, attempting fallback")


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.2.49.2-3.el8
changelog:
  - wla-Provide-udev-rules-as-a-separate-subpackage.patch [bz#1913074]
  - Resolves: bz#1913074
    ([Azure][RFE] please provide the WALinuxAgent-udev subpackage)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-1
changelog:
  - Rebase to 2.3.0.2 [bz#1972102]
  - Resolves: bz#1972102
    ([Azure][RHEL-8]Rebase WALinuxAgent to 2.3.0.2)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2
changelog:
  - wla-Require-iptables-for-setting-up-persistent-firewall-.patch [bz#1985198]
  - Resolves: bz#1985198
    ([Azure][WALA][RHEL-8] WALA needs iptables package)


author: Miroslav Rezanina <mrezanin@redhat.com> - 2.3.0.2-2.el8_6.1
changelog:
  - wla-Fix-if-hangs-2283.patch [bz#2092753]
  - wla-Implement-restart_if-for-RedHat-OS.patch [bz#2092753]
  - Resolves: bz#2092753
    ([Azure][WALA][RHEL-8] [8.6.z] walinuxagent kills network during boot [rhel-8.6.0.z])


author: Camilla Conte <cconte@redhat.com> - 2.3.0.2-2.el8_6.2
changelog:
  - wla-redhat-Implement-restart_if-correctly-to-eliminate-w.patch [bz#2092753]
  - Resolves: bz#2092753
    ([Azure][WALA][RHEL-8] [8.6.z] walinuxagent kills network during boot [rhel-8.6.0.z])


author: Jon Maloy <jmaloy@redhat.com> - 2.3.0.2-2.el8_6.3
changelog:
  - wla-redhat-Use-NetworkManager-to-set-DHCP-hostnames-on-r.patch [bz#2133446]
  - Resolves: bz#2133446
    ([Azure][WALA][RHEL-8.7] Provisioning failed if no ifcfg-eth0 [rhel-8.6.0.z])


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1-21
changelog:
  - do not specify infra_image in containers.conf
  - needed to resolve gating test failures
  - Related: #2001445


author: Akira TAGOH <tagoh@redhat.com> - 0.0.25-6
changelog:
  - Backport fontconfig config file from Fedora.
  - Add System UI generic family alias
    Resolves: rhbz#1865788


author: Richard Shaw <hobbes1069@gmail.com> - 2.2-3
changelog:
  - Rebased patch from upstream commit for gcc 8 compatibility, fixes 1575520.
  - Add findutils as a package requirement, fixes 1576567.


author: - Michal Židek <mzidek@redhat.com> - 2.10.9-18
changelog:
  - Resolves: rhbz#1835388
  - This is seccond commit to fix som mess with one missing patch and synchronize
    the internal gitlab patch numbers with this spec file


author: Ernestas Kulik <ekulik@redhat.com> - 1.1.0-16
changelog:
  - Add patch for #1721393
  - Add patch for https://github.com/abrt/abrt-java-connector/commit/ae2144f1674f163517f0aa18b5f1b4784c143572


author: Matej Marusak <marusak.matej@gmail.com> 1.2-1
changelog:
  - Add license into specfile (marusak.matej@gmail.com)
  - Add BuildRequires into specfile (marusak.matej@gmail.com)
  - Create LICENSE (marusak.matej@gmail.com)
  - Fix wrong command in specfile (mmarusak@redhat.com)
  - Add README (marusak.matej@gmail.com)
  - Remove unused BuildRequires from specfile (marusak.matej@gmail.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.3-1
changelog:
  - add link to wiki (msuchy@redhat.com)
  - add missing quotes (msuchy@redhat.com)
  - Add retrace server's disclaimer (mmarusak@redhat.com)


author: Miroslav Suchý <msuchy@redhat.com> 1.5-1
changelog:
  - require systemd
  - Update Python 2 dependency declarations to new packaging standards
    (mmarusak@redhat.com)


author: Ray Strode <rstrode@redhat.com> - 0.6.55-4
changelog:
  - Synchronize permissions and group ownership for icon and users dirs
    between rpm file manifest and daemon expectations
    Resolves: #1919300


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-14
changelog:
  - drop obsolete BuildRoot and Group tags
  - fix spurious acl_check() failure on setfacl --restore (#1451826)


author: Kamil Dudka <kdudka@redhat.com> 2.2.52-15
changelog:
  - setfacl.1: document the meaning of '-' in perms (#1337039)
  - avoid failure of %check when building as root (#1085389)
  - apply patches automatically to ease maintenance


author: Stuart D. Gathman <stuart@gathman.org> 4.1.0-3
changelog:
  - Update README-fedora.md to describe notify.sh
  - Apply selected changes from Marcel Metz <mmetz@adrian-broher.net>:
  - Use openssl x509 -checkend parameter to determine certificate expiration
  - Remove Let's Encrypt intermediate certificate
  - Remove cron job used on non systemd systems


author: Al Stone <ahs3@redhat.com> - 20190108-1
changelog:
  - Update to 20190108 source tree, including patch refeshes.
  - Replace use of strncpy() with memcpy() when moving ASCII bytes around;
    the tables use "strings" but they are seldom null terminated, causing
    GCC9 to complain.  Closes BZ#1674629.


author: Al Stone <ahs3@redhat.com> - 20190509-2
changelog:
  - Added an arm7hl specific fix acenv.h; GCC9 on arm7hl can now deal
    with misalignments so the unaligned patch could be relaxed a bit
  - the templates test was failing because of the backup left behind
    by the patch macro, so change the invocation of the macro.


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 20190509-5.0.1
changelog:
  - Fix upgrade and downgrade warning (xuchunmei)
    * remove %pre to avoid warning when upgrade from old version
    * exec "alternatives --install" to avoid missing of acpixtract and acpidump
      when downgrade to old version
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build (Liwei Gei)
  - ignore mismatched ACPI Warning message at misc tests


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.0.28-6
changelog:
  - Switched kacpimon to dynamic connections (increased max connections
    from 20 to 1024)
    Resolves: rhbz#1450980
  - Consolidated new line delimiters


author: Sumit Bose <sbose@redhat.com> - 0.8.2-4
changelog:
  - adcli update --add-samba-data does not work as expected [#1745931]
  - Issue is that with arcfour-hmac as first encryption type [#1745932]
  - [RFE] enhancement adcli to set description attribute and to show all AD
    attributes [#1737342]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-6
changelog:
  - [abrt] [faf] adcli: raise(): /usr/sbin/adcli killed by 6 [#1806260]
  - No longer able to delete computer from AD using adcli [#1846882]
  - adcli: presetting $computer in $domain domain failed: Cannot set computer
    password: Authentication error [#1846878]
  - Typo in adcli update --help option [#1791611]
  - Manpage and help does not explain the use of "-C" option [#1791545]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-8
changelog:
  - Add --use-ldaps option to adcli update as well [#1883467]
  - Cannot join a pre-staged Computer Account on AD in Custom OU using Delegated
    user [#1734764]
  - missing documentation for required AD rights for adcli join and net
    join [#1852080]
  - [RFE] Add new mode to just create an AD account to be able to connect to
    LDAP [#1854112]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-10
changelog:
  - [RFE] Adcli and Realm Error Code Optimization Request [#1889386]
  - [RFE] adcli should allow to modify DONT_EXPIRE_PASSWORD attribute [#1769644]


author: Sumit Bose <sbose@redhat.com> - 0.8.2-12
changelog:
  - [RFE] Allow adcli to create AD user with password as well as set or reset
    existing user password [#1952828]
  - [RFE] add option to populate "managed by" computer attribute [#1690920]


author: Benjamin A. Beasley <code@musicinmybrain.net> - 2.1-21
changelog:
  - Spec file formatting tweaks
  - Convert URLs from HTTP to HTTPS
  - Use modern spec file macros (make_build/make_install/etc.)
  - Unbundle libdeflate
  - Unbundle zopfli where it is available as a system library (i.e., Fedora)
  - Remove unnecessary BR on tofrodos
  - Properly document bundled 7z code


author: Benjamin A. Beasley <code@musicinmybrain.net> 2.4-1
changelog:
  - Update to 2.4 (close RHBZ#2145023)
  - Security fix for CVE-2022-35014, CVE-2022-35015, CVE-2022-35016,
    CVE-2022-35017, CVE-2022-35018, CVE-2022-35019, CVE-2022-35020


author: Kalev Lember <klember@redhat.com> - 3.28-12
changelog:
  - Split highcontrast-icon-theme out to a new subpackage
  - Explicitly require cursor and icon themes required for the gtk2 themes


author: Michal Ambroz <rebus _AT seznam.cz> - 3.7.18-1
changelog:
  - bump to 3.7.18 which contains:
  - Remove upstream patch Sanity-check-size-passed-to-malloc.patch
  - Fix affverify failing due to context being freed too soon
  - Fix pyaff build issue with newer Python (3.7) and cython (0.29)
  - from version 3.7.17
  - fix #34: option typo (25 minutes ago)
  - minor fixes to configure.ac (3 months ago)
  - Fix issue #32, an off-by-one buffer overflow (6 months ago)
  - whitespace (6 months ago)
  - Sanity check size passed to malloc... (6 months ago)
  - Fix incrementing in vnode_split_raw.cpp for comment consistnecy (12 months ago)
  - Update Win32 readmes to fix issue #26. (1 year, 2 months ago)
  - build python3 package


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-18.20140228gitc2f5d13
changelog:
  - fix CVE-2016-8859 (#1387112, #1387113)
  - probably fix CVE-2015-3796 (see upstream issue #37 and
    https://bugs.chromium.org/p/project-zero/issues/detail?id=428)
  - update python bindings subpackage to current guidelines
  - fix parallel installation of multilib packages (patch by joseba.gar at gmail.com)
    (bug #1275830)


author: Dominik Mierzejewski <rpm@greysector.net> 0.8.0-25.20140228gitc2f5d13
changelog:
  - improve python bindings build patch based on upstream PR
  - fix infinite loop for certain regexps (upstream issue #50)
  - switch to python3 (#1634955)


author: Radovan Sroka <rsroka@redhat.com> - 0.16-8
changelog:
  - fixed wrong line wrapping of messages in the syslog format
    resolves: rhbz#1628153
  - fixed coverity issues
    resolves: rhbz#1602441
  - fixed crash when processing .dynamic section
    resolves: rhbz#1597250


author: Radovan Sroka <rsroka@redhat.com> - 0.16-9
changelog:
  - Null pointer dereference fix spotted by coverity
    resolves: rhbz#1676487
  - aide.conf needs updates for RHEL 8
    resolves: rhbz#1708015


author: Attila Lakatos <alakatos@redhat.com> - 0.16-12
changelog:
  - RHEL 8.3
  - minor edit of aide.conf
    resolves: rhbz#1740754
  - do not generate false warnings when report_ignore_e2fsattrs is specified in aide.conf
    resolves: rhbz#1806323


author: Nicolas Chauvet <kwizart@gmail.com> - 0.5.6-17
changelog:
  - Don't enforce target arch - rhbz#1644430
  - Rework log file path
  - Avoid using /usr/lib/modules for el6 compat


author: Iryna Shcherbina <ishcherb@redhat.com> - 3.11.91-8
changelog:
  - Fix ambiguous Python 2 dependency declarations
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Ian Kent <ikent@redhat.com> - 5:6.2.0-10
changelog:
  - add get_nfs_xprt() and put_nfs_xprt() functions.
  - use new get_nfs_xprt() and put_nfs_xprt() functions.
  - add NFSv3 nfs_quick_reply() functionality.
  - add NFSv3 rpc request validation.
  - fix wcc attr usage in unlink3_or_rmdir3().
  - use Linux libtirpc if present.


author: Ian Kent <ikent@redhat.com> - 5:6.2.0-20
changelog:
  - print_nfs_common_args() is only needed with DEBUG.
  - uid_t might be a different size than unsigned int.
  - remove set but not used variable s.
  - remove set but not used variable again.
  - remove unused function show_map().
  - remove set but not used variable mp_error.
  - 32 bit fixes.
  - make sure variables are initialized.
  - dont use logical double ampersand when ampersand is meant.
  - Fix nfs args setting code.
  - Add the sys alias for unix as well as none and null.
  - Default to string mount options for NFSv4.
  - Improve debugging for unmounting.
  - add more debugging in the unmount path.
  - There is really no ti-rpc nfsv4 so dont send one.
  - Fix SEGV on amq entries that print times.
  - Make hasmntval return an 0 on error 1 on success.
  - Update the ctime of the directory too since it changed.
  - fix compiler assignment warning due to libtirpc.
  - fix logical not comparison in get_ldap_timestamp().
  - fix umount to mount race.


author: Ian Kent <ikent@redhat.com> - 5:6.2.0-38
changelog:
  - Update "Requires(pre)" to use /usr/bin/grep instead of /bin/grep.
  - Remove "BuildRequires: tcp_wrappers-devel" as tcp_wrappers is depricated.
  - Add "BuildRequires: kernel-headers" for linux/version.h requirement.
  - add libnsl2 Requires and libnsl2-devel BuildRequires.
  - add "BuildRequires: rpcsvc-proto-devel" to pull in missing glibc RPC code.
  - disable hesiod support.
  - Remove obsolete Group tag.
  - Remove obsolete scriptlets.
  - Update use linux libtirpc if present patch.


author: Juan Orti Alcaine <jortialc@redhat.com> - 2.12.0-9
changelog:
  - Drop unused dependency: perl(Digest::SHA1)
  - Make optional: perl(Convert::TNEF), perl(Convert::UUlib)


author: Robert Scheck <robert@fedoraproject.org> - 1.0.2-6
changelog:
  - Added build-time conditionals for RHEL/CentOS 7 (#1846719)
  - Corrected build requirement from qt5-devel to qt5-qtbase-devel


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.4-1
changelog:
  - Wait for all background threads to finish before filling installation task
    queue (mkolman)
    Resolves: rhbz#1824422


author: Martin Kolman <mkolman@redhat.com> - 33.16.6.5-1
changelog:
  - Fix the status of the root configuration screen (vponcova)
    Related: rhbz#1981807
  - Fix the condition for entering the root configuration (vponcova)
    Related: rhbz#1981807
  - Fix the condition for completing the root configuration (vponcova)
    Resolves: rhbz#1981807


author: Vendula Poncova <vponcova@redhat.com> - 33.16.6.6-1
changelog:
  - Bump subscription-manager version (mkolman)
    Related: rhbz#1968574
  - Improve UX in Simple Content Access mode (mkolman)
    Resolves: rhbz#1968574
  - Add IsSimpleContentAccessEnabled property (mkolman)
    Related: rhbz#1968574
  - Add support for SCA mode detection from registration data (mkolman)
    Related: rhbz#1968574


author: Radek Vykydal <rvykydal@redhat.com> - 33.16.6.7-1
changelog:
  - ovirt: move /var/tmp and /var/crash to own partition (sbonazzo)
    Resolves: rhbz#2057475
  - Tier 0 Localization
    Resolves: rhbz#2016918


author: Liwei Ge <geliwei@openanolis.org> - 33.16.6.7-1.0.1
changelog:
  - Fix anolis bootloader
  - Add support for loongarch
  - Add anolis install files
  - Remove subscription and CDN
  - Rebrand to Anolis


author: Liwei Ge <geliwei@openanolis.org> - 33.16.6.7-1.0.4
changelog:
  - Fix installer exception with no swap part
    Bugzilla: 1304
  - Fix boot.iso exception with no baseos repo
    Bugzilla: 1325
  - Set the default language to Chinese and default timezone to Shanghai


author: Martin Kolman <mkolman@redhat.com> - 8.2.1-1
changelog:
  - initial help content update for RHEL 8.2
  - add help content for the "Connect to Red Hat" spoke
  - drop content for the superseded "System Purpose" spoke
    Resolves: rhbz#1788855


author: Nick Clifton <nickc@redhat.com> - 10.20-1
changelog:
  - annocheck: Add more glibc function names.  (#2017039)
  - gcc-plugin: Fix attaching the .text section to the .text.group section.
  - Complain about DT_RPATH for Fedora binaries.
  - Better reporting of problems in object files.  (#2013708)
  - Add a requirement on llvm-libs for clang and llvm plugins.  (#2014573)
  - Fix configuring annocheck without gcc-plugin.
  - Annocheck: Better reporting of debuginfod problems.
  - Tests: Fix bugs in debuginfod test.


author: Nick Clifton <nickc@redhat.com> - 10.23-1
changelog:
  - Annocheck: Add a test for unicode characters in identifiers.  (#2017363)
  - gcc-plugin: Default to link-order grouping for PPC64LE.  (#2016458)


author: Nick Clifton <nickc@redhat.com> - 10.27-1
changelog:
  - Annocheck: Skip missing fortify/warning notes for ARM32.
  - gcc-plugin: Try another fix for ppc64le section grouping.  (#2023437)
  - gcc-plugin: Revert 10.22 change.  (#2023437)
  - Annocheck: Add exception for /usr/sbin/ldconfig.  (#2022973)


author: Nick Clifton <nickc@redhat.com> - 10.28-1
changelog:
  - gcc-plugin: Fix bug creating empty attachments.  (#2026944)
  - Annocheck: Change MAYB result to SKIP for DT_RPATH.  (#2026300)


author: David Moreau-Simard <moi@dmsimard.com> - 5.1.0-1
changelog:
  - Update to latest upstream release
  - Refactor to take into account split from ansible-core after ansible 2.9, see: https://fedoraproject.org/wiki/Changes/Ansible5
  - Remove patches intended for Ansible 2.9
  - Removed packaging macros (soon included in ansible-packaging, see rhbz#2038591)
  - Removed provides/obsoletes on ansible-python3


author: Maxwell G <gotmax@e.email> - 6.3.0-1
changelog:
  - Update to 6.3.0.
  - Stop duplicating docs and licenses.
  - Don't remove tests in %prep that are now handled by setup.py.
  - Hardlink duplicated files and fix rpmlint errors
  - Fixes: rhbz#2141351


author: Fedora Release Engineering <releng@fedoraproject.org> - 1.3.0-3
changelog:
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

  Thu Oct 14 2021 Sagi Shnaidman <sshnaidm@redhat.com> - 1.3.0-2
  - Use ansible or ansible-core as BuildRequires


author: Paul Howarth <paul@city-fan.org> - 1.1.0-1
changelog:
  - Update to 1.1.0
    - Replace deprecated 'distutils.spawn.find_executable' with Ansible's
      'get_bin_path' in '_search_executable' function


author: Paul Howarth <paul@city-fan.org> - 1.1.0-2
changelog:
  - Incorporate feedback from package review (#2086299)
    - Add %check section to run unit tests
    - Handle file exclusions using galaxy.yml
    - Generate test dependencies dynamically


author: Paul Howarth <paul@city-fan.org> - 1.1.0-3
changelog:
  - Add COPYING as a %license file
  - Manually specify URL as the ansible-packaging macros are not available in the
    minimal buildroot for the SRPM build
  - Drop %check section for EPEL-8 where dependencies are not available


author: Maxwell G <gotmax@e.email> - 3.4.0-2
changelog:
  - Update license from "GPLv3+ and Python" to "GPL-3.0-or-later AND PSF-2.0 AND BSD-2-Clause"
  - Run unit tests


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-1
changelog:
  - Add the meta-runtime option from the latest auto-maintenance
  - Use the latest mssql that ships fixes for issues #24,#25,#26,#27,#28,35


author: Sergei Petrosian <spetrosi@redhat.com> - 1.0.12-2
changelog:
  - Copy fix for RHEL 7 builds from rhel-system-roles
    Link to the original fix:
    https://src.fedoraproject.org/rpms/linux-system-roles/c/093981119f99ac51a6e06a2714b587e4e2fe287c


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-1
changelog:
  - Insert the "Ansible managed" comment to the /var/opt/mssql/mssql.conf file
    Resolves rhbz#2057651 (EL8)


author: Sergei Petrosian <spetrosi@redhat.com> - 1.1.1-3
changelog:
  - Fix inserting ansible_managed
    Resolves: rhbz#2057651 (EL8)
  - Users now can provide a custom URLs to pull packages and RPM key from
    Resolves: rhbz#2038256 (EL8)


author: Thomas Woerner <twoerner@redhat.com> - 0.3.6-3
changelog:
  - Apply fix for ipabackup: Use module to get IPA_BACKUP_DIR from ipaplatform
    Related: RRBZ#1969847


author: Thomas Woerner <twoerner@redhat.com> - 0.3.7-1
changelog:
  - Update to version 0.3.7
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.7
    Related: RHBZ#1959875
  - automember: Fix action to be automember or member, not service
    Resolves: RRBZ#1976923
  - automember: Fix result["failed"] issues with conditions
    Resolves: RRBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 0.3.8-1
changelog:
  - Update to version 0.3.8
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.3.8
    Related: RHBZ#1959875
  - automember: Verify condition keys
    Related: RHBZ#1976926


author: Thomas Woerner <twoerner@redhat.com> - 0.4.0-1
changelog:
  - Update to version 0.4.0
    https://github.com/freeipa/ansible-freeipa/releases/tag/v0.4.0
    Resolves: RHBZ#2010621
  - Add ability to run modules remotely
    Resolves: RHBZ#1918025
  - New management module ipaautomountlocation
    Resolves: RHBZ#2010639


author: Thomas Woerner <twoerner@redhat.com> - 1.5.3-1
changelog:
  - Update to version 1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.5.0
    Related: RHBZ#2010621
  - automember set default group/hostgroup is missing from the automember module
    Resolves: RHBZ#1999912
  - automember remove default group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#1999913
  - automember rebuild is missing from the automember module
    Resolves: RHBZ#1999915
  - automember remove orphans group/hostgroup is missing from the automember
    module
    Resolves: RHBZ#1999916
  - Not able to update existing automember rule description
    Resolves: RHBZ#2021393


author: Thomas Woerner <twoerner@redhat.com> - 1.6.1-1
changelog:
  - Update to version 1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.1
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.0
    Related: RHBZ#2010621
  - Add module to manage automount maps
    Resolves: RHBZ#2040462
  - Add module to manage automount keys
    Resolves: RHBZ#2040464
  - Client deploy failing with ipaadmin keytab and OTP due to latest ansible
    version
    Resolves: RHBZ#2041753


author: Thomas Woerner <twoerner@redhat.com> - 1.6.2-1
changelog:
  - Update to version 1.6.2
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.2
    Related: RHBZ#2010621


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-1
changelog:
  - Update to version 1.6.3
    https://github.com/freeipa/ansible-freeipa/releases/tag/v1.6.3
    Related: RHBZ#2010621


author: Thomas Woerner <twoerner@redhat.com> - 1.6.3-2
changelog:
  - ipatrust: fix range_type and set valid choices for trust_type
    Resolves: RHBZ#2132967
  - ipaserver/ipareplica: Always generate SIDs
    Resolves: RHBZ#2132970
  - ipaserver: Add missing idstart check
    Resolves: RHBZ#2132975
  - ansible-freeipa Replica Install Setup DNS fails
    Resolves: RHBZ#2132989
  - ipaconfig does not support SID and netbios attributes
    Resolves: RHBZ#2132995


author: Maxwell G <gotmax@e.email> - 1-7
changelog:
  - Implement %ansible_test_unit and add ansible-packaging-tests metapackage.
  - Require ansible-core at buildtime


author: Maxwell G <gotmax@e.email> - 1-8.1
changelog:
  - Refactor %ansible_collection_url, %ansible_collection_install,
    %ansible_test_unit.
  - Specfiles no longer need to define %collection_namespace or %collection_name
    for the macros to work.
  - Add new %ansible_collections_dir, %ansible_roles_dir, and
    %ansible_collection_filelist macros.
  - Prepare to deprecate %ansible_collection_files
  - Undefine %_package_note_file to stop that file from leaking into collection
    artifacts.


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.0.0-5.20180925gitd0076f5
changelog:
  - Update to commit d0076f507a6027455540e2e4f25f84ca38803e07
  - Set CONFIG_LOWBITDEPTH to 1
  - Fix #1632658


author: Robert-André Mauchin <zebob.m@gmail.com> - 3.1.1-1
changelog:
  - Update to 3.1.1
  - Close: rhbz#1954337
  - Security fix for CVE-2021-30473
  - Fix: rhbz#1961375
  - Fix: rhbz#1961376
  - Security fix for CVE-2021-30475
  - Fix: rhbz#1968017
  - Fix: rhbz#1968018


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.9.2-1
changelog:
  - Update to upstream version 1.9.2
  - Remove legacy Provides/Obsoletes for jakarta-commons-beanutils
  - Remove RPM bug workaround


author: Michael Simacek <msimacek@redhat.com> - 3.2.2-1
changelog:
  - Update to upstream version 3.2.2
  - Merge two javadoc subpackages
  - Install with XMVn
  - Specfile cleanup


author: Mat Booth <mat.booth@redhat.com> - 3.2.2-8
changelog:
  - Allow testframework to still be built even with tests disabled, which is
    needed by other packages


author: Till Maas <opensource@till.name> - 3.14.14-10
changelog:
  - rebuilt to drop tcp_wrappers dependency
    https://bugzilla.redhat.com/show_bug.cgi?id=1518751
  - remove tcp_wrappers support


author: Germano Massullo <germano.massullo@gmail.com> - 3.14.14-18
changelog:
  - Replaced BuildRequires: gnome-vfs2 with BuildRequires: GConf2-devel More infos at https://bugzilla.redhat.com/show_bug.cgi?id=1745727#c5


author: Dave Dykstra <dwd@fedoraproject.org> - 1.1.0~rc.1
changelog:
  - Update to upstream 1.1.0~rc.1
  - Require fuse2fs package on el7
  - Require fuse-overlayfs everywhere for cases that kernel overlayfs
    does not support 
  - Add patch for 32-bit compilation


author: Dave Dykstra <dwd@fedoraproject.org> - 1.1.0~rc.2
changelog:
  - Update to upstream 1.1.0~rc.2.  Remove customizations put into
    1.1.0-rc.1 packaging except for f35 inclusion of golang source.


author: Dave Dykstra <dwd@fedoraproject.org> - 1.1.0-rc.3
changelog:
  - Update to upstream 1.1.0~rc.3.  Uncomment setting squashfuse_version and
    the requiring of fuse2fs on el7.


author: Iryna Shcherbina <ishcherb@redhat.com> - 1.6.3-7
changelog:
  - Update Python 2 dependency declarations to new packaging standards
    (See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3)


author: Joe Orton <jorton@redhat.com> - 1.6.0-1
changelog:
  - update to 1.6.0 (#1460831)
  - move bdb support to loadable DSO in apr-util-dbd subpackage
  - drop NSS, freetds support


author: Stephen Gallagher <sgallagh@redhat.com> - 2.8.0-1
changelog:
  - Update to 2.8.0
  - New features:
    * Allow argbash and argbash-init to be run from symbolic links.
    * Allow scripts generated by argbash-init with complete separation (-s -s) to
      be run from a symbolic link.
    * Implemented output to generate manpages using the rst2man utility
    * Introduced the ARG_VERSION_AUTO macro.
  - Bugfixes:
    * Double quotes in help messages are escaped (fixes #61).
    * Fixed regression that allowed duplicate short options (fixes #58).


author: Stephen Gallagher <sgallagh@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0
  - Bugfixes
    * Fixed typo in `argbash-init` and updated obsolete/inaccurate hints
    * Fixed incorrect permission of non-script output files
    * Increased MacOS compatibility by removing terminator from the `chmod`
      invocation
  - New Features
    * Increased flexibility of the help option
    * Improved `argbash-init` script template
    * Increased flexibility of the version option
    * Added a convenience function for module loading
    * Added a possibility to the `argbash` tool to generate the script in-place,
      exposed as the `-i` option


author: Stephen Gallagher <sgallagh@redhat.com> - 2.10.0-1
changelog:
  - Update to 2.10.0
  - Bugfixes
    * argbash-init is able to handle empty string as the only argument without
      being puzzled.
    * Error handling of script working directory detection now more robust.
  - New features
    * Argbash in the container has no longer the terminal output limitation
      caused by the crlf line ending.
    * The ARG_USE_PROG implementation was missing. Therefore, it was implemented
      as ARG_USE_PROGRAM using a slightly different interface.


author: Milan Broz <gmazyland@gmail.com> - 20171227-1
changelog:
  - Update to version 20171227 (soname increase).
  - Temporarily keep libargon2.so.0.
  - Fix a crash if running under memory pressure.


author: Till Maas <opensource@till.name> - 3.10.22-21
changelog:
  - Rebuilt for Fedora 23 Change
    https://fedoraproject.org/wiki/Changes/Harden_all_packages_with_position-independent_code


author: Robert Scheck <robert@fedoraproject.org> 3.10.22-22
changelog:
  - Added patch from Debian to avoid free on invalid pointer due to a
    buffer overflow (#1196751, #1207180)
  - Added patch from Debian for symlink directory traversal (#1178824)
  - Added patch from Debian to fix the directory traversal via
    //multiple/leading/slash (#1178824)


author: José Matos <jamatos@fedoraproject.org> - 10.6.0-1
changelog:
  - update to 10.6.0
  - BR flexiblas for Fedora and lapack, openblas and atlas for EPEL
  - adapt armadillo-devel accordingly


author: Josef Ridky <jridky@redhat.com> - 8.6.10-0.1.20180605git986f99d
changelog:
  - New upstream version with Python3 support - asciidoc-py3 (commit 986f99d)
  - Update versioning, Source and Url label information


author: Omair Majid <omajid@redhat.com> - 3.0.100-0.8.preview9
changelog:
  - Fix package descriptions for targeting packs
  - Re-generate tarball to remove samples
  - Resolves: RHBZ#1711403


author: Omair Majid <omajid@redhat.com> - 3.0.102-2
changelog:
  - Fix prebuilts leaking into the final build
  - Fix regressions in binary hardering
  - Resolves: RHBZ#1788171


author: Omair Majid <omajid@redhat.com> - 3.1.416-4
changelog:
  - Update to .NET SDK 3.1.416 and Runtime 3.1.22
  - Resolves: RHBZ#2011820
  - Resolves: RHBZ#2003077
  - Resolves: RHBZ#2031428


author: Omair Majid <omajid@redhat.com> - 5.0.209.1-1
changelog:
  - Update to .NET SDK 5.0.209 and Runtime 5.0.12
  - Resolves: RHBZ#2024319
  - Resolves: RHBZ#2011058
  - Resolves: RHBZ#2003078


author: Tomáš Mráz <tmraz@redhat.com> - 3.1.20-7
changelog:
  - the ownership of the spool directory should be root as at is configured
    with daemon username root
  - document the -n option


author: Ján ONDREJ (SAL) <ondrejj(at)salstar.sk> - 4.2.0-2
changelog:
  - Updated description, source URL.
  - Removed autoconf/automake and cleaning of RPM_BUILD_ROOT.
  - Updated package doc directory to macro.
  - Added configure --docdir parameter to allow build for epel7 too.


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-1
changelog:
  - Update to new 3.10.3 stable version.
  - Remove ppc64/ppc64le related patches.
  - All packages now use -A option to specify the target CPU/Architecture instead of 
  sed substitutions and auto detection. The packages should now be less dependant on the 
  builder machine used.
  - Base package for each architecture should now be configured to be compatible with the 
  most basic machine of given type.
  - In addittion to base package, added some optimized packages for more advanced CPUs for
  most architectures.
  - Dropped sse2/sse3 subpackages for ix86


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-6
changelog:
  * Pass all required compiler/linker flags
  - use annobin plugin
  - generate assembler build notes
  Related: #1624098


author: Jakub Martisko <jamartis@redhat.com> - 3.10.3-8
changelog:
  * Update the s390 subpackages:
  - The base pakcage is now optimized to z13
  - New subpackage is introduced: z14
  - All remaining subpackages for s390 are being deprecated
  - Clean up of the spec file 
  - Some commented out subpackages were removed form the spec
  - These subpackages were not built/shipped -> no change from the users point of view
  Resolves: #1782560
  Resolves: #1780286
  Resolves: #1782561


author: Kamil Dudka <kdudka@redhat.com> 2.4.47-19
changelog:
  - fix test-suite failure with perl-5.26.0 (#1473853)
  - apply patches automatically to ease maintenance
  - update URL of the upstream source tarball


author: David Timms <iinet.net.au@dtimms> - 2.2.2-1
changelog:
  - Update to 2.2.2
  - further improvements from Sérgio Basto <sergio@serjux.com>
  - Add conditionals to enable or disable ffmpeg
  - Also add conditionals to be possible build with local ffmpeg (not in use)
  - Use autoconf before ./configure
  - Re-add libmp3lame-default.patch and libdir.patch
  - Add to configure --disable-dynamic-loading
  - General review of spec
  - Re-add desktop.in.patch
  - Add to configure --with-lv2 --with-midi --with-portmidi with some commentaries
  - Temporary fix to portaudio became permanent (--with-portaudio=local)


author: David Timms <iinet.net.au@dtimms> - 2.3.2-1
changelog:
  - Update to Audacity 2.3.2 release.
  - Rebase audacity-2.3.2-libdir.patch.
  - Fix -manual placing files in extra help/manual path.


author: David Timms <iinet.net.au@dtimms> - 2.3.3-1
changelog:
  - Update to Audacity 2.3.3.
  - Modify wxWidgets build require to wxGTK3 (gtk3 version).
  - Modify libdir patch for 2.3.3.
  - Fix -manual file archive dropping the leading help/ in path.
  - Disable twolame for EPEL-8 as the -devel package isn't available.


author: Ian McInerney <Ian.S.McInerney@ieee.org> - 2.3.3-2
changelog:
  - Fix installation location of manual package (bug #1830445)
  - Add GDK_BACKEND=x11 to audacity.desktop exec line (bug #1798987)


author: Steve Grubb <sgrubb@redhat.com> 3.0-0.15.20191104git1c2f876
changelog:
  resolves: rhbz#1757986 - Rebase audit package on 8.2 for updates
  resolves: rhbz#1767054 - move audit rules to shared data directory
  resolves: rhbz#1746018 - Breakup 30-ospp-v42.rules into more granular files
  resolves: rhbz#1740798 - auditctl(8) needs clarification for backlog_limit
  resolves: rhbz#1497279 - Add option to interpret fields in audit syslog plugin


author: Sergio Correia <scorreia@redhat.com> - 3.0.5-1
changelog:
  - Rebase audit package on 8.6
    Resolves: rhbz#1939406
    Resolves: rhbz#1906065
    Resolves: rhbz#1921447
    Resolves: rhbz#1927884
    Resolves: rhbz#1921658


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2
changelog:
  - Adjust sample-rules dir permissions
    Resolves: rhbz#2054727 - /usr/share/audit/sample-rules is no longer readable by non-root users


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2.1
changelog:
  - Fix path normalization in auparse
    Resolves: rhbz#2061726 - auparse missing information when used with --format-text


author: Sergio Correia <scorreia@redhat.com> - 3.0.7-2.2
changelog:
  - Drop ProtectHome from auditd.service as it interferes with rules
    Resolves: rhbz#2070705 - Default systemd service config blocks audit watch rules in some directories


author: Pino Toscano <ptoscano@redhat.com> - 1.12.0-5
changelog:
  - Fix completion with special characters in augtool. (RHBZ#1232224)
  - Krb5: improve handling of [dbmodules]; allow include/includedir directives
    everywhere (RHBZ#1798486)
  - Systemd: improve parsing of quoted variables of Environment (RHBZ#1798922)


author: Paolo Gigante <paolo.gigante@rackspace.co.uk> 0.10-1
changelog:
  - Added pre and post prep script hooks
  - Added a pidfile and process check to --status
  - Added a auter success log with a last run timestamp
  - Clear pidfile if the process is no longer running when disabling auter
  - Added auter.aptModule for ubuntu/debian support


author: Paolo Gigante <paolo.gigante@rackspace.co.uk> 0.11-4
changelog:
  - Updated documentation and references to include apt for Ubuntu/debian
  - Removed debugging message that was printed during apt update
  - Added "Valid Options" in auter.conf
  - Added the pre/post prep directories in auter.conf
  - Added retention and rotation for last-prep-output and last-apply-output files in /var/lib/auter
  - Corrected file permissions for the auter-postreboot cron file
  - Added --stdout option to force output to stdout even if there is no active tty
  - Added a package manager lock file check before prep and apply functions call the package manager
  - Improved checks to confirm prepared patches are still required
  - Adjusted some string arguments to arrays for better handling


author: Paolo Gigante <paolo.gigante.sa@gmail.com> 0.12-1
changelog:
  - Added --skip-all-scripts to skip the executions of all custom scripts
  - Added --skip-scripts-by-phase to skip the executions of custom scripts for the specified phase
  - Added --skip-scripts-by-phase to skip the executions of custom scripts by name
  - Added man page for auter.conf
  - Updated auter.aptModule to reflect changes in auter.yumdnfModule
  - added no-wall option
  - Fix for --status when run as non-root user
  - Logs auter output in /var/lib/auter/ when no updates are available
  - Minor improvements to rotation of output files in /var/lib/auter/


author: Nick Rhodes <nrhodes91@gmail.com> 0.12.1-1
changelog:
  - Add max-delay option to override MAXDLAY via command line
  - Redirect stderr to stdout and capture in APPLYOUTPUT variable


author: Nick Rhodes <nrhodes91@gmail.com> 1.0.0-1
changelog:
  - #220 Introduce package dependant reboots using AUTOREBOOT option
  - #215 Remove rpm and deb package build tests from travis
  - #223 Parallelize the travis jobs
  - #224/#225 Clean up ShellCheck warnings


author: Pavel Březina <pbrezina@redhat.com> - 1.0-12
changelog:
  - make authselect work with selinux disabled (RHBZ #1668025)
  - require smartcard authentication only for specific services (RHBZ #1665058)
  - update translations (RHBZ #1608286)


author: Jakub Hrozek <jhrozek@redhat.com> - 1.0-13
changelog:
  - Revert pam_systemd.so to be optional
  - Resolves: #rhbz1643928 - pam_systemd shouldn't be optional in system-auth


author: Pavel Březina <pbrezina@redhat.com> - 1.1-1
changelog:
  - Rebase to authselect-1.1 (RHBZ #1685516)
  - Notify that oddjob-mkhomedir needs to be enabled manually (RHBZ #1694103)
  - Ask for smartcard insertion when smartcard authentication is required (RHBZ #1674397)
  - Update translations (RHBZ #1689973)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.1-1
changelog:
  - Rebase to authselect-1.2.1 (RHBZ #1810471)
  - CLI commands are now correctly translated (RHBZ #1816009)
  - Remove unsupported features from sssd profile description (RHBZ #1830251)
  - add `with-files-access-provider` to sssd profile (RHBZ #1734094)
  - switch to pam_usertype module (RHBZ #1773567)
  - fix typo in sssd profile description (RHBZ #1787638)
  - add minimal profile (RHBZ #1654018)


author: Pavel Březina <pbrezina@redhat.com> - 1.2.2-2
changelog:
  - try_first_pass option no longer works on some PAM modules in RHEL8 (RHBZ #1949070)
  - Need to localize the description of --debug option in authselect show (RHBZ #1970408)


author: Pavel Raiskup <praiskup@redhat.com> - 2.13-34
changelog:
  - don't ship broken (and ancient) autoscan (rhbz#1194568)
  - drop explicit 'Requires: perl' (related rhbz#1194568)


author: Ian Kent <ikent@redhat.com> - 5.1.4-71
changelog:
  - bz1969210 - autofs: already mounted as other than autofs or failed to unlink
    entry in tree
    - fix empty mounts list return from unlink_mount_tree().
  - Resolves: rhbz#1969210


author: Ian Kent <ikent@redhat.com> - 5.1.4-72
changelog:
  - bz1973025 - /net mount being not cleanly mounted and unmounted
    - fix nonstrict offset mount fail handling.
  - Resolves: rhbz#1973025


author: Ian Kent <ikent@redhat.com> - 5.1.4-73
changelog:
  - bz1973025 - /net mount being not cleanly mounted and unmounted
    - correct patch, fix nonstrict offset mount fail handling.
  - Related: rhbz#1973025


author: Ian Kent <ikent@redhat.com> - 5.1.4-74
changelog:
  - bz1974309 - Removal of default intr mount option while using -hosts
    and host.net
    - remove intr hosts map mount option.
    - fix previous changelog entry revision.
  - Resolves: rhbz#1974309


author: Ian Kent <ikent@redhat.com> - 5.1.4-75
changelog:
  - bz2023740 - autofs: send FAIL cmd/ioctl mess when encountering problems
    with mount trigger
    - fix kernel mount status notification.
  - Resolves: rhbz#2023740


author: Ian Kent <ikent@redhat.com> - 5.1.4-76
changelog:
  - bz2025963 - autofs service has not proper limits set to be able to handle many mounts
    - fix set open file limit.
    - improve descriptor open error reporting.
  - Resolves: rhbz#2025963


author: Ian Kent <ikent@redhat.com> - 5.1.4-77
changelog:
  - bz2025509 - Autofs auto.smb awk script fails on shares with dollar signs
    - fix double quoting in auto.smb.
    - fix double quoting of ampersand in auto.smb as well.
  - Resolves: rhbz#2025509


author: Ian Kent <ikent@redhat.com> - 5.1.4-81
changelog:
  - bz2033552 - Using -hosts option does not work after upgrading from 8.4 to 8.5
    - fix root offset error handling.
    - fix nonstrict fail handling of last offset mount.
    - dont fail on duplicate offset entry tree add.
    - fix loop under run in cache_get_offset_parent().
    - simplify cache_add() a little.
    - fix use after free in tree_mapent_delete_offset_tree().
    - fix memory leak in xdr_exports().
    - avoid calling pthread_getspecific() with NULL key_thread_attempt_id.
    - fix sysconf(3) return handling.
  - Resolves: rhbz#2033552


author: Ian Kent <ikent@redhat.com> - 5.1.4-82
changelog:
  - bz2052122 - autofs attempts unmount on directory in use
    - make umount_ent() recognise forced umount.
    - remove nonstrict parameter from tree_mapent_umount_offsets().
    - fix handling of incorrect return from umount_ent().
  - Resolves: rhbz#2052122


author: Miroslav Lichvar <mlichvar@redhat.com> - 5.18.12-7
changelog:
  - fix linking to use hardening flags (#1547522)
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - remove comment with macro


author: Pavel Raiskup <praiskup@redhat.com> - 1.16.1-3
changelog:
  - update config.{guess,sub} to gnuconfig git HEAD
  - drop ppc64p7 hack in config.sub, it's not needed - per:
    https://lists.fedoraproject.org/archives/list/
    devel@lists.fedoraproject.org/thread/2OWD2QRDFBEC6HTPVQ7FMJENH32BWT54/
  - don't BR python2-* packages; switching BRs to python3 would make no sense
    since the upstream testsuite is not yet python3 ready


author: Parag Nemade <pnemade AT redhat DOT com> - 0.31.1-53
changelog:
  - Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
  - Resolves: CVE-2019-19005 : fix bitmap double free in main.c


author: Tomas Orsava <torsava@redhat.com> - 2.5.1-7
changelog:
  - Include the /usr/bin/pybabel binary that runs on Python 3.6 in the
    python3-babel package
  Resolves: rhbz#1967173


author: Josef Ridky <jridky@redhat.com> - 9.0.4-2
changelog:
  - Add support for openssl (#1512577)
  - Change build requirement form mysql-devel to mariadb-connector-c-devel (#1545413)


author: Simone Caronni <negativo17@gmail.com> - 2.10-4
changelog:
  - Update SPEC file.
  - Use macros where possible.
  - Adjust Python requirements. Generator is already enforced on Fedora &
    CentOS/RHEL 8+.
  - Install license and docs in python libraries, so they are always installed.
  - Do not remove logs on uninstallation.
  - Trim changelog.


author: Ding-Yi Chen <dchen@redhat.com> - 2.3.2-2
changelog:
  - Address review comments:
    + Use better URL
    + BuildRequires added: gcc-c++
    + Requires add: hicolor-icon-theme
  - BuildRequires remove: qt-devel


author: Ding-Yi Chen <dchen@redhat.com> - 2.4.0-1
changelog:
  - Upstream update to 2.4.0
    - Fixed CVE-2021-42072 (RHBZ 2022094)
  - BuildDepends added: gmock-devel, gulrak-filesystem-devel
  - Address the issue from pull request #1, thanks aekoroglu.


author: Ondřej Míchal <harrymichal@seznam.cz> - 1.2.1-1
changelog:
  - Update to 1.2.1
  - new dependency - GNU Parallel
  - new upstream test in %check - parallel.bats
  - remove the sed in %prep because shebang mangling is done automatically
  - change the URL for Source0 so that it does not rely on hardcoded commit


author: Ondřej Míchal <harrymichal@seznam.cz> - 1.3.0-1
changelog:
  - Update to 1.3.0
  - new build dependency - procps-ng (needed for testing)
  - adjust test file name - parallell.bats -> parallel.bats


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 1.4.1-1
changelog:
  - Update to 1.4.1 (BZ 1985582)
  - Fix some spec warnings
  - Add rpmlintrc to avoid hardcoded-library-path error


author: Kevin Fenzi <kevin@scrye.com> - 1.07.1-1https://bugs.archlinux.org/task/53546
changelog:
  - Update to 1.07.1
  - Fixes a bug that breaks kernel builds ( https://bugs.archlinux.org/task/53546 )


author: John Marshall <jmarshall@users.sourceforge.net> - 1.9-1
changelog:
  - New spec file for bcftools, now separate from samtools (#1767792).
  - Backported Python 3 and configure patches from later upstream development.


author: Jun Aruga <jaruga@redhat.com> - 1.9-1
changelog:
  - Exclude a CPU architecture s390x.
  - Add Conflicts tag for samtools < 1.0.
  - Align the field delimiter as 1 space.
  - Use additional RPM macros for Source0.
  - Add a logic to check if bcftools is built with system htslib.
  - Update comments for license.


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.26-8
changelog:
  - Update python3 patch with changes from upstream
  - Update default paths (/var/run → /run, /var/lock → /run/lock)
  - Update URL and Source tags


author: Michael Hampton <error@ioerror.us> 0.10.2-2
changelog:
  - Improvements from Fedora package review (BZ#1402656)
  - Patch to use Fedora build flags (BZ#1583329)


author: Dalibor Pospisil <dapospis@redhat.com> - 1.24-1
changelog:
  - rlImport --all imports only required libraries, not recommend
  - implemented chkconfig fallback to systemctl
  - fixed `make test` test suite execution


author: Dalibor Pospisil <dapospis@redhat.com> - 1.25-1
changelog:
  - rebased yash to version 1.2, fixes the backtick iterpretation
  - docs fixes, by Štěpán Němec <snemec@redhat.com>


author: Dalibor Pospisil <dapospis@redhat.com> - 1.28-1
changelog:
  - cleanup rlRun_LOG files at rlJournalEnd
  - close journal in rlDie - generate journal.xml at that moment
  - implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike
  - rlAssertRequired can now handle versioned dependencies
  - new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies


author: Dalibor Pospisil <dapospis@redhat.com> - 1.29.1-1
changelog:
  - rlImport: upwards traversal start in the current directory
  - rlImport: support '.' to import lib.sh from the current directory
  - rlImport: can handle libraries required by the fmf_id in different forms than (url, name)
    also name-only. Also the path attribute is considered
  - fingerprint: an asserts fingerprint and phases fingerprint is computed
    it is printed as a message and it is also available in the TestResults file
  - fixed a check for os-release file existence
  - fixed LOG_LEVEL usage
  - removed dependency on selinuxenabled
  - fixed a few typos, thanks to jwakely@fedoraproject.org


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.2.1-17
changelog:
  - Python 2 binary package renamed to python2-beecrypt
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Robert Scheck <robert@fedoraproject.org> 4.2.1-20
changelog:
  - Update python 2 dependency declarations to new packaging standards,
    see https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Miro Hrončok <mhroncok@redhat.com> - 4.2.1-22
changelog:
  - Subpackage python2-beecrypt has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.2.0-2
changelog:
  - Install upstream systemd unit
  - Install upstream logrotate config
  - Add missing documentation
  - Expand the description


author: Davide Cavalca <dcavalca@fedoraproject.org> - 0.2.0-3
changelog:
  - Add vendored dependencies for EPEL and make it build there
  - Exclude s390x for the EPEL build for now due to an upstream issue
  - Mark logrotate config file as a config(noreplace)
  - Add recommends for logrotate
  - Fix permissions for the below binary


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.2.0-4
changelog:
  - Add README-epel.md with instructions for enabling PSI support
  - Gate ExclusiveArch s390x to el8 only


author: Roman Vais <rvais@redhat.com> - 1.71-1
changelog:
  - Update to upstream version 1.71
  - Add patch for issue https://github.com/cbeust/jcommander/issues/367


author: Bennie Joubert <benniej@fedoraproject.org> - 0.1.36.1-1
changelog:
  - Upate to latest upstream release v 0.1.36.1
  - Update makefile patch to bgpq3-fix-makefile-v2.patch


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.26-4
changelog:
  - Possible assertion failure on DNAME processing (CVE-2021-25215)
  - Insufficient IXFR checks could lead to assertion failure (CVE-2021-25214)


author: Petr Menšík <pemensik@redhat.com> - 32:9.11.36-3.1
changelog:
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Thomas Woerner <twoerner@redhat.com> - 11.2-2
changelog:
  - Add support for serve-stale, detected on build time
    Patch by Petr Menšík <pemensik@redhat.com>
    Related: RHBZ#1762813


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.9
changelog:
  - Tighten cache protection against record from forwarders (CVE-2021-25220)
  - Include test of forwarders


author: Petr Menšík <pemensik@redhat.com> - 32:9.16.23-0.9.1
changelog:
  - Fix possible serve-stale related crash (CVE-2022-3080)
  - Fix memory leak in ECDSA verify processing (CVE-2022-38177)
  - Fix memory leak in EdDSA verify processing (CVE-2022-38178)


author: Filipe Rosset <rosset.filipe@gmail.com> - 1.14.1-1
changelog:
  - update to new version 1.14.1 fixes rhbz #1724097
  - Resolve symlinks in readdir() so correct attributes are returned (issue #76).


author: Peter Robinson <pbrobinson@fedoraproject.org> - 2.38-1
changelog:
  - Rebase on GNU Binutils 2.38.
  - Add support for specifying a section type in linker scripts. (#2052801)


author: Michal Sekletár <msekleta@redhat.com> - 0.7.3-2
changelog:
  - make biosdevname optional even on Dell servers (#1623621)
  - prevent infinite recursion in smbios_setslot() (#1499458)
  - Netronome biosdevname support (#1649036)


author: Simone Caronni <negativo17@gmail.com> - 22.0-1
changelog:
  - Update to 22.0, versioning convention change.
  - Implement signature verification with a public GPG keyring and at least one
    valid signature.
  - Also the relative selinux package has been renamed to bitcoin-core-selinux.
  - Add bitcoin-util to devel subpackage.
  - Update docs.
  - Add SQLite as dependency for descriptor wallets.
  - Drop RHEL/CentOS 7 support.


author: Simone Caronni <negativo17@gmail.com> - 22.0-2
changelog:
  - Prepare all keys with a script and verify all keys against the signature file.
    Add reasoning on the process in the SPEC file.


author: Simone Caronni <negativo17@gmail.com> - 22.0-3
changelog:
  - Remove obsolete scriptlets.
  - With RHEL/CentOS 7 no longer a target, improve systemd unit security.
  - Add systemd user unit to start bitcoind in your user session.
  - Move bitcoin-wallet to utils subpackage for offline wallet manipulation.
  - Update README files.


author: Simone Caronni <negativo17@gmail.com> - 22.0-6
changelog:
  - Hide extended tests behind a flag.
  - Allow to run the full set of extended tests including network when requested,
    they run fine in mock with network enabled.


author: Simone Caronni <negativo17@gmail.com> - 0-7.20210312giteaa9a04
changelog:
  - Do not use forge macros. Breaks changelog, date in package release, changelog
    and complete release on EPEL 8.


author: Audrey Toskin <audrey@tosk.in> - 4.2.0-1
changelog:
  - Bump to upstream version 4.2.0, which, among other things, adds new
    cleaners and regular expression-based searches during deep scans.


author: Audrey Toskin <audrey@tosk.in> - 4.4.0-1
changelog:
  - Bump to upstream version 4.4.0, with upstream enhancements documented
    here: https://www.bleachbit.org/news/bleachbit-440


author: Vojtech Trefny <vtrefny@redhat.com> - 3.4.0-6
changelog:
  - Improve error message printed for missing dependecies
    Resolves: rhbz#1988276
  - Use bigger chunk size for thinpools bigger than ~15.88 TiB
    Resolves: rhbz#1949953


author: Vojtech Trefny <vtrefny@redhat.com> - 2.1.14-1
changelog:
  - Do not update filesystem info for resize in the installer mode (vtrefny)
  - Do not allow creating extedned partitions on DASD (#1825357) (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - Translated using Weblate (Russian) (igor.gorbounov)
  - Translated using Weblate (German) (christian.wehrli)
  - Show filesystem label in the GUI (#1811383) (vtrefny)
  - Make sure broken tests are not silently ignored (vtrefny)
  - tests: Fix mocking/patching mountpoints in ListPartitionsTest (vtrefny)
  - Translated using Weblate (Russian) (pamolodyk)
  - Update translation files (noreply)
  - Translated using Weblate (Russian) (pamolodyk)
  - Sync spec with downstream (vtrefny)
  - Translations update from Weblate (#166) (noreply)
  - Translated using Weblate (German) (jensmaucher)
  - Fix unlocking LUKS on RAID in the installer mode (#1787508) (vtrefny)
  - Fix creating encrypted LVM VG (#1816098) (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - Translated using Weblate (Finnish) (jiri.gronroos)
  - Translated using Weblate (Ukrainian) (yurchor)
  - Translated using Weblate (Slovak) (feonsu)
  - Translated using Weblate (Russian) (igor.gorbounov)
  - Translated using Weblate (French) (julroy67)
  - Translated using Weblate (Polish) (piotrdrag)
  - Update translation files (noreply)
  - Translated using Weblate (Russian) (igor.gorbounov)
  - Fix setting attributes for proxy objects (#1810855) (vtrefny)
  - Allow selecting mountpoints to unmount for devices with multiple mountpoints (vtrefny)
  - Allow calling "remote" functions with kwargs (vtrefny)
  - Display all mountpoints for devices (vtrefny)
  - packit: Use 'fedora-all' as Copr build targets (vtrefny)
  - Translated using Weblate (Spanish) (fitoschido)
  - Update packit Copr targets (vtrefny)
  - Translated using Weblate (Ukrainian) (yurchor)
  - Translated using Weblate (Spanish) (fitoschido)
  - Translated using Weblate (French) (julroy67)
  - Set partition type combo insensitive if there is only one option (vtrefny)
  - Fix displaying current size of devices in the resize dialog (vtrefny)
  - Always open new dialogs in the center of the blivet-gui window (vtrefny)
  - add link to translation platform (jean-baptiste)
  - Update translation files (noreply)
  - Allow specifying 'mode' for the sdist command (vtrefny)
  - Do not print list of data files in setup.py (vtrefny)
  - Specify custom commands for version and source archive in packit (vtrefny)
  - tests: Import Gtk directly before we need it (vtrefny)
  - Add a simple script to run tests (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.1.15-1
changelog:
  - Use "raw_device" instead of "slave" for getting LUKS backing device (vtrefny)
  - Update translation files (noreply)
  - Translated using Weblate (Chinese (Simplified)) (tiansworld)
  - POT file update (vtrefny)
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Fix setting visibility for EncryptionChooser (vtrefny)
  - Make data paths in setup.py relative (vtrefny)
  - Add alternative paths to look for UI and CSS files (vtrefny)
  - Set default position of the main window to the center of the screen (vtrefny)
  - Correctly set data and metadata level when creating Btrfs volumes (vtrefny)
  - Grammar fix (sh.yaron)
  - Update translation files (noreply)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Update POT file before doing a release (vtrefny)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Remove dependency on adwaita-icon-theme (vtrefny)
  - Add daily builds badge (jkonecny)
  - Use tests instead of COPR build in packit for PRs (jkonecny)
  - Use packit actions instead of commands (jkonecny)
  - Remove not needed packit configuration values (jkonecny)
  - Move packit general configuration to the top of .packit file (jkonecny)
  - Translated using Weblate (German) (mail)
  - Fix unlocking raw format LUKS devices in Anaconda (#1846517) (vtrefny)
  - Translated using Weblate (Portuguese (Brazil)) (lucas.af88)
  - Translated using Weblate (French) (julroy67)
  - Translated using Weblate (Portuguese (Brazil)) (noreply)
  - Translated using Weblate (Portuguese (Brazil)) (lucas.af88)
  - Update translation files (noreply)
  - Translated using Weblate (Turkish) (oguzersen)
  - Translated using Weblate (Ukrainian) (yurchor)
  - Translated using Weblate (Polish) (piotrdrag)
  - Translated using Weblate (Portuguese (Brazil)) (lucas.af88)
  - Translated using Weblate (Portuguese (Brazil)) (noreply)
  - Translated using Weblate (Portuguese (Brazil)) (lucas.af88)
  - Refactor checking for device resizability (vtrefny)
  - Update translation files (noreply)
  - Translated using Weblate (Italian) (alciregi)
  - Ellipse the device name using the GTK cell render (15699466+TownCube)
  - Fix names for icons in the password entry (vtrefny)
  - Try harder to load correct icon when applying actions (vtrefny)
  - Fix pylint failure when disabling found-_-in-module-class warning (vtrefny)
  - Fix ordering of the edit submenu in the context menu for devices (vtrefny)


author: Tomas Orsava <torsava@redhat.com> - 1.2.0-9
changelog:
  - Switch hardcoded python3 shebangs into the %{__python3} macro
  - Add missing BuildRequires on python3-devel so that %{__python3} macro is
    defined


author: Gopal Tiwari <gtiwari@redhat.com> - 5.56-1
changelog:
  + bluez-5.56-1
  - Fixing (#1965057)
  - Removing bccmd, enabling hid2hci as upstream removed the support in bluez-5.56


author: Václav Doležal <vdolezal@redhat.com> - 1.8.18-17
changelog:
  - Disable retry of pre-session "Get cipher suites" command as some
    BMCs are ignoring it (#1831158)


author: Pavel Cahyna <pcahyna@redhat.com> - 1.8.18-18
changelog:
  - Protect against negative values to memmove that caused
    "ipmitool sol activate" to crash against an IBM DataPower appliance
    (#1951480)
    Cherry-picked from upstream PR#78.


author: Adrian Reber <adrian@lisas.de> - 1.2.4-7
changelog:
  - Added multiple upstream patches to fix various memory bugs
  - Fixes "[abrt] bogofilter: yyrealloc(): bogofilter killed by SIGABRT" (#1246282)
  - Fixes "why libdb4" (#1367329) by switching BR to libdb-devel (from db4-devel)


author: Germano Massullo <germano.massullo@gmail.com> - 7.18.1-1
changelog:
  - 7.18.1 release
  - added openssl3.patch for Fedora > 35
  - added some pkgconfig
  - added BuildRequires: systemd-rpm-macros
  - temporarily disabled all patches except openssl3.patch
  - added openssl3.patch


author: Christian Kellner <ckellner@redhat.com> - 0.1-2
changelog:
  - Set database path to /var/lib/boltd, create it during
    installation, which is needed for the service file to work.


author: Christian Kellner <ckellner@redhat.com> - 0.8-1
changelog:
  - bolt 0.8 upstream release with pre-boot ACL and IOMMU support
    D-Bus Configuration moved from sysconfdir to datadir
    Resolves: #1629715


author: Christian Kellner <ckellner@redhat.com> - 0.8-2
changelog:
  - Rebuilt for fixed gating.yaml (remove missing tier1 gate)
  - Unset env NOTIFY_SOCKET for no socket case in test-unix


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.3-2
changelog:
  - Imported from http://download.opensuse.org/repositories/home:/kovax/CentOS_CentOS-6/src
  - Clean the spec


author: Mosaab Alzoubi <moceap@hotmail.com> - 0.3.1-2
changelog:
  - Review for Fedora Package Review
  - Use %url
  - Remove Unneeded lines
  - Use only %buildroot
  - Use desktop file validation
  - Fix some spellings
  - Shorten description lines
  - Fix SVG file permissions


author: Marian Csontos <mcsontos@redhat.com> 1.3-1
changelog:
  - Check for duplicates consistently in the clone and edit commands.
  - Apply correct command line precedence to --add-opts and --del-opts.
  - Correctly merge multiple --add/del-opts when editing or cloning.
  - Correctly propagate --add/del-opts in boom edit commands.
  - Enhanced logging of --add/del-opts merge logic.
  - The default Python interpreter is now /usr/bin/python.
  - Fixed re-ordering of options modifications when read from disk.
  - Do not set BootParams attributes for anonymous option words.
  - Make lvm_root_lv validation checks more strict.
  - Improve BootParams.from_entry() parameter recovery debug logging.
  - Include sample OsProfile for Fedora 32.
  - Re-set sandbox state in test suite to ensure run-to-run consistency.
  - Improve compatibility with Red Hat BLS implementation.
  - Allow non-boom managed entries to be listed and displayed.
  - Handle quirks in Red Hat's use of the BLS machine_id key.
  - Allow grub2 bootloader variables to be expanded when cloning entries.
  - Simplify clone_entry logic and make consistent with edit_entry.
  - Ensure stable ordering of legacy boot entry configuration.


author: Liwei Ge <liwei.glw@alibaba-inc.com> - 1.66.0-10.0.1
changelog:
  - backport patches to fit with C++20 until upstream chase up:
    * Replace-std::allocate-with-std::allocator_traits.patch
    * Replace-std::allocate-deprecated-in-C++17.patch
    * Implement-empty_value.patch
    * Make-empty_value-trivial-if-T-is-trivial.patch
    * Add-documentation-for-empty_value.patch
    * Name-the-empty_value-template-parameters.patch
    * Improve-C++11-allocator-support.patch
    * Use-boost::allocator_rebind-instead-of-A::template-rebind.patch
    * Implement-allocator-access-utilities.patch


author: James Hogarth <james.hogarth@gmail.com> - 0-20171019.gitec9672b
changelog:
  - Include documentation files
  - Adjust to bring in line with guidelines for a header only package
  - Place headers in correct place for epel


author: James Hogarth <james.hogarth@gmail.com> - 0-20171026.gitec9672b
changelog:
  - Fix the directory location on EPEL to align with the boost157 package correctly
  - Move the docs to a dedicated subpackage


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-3.f2d38ce.git
changelog:
  - update for another, current snapshot beyond booth-1.0
    (commit f2d38ce), including:
    . support for solely manually managed tickets (9a365f9)
    . use asciidoctor instead of asciidoc for generating man pages (65e6a6b)
  - switch to using Python 3 for the tests instead of Python 2
    (behind unversioned "python" references; rhbz#1590856)


author: Jan Pokorný <jpokorny+rpm-booth@redhat.com> - 1.0-4.f2d38ce.git
changelog:
  - revert back to using asciidoc instead of asciidoctor for generating man pages
    (rhbz#1603119)
  - fix some issues in the shell scripts (rhbz#1602455)


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.1
changelog:
  - Resolves: rhbz#1602455
  - Resolves: rhbz#1682122
  - Resolves: rhbz#1768369
  - Resolves: rhbz#1835831

  - Update to current snapshot (commit ac1d34c) to fix test suite,
    build warnings and build with gcc10
  - Fix hardcoded-library-path
  - Package /var/lib/booth where booth can chroot
  - Add '?dist' macro to release field
  - Pass full path of Python3 to configure
  - Add CI tests
  - Enable gating


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.2
changelog:
  - Related: rhbz#1835831

  - Do not link with the pcmk libraries
  - Generate runtests.py and boothtestenv.py with -Es as make check does


author: Jan Friesse <jfriesse@redhat.com> - 1.0-199.1.ac1d34c.git
changelog:
  - Resolves: rhbz#1873948
  - Resolves: rhbz#1768172

  - Fix versioning scheme to handle updates better
  - Handle updated exit code of crm_ticket


author: Jan Friesse <jfriesse@redhat.com> - 1.0-199.1.ac1d34c.git.1
changelog:
  - Resolves: rhbz#2113967

  - Fix authfile directive handling in booth config file
    (fixes CVE-2022-2553)
  - Add enable-authfile option


author: Ben Kircher <bkircher@0xadd.de> - 2.12.1-3
changelog:
  - Backport patch for #1934458 (Constant-time computations for base32, base58, base64, hex) from 2.17.3.


author: Mat Booth <mat.booth@redhat.com> - 1.57-1
changelog:
  - Update to latest release of bouncycastle
  - Build all bouncycastle modules from a single source tree, using upstream's
    own build scripts
  - Add sub-packages for each module


author: Yuanhe Shu <xiangzao@linux.alibaba.com> [5.10.112-11.2.an8]
changelog:
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) {CVE-2022-32250}
  - anolis: net/netfilter: rename nft_expr_info (Kangjie Xu) {CVE-2022-32250}


author: Qiao Ma <mqaio@linux.alibaba.com> [5.10.134-12_rc1.an8]
changelog:
  - configs: refresh the ANCK default configs (Qiao Ma)
  - bump kernel to 5.10.134 (Qiao Ma)
  - anolis: mm: fix an compiler issue when memcg disabled (zhongjiang-ali)
  - anolis: mm: Do not scan cold slab when fails to allocate memory (zhongjiang-ali)
  - anolis: mm: fix cold slab memory leak (zhongjiang-ali)
  - anolis: mm: fix an memory exception issue when kmem accouting (zhongjiang-ali)
  - selftests: bpf: Don't run sk_lookup in verifier tests (Lorenz Bauer)
  - selftests: bpf: Check that PROG_TEST_RUN repeats as requested (Lorenz Bauer)
  - bpf: Add PROG_TEST_RUN support for sk_lookup programs (Lorenz Bauer)
  - bpf: Consolidate shared test timing code (Lorenz Bauer)
  - anolis: correct fd attach ioctl arg type (Joseph Qi)
  - kvm: x86: enqcmd: pass through MSR_IA32_PASID (Wu Hao)
  - kvm: x86: enqcmd: update PASID translation table in VMX root mode only (Wu Hao)
  - kvm: x86: rename KVM_REQ_MCLOCK_INPROGRESS to BLOCK_VMENTRY (Wu Hao)
  - kvm: x86: add ENQCMD/ENQCMDS support (Wu Hao)
  - KVM: x86: Load guest fpu state when accessing MSRs managed by XSAVES (Sean Christopherson)
  - KVM: x86: Refresh CPUID on writes to MSR_IA32_XSS (Yang Weijiang)
  - KVM: x86: Add guest_supported_xss placholder (Sean Christopherson)
  - KVM: x86: Report XSS as an MSR to be saved if there are supported features (Sean Christopherson)
  - anolis: mm: duptext: fix build error when !CONFIG_MEMCG (Xu Yu)
  - anolis: mm: hugetext: pad binary mapping for THP candidate (Rongwei Wang)
  - efi/cper: Reformat CPER memory error location to more readable (Shuai Xue)
  - EDAC/ghes: Unify CPER memory error location reporting (Shuai Xue)
  - efi/cper: Add a cper_mem_err_status_str() to decode error description (Shuai Xue)
  - iommu/vt-d: iommu/vt-d: report non-recoverable faults to device (Jacob Pan)
  - iommu: add fault reporting flags (Jacob Pan)
  - iommu: add place holder for PASID suspend (Jacob Pan)
  - iommu: Pass user pointer to iommu_page_response() (Liu Yi L)
  - trace/iommu: Add sva trace events and Use device fault trace event (Jean-Philippe Brucker)
  - iommu: handle page response timeout (Jacob Pan)
  - iommu: Add a timeout parameter for PRQ response (Jacob Pan)
  - iommu/vt-d: Loop subdevices in iommu_domain_get_attr (Liu Yi L)
  - iommu/vt-d: Fix bug in page response (Liu Yi L)
  - iommu: Fix an issue in iommu_page_response() flags check (Jacob Pan)
  - vfio/type1: Report iommu nesting info to userspace (Liu Yi L)
  - iommu/vt-d: Support reporting nesting capability info (Liu Yi L)
  - iommu/vt-d: Move capability check code to cap_audit files (Kyung Min Park)
  - iommu/vt-d: Audit IOMMU Capabilities and add helper functions (Kyung Min Park)
  - iommu: Report domain nesting info (Liu Yi L)
  - iommu/vt-d: Remove mm reference for guest SVA (Jacob Pan)
  - ioasid: Fix unexpected ioasid_set free (Liu Yi L)
  - iommu/ioasid: fix ioaisd_notifier_register_mm (Wu Hao)
  - Add back quota to avoid no space issue when trying to open /dev/ioasid in the second time. (Liu Yi L)
  - iommu/vt-d: Check ownership in sva cache invalidate (Liu Yi L)
  - ioasid: Add /dev/ioasid for userspace (Liu Yi L)
  - docs: cgroup-v1: Add IOASIDs controller (Jacob Pan)
  - iommu/ioasid: Consult IOASIDs cgroup for allocation (Jacob Pan)
  - cgroup: Introduce ioasids controller (Jacob Pan)
  - iommu/ioasid: Add ownership check in guest bind (Jacob Pan)
  - anolis: block: I/O error occurs during SATA disk stress test (Gu Mi)
  - anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT (D. Wythe)
  - anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: change clcsock_release_lock from mutex to rw_semaphore (Guangguan Wang)
  - anolis: net/smc: check sk_ack_backlog before kernel_accept (Guangguan Wang)
  - anolis: net/smc: do not call cancel smc_listen_work when smc use fallback (Guangguan Wang)
  - anolis: net/smc: only cancel connect_work when connect nonblock (Guangguan Wang)
  - anolis: net/smc: Introduce multiple tcp listen works to enhance tcp_listen_work (Guangguan Wang)
  - anolis: net/smc: smc_sock_alloc after kernel_accept (Guangguan Wang)
  - anolis: net/smc: move sk_acceptq_{removed,add} into accept_q_lock's protection (Guangguan Wang)
  - anolis: net/smc: remove sock lock in smc_tcp_listen_work (Guangguan Wang)
  - anolis: net/smc: optimize for smc_accept_poll (Guangguan Wang)
  - anolis: net/smc: double check whether accept queue is empty before schedule_timeout (Guangguan Wang)
  - anolis: net/smc: only add wait queue when smc_accept_dequeue get null (Guangguan Wang)
  - anolis: net/smc: do not use free work if fallback (Guangguan Wang)
  - anolis: net/smc: queue free_work to smc_close_wq instead of smc_hs_wq (D. Wythe)
  - anolis: net/smc: remove useless path (Guangguan Wang)
  - anolis: net/smc: Change listen wq to unbound highpri wq (Guangguan Wang)
  - anolis: net/smc: Use diff TCP EXPR MAGIC to avoid network middleware do simple echo (D. Wythe)
  - anolis: net/smc: fix deadlock when lgr terminating (D. Wythe)
  - anolis: net/smc: Fix potential leaks on queued_smc_hs (D. Wythe)
  - anolis: net/smc: remove solicited flag for wr send (Guangguan Wang)
  - anolis: net/smc: remove redundant ib_req_notify_cq (Guangguan Wang)
  - anolis: net/smc: clear ib_cq errno when ib_create_cq failed (Guangguan Wang)
  - anolis: net/smc: Introduce rdma dim for smc (Guangguan Wang)
  - anolis: net/smc: introduce 1RTT to SMC-R (D. Wythe)
  - anolis: net/smc: poll_cq one more time if the polled cqe is less than SMC_WR_MAX_POLL_CQE (Guangguan Wang)
  - anolis: net/smc: remove redundant ib_req_notify_cq (Guangguan Wang)
  - anolis: net/smc: combine send cq and recv cq into one cq (Guangguan Wang)
  - anolis: net/smc: move wc loop out of smc_wr_rx_process_cqes (Guangguan Wang)
  - anolis: net/smc: Avoid syscall block by async smc_conn_free (D. Wythe)
  - anolis: net/smc: Disable confirm rkey message exchange when only one link exists (D. Wythe)
  - anolis: net/smc: Release lock before waiting for CLC accept message (D. Wythe)
  - anolis: net/smc: compress frequency of credits announcement by cdc msg (Guangguan Wang)
  - anolis: net/smc: do not send msg in receiving process when tx is not blocked. (Guangguan Wang)
  - anolis: net/smc: Avoid clcsock access panic (Wen Gu)
  - anolis: net/smc: Fix NULL sk pointer when access clcsock (Tony Lu)
  - anolis: net/smc: don't req_notify until all CQEs drained (Wen Gu)
  - anolis: net/smc: Introduce rtoken validity check before sending (Wen Gu)
  - anolis: net/smc: Introduce a sysctl to disable {a}symmetric link group (Wen Gu)
  - anolis: net/smc: Keep first contact clcsock (Tony Lu)
  - anolis: net/smc: Multiple CQs per IB devices (Tony Lu)
  - anolis: net/smc: Introduce smc_ib_cq to bind link and cq (Tony Lu)
  - anolis: net/smc: Introduce link-related proc file (Guangguan Wang)
  - anolis: net/smc: Support rq flow control in smc-r link layer (Guangguan Wang)
  - anolis: net/smc: Add sysctl conrtol for handshake limiation (D. Wythe)
  - anolis: net/smc: Avoid unmapping bufs from unused links (Wen Gu)
  - anolis: net/smc: allow different subnet communication (Tony Lu)
  - anolis: net/smc: don't call ib_req_notify_cq in the send routine (Dust Li)
  - anolis: net/smc: Add TX and RX diagnosis information (Tony Lu)
  - anolis: net/smc: Introduce TCP to SMC replacement netlink commands (Tony Lu)
  - anolis: net/smc: Introduce SMC-R-related proc files (Tony Lu)
  - anolis: net/smc: Introduce sysctl tcp2smc (Tony Lu)
  - anolis: net/smc: Expose SMCPROTO_SMC and SMCPROTO_SMC6 to userspace (Tony Lu)
  - anolis: net/smc: Introduce tunable sysctls for sndbuf and RMB size (Wen Gu)
  - net/smc: Extend SMC-R link group netlink attribute (Wen Gu)
  - net/smc: Allow virtually contiguous sndbufs or RMBs for SMC-R (Wen Gu)
  - net/smc: Use sysctl-specified types of buffers in new link group (Wen Gu)
  - net/smc: Introduce a sysctl for setting SMC-R buffer type (Wen Gu)
  - net/smc: optimize for smc_sndbuf_sync_sg_for_device and smc_rmb_sync_sg_for_cpu (Guangguan Wang)
  - net/smc: remove redundant dma sync ops (Guangguan Wang)
  - net/smc: set ini->smcrv2.ib_dev_v2 to NULL if SMC-Rv2 is unavailable (liuyacan)
  - Revert "net/smc: fix listen processing for SMC-Rv2" (liuyacan)
  - net/smc: fix listen processing for SMC-Rv2 (liuyacan)
  - net/smc: postpone sk_refcnt increment in connect() (liuyacan)
  - net/smc: rdma write inline if qp has sufficient inline space (Guangguan Wang)
  - net/smc: send cdc msg inline if qp has sufficient inline space (Guangguan Wang)
  - net/smc: align the connect behaviour with TCP (Guangguan Wang)
  - net/smc: Fix slab-out-of-bounds issue in fallback (Wen Gu)
  - net/smc: Only save the original clcsock callback functions (Wen Gu)
  - anolis: Revert "anolis: net/smc: Introduce tunable sysctls for sndbuf and RMB size" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Expose SMCPROTO_SMC and SMCPROTO_SMC6 to userspace" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce sysctl tcp2smc" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce SMC-R-related proc files" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce TCP to SMC replacement netlink commands" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Add TX and RX diagnosis information" (D. Wythe)
  - anolis: Revert "anolis: net/smc: don't call ib_req_notify_cq in the send routine" (D. Wythe)
  - anolis: Revert "anolis: net/smc: allow different subnet communication" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Avoid unmapping bufs from unused links" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Add sysctl conrtol for handshake limiation" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Support rq flow control in smc-r link layer" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce link-related proc file" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce smc_ib_cq to bind link and cq" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Multiple CQs per IB devices" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Keep first contact clcsock" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce a sysctl to disable {a}symmetric link group" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce rtoken validity check before sending" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Introduce link dimension req & comp debug info" (D. Wythe)
  - anolis: Revert "anolis: net/smc: don't req_notify until all CQEs drained" (D. Wythe)
  - anolis: Revert "anolis: net/smc: sync err info when TCP connection is refused" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Only save the original clcsock callback functions" (D. Wythe)
  - anolis: Revert "anolis: net/smc: Fix slab-out-of-bounds issue in fallback" (D. Wythe)
  - anolis: arm64: drivers/perf: explicitly begin searching for PCI device (Shuai Xue)
  - anolis: ACPI / MPAM: Rename the signature of the new MPAM ACPI table (Shawn Wang)
  - anolis: ACPI / PPTT: Downgrade the revision requirement in acpi_pptt_get_cpumask_from_cache_id_and_level (Shawn Wang)
  - anolis: RDMA/erdma: Update for hardware (Kai)
  - anolis: configs: enable CONFIG_FAST_COPY_MM by default (Xu Yu)
  - anolis: mm: fcm: introduce fast copy mm interface (Xu Yu)
  - anolis: configs: enable DMA_CMA and DMA_PERNUMA_CMA (Liu Song)
  - anolis: configs: enable Contiguous Memory Allocator (Liu Song)
  - anolis: configs: disable RODATA_FULL_DEFAULT_ENABLED (Liu Song)
  - anolis: configs: disable KFENCE by default (Liu Song)
  - anolis: configs: arm64: enable ARM64_PSEUDO_NMI (Liu Song)
  - anolis: configs: arm64: enable ARCH_RANDOM (Liu Song)
  - anolis: configs: arm64: enable ARM64_TAGGED_ADDR_ABI (Liu Song)
  - anolis: configs: support more than 8 numa nodes (Liu Song)
  - anolis: configs: refresh some default configuration (Liu Song)
  - anolis: vfio/mdev: Set dev_iommu for device of mdev_device (Zelin Deng)
  - iommu/arm-smmu-v3: Realize support_dirty_log iommu ops (Kunkun Jiang)
  - iommu/arm-smmu-v3: Realize clear_dirty_log iommu ops (Kunkun Jiang)
  - iommu/arm-smmu-v3: Realize sync_dirty_log iommu ops (Kunkun Jiang)
  - iommu/arm-smmu-v3: Realize switch_dirty_log iommu ops (Kunkun Jiang)
  - iommu/arm-smmu-v3: Add feature detection for BBML (Kunkun Jiang)
  - iommu/arm-smmu-v3: Enable HTTU for stage1 with io-pgtable mapping (Kunkun Jiang)
  - iommu/arm-smmu-v3: Add support for Hardware Translation Table Update (Jean-Philippe Brucker)
  - iommu/io-pgtable-arm: Add and realize clear_dirty_log ops (Kunkun Jiang)
  - iommu/io-pgtable-arm: Add and realize sync_dirty_log ops (Kunkun Jiang)
  - iommu/io-pgtable-arm: Add and realize merge_page ops (Kunkun Jiang)
  - iommu/io-pgtable-arm: Add and realize split_block ops (Kunkun Jiang)
  - iommu/io-pgtable-arm: Add quirk ARM_HD and ARM_BBMLx (Kunkun Jiang)
  - iommu: Introduce dirty log tracking framework (Keqian Zhu)
  - anolis: MAINTAINERS: Add Yitian Cryptography Complex (YCC) driver maintainer entry (Zelin Deng)
  - anolis: crypto/ycc: Add ycc iommu mapping for user space dma (Zelin Deng)
  - anolis: crypto/ycc: Add hash algorithm support (Xuchun Shang)
  - anolis: crypto/ycc: Add sm2 algorithm support (Xuchun Shang)
  - anolis: crypto/ycc: Add rsa algorithm support (Guanjun)
  - anolis: crypto/ycc: Add aead algorithm support (Guanjun)
  - anolis: crypto/ycc: Add skcipher algorithm support (Guanjun)
  - anolis: crypto/ycc: Send uevent when ycc gets fatal errors (Zelin Deng)
  - anolis: crypto/ycc: Add device error handling support for ycc hw errors (Zelin Deng)
  - anolis: crypto/ycc: Add uio support for ycc user rings (Zelin Deng)
  - anolis: crypto/ycc: Add irq support for ycc kernel rings (Zelin Deng)
  - anolis: crypto/ycc: Add ycc ring configuration (Zelin Deng)
  - anolis: crypto/ycc: Add YCC (Yitian Cryptography Complex) accelerator driver (Zelin Deng)
  - anolis: mm: support priority control when swap anonymous pages (Kaihao Bai)
  - KVM: x86: Avoid theoretical NULL pointer dereference in kvm_irq_delivery_to_apic_fast() (Vitaly Kuznetsov) {CVE-2022-2153}
  - KVM: x86: Check lapic_in_kernel() before attempting to set a SynIC irq (Vitaly Kuznetsov) {CVE-2022-2153}
  - KVM: Add infrastructure and macro to mark VM as bugged (Sean Christopherson) {CVE-2022-2153}
  - thermal: netlink: Fix parameter type of thermal_genl_cpu_capability_event() stub (Nathan Chancellor)
  - thermal: netlink: Add a new event to notify CPU capabilities change (Srinivas Pandruvada)
  - thermal: intel: hfi: INTEL_HFI_THERMAL depends on NET (Randy Dunlap)
  - thermal: intel: hfi: Notify user space for HFI events (Srinivas Pandruvada)
  - thermal: intel: hfi: Enable notification interrupt (Ricardo Neri)
  - x86/Documentation: Describe the Intel Hardware Feedback Interface (Ricardo Neri)
  - thermal: intel: hfi: Handle CPU hotplug events (Ricardo Neri)
  - thermal: intel: hfi: Minimally initialize the Hardware Feedback Interface (Ricardo Neri)
  - x86/cpu: Add definitions for the Intel Hardware Feedback Interface (Ricardo Neri)
  - thermal: Move therm_throt there from x86/mce (Borislav Petkov)
  - x86/mce: Get rid of mcheck_intel_therm_init() (Borislav Petkov)
  - anolis: arm_mpam: Limit MB percentage in schemata to multiples of granularity (Shawn Wang)
  - anolis: arm_mpam: Fix the inaccurate MB granularity in resctrl info directory (Shawn Wang)
  - anolis: arm_mpam: Fix MB default percentage error in schemata (Shawn Wang)
  - anolis: arm_mpam: Remove the zero padding for MB percentage showing in schemata (Shawn Wang)
  - anolis: arm_mpam: Fix L3 cache size display error in resctrl fs (Shawn Wang)
  - anolis: net/hookers: modify hooker_uninstall comment (Gou Hao)
  - anolis: mm: coldpgs: configs: enable coldpgs as module (Rongwei Wang)
  - anolis: mm: kidled: Do not check the slab age when it disable the slab scan (zhongjiang-ali)
  - anolis: mm: coldpgs: release v2.5.0 (Xu Yu)
  - anolis: mm: coldpgs: add mlock {dropped, refault} counter (Xu Yu)
  - anolis: mm: coldpgs: add reclaim type control interface for memcg (zhongjiang-ali)
  - anolis: mm: coldpgs: support reclaiming cold slab (zhongjiang-ali)
  - anolis: mm: coldpgs: count the size of page and slab in bytes (zhongjiang-ali)
  - anolis: mm: coldpgs: support reclaiming cold pages (Xunlei Pang)
  - anolis: mm: kidled: allocate slab age for specified kmem cache (zhongjiang-ali)
  - anolis: mm: kidled: refactor cold slab (zhongjiang-ali)
  - anolis: mm: kidled: use different variables to store the rounds (zhongjiang-ali)
  - anolis: mm: kidled: Make kidled scan both page and slab equally (zhongjiang-ali)
  - anolis: mm: kidled: make kidled to support scan slab separately (zhongjiang-ali)
  - anolis: mm: kidled: isolate slab scan with page scan (zhongjiang-ali)
  - anolis: mm: kidled: make kidled support to identify cold slab (zhongjiang-ali)
  - anolis: mm: kidled: provide a unified interface in preparation for scanning slab (zhongjiang-ali)
  - dmaengine: idxd: Correct IAX operation code names (Fenghua Yu)
  - MAINTAINERS: idxd driver maintainer update (Dave Jiang)
  - dmaengine: idxd: Remove unnecessary synchronize_irq() before free_irq() (Minghao Chi)
  - dmaengine: idxd: make idxd_register/unregister_dma_channel() static (Dave Jiang)
  - dmaengine: idxd: fix lockdep warning on device driver removal (Dave Jiang)
  - dmaengine: idxd: fix retry value to be constant for duration of function call (Dave Jiang)
  - dmaengine: idxd: match type for retries var in idxd_enqcmds() (Dave Jiang)
  - anolis: mm/damon: fix behaviour of init_regions (Rongwei Wang)
  - anolis: perf: spe: detimine LLC cache line size at runtime (Shuai Xue)
  - netfilter: nf_tables: disallow non-stateful expression in sets earlier (Pablo Neira Ayuso) {CVE-2022-32250}
  - anolis: net/netfilter: rename nft_expr_info (Kangjie Xu) {CVE-2022-32250}
  - kvm/x86: Fix MMIO data mismatch issue (Dong Xiaocheng)
  - vfio: mdev: idxd: fix vdcm_reset() for vidxd device (Hao Xiang)
  - Revert "vfio: mdev: idxd: fix soft reset for guest" (Hao Xiang)
  - vfio: mdev: idxd: fix setup pasid permission for IMS in guest scalable mode (Hao Xiang)
  - vfio: mdev: idxd: fix uninit var usage in vidxd_wq_abort() (Dave Jiang)
  - vfio: mdev: idxd: fix uninit var in vidxd_wq_reset() (Dave Jiang)
  - vfio: mdev: idxd: fix uninit var usage in vidxd_resume_wq_state() (Dave Jiang)
  - vfio: mdev: idxd: fix vidxd_resume_wq_state() unint var (Hao Xiang)
  - vfio: mdev: idxd: fix mm ref leak (Dave Jiang)
  - dmaengine: idxd: return 0 if wq already enabled instead of error (Dave Jiang)
  - dmaengine: idxd: fix wq clear state when called from device disable (Dave Jiang)
  - dmaengine: idxd: fix mdev driver ->remove() unregistering mdev device (Dave Jiang)
  - vfio: mdev: idxd: put kref when all devices are released (Dave Jiang)
  - vfio: mdev: idxd: check idxd_wq_enable() return value (Dave Jiang)
  - vfio: mdev: idxd: fix potential null dereference (Dave Jiang)
  - vfio: mdev: idxd: make wq_pasid to be an int (Dave Jiang)
  - vfio: mdev: idxd: check return value for iommu_unregister_device_fault_handler() (Hao Xiang)
  - anolis: arm_mpam: Fix some bugs for MBWU function adaptation on Yitian (Shawn Wang)
  - arm_mpam: Misc fixes for issues found by the kbuild robot (James Morse)
  - arm_mpam: Make mpam_msmon_read() safe for irq-masked callers (James Morse)
  - arm_mpam: Allow MBWU counters to be used, even when not free running (James Morse)
  - arm_mpam: Allow the maximum partid to be overridden from the command line (James Morse)
  - kobject: Add kset_get_next_obj() to allow a kset to be walked (James Morse)
  - arm_mpam: resctrl: Update the rmid reallocation limit (James Morse)
  - arm_mpam: resctrl: Call resctrl_exit() in the event of errors (James Morse)
  - arm_mpam: resctrl: Tell resctrl about cpu/domain online/offline (James Morse)
  - arm64: mpam: Select ARCH_HAS_CPU_RESCTRL (James Morse)
  - arm_mpam: resctrl: Add empty definitions for fine-grained enables (James Morse)
  - arm_mpam: resctrl: Add empty definitions for pseudo lock (James Morse)
  - arm_mpam: resctrl: Add resctrl_arch_rmid_read() and resctrl_arch_reset_rmid() (James Morse)
  - arm_mpam: resctrl: Allow resctrl to allocate monitors for CSU (James Morse)
  - untested: arm_mpam: resctrl: Add support for mbm local (James Morse)
  - untested: arm_mpam: resctrl: Add support for MBA resource (James Morse)
  - mm/filemap: fix infinite loop in generic_file_buffered_read() (Kent Overstreet)
  - mm/filemap.c: generic_file_buffered_read() now uses find_get_pages_contig (Kent Overstreet)
  - mm/filemap/c: break generic_file_buffered_read up into multiple functions (Kent Overstreet)
  - anolis: config: Add TXGBE support in anolis defconfig (Jiawen Wu)
  - anolis: doc: Add WangXun txgbe driver known issues (Jiawen Wu)
  - anolis: net: txgbe: Support sysfs file system (Jiawen Wu)
  - anolis: net: txgbe: Support debug filesystem (Jiawen Wu)
  - anolis: net: txgbe: Support power management (Jiawen Wu)
  - anolis: net: txgbe: Add ethtool support (Jiawen Wu)
  - anolis: net: txgbe: Support PTP (Jiawen Wu)
  - anolis: net: txgbe: Support flow director (Jiawen Wu)
  - anolis: net: txgbe: Support flow control (Jiawen Wu)
  - anolis: net: txgbe: Support to receive and tranmit packets (Jiawen Wu)
  - anolis: net: txgbe: Add interrupt support (Jiawen Wu)
  - anolis: net: txgbe: Add PHY interface support (Jiawen Wu)
  - anolis: net: txgbe: Add operations to interact with firmware (Jiawen Wu)
  - anolis: net: txgbe: Add hardware initialization (Jiawen Wu)
  - net: txgbe: Add build support for txgbe (Jiawen Wu)
  - iommu/vt-d: Add present bit check in pasid entry setup helpers (Liu Yi L)
  - iommu/vt-d: Use pasid_pte_is_present() helper function (Liu Yi L)
  - iommu/vt-d: Allow devices to have more than 32 outstanding PRs (Lu Baolu)
  - iommu/vt-d: Fix clearing real DMA device's scalable-mode context entries (Lu Baolu)
  - iommu/vt-d: Global devTLB flush when present context entry changed (Sanjay Kumar)
  - iommu/vt-d: Fix dereference of pointer info before it is null checked (Colin Ian King)
  - iommu/vt-d: Add cache invalidation latency sampling (Lu Baolu)
  - iommu/vt-d: Expose latency monitor data through debugfs (Lu Baolu)
  - iommu/vt-d: Add common code for dmar latency performance monitors (Lu Baolu)
  - iommu/vt-d: Allocate/register iopf queue for sva devices (Lu Baolu)
  - iommu/vt-d: Refactor prq_event_thread() (Lu Baolu)
  - iommu/vt-d: Use common helper to lookup svm devices (Lu Baolu)
  - iommu/vt-d: Select PCI_ATS explicitly (Lu Baolu)
  - iommu/vt-d: Tweak the description of a DMA fault (Lu Baolu)
  - iommu/vt-d: Check for allocation failure in aux_detach_device() (Dan Carpenter)
  - iommu/vt-d: Force to flush iotlb before creating superpage (Longpeng(Mike))
  - iommu/vt-d: Avoid unnecessary cache flush in pasid entry teardown (Lu Baolu)
  - iommu: Add a page fault handler (Jean-Philippe Brucker)
  - iommu/vt-d: Support IOMMU_DEV_FEAT_IOPF (Jean-Philippe Brucker)
  - iommu: Separate IOMMU_DEV_FEAT_IOPF from IOMMU_DEV_FEAT_SVA (Jean-Philippe Brucker)
  - iommu/vt-d: Make unnecessarily global functions static (Lu Baolu)
  - iommu/vt-d: Remove unused function declarations (Lu Baolu)
  - iommu/vt-d: Fix lockdep splat in intel_pasid_get_entry() (Lu Baolu)
  - iommu/vt-d: Use Real PCI DMA device for IRTE (Jon Derrick)
  - iommu/vt-d: Calculate and set flags for handle_mm_fault (Jacob Pan)
  - iommu/vt-d: Enable write protect propagation from guest (Jacob Pan)
  - iommu/vt-d: Enable write protect for supervisor SVM (Jacob Pan)
  - iommu/vt-d: Report more information about invalidation errors (Lu Baolu)
  - iommu: Don't use lazy flush for untrusted device (Lu Baolu)
  - iommu/vt-d: Add iotlb_sync_map callback (Lu Baolu)
  - iommu/vt-d: Do not use flush-queue when caching-mode is on (Nadav Amit)
  - iommu: Add iova and size as parameters in iotlb_sync_map (Yong Wu)
  - iommu/vt-d: Fix ineffective devTLB invalidation for subdevices (Liu Yi L)
  - iommu/vt-d: Cleanup after converting to dma-iommu ops (Lu Baolu)
  - anolis: configs: enable CONFIG_X86_SGX_KVM by default (Shirong Hao)
  - efi: cper: check section header more appropriately (Shuai Xue)
  - efi: cper: fix scnprintf() use in cper_mem_err_location() (Rasmus Villemoes)
  - platform/x86/intel/ifs: Add CPU_SUP_INTEL dependency (Borislav Petkov)
  - Documentation: In-Field Scan (Tony Luck)
  - platform/x86/intel/ifs: add ABI documentation for IFS (Jithu Joseph)
  - trace: platform/x86/intel/ifs: Add trace point to track Intel IFS operations (Tony Luck)
  - platform/x86/intel/ifs: Add IFS sysfs interface (Jithu Joseph)
  - platform/x86/intel/ifs: Add scan test support (Jithu Joseph)
  - platform/x86/intel/ifs: Authenticate and copy to secured memory (Jithu Joseph)
  - platform/x86/intel/ifs: Check IFS Image sanity (Jithu Joseph)
  - platform/x86/intel/ifs: Read IFS firmware image (Jithu Joseph)
  - platform/x86/intel/ifs: Add stub driver for In-Field Scan (Tony Luck)
  - stop_machine: Add stop_core_cpuslocked() for per-core operations (Peter Zijlstra)
  - x86/msr-index: Define INTEGRITY_CAPABILITIES MSR (Tony Luck)
  - x86/microcode/intel: Expose collect_cpu_info_early() for IFS (Jithu Joseph)
  - anolis: vfio/pci: fix double free when register device fault handler failed (Guanjun)
  - anolis: vfio/pci: legacy support for vfio noiommu device (Guanjun)
  - arm_mpam: resctrl: Add rmid index helpers (James Morse)
  - arm64: mpam: Add helpers to change a tasks and cpu mpam partid/pmg values (James Morse)
  - arm_mpam: resctrl: Add CDP emulation (James Morse)
  - arm64: mpam: Context switch the MPAM registers (James Morse)
  - arm_mpam: resctrl: Implement helpers to update configuration (James Morse)
  - arm_mpam: resctrl: Add resctrl_arch_get_config() (James Morse)
  - arm_mpam: resctrl: Implement resctrl_arch_reset_resources() (James Morse)
  - arm_mpam: resctrl: Pick a value for num_rmid (James Morse)
  - arm_mpam: resctrl: Pick the caches we will use as resctrl resources (James Morse)
  - arm_mpam: resctrl: Add boilerplate cpuhp and domain allocation (James Morse)
  - arm_mpam: Add helper to reset saved mbwu state (James Morse)
  - arm_mpam: Track bandwidth counter state for overflow and power management (James Morse)
  - arm_mpam: Add mpam_msmon_read() to read monitor value (James Morse)
  - arm_mpam: Add helpers to allocate monitors (James Morse)
  - arm_mpam: Probe and reset the rest of the features (James Morse)
  - arm_mpam: Allow configuration to be applied and restored during cpu online (James Morse)
  - arm_mpam: Add static key to indicate when mpam is enabled (James Morse)
  - arm_mpam: Register and enable IRQs (James Morse)
  - arm_mpam: Extend reset logic to allow devices to be reset any time (James Morse)
  - arm_mpam: Add a helper to touch an MSC from any CPU (James Morse)
  - arm_mpam: Reset MSC controls from cpu hp callbacks (James Morse)
  - arm_mpam: Merge supported features during mpam_enable() into mpam_class (James Morse)
  - arm_mpam: Probe the hardware features resctrl supports (James Morse)
  - arm_mpam: Probe MSCs to find the supported partid/pmg values (James Morse)
  - arm_mpam: Add cpuhp callbacks to probe MSC hardware (James Morse)
  - arm_mpam: Add MPAM MSC register layout definitions (James Morse)
  - arm_mpam: Add the class and component structures for ris firmware described (James Morse)
  - arm_mpam: Add probe/remove for mpam msc driver and kbuild boiler plate (James Morse)
  - cacheinfo: Expose the code to generate a cache-id from a device_node (James Morse)
  - cacheinfo: Set cache 'id' based on DT data (Rob Herring)
  - cacheinfo: Allow for >32-bit cache 'id' (Rob Herring)
  - drivers: base: cacheinfo: Add helper to find the cache size from cpu+level (James Morse)
  - drivers: base: cacheinfo: Check per_cpu_cacheinfo() is allocated (James Morse)
  - dt-bindings: arm: Add MPAM MSC binding (Rob Herring)
  - anolis: arm_mpam: Add cmdline parameter to enable and disable MPAM feature (Shawn Wang)
  - ACPI / MPAM: Parse the MPAM table (James Morse)
  - acpica: Add MPAM table structures (James Morse)
  - anolis: staging: mpam: Move the old MPAM ACPI definitions to staging directory (Shawn Wang)
  - of: Add of_get_cpu_hwid() to read hardware ID from CPU nodes (Rob Herring)
  - software node: balance refcount for managed software nodes (Laurentiu Tudor)
  - software node: Provide replacement for device_add_properties() (Heikki Krogerus)
  - ACPI / irq: Add acpi_register_partitioned_percpu_gsi() (James Morse)
  - ACPI / irq: Allow a compile-time arg0 for acpi_register_gsi()'s fwspec (James Morse)
  - anolis: ACPI / PPTT: Add a helper to fill a cpumask from a cache with specific id and level (Shawn Wang)
  - ACPI / PPTT: Add a helper to fill a cpumask from a cache_id (James Morse)
  - ACPI / PPTT: Add a helper to fill a cpumask from a processor container (James Morse)
  - ACPI / PPTT: Find PPTT cache level by ID (James Morse)
  - ACPI / PPTT: Add a helper to build a cpumask from a cpu_node (James Morse)
  - ACPI / PPTT: Provide a helper to walk processor containers (James Morse)
  - anolis: arm64: cpufeature: Refactor the old MPAM configs and related code (Shawn Wang)
  - arm64: cpufeature: discover CPU support for MPAM (James Morse)
  - Documentation/admin-guide/acpi: Move information out of shell script comments (James Morse)
  - ACPICA: ACPI 6.4: PPTT: add new version of subtable type 1 (Erik Kaneda)
  - anolis: configs: enable configs related to erofs over fscache feature (Gao Xiang)
  - erofs: scan devices from device table (Gao Xiang)
  - erofs: add 'fsid' mount option (Gao Xiang)
  - erofs: implement fscache-based data read for inline layout (Gao Xiang)
  - erofs: implement fscache-based data read for non-inline layout (Gao Xiang)
  - erofs: implement fscache-based metadata read (Gao Xiang)
  - erofs: register fscache context for extra data blobs (Gao Xiang)
  - erofs: register fscache context for primary data blob (Gao Xiang)
  - erofs: add anonymous inode caching metadata for data blobs (Gao Xiang)
  - erofs: add fscache context helper functions (Gao Xiang)
  - erofs: register fscache volume (Gao Xiang)
  - erofs: add fscache mode check helper (Gao Xiang)
  - erofs: make erofs_map_blocks() generally available (Jeffle Xu)
  - anolis: cachefiles: skip check for n_children in on-demand mode (Jeffle Xu)
  - cachefiles: enable on-demand read mode (Jeffle Xu)
  - cachefiles: implement on-demand read (Jeffle Xu)
  - cachefiles: notify the user daemon when withdrawing cookie (Jeffle Xu)
  - cachefiles: unbind cachefiles gracefully in on-demand mode (Jeffle Xu)
  - cachefiles: notify the user daemon when looking up cookie (Jeffle Xu)
  - erofs: use meta buffers for erofs_read_superblock() (Jeffle Xu)
  - erofs: use meta buffers for zmap operations (Gao Xiang)
  - erofs: use meta buffers for xattr operations (Gao Xiang)
  - erofs: use meta buffers for super operations (Gao Xiang)
  - erofs: use meta buffers for inode operations (Gao Xiang)
  - erofs: introduce meta buffer operations (Gao Xiang)
  - erofs: clean up erofs_map_blocks tracepoints (Gao Xiang)
  - erofs: add multiple device support (Gao Xiang)
  - erofs: decouple basic mount options from fs_context (Gao Xiang)
  - erofs: introduce erofs_sb_has_xxx() helpers (Gao Xiang)
  - erofs: fix double free of 'copied' (Gao Xiang)
  - erofs: support reading chunk-based uncompressed files (Gao Xiang)
  - erofs: introduce chunk-based file on-disk format (Gao Xiang)
  - erofs: clean up file headers & footers (Gao Xiang)
  - erofs: don't use erofs_map_blocks() any more (Yue Hu)
  - anolis: userns: add a sysctl to control the max depth (Jiang Liu)
  - userns: add a sysctl to disable unprivileged user namespace unsharing (Serge Hallyn)
  - anolis: fuse: Introduce fd attach ioctl to retrieve a fuse device (Joseph Qi)
  - anolis: fuse: do not passthrough DIO file if unsupported (Peng Tao)
  - anolis: fuse: add fd passthrough IO metrics (Peng Tao)
  - anolis: fuse: update time properly for fd passthrough IO (Peng Tao)
  - anolis: fuse: allow further fs stacking on passthrough fuse (Peng Tao)
  - anolis: fuse: add ioctl to support fd passthrough write only (Peng Tao)
  - anolis: fuse: add sysctl API to toggle fd passthrough (Peng Tao)
  - anolis: fuse: Introduce passthrough for mmap (Alessio Balsini)
  - anolis: fuse: Use daemon creds in passthrough mode (Alessio Balsini)
  - anolis: fuse: Handle asynchronous read and write in passthrough (Alessio Balsini)
  - anolis: fuse: Introduce synchronous read and write for passthrough (Alessio Balsini)
  - anolis: fuse: Passthrough initialization and release (Alessio Balsini)
  - anolis: fuse: Definitions and ioctl for passthrough (Alessio Balsini)
  - anolis: fs: Generic function to convert iocb to rw flags (Alessio Balsini)
  - anolis: fuse: add sysfs api to resend processing queue requests (Peng Tao)
  - fuse: fix matching of FUSE_DEV_IOC_CLONE command (Alessio Balsini)
  - fuse: 32-bit user space ioctl compat for fuse device (Alessio Balsini)
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Ruozhu Li)
  - nvme: fix write zeroes pi (Klaus Jensen)
  - nvme-pci: disable hmb on idle suspend (Keith Busch)
  - nvme: allow user toggling hmb usage (Keith Busch)
  - nvme-pci: use attribute group for cmb sysfs (Keith Busch)
  - nvme-pci: fix controller reset hang when racing with nvme_timeout (Tao Chiu)
  - nvme: move the fabrics queue ready check routines to core (Tao Chiu)
  - nvme-fabrics: reject I/O to offline device (Victor Gladkov)
  - nvme: introduce a nvme_host_path_error helper (Chao Leng)
  - blk-mq: introduce blk_mq_set_request_complete (Chao Leng)
  - io_uring: fix soft lockup when call __io_remove_buffers (Ye Bin)
  - anolis: configs: trace: enable CONFIG_OSNOISE_TRACER and CONFIG_TIMERLAT_TRACER (Qinyun Tan)
  - tracing/timerlat: Do not wakeup the thread if the trace stops at the IRQ (Daniel Bristot de Oliveira)
  - tracing/timerlat: Print stacktrace in the IRQ handler if needed (Daniel Bristot de Oliveira)
  - tracing/timerlat: Notify IRQ new max latency only if stop tracing is set (Daniel Bristot de Oliveira)
  - tracing/osnoise: Do not unregister events twice (Daniel Bristot de Oliveira)
  - tracing/osnoise: Force quiescent states while tracing (Nicolas Saenz Julienne)
  - tracing/osnoise: Make osnoise_main to sleep for microseconds (Daniel Bristot de Oliveira)
  - tracing/osnoise: Properly unhook events if start_per_cpu_kthreads() fails (Nikita Yushchenko)
  - tracing: Switch to kvfree_rcu() API (Uladzislau Rezki (Sony))
  - tracing/osnoise: Make osnoise_instances static (Daniel Bristot de Oliveira)
  - tracing/osnoise: Remove PREEMPT_RT ifdefs from inside functions (Daniel Bristot de Oliveira)
  - tracing/osnoise: Remove STACKTRACE ifdefs from inside functions (Daniel Bristot de Oliveira)
  - tracing/osnoise: Allow multiple instances of the same tracer (Daniel Bristot de Oliveira)
  - tracing/osnoise: Remove TIMERLAT ifdefs from inside functions (Daniel Bristot de Oliveira)
  - tracing/osnoise: Support a list of trace_array *tr (Daniel Bristot de Oliveira)
  - tracing/osnoise: Use start/stop_per_cpu_kthreads() on osnoise_cpus_write() (Daniel Bristot de Oliveira)
  - tracing/osnoise: Split workload start from the tracer start (Daniel Bristot de Oliveira)
  - tracing/osnoise: Do not follow tracing_cpumask (Daniel Bristot de Oliveira)
  - tracing/osnoise: Improve comments about barrier need for NMI callbacks (Daniel Bristot de Oliveira)
  - trace/timerlat: Add migrate-disabled field to the timerlat header (Daniel Bristot de Oliveira)
  - trace/osnoise: Add migrate-disabled field to the osnoise header (Daniel Bristot de Oliveira)
  - trace: Add timerlat tracer (Daniel Bristot de Oliveira)
  - trace: Add osnoise tracer (Daniel Bristot de Oliveira)
  - trace: Add __print_ns_to_secs() and __print_ns_without_secs() helpers (Steven Rostedt)
  - intel_idle: Fix SPR C6 optimization (Artem Bityutskiy)
  - intel_idle: Fix the 'preferred_cstates' module parameter (Artem Bityutskiy)
  - platform/x86: ISST: use semi-colons instead of commas (Dan Carpenter)
  - platform/x86: ISST: Mark mmio_range_devid_0 and mmio_range_devid_1 with static keyword (Zou Wei)
  - platform/x86: ISST: Change PCI device macros (Srinivas Pandruvada)
  - platform/x86: ISST: Allow configurable offset range (Srinivas Pandruvada)
  - platform/x86: ISST: Check for unaligned mmio address (Srinivas Pandruvada)
  - powercap: intel_rapl: support new layout of Psys PowerLimit Register on SPR (Zhang Rui)
  - x86/sgx: Add check for SGX pages to ghes_do_memory_failure() (Tony Luck)
  - x86/sgx: Add hook to error injection address validation (Tony Luck)
  - x86/sgx: Hook arch_memory_failure() into mainline code (Tony Luck)
  - x86/sgx: Add SGX infrastructure to recover from poison (Tony Luck)
  - x86/sgx: Initial poison handling for dirty and free pages (Tony Luck)
  - x86/sgx: Add infrastructure to identify SGX EPC pages (Tony Luck)
  - x86/sgx: Add new sgx_epc_page flag bit to mark free pages (Tony Luck)
  - anolis: uio/uio_pci_generic: Introduce refcnt on open/release (Yao Hongbo)
  - vfio: mdev: idxd: fix max batch size for vdcm (Dave Jiang)
  - dmaengine: idxd: clear driver_name on wq reset (Dave Jiang)
  - dmaengine: idxd: remove trailing white space on input str for driver_name (Dave Jiang)
  - dmaengine: idxd: add wq driver name support for accel-config user tool (Dave Jiang)
  - arm64: kdump: Do not allocate crash low memory if not needed (Zhen Lei)
  - docs: kdump: Update the crashkernel description for arm64 (Zhen Lei)
  - of: Support more than one crash kernel regions for kexec -s (Zhen Lei)
  - of: fdt: Add memory for devices by DT property "linux,usable-memory-range" (Chen Zhou)
  - arm64: kdump: Reimplement crashkernel=X (Chen Zhou)
  - arm64: Use insert_resource() to simplify code (Zhen Lei)
  - kdump: return -ENOENT if required cmdline option does not exist (Zhen Lei)
  - arm64: kdump: Skip kmemleak scan reserved memory for kdump (Chen Wandun)
  - anolis: Revert "ck: arm64: Add Crash kernel low reservation" (Kaihao Bai)
  - anolis: Revert "ck: arm64: kdump: support reserving crashkernel above 4G" (Kaihao Bai)
  - dmaengine: idxd: load wq configuration for max_xfer and max_batch (Dave Jiang)
  - dmaengine: idxd: don't clear device context when read-only (Dave Jiang)
  - engine: idxd: fix wq reset on RO config (Dave Jiang)
  - anolis: configs: arm64: enable ARM64_E0PD (Feng Su)
  - iommu/vt-d: Always signal completion for PRQ drain (Jacob Pan)
  - iommu/vt-d: Use INVALID response code instead of FAILURE (Lu Baolu)
  - x86/resctrl: Make resctrl_arch_rmid_read() safe to call in IRQ context (James Morse)
  - x86/resctrl: Make __rmid_read() retry when it is interrupted (James Morse)
  - x86/resctrl: Move mbm_state updates to __rmid_read() (James Morse)
  - fs/resctrl: Export the closid/rmid to user-space (James Morse)
  - fs/resctrl: Add helper to query if counters are free running (James Morse)
  - fs/resctrl: Split resctrl_arch_mon_ctx_alloc() to have a no_wait version (James Morse)
  - x86/resctrl: Move resctrl to /fs/ (James Morse)
  - x86/resctrl: Move the filesystem bits to headers visible to fs/resctrl (James Morse)
  - fs/resctrl: Add boiler plate for external resctrl code (James Morse)
  - x86/resctrl: Drop __init/__exit on assorted symbols (James Morse)
  - x86/resctrl: Describe resctrl's bitmap size assumptions (James Morse)
  - x86/resctrl: Claim get_domain_from_cpu() for resctrl (James Morse)
  - x86/resctrl: Move get_config_index() to a header (James Morse)
  - x86/resctrl: Move thread_throttle_mode_init() to be managed by resctrl (James Morse)
  - x86/resctrl: Make resctrl_arch_pseudo_lock_fn() take a plr (James Morse)
  - x86/resctrl: Make prefetch_disable_bits belong to the arch code (James Morse)
  - x86/resctrl: Allow an architecture to disable pseudo lock (James Morse)
  - x86/resctrl: Export the is_mbm_*_enabled() helpers to asm/resctrl.h (James Morse)
  - x86/resctrl: Stop using the for_each_*_rdt_resource() walkers (James Morse)
  - x86/resctrl: Move max_{name,data}_width into resctrl code (James Morse)
  - x86/resctrl: Move monitor init work to a resctrl init call (James Morse)
  - x86/resctrl: Add a resctrl helper to reset all the resources (James Morse)
  - x86/resctrl: Move resctrl types to a separate header (James Morse)
  - x86/resctrl: Split arch and fs resctrl locks (James Morse)
  - x86/resctrl: Wrap resctrl_arch_find_domain() around rdt_find_domain() (James Morse)
  - x86/resctrl: Add cpu offline callback for resctrl work (James Morse)
  - x86/resctrl: Allow overflow/limbo handlers to be scheduled on any-but cpu (James Morse)
  - x86/resctrl: Add cpu online callback for resctrl work (James Morse)
  - x86/resctrl: Export resctrl fs's init function (James Morse)
  - x86/resctrl: Remove rdtgroup from update_cpu_closid_rmid() (James Morse)
  - x86/resctrl: Add helper for setting cpu default properties (James Morse)
  - x86/resctrl: Move ctrlval string parsing links away from the arch code (James Morse)
  - x86/resctrl: Add helpers for system wide mon/alloc capable (James Morse)
  - x86/resctrl: Make rdt_enable_key the arch's decision to switch (James Morse)
  - x86/resctrl: Move alloc/mon static keys into helpers (James Morse)
  - x86/resctrl: Make resctrl_mounted checks explicit (James Morse)
  - x86/resctrl: Add a helper to avoid reaching into the arch code resource list (James Morse)
  - x86/resctrl: Allow arch to allocate memory needed in resctrl_arch_rmid_read() (James Morse)
  - x86/resctrl: Allow resctrl_arch_rmid_read() to sleep (James Morse)
  - x86/resctrl: Queue mon_event_read() instead of sending an IPI (James Morse)
  - x86/resctrl: Move closid/rmid matching and setting to use helpers (James Morse)
  - x86/resctrl: Allow the allocator to check if a closid can allocate clean rmid (James Morse)
  - x86/resctrl: Allow rmid allocation to be scoped by closid (James Morse)
  - x86/resctrl: Move rmid allocation out of mkdir_rdt_prepare() (James Morse)
  - x86/resctrl: Access per-rmid structures by index (James Morse)
  - x86/resctrl: Track the closid with the rmid (James Morse)
  - x86/resctrl: massage comment in rdtgroup_locksetup_enter() (James Morse)
  - x86/resctrl: Only allocate mbps_val[] when it is going to be used (James Morse)
  - x86/resctrl: Make resctrl_arch_rmid_read() return values in bytes (James Morse)
  - x86/resctrl: Add resctrl_rmid_realloc_limit to abstract x86's boot_cpu_data (James Morse)
  - x86/resctrl: Rename and change the units of resctrl_cqm_threshold (James Morse)
  - x86/resctrl: Move get_corrected_mbm_count() into resctrl_arch_rmid_read() (James Morse)
  - x86/resctrl: Move mbm_overflow_count() into resctrl_arch_rmid_read() (James Morse)
  - x86/resctrl: Pass the required parameters into resctrl_arch_rmid_read() (James Morse)
  - x86/resctrl: Abstract __rmid_read() (James Morse)
  - x86/resctrl: Allow per-rmid arch private storage to be reset (James Morse)
  - x86/resctrl: Add per-rmid arch private storage for overflow and chunks (James Morse)
  - x86/resctrl: Calculate bandwidth from the previous __mon_event_count() chunks (James Morse)
  - x86/resctrl: Allow update_mba_bw() to update controls directly (James Morse)
  - x86/resctrl: Remove architecture copy of mbps_val (James Morse)
  - x86/resctrl: Switch over to the resctrl mbps_val list (James Morse)
  - x86/resctrl: Create mba_sc configuration in the rdt_domain (James Morse)
  - x86/resctrl: Abstract and use supports_mba_mbps() (James Morse)
  - x86/resctrl: Remove set_mba_sc()s control array re-initialisation (James Morse)
  - x86/resctrl: Add domain offline callback for resctrl work (James Morse)
  - x86/resctrl: Group struct rdt_hw_domain cleanup (James Morse)
  - x86/resctrl: Add domain online callback for resctrl work (James Morse)
  - x86/resctrl: Merge mon_capable and mon_enabled (James Morse)
  - x86/resctrl: Kill off alloc_enabled (James Morse)
  - x86/resctrl: Fix kfree() of the wrong type in domain_add_cpu() (James Morse)
  - x86/resctrl: Free the ctrlval arrays when domain_setup_mon_state() fails (James Morse)
  - x86/resctrl: Make resctrl_arch_get_config() return its value (James Morse)
  - x86/resctrl: Merge the CDP resources (James Morse)
  - x86/resctrl: Expand resctrl_arch_update_domains()'s msr_param range (James Morse)
  - x86/resctrl: Remove rdt_cdp_peer_get() (James Morse)
  - x86/resctrl: Merge the ctrl_val arrays (James Morse)
  - x86/resctrl: Calculate the index from the configuration type (James Morse)
  - x86/resctrl: Apply offset correction when config is staged (James Morse)
  - x86/resctrl: Make ctrlval arrays the same size (James Morse)
  - x86/resctrl: Pass configuration type to resctrl_arch_get_config() (James Morse)
  - x86/resctrl: Add a helper to read a closid's configuration (James Morse)
  - x86/resctrl: Rename update_domains() to resctrl_arch_update_domains() (James Morse)
  - x86/resctrl: Allow different CODE/DATA configurations to be staged (James Morse)
  - x86/resctrl: Group staged configuration into a separate struct (James Morse)
  - x86/resctrl: Move the schemata names into struct resctrl_schema (James Morse)
  - x86/resctrl: Add a helper to read/set the CDP configuration (James Morse)
  - x86/resctrl: Swizzle rdt_resource and resctrl_schema in pseudo_lock_region (James Morse)
  - x86/resctrl: Pass the schema to resctrl filesystem functions (James Morse)
  - x86/resctrl: Add resctrl_arch_get_num_closid() (James Morse)
  - x86/resctrl: Store the effective num_closid in the schema (James Morse)
  - x86/resctrl: Walk the resctrl schema list instead of an arch list (James Morse)
  - x86/resctrl: Label the resources with their configuration type (James Morse)
  - x86/resctrl: Pass the schema in info dir's private pointer (James Morse)
  - x86/resctrl: Add a separate schema list for resctrl (James Morse)
  - x86/resctrl: Split struct rdt_domain (James Morse)
  - x86/resctrl: Split struct rdt_resource (James Morse)
  - x86/resctrl: Fix kernel-doc in internal.h (Fabio M. De Francesco)
  - x86/resctrl: Fix kernel-doc in pseudo_lock.c (Fabio M. De Francesco)
  - x86/resctrl: Fix init const confusion (Andi Kleen)
  - x86/resctrl: Apply READ_ONCE/WRITE_ONCE to task_struct.{rmid,closid} (Valentin Schneider)
  - x86/resctrl: Use task_curr() instead of task_struct->on_cpu to prevent unnecessary IPI (Reinette Chatre)
  - x86/resctrl: Add printf attribute to log function (Tom Rix)
  - x86/resctrl: Clean up unused function parameter in rmdir path (Xiaochen Shen)
  - x86/resctrl: Constify kernfs_ops (Rikard Falkeborn)
  - anolis: staging: mpam: Fix compile conflicts with kunpeng mpam (Xin Hao)
  - tracing: Quiet smp_processor_id() use in preemptable warning in hwlat (banye)
  - tracing: Replace deprecated CPU-hotplug functions. (banye)
  - tracing: Disable "other" permission bits in the tracefs files (Steven Rostedt (VMware))
  - trace/hwlat: Remove printk from sampling loop (Daniel Bristot de Oliveira)
  - trace/hwlat: Use trace_min_max_param for width and window params (Daniel Bristot de Oliveira)
  - trace: Add a generic function to read/write u64 values from tracefs (Daniel Bristot de Oliveira)
  - trace/hwlat: Support hotplug operations (Daniel Bristot de Oliveira)
  - trace/hwlat: Protect kdata->kthread with get/put_online_cpus (Daniel Bristot de Oliveira)
  - trace/hwlat: Implement the per-cpu mode (Daniel Bristot de Oliveira)
  - trace/hwlat: Switch disable_migrate to mode none (Daniel Bristot de Oliveira)
  - trace/hwlat: Implement the mode config option (Daniel Bristot de Oliveira)
  - tracing: Merge irqflags + preempt counter. (Sebastian Andrzej Siewior)
  - anolis: xfs: drop all atomic staging extents when remounting (Gao Xiang)
  - anolis: xfs: make atomic write extent reflects block size (Joseph Qi)
  - anolis: tpm_tis_spi: workaround for yitian hardware bug (luanshi)
  - vfio: mdev: idxd: fix soft reset for guest (Dave Jiang)
  - anolis: configs: enable TLB_RANGE (Changsheng Liu)
  - anolis: filemap: check compound_head(page)->mapping in generic_file_buffered_read() (Rongwei Wang)
  - xfs: validate inode fork size against fork format (Dave Chinner)
  - anolis: Revert "virtio_pci: Support surprise removal of virtio pci device" (Guanjun)
  - anolis: livepatch: Revert module_enable_ro and module_disable_ro (yinbinbin)
  - xfs: revert "xfs: actually bump warning counts when we send warnings" (Eric Sandeen)
  - io_uring: fix lack of protection for compl_nr (Hao Xu)
  - anolis: net: make tcp_drop noinline (Kangjie Xu)
  - io_uring: fix __tctx_task_work() ctx race (Pavel Begunkov)
  - io_uring: fix race condition in task_work add and clear (Jens Axboe)
  - io_uring: tctx->task_lock should be IRQ safe (Jens Axboe)
  - io_uring: don't restrict issue_flags for io_openat (Pavel Begunkov)
  - io_uring: defer flushing cached reqs (Pavel Begunkov)
  - io_uring: take comp_state from ctx (Pavel Begunkov)
  - io_uring: enable req cache for task_work items (Jens Axboe)
  - io_uring: provide FIFO ordering for task_work (Jens Axboe)
  - io_uring: deduplicate failing task_work_add (Pavel Begunkov)
  - io_uring: use persistent request cache (Jens Axboe)
  - io_uring: feed reqs back into alloc cache (Pavel Begunkov)
  - io_uring: persistent req cache (Pavel Begunkov)
  - io_uring: count ctx refs separately from reqs (Pavel Begunkov)
  - io_uring: remove fallback_req (Pavel Begunkov)
  - io_uring: submit-completion free batching (Pavel Begunkov)
  - io_uring: replace list with array for compl batch (Pavel Begunkov)
  - io_uring: don't reinit submit state every time (Pavel Begunkov)
  - io_uring: remove ctx from comp_state (Pavel Begunkov)
  - io_uring: don't keep submit_state on stack (Pavel Begunkov)
  - io_uring: don't propagate io_comp_state (Pavel Begunkov)
  - io_uring: save atomic dec for inline executed reqs (Pavel Begunkov)
  - io_uring: don't flush CQEs deep down the stack (Pavel Begunkov)
  - io_uring: help inlining of io_req_complete() (Pavel Begunkov)
  - io_uring: make op handlers always take issue flags (Pavel Begunkov)
  - io_uring: replace force_nonblock with flags (Pavel Begunkov)
  - anolis: xfs: set atomic write sb flag (Gao Xiang)
  - anolis: xfs: fix xfs atomic staging registration (Gao Xiang)
  - anolis: xfs: take iolock when setting di_flags (Joseph Qi)
  - anolis: xfs: fix uninitialized return value (Joseph Qi)
  - anolis: xfs: add atomic write sysfs entry (Joseph Qi)
  - anolis: xfs: persist atomic write di_flags (Joseph Qi)
  - anolis: xfs: add missing cmap->br_state = XFS_EXT_NORM update (Gao Xiang)
  - anolis: xfs: fix improper return value (Gao Xiang)
  - anolis: xfs: release atomic staging extents when unmounting (Gao Xiang)
  - anolis: xfs: staging atomic merging (Gao Xiang)
  - anolis: xfs: limit the number of atomic staging CoW (Gao Xiang)
  - anolis: xfs: atomic write end_cow sanity check (Gao Xiang)
  - anolis: xfs: deal with truncate flow (Gao Xiang)
  - anolis: xfs: introduce atomic staging (Gao Xiang)
  - anolis: xfs: add ioctl to set DIO_ATOMIC_WRITE flag (Joseph Qi)
  - anolis: xfs: introduce DIO atomic write feature (Gao Xiang)
  - anolis: configs: enable CONFIG_BPF_UNPRIV_DEFAULT_OFF by default (Qiao Ma)
  - bpf: Disallow unprivileged bpf by default (Pawan Gupta)
  - bpf/selftests: Test PTR_TO_RDONLY_MEM (Hao Luo) {CVE-2022-0500}
  - bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem. (Hao Luo) {CVE-2022-0500}
  - bpf: Make per_cpu_ptr return rdonly PTR_TO_MEM. (Hao Luo) {CVE-2022-0500}
  - bpf: Convert PTR_TO_MEM_OR_NULL to composable types. (Hao Luo) {CVE-2022-0500}
  - bpf: Introduce MEM_RDONLY flag (Hao Luo) {CVE-2022-0500}
  - bpf: Replace PTR_TO_XXX_OR_NULL with PTR_TO_XXX | PTR_MAYBE_NULL (Hao Luo) {CVE-2022-0500}
  - bpf: Replace RET_XXX_OR_NULL with RET_XXX | PTR_MAYBE_NULL (Hao Luo) {CVE-2022-0500}
  - bpf: Replace ARG_XXX_OR_NULL with ARG_XXX | PTR_MAYBE_NULL (Hao Luo) {CVE-2022-0500}
  - bpf: Introduce composable reg, ret and arg types. (Hao Luo) {CVE-2022-0500}
  - KVM: arm64: Fix Function ID typo for PTP_KVM service (Zenghui Yu)
  - ptp: Don't print an error if ptp_kvm is not supported (Jon Hunter)
  - KVM: arm64: Fix table format for PTP documentation (Marc Zyngier)
  - ptp: arm/arm64: Enable ptp_kvm for arm/arm64 (Jianyong Wu)
  - KVM: arm64: Add support for the KVM PTP service (Jianyong Wu)
  - clocksource: Add clocksource id for arm arch counter (Jianyong Wu)
  - time: Add mechanism to recognize clocksource in time_get_snapshot (Thomas Gleixner)
  - ptp: Reorganize ptp_kvm.c to make it arch-independent (Jianyong Wu)
  - KVM: arm64: Advertise KVM UID to guests via SMCCC (Will Deacon)
  - arm/arm64: Probe for the presence of KVM hypervisor (Will Deacon)
  - anolis: mm: damon: change pr_err() to pr_debug() to avoid too many logs in console (Xin Hao)
  - x86/kvm: Add kexec support for SEV Live Migration. (Ashish Kalra)
  - x86/kvm: Add guest support for detecting and enabling SEV Live Migration feature. (Ashish Kalra)
  - EFI: Introduce the new AMD Memory Encryption GUID. (Ashish Kalra)
  - mm: x86: Invoke hypercall when page encryption status is changed (Brijesh Singh)
  - x86/kvm: Add AMD SEV specific Hypercall3 (Brijesh Singh)
  - KVM: X86: Introduce KVM_HC_MAP_GPA_RANGE hypercall (Ashish Kalra)
  - x86/sgx: Silence softlockup detection when releasing large enclaves (Reinette Chatre)
  - x86/sgx: Fix free page accounting (Reinette Chatre)
  - x86/sgx/virt: implement SGX_IOC_VEPC_REMOVE ioctl (Paolo Bonzini)
  - x86/sgx/virt: extract sgx_vepc_remove_page (Paolo Bonzini)
  - x86/sgx: use vma_lookup() in sgx_encl_find() (Liam Howlett)
  - mm: add vma_lookup(), update find_vma_intersection() comments (Liam Howlett)
  - i915_vma: Rename vma_lookup to i915_vma_lookup (Liam Howlett)
  - x86/sgx: Add missing xa_destroy() when virtual EPC is destroyed (Kai Huang)
  - x86/sgx: Do not update sgx_nr_free_pages in sgx_setup_epc_section() (Jarkko Sakkinen)
  - KVM: x86: Add capability to grant VM access to privileged SGX attribute (Sean Christopherson)
  - KVM: VMX: Enable SGX virtualization for SGX1, SGX2 and LC (Sean Christopherson)
  - KVM: VMX: Add ENCLS[EINIT] handler to support SGX Launch Control (LC) (Sean Christopherson)
  - KVM: VMX: Add emulation of SGX Launch Control LE hash MSRs (Sean Christopherson)
  - KVM: VMX: Add SGX ENCLS[ECREATE] handler to enforce CPUID restrictions (Sean Christopherson)
  - KVM: VMX: Frame in ENCLS handler for SGX virtualization (Sean Christopherson)
  - KVM: VMX: Add basic handling of VM-Exit from SGX enclave (Sean Christopherson)
  - KVM: x86: Add reverse-CPUID lookup support for scattered SGX features (Sean Christopherson)
  - KVM: x86: Add support for reverse CPUID lookup of scattered features (Sean Christopherson)
  - KVM: x86: Define new #PF SGX error code bit (Sean Christopherson)
  - KVM: x86: Export kvm_mmu_gva_to_gpa_{read,write}() for SGX (VMX) (Sean Christopherson)
  - x86/sgx: Move provisioning device creation out of SGX driver (Sean Christopherson)
  - x86/sgx: Add helpers to expose ECREATE and EINIT to KVM (Sean Christopherson)
  - x86/sgx: Add helper to update SGX_LEPUBKEYHASHn MSRs (Kai Huang)
  - x86/sgx: Add encls_faulted() helper (Sean Christopherson)
  - x86/sgx: Add SGX2 ENCLS leaf definitions (EAUG, EMODPR and EMODT) (Sean Christopherson)
  - x86/sgx: Move ENCLS leaf definitions to sgx.h (Sean Christopherson)
  - x86/sgx: Initialize virtual EPC driver even when SGX driver is disabled (Kai Huang)
  - x86/cpu/intel: Allow SGX virtualization without Launch Control support (Sean Christopherson)
  - x86/sgx: Introduce virtual EPC for use by KVM guests (Sean Christopherson)
  - x86/sgx: Add SGX_CHILD_PRESENT hardware error code (Sean Christopherson)
  - x86/sgx: Wipe out EREMOVE from sgx_free_epc_page() (Kai Huang)
  - x86/cpufeatures: Add SGX1 and SGX2 sub-features (Sean Christopherson)
  - anolis: x86/cpufeatures: Remove duplicated definitions of X86_FEATURE_SGX1 and X86_FEATURE_SGX2 (Zhiquan Li)
  - x86/cpufeatures: Make SGX_LC feature bit depend on SGX bit (Kai Huang)
  - selftests/sgx: Fix Q1 and Q2 calculation in sigstruct.c (Tianjia Zhang)
  - selftests/sgx: remove checks for file execute permissions (Dave Hansen)
  - selftests/sgx: Refine the test enclave to have storage (Jarkko Sakkinen)
  - selftests/sgx: Add EXPECT_EEXIT() macro (Jarkko Sakkinen)
  - selftests/sgx: Dump enclave memory map (Jarkko Sakkinen)
  - selftests/sgx: Migrate to kselftest harness (Jarkko Sakkinen)
  - selftests/sgx: Rename 'eenter' and 'sgx_call_vdso' (Jarkko Sakkinen)
  - x86/sgx: Expose SGX architectural definitions to the kernel (Sean Christopherson)
  - selftests/sgx: Use getauxval() to simplify test code (Tianjia Zhang)
  - selftests/sgx: Improve error detection and messages (Dave Hansen)
  - x86/sgx: Remove unnecessary kmap() from sgx_ioc_enclave_init() (Ira Weiny)
  - x86/sgx: Add a basic NUMA allocation scheme to sgx_alloc_epc_page() (Jarkko Sakkinen)
  - x86/sgx: Replace section->init_laundry_list with sgx_dirty_page_list (Jarkko Sakkinen)
  - x86/fpu: KVM: Set the base guest FPU uABI size to sizeof(struct kvm_xsave) (Hao Xiang)
  - KVM: x86/cpuid: Clear XFD for component i if the base feature is missing (Hao Xiang)
  - anolis: sched: Queue task on wakelist in the same llc if the wakee cpu is idle (Tianchen Ding)
  - iommu/amd: Keep track of amd_iommu_irq_remap state (Joerg Roedel)
  - iommu/amd: Don't call early_amd_iommu_init() when AMD IOMMU is disabled (Joerg Roedel)
  - anolis: kfence: Fix the race condition when disabling KFENCE (Tianchen Ding)
  - dmaengine: idxd: fail if exceeds wq->max_batch_size (Xu Yu)
  - anolis: PCI/MSI: do not leak masks which is temporary (Xu Yu)
  - mm: defer kmemleak object creation of module_alloc() (Kefeng Wang)
  - ck: mm: damon: change kmalloc() flags in damon_new_region() (Xin Hao)
  - ck: mm: damon: Fixed potential race issues when accessing "damon_regon" (Xin Hao)
  - xfs: don't take a spinlock unconditionally in the DIO fastpath (Dave Chinner)
  - anolis: configs: enable blk-iocost (Joseph Qi)
  - anolis: mm: Add polling/interrupt switch for DMA copy (Jiangbo Wu)
  - IDXD: claim device to support HugePage/THP segment size (Jiangbo Wu)
  - mm: Add DMA pages copy support for page migration (Jiangbo Wu)
  - dmaengine: idxd: Add DMA_MEMCPY_SG transfer support (Jiangbo Wu)
  - dmaengine: idxd: Add batch descriptor support (Jiangbo Wu)
  - dmaengine: Add DMA_MEMCPY_SG function (Jiangbo Wu)
  - anolis: mm: migrate: add interface to enable batch migration (Xu Yu)
  - mm: migrate: batch copying pages (Huang Ying)
  - mm: migrate: batch flushing TLB (Huang Ying)
  - mm: migrate: introduce batch page migration (Xu Yu)
  - mm: migrate: don't split THP for misplaced NUMA page (Yang Shi)
  - mm: migrate: return -ENOSYS if THP migration is unsupported (Yang Shi)
  - mm: migrate: simplify the logic for handling permanent failure (Yang Shi)
  - dmaengine: Revert "cookie bypass for out of order completion" (Ben Walker)
  - dmaengine: idxd: Support device_tx_status (Ben Walker)
  - dmaengine: idxd: idxd_desc.id is now a u16 (Ben Walker)
  - dmaengine: Add provider documentation on cookie assignment (Ben Walker)
  - dmaengine: Remove dma_set_tx_state (Ben Walker)
  - dmaengine: Providers should prefer dma_set_residue over dma_set_tx_state (Ben Walker)
  - dmaengine: Remove last, used from dma_tx_state (Ben Walker)
  - dmaengine: Remove the last, used parameters in dma_async_is_tx_complete (Ben Walker)
  - dmaengine: Move dma_set_tx_state to the provider API header (Ben Walker)
  - dmaengine: Remove dma_async_is_complete from client API (Ben Walker)
  - dmaengine: idxd: Separate user and kernel pasid enabling (Dave Jiang)
  - dmaengine: idxd: Use DMA API for in-kernel DMA with PASID (Jacob Pan)
  - iommu: Add PASID support for DMA mapping API users (Jacob Pan)
  - iommu/vt-d: Implement domain ops for attach_dev_pasid (Jacob Pan)
  - iommu: Add a helper to do PASID lookup from domain (Jacob Pan)
  - iommu: Add a per domain PASID for DMA API (Jacob Pan)
  - iommu: Add attach/detach_dev_pasid domain ops (Lu Baolu)
  - iommu/vt-d: Allow IOMMU bypass for SoC integrated devices (Jacob Pan)
  - iommu/vt-d: Enable ATS for the devices in SATC table (Yian Chen)
  - iommu/vt-d: Parse SATC reporting structure (Yian Chen)
  - iommu/vt-d: Add new enum value and structure for SATC (Yian Chen)
  - vfio/type1: Fix a bug in IOMMU dirty bit clearing (Sanjay Kumar)
  - vfio/type1: Fix a bug for getting dirty page (Liu Yi L)
  - idxd: Fix kernel bug found during DSA DWQ live migration (Yi Sun)
  - anolis: configs: Open CONFIG_RT_GROUP_SCHED (Xuchun Shang)
  - ck: mm: add an switch to enable in-use hugtlb pages migraiton (Xin Hao)
  - ck: mm: damon: add flush once in one sampling period (Xin Hao)
  - kvm: Support 512bit operand for emulated instruction (Yi Sun)
  - anolis: UAPI: Fix macro definition of KVM_HC_VM_ATTESTATION in include/uapi/linux/kvm_para.h (hanliyang)
  - ubsan: remove CONFIG_UBSAN_OBJECT_SIZE (Kees Cook)
  - ubsan: remove overflow checks (Andrey Ryabinin)
  - ubsan: disable unsigned-overflow check for i386 (Arnd Bergmann)
  - ubsan: remove UBSAN_MISC in favor of individual options (Kees Cook)
  - ubsan: enable for all*config builds (Kees Cook)
  - ubsan: disable UBSAN_TRAP for all*config (Kees Cook)
  - ubsan: disable object-size sanitizer under GCC (Kees Cook)
  - ubsan: move cc-option tests into Kconfig (Kees Cook)
  - ubsan: remove redundant -Wno-maybe-uninitialized (Kees Cook)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.10.134-12_rc3.an8]
changelog:
  - mm/hwpoison: check the subpage, not the head page (Matthew Wilcox (Oracle))
  - filemap: Correct the conditions for marking a folio as accessed (Matthew Wilcox (Oracle))
  - anolis: arm64: drivers/perf: fix DDRSS PMU interrupt initialization (Shuai Xue)
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) {CVE-2022-2588}
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo)
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) {CVE-2022-2586}
  - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Thadeu Lima de Souza Cascardo) {CVE-2022-2586}
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo) {CVE-2022-2586}
  - anolis: net/smc: Fix NULL pointer in smc_getname while first contact clcsock release (D. Wythe)
  - anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT (D. Wythe)
  - anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending (D. Wythe)
  - anolis: Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending" (D. Wythe)
  - anolis: Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending" (D. Wythe)
  - anolis: Revert "anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT" (D. Wythe)
  - anolis: mm: fcm: do not unconditionally call fcm_fixup_vma (Xu Yu)
  - anolis: net/smc: Introduce smc dim (Guangguan Wang)
  - anolis: Revert "net/smc: Introduce rdma dim for smc" (Guangguan Wang)
  - anolis: Revert "f2fs: remove false alarm on iget failure during GC" (Gao Xiang)
  - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) {CVE-2022-36946}
  - anolis: arm64: spectre: added a description of the parameter nospectre_bhb (Liu Song)
  - anolis: arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually (Liu Song)
  - anolis: random: speed up the initialization of module (Xingjun Liu)
  - anolis: random: introduce the initialization seed (Xingjun Liu)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.10.134-12_rc4.an8]
changelog:
  - anolis: net/smc: fix panic smc_tcp_syn_recv_sock() while closing listen socket (D. Wythe)
  - anolis: net/smc: fix deadlock when lgr terminating (D. Wythe)
  - anolis: Revert "anolis: net/smc: fix deadlock when lgr terminating" (D. Wythe)
  - anolis: net/smc: Reuse wr_id to recognize wc for tx or rx (Tony Lu)
  - anolis: net/smc: delay RDMA resource release until connecitons freed (Wen Gu)
  - anolis: net/smc: Use SO_REUSEADDR if keep clcsock (Tony Lu)
  - anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending (D. Wythe)
  - anolis: Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending" (Tony Lu)
  - anolis: Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending" (Tony Lu)
  - anolis: net/smc: Fix wr tasklet handler for rx/tx wc (Tony Lu)
  - anolis: net/smc: check clcsock->sk validity in fallback restore (Wen Gu)
  - anolis: net/smc: Keep first contact clcsock (Tony Lu)
  - anolis: Revert "anolis: net/smc: Keep first contact clcsock" (Wen Gu)
  - anolis: configs: let PCIe PMU driver be built in (Shuai Xue)
  - anolis: drivers/perf: add a separate config for DesignWare PCIe controller PMU (Shuai Xue)
  - anolis: drivers/perf: clean up unused variable (Shuai Xue)
  - anolis: drivers/perf: simplify extended capability founding (Shuai Xue)
  - anolis: drivers/perf: simplify Root Port check (Shuai Xue)
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu) {CVE-2022-2978}
  - anolis: mm: fcm: do not unconditionally call fixup ops (Xu Yu)
  - anolis: Revert "anolis: mm: fcm: do not unconditionally call fcm_fixup_vma" (Xu Yu)
  - anolis: arm_mpam: Fix the problem that error interrupt handling cannot exit normally (Shawn Wang)
  - anolis: arm_mpam: Fix wrong type conversion for dev_id in mpam_irq_handler() (Shawn Wang)
  - anolis: arm64: Remove GPL from pv_ops export for ARM/ARM64 (Shawn Wang)
  - anolis: fs/resctrl: Refine the outputs of last_cmd_status (Shawn Wang)
  - anolis: fs/resctrl: Extend the maximum number of CLOSIDs to 64 (Shawn Wang)
  - anolis: fs/resctrl: Clear the staged configs when destroying schemata list (Shawn Wang)
  - anolis: fs/resctrl: Fix the wrong if statement in resctrl_closid_is_dirty() (Shawn Wang)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.10.134-12.an8]
changelog:
  - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)
  - anolis: Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending" (Wen Gu)
  - anolis: Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending" (Wen Gu)
  - anolis: net/smc: Fix NULL sndbuf_desc in smc_cdc_tx_handler() (D. Wythe)
  - anolis: net/smc: Stop the CLC flow if there's no link to map RMBs on (Wen Gu)
  - anolis: net/smc: Fix UAF when fallback after lgr create (Tony Lu)
  - anolis: net/smc: Avoid use-after-free of smcibcq tasklet (Wen Gu)
  - anolis: net/smc: Restore rx queue depth (Tony Lu)
  - anolis: net/smc: Fix task hung in SMC-R terminating all link groups (Wen Gu)


author: Qiao Ma <mqaio@linux.alibaba.com> [5.10.134-12.2.an8]
changelog:
  - xfs: fix up non-directory creation in SGID directories (Christoph Hellwig) {CVE-2021-4037}
  - io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov) {CVE-2022-2602}


author: Qiao Ma <mqaio@linux.alibaba.com> [5.10.134-13_rc1.an8]
changelog:
  - configs: refresh the ANCK default configs (Qiao Ma)
  - usb: mon: make mmapped memory read only (Tadeusz Struk) {CVE-2022-43750}
  - fsdax: add dax_iomap_cow_copy() for dax zero (Shiyang Ruan)
  - fsdax: replace mmap entry in case of CoW (Shiyang Ruan)
  - fsdax: introduce dax_iomap_cow_copy() (Shiyang Ruan)
  - fsdax: output address in dax_iomap_pfn() and rename it (Shiyang Ruan)
  - fsdax: set a CoW flag when associate reflink mappings (Shiyang Ruan)
  - fsdax: introduce dax_lock_mapping_entry() (Shiyang Ruan)
  - dax: introduce holder for dax_device (Shiyang Ruan)
  - fsdax: fix function description (Shiyang Ruan)
  - xfs: add xfs_zero_range and xfs_truncate_page helpers (Shiyang Ruan)
  - fsdax: factor out a dax_fault_actor() helper (Shiyang Ruan)
  - fsdax: factor out helpers to simplify the dax fault code (Shiyang Ruan)
  - anolis: cachefiles: reset object->private to NULL when it's freed (Jingbo Xu)
  - anolis: mm: hugetext: Split cold adaptive thp (Rongwei Wang)
  - anolis: mm: hugetext: Update adaptive entries (Rongwei Wang)
  - anolis: mm: hugetext: Adapt executable and anonymous vma (Rongwei Wang)
  - anolis: mm: hugetext: Implement principal part (Rongwei Wang)
  - anolis: mm: hugetext: Introduce max_nr_hugetext (Rongwei Wang)
  - anolis: net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore (D. Wythe)
  - anolis: net/smc: reduce unnecessary blocking in smcr_lgr_reg_rmbs() (D. Wythe)
  - anolis: net/smc: use read semaphores to reduce unnecessary blocking in smc_buf_create() & smcr_buf_unuse() (D. Wythe)
  - anolis: net/smc: llc_conf_mutex refactor, replace it with rw_semaphore (D. Wythe)
  - anolis: net/smc: make SMC_LLC_FLOW_RKEY run concurrently (D. Wythe)
  - anolis: net/smc: allow confirm/delete rkey response deliver multiplex (D. Wythe)
  - anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: fix application data exception (D. Wythe)
  - anolis: net/smc: fix potential panic dues to unprotected smc_llc_srv_add_link() (D. Wythe)
  - anolis: Revert "anolis: net/smc: Avoid syscall block by async smc_conn_free" (D.Wythe)
  - anolis: Revert "anolis: net/smc: queue free_work to smc_close_wq instead of smc_hs_wq" (D.Wythe)
  - anolis: Revert "anolis: net/smc: do not use free work if fallback" (D.Wythe)
  - anolis: sched/fair: fix sched_group_identity_enabled read error (Cruz Zhao)
  - anolis: net/smc: Introduce lockfree cq for smc (Guangguan Wang)
  - anolis: net/smc: Do not clear snd buffer when buffer reuse (Guangguan Wang)
  - anolis: net/smc: remove redundant SMC_CMD_MAX_ATTR definition (Guangguan Wang)
  - anolis: net/smc: Introduce dim proc file (Guangguan Wang)
  - anolis: net/smc: add cq event_handler to get async event info (Guangguan Wang)
  - anolis: net/smc: disable multiple flag should keep in lgr struct (Guangguan Wang)
  - anolis: net/smc: Workaround for SMCv2 support with eRDMA devices (Wen Gu)
  - anolis: net/smc: Fix NULL sndbuf_desc in smc_cdc_tx_handler() (D. Wythe)
  - anolis: net/smc: Fix UAF when fallback after lgr create (Tony Lu)
  - anolis: net/smc: Avoid use-after-free of smcibcq tasklet (Wen Gu)
  - anolis: net/smc: Restore rx queue depth (Tony Lu)
  - anolis: net/smc: Fix task hung in SMC-R terminating all link groups (Wen Gu)
  - anolis: net/smc: fix panic smc_tcp_syn_recv_sock() while closing listen socket (D. Wythe)
  - anolis: net/smc: fix deadlock when lgr terminating (D. Wythe)
  - anolis: net/smc: Reuse wr_id to recognize wc for tx or rx (Tony Lu)
  - anolis: net/smc: delay RDMA resource release until connecitons freed (Wen Gu)
  - anolis: net/smc: Use SO_REUSEADDR if keep clcsock (Tony Lu)
  - anolis: net/smc: Fix wr tasklet handler for rx/tx wc (Tony Lu)
  - anolis: net/smc: check clcsock->sk validity in fallback restore (Wen Gu)
  - anolis: net/smc: Keep first contact clcsock (Tony Lu)
  - anolis: net/smc: Fix NULL pointer in smc_getname while first contact clcsock release (D. Wythe)
  - anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT (D. Wythe)
  - anolis: net/smc: Introduce smc dim (Guangguan Wang)
  - anolis: net/smc: change clcsock_release_lock from mutex to rw_semaphore (Guangguan Wang)
  - anolis: net/smc: check sk_ack_backlog before kernel_accept (Guangguan Wang)
  - anolis: net/smc: do not call cancel smc_listen_work when smc use fallback (Guangguan Wang)
  - anolis: net/smc: only cancel connect_work when connect nonblock (Guangguan Wang)
  - anolis: net/smc: Introduce multiple tcp listen works to enhance tcp_listen_work (Guangguan Wang)
  - anolis: net/smc: smc_sock_alloc after kernel_accept (Guangguan Wang)
  - anolis: net/smc: move sk_acceptq_{removed,add} into accept_q_lock's protection (Guangguan Wang)
  - anolis: net/smc: remove sock lock in smc_tcp_listen_work (Guangguan Wang)
  - anolis: net/smc: optimize for smc_accept_poll (Guangguan Wang)
  - anolis: net/smc: double check whether accept queue is empty before schedule_timeout (Guangguan Wang)
  - anolis: net/smc: only add wait queue when smc_accept_dequeue get null (Guangguan Wang)
  - anolis: net/smc: do not use free work if fallback (Guangguan Wang)
  - anolis: net/smc: queue free_work to smc_close_wq instead of smc_hs_wq (D. Wythe)
  - anolis: net/smc: remove useless path (Guangguan Wang)
  - anolis: net/smc: Change listen wq to unbound highpri wq (Guangguan Wang)
  - anolis: net/smc: Use diff TCP EXPR MAGIC to avoid network middleware do simple echo (D. Wythe)
  - anolis: net/smc: Fix potential leaks on queued_smc_hs (D. Wythe)
  - anolis: net/smc: remove solicited flag for wr send (Guangguan Wang)
  - anolis: net/smc: remove redundant ib_req_notify_cq (Guangguan Wang)
  - anolis: net/smc: clear ib_cq errno when ib_create_cq failed (Guangguan Wang)
  - anolis: net/smc: introduce 1RTT to SMC-R (D. Wythe)
  - anolis: net/smc: poll_cq one more time if the polled cqe is less than SMC_WR_MAX_POLL_CQE (Guangguan Wang)
  - anolis: net/smc: remove redundant ib_req_notify_cq (Guangguan Wang)
  - anolis: net/smc: combine send cq and recv cq into one cq (Guangguan Wang)
  - anolis: net/smc: move wc loop out of smc_wr_rx_process_cqes (Guangguan Wang)
  - anolis: net/smc: Avoid syscall block by async smc_conn_free (D. Wythe)
  - anolis: net/smc: Disable confirm rkey message exchange when only one link exists (D. Wythe)
  - anolis: net/smc: Release lock before waiting for CLC accept message (D. Wythe)
  - anolis: net/smc: compress frequency of credits announcement by cdc msg (Guangguan Wang)
  - anolis: net/smc: do not send msg in receiving process when tx is not blocked. (Guangguan Wang)
  - anolis: net/smc: Avoid clcsock access panic (Wen Gu)
  - anolis: net/smc: Fix NULL sk pointer when access clcsock (Tony Lu)
  - anolis: net/smc: don't req_notify until all CQEs drained (Wen Gu)
  - anolis: net/smc: Introduce rtoken validity check before sending (Wen Gu)
  - anolis: net/smc: Introduce a sysctl to disable {a}symmetric link group (Wen Gu)
  - anolis: net/smc: Multiple CQs per IB devices (Tony Lu)
  - anolis: net/smc: Introduce smc_ib_cq to bind link and cq (Tony Lu)
  - anolis: net/smc: Introduce link-related proc file (Guangguan Wang)
  - anolis: net/smc: Support rq flow control in smc-r link layer (Guangguan Wang)
  - anolis: net/smc: Add sysctl conrtol for handshake limiation (D. Wythe)
  - anolis: net/smc: Avoid unmapping bufs from unused links (Wen Gu)
  - anolis: net/smc: allow different subnet communication (Tony Lu)
  - anolis: net/smc: don't call ib_req_notify_cq in the send routine (Dust Li)
  - anolis: net/smc: Add TX and RX diagnosis information (Tony Lu)
  - anolis: net/smc: Introduce TCP to SMC replacement netlink commands (Tony Lu)
  - anolis: net/smc: Introduce SMC-R-related proc files (Tony Lu)
  - anolis: net/smc: Introduce sysctl tcp2smc (Tony Lu)
  - anolis: net/smc: Expose SMCPROTO_SMC and SMCPROTO_SMC6 to userspace (Tony Lu)
  - net/smc: Fix possible leaked pernet namespace in smc_init() (Chen Zhongjin)
  - net/smc: Fix an error code in smc_lgr_create() (Dan Carpenter)
  - net/smc: Support SO_REUSEPORT (Tony Lu)
  - net/smc: Unbind r/w buffer size from clcsock and make them tunable (Tony Lu)
  - net/smc: Introduce a specific sysctl for TEST_LINK time (Wen Gu)
  - net/smc: Stop the CLC flow if no link to map buffers on (Wen Gu)
  - net/smc: Remove redundant refcount increase (Yacan Liu)
  - net/smc: Enable module load on netlink usage (Stefan Raspl)
  - net/smc: Pass on DMBE bit mask in IRQ handler (Stefan Raspl)
  - s390/ism: Cleanups (Stefan Raspl)
  - net/smc: Eliminate struct smc_ism_position (Heiko Carstens)
  - anolis: net/smc: Revert all Anolis patches (Tony Lu)
  - anolis: cachefiles: add restore command to recover inflight ondemand read requests (Jia Zhu)
  - anolis: cachefiles: narrow the scope of triggering EPOLLIN events in ondemand mode (Jia Zhu)
  - anolis: cachefiles: resend an open request if the read request's object is closed (Jia Zhu)
  - anolis: cachefiles: extract ondemand info field from cachefiles_object (Jia Zhu)
  - anolis: cachefiles: introduce object ondemand state (Jia Zhu)
  - anolis: fscache: export fscache_object_wq (Jingbo Xu)
  - erofs: fix use-after-free of fsid and domain_id string (Jingbo Xu)
  - erofs: protect s_inodes with s_inode_list_lock for fscache (Dawei Li)
  - erofs: introduce 'domain_id' mount option (Jia Zhu)
  - erofs: Support sharing cookies in the same domain (Jia Zhu)
  - erofs: introduce a pseudo mnt to manage shared cookies (Jia Zhu)
  - erofs: introduce fscache-based domain (Jia Zhu)
  - erofs: code clean up for fscache (Jia Zhu)
  - anolis: erofs: fix the name of erofs_fscache_super_index_def (Jingbo Xu)
  - anolis: configs: Enable SM3/4 algorithm for default configs (Tianjia Zhang)
  - anolis: fscrypt: Add SM4 XTS/CTS symmetric algorithm support (Tianjia Zhang)
  - anolis: blk-crypto: Add support for SM4-XTS blk crypto mode (Tianjia Zhang)
  - anolis: mm: kidled: Fix sleeping when irqs are disabled in allocate_slab() (Shawn Wang)
  - anolis: RDMA/erdma: Update and bugfix (Kai)
  - anolis: Rename ycc to alicc due to some tech adjustments (Guanjun)
  - anolis: xfs: account extra freespace btree splits for multiple allocations (Gao Xiang)
  - anolis: sched: Support cpu burst in cgroup v2 (Yi Tao)
  - erofs: use kill_anon_super() to kill super in fscache mode (Jia Zhu)
  - cachefiles: make on-demand request distribution fairer (Xin Yin)
  - anolis: cachefiles: refactor cachefiles_ondemand_daemon_read() (Jingbo Xu)
  - cachefiles: fix error return code in cachefiles_ondemand_copen() (Sun Ke)
  - anolis: cachefiles: fix volume key setup for cachefiles_open (Jingbo Xu)
  - anolis: cachefiles: replace BUG_ON() with WARN_ON() (Jingbo Xu)
  - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (Chang S. Bae)
  - x86/fpu: Exclude dynamic states from init_fpstate (Chang S. Bae)
  - x86/fpu: Fix the init_fpstate size check with the actual size (Chang S. Bae)
  - x86/fpu: Configure init_fpstate attributes orderly (Chang S. Bae)
  - anolis: virtio-net: open napi for tx (Xuan Zhuo)
  - anolis: defconfigs: enable pmt feature as default on x86 platform (yjia)
  - anolis: mm: add switch for file zero page (Kaihao Bai)
  - anolis: mm: avoid MMAP_POPULATE filling zero page (Kaihao Bai)
  - anolis: mm: support filling in zero page if read fault in file hole (Kaihao Bai)
  - anolis: mm: mark zero page special and avoid being counted (Kaihao Bai)
  - anolis: mm: support unmapping zeropage of the same file offset (Kaihao Bai)
  - anolis: mm: add zero page judgement helper (Kaihao Bai)
  - crypto: arm64 - Fix unused variable compilation warnings of cpu_feature (Tianjia Zhang)
  - crypto: arm64/sm4 - add CE implementation for GCM mode (Tianjia Zhang)
  - crypto: arm64/sm4 - add CE implementation for CCM mode (Tianjia Zhang)
  - crypto: arm64/sm4 - add CE implementation for cmac/xcbc/cbcmac (Tianjia Zhang)
  - crypto: arm64/sm4 - add CE implementation for XTS mode (Tianjia Zhang)
  - crypto: arm64/sm4 - add CE implementation for CTS-CBC mode (Tianjia Zhang)
  - crypto: arm64/sm4 - export reusable CE acceleration functions (Tianjia Zhang)
  - crypto: arm64/sm4 - simplify sm4_ce_expand_key() of CE implementation (Tianjia Zhang)
  - crypto: arm64/sm4 - refactor and simplify CE implementation (Tianjia Zhang)
  - crypto: tcrypt - add SM4 cts-cbc/xts/xcbc test (Tianjia Zhang)
  - crypto: testmgr - add SM4 cts-cbc/xts/xcbc test vectors (Tianjia Zhang)
  - crypto: arm64/sm4 - refactor and simplify NEON implementation (Tianjia Zhang)
  - crypto: arm64/sm3 - add NEON assembly implementation (Tianjia Zhang)
  - crypto: arm64/sm3 - raise the priority of the CE implementation (Tianjia Zhang)
  - crypto: scatterwalk - remove duplicate function declarations (Tianjia Zhang)
  - crypto: ccm - use local variables instead of indirect references (Tianjia Zhang)
  - nilfs2: fix leak of nilfs_root in case of writer thread creation failure (Ryusuke Konishi) {CVE-2022-3646}
  - swiotlb: fix passing local variable to debugfs_create_ulong() (Tianyu Lan)
  - swiotlb: remove unused fields in io_tlb_mem (Chao Gao)
  - swiotlb: split up the global swiotlb lock (Tianyu Lan)
  - swiotlb: don't override user specified size in swiotlb_adjust_size (Christoph Hellwig)
  - swiotlb: dynamically allocate io_tlb_default_mem (Christoph Hellwig)
  - swiotlb: move global variables into a new io_tlb_mem structure (Claire Chang)
  - sched: Clear ttwu_pending after enqueue_task() (Tianchen Ding)
  - anolis: revert: pci: shorten waiting time in pci_reset_secondary_bus (Yang Su)
  - anolis: configs: enable CONFIG_NUMA_AWARE_SPINLOCKS for x86 and arm64 (Jing Zhang)
  - anolis: arm64: qspinlock: add CNA support for arm64 (Jing Zhang)
  - locking/qspinlock: Introduce the shuffle reduction optimization into CNA (Alex Kogan)
  - locking/qspinlock: Avoid moving certain threads between waiting queues in CNA (Alex Kogan)
  - locking/qspinlock: Introduce starvation avoidance into CNA (Alex Kogan)
  - locking/qspinlock: Introduce CNA into the slow path of qspinlock (Alex Kogan)
  - locking/qspinlock: Refactor the qspinlock slow path (Alex Kogan)
  - locking/qspinlock: Rename mcs lock/unlock macros and make them more generic (Alex Kogan)
  - anolis: arm64: paravirt: Merge pv_qspinlock_ops structure into pv_lock_ops (Jing Zhang)
  - anolis: mm: gup: allow to follow _PAGE_DEVMAP && !ZONE_DEVICE pages optionally (Zhu Yanhai)
  - io_uring: don't keep looping for more events if we can't flush overflow (Jens Axboe)
  - io_uring: don't convert to jiffies for waiting on timeouts (Jens Axboe)
  - io_uring: refactor io_cqring_wait (Pavel Begunkov)
  - io_uring: refactor scheduling in io_cqring_wait (Pavel Begunkov)
  - anolis: pci: shorten waiting time in pci_reset_secondary_bus (Yang Su)
  - anolis: sched: disable optimizing stack frame pointer of __schedule (Erwei Deng)
  - SEAM/TDX: Enable tdx config (shiqiangzhang)
  - SEAM: TDX: add IA32_TSX_CTRL MSR save/restore around TDH.SYS.INIT, TDH.SYS.LP.INIT and TDH.VP.ENTER (Chenyi Qiang)
  - KVM: TDX: Add perfmon support for TD (Chao Gao)
  - KVM: TDX: Restore MSR_IA32_DS_AREA after TD exit (Chao Gao)
  - TDX/SEAM: Load P-SEAMLDR via kernel if BIOS doesn't load it (shiqiangzhang)
  - X86: TDX: Restore GS.base after loading NP-SEAMLDR (shiqiangzhang)
  - KVM: VMX: Use the kernel's version of VMXOFF (Sean Christopherson)
  - KVM: VMX: Move Intel PT shenanigans out of VMXON/VMXOFF flows (Sean Christopherson)
  - x86/virt: Mark flags and memory as clobbered by VMXOFF (David P. Reed)
  - anolis: rtc: Fix set RTC time delay 500ms on some Zhaoxin SOCs (leoliu-oc)
  - anolis: memcg: Support memory.wmark_min_adj in cgroup v2 (Yi Tao)
  - nilfs2: fix NULL pointer dereference at nilfs_bmap_lookup_at_level() (Ryusuke Konishi) {CVE-2022-3621}
  - devlink: Fix use-after-free after a failed reload (Ido Schimmel) {CVE-2022-3625}
  - bnx2x: fix potential memory leak in bnx2x_tpa_stop() (Jianglei Nie) {CVE-2022-3542}
  - anolis: io_uring: fix another race of kthread park and wait for completion (Xiaoguang Wang)
  - io_uring: check sqring and iopoll_list before shedule (Xiaoguang Wang)
  - io_uring: check kthread parked flag before sqthread goes to sleep (Hao Xu)
  - anolis: IDXD: Clear 'Cache Control' for batch descriptor (Jiangbo Wu)
  - anolis: mm: kidled: consider CONFIG_MEMORY_HOTPLUG uncertainty (Rongwei Wang)
  - nilfs2: fix use-after-free bug of struct nilfs_root (Ziyang Zhang) {CVE-2022-3649}
  - sched/fair: Adjust the allowed NUMA imbalance when SD_NUMA spans multiple LLCs (Mel Gorman)
  - sched/fair: Improve consistency of allowed NUMA balance calculations (Mel Gorman)
  - crypto: ccp - During shutdown, check SEV data pointer before using (Tom Lendacky)
  - anolis: bpf: add reserve fields for bpf structures (Tianchen Ding)
  - anolis: iommu/svm: fix a bug of dereferencing null ptr (Xuchun Shang)
  - x86/speculation: Add RSB VM Exit protections (Daniel Sneddon)
  - x86/speculation: Add LFENCE to RSB fill sequence (Pawan Gupta)
  - anolis: crypto: iax: Fix deflate crash caused by global shared tfm (Kun(llfl))
  - anolis: perf arm-spe: Don't update pid/tid if has set it (Jing Zhang)
  - mm/mremap: hold the rmap lock in write mode when moving page table entries. (Aneesh Kumar K.V)
  - anolis: perf tools: fix adding extraneous files to perf (Jing Zhang)
  - io_uring/af_unix: defer registered files gc to io_uring release (Pavel Begunkov) {CVE-2022-2602}
  - anolis: erofs,ovl: enable RCU'd ->get_acl() (Jingbo Xu)
  - vfs: add rcu argument to ->get_acl() callback (Miklos Szeredi)
  - anolis: erofs,ovl: bypass [override|revert]_creds for overlayfs (Jingbo Xu)
  - anolis: irqbypass: optimize list traversal and lock contention (Zhiheng Tao)
  - anolis: arm_mpam: Fix kernel boot failure when the firmware does not support MPAM (Shawn Wang)
  - anolis: iommu/vt-d: Retain PASID entry if guest switched remapping mode (Yang Weijiang)
  - anolis: crypto: tdm: Support dynamic protection for SCT and IDT by HYGON TDM (chench)
  - anolis: crypto: tdm: Compile the tdm driver into ccp.ko (chench)
  - anolis: crypto: ccp: Add psp mutex enable ioctl support (chench)
  - anolis: crypto: ccp: concurrent psp access support between user and kernel space (chench)
  - anolis: tpm: Fix keyctl failure of loading an encrypted key (chench)
  - anolis: tpm: keyring service support creating encrypted key from user provided plaintext key (chench)
  - anolis: alinux: tpm: add Hygon TPM2 driver (chench)
  - anolis: crypto: tdm: Add Hygon TDM driver (chench)
  - anolis: crypto: ccp: Add another mailbox interrupt support for PSP sending command to X86 (chench)
  - anolis: crypto: ccp: Add a new interface for X86 sending command to PSP (chench)
  - anolis: sched: introduce HT_STABLE feature (Peng Wang)
  - anolis: mm: kidled: improve efficiency of scanning valid PFNs (Rongwei Wang)
  - anolis: iommu/vt-d: Fix qemu warning caused by intel_pasid_setup_second_level() called twice (Yi Sun)
  - anolis: iommu/vt-d: Only enable SLT if guest is passthrough mode (Yi Sun)
  - x86/sgx: Drop 'page_index' from sgx_backing (Sean Christopherson)
  - x86/sgx: Set active memcg prior to shmem allocation (Kristen Carlson Accardi)
  - selftests/sgx: Page removal stress test (Reinette Chatre)
  - selftests/sgx: Test reclaiming of untouched page (Reinette Chatre)
  - selftests/sgx: Test invalid access to removed enclave page (Reinette Chatre)
  - selftests/sgx: Test faulty enclave behavior (Reinette Chatre)
  - selftests/sgx: Test complete changing of page type flow (Reinette Chatre)
  - selftests/sgx: Introduce TCS initialization enclave operation (Reinette Chatre)
  - selftests/sgx: Introduce dynamic entry point (Reinette Chatre)
  - selftests/sgx: Test two different SGX2 EAUG flows (Reinette Chatre)
  - selftests/sgx: Add test for TCS page permission changes (Reinette Chatre)
  - selftests/sgx: Add test for EPCM permission changes (Reinette Chatre)
  - Documentation/x86: Introduce enclave runtime management section (Reinette Chatre)
  - x86/sgx: Free up EPC pages directly to support large page ranges (Reinette Chatre)
  - x86/sgx: Support complete page removal (Reinette Chatre)
  - x86/sgx: Support modifying SGX page type (Reinette Chatre)
  - x86/sgx: Tighten accessible memory range after enclave initialization (Reinette Chatre)
  - x86/sgx: Support adding of pages to an initialized enclave (Reinette Chatre)
  - x86/sgx: Support restricting of enclave page permissions (Reinette Chatre)
  - x86/sgx: Support VA page allocation without reclaiming (Reinette Chatre)
  - x86/sgx: Export sgx_encl_page_alloc() (Jarkko Sakkinen)
  - x86/sgx: Export sgx_encl_{grow,shrink}() (Reinette Chatre)
  - x86/sgx: Keep record of SGX page type (Reinette Chatre)
  - x86/sgx: Create utility to validate user provided offset and length (Reinette Chatre)
  - x86/sgx: Make sgx_ipi_cb() available internally (Reinette Chatre)
  - x86/sgx: Move PTE zap code to new sgx_zap_enclave_ptes() (Reinette Chatre)
  - x86/sgx: Rename sgx_encl_ewb_cpumask() as sgx_encl_cpumask() (Reinette Chatre)
  - x86/sgx: Export sgx_encl_ewb_cpumask() (Reinette Chatre)
  - x86/sgx: Support loading enclave page without VMA permissions check (Reinette Chatre)
  - x86/sgx: Add wrapper for SGX2 EAUG function (Reinette Chatre)
  - x86/sgx: Add wrapper for SGX2 EMODT function (Reinette Chatre)
  - x86/sgx: Add wrapper for SGX2 EMODPR function (Reinette Chatre)
  - x86/sgx: Add short descriptions to ENCLS wrappers (Reinette Chatre)
  - x86/sgx: Ensure no data in PCMD page after truncate (Reinette Chatre)
  - x86/sgx: Fix race between reclaimer and page fault handler (Reinette Chatre)
  - x86/sgx: Obtain backing storage page with enclave mutex held (Reinette Chatre)
  - x86/sgx: Mark PCMD page as dirty when modifying contents (Reinette Chatre)
  - x86/sgx: Disconnect backing page references from dirty status (Reinette Chatre)
  - x86/sgx: Free backing memory after faulting the enclave page (Jarkko Sakkinen)
  - x86/sgx: Fix missing poison handling in reclaimer (Reinette Chatre)
  - x86/sgx: Fix NULL pointer dereference on non-SGX systems (Dave Hansen)
  - x86/sgx: Add an attribute for the amount of SGX memory in a NUMA node (Jarkko Sakkinen)
  - x86/sgx: Fix minor documentation issues (Reinette Chatre)
  - selftests/sgx: Add test for multiple TCS entry (Reinette Chatre)
  - selftests/sgx: Enable multiple thread support (Reinette Chatre)
  - selftests/sgx: Add page permission and exception test (Reinette Chatre)
  - selftests/sgx: Rename test properties in preparation for more enclave tests (Reinette Chatre)
  - selftests/sgx: Provide per-op parameter structs for the test enclave (Jarkko Sakkinen)
  - selftests/sgx: Fix corrupted cpuid macro invocation (Jarkko Sakkinen)
  - selftests/sgx: Add a new kselftest: Unclobbered_vdso_oversubscribed (Jarkko Sakkinen)
  - selftests/sgx: Move setup_test_encl() to each TEST_F() (Jarkko Sakkinen)
  - selftests/sgx: Encpsulate the test enclave creation (Jarkko Sakkinen)
  - selftests/sgx: Dump segments and /proc/self/maps only on failure (Jarkko Sakkinen)
  - selftests/sgx: Create a heap for the test enclave (Jarkko Sakkinen)
  - selftests/sgx: Make data measurement for an enclave segment optional (Jarkko Sakkinen)
  - selftests/sgx: Assign source for each segment (Jarkko Sakkinen)
  - selftests/sgx: Fix a benign linker warning (Sean Christopherson)
  - anolis: efi: cper: fix raw data register iteration (Shuai Xue)
  - perf arm-spe: augment the data source type with neoverse_spe list (Jing Zhang)
  - perf c2c: Update documentation for new display option 'peer' (Leo Yan)
  - perf c2c: Use 'peer' as default display for Arm64 (Leo Yan)
  - perf c2c: Sort on peer snooping for load operations (Leo Yan)
  - perf c2c: Refactor display string (Leo Yan)
  - perf c2c: Refactor node header (Leo Yan)
  - perf c2c: Rename dimension from 'percent_hitm' to 'percent_costly_snoop' (Leo Yan)
  - perf c2c: Use explicit names for display macros (Leo Yan)
  - perf c2c: Add mean dimensions for peer operations (Leo Yan)
  - perf c2c: Add dimensions of peer metrics for cache line view (Leo Yan)
  - perf c2c: Add dimensions for peer load operations (Leo Yan)
  - perf c2c: Output statistics for peer snooping (Leo Yan)
  - perf mem: Add statistics for peer snooping (Leo Yan)
  - perf arm-spe: Use SPE data source for neoverse cores (Ali Saidi)
  - perf mem: Print snoop peer flag (Leo Yan)
  - perf tools: Sync addition of PERF_MEM_SNOOPX_PEER (Ali Saidi)
  - perf arm64: Add missing -I for tools/arch/arm64/include/ to find asm/sysreg.h when building arm_spe.h (Leo Yan)
  - tools headers arm64: Sync arm64's cputype.h with the kernel sources (Arnaldo Carvalho de Melo)
  - tools arm64: Import cputype.h (Ali Saidi)
  - tools: arm64: Import sysreg.h (Raghavendra Rao Ananta)
  - perf c2c: Update documentation for store metric 'N/A' (Leo Yan)
  - perf c2c: Add dimensions for 'N/A' metrics of store operation (Leo Yan)
  - perf mem: Add stats for store operation with no available memory level (Leo Yan)
  - anolis: perf c2c: split c2c and spe-c2c (Jing Zhang)
  - nvme: handle effects after freeing the request (Keith Busch)
  - anolis: sched: make __balance_callback() noinline (Cruz Zhao)
  - KEYS: asymmetric: enforce SM2 signature use pkey algo (Tianjia Zhang)
  - sign-file: Fix confusing error messages (Tianjia Zhang)
  - crypto: arm64/sm4 - Fix wrong dependency of NEON/CE implementation (Tianjia Zhang)
  - crypto: sm3,sm4 - move into crypto directory (Jason A. Donenfeld)
  - crypto: arm64/sm4 - add ARMv8 Crypto Extensions implementation (Tianjia Zhang)
  - crypto: arm64/sm4 - add ARMv8 NEON implementation (Tianjia Zhang)
  - crypto: arm64/sm4-ce - rename to sm4-ce-cipher (Tianjia Zhang)
  - crypto: sm4 - export sm4 constant arrays (Tianjia Zhang)
  - crypto: tcrypt - remove all multibuffer ahash tests (Tianjia Zhang)
  - crypto: tcrypt - add asynchronous speed test for SM3 (Tianjia Zhang)
  - crypto: x86/sm3 - add AVX assembly implementation (Tianjia Zhang)
  - crypto: sm3 - make dependent on sm3 library (Tianjia Zhang)
  - crypto: sm2 - make dependent on sm3 library (Tianjia Zhang)
  - crypto: arm64/sm3-ce - make dependent on sm3 library (Tianjia Zhang)
  - crypto: sm3 - create SM3 stand-alone library (Tianjia Zhang)
  - crypto: s390/sha512 - Use macros instead of direct IV numbers (Tianjia Zhang)
  - crypto: sparc/sha - remove duplicate hash init function (Tianjia Zhang)
  - crypto: powerpc/sha - remove duplicate hash init function (Tianjia Zhang)
  - crypto: mips/sha - remove duplicate hash init function (Tianjia Zhang)
  - crypto: sha256 - remove duplicate generic hash init function (Tianjia Zhang)
  - net/tls: simplify the tls_set_sw_offload function (Tianjia Zhang)
  - mm/mprotect.c: optimize error detection in do_mprotect_pkey() (Tianjia Zhang)
  - crypto: public_key: Remove redundant header file from public_key.h (Tianjia Zhang)
  - ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (Shuai Xue)
  - dmaengine: idxd: fix RO device state error after been disabled/reset (Fengqian Gao)
  - dmaengine: idxd: Make max batch size attributes in sysfs invisible for Intel IAA (Xiaochen Shen)
  - dmaengine: idxd: Fix max batch size for Intel IAA (Xiaochen Shen)
  - anolis: driver/crypto: Introduce HGSC_CERT_IMPORT API. (fangbaoshun)
  - perf evsel: Make evsel__env() always return a valid env (Kim Phillips)
  - scsi: target: tcmu: Make cmd_ring_size changeable via configfs (Guixin Liu)
  - scsi: target: tcmu: Adjust names of variables and definitions (Bodo Stroesser)
  - mm,hwpoison: check mm when killing accessing process (Shuai Xue)
  - mailbox: pcc: Fix an invalid-load caught by the address sanitizer (Liu Song)
  - anolis: RDMA/erdma: User interface for comp vector num and bugfix (Kai)
  - watchdog: wdat_wdt: Stop watchdog when uninstalling module (Liu Xinpeng)
  - watchdog: wdat_wdt: Using the existing function to check parameter timeout (Liu Xinpeng)
  - perf/x86/intel: Update the FRONTEND MSR mask on Sapphire Rapids (Kan Liang)
  - perf/x86/intel/uncore: Fix Intel SPR M3UPI event constraints (Kan Liang)
  - perf/x86/intel/uncore: Fix Intel SPR M2PCIE event constraints (Kan Liang)
  - perf/x86/intel/uncore: Fix Intel SPR IIO event constraints (Kan Liang)
  - perf/x86/intel/uncore: Fix Intel SPR CHA event constraints (Kan Liang)
  - perf/x86/intel/uncore: Fix invalid unit check (Kan Liang)
  - perf/x86/intel: Fix instructions:ppp support in Sapphire Rapids (Kan Liang)
  - perf/x86/intel: Add more events requires FRONTEND MSR on Sapphire Rapids (Kan Liang)
  - perf/x86/intel/uncore: Fix a kernel WARNING triggered by maxcpus=1 (Kan Liang)
  - platform/x86/intel-uncore-freq: Add Sapphire Rapids server support (Artem Bityutskiy)
  - xfs: fix up non-directory creation in SGID directories (Christoph Hellwig) {CVE-2021-4037}
  - anolis: arm64: add CPU freq sample on pcct non-support (Guanghui Feng)
  - anolis: sched: support group identity in cgroup v2 (Yi Tao)
  - intel_idle: make SPR C1 and C1E be independent (Artem Bityutskiy)
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long)
  - io_uring: disable polling pollfree files (Pavel Begunkov) {CVE-2022-3176}
  - anolis: configs: enable CONFIG_WIREGUARD for x86 and arm64 (Qiao Ma)
  - anolis: configs: refresh anolis default configs (Qiao Ma)
  - anolis: arm64: drivers/perf: modify the return value of unsupport event in m1_cmn_pmu (Gou Hao)
  - anolis: Kconfig: Enable group identity (Yi Tao)
  - anolis: configs: Enable group identity (Yi Tao)
  - anolis: sched/fair: Group Identity flips using stop_machine() (Cruz Zhao)
  - anolis: sched/fair: Introduce fast path for group identity unused (Cruz Zhao)
  - anolis: sched/fair: Introduce sysctl interface to enable group identity (Cruz Zhao)
  - net: hinic: avoid kernel hung in hinic_get_stats64() (Qiao Ma)
  - net: hinic: fix bug that ethtool get wrong stats (Qiao Ma)
  - anolis: xfs: check atomic write flag before set (Joseph Qi)
  - anolis: xfs: restrict atomic set ioctl permission (Joseph Qi)
  - printk: Drop console_sem during panic (Stephen Brennan)
  - printk: Avoid livelock with heavy printk during panic (Stephen Brennan)
  - printk: disable optimistic spin during panic (Stephen Brennan)
  - printk: Add panic_in_progress helper (Stephen Brennan)
  - scsi: mpt3sas: Fix incorrectly assigned error return and check (Gu Mi)
  - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (Gu Mi)
  - scsi: mpt3sas: Transition IOC to Ready state during shutdown (Gu Mi)
  - scsi: mpt3sas: Handle firmware faults during second half of IOC init (Gu Mi)
  - scsi: mpt3sas: Handle firmware faults during first half of IOC init (Gu Mi)
  - scsi: mpt3sas: Fix incorrect system timestamp (Gu Mi)
  - scsi: mpt3sas: Signedness bug in _base_get_diag_triggers() (Gu Mi)
  - scsi: mpt3sas: Handle trigger page after firmware update (Gu Mi)
  - scsi: mpt3sas: Add persistent MPI trigger page (Gu Mi)
  - scsi: mpt3sas: Add persistent SCSI sense trigger page (Gu Mi)
  - scsi: mpt3sas: Add persistent Event trigger page (Gu Mi)
  - scsi: mpt3sas: Add persistent Master trigger page (Gu Mi)
  - scsi: mpt3sas: Add persistent trigger pages support (Gu Mi)
  - scsi: mpt3sas: Sync time periodically between driver and firmware (Gu Mi)
  - anolis: erofs: implement fscache-based data readahead (Jingbo Xu)
  - anolis: fscache,cachefiles: add fscache_prepare_read() helper (Jingbo Xu)
  - anolis: cachefiles: maintain a file descriptor to the backing file (Jingbo Xu)
  - perf tools: Set COMPAT_NEED_REALLOCARRAY for CONFIG_AUXTRACE=1 (Arnaldo Carvalho de Melo)
  - KVM: Fix references to non-existent KVM_CAP_TRIPLE_FAULT_EVENT (Sean Christopherson)
  - KVM: VMX: Enable Notify VM exit (Tao Xu)
  - KVM: selftests: Add a test to get/set triple fault event (Chenyi Qiang)
  - KVM: x86: Extend KVM_{G,S}ET_VCPU_EVENTS to support pending triple fault (Chenyi Qiang)
  - KVM: VMX: Remove redundant handling of bus lock vmexit (Hao Xiang)
  - KVM: nVMX: Fix nested bus lock VM exit (Chenyi Qiang)
  - KVM: X86: Add the Document for KVM_CAP_X86_BUS_LOCK_EXIT (Chenyi Qiang)
  - KVM: VMX: Enable bus lock VM exit (Chenyi Qiang)
  - KVM: X86: Reset the vcpu->run->flags at the beginning of vcpu_run (Chenyi Qiang)
  - x86/bus_lock: Don't assume the init value of DEBUGCTLMSR.BUS_LOCK_DETECT to be zero (Chenyi Qiang)
  - KVM: X86: Add support for the emulation of DR6_BUS_LOCK bit (Chenyi Qiang)
  - KVM: X86: Rename DR6_INIT to DR6_ACTIVE_LOW (Chenyi Qiang)
  - KVM: X86: Expose bus lock debug exception to guest (Paolo Bonzini)
  - KVM: VMX: read/write MSR_IA32_DEBUGCTLMSR from GUEST_IA32_DEBUGCTL (Like Xu)
  - KVM: Expose AVX_VNNI instruction to guset (Jiaqing Huang)
  - KVM: x86: Expose AVX512_FP16 for supported CPUID (Jiaqing Huang)
  - KVM: VMX: enable IPI virtualization (Chao Gao)
  - kvm: selftests: Add KVM_CAP_MAX_VCPU_ID cap test (Zeng Guang)
  - KVM: x86: Allow userspace to set maximum VCPU id for VM (Zeng Guang)
  - KVM: Move kvm_arch_vcpu_precreate() under kvm->lock (Zeng Guang)
  - KVM: VMX: Clean up vmx_refresh_apicv_exec_ctrl() (Zeng Guang)
  - KVM: x86: Support interrupt dispatch in x2APIC mode with APIC-write VM exit (Zeng Guang)
  - KVM: VMX: Report tertiary_exec_control field in dump_vmcs() (Robert Hoo)
  - KVM: VMX: Detect Tertiary VM-Execution control when setup VMCS config (Robert Hoo)
  - KVM: VMX: Extend BUILD_CONTROLS_SHADOW macro to support 64-bit variation (Robert Hoo)
  - anolis: configs: enable CONFIG_PAGE_PREZERO on x86 (Xu Yu)
  - anolis: mm: prezero: add page clear engine with DMA device hardware offloading (Xiaochen Shen)
  - anolis: dmaengine: add a new DMA flag for direct data writes to be nontemporal (Xiaochen Shen)
  - anolis: dmaengine: idxd: add memset operation (Dave Jiang)
  - anolis: mm: prezero: make anon THP use __GFP_ZERO (Xiaochen Shen)
  - anolis: mm: prezero: allocate page from tail for __GFP_ZERO (Xu Yu)
  - anolis: mm: prezero: pass gfp parameter to rmqueue_bulk (Xu Yu)
  - anolis: mm: prezero: set PG_zeroed after free to buddy (Xu Yu)
  - anolis: mm: prezero: introduce kprezerod (Xiaochen Shen)
  - anolis: mm: prezero: add pre-zeroed page statistics (Xiaochen Shen)
  - anolis: mm: prezero: manage pre-zeroed pages (Xiaochen Shen)
  - anolis: mm: prezero: clear page->private out of post_alloc_hook (Xiaochen Shen)
  - anolis: mm: prezero: clear page->private when free pages (Xu Yu)
  - anolis: mm: prezero: introduce PAGE_ZEROED bit (Xiaochen Shen)
  - anolis: mm: prezero: introduce PG_zeroed flag (Xu Yu)
  - anolis: mm: prezero: introduce PAGE_PREZERO config (Xiaochen Shen)
  - anolis: crypto/ycc: Fix error config for the register REG_RING_CFG (Guanjun)
  - perf/x86/amd/core: Fix reloading events for SVM (Sandipan Das)
  - perf/x86/amd: Run AMD BRS code only on supported hw (Borislav Petkov)
  - perf/x86/amd: Fix AMD BRS period adjustment (Peter Zijlstra)
  - perf/x86/amd: Remove unused variable 'hwc' (Zucheng Zheng)
  - perf script ibs: Support new IBS bits in raw trace dump (Ravi Bangoria)
  - perf tool ibs: Sync AMD IBS header file (Ravi Bangoria)
  - perf report: Add support to print a textual representation of IBS raw sample data (Kim Phillips)
  - perf evlist: Use the right prefix for 'struct evlist' sample id lookup methods (Arnaldo Carvalho de Melo)
  - perf evlist: Use the right prefix for 'struct evlist' sample parsing methods (Arnaldo Carvalho de Melo)
  - perf evlist: Use the right prefix for 'struct evlist' raw samples methods (Arnaldo Carvalho de Melo)
  - perf report: Add tools/arch/x86/include/asm/amd-ibs.h (Kim Phillips)
  - perf env: Add perf_env__cpuid, perf_env__{nr_}pmu_mappings (Kim Phillips)
  - perf/x86/ibs: Add new IBS register bits into header (Ravi Bangoria)
  - perf header: Record non-CPU PMU capabilities (Ravi Bangoria)
  - perf inject: Keep some features sections from input file (Adrian Hunter)
  - libperf: Add preadn() (Adrian Hunter)
  - perf header: Store PMU caps in an array of strings (Ravi Bangoria)
  - perf header: Pass "cpu" pmu name while printing caps (Ravi Bangoria)
  - perf header: Support HYBRID_CPU_PMU_CAPS feature (Jin Yao)
  - perf header: Support HYBRID_TOPOLOGY feature (Jin Yao)
  - perf pmu: Add hybrid helper functions (Jin Yao)
  - perf pmu: Save detected hybrid pmus to a global pmu list (Jin Yao)
  - perf pmu: Parse pmu caps sysfs only once (Ravi Bangoria)
  - perf record ibs: Warn about sampling period skew (Ravi Bangoria)
  - perf/amd/ibs: Advertise zen4_ibs_extensions as pmu capability (Ravi Bangoria)
  - perf/amd/ibs: Add support for L3 miss filtering (Ravi Bangoria)
  - perf/amd/ibs: Use ->is_visible callback for dynamic (Ravi Bangoria)
  - perf/x86/amd/uncore: Add PerfMonV2 DF event format (Sandipan Das)
  - perf/x86/amd/uncore: Detect available DF counters (Sandipan Das)
  - perf/x86/amd/uncore: Use attr_update for format attributes (Sandipan Das)
  - perf/x86/amd/uncore: Use dynamic events array (Sandipan Das)
  - perf/x86/amd/core: Add PerfMonV2 overflow handling (Sandipan Das)
  - perf/x86/amd/core: Add PerfMonV2 counter control (Sandipan Das)
  - perf/x86/amd/core: Detect available counters (Sandipan Das)
  - perf/x86/amd/core: Detect PerfMonV2 support (Sandipan Das)
  - x86/msr: Add PerfCntrGlobal* registers (Sandipan Das)
  - x86/cpufeatures: Add PerfMonV2 feature bit (Sandipan Das)
  - perf report: Add "addr_from" and "addr_to" sort dimensions (Stephane Eranian)
  - perf/x86/amd: Add idle hooks for branch sampling (Stephane Eranian)
  - ACPI: Add perf low power callback (Stephane Eranian)
  - perf/x86/amd: Make Zen3 branch sampling opt-in (Stephane Eranian)
  - perf/x86/amd: Add AMD branch sampling period adjustment (Stephane Eranian)
  - perf/x86/amd: Enable branch sampling priv level filtering (Stephane Eranian)
  - perf/x86/amd: Add branch-brs helper event for Fam19h BRS (Stephane Eranian)
  - perf/x86/amd: Add AMD Fam19h Branch Sampling support (Stephane Eranian)
  - x86/cpufeatures: Add AMD Fam19h Branch Sampling feature (Stephane Eranian)
  - perf/core: Add perf_clear_branch_entry_bitfields() helper (Stephane Eranian)
  - x86/events/amd/iommu: Remove redundant assignment to variable (Colin Ian King)
  - perf/x86/amd/ibs: Add bitfield definitions in new (Kim Phillips)
  - perf/amd/uncore: Allow the driver to be built as a module (Kim Phillips)
  - x86/cpu: Add get_llc_id() helper function (Kim Phillips)
  - perf/amd/uncore: Clean up header use, use <linux/ include paths instead of <asm/ (Kim Phillips)
  - perf/amd/uncore: Simplify code, use free_percpu()'s built-in check for NULL (Kim Phillips)
  - PCI/ERR: Retain status from error notification (Keith Busch)
  - anolis: mm: Add ioremap_nohuge() func support (Xin Hao)
  - crypto: iax: Break out of loop after list del in del_iax_wq() (Tom Zanussi)
  - crypto: iax: fix incorrect desc ptr being used for error out (Dave Jiang)
  - crypto: iax: fix usage of uninit ptr in iax_compress() call (Dave Jiang)
  - crypto: iax: remove double free on iax_device (Dave Jiang)
  - crypto: Enable iax_crypto_enable and iax_crypto_disable (Tom Zanussi)
  - crypto: Update IDXD support for IAX crypto (Tom Zanussi)
  - crypto: iax - Add IAX crypto stats (Tom Zanussi)
  - crypto: iax - Add async interface support (Tom Zanussi)
  - crypto: iax - Introduce iax hardware compression accelerator (Tom Zanussi)
  - lib/hexdump: Allow print_hexdump() to print rowsize of 8 (Tom Zanussi)
  - dmaengine: idxd: Add private_data to struct idxd_wq (Tom Zanussi)
  - dmaengine: idxd: Export wq resource management functions (Tom Zanussi)
  - dmaengine: idxd: Export descriptor management functions (Tom Zanussi)
  - dmaengine: idxd: add external module driver support for dsa_bus_type (Dave Jiang)
  - EDAC/i10nm: Release mdev/mbase when failing to detect HBM (Qiuxu Zhuo)
  - EDAC/skx_common: Set the memory type correctly for HBM memory (Qiuxu Zhuo)
  - EDAC/mc: Add new HBM2 memory type (Naveen Krishna Chatradhi)
  - EDAC/i10nm: Add support for high bandwidth memory (Qiuxu Zhuo)
  - anolis: virtio_mem: arm enable virtio_mem (jingshan)
  - mm/ioremap: fix iomap_max_page_shift (Christophe Leroy)
  - anolis: ovl: change pr_warn() to pr_warn_ratelimited() (Joseph Qi)
  - scsi: mpt3sas: Fix incorrect 4GB boundary check (Gu Mi)
  - scsi: mpt3sas: Force reply post array allocations to be within same 4 GB region (Gu Mi)
  - scsi: mpt3sas: Force reply post buffer allocations to be within same 4GB region (Gu Mi)
  - scsi: mpt3sas: Force reply buffer allocations to be within same 4 GB region (Gu Mi)
  - scsi: mpt3sas: Force sense buffer allocations to be within same 4 GB region (Gu Mi)
  - scsi: mpt3sas: Force chain buffer allocations to be within same 4 GB region (Gu Mi)
  - scsi: mpt3sas: Force PCIe scatterlist allocations to be within same 4 GB region (Gu Mi)
  - ip: fix triggering of 'icmp redirect' (Nicolas Dichtel)
  - ecryptfs: fix uid translation for setxattr on security.capability (Miklos Szeredi)
  - ovl: show "userxattr" in the mount data (Giuseppe Scrivano)
  - ovl: unprivieged mounts (Miklos Szeredi)
  - ovl: do not get metacopy for userxattr (Miklos Szeredi)
  - ovl: do not fail because of O_NOATIME (Miklos Szeredi)
  - ovl: do not fail when setting origin xattr (Miklos Szeredi)
  - ovl: user xattr (Miklos Szeredi)
  - ovl: check privs before decoding file handle (Miklos Szeredi)
  - vfs: verify source area in vfs_dedupe_file_range_one() (Miklos Szeredi)
  - vfs: move cap_convert_nscap() call into vfs_setxattr() (Miklos Szeredi)
  - anolis: Revert "anolis: crypto/ycc: Add hash algorithm support" (Guanjun)
  - anolis: Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending" (Wen Gu)
  - anolis: Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending" (Wen Gu)
  - anolis: net/smc: Fix NULL sndbuf_desc in smc_cdc_tx_handler() (D. Wythe)
  - anolis: net/smc: Stop the CLC flow if there's no link to map RMBs on (Wen Gu)
  - anolis: net/smc: Fix UAF when fallback after lgr create (Tony Lu)
  - anolis: net/smc: Avoid use-after-free of smcibcq tasklet (Wen Gu)
  - anolis: net/smc: Restore rx queue depth (Tony Lu)
  - anolis: net/smc: Fix task hung in SMC-R terminating all link groups (Wen Gu)
  - anolis: PHYTIUM: config: Add PHYTIUM ft2500 chip HW support (Xin Hao)
  - anolis: PHYTIUM: smmu: one device per iommu group for VF/PF passthrough (Wang Yinfeng)
  - anolis: PHYTIUM: Add cputypes and machine support (Wang Yinfeng)
  - anolis: PHYTIUM: rtc: Add Phytium rtc device support (Chen Baozi)
  - anolis: PHYTIUM: ACPI: APD: Add clock frequency for for phytium i2c control (Xin Hao)
  - anolis: PHYTIUM: ft2000: fixed smmu tlb timeout by msi iommu map (Zou Cao)
  - anolis: PHYTIUM: iommu: add iommu_hwfix to work around arm-smmu hw issues (Zou Cao)
  - anolis: PHYTIUM: Fix S2500 can't produce kdump core file (liwencheng)
  - anolis: PHYTIUM: irqchip: Add Phytium 2500 GIC ITS driver (liwencheng)
  - perf arm-spe: Don't set data source if it's not a memory operation (Leo Yan)
  - perf mem: Trace physical address for Arm SPE events (Leo Yan)
  - perf arm-spe: Fix SPE events with phys addresses (Timothy Hayes)
  - perf arm-spe: Fix addresses of synthesized SPE events (Timothy Hayes)
  - perf docs: Add man page entry for Arm SPE (James Clark)
  - perf arm-spe: Use advertised caps/min_interval as default sample_period (German Gomez)
  - perf arm-spe: Synthesize SPE instruction events (German Gomez)
  - perf arm-spe: Add SPE total latency as PERF_SAMPLE_WEIGHT (Namhyung Kim)
  - perf arm-spe: Support hardware-based PID tracing (German Gomez)
  - perf arm-spe: Save context ID in record (German Gomez)
  - perf arm-spe: Update --switch-events docs in 'perf record' (German Gomez)
  - perf arm-spe: Track task context switch for cpu-mode events (Namhyung Kim)
  - perf arm-spe: Print size using consistent format (Andrew Kilroy)
  - perf arm-spe: Snapshot mode test (German Gomez)
  - perf arm-spe: Implement find_snapshot callback (German Gomez)
  - perf arm-spe: Add snapshot mode support (German Gomez)
  - perf arm-spe: Remove redundant checking for "full_auxtrace" (Leo Yan)
  - perf arm-spe: Enable timestamp for per-cpu mode (Leo Yan)
  - perf arm-spe: Correct sample flags for dummy event (Leo Yan)
  - perf arm-spe: Correct sample flags for SPE event (Leo Yan)
  - perf arm-spe: Avoid potential buffer overrun (Ian Rogers)
  - perf arm-spe: Set sample's data source field (Leo Yan)
  - perf arm-spe: Synthesize memory event (Leo Yan)
  - perf arm-spe: Fill address info for samples (Leo Yan)
  - perf arm-spe: Store operation type in packet (Leo Yan)
  - perf arm-spe: Store memory address in packet (Leo Yan)
  - perf arm-spe: Enable sample type PERF_SAMPLE_DATA_SRC (Leo Yan)
  - perf c2c: Add local variables for output metrics (Leo Yan)
  - perf c2c: Refactor node display (Leo Yan)
  - perf c2c: Fix argument type for percent() (Leo Yan)
  - perf c2c: Refactor display filter (Leo Yan)
  - perf c2c: Refactor hist entry validation (Leo Yan)
  - perf c2c: Rename for shared cache line stats (Leo Yan)
  - perf arm-spe: Add support for ARMv8.3-SPE (Wei Li)
  - perf arm_spe: Decode memory tagging properties (Andre Przywara)
  - perf arm-spe: Add more sub classes for operation packet (Leo Yan)
  - perf arm-spe: Refactor operation packet handling (Leo Yan)
  - perf arm-spe: Add new function arm_spe_pkt_desc_op_type() (Leo Yan)
  - perf arm-spe: Remove size condition checking for events (Leo Yan)
  - perf arm-spe: Refactor event type handling (Leo Yan)
  - perf arm-spe: Add new function arm_spe_pkt_desc_event() (Leo Yan)
  - perf arm-spe: Refactor counter packet handling (Leo Yan)
  - perf arm-spe: Add new function arm_spe_pkt_desc_counter() (Leo Yan)
  - perf arm-spe: Refactor context packet handling (Leo Yan)
  - perf arm_spe: Fixup top byte for data virtual address (Leo Yan)
  - perf arm-spe: Refactor address packet handling (Leo Yan)
  - perf arm-spe: Add new function arm_spe_pkt_desc_addr() (Leo Yan)
  - perf arm-spe: Refactor packet header parsing (Leo Yan)
  - perf arm-spe: Refactor printing string to buffer (Leo Yan)
  - perf arm-spe: Fix packet length handling (Leo Yan)
  - perf arm-spe: Refactor arm_spe_get_events() (Leo Yan)
  - perf arm-spe: Refactor payload size calculation (Leo Yan)
  - perf arm-spe: Fix a typo in comment (Leo Yan)
  - perf arm-spe: Include bitops.h for BIT() macro (Leo Yan)
  - anolis: configs: enable ACPI PCC by default on arm64 (Guanjun)
  - mailbox: pcc: Handle all PCC subtypes correctly in pcc_mbox_irq (Sudeep Holla)
  - ACPI: PCC: Implement OperationRegion handler for the PCC Type 3 subtype (Sudeep Holla)
  - ACPICA: Add support for PCC Opregion special context data (Sudeep Holla)
  - mailbox: pcc: Move bulk of PCCT parsing into pcc_mbox_probe (Sudeep Holla)
  - mailbox: pcc: Add support for PCCT extended PCC subspaces(type 3/4) (Sudeep Holla)
  - mailbox: pcc: Drop handling invalid bit-width in {read,write}_register (Sudeep Holla)
  - mailbox: pcc: Avoid accessing PCCT table in pcc_send_data and pcc_mbox_irq (Sudeep Holla)
  - mailbox: pcc: Add PCC register bundle and associated accessor functions (Sudeep Holla)
  - mailbox: pcc: Rename doorbell ack to platform interrupt ack register (Sudeep Holla)
  - mailbox: pcc: Use PCC mailbox channel pointer instead of standard (Sudeep Holla)
  - mailbox: pcc: Add pcc_mbox_chan structure to hold shared memory region info (Sudeep Holla)
  - mailbox: pcc: Consolidate subspace doorbell register parsing (Sudeep Holla)
  - mailbox: pcc: Consolidate subspace interrupt information parsing (Sudeep Holla)
  - mailbox: pcc: Refactor all PCC channel information into a structure (Sudeep Holla)
  - mailbox: pcc: Fix kernel doc warnings (Sudeep Holla)
  - anolis: ACPICA: Support using op_region by PCC master subspace (Guanjun)
  - anolis: Add a boot command line for rich container (Erwei Deng)
  - anolis: net/smc: fix panic smc_tcp_syn_recv_sock() while closing listen socket (D. Wythe)
  - anolis: net/smc: fix deadlock when lgr terminating (D. Wythe)
  - anolis: Revert "anolis: net/smc: fix deadlock when lgr terminating" (D. Wythe)
  - anolis: net/smc: Reuse wr_id to recognize wc for tx or rx (Tony Lu)
  - anolis: net/smc: delay RDMA resource release until connecitons freed (Wen Gu)
  - anolis: net/smc: Use SO_REUSEADDR if keep clcsock (Tony Lu)
  - anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending (D. Wythe)
  - anolis: Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending" (Tony Lu)
  - anolis: Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending" (Tony Lu)
  - anolis: net/smc: Fix wr tasklet handler for rx/tx wc (Tony Lu)
  - anolis: net/smc: check clcsock->sk validity in fallback restore (Wen Gu)
  - anolis: net/smc: Keep first contact clcsock (Tony Lu)
  - anolis: Revert "anolis: net/smc: Keep first contact clcsock" (Wen Gu)
  - anolis: configs: let PCIe PMU driver be built in (Shuai Xue)
  - anolis: drivers/perf: add a separate config for DesignWare PCIe controller PMU (Shuai Xue)
  - anolis: drivers/perf: clean up unused variable (Shuai Xue)
  - anolis: drivers/perf: simplify extended capability founding (Shuai Xue)
  - anolis: drivers/perf: simplify Root Port check (Shuai Xue)
  - anolis: idxd: remove unused functions (Xuchun Shang)
  - powercap: RAPL: Add AMD Fam19h RAPL support (Kim Phillips)
  - powercap: Add AMD Fam17h RAPL support (Victor Ding)
  - powercap/intel_rapl_msr: Convert rapl_msr_priv into pointer (Victor Ding)
  - x86/msr-index: sort AMD RAPL MSRs by address (Victor Ding)
  - iommu/vt-d: Enable write protect propagation from guest (Jacob Pan)
  - iommu/vt-d: remove redundant trace.o option (Lu Baolu)
  - iommu/vt-d: Delete svm_lookup_device_by_sid() (Lu Baolu)
  - iommu/vt-d: Delete handle_single_prq_event() (Lu Baolu)
  - iommu/vt-d: Delete handle_bad_prq_event() (Lu Baolu)
  - iommu/vt-d: Global devTLB flush when present context entry changed (Sanjay Kumar)
  - iommu/vt-d: Disable spin lock and cpu_relax() in qi (Lu Baolu)
  - iommu/vt-d: Monitor queued invalidation execution time (Lu Baolu)
  - iommu/vt-d: Make PRQ size and allocation dynamic (Jacob Pan)
  - iommu/vt-d: fix missing invalidation when changing a present SL-only PGTT type to a Nested type. (Sanjay Kumar)
  - intel_idle: Add a new flag to initialize the AMX state (Chang S. Bae)
  - x86/fpu: Add a helper to prepare AMX state for low-power CPU idle (Chang S. Bae)
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Peter Zijlstra)
  - fs: fix UAF/GPF bug in nilfs_mdt_destroy (Dongliang Mu) {CVE-2022-2978}
  - anolis: mm: fcm: do not unconditionally call fixup ops (Xu Yu)
  - anolis: Revert "anolis: mm: fcm: do not unconditionally call fcm_fixup_vma" (Xu Yu)
  - anolis: arm_mpam: Fix the problem that error interrupt handling cannot exit normally (Shawn Wang)
  - anolis: arm_mpam: Fix wrong type conversion for dev_id in mpam_irq_handler() (Shawn Wang)
  - iommu: Stop exporting iommu_map_sg_atomic() (John Garry)
  - iommu: Take lock before reading iommu group default domain type (Sai Praneeth Prakhya)
  - iommu/vt-d: Avoid GFP_ATOMIC where it is not needed (Christophe JAILLET)
  - iommu/vt-d: Add PRQ handling latency sampling (Lu Baolu)
  - iommu/vt-d: Move capability check code to cap_audit files (Kyung Min Park)
  - iommu/vt-d: Fix compile error [-Werror=implicit-function-declaration] (Lu Baolu)
  - iommu: Delete iommu_domain_window_disable() (John Garry)
  - iommu: use the __iommu_attach_device() directly for deferred attach (Lianbo Jiang)
  - dma-iommu: use static-key to minimize the impact in the fast-path (Lianbo Jiang)
  - iommu/vt-d: Add qi_submit trace event (Lu Baolu)
  - iommu: Delete iommu_dev_has_feature() (John Garry)
  - dma-iommu: remove __iommu_dma_mmap (Christoph Hellwig)
  - iommu: Improve the performance for direct_mapping (Yong Wu)
  - iommu/vt-d: Remove set but not used variable (Lu Baolu)
  - iommu: return error code when it can't get group (Yang Yingliang)
  - iommu: Add support to change default domain of an iommu group (Sai Praneeth Prakhya)
  - iommu: Move def_domain type check for untrusted device into core (Lu Baolu)
  - dma-mapping: remove the {alloc,free}_noncoherent methods (Christoph Hellwig)
  - iova: Stop exporting some more functions (John Garry)
  - iova: Make has_iova_flush_queue() private (John Garry)
  - iova: Delete copy_reserved_iova() (John Garry)
  - iommu: Stop exporting alloc_iova_mem() (John Garry)
  - iommu: Stop exporting free_iova_mem() (John Garry)
  - iommu: Delete split_and_remove_iova() (John Garry)
  - iommu: avoid taking iova_rbtree_lock twice (Cong Wang)
  - iommu/iova: Free global iova rcache on iova alloc failure (Vijayanand Jitta)
  - iommu/iova: Retry from last rb tree node if iova search fails (Vijayanand Jitta)
  - filemap: Correct the conditions for marking a folio as accessed (Matthew Wilcox (Oracle))
  - anolis: arm64: drivers/perf: fix DDRSS PMU interrupt initialization (Shuai Xue)
  - iommu/vt-d: Fix 5 level issue (Yi Sun)
  - ext4: do not call FC trace event in ext4_fc_commit() if FS does not support FC (Ritesh Harjani)
  - ext4: improve fast_commit performance and scalability (Ritesh Harjani)
  - ext4: inline data inode fast commit replay fixes (Harshad Shirwadkar)
  - ext4: commit inline data during fast commit (Harshad Shirwadkar)
  - ext4: remove expensive flush on fast commit (Daejun Park)
  - iommu/vtd-: Fix regression issue in intel_svm_free_async_fn (Yi Liu)
  - iommu/vt-d: Fruther fix PASID race (Yi Liu)
  - iommu/vt-d: Fix A-B-C-A dead lock issue which results in PRQ timeout (Yi Liu)
  - ntb: intel: add Intel NTB LTR vendor support for gen4 NTB (Zheng Wu)
  - anolis: fs/resctrl: Refine the outputs of last_cmd_status (Shawn Wang)
  - iommu: Delete iommu_dma_free_cpu_cached_iovas() (John Garry)
  - iommu/vt-d: Remove IOVA domain rcache flushing for CPU offlining (John Garry)
  - iommu/vt-d: Fix incorrect invalidation when tearing down a pasid table entry (Sanjay Kumar)
  - iommu/vt-d: remove useless parameters of flush_iotlb_all (Lu Baolu)
  - iommu/vt-d: do not clear pte only if it is gIOVA case (Lu Baolu)
  - iommu/vt-d: Fix an issue in intel_svm_free_async_fn() (Liu Yi L)
  - iommu/vt-d: Allow disabling PRQ timeout (Jacob Pan)
  - dmaengine: idxd: move wq pasid configuration until when needed (Dave Jiang)
  - dmaengine: idxd: remove shared wq restriction on config load (Dave Jiang)
  - vfio: Support bind/unbind guest page table to default PASID (Yi Sun)
  - vfio/type1: Support page response for IOMMU-capable Mdev (Liu Yi L)
  - vfio/type1: Handle page response from VM (Liu Yi L)
  - vfio/type1: Allow invalidating first-level/stage IOMMU cache (Liu Yi L)
  - vfio/type1: Support binding guest page tables to PASID (Liu Yi L)
  - iommu/vtd: Fix some gpasid related issues (Yi Sun)
  - iommu/vt-d: Fix pasid bind issue (Yi Sun)
  - iommu/vt-d: Fix gpasid bind/unbind issue (Yi Sun)
  - iommu/vt-d: Calculate and set flags for handle_mm_fault (Jacob Pan)
  - iommu/vt-d: Ignore pte present check if it is not nested PASID entry (Sun, Yi Y)
  - iommu/vt-d: Support bind/unbind guest pt to def PASID (!VFIO) (Liu Yi L)
  - iommu: make sure unregistration of fault handler never fails (Jacob Pan)
  - iommu: support multiple fault handler data per device (Jacob Pan)
  - iommu/vt-d: Check pasid ownership in intel_svm_page_response (Liu, Yi L)
  - iommu: add domain argument to page response (Jacob Pan)
  - anolis: configs: enable CONFIG_YITIAN_CPER_RAWDATA as default (Shuai Xue)
  - anolis: configs: set CONFIG_CRYPTO_DEV_YCC to m on arm64 (Guanjun)
  - anolis: crypto/ycc: optimize the flow of device error (Guanjun)
  - net_sched: cls_route: remove from list when handle is 0 (Thadeu Lima de Souza Cascardo) {CVE-2022-2588}
  - anolis: efi: cper: add DDR raw data support for Yitian (Shuai Xue)
  - anolis: efi: cper: refactor raw data handling for Yitian (Shuai Xue)
  - anolis: efi: cper: check Yitian raw data signature (Shuai Xue)
  - anolis: efi: cper: move Yitian specific raw data handling into CONFIG_YITIAN_CPER_RAWDATA (Shuai Xue)
  - posix-cpu-timers: Cleanup CPU timers before freeing them during exec (Thadeu Lima de Souza Cascardo)
  - anolis: mm: change del_pid permission to write only (zhaoxinchao)
  - netfilter: nf_tables: do not allow RULE_ID to refer to another chain (Thadeu Lima de Souza Cascardo) {CVE-2022-2586}
  - netfilter: nf_tables: do not allow CHAIN_ID to refer to another table (Thadeu Lima de Souza Cascardo) {CVE-2022-2586}
  - tools/power/x86/intel-speed-select: Fix warning for perf_cap.cpu (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Display error on turbo mode disabled (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: fix build failure when using -Wl,--as-needed (Herton R. Krzesinski)
  - tools/power/x86/intel-speed-select: v1.12 release (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: HFI support (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: OOB daemon mode (Srinivas Pandruvada)
  - kbuild: replace $(if A,A,B) with $(or A,B) (Masahiro Yamada)
  - tools/power/x86/intel-speed-select: v1.11 release (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Update max frequency (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: v1.10 release (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Fix uncore memory frequency display (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: v1.9 release (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Drop __DATE__ and __TIME__ macros (Antonio Terceiro)
  - tools/power/x86/intel-speed-select: Add options to force online (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Process mailbox read error for core-power (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Update version to 1.8 (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Add new command to get/set TRL (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Add new command turbo-mode (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Update version for v5.11 (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Account for missing sysfs for die_id (Srinivas Pandruvada)
  - tools/power/x86/intel-speed-select: Read TRL from mailbox (Srinivas Pandruvada)
  - Revert "iommu/vt-d: Update the virtual command related registers" (Lu Baolu)
  - ioasid: Revert range adjustment (Jacob Pan)
  - iommu/vt-d: Flush the kernel PASID if used by the device (Jacob Pan)
  - iommu/vt-d: Check model and stepping for PASID PT SRE support (Jacob Pan)
  - ioasid: Reserve a global PASID for in-kernel DMA (Jacob Pan)
  - netfilter: nf_tables: do not allow SET_ID to refer to another table (Thadeu Lima de Souza Cascardo) {CVE-2022-2586}
  - mm,hwpoison: send SIGBUS to PF_MCE_EARLY processes on action required events (Aili Yao)
  - mm/hwpoison: check the subpage, not the head page (Matthew Wilcox (Oracle))
  - anolis: net/smc: Fix NULL pointer in smc_getname while first contact clcsock release (D. Wythe)
  - anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT (D. Wythe)
  - anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending (D. Wythe)
  - anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending (D. Wythe)
  - anolis: Revert "anolis: net/smc: remove locks smc_client_lgr_pending and smc_server_lgr_pending" (D. Wythe)
  - anolis: Revert "anolis: net/smc: fix SMC_CLC_DECL_ERR_REGRMB without smc_server_lgr_pending" (D. Wythe)
  - anolis: Revert "anolis: net/smc: skip smc_llc_flow_initiate while SMC-1RTT" (D. Wythe)
  - anolis: mm: fcm: do not unconditionally call fcm_fixup_vma (Xu Yu)
  - anolis: net/smc: Introduce smc dim (Guangguan Wang)
  - anolis: Revert "net/smc: Introduce rdma dim for smc" (Guangguan Wang)
  - netfilter: nf_queue: do not allow packet truncation below transport header offset (Florian Westphal) {CVE-2022-36946}
  - anolis: arm64: spectre: added a description of the parameter nospectre_bhb (Liu Song)
  - anolis: arm64: spectre: increase parameters that can be used to turn off bhb mitigation individually (Liu Song)
  - anolis: configs: support SMR zoned device (Guanjun)
  - anolis: drivers: base: cacheinfo: export get_cpu_cacheinfo symbol (Guanjun)
  - anolis: random: speed up the initialization of module (Xingjun Liu)
  - anolis: random: introduce the initialization seed (Xingjun Liu)
  - anolis: arm_mpam: Add hypervisor mode detection before accessing MPAM registers (Shawn Wang)
  - anolis: Revert "f2fs: remove false alarm on iget failure during GC" (Gao Xiang)
  - anolis: crypto/ycc: fix unexpected logic when devices probing (Guanjun)
  - anolis: arm64: Remove GPL from pv_ops export for ARM/ARM64 (Shawn Wang)
  - anolis: fs/resctrl: Extend the maximum number of CLOSIDs to 64 (Shawn Wang)
  - anolis: io_uring: cleanup unused parameter 'in_async' (Joseph Qi)
  - anolis: iommu: Fix bug of iommu sync/clear dirty log (Fengqian Gao)
  - anolis: configs: remove vestigal UAO support (Shuai Xue)
  - arm64: extable: fix load_unaligned_zeropad() reg indices (Evgenii Stepanov)
  - arm64: uaccess: avoid blocking within critical sections (Mark Rutland)
  - arm64: extable: remove unused ex_handler_t definition (Jisheng Zhang)
  - arm64: vmlinux.lds.S: remove `.fixup` section (Mark Rutland)
  - arm64: extable: add load_unaligned_zeropad() handler (Mark Rutland)
  - arm64: extable: add a dedicated uaccess handler (Mark Rutland)
  - arm64: extable: add `type` and `data` fields (Mark Rutland)
  - arm64: extable: use `ex` for `exception_table_entry` (Mark Rutland)
  - arm64: extable: make fixup_exception() return bool (Mark Rutland)
  - arm64: extable: consolidate definitions (Mark Rutland)
  - arm64: assembler: add conditional cache fixups (Mark Rutland)
  - arm64: assembler: replace `kaddr` with `addr` (Mark Rutland)
  - arm64: gpr-num: support W registers (Mark Rutland)
  - arm64: factor out GPR numbering helpers (Mark Rutland)
  - arm64: kvm: use kvm_exception_table_entry (Mark Rutland)
  - anolis: arm64: lib: __arch_copy_in_user(): fold fixups into body (Shuai Xue)
  - arm64: lib: __arch_copy_to_user(): fold fixups into body (Mark Rutland)
  - arm64: lib: __arch_copy_from_user(): fold fixups into body (Mark Rutland)
  - arm64: lib: __arch_clear_user(): fold fixups into body (Mark Rutland)
  - arm64: Rewrite __arch_clear_user() (Robin Murphy)
  - arm64: mark __system_matches_cap as __maybe_unused (Mark Rutland)
  - arm64: uaccess: remove vestigal UAO support (Mark Rutland)
  - arm64: uaccess: remove redundant PAN toggling (Mark Rutland)
  - arm64: uaccess: remove addr_limit_user_check() (Mark Rutland)
  - arm64: uaccess: remove set_fs() (Mark Rutland)
  - arm64: uaccess cleanup macro naming (Mark Rutland)
  - arm64: uaccess: split user/kernel routines (Mark Rutland)
  - arm64: alternatives: Split up alternative.h (Will Deacon)
  - arm64: uaccess: move uao_* alternatives to asm-uaccess.h (Mark Rutland)
  - arm64: uaccess: refactor __{get,put}_user (Mark Rutland)
  - arm64: uaccess: simplify __copy_user_flushcache() (Mark Rutland)
  - arm64: uaccess: rename privileged uaccess routines (Mark Rutland)
  - arm64: sdei: explicitly simulate PAN/UAO entry (Mark Rutland)
  - arm64: sdei: move uaccess logic to arch/arm64/ (Mark Rutland)
  - arm64: head.S: always initialize PSTATE (Mark Rutland)
  - arm64: head.S: cleanup SCTLR_ELx initialization (Mark Rutland)
  - arm64: head.S: rename el2_setup -> init_kernel_el (Mark Rutland)
  - arm64: add C wrappers for SET_PSTATE_*() (Mark Rutland)
  - arm64: ensure ERET from kthread is illegal (Mark Rutland)
  - vfio/pci: Expose PCIe PASID capability to userspace (Liu Yi L)
  - vfio/pci: Emulate PASID/PRI capability for VFs (Liu Yi L)
  - anolis: fs/resctrl: Clear the staged configs when destroying schemata list (Shawn Wang)
  - anolis: fs/resctrl: Fix the wrong if statement in resctrl_closid_is_dirty() (Shawn Wang)
  - cachefiles: narrow the scope of flushed requests when releasing fd (Jia Zhu)


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.23.1.el8_6]
changelog:
  - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (Phil Auld) [2112030 2089715]
  - iavf: Fix issue with MAC address of VF shown as zero (Petr Oros) [2102360 2037938]
  - iavf: Remove non-inclusive language (Petr Oros) [2102360 2037938]
  - iavf: Fix incorrect use of assigning iavf_status to int (Petr Oros) [2102360 2037938]
  - iavf: stop leaking iavf_status as "errno" values (Petr Oros) [2102360 2037938]
  - iavf: Add usage of new virtchnl format to set default MAC (Petr Oros) [2102360 2037938]
  - iavf: refactor processing of VLAN V2 capability message (Petr Oros) [2102360 2037938]
  - iavf: Add support for 50G/100G in AIM algorithm (Petr Oros) [2102360 2037938]
  - iavf: remove redundant ret variable (Petr Oros) [2102360 2037938]
  - iavf: Remove useless DMA-32 fallback configuration (Petr Oros) [2102360 2037938]
  - pidfd: fix a poll race when setting exit_state (Oleg Nesterov) [2107643 2044587]
  - fork: fix pidfd_poll()'s return type (Oleg Nesterov) [2107643 2044587]
  - pidfd: add polling support (Oleg Nesterov) [2107643 2044587]
  - kabi: introduce the kabi_aux_*() helpers (Oleg Nesterov) [2107643 2044587]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.24.1.el8_6]
changelog:
  - powerpc/64: Move paca allocation later in boot (Desnes A. Nunes do Rosario) [2092241 2016335]
  - powerpc/prom: fix early DEBUG messages (Desnes A. Nunes do Rosario) [2092241 2016335]
  - powerpc: Set crashkernel offset to mid of RMA region (Desnes A. Nunes do Rosario) [2092241 2016335]
  - hv_balloon: rate-limit "Unhandled message" warning (Vitaly Kuznetsov) [2117050 2087270]
  - powerpc: Enable execve syscall exit tracepoint (Steve Best) [2106662 2095521]
  - ice: Fix VSIs unable to share unicast MAC (Petr Oros) [2111936 2080033]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.25.1.el8_6]
changelog:
  - redhat: add missing ybz numbers to changelog (Augusto Caringi)
  - block: limit request dispatch loop duration (Ming Lei) [2110772 2005082]
  - NLM: Defend against file_lock changes after vfs_test_lock() (Benjamin Coddington) [2102099 2094884]
  - x86/speculation/mmio: Print SMT warning (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - KVM: x86/speculation: Disable Fill buffer clear within guests (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Reuse SRBDS mitigation for SBDS (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/srbds: Update SRBDS mitigation selection (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Add sysfs reporting for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Enable CPU Fill buffer clearing on idle (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/bugs: Group MDS, TAA & Processor MMIO Stale Data mitigations (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Add mitigation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation: Add a common function for MD_CLEAR mitigation update (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/speculation/mmio: Enumerate Processor MMIO Stale Data bug (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - Documentation: Add documentation for Processor MMIO Stale Data (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/tsx: Disable TSX development mode at boot (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/tsx: Use MSR_TSX_CTRL to clear CPUID bits (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/tsx: Clear CPUID bits when TSX always force aborts (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - cpu/speculation: Add prototype for cpu_show_srbds() (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - x86/cpu: Move arch_smt_update() to a neutral place (Waiman Long) [2110388 2090252] {CVE-2022-21123 CVE-2022-21125 CVE-2022-21166}
  - ice: Ignore error message when setting same promiscuous mode (Petr Oros) [2118580 2100683]
  - ice: Fix clearing of promisc mode with bridge over bond (Petr Oros) [2118580 2100683]
  - ice: Ignore EEXIST when setting promisc mode (Petr Oros) [2118580 2100683]
  - ice: Fix double VLAN error when entering promisc mode (Petr Oros) [2118580 2100683]
  - ice: Fix promiscuous mode not turning off (Petr Oros) [2117026 2088787]
  - ice: Introduce enabling promiscuous mode on multiple VF's (Petr Oros) [2117026 2088787]
  - ice: do not setup vlan for loopback VSI (Petr Oros) [2118582 2103845]
  - ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (Petr Oros) [2118582 2103845]
  - ice: Fix max VLANs available for VF (Petr Oros) [2118581 2112298]
  - ice: change devlink code to read NVM in blocks (Petr Oros) [2118583 2093904]
  - ice: Fix memory corruption in VF driver (Petr Oros) [2102359 2037937]
  - ice: Fix queue config fail handling (Petr Oros) [2102359 2037937]
  - ice: Sync VLAN filtering features for DVM (Petr Oros) [2102359 2037937]
  - ice: Fix PTP TX timestamp offset calculation (Petr Oros) [2102359 2037937]
  - ice: Fix interrupt moderation settings getting cleared (Petr Oros) [2102359 2037937]
  - ice: fix possible under reporting of ethtool Tx and Rx statistics (Petr Oros) [2102359 2037937]
  - ice: allow creating VFs for !CONFIG_NET_SWITCHDEV (Petr Oros) [2102359 2037937]
  - ice: add trace events for tx timestamps (Petr Oros) [2102359 2037937]
  - ice: fix return value check in ice_gnss.c (Petr Oros) [2102359 2037937]
  - ice: remove PF pointer from ice_check_vf_init (Petr Oros) [2102359 2037937]
  - ice: introduce ice_virtchnl.c and ice_virtchnl.h (Petr Oros) [2102359 2037937]
  - ice: cleanup long lines in ice_sriov.c (Petr Oros) [2102359 2037937]
  - ice: introduce ICE_VF_RESET_LOCK flag (Petr Oros) [2102359 2037937]
  - ice: introduce ICE_VF_RESET_NOTIFY flag (Petr Oros) [2102359 2037937]
  - ice: convert ice_reset_vf to take flags (Petr Oros) [2102359 2037937]
  - ice: convert ice_reset_vf to standard error codes (Petr Oros) [2102359 2037937]
  - ice: make ice_reset_all_vfs void (Petr Oros) [2102359 2037937]
  - ice: drop is_vflr parameter from ice_reset_all_vfs (Petr Oros) [2102359 2037937]
  - ice: move reset functionality into ice_vf_lib.c (Petr Oros) [2102359 2037937]
  - ice: fix a long line warning in ice_reset_vf (Petr Oros) [2102359 2037937]
  - ice: introduce VF operations structure for reset flows (Petr Oros) [2102359 2037937]
  - ice: fix incorrect dev_dbg print mistaking 'i' for vf->vf_id (Petr Oros) [2102359 2037937]
  - ice: introduce ice_vf_lib.c, ice_vf_lib.h, and ice_vf_lib_private.h (Petr Oros) [2102359 2037937]
  - ice: use ice_is_vf_trusted helper function (Petr Oros) [2102359 2037937]
  - ice: log an error message when eswitch fails to configure (Petr Oros) [2102359 2037937]
  - ice: cleanup error logging for ice_ena_vfs (Petr Oros) [2102359 2037937]
  - ice: move ice_set_vf_port_vlan near other .ndo ops (Petr Oros) [2102359 2037937]
  - ice: refactor spoofchk control code in ice_sriov.c (Petr Oros) [2102359 2037937]
  - ice: rename ICE_MAX_VF_COUNT to avoid confusion (Petr Oros) [2102359 2037937]
  - ice: remove unused definitions from ice_sriov.h (Petr Oros) [2102359 2037937]
  - ice: convert vf->vc_ops to a const pointer (Petr Oros) [2102359 2037937]
  - ice: remove circular header dependencies on ice.h (Petr Oros) [2102359 2037937]
  - ice: rename ice_virtchnl_pf.c to ice_sriov.c (Petr Oros) [2102359 2037937]
  - ice: rename ice_sriov.c to ice_vf_mbx.c (Petr Oros) [2102359 2037937]
  - ice: Fix FV offset searching (Petr Oros) [2102359 2037937]
  - ice: Add support for outer dest MAC for ADQ tunnels (Petr Oros) [2102359 2037937]
  - ice: avoid XDP checks in ice_clean_tx_irq() (Petr Oros) [2102359 2037937]
  - ice: change "can't set link" message to dbg level (Petr Oros) [2102359 2037937]
  - ice: Add slow path offload stats on port representor in switchdev (Petr Oros) [2102359 2037937]
  - ice: Add support for inner etype in switchdev (Petr Oros) [2102359 2037937]
  - ice: convert VF storage to hash table with krefs and RCU (Petr Oros) [2102359 2037937]
  - ice: introduce VF accessor functions (Petr Oros) [2102359 2037937]
  - ice: factor VF variables to separate structure (Petr Oros) [2102359 2037937]
  - ice: convert ice_for_each_vf to include VF entry iterator (Petr Oros) [2102359 2037937]
  - ice: use ice_for_each_vf for iteration during removal (Petr Oros) [2102359 2037937]
  - ice: remove checks in ice_vc_send_msg_to_vf (Petr Oros) [2102359 2037937]
  - ice: move VFLR acknowledge during ice_free_vfs (Petr Oros) [2102359 2037937]
  - ice: move clear_malvf call in ice_free_vfs (Petr Oros) [2102359 2037937]
  - ice: pass num_vfs to ice_set_per_vf_res() (Petr Oros) [2102359 2037937]
  - ice: store VF pointer instead of VF ID (Petr Oros) [2102359 2037937]
  - ice: refactor unwind cleanup in eswitch mode (Petr Oros) [2102359 2037937]
  - ice: add TTY for GNSS module for E810T device (Petr Oros) [2102359 2037937]
  - ice: Simplify tracking status of RDMA support (Petr Oros) [2102359 2037937]
  - ice: Add ability for PF admin to enable VF VLAN pruning (Petr Oros) [2102359 2037937]
  - ice: Add support for 802.1ad port VLANs VF (Petr Oros) [2102359 2037937]
  - ice: Advertise 802.1ad VLAN filtering and offloads for PF netdev (Petr Oros) [2102359 2037937]
  - ice: Support configuring the device to Double VLAN Mode (Petr Oros) [2102359 2037937]
  - ice: Add support for VIRTCHNL_VF_OFFLOAD_VLAN_V2 (Petr Oros) [2102359 2037937]
  - ice: Add hot path support for 802.1Q and 802.1ad VLAN offloads (Petr Oros) [2102359 2037937]
  - ice: Add outer_vlan_ops and VSI specific VLAN ops implementations (Petr Oros) [2102359 2037937]
  - ice: Adjust naming for inner VLAN operations (Petr Oros) [2102359 2037937]
  - ice: Use the proto argument for VLAN ops (Petr Oros) [2102359 2037937]
  - ice: Refactor vf->port_vlan_info to use ice_vlan (Petr Oros) [2102359 2037937]
  - ice: Introduce ice_vlan struct (Petr Oros) [2102359 2037937]
  - ice: Add new VSI VLAN ops (Petr Oros) [2102359 2037937]
  - ice: Add helper function for adding VLAN 0 (Petr Oros) [2102359 2037937]
  - ice: Refactor spoofcheck configuration functions (Petr Oros) [2102359 2037937]
  - Revert "ice: Allow to pass VLAN tagged packets to VF when port VLAN is configured" (Petr Oros) [2102359 2037937]
  - Revert "ice: Do not enable VLAN pruning when spoofchk is enabled" (Petr Oros) [2102359 2037937]
  - ice: Remove likely for napi_complete_done (Petr Oros) [2102359 2037937]
  - ice: add support for DSCP QoS for IDC (Petr Oros) [2102359 2037937]
  - ice: respect metadata on XSK Rx to skb (Petr Oros) [2102359 2037937]
  - ice: don't reserve excessive XDP_PACKET_HEADROOM on XSK Rx to skb (Petr Oros) [2102359 2037937]
  - ice: respect metadata in legacy-rx/ice_construct_skb() (Petr Oros) [2102359 2037937]
  - ice: Fix broken IFF_ALLMULTI handling (Petr Oros) [2102359 2037937]
  - iavf: Fix VLAN_V2 addition/rejection (Petr Oros) [2118707 2115618]
  - iavf: Fix deadlock in initialization (Petr Oros) [2118705 2054656]
  - scsi: qla2xxx: Fix erroneous mailbox timeout after PCI error injection (Nilesh Javali) [2110768 2044160]
  - sched/deadline: Fix BUG_ON condition for deboosted tasks (Phil Auld) [2117410 2111860]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.26.1.el8_6]
changelog:
  - drm/amd/display: Ignore First MST Sideband Message Return Error (Mika Penttilä) [2109826 2089853]
  - ASoC: SOF: topology: read back control data from DSP (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: Drop ctrl_type parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: control: Do not handle control notification with component type (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: sof-audio: Drop the `cmd` member from struct snd_sof_control (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: Drop ctrl_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: topology: Set control_data->cmd alongside scontrol->cmd (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: Drop ipc_cmd parameter for snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
  - ASoC: SOF: ipc: Rename send parameter in snd_sof_ipc_set_get_comp_data() (Jaroslav Kysela) [2117732 2065575]
  - cgroup: Use css_tryget() instead of css_tryget_online() in task_get_css() (Vratislav Bendel) [2120776 2111491]
  - platform/x86/intel: Fix 'rmmod pmt_telemetry' panic (Prarit Bhargava) [2091079 2080426]
  - KVM: x86/mmu: make apf token non-zero to fix bug (Vitaly Kuznetsov) [2105340 2096201]
  - iommu/vt-d: Make DMAR_UNITS_SUPPORTED a config setting (Jerry Snitselaar) [2112983 2095498]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.27.1.el8_6]
changelog:
  - [s390] s390/pci: add s390_iommu_aperture kernel parameter (Claudio Imbrenda) [2081324 2039181]
  - ipv6: take care of disable_policy when restoring routes (Andrea Claudi) [2109971 2103894]
  - net: openvswitch: fix parsing of nw_proto for IPv6 fragments (Eelco Chaudron) [2106703 2101537]
  - scsi: ch: Make it possible to open a ch device multiple times again (Ewan D. Milne) [2115965 2108649]
  - scsi: smartpqi: Fix DMA direction for RAID requests (Don Brace) [2112354 2101548]
  - iommu/vt-d: Calculate mask for non-aligned flushes (Jerry Snitselaar) [2111692 2072179]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.28.1.el8_6]
changelog:
  - powerpc/smp: Update cpu_core_map on all PowerPc systems (Diego Domingos) [2112820 2064104]
  - iavf: Fix reset error handling (Petr Oros) [2120225 2119759]
  - iavf: Fix NULL pointer dereference in iavf_get_link_ksettings (Petr Oros) [2120225 2119759]
  - iavf: Fix adminq error handling (Petr Oros) [2120225 2119759]
  - iavf: Fix missing state logs (Petr Oros) [2120225 2119759]
  - scsi: mpt3sas: Stop fw fault watchdog work item during system shutdown (Tomas Henzl) [2111140 2106413]
  - s390/qeth: cache link_info for ethtool (Michal Schmidt) [2120197 2117098]
  - nvme: fix RCU hole that allowed for endless looping in multipath round robin (Gopal Tiwari) [2106017 2078806]
  - nvme: also mark passthrough-only namespaces ready in nvme_update_ns_info (Gopal Tiwari) [2106017 2078806]
  - nvme: fix use after free when disconnecting a reconnecting ctrl (Gopal Tiwari) [2106017 2078806]
  - nvme: only call synchronize_srcu when clearing current path (Gopal Tiwari) [2106017 2078806]
  - nvme-multipath: revalidate paths during rescan (Gopal Tiwari) [2106017 2078806]
  - scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (Dick Kennedy) [2112103 2034425]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.29.1.el8_6]
changelog:
  - block-map: add __GFP_ZERO flag for alloc_page in function bio_copy_kern (Ewan D. Milne) [2107627 2049198] {CVE-2022-0494}
  - cpufreq: Specify default governor on command line (Prarit Bhargava) [2109996 2083766]
  - cpufreq: Fix locking issues with governors (Prarit Bhargava) [2109996 2083766]
  - cpufreq: Register governors at core_initcall (Prarit Bhargava) [2109996 2083766]
  - net_sched: cls_route: remove from list when handle is 0 (Felix Maurer) [2121817 2116328] {CVE-2022-2588}


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.30.1.el8_6]
changelog:
  - af_key: add __GFP_ZERO flag for compose_sadb_supported in function pfkey_register (Xin Long) [2107611 2075181] {CVE-2022-1353}
  - SUNRPC: avoid race between mod_timer() and del_timer_sync() (Benjamin Coddington) [2126184 2104507]
  - powerpc/fadump: print start of preserved area (Diego Domingos) [2107488 2075092]
  - powerpc/fadump: align destination address to pagesize (Diego Domingos) [2107488 2075092]
  - powerpc/fadump: fix PT_LOAD segment for boot memory area (Diego Domingos) [2107488 2075092]
  - drm/amdgpu: vi: disable ASPM on Intel Alder Lake based systems (Michel Dänzer) [2091065 2066918]
  - drm/amd: Use amdgpu_device_should_use_aspm on navi umd pstate switching (Michel Dänzer) [2091065 2066918]
  - drm/amd: Refactor `amdgpu_aspm` to be evaluated per device (Michel Dänzer) [2091065 2066918]
  - drm/amd: Check if ASPM is enabled from PCIe subsystem (Michel Dänzer) [2091065 2066918]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.31.1.el8_6]
changelog:
  - ice: Allow operation with reduced device MSI-X (Petr Oros) [2126482 2102844]
  - redhat: kernel depends on new linux-firmware (John Meneghini) [2120613 2044843]
  - scsi: qedi: Use QEDI_MODE_NORMAL for error handling (John Meneghini) [2119847 2101760]
  - qede: Reduce verbosity of ptp tx timestamp (John Meneghini) [2125477 2080655]
  - qede: confirm skb is allocated before using (John Meneghini) [2120611 2040267]
  - qed: fix ethtool register dump (John Meneghini) [2120611 2040267]
  - scsi: qedf: Stop using the SCSI pointer (John Meneghini) [2120613 2044843]
  - scsi: qedf: Change context reset messages to ratelimited (John Meneghini) [2120613 2044843]
  - scsi: qedf: Fix refcount issue when LOGO is received during TMF (John Meneghini) [2120613 2044843]
  - scsi: qedf: Add stag_work to all the vports (John Meneghini) [2120613 2044843]
  - scsi: qedf: Fix potential dereference of NULL pointer (John Meneghini) [2120613 2044843]
  - scsi: qedi: Remove redundant flush_workqueue() calls (John Meneghini) [2120612 2044837]
  - scsi: qedi: Fix SYSFS_FLAG_FW_SEL_BOOT formatting (John Meneghini) [2120612 2044837]
  - qed: remove unnecessary memset in qed_init_fw_funcs (John Meneghini) [2120611 2040267]
  - qed: return status of qed_iov_get_link (John Meneghini) [2120611 2040267]
  - net: qlogic: check the return value of dma_alloc_coherent() in qed_vf_hw_prepare() (John Meneghini) [2120611 2040267]
  - qed: validate and restrict untrusted VFs vlan promisc mode (John Meneghini) [2120611 2040267]
  - qed: display VF trust config (John Meneghini) [2120611 2040267]
  - qed: prevent a fw assert during device shutdown (John Meneghini) [2120611 2040267]
  - qed: use msleep() in qed_mcp_cmd() and add qed_mcp_cmd_nosleep() for udelay. (John Meneghini) [2120611 2040267]
  - qed: Use dma_set_mask_and_coherent() and simplify code (John Meneghini) [2120611 2040267]
  - qed*: esl priv flag support through ethtool (John Meneghini) [2120611 2040267]
  - qed*: enhance tx timeout debug info (John Meneghini) [2120611 2040267]
  - qede: validate non LSO skb length (John Meneghini) [2120611 2040267]
  - qed: Enhance rammod debug prints to provide pretty details (John Meneghini) [2120611 2040267]
  - net: qed: fix the array may be out of bound (John Meneghini) [2120611 2040267]
  - qed: Use the bitmap API to simplify some functions (John Meneghini) [2120611 2040267]
  - RDMA/qed: Use helper function to set GUIDs (John Meneghini) [2120611 2040267]
  - net: qed_dev: fix check of true !rc expression (John Meneghini) [2120611 2040267]
  - net: qed_ptp: fix check of true !rc expression (John Meneghini) [2120611 2040267]
  - RDMA/qedr: Remove unsupported qedr_resize_cq callback (John Meneghini) [2120611 2040267]
  - qed: Change the TCP common variable - "iscsi_ooo" (John Meneghini) [2120611 2040267]
  - qed: Optimize the ll2 ooo flow (John Meneghini) [2120611 2040267]
  - net: qed_debug: fix check of false (grc_param < 0) expression (John Meneghini) [2120611 2040267]
  - qed: Fix missing error code in qed_slowpath_start() (John Meneghini) [2120611 2040267]
  - qed: Fix compilation for CONFIG_QED_SRIOV undefined scenario (John Meneghini) [2120611 2040267]
  - qed: Initialize debug string array (John Meneghini) [2120611 2040267]
  - qed: Fix spelling mistake "ctx_bsaed" -> "ctx_based" (John Meneghini) [2120611 2040267]
  - qed: fix ll2 establishment during load of RDMA driver (John Meneghini) [2120611 2040267]
  - qed: Update the TCP active termination 2 MSL timer ("TIME_WAIT") (John Meneghini) [2120611 2040267]
  - qed: Update TCP silly-window-syndrome timeout for iwarp, scsi (John Meneghini) [2120611 2040267]
  - qed: Update debug related changes (John Meneghini) [2120611 2040267]
  - qed: Add '_GTT' suffix to the IRO RAM macros (John Meneghini) [2120611 2040267]
  - qed: Update FW init functions to support FW 8.59.1.0 (John Meneghini) [2120611 2040267]
  - qed: Use enum as per FW 8.59.1.0 in qed_iro_hsi.h (John Meneghini) [2120611 2040267]
  - qed: Update qed_hsi.h for fw 8.59.1.0 (John Meneghini) [2120611 2040267]
  - qed: Update qed_mfw_hsi.h for FW ver 8.59.1.0 (John Meneghini) [2120611 2040267]
  - qed: Update common_hsi for FW ver 8.59.1.0 (John Meneghini) [2120611 2040267]
  - qed: Split huge qed_hsi.h header file (John Meneghini) [2120611 2040267]
  - qed: Remove e4_ and _e4 from FW HSI (John Meneghini) [2120611 2040267]
  - qed: Fix kernel-doc warnings (John Meneghini) [2120611 2040267]
  - qed: Don't ignore devlink allocation failures (John Meneghini) [2120611 2040267]
  - qed: Improve the stack space of filter_config() (John Meneghini) [2120611 2040267]
  - RDMA/qedr: Move variables reset to qedr_set_common_qp_params() (John Meneghini) [2120611 2040267]
  - RDMA/qedr: Fix reporting max_{send/recv}_wr attrs (John Meneghini) [2119122 2051524]


author: Augusto Caringi <acaringi@redhat.com> [4.18.0-372.32.1.el8_6]
changelog:
  - net: atlantic: remove aq_nic_deinit() when resume (Íñigo Huguet) [2131936 2130839]
  - net: atlantic: remove deep parameter on suspend/resume functions (Íñigo Huguet) [2131936 2130839]
  - configs: enable CONFIG_HP_ILO for aarch64 (Mark Salter) [2129923 2123508]
  - drm/nouveau: recognise GA103 (Karol Herbst) [2127122 1923125]
  - net: fix a memleak when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
  - net: do not keep the dst cache when uncloning an skb dst and its metadata (Hangbin Liu) [2131255 2068355]
  - intel_idle: Fix false positive RCU splats due to incorrect hardirqs state (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/spec_ctrl: Enable RHEL only ibrs_always & retpoline,ibrs_user spectre_v2 options (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: emulate: do not adjust size of fastop and setcc subroutines (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kvm: fix FASTOP_SIZE when return thunks are enabled (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - efi/x86: use naked RET on mixed mode call wrapper (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Remove apostrophe typo (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Use DECLARE_PER_CPU for x86_spec_ctrl_current (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Remove UNTRAIN_RET from native_irq_return_ldt (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Mark retbleed_strings static (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/asm/32: Fix ANNOTATE_UNRET_SAFE use on 32-bit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Disable RRSBA behavior (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kexec: Disable RET on kexec (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Do not enable IBPB-on-entry when IBPB is not supported (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Add Cannon lake to RETBleed affected CPU list (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - redhat/configs: Add new mitigation configs for RetBleed CVEs (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retbleed: Add fine grained Kconfig knobs (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/amd: Enumerate BTC_NO (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/common: Stamp out the stepping madness (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Prevent RSB underflow before vmenter (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Fill RSB on vmexit for IBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Fix IBRS handling after vmexit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Prevent guest RSB poisoning attacks with eIBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Convert launched argument to flags (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: VMX: Flatten __vmx_vcpu_run() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Remove x86_spec_ctrl_mask (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Use cached host SPEC_CTRL value for guest entry/exit (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Fix SPEC_CTRL write on SMT state change (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Fix firmware entry SPEC_CTRL handling (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/amd: Add Spectral Chicken (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Do IBPB fallback check only once (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Add retbleed=ibpb (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Update Retpoline validation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - intel_idle: Disable IBRS during long idle (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Report Intel retbleed vulnerability (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Split spectre_v2_select_mitigation() and spectre_v2_user_select_mitigation() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Add spectre_v2=ibrs option to support Kernel IBRS (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Optimize SPEC_CTRL MSR writes (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Add kernel IBRS implementation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Keep a per-CPU IA32_SPEC_CTRL value (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Enable STIBP for JMP2RET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Add AMD retbleed= boot parameter (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bugs: Report AMD retbleed vulnerability (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Add magic AMD return-thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Use return-thunk in asm code (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/sev: Avoid using __x86_return_thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/vsyscall_emu/64: Don't use RET in vsyscall emulation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kvm: Fix SETcc emulation for return thunks (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/bpf: Use alternative RET encoding (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use alternative RET encoding (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86,objtool: Create .return_sites (Josh Poimboeuf) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Undo return-thunk damage (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retpoline: Use -mfunction-return (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retpoline: Swizzle retpoline thunk (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/retpoline: Cleanup some #ifdefery (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpufeatures: Move RETPOLINE flags to word 11 (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kvm/vmx: Make noinstr clean (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - arch/x86/boot/compressed: Add -D__DISABLE_EXPORTS to kbuild flags (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: (Ab)use __DISABLE_EXPORTS to disable RETHUNK in real mode (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Remove skip_r11rcx (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - cpuidle,intel_idle: Fix CPUIDLE_FLAG_IRQ_ENABLE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation/srbds: Do not try to turn mitigation off when not supported (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ibt,paravirt: Use text_gen_insn() for paravirt_patch() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/text-patching: Make text_gen_insn() play nice with ANNOTATE_NOENDBR (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/module: Fix the paravirt vs alternative order (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Add straight-line-speculation mitigation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Prepare inline-asm for straight-line-speculation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Prepare asm files for straight-line-speculation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Use -mindirect-branch-cs-prefix for RETPOLINE builds (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Move RETPOLINE*_CFLAGS to arch Makefile (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/entry: Add a fence for kernel entry SWAPGS in paranoid_entry() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - Makefile: remove stale cc-option checks (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tools headers: Remove broken definition of __LITTLE_ENDIAN (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tools arch: Update arch/x86/lib/mem{cpy,set}_64.S copies used in 'perf bench mem memcpy' (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Add insn_decode_kernel() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tools/insn: Restore the relative include paths for cross building (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Use insn_decode() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/insn: Add an insn_decode() API (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/insn: Rename insn_decode() to insn_decode_from_regs() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Add new features for paravirt patching (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Support not-feature (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Merge include files (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Fix error handling for STD/CLD warnings (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Teach text_poke_bp() to emulate RET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Have ftrace trampolines turn read-only at the end of system boot up (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation: Change FILL_RETURN_BUFFER to work with objtool (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Add support for intra-function calls (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Rework allocating stack_ops on decode (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Better handle IRET (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Support multiple stack_op per instruction (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Make BP scratch register warning more robust (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kexec: Make relocate_kernel_64.S objtool clean (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Introduce validate_return() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - Makefile: disallow data races on gcc-10 as well (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Improve call destination function detection (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Implement a better poke_int3_handler() completion scheme (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - lib/: fix Kconfig indentation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Use INT3_INSN_SIZE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kprobes: Fix ordering while text-patching (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/kprobes: Convert to text-patching.h (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Shrink text_poke_loc (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Remove text_poke_loc::len (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use text_gen_insn() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternative: Add text_opcode_size() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use text_poke() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Use vmalloc special flag (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Explicitly include vmalloc.h for set_vm_flush_reset_perms() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Add and use text_gen_insn() helper (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives, jump_label: Provide better text_poke() batching interface (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/asm: Annotate relocate_kernel_{32,64}.c (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: kprobes: Prohibit probing on instruction which has emulate prefix (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86: Correct misc typos (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/speculation/mds: Apply more accurate check on hypervisor platform (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Convert insn type to enum (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Track original function across branches (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Make enable parameter bool where applicable (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/CPU/AMD: Don't force the CPB cap when running under a hypervisor (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Fix function fallthrough detection (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Detect over-sized patching bugs in paravirt_patch_call() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/amd: Exclude 32bit only assembler from 64bit build (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/asm: Mark all top level asm statements as .text (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/cpu/bugs: Use __initconst for 'const' init data (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Add Direction Flag validation (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - objtool: Rewrite add_ignores() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/nospec, objtool: Introduce ANNOTATE_IGNORE_ALTERNATIVE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Fix warning and considate ftrace_jmp_replace() and ftrace_call_replace() (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - kbuild: Disable extra debugging info in .s output (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/CPU/AMD: Set the CPB bit unconditionally on F17h (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/alternatives: Print containing function (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/ftrace: Do not call function graph from dynamic trampolines (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - ftrace: Create new ftrace_internal.h header (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - kprobes/x86: Fix instruction patching corruption when copying more than one RIP-relative instruction (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - tracing/Makefile: Fix handling redefinition of CC_FLAGS_FTRACE (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Remove unused paravirt bits (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Remove clobbers parameter from paravirt patch functions (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/paravirt: Make paravirt_patch_call() and paravirt_patch_jmp() static (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/l1tf: Fix build error seen if CONFIG_KVM_INTEL is disabled (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - ftrace: Remove unused pointer ftrace_swapper_pid (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - x86/spec_ctrl: Temporarily remove RHEL specific IBRS code (Waiman Long) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - intel_idle: enable interrupts before C1 on Xeons (Steve Best) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (Vitaly Kuznetsov) [2103167 2090229] {CVE-2022-23816 CVE-2022-29900 CVE-2022-29901 CVE-2022-23825}
  - atlantic: Fix issue in the pm resume flow. (Igor Russkikh) [2127845 2002395]
  - atlantic: Fix driver resume flow. (Igor Russkikh) [2127845 2002395]
  - net: atlantic: always deep reset on pm op, fixing up my null deref regression (Foggy Liu) [2124966 2039680]
  - net: atlantic: invert deep par in pm functions, preventing null derefs (Foggy Liu) [2124966 2039680]


author: Parag Nemade <pnemade AT redhat DOT com> - 20120413-5
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - cp command should preserv timestamp
  - replace %define with %global


author: Kalev Lember <klember@redhat.com> - 3.12.2-1
changelog:
  - Update to 3.12.2
  - Use desktop-file-validate instead of desktop-file-install
  - Update download URLs


author: Jaroslav Škarvada <jskarvad@redhat.com> - 6.1-8
changelog:
  - Dropped explicit brlapi dependency (brltty) and relaxed brltty
    dependency (brlapi)
    Related: rhbz#1765611


author: FeRD (Frank Dana) <ferdnyc@gmail.com> - 3.4.0-1
changelog:
  - New upstream release, adds RAR5 and ZIPX support (readonly)
  - Drop upstreamed patches
  - Add upstreamed patch to fix test failure with libzstd-1.4.2


author: Colin Walters <walters@verbum.org> - 0.1.7-1
changelog:
  - New upstream version;
    https://github.com/projectatomic/bubblewrap/releases/tag/v0.1.7
  - Resolves: #1411814


author: Petr Šabata <contyk@redhat.com> - 4.5.0-9
changelog:
  - Fix the FTBFS issue (#1158368)
  - Install the missing database schema
  - Clean and modernize the spec file
  - Drop the unused signature file
  - Fix the dep list
  - Install the LICENSE file with %license
  - Enable test suite


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.1-3
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/867c1bc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.23.2-1
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.23
    (https://github.com/containers/buildah/commit/83a66a7)
  - Related: #2001445


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:1.24.2-2
changelog:
  - Add patch to fix bash symtax for gating tests
  - Upstream PR: https://github.com/containers/buildah/pull/3792
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.24.2-4
changelog:
  - update to the latest content of https://github.com/containers/buildah/tree/release-1.24
    (https://github.com/containers/buildah/commit/7b559a3)
  - Related: #2059296


author: Neal Gompa <ngompa13@gmail.com> - 3.2.0-1
changelog:
  - Rebase to 3.2.0 (#1939106)
  - Add metapackages for various latent/dynamic worker types for the master
  - Reorganize the spec for simplicity


author: Severin Gehwolf <sgehwolf@redhat.com> - 3.0.6-2
changelog:
  - Add BRs, maven-plugin-bundle, maven-source-plugin and
    maven-plugin-plugin, fixing FTBFS.
  - Resolves: RHBZ#1402998


author: Severin Gehwolf <sgehwolf@redhat.com> - 4.0.4-1
changelog:
  - Update to latest upstream 4.0.4 release.
  - Split junit-dependent packages into sub-packages:
    byteman-dtest, byteman-bmunit
  - Fix automatically generated requirements:
    - ASM is BR-only and bundled.
    - java-headless >= 1:1.9 would get generated, but byteman 4.x
      runs on JDK 8 too (would even work for JDK 6)


author: Alexey Tikhonov <atikhono@redhat.com> - 1.13.0-6
changelog:
  - Resolves: rhbz#1989425 - CVE-2021-3672 c-ares: missing input validation of host names may lead to Domain Hijacking [rhel-8]


author: Bob Relyea <rrelyea@redhat.com> - 2019.2.32-1
changelog:
  - Update to CKBI 2.32 from NSS 3.44
  -  Removing:
  -   # Certificate "Visa eCommerce Root"
  -   # Certificate "AC Raiz Certicamara S.A."
  -   # Certificate "ComSign CA"
  -   # Certificate "Certplus Root CA G1"
  -   # Certificate "Certplus Root CA G2"
  -   # Certificate "OpenTrust Root CA G1"
  -   # Certificate "OpenTrust Root CA G2"
  -   # Certificate "OpenTrust Root CA G3"
  -  Adding:
  -   # Certificate "GlobalSign Root CA - R6"
  -   # Certificate "OISTE WISeKey Global Root GC CA"
  -   # Certificate "GTS Root R1"
  -   # Certificate "GTS Root R2"
  -   # Certificate "GTS Root R3"
  -   # Certificate "GTS Root R4"
  -   # Certificate "UCA Global G2 Root"
  -   # Certificate "UCA Extended Validation Root"
  -   # Certificate "Certigna Root CA"
  -   # Certificate "emSign Root CA - G1"
  -   # Certificate "emSign ECC Root CA - G3"
  -   # Certificate "emSign Root CA - C1"
  -   # Certificate "emSign ECC Root CA - C3"
  -   # Certificate "Hongkong Post Root CA 3"


author: Bob Relyea <rrelyea@redhat.com> - 2020.2.41-81
changelog:
  - Update to CKBI 2.41 from NSS 3.53.0
  -    Removing:
  -     # Certificate "AddTrust Low-Value Services Root"
  -     # Certificate "AddTrust External Root"
  -     # Certificate "UTN USERFirst Email Root CA"
  -     # Certificate "Certplus Class 2 Primary CA"
  -     # Certificate "Deutsche Telekom Root CA 2"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "Certinomis - Root CA"
  -    Adding:
  -     # Certificate "Entrust Root Certification Authority - G4"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-81
changelog:
  - Update to CKBI 2.48 from NSS 3.64
  -    Removing:
  -     # Certificate "Verisign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "Taiwan GRCA"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "Symantec Class 1 Public Primary Certification Authority - G4"
  -     # Certificate "Symantec Class 2 Public Primary Certification Authority - G4"
  -    Adding:
  -     # Certificate "Microsoft ECC Root Certificate Authority 2017"
  -     # Certificate "Microsoft RSA Root Certificate Authority 2017"
  -     # Certificate "e-Szigno Root CA 2017"
  -     # Certificate "certSIGN Root CA G2"
  -     # Certificate "Trustwave Global Certification Authority"
  -     # Certificate "Trustwave Global ECC P256 Certification Authority"
  -     # Certificate "Trustwave Global ECC P384 Certification Authority"
  -     # Certificate "NAVER Global Root Certification Authority"
  -     # Certificate "AC RAIZ FNMT-RCM SERVIDORES SEGUROS"
  -     # Certificate "GlobalSign Secure Mail Root R45"
  -     # Certificate "GlobalSign Secure Mail Root E45"
  -     # Certificate "GlobalSign Root R46"
  -     # Certificate "GlobalSign Root E46"


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.48-82
changelog:
  - Update to CKBI 2.48 from NSS 3.66
  -    Removing:
  -     # Certificate "QuoVadis Root CA"
  -     # Certificate "Sonera Class 2 Root CA"
  -     # Certificate "Trustis FPS Root CA"
  -    Adding:
  -     # Certificate "GLOBALTRUST 2020"
  -     # Certificate "ANF Secure Server Root CA"
  -     # Certificate "Certum EC-384 CA"
  -     # Certificate "Certum Trusted Root CA"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-81
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.0
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Adding:
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "Cybertrust Global Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-80.2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Xavier Bachelot <xaver@bachelot.org> - 0.99-0.56.beta20
changelog:
  - Update to 0.99.beta20. Fixes :
    - CVE-2018-20544, CVE-2018-20545, CVE-2018-20546, CVE-2018-20547,
      CVE-2018-20548, CVE-2018-20549 (RHBZ#1687860)
    - CVE-2021-3410 (RHBZ#1928437)
    - CVE-2021-30498 (RHBZ#1948676, RHBZ#1948677)
    - CVE-2021-30499 (RHBZ#1948680, RHBZ#1948681)
  - Update Source0 to github
  - Don't glob soname to avoid spurious bump
  - Fix bogus date in changelog


author: David Howells <dhowells@redhat.com> 0.10.6-1
changelog:
  - Note the correct licence.
  - Handle malformed kernel status correctly.
  - Permit culling to be disabled on the command line with the -N flag.
  - Suspend culling when cache space is short and cache objects are pinned.


author: David Howells <dhowells@redhat.com> 0.10.8-1
changelog:
  - Use systemd interaction macros in specfile installation sections [RH BZ 850053].
  - Fix the service file to use /usr/sbin/ rather than /sbin/.
  - Turn on RELRO and PIE build hardening in RPM builds.


author: Kalev Lember <klember@redhat.com> - 1.12.0-1
changelog:
  - Update to 1.12.0
  - Drop manual requires that are automatically handled by pkgconfig dep gen
  - Use license macro for COPYING
  - Tighten -devel subpackage deps with the _isa macro
  - Use make_install macro


author: Matthew Miller <mattdm@fedoraproject.org> - 2.12.6.7-1
changelog:
  - update to upstream "unstable" 2.12.6.7 for rawhide (code cleanups only)
  - * misc errors in help corrected
  - * various buffer sizes and stacks increased


author: Mattia Verga <mattia.verga@protonmail.com> - 3.4.7-1
changelog:
  - Update to 3.4.7
  - Fix build errors on s390x
  - Fix FCFLAGS transmission to fortran compiler
  - Enable multi-threading support


author: František Dvořák <valtri@civ.zcu.cz> - 3.0.0-1
changelog:
  - Major version bump
  - OpenSSL 1.1 (fixed  #1423249)
  - Removed EPEL macros (branch 3.x.x only for openssl >= 1.1 and F26+)


author: Mark E. Fuller <mark.e.fuller@gmx.de> - 2.6.0-0.6.a4
changelog:
  - Final revisions for Fedora approval
  - Remove workaround fixed by #1172 (Issue #1149)
  - Version for first Fedora builds
  - Exclude s390x due to failing tests
  - Exclude ppc64le in Rawhide due to build segfaults
  - Rename Python package to follow Fedora standards


author: Neal Gompa <ngompa13@gmail.com> - 0.7.0-6
changelog:
  - Backport patch to fix aliasing violation breaking builds on GCC 10 on ARM (#1807872)
  - Disable "DiskFile holes" test to stop build failures


author: Igor Raits <ignatenkobrain@fedoraproject.org> - 3.6-1
changelog:
  - Update to 3.6
    + Enable gzip compression support
    + Enable lz4 compression support
    + Enable SSL support
    + Simplify systemd configuration


author: Björn Esser <besser82@fedoraproject.org> - 2.18-4
changelog:
  - Add some stuff for backwards compatibility
  - Add an unversioned symlink to %{_pkgdocdir} if needed


author: Dominik Mierzejewski <rpm@greysector.net> - 1.4-13
changelog:
  - Add BR: gcc for https://fedoraproject.org/wiki/Changes/Remove_GCC_from_BuildRoot
  - Clean-up: drop obsolete stuff, use modern macros to simplify build


author: Robert Scheck <robert@fedoraproject.org> 1.4.4-1
changelog:
  - Update to upstream 1.4.4 (#1352496)
  - Reworked spec file to build libburn1 for RHEL >= 6 (#750009)


author: Brian Stinson <brian@bstinson.com> - 0.5.5-1
changelog:
  - Update more references to ACO
  - Make sure Exception messages don't print credentials to the screen


author: Fabian Arrotin <fabian.arrotin@arrfab.net> - 0.7.0-1
changelog:
  - added Requires: on fasjson-client (talking to IPA and not FAS anymore)
  - replaced centos-cert script with just a wrapper around fasjson-client for TLS cert


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-1
changelog:
  - Initial import to Fedora
  - Add logrotate
  - Applied patch for https://github.com/openSUSE/cepces/issues/15


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-4
changelog:
  - Add Pull request #18
  - Replaces kerberos with gssapi
  - Replaces requests_kerberos with requests_gssapi


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-5
changelog:
  - Add Pull request #19
  - Remove Pull request #17 as it is not accepted
  - Review comment #13, #14 addressed


author: Ding-Yi Chen <dchen@redhat.com> - 0.3.5-6
changelog:
  - Review comment #16 addressed
  - It make more sense that -selinux and -certmonger depends on main package,
    Not the other round
  - Recommends: logrotate
  - Supplements: -selinux, -certmonger


author: Scott K Logan <logans@cottsay.net> - 1.14.0-3
changelog:
  - Add lapack-devel build dependency so that SuiteSparse builds
  - Add missing gflags-devel dependency to -devel subpackage


author: Scott K Logan <logans@cottsay.net> - 1.14.0-4
changelog:
  - Drop lapack-devel now that FindLAPACK supports BLAS correctly
  - Drop BLAS_LIBRARIES var when not using ATLAS


author: Jiri Kucera <jkucera@redhat.com> - 1.13.0-1
changelog:
  - Backport patch to fix CompressedRowSparseMatrixTest.AppendRows test failure
    (see https://github.com/ceres-solver/ceres-solver/issues/383)
    Resolves: #1609969


author: Rob Crittenden <rcritten@redhat.com> - 0.79.7-15
changelog:
  - Replace the previous fix for dbus restarting with PartOf in the
    certmonger systemd service file to link the two (#1687698)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-4
changelog:
  - Certmonger SCEP renewal should not use old challenges (#1577570)
  - Certmonger segfault after cert renewal request (#1881500)
  - Include certificate NotBefore date in output of the 'getcert list' command
    (#1940261)
  - Certmonger certificates stuck in NEED_GUIDANCE (#2001079)


author: Rob Crittenden <rcritten@redhat.com> - 0.79.13-5
changelog:
  - certmonger creates CSRs with invalid DER syntax for X509v3 extensions
    with critical=FALSE (#2012258)


author: Todd Zullinger <tmz@pobox.com> - 1.2.3-5
changelog:
  - include output of cgit.conf and git/config.mak in build logs
  - explicitly disable expat, perl, python, and tcl/tk in git build
  - use %{gpgverify} macro to verify tarball signature
  - use %{build_cflags} and %{build_ldflags}
  - preserve timestamps when running install
  - clean up & improve dist conditionals
  - remove %_python_bytecompile_extra
  - limit *.py[co] %exclude to el7
  - refresh highlight v3 patch
  - use git to apply patches


author: Todd Zullinger <tmz@pobox.com> - 1.2.3-7
changelog:
  - update SELinux README
  - simplify install commands
  - improve httpd config file creation
  - explicitly list the cgit cgi-bin script
  - create /var/lib/git to improve SELinux compatibility


author: Antonio Trande <sagitterATfedoraproject.org> - 3.3.1-6
changelog:
  - Fix undefined references to HDF5 (bz#1623439)
  - Add shebang to cgconfig
  - Remove spurious executable bit
  - Add Requires gcc-gfortran to the devel sub-package


author: Jordan Ogas <jogas@lanl.gov> 0.24-12
changelog:
  - remove version numbers from Obsolete
  - remove Provides tag
  - replace package name with macro
  - tidy


author: Petr Pisar <ppisar@redhat.com> - 2.24.0-5
changelog:
  - Specify all dependencies
  - Package a license
  - Align a spec file with the current packaging guide lines
  - Fix the file permissions


author: Simone Caronni <negativo17@gmail.com> - 2.25.0-1
changelog:
  - Update to 2.25.0.
  - Add patches from upstream.
  - Use autosetup macro.
  - rpmlint fixes.
  - Trim changelog.
  - Use automatic dependency generator.


author: Björn Esser <besser82@fedoraproject.org> - 1.11.1-1
changelog:
  - Update to 1.11.1 (BZ#1693841)
  - Section of man-page was moved to man1
  - Add patch to disable --update command
  - Add patch to fix shebang
  - De-tabbify spec file


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-2
changelog:
  - move pidfile to /var/run/chrony to allow chronyd to remove it on exit
    (#1584585)
  - avoid blocking in getrandom system call (#1592425)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.3-3
changelog:
  - fix PIDFile in local chronyd.service on upgrades from chrony < 3.3-2
    (#1614800)
  - add workaround for late reload of unit file (#1614751)


author: Miroslav Lichvar <mlichvar@redhat.com> 3.5-1
changelog:
  - update to 3.5 (#1685469 #1677218)
  - fix shellcheck warnings in helper scripts (#1711948)
  - update ntp2chrony script


author: Miroslav Lichvar <mlichvar@redhat.com> 4.1-1
changelog:
  - update to 4.1 (#1895003 #1847853 #1929157)
  - add NetworkManager dispatcher script to add servers from DHCP even without
    dhclient (#1933139)
  - restrict permissions of /var/lib/chrony and /var/log/chrony (#1939295)
  - reset chrony-helper state after stopping chronyd (#1971697)
  - add gcc-c++ and make to build requirements
  - move default paths in /var/run to /run


author: David King <amigadave@amigadave.com> - 0.16-1
changelog:
  - Update to 0.16 (#1144863)
  - Remove clean section and BuildRoot tag
  - Update URL and Sourc0
  - Use license macro for COPYING
  - Use parallel make flags
  - Preserve timestamps during install


author: Jeff Layton <jlayton@redhat.com> - 6.7-5
changelog:
  - more updates, switch to rst for manpages
  - update mount.cifs manpage to describe defaults better (BZ#1474539)


author: Sachin Prabhu <sprabhu@redhat.com> - 6.8-3
changelog:
  - Add manual gating tests
  - docs: cleanup rst formating
  - mount.cifs.rst: document new (no)handlecache mount option
  - manpage: update mount.cifs manpage with info about rdma option
  - checkopts: add python script to cross check mount options
  - mount.cifs.rst: document missing options, correct wrong ones
  - checkopts: report duplicated options in man page
  - mount.cifs.rst: more cleanups
  - mount.cifs.rst: document vers=3 mount option
  - mount.cifs.rst: document vers=3.02 mount option
  - cifs: Allow DNS resolver key to expire
  - mount.cifs: be more verbose and helpful regarding mount errors
  - Update mount.cifs with vers=default mount option and SMBv3.0.2
  - mount.cifs.rst: update vers=3.1.1 option description
  - getcifsacl: Do not go to parse_sec_desc if getxattr fails.
  - getcifsacl: Improve help usage and add -h option.
  - setcifsacl: fix adding ACE when owner sid in unexpected location
  - cifs.upcall: fix a compiler warning
  - mount.cifs Add various missing parms from the help text
  - mount.cifs: add more options to help message
  - mount.cifs: detect GMT format of snapshot version
  - Update man page for mount.cifs to add new options
  - mount.cifs.rst: mention kernel version for snapshots
  - Fix authors and maintainers


author: Honza Horak <hhorak@redhat.com> - 0.5.2-2
changelog:
  - Fix issues found during Package Review
    Summary provides better idea what this library is for
    Using macros for make build and install
    Fix permissions of the shared library


author: Björn Esser <besser82@fedoraproject.org> - 9.0.302-17
changelog:
  - Add patch to fix build with glibc 2.28 and earlier (#1603648)
  - Apply LDFLAGS properly
  - Use %make_build macro
  - Mark COPYING file as %license


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-7
changelog:
  - (#2006490) follow the Fedora Packaging Guidelines by adding %dir
    %attr(0710,%scanuser,virusgroup) to %files section, it is needed on epel7 on
    initial installation without reboot.


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-8
changelog:
  - (#2006490) second try to fix epel7, revert previous commit and add on
    initial installation (not in updates) run /bin/systemd-tmpfiles --create (...)


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-9
changelog:
  - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative
  - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable
  - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter
    supersede it
  - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf
  - Get rid of scanstatedir and milterstatedir variables
  - smartsubst deleted since we notice does not replace anything
  - more cleanups
  - $RPM_BUILD_ROOT  + /builddir/build/BUILDROOT/clamav-0.103.7-1.el8.x86_64
  - all variavels with {}
  - BR _chmod and chown only in oldfreshclam
  - clean rpath clean


author: Sérgio Basto <sergio@serjux.com> - 0.103.3-9
changelog:
  - Get rid of pkgdatadir variable %{_datadir}/%{name} is more informative
  - Get rid og milterlog variable %{_var}/log/clamav-milter.log is more readable
  - we can remove %{_var}/log/clamav-milter.log because journalctl -u clamav-milter
    supersede it
  - Fix substitution of /var/run/clamd/clamd.socket on file clamav-milter.conf
  - Get rid of scanstatedir and milterstatedir variables
  - smartsubst deleted since we notice does not replace anything
  - more cleanups
  - $RPM_BUILD_ROOT  + /builddir/build/BUILDROOT/clamav-0.103.7-1.el8.aarch64
  - all variavels with {}
  - BR _chmod and chown only in oldfreshclam
  - clean rpath clean


author: chenli <chenli@loongson.cn> - 13.0.1-2.0.2
changelog:
  - [LoongArch] Define subtarget feature unaligned-access                           
  - [compiler-rt] Support LoongArch64


author: Miro Hrončok <mhroncok@redhat.com> - 0.10.5-48
changelog:
  - Update Python macros to new packaging standards
    (See https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build)


author: Sergio Correia <scorreia@redhat.com> - 15-1
changelog:
  - Update to latest upstream release, v15
    Resolves: rhbz#1887836
    Resolves: rhbz#1853651
    Resolves: rhbz#1874460


author: Jonathan Wright <jonathan@almalinux.org> - 1.7-2
changelog:
  - adjust description per upstream request
  - https://github.com/leo-arch/clifm/issues/154#issuecomment-1233102727


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.29-3
changelog:
  - Fix growpart error when partition size matches partition offset
  - Resolves: rhbz#1666854
    (growpart fails when partition start sector is the same as partition size)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-2
changelog:
  - cu-growpart-Use-LANG-C-to-parse-sfdisk-output.patch [bz#1933768]
  - Resolves: bz#1933768
    (cloud-utils-growpart: Wrong parsing of sfdisk output in french locale)


author: Miroslav Rezanina <mrezanin@redhat.com> - 0.31-3
changelog:
  - cu-Fix-issue-LP-1928167-growpart-doesn-t-work-when-LANG.patch [bz#1885992]
  - Resolves: bz#1885992
    ([RHEL-8] growpart doesn't work when LANG=cs_CZ.UTF-8)


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-1
changelog:
  - drop no longer favoured Group tag
  - replace unqualified python invocations with explicit python3
  - bump upstream package, see https://pagure.io/clufter/releases


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-2
changelog:
  - stop creating Python 2 packages by default (nothing in Fedora uses it)
  - fix a previously omitted unqualified python invocation


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-3
changelog:
  - fix previously omitted unqualified python invocations, drop no longer
    needed byte-compilation products through a full grip on such a process,
    and also use -I switch to python3 instead of possibly weaker -Es


author: Jan Pokorný <jpokorny+rpm-clufter@fedoraproject.org> - 0.77.1-4
changelog:
  - fix missing explicit BuildRequires to ensure environment for compiling
    C code per the guidelines, and to fix FTBFS: rhbz#1603658
    (contributed by Igor Gnatenko <ignatenkobrain@fedoraproject.org>)
  - fix a thinko in py_byte_compile space-contained argument passing
    (https://github.com/rpm-software-management/rpm/issues/222#issuecomment-410026431)
  - fix a violation of "unversioned docdirs" guideline
    (https://fedoraproject.org//wiki/Changes/UnversionedDocdirs)
    Resolves: rhbz#1638027


author: Stephane Thiell <sthiell@stanford.edu> 1.8.3-2
changelog:
  - Removed unversioned __python macros https://fedoraproject.org/wiki/Changes/PythonMacroError [1896129]


author: Filipe Rosset <rosset.filipe@gmail.com> - 4.13.2_02-1
changelog:
  - Update to new upstream release v4.13.2_02
  - https://github.com/duncs/clusterssh/blob/v4.13.2_02/Changes
  - Remove upstreamed patch


author: Filipe Rosset <rosset.filipe@gmail.com> - 4.13.2_02-2
changelog:
  - Disable t/boilerplate.t test until upstream fixes
  - https://github.com/duncs/clusterssh/issues/122


author: Dominique Martinet <asmadeus@codewreck.org> - 1.0.7-1
changelog:
  - Upgrade to new upstream version 1.0.7
  - Add -f to the 'remove generated menhir files' because their presence depend
    on the source
  - Add another hack to generate a first dummy pyml_stubs lib to make the build
    system happy
  - RWMJ: Run autoreconf.
  - RWMJ: Add and fix bash-completion subpackage.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.7-2
changelog:
  - Second attempt at packaging 1.0.7.
  - Different way to rebuild autotools.
  - Move spatch binary to %_libdir/coccinelle and use spatch wrapper script.
  - Package spgen.


author: Richard W.M. Jones <rjones@redhat.com> - 1.0.7-3
changelog:
  - Use autogen script and remove redundent autoreconf.
  - Eliminate unsupported --enable-release flag for configure, using
    targets instead (all-release when ocamlopt is available).
  - Include %check for python support.
  - Run tests against non-script spatch so environment variables have effect.
  - Thanks: John Friend.


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Restrict frame embedding to same origin (rhbz#1984902, CVE-2021-3660)
  - kdump: Show "Directory" field for NFS mounts (rbhz#2004041)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Support for reading TLS certificates with any permissions
  - cockpit-ws no longer supports merged certificates
  - Services: Show user-owned systemd units (rhbz#1792270)


author: Martin Pitt <mpitt@redhat.com> - 260-1
changelog:
  - Certificate login validation (rhbz#1992620, CVE-2021-3698)
  - Client: Show previously used hosts
  - Client: Support port specification
  - bridge: Warning on missing cockpit-system package


author: Martin Pitt <mpitt@redhat.com> - 263-1
changelog:
  - Overview: Show scheduled shutdowns
  - Networking: Add firewall service description
  - Shell: Fix browser history


author: Martin Pitt <mpitt@redhat.com> - 264-1
changelog:
  - Metrics: Improve layout on small resolutions
   - Networking: Fix checkpoint handling and IP settings dialog (rhbz#2056386)
   - Services: Show error message instead of eternal "Loading..." state
   - Accounts: Add override button to confirm weak password
   - Accounts: Fix parsing of "last login" date


author: Martin Pitt <mpitt@redhat.com> - 264.2-1
changelog:
  - login: Use valid selectors when testing for :is() / :where() support (rhbz#2129055)
  - Don't run sudo without explicit request (rhbz#2129058)


author: Jacob Kozol <jkozol@redhat.com> - 27-1
changelog:
  - Sync with upstream release 27
  - Add additional form validation for the Create Image Wizard
  - Improve page size dropdown styling
  - Improve error state messages
  - Update pagination component for pf4
  - Add wildcards and support for multiple values to input filter
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 28-1
changelog:
  - Use sentence case rather than title case
  - Add and update tests
  - Update translations from weblate
  - Update minor NPM dependencies


author: Jacob Kozol <jkozol@redhat.com> - 29-1
changelog:
  - Add ability to upload to VMWare
  - Add support for additional ostree parameters
  - Update NPM dependencies
  - Add and update translations
  - Minor test fixes


author: Jacob Kozol <jkozol@redhat.com> - 31-1
changelog:
  - Add new ostree image types
  - Improve loading state when waiting for api responses
  - Improve notification system
  - Improve test stability
  - Update NPM dependencies
  - Update translations


author: Jacob Kozol <jkozol@redhat.com> - 32-1
changelog:
  - Add Edge Raw, RHEL Installer, Edge Simplified Installer image types
  - Improve user account modal responsiveness
  - Update tests
  - Update minor NPM dependencies
  - Update translation files


author: Martin Pitt <mpitt@redhat.com> - 250-1
changelog:
  - Software Updates: Introduce basic kpatch support
  - Software Updates: Handle unregistered RHEL systems with non-CDN OS repository
    (rhbz#1970057)
  - Machines: Read qemu.conf to get spice/vnc address (rhbz#1963701)


author: Martin Pitt <mpitt@redhat.com> - 255-1
changelog:
  - Machines: Parse supported disk bus types from domcapabities (rhbz#1862779)
  - Machines: Stop exposing unattended installation option for ISO installation
    media (rhbz#1868594)


author: Katerina Koukiou <kkoukiou@redhat.com> - 257-1
changelog:
  - Machines: Now officially supported on Arch Linux (https://archlinux.org/)
  - Machines: Support selecting between consoles of the same type


author: Matej Marusak <mmarusak@redhat.com> - 261-1
changelog:
  - storage: Unmounting or deleting a busy filesystem is now supported
  - Tests improvements and stabilization
  - Machines: Delete disks only after VM is successfully undefined and destroyed (rhbz#2031678)
  - Machines: Do not change "startVm" value when selecting Unattended installation (rhbz#2033603)


author: Justin Stephenson <jstephen@redhat.com> - 4-1
changelog:
  - Release v4
  - Update parent id in metainfo file
  - Update package manifest
  - Fix rpmmacro to resolve correct path on CentOS7
  - Handle byte-array encoded journal data
  - Don't clobber cockpit bots directory
  - Move code out of deprecated React lifecycle functions


author: Justin Stephenson <jstephen@redhat.com> - 6-1
changelog:
  - Release v6
  - Bump testlib to 229
  - Add binary recording test
  - Update UI to adopt PatternFly 4
  - Update dependencies
  - Use --all journalctl option
  - Fixed timezone issue by searching in client time
  - Bump cockpit test version from 199 to 219
  - Improve test coverage with more tests
  - Simplify and cleanup existing tests


author: Justin Stephenson <jstephen@redhat.com> - 7-1
changelog:
  - Remove bots sudo rm from Makefile
  - Use journalctl --utc for Logs view to handle DST
  - Add Applications Menu test
  - Install cockpit-packagekit in local VM
  - Set timezone for Logs Correlation test


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Avoid crash in unmount if journal is null
  - Sync Makefile closer to starter-kit
  - Use current babel/eslint integration
  - Use Flex layout for spacing the two config cards in the config page
  - Use Page/PageSection/Breadcrumb patternfly components
  - Move to xz dist tarballs
  - Remove unused slider.html file
  - package.json: explicitely depend on @patternfly/react-icons
  - webpack: Use relative resolve path for npm 7 compatibility
  - package.json: update patternfly packages
  - package.json: use sass instead of node-sass
  - Fetch pkg/lib automatically from cockpit instead of keeping a local copy
  - Update Docker image and TEST_OS run to Fedora 35
  - Tests: Test SSSD exclude_users and exclude_groups
  - Config: Add SSSD exclude_users and exclude_groups
  - TESTS: Fix testSessionRecordingConf cleanup issue
  - TESTS: Restart SSSD after restoring config


author: mosquito <sensor.wen@gmail.com> - 1.22.2-7
changelog:
  - Add GL_ARB_shader_texture_lod and copy_sub_image support (#1421055)
  - Add pkgconfig(egl) BReq for rawhide
  - Move BReqs to pkgconfig


author: Jason Taylor <jtfas90@gmail.com> - 0.13.0.5-1
changelog:
  - Upstream bugfix release
  - Correction to spec license add MIT license
  - Added asciidoc BuildRequires and docdir files


author: Richard Hughes <richard@hughsie.com> 1.4.4-1
changelog:
  - New upstream version
  - Actually install the installed tests
  - Port manpages to xsltproc and DocBook 5


author: Richard Hughes <richard@hughsie.com> 1.4.5-1
changelog:
  - New upstream version
  - Add new API for gnome-settings-daemon
  - Check for errors from more sqlite calls
  - Fix owner and permissions on existing state files
  - Fix segfault due to dereferencing NULL pointer
  - Make the build reproductible


author: Richard Hughes <richard@hughsie.com> 1.4.0-1
changelog:
  - New upstream version
  - Port to the Meson build system
  - Correctly build the ICC transfer curve for Rec709
  - Do not spin the Huey LEDs when the sensor is embedded
  - Do not use /tmp to create profiles
  - Use a different Huey unlock code on the W700 laptop


author: Richard Hughes <richard@hughsie.com> 1.4.1-1
changelog:
  - New upstream version
  - Include all the files in the GIR target
  - Include the correct file when using Colord-1.0.gir
  - Use gio-2.0 when generating the VAPI


author: Richard Hughes <richard@hughsie.com> 1.4.2-1
changelog:
  - New upstream version
  - Avoid buffer overflow when reading profile_id
  - Fix the detection of duplicate EDIDs
  - Set cd-create-profile date to SOURCE_DATE_EPOCH


author: Richard Hughes <richard@hughsie.com> 0.1.26-1
changelog:
  - New upstream version.
  - Install the cd-convert utility
  - Do not link against the unused gio-unix-2.0


author: Karel Volný <kvolny@redhat.com> 2.2-2
changelog:
  - fixes as per review RHBZ#1271787#c3
  - removed %clean
  - removed %defattr
  - moved %_font_pkg to %install section


author: Jan Grulich <jgrulich@redhat.com> - 0.26-1
changelog:
  - Spec file based on exiv2 package to provide old libraries before API change
    Resolves: bz#1757349


author: Jan Grulich <jgrulich@redhat.com> - 0.26-4
changelog:
  - Fix heap-based buffer overflow vulnerability in jp2image.cpp that may lead to DoS
    Resolves: bz#1990398

  - Integer overflow in CrwMap:encode0x1810 leading to heap-based buffer overflow and DoS
    Resolves: bz#1990399


author: Jan Grulich <jgrulich@redhat.com> - 0.26-6
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993283

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993246


author: Nicolas Mailhot <nim@fedoraproject.org> - 1.4-7.git2972be2
changelog:
  - redhat-rpm-config-123 triggers bugs in gosetup, remove it from Go spec files as it’s just an alias
  - https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/RWD5YATAYAFWKIDZBB7EB6N5DAO4ZKFM/


author: yangxiaoxuan <yangxiaoxuan@openanolis.org> - 4.8.5-36.1.0.1
changelog:
  - Modify the release information and add the bugzilla address of openanolis
  - Resolve doc build error


author: Siddhesh Poyarekar <siddhesh@redhat.com> - 2.28-188
changelog:
  - CVE-2022-23218, CVE-2022-23219: Fix buffer overflows in sunrpc clnt_create
    for "unix" and svcunix_create (#2045063).


author: Tomáš Mráz <tmraz@redhat.com> 1.0.2m-1
changelog:
  - minor upstream release 1.0.2m fixing security issues
  - fix locking of RNG in FIPS mode for some obscure use-cases


author: Clemens Lang <cllang@redhat.com> - 1:1.0.2o-4
changelog:
  - Fix CVE-2022-0778: Infinite loop in BN_mod_sqrt() reachable when parsing certificates
    Resolves: rhbz#2077417


author: Scott Talbert <swt@techie.net> - 3.0.4-5
changelog:
  - Remove Group tags
  - Remove xmldocs subpackage (never used)
  - Remove cppunit workaround (no longer needed)
  - Actually run the tests (but not the GUI ones, yet)


author: Brian C. Lane <bcl@redhat.com> 28.14.63-1
changelog:
  - Handle all possible dnf group_install errors (bcl)
    Related: rhbz#1947958
  - runtime-install: Install nvme-cli tool (bcl)
    Related: rhbz#1903339


author: Brian C. Lane <bcl@redhat.com> 28.14.64-1
changelog:
  - mkksiso: Check the length of the filenames (bcl)
    Related: rhbz#2028048
  - mkksiso: Check the iso's arch against the host's (bcl)
    Related: rhbz#2028048
  - mkksiso: Add missing implantisomd5 tool requirements (bcl)
    Related: rhbz#2028048
  - mkksiso: Raise error if no volume id is found (bcl)
    Related: rhbz#2028048
  - mount: Add aarch64 and s390x support to IsoMountopoint (bcl)
    Resolves: rhbz#2028089
  - mkksiso: Skip mkefiboot for non-UEFI isos (bcl)
    Resolves: rhbz#2028097
  - mkksiso: Add -joliet-long (bcl)
    Resolves: rhbz#2028044
  - mkksiso: Return 1 on errors (bcl)
    Resolves: rhbz#2028048
  - Increase boot.iso rootfs to 4GiB (bcl)
    Resolves: rhbz#2028059
  - Fix specfile to match the one from dist-git (bcl)
    Related: rhbz#2001942


author: Brian C. Lane <bcl@redhat.com> 28.14.67-1
changelog:
  - mkksiso: Fix the order of the ppc mkisofs command (bcl)
    Related: rhbz#2049205
  - mkksiso: mkfsiso argument order matters (bcl)
    Resolves: rhbz#2049205
  - mkksiso: Improve debug message about unsupported arch (bcl)
    Related: rhbz#2049190
  - mkksiso: Add kickstart to s390x cdboot.prm (bcl)
    Resolves: rhbz#2049190


author: Nick Rhodes <nrhodes91@gmail.com> - 0.16.1-1
changelog:
  - Revert previous --config release with argparse rewrite
  - Add --config option for specifying custom a configuration file using optparse
  - Filter the "ip address show" output to remove lines containing valid_lft XXsec preferred_lft XXsec


author: Nick Rhodes <nrhodes91@gmail.com> - 0.19.0-1
changelog:
  - Added lsblk and blkid (PR 115)
  - Fix flake8 warnings (PR 118)
  - Filtering out update line in pcs status (PR 112)


author: Peter Robinson <pbrobinson@fedoraproject.org> - 1.12.2-2
changelog:
  - Disable Wireless Extensions support (Fedora 36+)
    https://fedoraproject.org/wiki/Changes/RemoveWirelessExtensions


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-2
changelog:
  - switch to master branch to fix /dev/null ownership issues
    (https://github.com/containers/conmon/commit/372fa19211cfeabdb2bad52a4ab8a4d1b0b0063c)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-4
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/3161452)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-5
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/b033cb5)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 2:2.0.27-6
changelog:
  - update to the latest content of https://github.com/containers/conmon/tree/master
    (https://github.com/containers/conmon/commit/75e067e)
  - Related: #1934415


author: Jiri Kastner - 8.2.1-7
changelog:
  - removed old systemd snippets and dependencies (BZ#850068)
  - changed dependency on openssl to compat-openssl10 for newer fedoras (BZ#1423307)
  - removed tcp_wrappers dependency (BZ#1518757)


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.173.2-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.173.2
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.174.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.174.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.176.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.176.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.177.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.177.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.178.0-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.178.0
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:2.179.1-1
changelog:
  - update to https://github.com/containers/container-selinux/releases/tag/v2.179.1
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 0.8.6-2
changelog:
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.1-2
changelog:
  - revert back to https://github.com/containernetworking/plugins/releases/tag/v1.0.1
  - Related: #2001445


author: Pavel Raiskup <praiskup@redhat.com> 1.95-1
changelog:
  - add parameters for disabling appstream generation
  - let exceptions flow to the main function
  - generate webhook secrets using APIv3


author: Silvie Chlupova 1.96-1
changelog:
  - frontend: speedup for listing builds via APIv3
  - cli: print JSON list continuously, not at once when all items are fetched
  - cli: add regenerate-repos command


author: Silvie Chlupova <schlupov@redhat.com> 1.98-1
changelog:
  - don't traceback for missing field in frontend's output
  - paginate packages list in APIv3
  - fix exit code when a build is canceled
  - api monitor page to contain pkg_version


author: Pavel Raiskup <praiskup@redhat.com> 1.99-1
changelog:
  - add 'edit-chroot --reset' option
  - add 'edit-chroot --rpmbuild-with{,out}'
  - add 'edit-chroot --modules' option


author: Pavel Raiskup <praiskup@redhat.com> 1.100-1
changelog:
  - list-package-names now uses pagination
  - ensure that (error/info) logging is printed even without --debug
  - support for GSSAPI authentication added
  - re-try 3x the connection to Frontend upon failures


author: Jakub Kadlcik <frostyx@email.cz> 1.102-1
changelog:
  - Add support for pyp2spec generator
  - Fix the --debug test on EL7
  - Simplify cli configuration
  - Make requests-gssapi an opt-in dep in PyPI
  - Sync 'copr build' with other 'copr build*' methods
  - De-duplicate printing builds, and waiting
  - De-duplicate logic for taking dirname from arg
  - Simplify and fix progress bar
  - Add API support for runtime_dependencies
  - Print the URL of created project


author: Miroslav Suchý <msuchy@redhat.com> 1.51-1
changelog:
  - do the relabel in %posttrans
  - use git_dir_archive instead of git_dir_pack
  - allow frontend's apache to ioctl uploaded tarballs
  - packaging: Python 2/3, RHEL/Fedora fixes


author: Jiri Vanek <jvanek@redhat.com> - 3.7-3
changelog:
  - added link to http://hydra.brq.redhat.com:8080/view/c~j~c/#projectstatus
  - removed source check from test.yaml
  - added gating.yaml
  - Resolves: rhbz#1855374


author: Jiri Vanek <jvanek@redhat.com> - 4.0-2
changelog:
  - commented out requires lua-posix, it was always commented out in el8, never in fedora. IDK
  - Resolves: rhbz#1953923


author: Rex Dieter <rdieter@fedoraproject.org> 5.0.0-2
changelog:
  - %build: -Wno-dev (silence dev-only cmake warnings)
  - %build: explicitly mark BOOL options, use ON/OFF consistently
  - drop BR: appstream-qt-devel (not used, make epel compatible)


author: Jonathan Lebon <jlebon@redhat.com> - 0.9.1-4
changelog:
  - Add xz-devel BR to ensure we're not bundling
    Related: https://bugzilla.redhat.com/show_bug.cgi?id=1974453


author: Antonio Murdaca <runcom@redhat.com> - 0.9.1-19
changelog:
  - add a new coreos-installer-dracut subpkg to include just the
    dracut module (fedora-iot/coreos-installer-dracut)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-5
changelog:
  - sync: fix open() fallback bug (#1602463)
  - fix implicit declaration warning in coreutils-getgrouplist.patch (#1602463)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-8
changelog:
  - df --local: recognize afs, auristorfs, and smb3 as remote fs (#1798030)
  - fix formatting of sha512sum(1) man page (#1688744)


author: Kamil Dudka <kdudka@redhat.com> - 8.30-9
changelog:
  - split: fix --number=K/N to output correct part of file (#1921246)
  - rm: do not skip files upon failure to remove an empty dir (#1905481)
  - use statx instead of stat when available (#1760300)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-3
changelog:
  - Resolves: rhbz#1897085
  - Resolves: rhbz#1896493

  - spausedd: Add ability to move process into root cgroup (rhbz#1897085)
  - totemknet: Check both cipher and hash for crypto (rhbz#1896493)


author: Jan Friesse <jfriesse@redhat.com> 3.1.4-1
changelog:
  - Related: rhbz#1948973
  - Resolves: rhbz#1962139

  - New upstream release (rhbz#1948973)
  - stats: fix crash when iterating over deleted keys (rhbz#1962139)


author: Jan Friesse <jfriesse@redhat.com> 3.1.5-2
changelog:
  - Resolves: rhbz#2002115
  - Resolves: rhbz#2024658

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2002115)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2002115)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024658)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024658)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-0.2.1
changelog:
  - Rename to corosync-epel and convert to EPEL-only package
  - Remove corosync-vqsim (shipped in CRB)
  - Remove corosynclib (shipped in AppStream)


author: Jan Friesse <jfriesse@redhat.com> 3.0.3-4
changelog:
  - Resolves: rhbz#1780137
  - Resolves: rhbz#1791792
  - Resolves: rhbz#1809864
  - Resolves: rhbz#1816653

  - votequorum: Ignore the icmap_get_* return value (rhbz#1780137)
  - merge upstream commit cddd62f972bca276c934e58f08da84071cec1ddb (rhbz#1780137)
  - man: move cmap_keys man page from section 8 to 7 (rhbz#1791792)
  - merge upstream commit f1d36307e524f9440733f0b01a9fc627a0e1cac7 (rhbz#1791792)
  - votequorum: Reflect runtime change of 2Node to WFA (rhbz#1780137)
  - merge upstream commit 8ce65bf951bc1e5b2d64b60ea027fbdc551d4fc8 (rhbz#1780137)
  - stats: Add stats for scheduler misses (rhbz#1791792)
  - merge upstream commit 48b6894ef41e9a06ccbb696d062d86ef60dc2c4b (rhbz#1791792)
  - stats: Use nanoseconds from epoch for schedmiss (rhbz#1791792)
  - merge upstream commit ebd05fa00826c366922e619b012a0684c6856539 (rhbz#1791792)
  - main: Add schedmiss timestamp into message (rhbz#1791792)
  - merge upstream commit 35662dd0ec53f456445c30c0ef92892f47b25aa2 (rhbz#1791792)
  - votequorum: Change check of expected_votes (rhbz#1809864)
  - merge upstream commit 0c16442f2d93f32a229b87d2672e2dc8025ec704 (rhbz#1809864)
  - quorumtool: exit on invalid expected votes (rhbz#1809864)
  - merge upstream commit 5f543465bb3506b7f4929a426f1c22a9c854cecd (rhbz#1809864)
  - votequorum: set wfa status only on startup (rhbz#1816653)
  - merge upstream commit ca320beac25f82c0c555799e647a47975a333c28 (rhbz#1816653)


author: Jan Friesse <jfriesse@redhat.com> 3.1.0-1
changelog:
  - Resolves: rhbz#1855293
  - Resolves: rhbz#1855303
  - Resolves: rhbz#1870449
  - Resolves: rhbz#1887400

  - New upstream release (rhbz#1855293)
  - Support for reload of crypto configuration (rhbz#1855303)
  - Increase default token timeout to 3000ms (rhbz#1870449)
  - Add support for nodelist callback into quorum service (rhbz#1887400)


author: Jan Friesse <jfriesse@redhat.com> 3.0.0-4
changelog:
  - Resolves: rhbz#1827256

  - Add explicit corosync-qdevice and corosync-qnetd dependency for revdeps CI test


author: Christian Glombek <lorbus@fedoraproject.org> - 4.5.2-10
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Robert Scheck <robert@fedoraproject.org> - 4.6.0-2
changelog:
  - Include CAP_NET_BIND_SERVICE in the ambient capability set (to
    bind to privileged ports due to restrictive corporate firewalls)


author: Petr Šabata <contyk@redhat.com> - 1.78-18
changelog:
  - Use %{optflags} instead of %{optimize} (#739461, b0bdaf23)
  - Strip META perl version BR (#708377, c4069558)


author: Brad Bell <bradbell at seanet dot com> - 20210000.5-2
changelog:
  - Remove %debug_package (not necessary to create debug info).
  - Use %setup to unpack tarballs (sets premissions properly).
  - Add comments about using %clean to check BUILDROOT.


author: Brad Bell <bradbell at seanet dot com> - 20220000.1-1
changelog:
  - Advance to upstream source 20220000.1
  - Add -Wno-array-bounds to compiler flags (see remarks about this flag)


author: Brad Bell <bradbell at seanet dot com> - 20220000.1-1
changelog:
  - Fix following long standing typos in cmake command:
  - 1. cppad_test_vector -> cppad_testvector
  - 2. cppad_max_num_theads -> cppad_max_num_threads
  - Temporary change to debug ppc64le build failure: replace to_string.cpp
  - Replace temporary change by a patch to example/utility/to_string.cpp


author: Brad Bell <bradbell at seanet dot com> - 20220000.1-1
changelog:
  - Modify to_string.cpp patch to print out more information on failure.
  - Add simple program to print machine epsilon before any other testing.


author: Brad Bell <bradbell at seanet dot com> - 20220000.1-1
changelog:
  - Try commenting out to_string test of long double on ppc56le arch.
    This problem does not reproduce on ppc64le-test.fedorainfracloud.org.


author: Brad Bell <bradbell at seanet dot com> - 20220000.1-1
changelog:
  - Not necessary to advance to 20220000.2 because Fedora build is getting
    correct result for cppad.pc.


author: Brad Bell <bradbell at seanet dot com> - 20220000.4-1
changelog:
  - Advance to upstream 20220000.4. Main motivation for this is to make 
    cppad_eigen.hpp work with Eigen 3.4.0.


author: Dodji Seketeli <dodji@redhat.com> - 2.4-1
changelog:
  - Update to 2.4 upstream tarball
  - Drop patches: cppcheck-1.83-tinyxml.patch, cppcheck-1.81-translations.patch, cppcheck-1.78-cfgdir.patch.
  - Bump BuildRequires for tinyxml2-devel to 2.6.0 at least.
  - Add BuildRequires pandoc.
  - There is no more bundled tinyxml in this new version of cppcheck.
  - Use the man/build-html.sh script to build the html version of the manual
  - Adjust $datadir/CppCheck to $datadir/Cppcheck.
  - Add $bindir/cppcheck*.qm files to the package.
  - Resolves: rhbz#1959478


author: Jens Petersen <petersen@redhat.com> - 1.20.1-2
changelog:
  - drop the modified BSD license since it is unmodified binary only
  - remove LGPL license file from the base package


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 0.99-1
changelog:
  - Update to v0.99
  - Add PowerPC to ExclusiveArch list (now supported)
  - Try running the program in %check


author: Artur Frenszek-Iwicki <fedora@svgames.pl> - 1:0.2-13.20151118gitf4d2682
changelog:
  - Add a patch to fix build failures
  - Respect Fedora's CFLAGS
  - Bring the spec up-to-date with current packaging guidelines


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.9.6-8
changelog:
  - Python 2 binary package renamed to python2-cracklib
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.0-3
changelog:
  - Fix for "sched: Change task_struct::state"
  - Fix for "sched: move CPU field back into thread_info if THREAD_INFO_IN_TASK=y"
  - Fix live debugging with lockdown=integrity
  - Fix 'waitq' command for Linux 4.13 and later kernels
  - Fix for "kmem -s|-S" option on Linux 5.7 and later kernels


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-3
changelog:
  - Fix segmentation fault caused by crash extension modules
  - Support the overflow stack exception handling on aarch64


author: Lianbo Jiang <lijiang@redhat.com> - 7.3.1-4
changelog:
  - Fix segfault on aarch64 for "bt -a|-c" command
  - Fix HZ calculation on Linux 5.14 and later
  - Fix for "timer -r" option to display all the per-CPU clocks


author: Dave Anderson <anderson@redhat.com> - 1.3.1-3
changelog:
  - Fix x86_64 "invalid structure member offset: thread_struct_fs"
    Resolves: rhbz#1589019
  - Fix arm64 "invalid structure member offset: thread_struct_fpsimd_state"
    Resolves: rhbz#1625810


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.5.1-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.5.1
    Resolves: rhbz#1851747


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.6.0-1
changelog:
  - Rebase crash-gcore-command to github upstream version crash-gcore-command-1.6.0
    Resolves: rhbz#1903465


author: Lianbo Jiang <lijiang@redhat.com> - 1.6.3-1
changelog:
  - Rebase to upstream crash-gcore-command-1.6.3
  - Fix memory allocation failure issue
  - Resolves: rhbz#2054066


author: Dave Anderson <anderson@redhat.com> - 1.0.3-2.el7
changelog:
  - Add RPM_OPT_FLAGS to gcc line in ptdump.mk
    Resolves: rhbz#1450708
  - Set gdb scope to get appropriate ring_buffer structure
    Resolves: rhbz#1451181


author: Dave Anderson <anderson@redhat.com> - 1.0.3-5
changelog:
  - ptdump: fix build warning: warning: this ‘if’ clause does not guard
  - ptdump: fix failure: ptdump: invalid size request: 0 type: "read page for write" 
  - ptdump: fix heap memory and fd leak when fault happens
    Resolves: rhbz#1786497


author: Dave Anderson <anderson@redhat.com> - 2.0.12
changelog:
  - Differentiate ppc64 .ring_buffer_read text symbol from ring_buffer_read data symbol
  - Fix for ring_buffer_per_cpu.nr_pages size change on big-endian systems 
  - Fix for Linux 4.7 change to the TRACE_EVENT_FL_TRACEPOINT flag
    Resolves: rhbz#1441914
    Resolves: rhbz#1440726


author: Dave Anderson <anderson@redhat.com> - 2.0.13
changelog:
  - Build requires crash-devel-7.2.0-2 and usage requires crash-7.2.0-2
    because of load_module structure change.
    Resolves: rhbz#1520825


author: Stanislaw Gruszka <sgruszka@redhat.com> - 3.18_2018.05.31-2
changelog:
  - Update wireless-regdb to 2018.05.31
  - Remove python2 dependency
  - Use sforshee signed reulatory.bin (required by modern kernels)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.2-1
changelog:
  - Update to 0.17.2
  - Fix Python deprecation (PY_SSIZE_T_CLEAN) (RhBug:1891785)
  - Revert back to old c API for destination file of cr_compress_file_with_stat and cr_compress_file to prevent a memory leak
  - Disable drpm for RHEL >= 9 (RhBug:1914828)
  - Setting updated/issued_date to None doesn't produce garbage values (RhBug:1921715)
  - Allow taking __repr__ (__str__) of closed xmlfile and sqlite (RhBug:1913465)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-1
changelog:
  - Update to 0.17.7
  - Remove insecure hashes SHA-1 and MD5 from the default build (RhBug:1935486)
  - Fix error when updating repo with removed modules metadata
  - Exit with status code 1 when loading of repo's metadata fails
  - Fix memory leaks (RhBug:1998426)
  - Fix valgrind warnings caused by subprocess calls


author: Pavla Kratochvilova <pkratoch@redhat.com> - 0.17.7-4
changelog:
  - Switch default of --keep-all-metadata to TRUE and add --discard-additional-metadata (RhBug:1992209)


author: Jindrich Novy <jnovy@redhat.com> - 3.15-3
changelog:
  - add Requires: criu-libs = %{version}-%{release} in criu-devel
  - add gating tests
  - Related: #1934415


author: Ondřej Pohořelský <opohorel@redhat.com> - 1.11-17.20190603git
changelog:
  - update to the latest release
  - add sed require
  - remove %clean section
  - remove obsolete Group tag
  - fix upstream URL
  - Resolves: rhbz#1696449, rhbz#1703982


author: Jason Montleon jmontleo@redhat.com - 1.0-0.34.20200608git0767a9f
changelog:
  - Update to master 0767a9f
  - Removes cros-pulse-config service. Adds /etc/skel/.config/pulse config files


author: Tomáš Mráz <tmraz@redhat.com> - 20200527-2.git63fc906
changelog:
  - explicitly enable DHE-DSS in gnutls config if enabled in policy
  - use grubby with --update-kernel=ALL to avoid breaking kernelopts
  - OSPP subpolicy: Allow GCM for SSH protocol
  - openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges
  - if the policy in FIPS mode is not a FIPS policy print a message
  - openssl: Add SignatureAlgorithms support
  - custom crypto policies: enable completely overriding contents of the list
    value
  - added ECDHE-ONLY.pmod policy module example
  - openssh: make LEGACY policy to prefer strong public key algorithms
  - various python code cleanups
  - update-crypto-policies: dump the current policy to
    /etc/crypto-policies/state/CURRENT.pol
  - split scripts into their own subpackage


author: Tomáš Mráz <tmraz@redhat.com> - 20200610-1.git0ac8b1f
changelog:
  - fallback to FIPS policy instead of the default-config in FIPS mode
  - java: Document properly how to override the crypto policy
  - krb5: No support for 3des anymore
  - reorder the signature algorithms to follow the order in default openssl list


author: Alexander Sosedkin <asosedkin@redhat.com> - 20210617-1.gitc776d3e
changelog:
  - implement scoped policies, e.g., cipher@SSH = ... (#1960266)
  - implement algorithm globbing, e.g., cipher@SSH = -*-CBC
  - deprecate derived properties:
    tls_cipher, ssh_cipher, ssh_group, ike_protocol
  - deprecate sha1_in_dnssec property
  - deprecate unscoped form of protocol property
  - update documentation
  - expand upstream test coverage
  - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS (#1946522)
  - support AES-192 ciphers in custom policies for non-TLS scenarios (#1876846)
  - stop claiming Camellia is disabled (#1925104)
  - disable CBC ciphers in FUTURE for everything but Kerberos (#1933016)
  - drop SHA224 from signature algorithms in FIPS:OSPP (#1934755)
  - condition ecdh-sha2-nistp384 on SECP384R1


author: Alexander Sosedkin <asosedkin@redhat.com> - 20211116-1.gitae470d6
changelog:
  - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
  - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
  - libssh: enable diffie-hellman-group14-sha256 support
  - openssl: fix disabling ChaCha20


author: Ondrej Kozina <okozina@redhat.com> - 2.2.0-2
changelog:
  - patch: Fix mapped segments overflow on 32bit architectures.
  - patch: Take optimal io size in account with LUKS2 reencryption.
  - Resolves: #1742815 #1746532


author: Ondrej Kozina <okozina@redhat.com> - 2.2.2-1
changelog:
  - Update to cryptsetup 2.2.2
  - LUKS2 reencryption honors activation flags (one time and persistent).
  - LUKS2 reencryption works also without volume keys put in kernel
    keyring service.
  - Resolves: #1757783 #1750680 #1753597 #1743399


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-2
changelog:
  - patch: Fix possible memory corruption in LUKS2 validation
  	 code in 32bit library.
  - Resolves: #1872294


author: Ondrej Kozina <okozina@redhat.com> - 2.3.3-4
changelog:
  - patch: Fix reencryption for custom devices with data segments
    set to use cipher_null.
  - Resolves: #1927409


author: Ondrej Kozina <okozina@redhat.com> - 2.3.7-1
changelog:
  - update to cryptsetup 2.3.7
  - fixes CVE-2021-4122
  - patch: Fix suboptimal optimization in bundled argon2.
  - patch: Fix bogus memory allocation/device read with
           invalid LUKS2 headers
  - patch: Fix typo in luksRepair prompt.
  - Resolves: #2021815 #2022301 #2031859


author: Vladis Dronov <vdronov@redhat.com> - 15.9-8
changelog:
  - Fix a double-free in changestring() (bz1886165)
  - Update Requires to include coreutils and ed
  - Adjust cscope-coverity-fixes.patch removing the fclose(script) chunk
  - Adjust BuildRequires and remove trailing spaces
  - Remove older source version from .gitignore
  - Rename cscope-invindex-sizing.patch as it is for the older upstream version


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-0
changelog:
  - Update to Samba 4.15.5
  - related: rhbz#2013596 - Rebase Samba to the the latest 4.15.x release
  - resolves: rhbz#2046127 - Fix CVE-2021-44141
  - resolves: rhbz#2046153 - Fix CVE-2021-44142
  - resolves: rhbz#2044404 - Printing no longer works on Windows 7
  - resolves: rhbz#2043154 - Fix systemd notifications
  - resolves: rhbz#2049602 - Disable NTLMSSP for ldap client connections (e.g. libads)


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-1
changelog:
  - resolves: #1995849 - [RFE] Change change password change prompt phrasing
  - resolves: #2029417 - virusfilter_vfs_openat: Not scanned: Directory or special file


author: Andreas Schneider <asn@redhat.com> - 4.15.5-5
changelog:
  - resolves: rhbz#2064325 - Fix 'create krb5 conf = yes` when a KDC has a
                             single IP address.


author: Pavel Filipenský <pfilipen@redhat.com> - 4.15.5-8
changelog:
  - resolves: rhbz#2079303 - Fix username map for unix groups
  - resolves: rhbz#2079299 - PAM Kerberos authentication fails with a clock skew error
  - resolves: rhbz#2079304 - Fix UPNs handling in lookup_name*() calls


author: Oliver Haessler <oliver@redhat.com> - 0.3.4-3
changelog:
  - removed Patch0 as it gives errors during build (no longer needed)
  - enable CLI tool again for EPEL7


author: Dave Love <loveshack@fedoraproject.org> - 4.4.2-2
changelog:
  - Adapt to el8, with qt5
  - Add guilib{,-devel} sub-packages really to separate GUI dependency
  - Add missing license files


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-39
changelog:
  - 1941437 - cupsd doesn't log job ids when logging into journal
  - 1782216 - Print queue is paused after ipp backend ends with CUPS_BACKEND_STOP
  - 1938384 - CUPS doesn't start if sssd starts after cupsd


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-40
changelog:
  - 1955964 - PreserveJobHistory doesn't work with seconds
  - 1927452 - CVE-2020-10001 cups: access to uninitialized buffer in ipp.c [rhel-8]


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.2.6-41
changelog:
  - 2006987 - Unauthenticated users can't move print jobs in Web UI
  - 2017919 - Setting 'MaxJobTime 0' does not set a job time to unlimited
  - 1726383 - "lpadmin -p <queue> -o cupsSNMPSupplies:false" doesn't work
  - 1982891 - Printing of banner before PCL file only prints banner
  - 2006591 - Trying to restart and hold a job doesn't work
  - 1811716 - lpr to non-existent printer reports incorrect error


author: Robert Marcano <robert@marcanoonline.com> - 3.0.1-12
changelog:
  - Fix use of removed '.setpdfwrite' in GS call (#1965717).
  - Change default configuration to add suffix to the generated filename in order to avoid
  overwriting previously generated files (#1419308)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-18
changelog:
  - http: send payload when (proxy) authentication is done (#1918692)
  - curl: Inferior OCSP verification (CVE-2020-8286)
  - libcurl: FTP wildcard stack overflow (CVE-2020-8285)
  - curl: trusting FTP PASV responses (CVE-2020-8284)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-19
changelog:
  - make `curl --head file://` work as expected (#1947493)
  - prevent automatic referer from leaking credentials (CVE-2021-22876)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-21
changelog:
  - fix TELNET stack contents disclosure again (CVE-2021-22925)
  - fix TELNET stack contents disclosure (CVE-2021-22898)
  - fix bad connection reuse due to flawed path name checks (CVE-2021-22924)
  - disable metalink support to fix the following vulnerabilities
      CVE-2021-22923 - metalink download sends credentials
      CVE-2021-22922 - wrong content via metalink not discarded


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22
changelog:
  - fix STARTTLS protocol injection via MITM (CVE-2021-22947)
  - fix protocol downgrade required TLS bypass (CVE-2021-22946)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22.el8_6.1
changelog:
  - fix credential leak on redirect (CVE-2022-27774)
  - fix auth/cookie leak on redirect (CVE-2022-27776)
  - fix OAUTH2 bearer bypass in connection re-use (CVE-2022-22576)


author: Kamil Dudka <kdudka@redhat.com> - 7.61.1-22.el8_6.4
changelog:
  - fix HTTP compression denial of service (CVE-2022-32206)
  - fix FTP-KRB bad message verification (CVE-2022-32208)


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-6
changelog:
  - Require latest python-jwcrypto with Python 3 fix
  - Use python2 prefix for all Python 2 dependencies


author: Christian Heimes <cheimes@redhat.com> - 0.5.0-9
changelog:
  - freeipa 4.4.4-2.fc26 and newer are compatible with custodia 0.5
  - Fix dependency to python2-jwcrypto >= 0.4.2


author: Petr Viktorin <pviktori@redhat.com> - 0.5.0-12
changelog:
  - Remove the Python 2 subpackage
  - Skip a test that fails on a different logging/error message
  - In %check, use pytest directly rather than tox


author: Christian Heimes <cheimes@redhat.com> - 0.6.0-1
changelog:
  - New upstream release Custodia 0.6.0
  - Run all tests again
  - Remove etcd support and python3-custodia-extra
  - Remove unnecesary conflict with old FreeIPA


author: Petr Pisar <ppisar@redhat.com> - 1.11.23-47
changelog:
  - Modernize spec file
  - Close a configuration file on a syntax error (bug #815660)
  - Do not use deprecated diff -L options (bug #772559)


author: Simo Sorce <simo@redhat.com> - 2.1.27-0.4rc7
changelog:
  - Add patch form Upstream PR559 to use RC4 implementation from OpenSSL
  - Resolves bz#1618744
  - Fix multilib issue bz#1663120


author: Neal Gompa <ngompa@datto.com> - 1.0-0.2
changelog:
  - Add fontpackages-filesystem Requires to all subpackages
  - Update the summary and description to indicate exp means expanded


author: Germano Massullo <germano.massullo@gmail.com> - 3.8.0-3
changelog:
  - removed all EL7 macros
  - replaced BuildRequires: iso-codes with BuildRequires: iso-codes-devel
  - removed SDL optional dependency since it has problems that are going to be fixed


author: Germano Massullo <germano.massullo@gmail.com> - 3.8.0-6
changelog:
  - adds 10826.patch that fixes aarch64 and ppc64le builds
  - re-enabled aarch64 on EL8
  - Replaced ExclusiveArch with ExcludeArch


author: Matthew Miller <mattdm@fedoraproject.org> - 0.4.2-1
changelog:
  - upstream release which fixes dst translation bug
  - new feature: allow format specifiers to turn off padding (as GNU date does)
  - new feature: matlab-style day numbers


author: Jeff Moyer <jmoyer@redhat.com> - 67-1.el8
changelog:
  - Rebase to v67.  This brings in the following features:
    - support for the 'security frozen' sysfs attribute
    - support for using pmem as system ram
    - various cleanup and bug fixes
  - Fix load-keys failure in initramfs (Jeff Moyer)
  - Resolves: bz#1724531 bz#1730673 bz#1741164 bz#1741165 bz#1749888 bz#1749889


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-4
changelog:
  - Get rid of SuSe conditionals (Jeff Moyer)
  - Remove the %check section. (Jeff Moyer)
  - Resolves: rhbz#1580829


author: Jeff Moyer <jmoyer@redhat.com> - 1.4-5.el8
changelog:
  - use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection
  - Resolves: rhbz#1630611


author: Jeff Moyer <jmoyer@redhat.com> - 1.5-1.el8
changelog:
  - rebase to pmdk-1.5, and rename to nvml (Jeff Moyer)
  - broken libpmemcto was removed
  - c++ bindings were moved to a separate project/package
  - Fix library requires to be =n-v-r instead of >= (Jeff Moyer)
  - resolves: rhbz#1488828


author: Jeff Moyer <jmoyer@redhat.com> - 1.6-2.el8
changelog:
  - Add explicit version dependencies
  - Fix up broken link line in build system
  - Related: rhbz#1598527


author: Nikola Forró <nforro@redhat.com> - 0.3.10-5
changelog:
  - make non-critical graphic tools weak dependencies
  - recommend inkscape, which can be used to convert SVG images


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-9
changelog:
  - Python 2 binary package renamed to python2-dbus
    See https://fedoraproject.org/wiki/FinalizingFedoraSwitchtoPython3


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.4-10
changelog:
  - Also add Provides for the old name without %_isa
  - Use %python_provide for the python3 subpackage and drop manual Provide which
    conflicts with %python_provide in the python2 subpackage.


author: Peter Jones <pjones@redhat.com> - 8-1
changelog:
  - Update to dbxtool 8
  - Make a "make coverity" rule to scan the source
    Results at: https://scan.coverity.com/projects/rhboot-dbxtool
  - Don't try to apply anything if PK and KEK aren't enrolled
  - Add --force and --quiet for the PK/KEK checker, and use them in the
    systemd service.
    Resolves: rhbz#1489942
  - Add a .syntastic_c_config for vim's Syntastic modules
  - Use tsearch()/tfind()/tdestroy() from libc instead of ccan htables
  - Don't open the dbx file with O_RDWR|O_CREAT, use O_RDONLY.
  - Lots of minor bug fixes gcc -Wextra and friends found.


author: Peter Jones <pjones@redhat.com> - 8-2
changelog:
  - Don't use -f in dbxtool.service; that'll make it do the thing we're
    trying to avoid.
    Resolves: rhbz#1489942


author: Kalev Lember <klember@redhat.com> - 0.27.1-1
changelog:
  - Update to 0.27.1
  - Switch to the meson build system
  - Don't set group tags
  - Remove obsolete rpm scriptlets
  - Fix gtk-doc directory ownership
  - Tighten soname glob


author: Marek Kasik <mkasik@redhat.com> - 0.28.0-2
changelog:
  - Check mtimes of files in /etc/dconf/db/*.d/ directories
  - when running "dconf update"
  - Related: #1570569


author: Olivier Fourdan <ofourdan@redhat.com> - 0.28.0-3
changelog:
  - Backport fix for emission of spurious changed signals
  - for all keys at once crashing gnome-shell
  - Resolves: #1666176


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.6.2-8
changelog:
  - Adjust spec to build on EPEL 9
  - Drop unused deprecated python3-mock test dependency
  - Switch test runner to pytest


author: liuxingwei <liuxingwei@uniontech.com> - 5.4.109-1.01
changelog:
  - remove uos logo in anolis
  - fix bug :app crash when delete account
  - add passwd reminder
  - add patch 0001-fix-bug-app-crash-when-delete-account.patch 0001-modify-uos-logo-in-anolis.patch 0001-add-password-reminder.patch


author: uoser <uoser@uniontech.com> - 5.1.0.9-7
changelog:
  - When the repair copy progress is minimized, an error occurs and the progress window does not pop up automatically


author: Sérgio Basto <sergio@serjux.com> - 1.0.109-3
changelog:
  - Don't mangling shebang in /usr/sbin/debootstrap from /bin/sh to /usr/bin/sh
    (#1654765), thanks to Laurent Vivier


author: Sérgio Basto <sergio@serjux.com> - 1.0.123-1
changelog:
  - Update to 1.0.123
  - Undefine mangle_shebangs (#1654765)
  - Remove old scriplets, %{_datadir} and /usr/share is the same
    and %{_sbindir} and /usr/sbin is also the same


author: liuxingwei <liuxingwei@uniontech.com> - 5.1.4-1.01
changelog:
  - add Environment variable in build
  - change Parameter Value in patch 0001-Mangle-Suit-Cracklib2.9.6.patch


author: liuxingwei <liuxingwei@uniontech.com> - 5.9.13-1.01
changelog:
  - Update to 5.9.13
  - remove docx from support format
  - add patch 0001-remove-docx-from-support-format.patch


author: Zhang taikun <zhantaikun@uniontech.com> - 0.0.6.1-1
changelog:
  - Update to 0.0.6.1
  - Remove desktop.conf from package
  - Rebuild for updated dtk
  - Add patch0001 for dtk without dtk5.5


author: Paul Wouters <paul.wouters@aiven.io> - 0.7.0-1
changelog:
  - Resolved: rhbz#1872621 [RFE] Ship systemd units for auto-renewal
  - Resolved: rhbz#1906674 dehydrated-0.7.0 is available


author: Matej Muzila <mmuzila@redhat.com> 1:1.5.3-3
changelog:
  - Backport upstream patch making dejagnu not to kill wrong process due to
    PID-reuse races
  - Resolves rhbz#1258142


author: Alejandro Sáez <asm@redhat.com> - 1.3.2-3
changelog:
  - Resolves: rhbz#1758612
  - Resolves: rhbz#1780554
  - Add patch: 1781-pkg-terminal-Fix-exit-status.patch


author: Alejandro Sáez <asm@redhat.com> - 1.6.0-1
changelog:
  - Rebase to 1.6.0
  - Resolves: rhbz#1938071
  - Removes golang-1.15.4-TestStepIntoWrapperForEmbeddedPointer.patch


author: Kalev Lember <klember@redhat.com> - 0.26-1
changelog:
  - Update to 0.26
  - Switch to the meson build system
  - Avoid hardcoding man page extensions
  - Drop old emacs-desktop-file-utils obsoletes/provides


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-21
changelog:
  - Add 0088-libmultipath-make-helper-function-to-trigger-path-ue.patch
  - Add 0089-multipathd-trigger-udev-change-on-path-addition.patch
  - Resolves: bz #1862032


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-23
changelog:
  - Add 0091-multipath-tools-add-HPE-MSA-1060-2060-to-hwtable.patch
    * Partial fix for bz #2058222
  - Add 0092-multipath-tools-update-mpp-force_readonly-in-ev_add_.patch
    * Fixes bz #2065468
  - Add 0093-updated-HPE-MSA-builtin-config.patch
    * Fixes bz #2058222
  - Resolves bz #2065468, #2058222


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-24
changelog:
  - Add 0094-multipath-return-failure-on-an-invalid-remove-comman.patch
    * Fixes bz #2052054
  - Add 0095-libmultipath-steal-the-src-string-pointer-in-merge_s.patch
  - Add 0096-libmultipath-enable-linear-ordering-of-bus-proto-tup.patch
  - Add 0097-libmultipath-use-bus_protocol_id-in-snprint_path_pro.patch
  - Add 0098-libmultipath-make-protocol_name-global.patch
  - Add 0099-libmultipath-add-a-protocol-subsection-to-multipath..patch
  - Add 0100-libmultipath-Set-the-scsi-timeout-parameters-by-path.patch
  - Add 0101-libmultipath-check-the-overrides-pctable-for-path-va.patch
  - Add 0102-libmultipath-fix-eh_deadline-documentation.patch
  - Add 0103-libmultipath-Add-documentation-for-the-protocol-subs.patch
  - Add 0104-libmultipath-use-symbolic-value-for-invalid-pcentry.patch
    * The above 10 patches implement feature from bz #2065477
  - Resolves: bz #2052054, #2065477


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-25
changelog:
  - Add 0105-multipathd-handle-fpin-events.patch
  - Add 0106-multipathd-disallow-changing-to-from-fpin-marginal-p.patch
  - Resolves: bz #2083077


author: Benjamin Marzinski <bmarzins@redhat.com> 0.8.4-27
changelog:
  - Add 0108-multipathd-Add-missing-ctype-include.patch
  - Add 0109-multipathd-replace-libreadline-with-libedit.patch
    * replace readline with libedit, to avoid license conflicts
  - Resolves: bz #2119887


author: Marian Csontos <mcsontos@redhat.com> - 0.8.5-3
changelog:
  - Remove obsolete pool-inactive option from thin_trim man page.
  - Check input file exists eralier, and prevent writing incorrect metadata.


author: Marian Csontos <mcsontos@redhat.com> - 0.9.0-1
changelog:
  - Update to upstream version 0.9.0.
  - Fix important issues found by static analysis.
  - Update crc32c to version 0.5 supporting non x86 architectures.
  - New tools thin_metadata_pack and thin_metadata_unpack.


author: Frantisek Sumsal <frantisek@sumsal.cz> - 2.2-1
changelog:
  - Bump dfuzzer to v2.2
  - Use a version tag in the source URL instead of a commit by default
  - Run the newly introduced unit tests


author: Chris Adams <linux@cmadams.net> - 3.0-2
changelog:
  - fix some notes from review request
  - add patch for gnulib autoconf
  - add -std=c99 for gnulib on EPEL7


author: Chris Adams <linux@cmadams.net> - 3.0-3
changelog:
  - correct license tag and include info
  - fix gnulib patch, add bundled provide
  - convert THANKS character set
  - add EPEL 6 support


author: Chris Adams <linux@cmadams.net> - 3.2-1
changelog:
  - new upstream version includes gnulib fix
  - add munin plugins from contrib
  - BR perl-generators since we install a perl script


author: Robert Scheck <robert@fedoraproject.org> - 1:0.97.3-16
changelog:
  - Added upstream patch to avoid infinite loop on filenames with invalid
    encoding (CVE-2019-19451, #1778767)


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.3-13.20171209
changelog:
  - update to 1.3-20171209
  - fix build with multiple options in hardened ldflags (#1548400)
  - add gcc to build requirements
  - use macro for ldconfig scriptlets


author: Petr Šplíchal <psplicha@redhat.com> 0.11-1
changelog:
  - Validate plugin types in config [fix #148]
  - Use email for searching Jira issues [fix #122]
  - Handle authentication errors in the Jira plugin
  - Update shebang to explicitly use python2
  - Add a new section Questions to docs [fix #155]
  - Raise error on unsuccessful request [fix #154]
  - New plugin for Pagure stats [fix #153]
  - Use requests-gssapi for Jira stats
  - Fix problems with the Sentry plugin
  - Merge configurable ssl verify for gitlab [#136]
  - Merge the improved gitlab search [#137]
  - Merge the new redmine plugin [#135]
  - Some minor adjustments for the redmine plugin
  - GitHub stats about reviewed PRs [#127]
  - Remove zero-fill from Jira issues [fix #149]
  - Add oauth2client to docs requirements [fix #152]
  - Adjust until limit of the sentry plugin [fix #151]
  - Update test data for the sentry & google plugins
  - Update Python macros to new packaging standards
  - Port to python-gssapi
  - Fixed issue with failing tests
  - Remove the idonethis plugin
  - Merge the new sentry plugin
  - Add basic Redmine support
  - Add basic GitLab support
  - Add search for subscribed bugs
  - Add did.spec to MANIFEST.in
  - Merge fix for bugs patched when created [#109]
  - Merge the new Bugzilla query syntax [#111]
  - Fetch only needed stats during GitHub testing
  - Merge support for pull request separation [#114]
  - Show month name / week number by default [#106]


author: Petr Šplíchal <psplicha@redhat.com> 0.12-1
changelog:
  - Add missing redmine dependency [fix #177]
  - Fix GitLab plugin's ssl_verify option [fix #168]
  - Document GitLab access token scope
  - Merge ssl_verify support for Jira [#169]
  - Merge support for Trello commented cards [#170]
  - Fix commented cards title, improve the test suite
  - Add a simple test for completed tasks, update auth
  - Merge support for completed Google tasks [#173]
  - Merge fix for the Google dependencies [#166]
  - Document additional google dependencies
  - Adding support for Google tasks
  - Add commentCard to trello DEFAULT_FILTERS
  - Allow to set 'ssl_verify' config for jira plugin
  - Support 'creator' in bugzilla plugin [fix #167]
  - Give a nice error when user not found [fix #159]
  - Fix jira basic authentication [fix #163]
  - Fix long_description in setup.py
  - Update pip installation instructions
  - Update the example config with recent plugins
  - Describe in more detail how the tool works
  - Silently ignore non-git directories [fix #143]
  - Separate arguments preparation, add test coverage
  - New option --test to run a simple smoke test
  - Remove python2-gssapi from Requires
  - Make REQUESTS_CA_BUNDLE example copy-paste-able
  - Merge fix for the gitlab --since issue [fix #156]
  - Remove gssapi dependency from the main cli module
  - Quick start section, update install instructions
  - Simplify setup.py, update requires
  - Fix --since issue in gitlab plugin


author: Petr Šplíchal <psplicha@redhat.com> - 0.13-1
changelog:
  - Support for the full file path config [#140]
  - Add the 'last friday' command [#197]
  - New plugin with basic confluence support [#199]
  - Improve redmine documentation [#195]
  - Add a new 'wip' option for gerrit [#194]
  - Include project name in gerrit stats [#192]
  - Fix the configuration examples for gerrit
  - Simplify Pagure search for created issues
  - Extended query for verified bugs [fix #189]
  - Fix for reviewed gerrit changes [#188]
  - Add gerrit work-in-progress changes [#187]
  - Fix for gerrit log strings [#186]
  - Improve gerrit search limit [#185]
  - Document API key auth for bugzilla [fix #180]
  - Mock bugzilla module to fix generating docs
  - Update feedparser requires
  - Fix for gerrit plugin typo [#179]


author: Petr Šplíchal <psplicha@redhat.com> - 0.14-1
changelog:
  - Include setup.py, use auto build/install, enable tests
  - Fix 'did --test' when no config is present
  - Update spec file for Python 3
  - Update shebang to explicitly use python3
  - Fix mixed tabs and spaces in docs/conf.py
  - Goodbye Python 2! Thanks and have a good night ;-)
  - Cleanup built docs directly
  - Do not remove python's egg when doing the cleanup
  - Document the custom plugin configuration
  - A couple of custom plugins feature adjustments
  - Support for custom plugin location [#160]
  - Fix typo in the license classifier


author: Petr Šplíchal <psplicha@redhat.com> - 0.14-2
changelog:
  - Include python3-setuptools in the BuildRequires
  - Use info level to log problems with plugin import


author: Petr Šplíchal <psplicha@redhat.com> - 0.16-1
changelog:
  - Convert smoke test into docs test, fix config file
  - Include a short summary in the help usage message
  - Enable simple smoke test in the testing farm
  - Add nitrate back into the package requires
  - Enable custom tarball in Packit to fix man page
  - Mention custom plugins config on the plugins page
  - Enable copr builds and add packit config
  - Custom eprint() is no more necessary [fix #211]
  - Convert custom section order to int [fix #212]


author: Petr Šplíchal <psplicha@redhat.com> - 0.17-1
changelog:
  - Prevent exploring tests under the tmt directory
  - Run unit tests always under the English locale
  - Enable basic smoke test against github in packit
  - Disable test for the redmine plugin
  - Update test data for the redmine plugin
  - Update test data for the sentry plugin
  - Update test data for the gerrit plugin
  - Use calendar year quarters by default [fix #223]
  - Merge the improved Jira search [#198]
  - Adjust improved Jira search using scriptrunner
  - Use scriptrunner issueFunction to speed up things
  - Simplify Packit config (copr_build no more needed)
  - Update test data for the sentry plugin
  - Implement Jira issue comparison to prevent dupes
  - Do not break sorting on merge
  - Add default command into the info log [fix #217]
  - Enable Python 3.8 in Travis, update metadata


author: Petr Šplíchal <psplicha@redhat.com> - 0.18-1
changelog:
  - Support custom xmlrpc endpoint for MoinMoin wiki
  - Adjust the approved merge requests for gitlab
  - Add search for approved merge requests in gitlab
  - Enable copr builds from master, simplify tests
  - Add "no prefix" rule to commit message suggestions
  - Simplify packit config, enable epel-8 for testing
  - Do not use interpolation for ConfigParser
  - Expand tilde in config path values
  - Fix a typo in the README format section
  - Update test data for the gerrit plugin
  - Adjust password file support for jira & confluence
  - Add password file options for jira and confluence


author: Lukáš Zachar <lzachar@redhat.com> - 0.19-1
changelog:
  - Install all required packages during docs building
  - Adjust code style to be pep8 compatible
  - Update docs for contributors, enable pre-commit
  - Add basic support for Zammad
  - Check if the GitHub credential token is valid
  - Fix jira issues search when user `login` provided
  - Add minor clarification note about token name
  - Split jira token expiration into two options
  - Adjust the support for Jira Personal Access Tokens
  - Support Personal Access Token in the Jira plugin
  - Return all the bugzilla results from a search
  - Install fresh sphinx when building readthedocs
  - Adjust the paging support for the GitHub plugin
  - Add pagination support for GitHub, fixes #247
  - Adjust the new plugin for reporting bodhi updates
  - Add a new plugin with support for Bodhi updates
  - Use user email for searching updated jira issues
  - Adjust the switch from fiscal to calendar year
  - Switch from fiscal year to natural year
  - Update docs for gitlab, github and confluence
  - Give a better message upon jira search failure
  - Raise the number of github issues fetched per page


author: Marek Kasik <mkasik@redhat.com> - 0.4.1-5
changelog:
  - Do not require poppler-cairo
  - It is not needed and drags in explicit dependency on poppler base library


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.1.11-32
changelog:
  - FTBFS: <sys/sysmacros.h> included where "major" and "minor" macros are in use
    (cdrkit-1.1.11-sysmacros.patch added)
  - https://bugzilla.redhat.com/show_bug.cgi?id=1263599 - man page clarified
    (cdrkit-1.1.11-manpagefix.patch modified)


author: Petr Pisar <ppisar@redhat.com> - 1.1.11-35
changelog:
  - perl dependency renamed to perl-interpreter
    <https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>


author: Robert Scheck <robert@fedoraproject.org> 0.7.1-17
changelog:
  - Work around CMake out-of-source builds on all branches (#1863427)
  - Add libdislocker.so symlink for dislocker-find (#1659733, #1583480)


author: Miroslav Suchy <msuchy@redhat.com> - 1.12-1
changelog:
  - remove old changelog entries
  - do not specify full path for hardlink [RHBZ#1714637]
  - add script for removing unused source tarballs in lookaside cache


author: clime <clime@fedoraproject.com> - 1.13-1
changelog:
  - fedmsg made an optional (recommnended) dependency
  - slight refactoring of upload.cgi script
  - tests added and documented


author: clime <clime@fedoraproject.com> - 1.16-1
changelog:
  - fixed exceptions for fedora-messaging
  - fixed topic for fedora-messaging (to git.lookaside.new)
  - spec tweak not to require distgit-selinux in containers
  - only Suggests fedmsg
  - garbage collection (git gc) script and systemd timer
    for its periodic run added


author: Marek Kasik <mkasik@redhat.com> - 3.5.27-27
changelog:
  - Avoid stack overflow in DjVuPort by remembering which file we are opening
  - Resolves: #1943411, #1943685


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Don't schedule dleyna_task_processor_t->on_quit_cb more than once
    (RH #1251366)
  - Remove all queues before dleyna_task_processor_t->on_quit_cb is run
    (RH #1205574, #1360209)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.6.0-3
changelog:
  - Don't remove a queue more than once
  - Remove any pending task processing handlers when destroying a queue
  Resolves: #1464902


author: Debarshi Ray <rishi@fedoraproject.org> - 0.5.0-4
changelog:
  - Fix crash due to double-free when destroying the same dls_upnp_t or
    dls_manager_t twice (RH #1251365)
  - Use make_build and make_install macros
  - Update minimum required versions; use pkgconfig(...) for BRs
  - Miscellaneous clean-ups


author: Lianbo Jiang <lijiang@redhat.com> - 1:3.2-6
changelog:
  - Updated to the latest upstream(5b3c8e995026 ("Allow overriding
    build settings from the environment"))
  - Resolves: rhbz#1796581


author: Petr Vokac <petr.vokac@cern.ch> - 1.15.2-3
changelog:
  - Fix response for Want-Digest header
  - Reduce checksum status interval for small files
  - Improve dCache migration config files


author: Petr Vokac <petr.vokac@cern.ch> - 1.15.2-5
changelog:
  - Query dpm_db first not to loose connection during long cns_db dump
  - More robust migration of files not associated with any spacetoken


author: Petr Vokac <petr.vokac@cern.ch> - 1.15.2-7
changelog:
  - Added new dependency on xrootd-voms
  - Fixed BDII ldif generation by new python ldap3 module
  - Fixed main dCache config template


author: Orion Poplawski <orion@cora.nwra.com> - 1.2.6-1
changelog:
  - Update to 1.2.6
  - Use URL for Source0
  - Add patch to drop -fstack-protector on mtcp_maybebpt.c
  - Drop configure hack
  - Run tests


author: Kapil Arya <kapil@ccs.neu.edu> - 1.2.7-1
changelog:
  - Preparing for upstream release 1.2.7.
  - Use %{_docdir} instead of %doc for QUICK-START and COPYING.


author: Kapil Arya <kapil@ccs.neu.edu> - 2.2-1
changelog:
  - Preparing for upstream release 2.2.
  - Remove libmtcp* packages.
  - Install all docs in _pkgdocdir
  - Added --retry-once flag to autotest.


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-1
changelog:
  - Update to 4.7.0
  - New optional parameter for filter_modules enables following modular obsoletes based on a config option module_obsoletes
  - Fix module remove --all when no match spec (RhBug:1904490)
  - Make an error message more informative (RhBug:1814831)
  - Expand history to full term size when output is redirected (RhBug:1852577) (RhBug:1852577,1906970)
  - Print additional information when verifying GPG key using DNS
  - Enhanced detection of plugins removed in transaction (RhBug:1929163)
  - Improve repo config path ordering to fix a comps merging issue (RhBug:1928181)
  - Keep reason when package is removed (RhBug:1921063)
  - Improve mechanism for application of security filters (RhBug:1918475)
  - [API] Add new method for reset of security filters
  - Remove hardcoded logfile permissions (RhBug:1910084)
  - Preserve file mode during log rotation (RhBug:1910084)
  - Increase loglevel in case of invalid config options
  - Prevent traceback (catch ValueError) if pkg is from cmdline
  - Check for specific key string when verifing signatures (RhBug:1915990)
  - Use rpmkeys binary to verify package signature (RhBug:1915990)
  - [doc] Improve description of modular filtering
  - [doc] deprecated alias for dnf repoquery --deplist <deplist_option-label>
  - [doc] Describe install with just a name and obsoletes (RhBug:1902279)
  - [doc] Fix: "sslcacert" contains path to the file
  - [doc] Added proxy ssl configuration options, increase libdnf require
  - [doc] Update documentation for module_obsoletes and module_stream_switch
  - [doc] Improve documentation for Hotfix repositories
  - [doc] fix: "makecache" command downloads only enabled repositories
  - [doc] Add info that maximum parallel downloads is 20
  - [doc] installonly_limit documentation follows behavior
  - [doc] Add documentation for config option sslverifystatus (RhBug:1814383)
  - The noroot plugin no longer exists, remove mention


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.7.0-4
changelog:
  - Add fail_fast parameter to _download_remote_payloads() method
  - Throw CompsError when a group or environment is not found for the install methods
  - Respect cacheonly in python dnf API (RhBug:1862970)
  - [doc] Improve description of multilib_policy=all (RhBug:1996681,1995630)
  - [doc] Document default colors


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-1
changelog:
  - Update to 4.0.21
  - [repomanage] Don't use cached metadata (RhBug:1899852)
  - [needs-restarting] fix -r in nspawn containers (RhBug:1913962,1914251)
  - doc: add packages to needs-restarting conf
  - Set blacklist subcommand as deprecated
  - Removed dependency on dnf.yum.misc.Checksum class (RhBug:1935465)
  - Bugs fixed (RhBug:1914827,1916782)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-2
changelog:
  - [versionlock] Locking obsoleted package does not make the obsoleter unavailable (RhBug:1957280) 
  - [repomanage] Allow running with metadata only
  - [repomanage] Enhance repomanage documentation (RhBug:1898293)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-4
changelog:
  - [reposync] Don't stop downloading packages on the first error (RhBug:2009894)
  - [copr] Fix traceback of copr search (RhBug:2019868)


author: Pavla Kratochvilova <pkratoch@redhat.com> - 4.0.21-7
changelog:
  - [groups-manager] Use full NEVRA for matching packages instead of only name (RhBug:2013633)
  - [versionlock] Fix: Multiple package-name-spec arguments don't lock (RhBug:2013324)
  - [versionlock] Update documentation for adding specifi version (RhBug:2013332)


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.0.45-1
changelog:
  - Since version 2.0.45, some of the configuration files have been renamed.
  Please merge your config to /etc/dnscrypt-proxy/dnscrypt-proxy.toml.rpmnew then
  replace dnscrypt-proxy.toml with that file.
  Read /usr/share/doc/dnscrypt-proxy/ChangeLog to know more about this change.
  - generate-domains-blocklist is now provided in /usr/share/doc/dnscrypt-proxy/
  - Fix: rhbz#1943749
  - Update to 2.0.45
  - Close: rhbz#1912171


author: Petr Menšík <pemensik@redhat.com> - 2.79-15
changelog:
  - Fix various issues in dnssec validation (CVE-2020-25681)
  - Accept responses only on correct sockets (CVE-2020-25684)
  - Use strong verification on queries (CVE-2020-25685)


author: Petr Menšík <pemensik@redhat.com> - 2.4.0-4
changelog:
  - Move queryparse to separate subpackage
  - Recommend only gnuplot for resperf-report
  - Disabling queryparse for EPEL8


author: Petr Menšík <pemensik@redhat.com> - 2.7.1-1
changelog:
  - Remove dnsperf-data package. Provide dnsperf-data command to download sample instead.
  - Update to 2.7.1


author: Tomas Hozza <thozza@redhat.com> - 0.15-4
changelog:
  - Added explicit BuildRequires on gcc as required by packaging guidelines
  - Added explicit Requires on e2fsprogs, so that /usr/bin/chattr is available
  - Remove redundant removal of immutable bit in %preun scriptlet (#1542400)


author: Paul Wouters <pwouters@redhat.com> - 20140915-1
changelog:
  - Updated to 20140915 with new-gtlds filter support
  - Updated warning patch (partially merged upstream)
  - Added usage patch that was missing the new filter name new-gtlds
  - Enabled hardening as this application takes in network input.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.0-1
changelog:
  - New version
    Resolves: rhbz#1333781
  - Switched to autotools
  - Various spec file cosmetic fixes (e.g. used optflags)


author: Omair Majid <omajid@redhat.com> - 2.1.519-1
changelog:
  - Update to .NET Core SDK 2.1.519 and Runtime 2.1.23
  - Drop patches merged upstream
  - Resolves: RHBZ#1884080


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-3
changelog:
  - fix CVE-2020-10957 dovecot: malformed NOOP commands leads to DoS (#1840354)
  - fix CVE-2020-10958 dovecot: command followed by sufficient number of newlines
    leads to use-after-free (#1840357)
  - fix CVE-2020-10967 dovecot: sending mail with empty quoted localpart
    leads to DoS (#1840356)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-4
changelog:
  - fix CVE-2020-12100 resource exhaustion via deeply nested MIME parts (#1866756)
  - fix CVE-2020-12673 out of bound reads in dovecot NTLM implementation (#1866761)
  - fix CVE-2020-12674 crash due to assert in RPA implementation (#1866768)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.8-6
changelog:
  - fix mail storage block count parsing (#1894418)
  - MIME parser crashed when boundaries were wrong (#1888111)


author: Michal Hlavinka <mhlavink@redhat.com> - 1:2.3.16-1
changelog:
  - dovecot updated to 2.3.16, pigeonhole to 0.5.16
  - fix CVE-2021-33515 plaintext commands injection (#1980014)


author: Timothy Redaelli <tredaelli@redhat.com> - 19.11.1-1
changelog:
  - Rebase DPDK to 19.11.1 (#1824905)
  - Remove dpdk-pmdinfo.py (#1801361)
  - Add Requires: rdma-core-devel libmnl-devel on x86_64 for dpdk-devel (#1813252)


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-1
changelog:
  - Update to 1.20.9 (#1949336)
  - flex is not required anymore, doxygen is only needed if you call make doc
  - The dpkg-gettext.pl and controllib.pl are long obsolete, can be removed.
  - dpkg hasn't package install-info for a long time.
  - and others reviews


author: Sérgio Basto <sergio@serjux.com> - 1.20.9-4
changelog:
  - add %config(noreplace) to avoid clean up databases on upgrades and to be
    compliant with silverblue


author: Lukas Nykryn <lnykryn@redhat.com> - 049-133.git20210112
changelog:
  - 95fcoe: Fix startup when fcoe module is included
  - Fix pre-trigger stage by replacing exit with return in


author: Lukas Nykryn <lnykryn@redhat.com> - 049-151.git20210719
changelog:
  - Drop 51-dracut-rescue-postinst.sh entirely
  - fix(fips): add dh and ecdh ciphers
  - 35network-legacy: discard pointless RTNETLINK message
  - 95fcoe: don't install if there is no FCoE hostonly devices
  - 95nfs: set correct ownership and permissions for statd 
  - fix(dracut.sh): harden dracut against GZIP environment
  - fix(multipath): stop multipath before udev db cleanup
  - fix(dracut-functions): implement a cache for get_maj_min
  - fix(dracut-functions): get_maj_min without
  - fix(fcoe): rd.nofcoe=0 should disable fcoe
  - fix(fcoe): rename rd.nofcoe to rd.fcoe
  - fix(mdraid): remove offroot
  - fix(mdraid): add grow continue service
  - net-lib.sh: support infiniband network mac addresses
  - 95nvmf: add nvmf-autoconnect script


author: Lukas Nykryn <lnykryn@redhat.com> - 049-188.git20210802
changelog:
  - dracut-functions: fix botched backport
  - squash: unsquash the root image instead of mounting it on
  - 99squash: fail early if can't install require modules in
  - 99squash: Don't hardcode the squash sub directories
  - 99squash: improve pre-requirements check
  - Fixed some SUSE specific typos and outputs
  - 99squash: simplify the code
  - 99squash: Check require module earlier, and properly
  - fix(99squash): use kernel config instead of modprobe to check
  - kill bogus comment
  - busybox: simplify listing of supported utilities
  - fix: use find_binary
  - fix: shellcheck for modules.d/99squash/setup-squash.sh
  - fix: shellcheck for modules.d/99squash/clear-squash.sh
  - fix: shellcheck for modules.d/99squash/module-setup.sh
  - fix(squash): this module shouldn't depend on bash
  - refactor(squash): move the post install scripts into the
  - fix: revise squash module checks
  - fix(squash): post install should be the last step before
  - refactor(squash): move all setup code to init-squash.sh
  - feat(squash): install and depmod modules seperately
  - refactor(squash): don't record mount points in text file
  - lsinitrd: list squash content as well
  - refactor(squash): structure in a cleaner way
  - feat(squash): use busybox for early setup if available
  - feat: squash module follow --compress option
  - perf: disable initrd compression when squash module is
  - fix(squash): shellcheck for modules.d/99squash
  - fix(squash): don't mount the mount points if already mounted
  - feat(squash): install umount util
  - fix(squash): create relative symlinks
  - fix(dracut.sh): handle '-i' option to include files beginning
  - fix(dracut.sh): handle symlinks appropriately while using
  - fix(squash): keep ld cache under initdir
  - dracut-functions: backport block_is_* functions
  - fix(squash): fixes related to squash module rebase
  - fix(squash): remove tailing '/' when installing ld.so.conf.d


author: Pavel Valena <pvalena@redhat.com> - 049-201.git20220131
changelog:
  - ci: introduce C8S based GHA CI
  - ci: backport TEST-21-NFS-NM
  - dracut.sh: fix early microcode detection logic
  - fix(url-lib): make pre-pivot hook separetely per nfs mount
  - fix(watchdog): replace return with echo
  - fix(network): add errors and warnings when network interface
  - dracut.sh: add check for invalid configuration files
  - fips: removed false-positive 'FATAL: Module xxx not found'
  - fix(shutdown): be robust against forced shutdown
  - fix(fips): handle s390x OSTree systems


author: Panu Matilainen <pmatilai@redhat.com> - 0.91-1
changelog:
  - Use a relative path from udevrulesdir
  - Use fedorable source url which spectool actually understands
  - Move bash completions to newer standard in %{_datadir}/bash-completion
  - Use %make_install macro
  - Require /usr/sbin/udevadm for %post and %postun


author: Timothy Redaelli <tredaelli@redhat.com> - 0.101-1
changelog:
  - Rebase to driverctl-0.101-1.el7 (#1648411):
    - Fix shellcheck warnings (#1506969)
    - Install bash-completion as driverctl instead of driverctl-bash-completion.sh
    - fix load_override for non-PCI bus
    - Make sure driverctl had loaded all the overrides before basic.target (#1634160)


author: Timothy Redaelli <tredaelli@redhat.com> - 0.108-1
changelog:
  - Fix bash autocompletion (#1657020)
  - Fix --no-save to do not always returns with exit code 1
  - Return error code when unbinding a device from a driver fails


author: Merlin Mathesius <mmathesi@redhat.com> - 1.4-19
changelog:
  - Drop unnecessary BuildRequires for binutils-static
    Not building kernel modules, so use kernel-headers instead of kernel-devel


author: Ales Matej <amatej@gmail.com> 0.4.1-1
changelog:
  - Update to 0.4.1
  - Relicense to LGPLv2+
  - Fix number of bugs mainly with drpm_make and drpm_apply
  - Add support for zstd drpms
  - CMake cleanups
  - Make running tests optional
  - Small spec improvements


author: Miroslav Rezanina <mrezanin@redhat.com> - 1.6.0-1
changelog:
  - Use 1.6.0 version [bz#1679676]
  - Resolves: bz#1679676
    (dtc changes blocked until gating tests are added)


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.12.1-1
changelog:
  - Update to 1.12.1
  - Make doc subpackage noarch
  - Drop unnecessary Requires
  - Misc specfile fixes to comply with the latest guidelines
  - Fix changelog formatting


author: Davide Cavalca <dcavalca@fedoraproject.org> - 1.12.1-4
changelog:
  - Add Recommends for pam_duo to the main package to prevent potential lockout
    issues (Fixes: RHBZ#2134160)


author: Jonathan Dieter <jdieter@gmail.com> - 0.11.3-1
changelog:
  - Update to 0.11.3 with bug fixes
  - Remove patch to use system xxhash since upstream does that by default now


author: Parag Nemade <pnemade AT redhat DOT com> - 20030318-12
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove %defattr
  - Remove group tag
  - Change %define to %global


author: Jakub Martisko <jamartis@redhat.com> - 7.1-27
changelog:
  - Include sys/sysmacros header in the growisofs.c file
  - Some macros have been moved from sys/types to sys/sysmacros which lead to FTBFS
  - Resolves: 1611716


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.4.0.5-3
changelog:
  - fix typo calling configure macro
  - add license and doc files
  - use _cups_serverbin macro
  - use autoreconf


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.4.0.5-4
changelog:
  - don't own cups folders
  - COPYING not needed, since content is the same as LICENSE
  - fix autotools deprecration warnings


author: Stan Cox <scox@redhat.com> - 10.1.0-4
changelog:
  - Resolves: rhbz#963475 dyninst must be ported to aarch64
    Remove Requires: glibc-static from %package testsuite


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.0.1-26
changelog:
  - Build a shared library in addition to the static one; add a build conditional
    to disable the static library when dependent packages are ready
  - Re-organize the contents into subpackages (add -libs and -tools, and let the
    base package be a metapackage).
  - Better respect distribution build flags
  - Fix a possible buffer overflow and patch an unused variable


author: Lukas Czerner <lczerner@redhat.com> 1.45.4-1
changelog:
  - Rebase to the release 1.45.4 (#1783777)
  - provide rhel6/7 compatible fs_type in mke2fs.conf (#1780279)
  - fix crafted ext4 partition leads to out-of-bounds write (#1768709)
  - include note about supported rhel8 features and options (#1788573)


author: Stewart Smith <stewart@flamingspork.com> - 130-4
changelog:
  - Fix Summary
  - Build eatmydata per-arch as script contains arch specific dirs
    See https://bugzilla.redhat.com/show_bug.cgi?id=2099313


author: Jos de Kloe <josdekloe@gmail.com> - 2.8.2-3
changelog:
  - Explicitely disable python in cmake call and use ctest3 rather than ctest
    to ensure the build runs on EPEL-7 as well


author: Felix Kaechele <felix@kaechele.ca> - 0.4.1-1
changelog:
  - update to 0.4.1
  - use new upstream URLs
  - drop patch now upstreamed
  - added libs and devel subpackages


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-1.el8
changelog:
  - Rebase to edk2-stable202005 [bz#1817035]
  - Resolves: bz#1817035
    ((edk2-rebase-rhel-8.3) - rebase edk2 to upstream tag edk2-stable202005 for RHEL-8.3)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-2.el8
changelog:
  - edk2-OvmfPkg-QemuKernelLoaderFsDxe-suppress-error-on-no-k.patch [bz#1844682]
  - edk2-OvmfPkg-GenericQemuLoadImageLib-log-Not-Found-at-INF.patch [bz#1844682]
  - edk2-SecurityPkg-Tcg2Dxe-suppress-error-on-no-swtpm-in-si.patch [bz#1844682]
  - Resolves: bz#1844682
    (silent build of edk2-aarch64 logs DEBUG_ERROR messages that don't actually report serious errors)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-3.el8
changelog:
  - edk2-UefiCpuPkg-PiSmmCpuDxeSmm-pause-in-WaitForSemaphore-.patch [bz#1861718]
  - Resolves: bz#1861718
    (Very slow boot when overcommitting CPU)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-4.el8
changelog:
  - edk2-OvmfPkg-SmmControl2Dxe-negotiate-ICH9_LPC_SMI_F_CPU_.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-befo.patch [bz#1849177]
  - edk2-OvmfPkg-CpuHotplugSmm-fix-CPU-hotplug-race-just-afte.patch [bz#1849177]
  - edk2-CryptoPkg-OpensslLib-Upgrade-OpenSSL-to-1.1.1g.patch [bz#1893806]
  - edk2-redhat-bump-OpenSSL-dist-git-submodule-to-1.1.1g-RHE.patch [bz#1893806]
  - Resolves: bz#1849177
    (OVMF: negotiate "SMI on VCPU hotplug" with QEMU)
  - Resolves: bz#1893806
    (attempt advancing RHEL8 edk2's OpenSSL submodule to RHEL8 OpenSSL 1.1.1g (or later))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20200602gitca407c7246bf-5.el8
changelog:
  - edk2-MdeModulePkg-LzmaCustomDecompressLib-catch-4GB-uncom.patch [bz#1892318]
  - edk2-redhat-add-OVMF-binary-that-will-support-SEV-ES.patch [bz#1956837]
  - Resolves: bz#1892318
    (edk2: possible heap corruption with LzmaUefiDecompressGetInfo [rhel-8])
  - Resolves: bz#1956837
    (Additional build of edk2 without SMM (dual build / sub-package) for SEV-ES)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-1
changelog:
  - Rebase to edk2-stable202105 [bz#1938238]
  - Resolves: bz#1938238
    ((edk2-rebase-rhel-8.5) - rebase edk2 to edk2-stable202105 for RHEL-8.5)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1956408]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1956408]
  - Resolves: bz#1956408
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-8.5.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988762]
  - Resolves: bz#1988762
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-1.el8
changelog:
  - Rebase to latest upstream release [bz#2018386]
  - Resolves: bz#2018386
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Jon Maloy <jmaloy@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2041754]
  - Resolves: bz#2041754
    (Mark SEV launch secret area as reserved)


author: Peter Jones <pjones@redhat.com> - 3-2
changelog:
  - Always provide macros for efi_arch and efi_alt_arch (and their _upper
    variants), and make efi_has_arch and efi_has_alt_arch 0 when they will be
    wrong.  This ensures everything can always expand when we're on a non-efi
    architecture.


author: Peter Jones <pjones@redhat.com> - 15-1
changelog:
  - Update to efibootmgr 15
  - Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  - make --loader default build-time configurable
  - sanitize set_mirror()/get_mirror()
  - Add support for parsing loader options as UCS2
  - GCC 7 fixes
  - Don't use -fshort-wchar since we don't run on EFI machines.
  - Also rebuild for efivar-31-1.fc26 to get symbol versioning right.
    Resolves: rhbz#1468841


author: Peter Jones <pjones@redhat.com> - 35-1
changelog:
  - Update to efivar 35
  - fixes for older compilers
  - efi_get_variable_exists()
  - Lots of stuff to make CI work.
  - use usleep() to avoid hitting the kernel rate limiter on efivarfs
  - better EFI_GUID macro
  - add efi_guid_fwupdate (0abba7dc-e516-4167-bbf5-4d9d1c739416)


author: Peter Jones <pjones@redhat.com> - 36-1
changelog:
  - Update to efivar 36 (and some change)
    Resolves: rhbz#1635019
  - Add NVDIMM support
  - Re-written linux interface parser to handle how devices are
    partitioned better, and for cleaner code, with one file per device
    type.
  - lots of verbosity updates
  - better CI
  - analysis with clang's analyzer as well as coverity
  - Better handling of immutable bits in sysfs
  - LIBEFIVAR_OPS=help
  - lots of code cleanups.
  - Add emmc device support
  - Add SAS port expander support
  - Support for ACPI root nodes that are less common
    (i.e. ACPI Generic Container and Embedded Controller PNP nodes)
  - Make abbreviated device paths if we can't parse a device's info
  - Don't require NVME to have an EUI


author: Lyude Paul <lyude@redhat.com> - 8.4.0-2.20181118git1830dcb
changelog:
  - Start using proper git version strings for rawhide
  - Enabling building of wayland and freetype demos


author: Mark Wielaard <mjw@redhat.com> - 0.182-1
changelog:
  - Upgrade to upstream 0.182
    - backends: Support for tilegx has been removed.
    - config: New /etc/profile.d files to provide default $DEBUGINFOD_URLS.
    - debuginfod: More efficient package traversal, tolerate various
      errors during scanning, grooming progress is more visible and
      interruptible, more prometheus metrics.
    - debuginfod-client: Now supports compressed (kernel) ELF images.
    - libdwfl: Add ZSTD compression support.


author: Mark Wielaard <mjw@redhat.com> - 0.186-1
changelog:
  - Upgrade to upstream 0.186
    - debuginfod-client: Default $DEBUGINFOD_URLS is computed from
      drop-in files /etc/debuginfod/*.urls rather than
      hardcoded into the /etc/profile.d/debuginfod*
      scripts.
      Add $DEBUGINFOD_MAXSIZE and $DEBUGINFOD_MAXTIME settings
      for skipping large/slow transfers.
      Add $DEBUGINFOD_RETRY for retrying aborted lookups.
    - debuginfod: Supply extra HTTP response headers, describing
      archive/file names that satisfy the requested buildid content.
      Support -d :memory: option for in-memory databases.
      Protect against loops in federated server configurations.
      Add -r option to use -I/-X regexes for grooming stale files.
      Protect against wasted CPU from duplicate concurrent requests.
      Limit the duration of groom ops roughly to rescan (-t) times.
      Add --passive mode for serving from read-only database.
      Several other performance improvements & prometheus metrics.
    - libdw: Support for the NVIDIA Cuda line map extensions.
      DW_LNE_NVIDIA_inlined_call and DW_LNE_NVIDIA_set_function_name
      are defined in dwarf.h. New functions dwarf_linecontext and
      dwarf_linefunctionname.
    - translations: Update Japanese translation.


author: Tomáš Mráz <tmraz@redhat.com> - 0.12-0.50.pre6
changelog:
  - drop disablement of TLS1.0 on second attempt to connect,
    it would not work correctly anyway and the code does not build
    with OpenSSL-1.1.0


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.51.pre6
changelog:
  - fix compatibility with OpenSSL 1.1 (#1423519)
  - make configure.ac recognize recent versions of GCC
  - apply patches automatically to ease maintenance


author: Kamil Dudka <kdudka@redhat.com> - 0.12-0.55.pre6
changelog:
  - drop support for JS engine that is no longer maintained
  - always build verbosely, drop outdated doc files


author: Marcin Dulak <Marcin.Dulak@gmail.com> - 5.2.14-1
changelog:
  - new upstream release
  - stop maintenance on epel6/epel7 since libxc 3 or newer is required by elk-5.2.14


author: Mike FABIAN <mfabian@redhat.com> - 1.5.37-1
changelog:
  - Update to 1.5.37
  - Update translations from Zanata (pl and uk updated)
  - Make “Add direct input” option work correctly when
    “Remember last preedit input method” option is off
  - Fix test case for Korean
  - Rewrite setup UI completely in Python, without using Glade
  - Fix format string in debug message when a dictionary .aff file has no encoding
    (Resolves: rhbz#1575659)
  - Return False in read_training_data_from_file() if file cannot be opened


author: Mike FABIAN <mfabian@redhat.com> - 1.5.38-2
changelog:
  - Update to 1.5.38
  - Refresh french translation (thanks to Thierry Thomas)
  - Mark comments in the emoji-picker about dialog as translatable


author: Mike FABIAN <mfabian@redhat.com> - 2.0.0-1
changelog:
  - Update to 2.0.0
  - Update translations because of the merge of the engines (de, pl, uk updated)
  - Update emoji annotations from CLDR
  - Do not hardcode icon names in desktop files
    (Resolves: https://github.com/mike-fabian/ibus-typing-booster/issues/17)
  - Change the default for “Unicode symbols and emoji predictions” to “False”
  - Merge all typing-booster engines into one
  - Change the UI of the setup tool to make it possible to select
    multiple input methods and dictionaries
  - Move the buttons to learn from a file and to delete learned data to the options tab
  - Use the same “About” dialog in the setup tool as in emoji-picker


author: Mike FABIAN <mfabian@redhat.com> - 2.0.2-1
changelog:
  - Update to 2.0.2
  - Better Tab handling, use Tab to switch to the next candidate, not to commit
  - Update to 2.0.1
  - Update translations from zanata (ja updated)
  - Update emoji annotations from CLDR
  - Fix some bugs in the usage of “prefix” for prefixes other than “/usr” (For FreeBSD)
  - Make itb_util.get_ime_help() work on FreeBSD
  - Update UnicodeData.txt to Unicode 11.0.0
  - Remove useless 't-nil vi-base': 'vi-base.mim', from M17N_INPUT_METHODS
  - Remove extra space in entry for sa-IAST input method to make it work
  - Show in the setup tool in the input listbox whether minput_open_im() succeeded.
  - Use the rocket icon emoji_u1f680.svg from the “Noto Color Emoji” font


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - emoji-picker: Show a concise description of a selected emoji in the header bar
  - Update the setup UI when settings are changed outside of the setup UI
  - Migrate IBusConfig to GSettings (The old settings are
    unfortunately lost, so one has to open the setup tool
    and recreate ones favourite settings).
  - Read emoji data files always in UTF-8


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-3
changelog:
  - Make “make check“ test cases work again when building the rpm
    (To avoid that rpmdiff in the errata tool reports a problem)
  - Related: rhbz#1619153


author: Mike FABIAN <mfabian@redhat.com> - 2.1.0-5
changelog:
  - Prevent also BackSpace from reopening a preedit when the
    option “Arrow keys can reopen a preedit” is off
  - Resolves: rhbz#1925030


author: Zdenek Dohnal <zdohnal@redhat.com> - 1.6.6-14
changelog:
  - remove old stuff https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/MRWOMRZ6KPCV25EFHJ2O67BCCP3L4Y6N/


author: Wolfgang Ulbrich <fedora@raveit.de> - 1.26.0-3
changelog:
  - add some upstream patches fro 1.26 branch
  - Require libpeas-loader-python3 also for RHEL 8 and 9
  - initial build for epel8


author: Benjamin A. Beasley <code@musicinmybrain.net> - 1.1-21
changelog:
  - Adjust whitespace to personal preference
  - Switch URLs to HTTPS
  - Modernize spec file macros
  - Fix man page globs
  - Add license and textual documentation files
  - Do autoreconf


author: Maxwell G <gotmax@e.email> - 8-30
changelog:
  - Pull in appropriate python3X-rpm-macros package for non-default Python
    versions
  - Ensure the python macros work properly when building against non-default
    python interpreters.
  - Only pull in python2-rpm-macros when python2-devel is present.
  - Remove macros that have been added to RHEL itself.


author: Maxwell G <gotmax@e.email> - 8-32
changelog:
  - Explicitly Require python3-rpm-generators
  - Remove %__pythondist_provides from pythondist.attr.
  - Ensure that packages built against alternative python stacks do not have
    python3dist(x) Provides.
  - Related: rhbz#1776941.


author: Miro Hrončok <mhroncok@redhat.com> - 8-12
changelog:
  - Backport %py_shebang_fix, %pytest, %py_provides
  - Allow to combine %pycached with other macros (e.g. %exclude or %ghost) (#1838992)


author: Neal Gompa <ngompa13@gmail.com> - 8-15
changelog:
  - Backport support for out-of-source builds controlled by __cmake_in_source_build macro (#1861329)
  - Backport cmake_build and cmake_install macros
  - Backport ctest macro


author: Miro Hrončok <mhroncok@redhat.com> - 8-18
changelog:
  - Add %python3_platform_triplet and %python3_ext_suffix
  - https://fedoraproject.org/wiki/Changes/Python_Upstream_Architecture_Names


author: Jack Magne <jmagne@redhat.com> - 1.1.2-10
changelog:
  - Resolves: rhbz#1679659 - esc changes blocked until gating tests are added.
  - Added notification list in yaml file, so entities are notified of changes.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-11
changelog:
  - Resolves: rhbz#1724787 - ESC - HTTP GET Requests incorrectly Being Sent To TPS for Token Operations [8.2] 
  - Resolves: rhbz#1734117 - ESC does not detect/recognize both clean and formatted (with phone home) smart cards
  - Resolves: rhbz#1733645 - Gemalto, CAC, SCP01 cards are not detected by HP keyboard KUS1206 with builtin smartcard reader


author: Jack Magne <jmagne@redhat.com> - 1.1.2-12
changelog:
  - Resolves: rhbz#1646486 - alt tokens not detected by ESC
  - Resolves: rhbz#1774750 - ESC's unusual behavior after formatting a blank Gemalto token
  - Resolves: rhbz#1774770 - After formatting a Gemalto/SCP03 token, ESC shows incorrect Issuer, Issued To, Status, and Token ID details


author: Jack Magne <jmagne@redhat.com> - 1.1.2-18
changelog:
  - Related: rhbz#1870715 - HP Keyboard does not list the certificates on an enrolled smart card.
  - Re-spin with greater release number, to apease tps tests.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-19
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z]


author: Jack Magne <jmagne@redhat.com> - 1.1.2-20
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], z stream respin.


author: Jack Magne <jmagne@redhat.com> - 1.1.2-22
changelog:
  - Resolves: rhbz#1972570 - Create explicit pcsc-lite requrement to assure recent pcsc-lite fix [rhel-8.4.0.z], z stream respin.
  - Adjust final pcsc-lite package requirement.


author: Ondřej Lysoněk <olysonek@redhat.com> - 1.2-9
changelog:
  - Deliver mail to user@hostname locally only if hostname is 'localhost'
  - Do not try to check if the hostname resolves to 127.0.0.1. That would be
  - complicated and maybe not even the right thing to do.
  - Resolves: rhbz#1491721


author: Filipe Brandenburger <filbranden@gmail.com> - 6.0.11-3
changelog:
  - Go back to using protobuf-lite on epel8, since the -devel package
    for it is now available (rhbz#1787458).


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 6.1.4-1
changelog:
  - Update to 6.1.4
  - Fix for SIGSTKSZ/MINSIGSTKSZ non-constant on glibc > 2.33
  - Declare bundled libraries


author: Miro Hrončok <mhroncok@redhat.com> - 1.18.10-5
changelog:
  - Add breezy plugin on Fedora 31+
  - Remove bazaar plugin on Fedora 32+
  - https://fedoraproject.org/wiki/Changes/ReplaceBazaarWithBreezy


author: Peter Hutterer <peter.hutterer@redhat.com> 2.7.0-8
changelog:
  - Split the lib into its own subpackage, it's LGPLv3+
  - remove utouch-evemu Obsoletes line, it's been over 5 years


author: Marek Kasik <mkasik@redhat.com> - 3.28.4-7
changelog:
  - Set "application-id" property for evince's GApplication
  - to "org.gnome.evince.Application" to avoid a critical warning.
  - Resolves: #1842017


author: Milan Crha <mcrha@redhat.com> - 3.28.5-11
changelog:
  - Update patch for RH bug #1713619 (test-cal-client-get-revision could fail due to delayed D-Bus property change notification)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-17
changelog:
  - Resolves: #1972749 (PrintableOptions.cmake: Correct variable name comparison)
  - Resolves: #1971676 (ECalBackendFile: Free interval tree only when being allocated)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-7
changelog:
  - Add patch for RH bug #1764818 (Sync CategoryList with mail Labels)
  - Add patch for RH bug #1765005 (Send meeting change notifications only if being the organizer)


author: Milan Crha <mcrha@redhat.com> - 3.28.5-10
changelog:
  - Resolves: #1886026 (Simplify OAuth2 for outlook.office365.com server)
  - Resolves: #1885229 (Allow change of the Microsoft 365 OAuth2 endpoints)


author: Owen Taylor <otaylor@redhat.com> - 2.4.2-4
changelog:
  - Make manpage installation agnostic of compression
    https://fedoraproject.org/wiki/Packaging:Guidelines#Manpages


author: Jaroslav Škarvada <jskarvad@redhat.com> - 4.96-2
changelog:
  - Fixed "tainted search query is not properly quoted" for greylisting,
    patch provided by Marcel Härry <mh+fedora@scrit.ch>


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-4
changelog:
  - CVE-2021-29458 exiv2: out-of-bounds read in Exiv2::Internal::CrwMap::encode
    Resolves: bz#1953758

  - CVE-2021-29457 exiv2: heap-based buffer overflow in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1953772


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-5
changelog:
  - CVE-2021-29473 exiv2: out-of-bounds read in Exiv2::Jp2Image::doWriteMetadata
    Resolves: bz#1954065

  - CVE-2021-29470 exiv2: out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1955014


author: Jan Grulich <jgrulich@redhat.com> - 0.27.3-6
changelog:
  - CVE-2021-29623 exiv2: a read of uninitialized memory may lead to information leak
    Resolves: bz#1964182

  - CVE-2021-32617 exiv2: DoS due to quadratic complexity in ProcessUTF8Portion
    Resolves: bz#1964188


author: Jan Grulich <jgrulich@redhat.com> - 0.27.4-3
changelog:
  - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure
    Resolves: bz#1993282

  - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header
    Resolves: bz#1993245


author: Jan Grulich <jgrulich@redhat.com> - 0.27.5-1
changelog:
  - Exiv2 0.27.5
    Resolves: bz#2018422

    Fix stack exhaustion issue in the printIFDStructure function leading to DoS
    Resolves: bz#2003673


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-5
changelog:
  - Fix multiple CVEs
  - CVE-2022-23852 expat: integer overflow in function XML_GetBuffer
  - CVE-2021-45960 expat: Large number of prefixed XML attributes on a single tag can crash libexpat
  - CVE-2021-46143 expat: Integer overflow in doProlog in xmlparse.c
  - CVE-2022-22827 Integer overflow in storeAtts in xmlparse.c
  - CVE-2022-22826 Integer overflow in nextScaffoldPart in xmlparse.c
  - CVE-2022-22825 Integer overflow in lookup in xmlparse.c
  - CVE-2022-22824 Integer overflow in defineAttribute in xmlparse.c
  - CVE-2022-22823 Integer overflow in build_model in xmlparse.c
  - CVE-2022-22822 Integer overflow in addBinding in xmlparse.c
  - Resolves: CVE-2022-23852
  - Resolves: CVE-2021-45960
  - Resolves: CVE-2021-46143
  - Resolves: CVE-2022-22827
  - Resolves: CVE-2022-22826
  - Resolves: CVE-2022-22825
  - Resolves: CVE-2022-22824
  - Resolves: CVE-2022-22823
  - Resolves: CVE-2022-22822


author: Tomas Korbar <tkorbar@redhat.com> - 2.2.5-6
changelog:
  - Fix multiple CVEs
  - CVE-2022-25236 expat: namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution
  - CVE-2022-25235 expat: malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution
  - CVE-2022-25315 expat: integer overflow in storeRawNames()
  - Resolves: CVE-2022-25236
  - Resolves: CVE-2022-25235
  - Resolves: CVE-2022-25315


author: Adam Williamson <awilliam@redhat.com> - 31.0.2-4
changelog:
  - Drop the unnecessary downstream copy of metadata.desktop
  - Install upstream copy to the place we were installing downstream copy


author: Luya Tshimbalanga <luya@fedoraproject.org> - 32.1.0-1
changelog:
  - Update to 32.1.0
  - Enable animated default wallpaper
  - Enable dummy supplemental wallpaper
  - Drop no longer needed patches


author: Richard Shaw <hobbes1069@gmail.com> - 0.11.1-6
changelog:
  - Change default firewalld backend from ipset to rich-rules as ipset causes
    firewalld to use legacy iptables. Fixes RHBZ#1823746.
  - Remove conditionals for EL versions less than 7.


author: Richard Shaw <hobbes1069@gmail.com> - 0.11.1-9
changelog:
  - Add conditonals back for EL 7 as it's being brought up to date.
  - Add patch to deal with nftables not accepting ":" as a port separator.


author: Richard Shaw <hobbes1069@gmail.com> - 0.11.1-10.2
changelog:
  - Create shorewall-lite subpackage package which conflicts with shorewall
    subpackage. Fixes RHBZ#1872759.


author: Radovan Sroka <rsroka@redhat.com> - 1.0-2
changelog:
  RHEL 8.3 ERRATUM
  - rebase to v1.0
  - installed multiple policies to /usr/share/fapolicyd
    - known-libs (default)
    - restrictive
  - installed fapolicyd.trust file
  - enhanced fapolicyd-cli
  Resolves: rhbz#1817413
  - introduced fapolicyd-selinux that provides SELinux policy module
  Resolves: rhbz#1714529


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-3
changelog:
  RHEL 8.4.0 ERRATUM
  - rebase to 1.0.2
  - strong dependency on rpm/rpm-plugin-fapolicyd
  - installed dnf-plugin is dummy and we are not using it anymore
  - enabled integrity setting
  Resolves: rhbz#1887451
  - added make check
  - Adding DISA STIG during OS installation causes 'ipa-server-install' to fail
  - fixed java detection
  Resolves: rhbz#1895435
  - dnf update fails when fapolicyd is enabled
  Resolves: rhbz#1876975
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1896875


author: Radovan Sroka <rsroka@redhat.com> - 1.0.2-7
changelog:
  - fapolicyd abnormally exits by executing sosreport
  - fixed multiple problems with unlink()
  - fapolicyd breaks system upgrade, leaving system in dead state - complete fix
  Resolves: rhbz#1943251


author: Zoltan Fridrich <zfridric@redhat.com> - 1.0.4-2
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.0.4
  - added rpm_sha256_only option
  - added trust.d directory
  - allow file names with whitespace in trust files
  - use full paths in trust files
  Resolves: rhbz#1939379
  - fix libc.so getting identified as application/x-executable
  Resolves: rhbz#1989272
  - fix fapolicyd-dnf-plugin reporting as '<invalid>'
  Resolves: rhbz#1997414
  - fix selinux DSP module definition in spec file
  Resolves: rhbz#2014445


author: Radovan Sroka <rsroka@redhat.com> - 1.1-1
changelog:
  RHEL 8.6.0 ERRATUM
  - rebase to 1.1
  Resolves: rhbz#1939379
  - introduce rules.d feature
  Resolves: rhbz#2054741
  - remove pretrans scriptlet
  Resolves: rhbz#2051485


author: Radovan Sroka <rsroka@redhat.com> - 1.1-6
changelog:
  RHEL 8.6.0 ERRATUM
  - CVE-2022-1117 fapolicyd: fapolicyd wrongly prepares ld.so path
  Resolves: rhbz#2069120


author: Nils Philippsen <nils@redhat.com> - 0.1.1-1
changelog:
  - version 0.1.1
  - provide CLI subpackages (from F-33 on)
  - relax cryptography and toml version requirements to accommodate EL8


author: Nils Philippsen <nils@redhat.com> - 0.1.1-4
changelog:
  - move runtime deps to the right place, d'oh, and trim them down (old
    jsonschema doesn't need pyrsistent)
  - pin Python version with Python dependencies


author: Felix Kaechele <felix@kaechele.ca> - 22-1
changelog:
  - update to 22
  - add L2TP kmod recommends to enable L2TP offloading feature
  - add git helper macros for easier prerelease testing


author: 21:42:16 +0530 Dr Anirban Mitra <mitra_anirban@yahoo.co.in> - 3.0.1-1
changelog:
  - Change in EM square from 2048 to 1000
  - Upgrade fto Unicode 14.0 standard for Bengali
  - shift from version 1 to version 2 of Bengali OpenType specification
  - support for Assamese language
  - support for both traditional and modern form of conjunts 
  - addition of vedic stress marks
  - removal of Latin glyphs
  - removal of references and over lapping 
  - addition of missing conjuncts 
  - various bugfixes 
  - Removed Bengali namespace error of double utf-8 encoding
  - Created Mukti from MuktiNarrow 
  - Converted splines from quadratic to cubic
  - saved source in fontforge sfd format 
  - removed microsoft volt


author: 15:30:00 +0530 Dr Anirban Mitra <mitra_anirban@yahoo.co.in> - 3.0.1-3
changelog:
  - Preparing fonts from source sfd files using fontforge as required in gpl
  - collecting source from remote


author: 19:36:29 +0530 Dr Anirban Mitra <mitra_anirban@yahoo.co.in> - 3.0.1-4
changelog:
  - Modified fontconfig 
  - removed excess white spaces and tabs in spec file
  - modified source line and fontcofig lines in spec


author: 22:56:29 +0530 Dr Anirban Mitra <mitra_anirban@yahoo.co.in> - 3.0.2-1
changelog:
  - bumped upstream to version 3.0.2 
  - change docs and licence to match upstream
  - removed forgemeta references


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.1.0-6.20150530git99c942c
changelog:
  - Supply our own systemd service, socket, and environment files
  - Add Patch2 to fix kill parameter sequence


author: Andrew Bauer <zonexpertconsulting@outlook.com> - 1.1.0-7.20181108git99c942c
changelog:
  - Feedback from fedora package review
  - Remove Group from unit file
  - Set date to snapshot date, not commit date


author: Chris Leech <cleech@redhat.com> - 1.0.32-6
changelog:
  - remove fcoe from SUPPORTED_DRIVERS in /etc/sysconfig/fcoe
  - add qedf to SUPPORTED_DRIVERS in /etc/sysconf/fcoe
  - added upstream fix for large fcoe ctrl numbers


author: Muneendra <muneendra.kumar@broadcom.com> 0.1-1.20190813gitc195e67
changelog:
  -No functional changes,just Licenses
  -Spec file:Created LICENSES dir with the text of all used license
  -Added the license header in the corresponding source files


author: Miroslav Suchý <msuchy@redhat.com> 1.6-1
changelog:
  - Add MS-LPL as not-allowed
  - Add ISO-8879 to not-allowed with big usage exception
  - Delete redundant license info from README.md
  - Add LicenseRef-Glyphicons as not-allowed
  - Add Spencer-99
  - Add LicenseRef-UPX as not-allowed
  - Add LicenseRef-STREAM as not-allowed
  - Simplify overcomplicated condition to evaluate if a license is approved
  - Handle licenses with only SPDX identifier in mkjson.py


author: Miroslav Suchý <msuchy@redhat.com> 1.7-1
changelog:
  - redefine JSON format
  - Also use rich-deps on EL 8 (miro@hroncok.cz)
  - Once again, abandon the toml module, use tomllib/tomli/tomli-w instead
    (miro@hroncok.cz)
  - Fix typos in license review template (dcavalca@fedoraproject.org)
  - rename [fedora]name to [fedora]legacy-name
  - rename [fedora]abbreviation to [fedora]legacy-abbreviation
  - Revise toml for GPL-2.0-or-later WITH x11vnc-openssl-exception
    (rfontana@redhat.com)
  - Add FSFULLRWD (rfontana@redhat.com)
  - Add OFL-1.1-RFN as allowed-fonts (rfontana@redhat.com)
  - use tomllib instead of toml
  - document availablity of fedora-licenses.json artifact


author: Miroslav Suchý <msuchy@redhat.com> 1.8-1
changelog:
  - Add Public Domain license text used in libselinux (plautrba@redhat.com)
  - Make LicenseRef for GPLv2 with UPX exception more SPDX-confrmant
    (rfontana@redhat.com)
  - Add the equivalent LicenseRef-UPX and LicenseRef-GPL-2.0-or-later WITH UPX
    (rfontana@redhat.com)


author: Mohan Boddu <mboddu@bhujji.com> - 0.6.0.4-1
changelog:
  - Rebase to 0.6.0.4
    * Remove obsolete fedora-packager-setup (tmz)
    * Drop mercurial formatting from .gitignore (tmz)
    * Fix for rhbz #1412260 (sergio)
    * Option for the mode_yubikey_otp must be bytes and not string. (cverna)


author: Mohan Boddu <mboddu@bhujji.com> - 0.6.0.5-1
changelog:
  - Update README - fix typo (cheese)
  - Add pkgname helper (churchyard)
  - remove krb_rdns setting (ktdreyer)
  - Fix version and specfile (ryanlerch)
  - Add pkinit config and ipa certs (ryanlerch)
  - update ipa cert for stg after rebuild (mobrien)


author: Ondřej Nosek <onosek@redhat.com> - 1.42-1
changelog:
  - Fix Jenkins tests (onosek)
  - Return bash-completion back because of compatibility (onosek)
  - Fix unittests for Python 2 - missing dependency (onosek)
  - set-distgit-token: create a missing config file (mark.e.fuller)
  - Fix rsplit() usage to work with Python 2.7 - 2029175 (treydock)
  - mockbuild: default to use the local Mock configuration (praiskup)
  - Add support for epel9-next (carl)
  - Remove unused import from setup.py (onosek)
  - Enable Python argcomplete (onosek)
  - Test and support Python 3.10 (miro)


author: Ondřej Nosek <onosek@redhat.com> - 1.42-2
changelog:
  - Patch: fedpkg update --suggest-logout option added
  - Patch: Add compatibility for Bodhi >= 6.0.0
  - fedora-packager rpm dependency is "Recommends"


author: Ondřej Nosek <onosek@redhat.com> - 1.43-1
changelog:
  - Improve change management process documentation (onosek)
  - Fix medium level bandit findings (onosek)
  - rpmdefines changes depending on rpkg (onosek)
  - `request-branch`: detect existing branch - #481 (onosek)
  - Refactoring of _request_branch method (drumian)
  - Fix tests with bodhi-client 6+ (awilliam)
  - Add compatibility for Bodhi >= 6.0.0 (aurelien)
  - fedpkg update --suggest-logout option added - 472 (drumian)
  - WIP: Remove python3-mock dependency from fedpkg (drumian)


author: Ondřej Nosek <onosek@redhat.com> - 1.2.0-1
changelog:
  - 1.2.0 Release (onosek)
  - Accept files without trailing new-line - rhbz#1943593 (onosek)
  - Handle empty lines in sources file (onosek)
  - Retry stalled downloads after 15 minutes, with the maximum of 5 retries (contyk)
  - Make a fedpkg-base to distinguish between prod and stg (puiterwijk)
  - Add a basic set of tests (lsedlar)
  - Update $baseurl to src.fpo (lsedlar)
  - Make curl follow redirects (lsedlar)
  - remove the () in two steps (dennis)
  - Read BSD formatted sources (lsedlar)


