# changelog

author: Thomas Haller <thaller@redhat.com> - 1:1.37.92-1
changelog:
  - Upgrade to 1.38-rc3 (1.37.92) (release candidate)
  - core: change order in which IPv6 addresses are configured.


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.44.0-1
changelog:
  - Update to 1.44.0 release
  - Enable automatic migration of ifcfg profiles to keyfile:
    https://fedoraproject.org/wiki/Changes/MigrateIfcfgToKeyfile


author: Beniamino Galvani <bgalvani@redhat.com> - 1:1.45.91-1
changelog:
  - Update to 1.46-rc2 (1.45.91) release
  - Enable stable MAC address based on SSID for Wi-Fi connections (rh #2258088)
  - Enable IPv4 ACD (duplicate address detection) by default (rh #2258083)


author: Temuri Doghonadze <temuri.doghonadze@gmail.com> - 2.3.1-9
changelog:
  - Backport Georgian locale from git
  - Note, it will not be needed after release of new version of acl


author: Sohan Kunkerkar <skunkerk@redhat.com> - 5.3.0-2
changelog:
  - Backport patch to expose instance availability-zone-id
    https://github.com/coreos/afterburn/pull/748


author: Jan Macku <jamacku@redhat.com> - 1.15-1
changelog:
  - spec: sync specfile with Fedora
  - makefile: Use rpmdev-bumpspec's legacy date option
  - Add feature to generate specfile entry, commit and archive


author: Jan Macku <jamacku@redhat.com> - 1.16-1
changelog:
  - alternatives: add --keep-foreign (#57)
  - Translations update from Weblate
  - ci: Onboard chkconfig to Packit
  - zanata: remove zanata related stuff
  - Use make macros
  - alternatives: use one function for path cleaning
  - CI: specify more closely when to run CI
  - Add basic CI and README
  - spec: sync specfile with Fedora


author: Jan Macku <jamacku@redhat.com> - 1.21-1
changelog:
  - ci: Add CodeQL to replace LGTM
  - alternatives: replace master/slave with leader/follower
  - chkconfig: use correct cmp function
  - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3
  - ci: Add Shell linter - Differential ShellCheck
  - ci: Use more inclusive terminology in workflows
  - ci: Update workflows, packit and dependabot
  - Translated using Weblate (Friulian)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Czech)
  - Translations update from Fedora Weblate (#77)
  - Translations update from Fedora Weblate (#75)
  - Translations update from Fedora Weblate (#74)
  - Translations update from Fedora Weblate (#73)
  - Translated using Weblate (Ukrainian)
  - Update translation files
  - Family mentioned for --set in both man and help
  - Translated using Weblate (French)
  - build-sys: Ensure `systemd-sysv-install` symlink does not have `//`
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - Merge remote-tracking branch 'weblate/master'
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Turkish)
  - Translated using Weblate (Polish)
  - Translated using Weblate (Norwegian Nynorsk)
  - Update translation files
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Czech)
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Italian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Chinese (Simplified))


author: Jan Macku <jamacku@redhat.com> - 1.22-1
changelog:
  - migrate to SPDX license
  - Translated using Weblate (English (United Kingdom))
  - Translated using Weblate (Japanese)
  - ci: Add locale linter
  - ci: update workflows
  - test: fix ShellCheck error[SC2070]
  - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94)
  - releng: Packit remove extra job trigger
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.23-1
changelog:
  - Translated using Weblate (Korean)
  - Translated using Weblate (English (United Kingdom))
  - alternatives: --keep-foreign incorrectly handles non-existent files
  - alternatives: isLink should return 0 in case of lstat error
  - Translated using Weblate (Swedish)
  - Translated using Weblate (Korean)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Finnish)
  - Translated using Weblate (Ukrainian)
  - Translated using Weblate (Polish)
  - Update translation files
  - Translated using Weblate (German)
  - doc: update translations
  - spec: remote changelog


author: Jan Macku <jamacku@redhat.com> - 1.24-1
changelog:
  - ci: fix `NEXT_VERSION` in Makefile
  - revert: releng: Enable Packit to handle Fedora updates
  - revert: releng: Convert to rpmautospec


author: Jan Macku <jamacku@redhat.com> - 1.25-1
changelog:
  - alternatives: fix possible buffer overrun
  - Translated using Weblate (Korean)
  - Translated using Weblate (Chinese (Simplified) (zh_CN))


author: Jan Macku <jamacku@redhat.com> - 1.26-1
changelog:
  - fix(test): dot't call `basename` with empty string
  - spec: sort BuildRequires alphabetically
  - fix(test): remove dangling `rlPhase` fn call
  - ci: run tests using Packit and Testing Farm
  - build: update `.pot` file
  - ci: fix typo in test workflow
  - test: add support for running using tmt
  - Translated using Weblate (Czech)
  - Translated using Weblate (Punjabi)
  - build(deps): bump actions/upload-artifact from 3 to 4
  - build(deps): bump github/codeql-action from 2 to 3
  - leveldb: fix systemdActive()
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck
  - Translated using Weblate (Hungarian)
  - build(deps): bump actions/checkout from 3 to 4


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220310-130
changelog:
  - Update to upstream 20220310 release
  - Update AMD cpu microcode
  - ath11k: add links for WCN6855 hw2.1
  - ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  - ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  - add firmware for MT7986
  - update firmware for MT7921 WiFi device
  - update firmware for mediatek bluetooth chip(MT7921)
  - amdgpu: update picasso/raven/raven2 VCN firmware
  - amdgpu: Update GPU firmwares to the 21.50 release
  - amdgpu: add firmware for SDMA 5.2.7 IP block
  - amdgpu: add firmware for PSP 13.0.8 IP block
  - amdgpu: add firmware for DCN 3.1.6 IP block
  - amdgpu: add firmware for GC 10.3.7 IP block
  - rtw89: 8852a: update fw to v0.13.36.0
  - iwlwifi: add/Update new FWs from core68-60 release
  - Update Intel Bluetooth FW for 7265/8260/8265/9260/9462/9560/AX2xx
  - Update AMD SEV firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  - rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  - rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  - wfx: update to firmware 3.14
  - wfx: add antenna configuration files


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220411-131
changelog:
  - Update to upstream 20220411 release
  - Update AMD cpu microcode
  - nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  - brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  - Update firmware file for Intel Bluetooth 9260/9462/9560/AX200/AX201/AX210/AX211
  - amdgpu: update green navi10/12/14/renoir/sardine VCN firmware
  - update firmware for MT7921 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921)
  - rtw88: 8821c: Update normal firmware to v24.11.00
  - ice: Add wireless edge file for Intel E800 series driver
  - ice: update ice DDP comms package to 1.3.31.0
  - amdgpu: update PSP 13.0.8 firmware
  - amdgpu: update GC 10.3.7 firmware
  - rtl_bt: Add firmware and config files for RTL8852B


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220509-132
changelog:
  - Update to upstream 20220509 release
  - mediatek: Update mt8183/mt8192/mt8195 SCP firmware
  - update firmware for mediatek bluetooth chip (MT7922)
  - update firmware for MT7922 WiFi device
  - ice: Update package to 1.3.28.0
  - i915: Add GuC v70.1.2 for DG2
  - i915: Add DMC v2.06 for DG2
  - i915: Add GuC v70.1.1 for all platforms
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  - rtl_bt: Add firmware and config files for RTL8852C
  - rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  - amdgpu: update yellow carp DMCUB firmware
  - amdgpu: update psp_13_0_8 firmware
  - amdgpu: update gc_10_3_7_rlc firmware
  - amdgpu: update dcn_3_1_6_dmcub firmware
  - qcom: add firmware files for Adreno a220/a330/a420 & related generations
  - qcom: apq8096: add modem firmware
  - qcom: apq8096: add aDSP firmware
  - Mellanox: Add lc_ini_bundle for xx.2010.1006
  - Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  - Numerous additions/updates for various generations of ath11k/ath10k


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220610-134
changelog:
  - Update to upstream 20220610 release
  - add symlinks to AP6212 for StarFive based boards
  - wilc1000: update WILC1000 firmware to v15.6
  - add new FWs from core70-87 release
  - update 9000-family firmwares to core70-87
  - Update RTL8852A BT USB firmware to 0xDFB8_0634
  - replace mkdir by install
  - remove old unsupported iwlwifi 3160/7260/7265/8000/8265 firmware
  - Update mt8192 SCP firmware
  - WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.9
  - ath11k: move regdb.bin before board-2.bin
  - QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00157
  - QCA9888 hw2.0: update board-2.bin
  - QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00157
  - QCA4019 hw1.0: update board-2.bin
  - WCN3990 hw1.0: add board-2.bin
  - Update various AMDGPU firmware for 22.10
  - Update firmware for Intel Bluetooth 9462/9560/AX200/AX201/AX210/AX211


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220708-136
changelog:
  - Update to upstream 20220708 release
  - WHENCE: Correct dangling symlinks
  - Correct WHENCE entry for wfx firmware
  - bnx2: Drop unsupported Broadcom NetXtremeII firmware
  - bnx2: drop unsupported firmwares
  - bnx2: sort firmware names in filesystem order
  - Remove old Broadcom Everest (bnx2x) v4/5 firmware
  - Drop Token Ring network firmwares
  - Drop TDA7706 radio firmware
  - Drop Intel WiMax firmware
  - Drop Computone IntelliPort Plus serial firmware
  - Drop ATM Ambassador devices firmware
  - brocade: drop old unsupported firmware revs
  - amdgpu: update yellow carp DMCUB firmware
  - update firmwares for MT7622/MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chips (MT7921/MT7922)
  - Update firmwares for Intel Bluetooth 9462/9560/AX200/AX201/AX210/AX211
  - mediatek: Add SCP firmware for MT8186
  - rtw88: 8822c: Update normal firmware to v9.9.13
  - amdgpu: update Yellow Carp VCN firmware
  - qed: update 8.59.1.0 firmware
  - Link some devices that ship with the AW-CM256SM
  - Add initial AzureWave AW-CM256SM NVRAM file
  - Remove the Pine64 Quartz copy of the RPi NVRAM
  - qca: Update firmware files for BT chip WCN6750.
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00409


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220815-138
changelog:
  - Update to upstream 20220815 release
  - mediatek: Update mt8183/mt8192/mt8195 SCP firmware
  - mediatek: Add new mt8186 SOF firmware
  - ice: Update package to 1.3.30.0
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00438
  - brcm: Add nvram for Lenovo Yoga Tablet 2 830F/L and 1050F/L tablets
  - brcm: Add nvram for the Xiaomi Mi Pad 2 tablet
  - brcm: Add nvram for the Asus TF103C tablet
  - Add amd-ucode README file
  - qca: Update firmware files for BT chip WCN6750
  - Update firmware file for Intel Bluetooth 9462/9560/AX200/AX201/AX210/AX211
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.3020
  - qcom: Add firmware for Lenovo ThinkPad X13s
  - Add firmware for Cirrus CS35L41
  - i915: Add GuC v70.4.1 for DG2
  - i915: Add DMC v2.07 for DG2
  - amdgpu: update various GPUs to release 22.20
  - amdgpu: partially revert "amdgpu: update beige goby to release 22.20"
  - amdgpu: update psp 13.0.8 TA firmware
  - amdgpu: update DMCUB firmware for DCN 3.1.6
  - amdgpu: Update Yellow Carp VCN firmware
  - WHENCE: Fix dangling symlinks


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20220913-140
changelog:
  - Update to upstream 20220913 release
  - amdgpu: update yellow carp DMCUB firmware
  - amdgpu: add firmware for VCN 3.1.2 IP block
  - amdgpu: add firmware for SDMA 5.2.6 IP block
  - amdgpu: add firmware for PSP 13.0.5 IP block
  - amdgpu: add firmware for GC 10.3.6 IP block
  - amdgpu: add firmware for DCN 3.1.5 IP block
  - qcom: rename Lenovo ThinkPad X13s firmware paths
  - rtw89: 8852c: update fw to v0.27.42.0
  - Mellanox: Add new mlxsw_spectrum firmware xx.2010.3146
  - amdgpu: update beige goby/dimgrey cavefish/navy flounder/sienna cichlid VCN firmware
  - rtl_bt: Update RTL8852C BT USB firmware to 0xDFB8_5A33
  - mediatek: reference the LICENCE file for MediaTek firmwares


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20221012-141
changelog:
  - Update to upstream 20221012 release
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD5B8_A40A
  - amdgpu: update various generations of RLC firmware
  - mediatek: Update mt8195 SOF firmware to v0.4.1
  - qcom: add squashed version of a530 zap shader
  - rtw89: 8852c: update fw to v0.27.56.1
  - mediatek: Update mt8186 SCP firmware
  - Update AMD cpu microcode
  - mediatek: mt8195: Update scp.img to v2.0.11956
  - mediatek: Add new mt8195 SOF firmware
  - mediatek: Update mt8186 SOF firmware to v0.2.1
  - update firmware for mediatek bluetooth chip (MT7922)
  - rtl_bt: Update RTL8852A BT USB firmware to 0xD9B8_8207
  - update firmware for mediatek bluetooth chip (MT7921)
  - update firmware for MT7921/MT7922 WiFi device
  - cxgb4: Update firmware to revision 1.27.0.0
  - i915: Add versionless HuC files for current platforms
  - i915: Add GuC v70.5.1 for DG1, DG2, TGL and ADL-P
  - qca: Update firmware files for BT chip WCN3991.
  - Removing crnv32


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20221109-143
changelog:
  - Update to upstream 20221109 release
  - Update firmware file for Intel Bluetooth 9462/9560/AX20x/AX21x
  - amdgpu: update DMCUB firmware for DCN 3.1.6
  - rtl_bt: Update RTL8822C BT UART firmware to 0xFFB8_ABD6
  - rtl_bt: Update RTL8822C BT USB firmware to 0xFFB8_ABD3
  - mrvl: prestera: Update Marvell Prestera Switchdev FW to v4.1
  - iwlwifi: add new FWs from core74_pv-60 release
  - qcom: drop split a530_zap firmware file
  - qcom/vpu-1.0: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: drop split firmware in favour of the mbn file
  - qcom/venus-4.2: replace split firmware with the mbn file
  - qcom/venus-1.8: replace split firmware with the mbn file
  - iwlwifi: add new PNVM binaries from core74-44 release
  - iwlwifi: add new FWs from core69-81 release
  - qcom: update venus firmware files for VPU-2.0
  - qcom: remove split SC7280 venus firmware images
  - qcom: update venus firmware file for v5.4
  - qcom: replace split SC7180 venus firmware images with symlink
  - rtw89: 8852b: update fw to v0.27.32.1
  - rtlwifi: update firmware for rtl8192eu to v35.7
  - rtlwifi: Add firmware v4.0 for RTL8188FU
  - i915: Add HuC 7.10.3 for DG2
  - cnm: update chips&media wave521c firmware.
  - brcm: add symlink for Pi Zero 2 W NVRAM file
  - Add firmware for Cirrus CS35L41 on ASUS/Lenovo/HP Laptops
  - iwlwifi: add new FWs from core72-129 release
  - iwlwifi: update 9000-family firmwares to core72-129


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20221109-145
changelog:
  - Update to upstream 20221214 release
  - amdgpu: updated various generations to firmware for amd-5.4
  - amdgpu: add various new firmware for amd-5.4
  - sr150 : Add NXP SR150 UWB firmware
  - brcm: add/update firmware files for brcmfmac driver
  - rtl_bt: Update RTL8821C BT(USB I/F) FW to 0x75b8_f098
  - QCA: Add Bluetooth firmware 2.0.0-00515 for QCA WCN785x
  - update firmware for MT7916/MT7915/MT7986/MT7921
  - i915: Add DMC v2.08 for DG2, DMC v2.10 for MTL


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230117-146
changelog:
  - Update to upstream 20230117 release
  - Update for Intel Bluetooth AX200/201/210/211/9260/9560
  - brcm: add configuration files for CyberTan WC121
  - qcom: add firmware files for Adreno A200
  - rtw89: 8852c: update fw to v0.27.56.10
  - QCA: Add Bluetooth firmware for QCA2066
  - amdgpu: a bunch of additions/updates from amd-5.4
  - iwlwifi: add/update new FWs from core76-35 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core76-35 release
  - iwlwifi: add new FWs from core75-47 release
  - iwlwifi: update 9000-family firmwares to core75-47
  - amdgpu: update renoir PSP/DMCUB firmware
  - amdgpu: update copyright date for LICENSE.amdgpu
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921/MT7922)
  - cxgb4: Update firmware to revision 1.27.1.0
  - qca: Update firmware files for BT chip WCN6750


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230210-147
changelog:
  - Update to upstream 20230210 release
  - Update AMD cpu microcode
  - brcm: revert firmware files for Cypress devices
  - brcm: restore previous firmware file for BCM4329 device
  - rtw88: 8822c: Update normal firmware to v9.9.14
  - i915: Add DMC v2.11 for MTL
  - Add firmware for Cirrus CS35L41 on UM3402 ASUS Laptop
  - Add missing tuning files for HP Laptops using Cirrus Amps
  - i915: Add DMC v2.18 for ADLP
  - amdgpu: Add VCN 4.0.2 firmware
  - amdgpu: Add PSP 13.0.4 firmware
  - amdgpu: Add SDMA 6.0.1 fimware
  - amdgpu: Add GC 11.0.1 firmware
  - amdgpu: Add DCN 3.1.4 firmware
  - iwlwifi: remove old intermediate 5.15+ firmwares
  - iwlwifi: remove 5.10 and 5.15 intermediate old firmwares
  - iwlwifi: remove 5.4 and 5.10 intermediate old firmwares
  - iwlwifi: remove 4.19 and 5.4 intermediate old firmwares
  - iwlwifi: remove old unsupported older than 4.14 LTS
  - update firmware for MT7921 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921)
  - amdgpu: update vangogh firmware


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230310-148
changelog:
  - Update to upstream 20230310 release
  - qat: update licence text
  - rtl_bt: Update RTL8822C BT USB firmware to 0x0CC6_D2E3
  - rtl_bt: Update RTL8822C BT UART firmware to 0x05C6_D2E3
  - add fw for qat_4xxx
  - Fix symlinks for Intel firmware
  - update firmware for mediatek bluetooth chip (MT7921)
  - update firmware for MT7921 WiFi device
  - iwlwifi: update core69 and core72 firmwares for Ty device
  - rtlwifi: Add firmware v16.0 for RTL8710BU aka RTL8188GU
  - brcm: Add nvram for the Lenovo Yoga Book X90F / X90L convertible
  - brcm: Fix Xiaomi Inc Mipad2 nvram/.txt file macaddr
  - brcm: Add nvram for the Advantech MICA-071 tablet
  - rtl_bt: Update RTL8852C BT USB firmware to 0xD7B8_FABF
  - rtl_bt: Add firmware and config files for RTL8821CS
  - rtw89: 8852b: update fw to v0.29.29.0
  - liquidio: remove lio_23xx_vsw.bin
  - intel: avs: Add AudioDSP base firmware for CNL-based platforms
  - intel: avs: Add AudioDSP base firmware for APL-based platforms
  - intel: avs: Add AudioDSP base firmware for SKL-based platforms
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.23
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update board-2.bin
  - ath11k: IPQ5018 hw1.0: add to WLAN.HK.2.6.0.1-00861-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ5018 hw1.0: add board-2.bin
  - ath10k: QCA6174 hw3.0: update firmware-sdio-6.bin to version WLAN.RMH.4.4.1-00174
  - ath10k: WCN3990 hw1.0: update board-2.bin
  - cnm: update chips&media wave521c firmware.
  - amdgpu: Update GC 11.0.1 firmware
  - intel: catpt: Add AudioDSP base firmware for BDW platforms


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230404-149
changelog:
  - Split Realtek, Qcom Atheros, Mediatek, brcmfmac WiFi/BT firmwares to subpackages
  - Update to upstream 20230404 release
  - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW
  - update firmware for MT7922 WiFi/Bluetooth device
  - Amphion: Update vpu firmware
  - iwlwifi: add new FWs from core78-32 release
  - iwlwifi: update 9000-family firmwares to core78-32
  - amdgpu: Update SDMA 6.0.1 firmware
  - amdgpu: Add PSP 13.0.11 firmware
  - amdgpu: Update PSP 13.0.4 firmware
  - amdgpu: Update GC 11.0.1 firmware
  - amdgpu: Update DCN 3.1.4 firmware
  - amdgpu: Add GC 11.0.4 firmware
  - rtw88: 8822c: Update normal firmware to v9.9.15
  - Update firmware for Intel Bluetooth 9462/9560/AX101/AX203/AX210/AX211
  - add firmware files for NXP BT chipsets
  - rtw89: 8852b: update format-1 fw to v0.29.29.0
  - rtw89: 8852b: add format-1 fw v0.29.26.0
  - rtw89: 8852b: rollback firmware to v0.27.32.1
  - i915: Update MTL DMC to v2.12
  - i915: Update ADLP DMC to v2.19
  - mediatek: Update mt8192/mt8195 SCP firmware to support MM21 and MT21
  - iwlwifi: update core69 and core72 firmwares for So device


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230515-150
changelog:
  - Update to upstream 20230515 release
  - Drop ancient iwlwifi versioning and use upstream date format version
  - cirrus: Add firmware and tuning files for HP G10 series laptops
  - update firmware for mediatek bluetooth chip (MT7922)
  - WHENCE: Cleanup Realtek BT firmware provenance
  - update firmware for MT7922 WiFi device
  - cnm: update chips&media wave521c firmware.
  - cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6
  - i915: Add GuC v70.6.6 for MTL
  - amdgpu: update DCN 3.1.6 DMCUB firmware
  - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F
  - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922
  - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922
  - rtl_nic: update firmware of USB devices
  - Update firmware file for Intel Bluetooth AX20x/AX21x
  - update firmware for MT7981
  - qca: Update firmware files for BT chip WCN6750
  - mt76xx: Move the old Mediatek WiFi firmware to mediatek
  - rtl_bt: Add firmware and config files for RTL8851B
  - Update AMD cpu microcode
  - add firmware for MT7981
  - update firmware for MT7921 WiFi device
  - update firmware for mediatek bluetooth chip (MT7921)
  - update Intel qat firmware
  - Add firmware for Cirrus CS35L41 on Lenovo Laptops
  - update firmware for MT7916
  - rtw89: 8852b: update format-1 fw to v0.29.29.1
  - rtw89: 8852c: update fw to v0.27.56.13
  - ath11k: WCN6855 hw2.0: update board-2.bin
  - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1
  - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ8074 hw2.0: update board-2.bin
  - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1
  - ath11k: IPQ6018 hw1.0: update board-2.bin
  - ath10k: QCA99X0 hw2.0: update board-2.bin
  - ath10k: QCA9984 hw1.0: update board-2.bin
  - ath10k: QCA9888 hw2.0: update board-2.bin
  - ath10k: QCA6174 hw3.0: update board-2.bin
  - ath10k: QCA4019 hw1.0: update board-2.bin


author: Herton R. Krzesinski <herton@redhat.com>
changelog:
  - Join iwl3945-firmware and iwl4965-firmware into iwlegacy-firmware package.
  - Create iwlwifi-dvm-firmware subpackage and fold some subpackages into it.
  - Create iwlwifi-mvm-firmware subpackage and fold some subpackages into it.


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230625-151
changelog:
  - Update to upstream 20230625 release
  - Move to upstreamed compression support
  - Minor spec cleanups
  - wilc1000: update WILC1000 firmware to v16.0
  - ice: update ice DDP wireless_edge package to 1.3.10.0
  - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5
  - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs
  - qcom: Update the microcode files for Adreno a630 GPUs.
  - qcom: sdm845: rename the modem firmware
  - qcom: sdm845: update remoteproc firmware
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D
  - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225
  - update firmware for MT7921/MT7922 WiFi device
  - update firmware for mediatek MT7921/MT7922 bluetooth chip (MT7922)
  - i915: Add HuC v8.5.0 for MTL
  - mediatek: Update mt8195 SCP firmware to support hevc
  - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware
  - cirrus: Add firmware for new Asus ROG Laptops
  - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt
  - amdgpu: Update GC 11.0.1 and 11.0.4
  - rtw89: 8851b: add firmware v0.29.41.0
  - amdgpu: various firmware updates for amd.5.5 release
  - ice: update ice DDP comms package to 1.3.40.0
  - rtlwifi: Add firmware v6.0 for RTL8192FU
  - rtlwifi: Update firmware for RTL8188EU to v28.0
  - cxgb4: Update firmware to revision 1.27.3.0


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230804-152
changelog:
  - Update to upstream 20230804 release
  - Split out QCom Arm IP firmware
  - Merge Marvell libertas WiFi firmware
  - Mellanox: Add new mlxsw_spectrum firmware xx.2012.1012
  - Add URL for latest FW binaries for NXP BT chipsets
  - rtw89: 8851b: update firmware to v0.29.41.1
  - qcom: sdm845: add RB3 sensors DSP firmware
  - amdgpu: Update DMCUB for DCN314 & Yellow Carp
  - ice: add LAG-supporting DDP package
  - i915: Update MTL DMC to v2.13
  - i915: Update ADLP DMC to v2.20
  - cirrus: Add CS35L41 firmware for Dell Oasis Models
  - copy-firmware: Fix linking directories when using compression
  - copy-firmware: Fix test: unexpected operator
  - qcom: sc8280xp: LENOVO: remove directory sym link
  - qcom: sc8280xp: LENOVO: Remove execute bits
  - amdgpu: update VCN 4.0.0 firmware
  - amdgpu: add initial SMU 13.0.10 firmware
  - amdgpu: add initial SDMA 6.0.3 firmware
  - amdgpu: add initial PSP 13.0.10 firmware
  - amdgpu: add initial GC 11.0.3 firmware
  - Update AMD fam17h cpu microcode
  - Update AMD cpu microcode
  - amdgpu: update various generation VCN firmware
  - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs
  - Updated NXP SR150 UWB firmware
  - wfx: update to firmware 3.16.1
  - mediatek: Update mt8195 SCP firmware to support 10bit mode
  - i915: update DG2 GuC to v70.8.0
  - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL
  - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models
  - Partially revert "amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5"
  - Update firmware for MT7922 WiFi/Bluetooth device
  - Update firmware file for Intel Bluetooth AX200/201/203/210/211
  - Fix qcom ASoC tglp WHENCE entry
  - check_whence: Check link targets are valid
  - iwlwifi: add new FWs from core80-39 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release
  - qcom: Add Audio firmware for SC8280XP X13s


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20230919-1
changelog:
  - Update to upstream 20230919 release
  - amd-ucode: Add note on fam19h warnings
  - i915: update MTL HuC to version 8.5.4
  - amdgpu: update DMCUB to 0.0.183.0 for various AMDGPU ASICs
  - qcom: add link to sc8280xp audioreach firmware
  - qcom: sm8250: add RB5 sensors DSP firmware
  - qcom: Update vpu-1.0 firmware
  - qcom: sm8250: update DSP firmware
  - qcom: add firmware for the onboard WiFi on qcm2290 / qrb4210
  - qcom: add venus firmware files for v6.0
  - qcom: add firmware for QRB4210 platforms
  - qcom: add firmware for QCM2290 platforms
  - qcom: add GPU firmware for QCM2290 / QRB2210
  - ath10k/WCN3990: move wlanmdsp to qcom/sdm845
  - QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00605
  - Fix carl9170fw shell scripts for shellcheck errors
  - i915: Update MTL DMC to v2.16
  - Update firmware file for Intel Bluetooth AX200/AX201/AX203/AX210/AX211
  - Update firmware for qat_4xxx devices
  - Update AMD SEV firmware
  - rtw89: 8852b: update fw to v0.29.29.3
  - rtw89: 8851b: update fw to v0.29.41.2
  - i915: add GSC 102.0.0.1655 for MTL
  - cirrus: Add CS35L41 firmware for HP G11 models
  - Update AMD cpu microcode
  - rtl_bt: Add firmware v2 file for RTL8852C
  - Revert "rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225"
  - cxgb4: Update firmware to revision 1.27.4.0


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231030-1
changelog:
  - Update to upstream 20231030 release
  - Update firmware file for Intel Bluetooth AX203/AX210/AX211/
  - Update firmware file for Intel Bluetooth Magnetor AX101/AX201/AX211
  - rtl_nic: update firmware of RTL8156B
  - Update AMD cpu microcode
  - amdgpu: update SMU 13.0.0 firmware
  - add Amlogic bluetooth firmware
  - i915: Add GuC v70.13.1 for DG2, TGL, ADL-P and MTL
  - iwlwifi: add a missing FW from core80-39 release
  - WHENCE: add symlink for BananaPi M64
  - i915: Update MTL DMC to v2.17
  - amdgpu: update various firmware from 5.7 branch
  - iwlwifi: add FWs for new GL and MA device types with multiple RF modules
  - amd_pmf: Add initial PMF TA for Smart PC Solution Builder
  - Update FW files for MRVL PCIE 8997 chipsets
  - rtl_bt: Update RTL8851B BT USB firmware to 0x048A_D230
  - iwlwifi: add new FWs from core81-65 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core81-65 release


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231111-1
changelog:
  - Update to upstream 20231111 release
  - Move AMD SEV and TEE firmware to amd-ucode package
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - nvidia: add GSP-RM version 535.113.01 firmware images
  - Update firmware file for Intel Bluetooth AX101/AX203/AX210/AX211/BE200
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qca: add bluetooth firmware for WCN3988
  - ixp4xx: Add the IXP4xx firmware
  - rtw89: 8852b: update fw to v0.29.29.5
  - rtw89: 8851b: update fw to v0.29.41.3


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20231211-1
changelog:
  - Update to upstream 20231211 release
  - wfx: update to firmware 3.17
  - wfx: fix broken firmware
  - Update AMD cpu microcode
  - cxgb4: Update firmware to revision 1.27.5.0
  - add firmware for en8811h 2.5G ethernet phy
  - s5p-mfc: Add MFC v12 Firmware
  - Add a COPYOPTS variable
  - rtl_bt: Update RTL8852A BT USB firmware to 0xDFC8_145F
  - ice: update ice DDP wireless_edge package to 1.3.13.0
  - Update firmware for MT7921/MT7922 Bluetooth device
  - Update firmware for MT7921/MT7922 WiFi device
  - amdgpu: update DMCUB firmware to 0.0.194.0 for DCN321 and DCN32
  - qcom: update qcm2290/qrb4210 firmware
  - qcom: update qcm2290/qrb4210 WiFi firmware file
  - qcom: update Venus firmware file for v6.0
  - powervr: add firmware for Imagination Technologies AXE-1-16M GPU
  - ice: update ice DDP comms package to 1.3.45.0
  - ice: update ice DDP package to 1.3.35.0
  - mediatek: Remove an unused packed library
  - mediatek: Sync shared memory structure changes
  - Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
  - amdgpu: update DMCUB firmware to 0.0.193.0 for DCN31 and DCN314
  - i915: Update MTL DMC to v2.19
  - iwlwifi: fix for the new FWs from core83-55 release
  - iwlwifi: add new FWs from core83-55 release
  - iwlwifi: update cc/Qu/QuZ firmwares for core83-55 release
  - Add firmware for Cirrus CS35L41 for HP G11 Laptops/2024 ASUS Zenbook Laptops
  - add firmware for mt7988 internal 2.5G ethernet phy
  - Update firmware for Magnetor Intel Bluetooth AX101/AX203/AX211
  - Update firmware for SolarF Intel Bluetooth AX101/AX203/AX211
  - Update firmware for Solar Intel Bluetooth AX101/AX203/AX210/AX211


author: Peter Robinson <pbrobinson@fedoraproject.org>
changelog:
  - Update to upstream 20240115
  - Split out Intel/Cirrus audio firmware, ISP firmware, NXP/TI WiFi Firmware
  - Intel Bluetooth: Update firmware file for AX101/AX203/AX210/AX211
  - Cirrus: Add CS35L41 firmware for Legion Slim 7 Gen 8 laptops
  - Cirrus: Add firmware for CS35L41 for various Dell laptops
  - update firmware for qat_4xxx devices
  - update firmware for w1u_uart
  - Cirrus: Add firmware file for cs42l43
  - amdgpu: DMCUB updates for DCN312/DCN314
  - amlogic/bluetooth: add firmware bin of W1 serial soc(w1u_uart)
  - Add firmware for Mediatek WiFi/bluetooth chip (MT7925)
  - ASoC: tas2781/tas2563: Add dsp firmware for laptops or other mobile devices
  - rtl_bt: Add firmware and config files for RTL8852BT/RTL8852BE-VT
  - ath11k: Updates for WCN6855/WCN6750/IPQ8074
  - ath10k: Updates to WCN3990/QCA9888/QCA4019/QCA6174
  - ath12k: add new driver and firmware for WCN7850
  - iwlwifi: update gl FW for core80-165 release
  - intel: vsc: Add firmware for Visual Sensing Controller
  - Cirrus: Add CS35L41 firmware and tunings for ASUS Zenbook 2022/2023 Models
  - QCA: Add bluetooth firmware nvm files for QCA2066
  - QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00629
  - amdgpu: DMCUB updates for various AMDGPU ASICs
  - qcom: Add Audio firmware for SM8550/SM8650 QRD


author: Peter Robinson <pbrobinson@fedoraproject.org> - 20240220-1
changelog:
  - Update to upstream 20240220
  - update firmware for en8811h 2.5G ethernet phy
  - add firmware for MT7996
  - xe: First GuC release for LNL and Xe
  - i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
  - Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
  - brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
  - ice: update ice DDP package to 1.3.36.0
  - Add CS35L41 firmware for additional ASUS Zenbook 2023 models
  - panthor: Add initial firmware for Gen10 Arm Mali GPUs
  - qcom: update venus firmware file for v5.4
  - Montage: add firmware for Mont-TSSE
  - Remove 2 HP laptops using CS35L41 Audio Firmware
  - Fix filenames for some CS35L41 firmwares for HP
  - wilc1000: update WILC1000 firmware to v16.1.2
  - rtl_nic: add firmware for RTL8126A
  - intel: Add IPU6 firmware binaries
  - ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.37
  - qcom: Add Audio firmware for SM8550 HDK
  - brcm: Add brcmfmac43430-sdio.xxx.txt nvram for the Chuwi Hi8 (CWI509) tablet
  - qcom: Add Audio firmware for SM8650 MTP
  - Add firmware for Cirrus CS35L41 on HP Consumer Laptops
  - amdgpu: lots of firmware updates ¯\_(ツ)_/¯
  - Update AMD cpu microcode
  - RTL8192E: Remove old realtek WiFi firmware


author: Steve Grubb <sgrubb@redhat.com> 3.0.7-2
changelog:
  - Adjust sample-rules dir permissions
  - Add support for new access/dealloc function attributes
  - Adjust compile flags for less warnings


author: Pavel Březina <pbrezina@redhat.com> - 1.3.0-9
changelog:
  - Make authselect compatible with ostree (#2034360)
  - Authselect now requires explicit opt-out if users don't want to use it (#2051545)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.0-1
changelog:
  - Rebase to 1.5.0
  - "minimal" profile was removed and replaced with "local". (rhbz#2253180)
  - "local" profile is now default (rhbz#2253180)


author: Rex Dieter <rdieter@fedoraproject.org> - 0.8-14
changelog:
  - pull in upstream fix for CVE-2021-36217 (#1989381,#1989382)
  - revert "Re-enable LTO" on f34 (still needed)


author: Christian Krause <chkr@fedoraproject.org> - 0.8-18
changelog:
  - Install glade file for avahi-discover-standalone unconditionally
    (fixes #2036073 and #2126721)
  - Install desktop files for bssh and bvnc unconditionally


author: Petr Menšík <pemensik@redhat.com> - 0.8-22
changelog:
  - Enable unit tests during check
  - Prevent crashes on some invalid DBus calls
  - Provide versioned howl compatibility package
  - Correct bootstrap option


author: Jens Petersen <petersen@redhat.com> - 0.1-4
changelog:
  - revert default to normal green (not bright/bold)
  - set prompt_color_force to override interactive terminal checks
  - drop bold from red error code


author: Jens Petersen <petersen@redhat.com> - 0.2-1
changelog:
  - add PROMPT_DIR_COLOR to change the dir color (Thomas Steenholdt, #2239152)
  - also check for bash default prompt for login shell (Sam Morris, #2248853)
  - add PROMPT_BRACKETS to surround the prompt with traditional brackets
    (based on feedback from Thomas Steenholdt, #2239152)


author: Jens Petersen <petersen@redhat.com> - 0.3-1
changelog:
  - add PROMPT_SEPARATOR and PROMPT_DIRECTORY default variables (#2239152)
  - add optional PROMPT_START and PROMPT_END (replaces PROMPT_BRACKETS)
  - add prompt_default(), prompt_traditional(), and prompt_default_os()
  - expand README.md


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_EPROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Jens Petersen <petersen@redhat.com> - 0.4-1
changelog:
  - define PROMPT_COLOR
  - add PROMPT_USERHOST default variable
  - add colorpre and colorsuf variables
  - drop PROMPT_ERROR
  - drop built-in container support for now
  - reset color after $ prompt
  - only define default functions if setting PS1


author: Petr Menšík <pemensik@redhat.com> - 32:9.18.6-3
changelog:
  - Return OpenSSL engine implementation for pkcs11 interface (#2122841)
  - Skip problematic netmgr unit tests (#2122010)
  - Properly obsolete bind-dnssec-doc


author: Nick Clifton <nickc@redhat.com> - 2.40-1
changelog:
  - Rebase to 2.40.
  - Retire: binutils-package-metadata.patch
  - Retire: binutils-gas-dwarf-skip-empty-functions.patch
  - Retire: binutils-CVE-38128-dwarf-abbrev-parsing.patch
  - Retire: binutils-readelf-no-sections.patch
  - Retire: binutils-libiberty-configure-compile-warnings.patch
  - Retire: binutils-CVE-2022-4285.patch


author: Nick Clifton <nickc@redhat.com> - 2.40-2
changelog:
  - Spec file: Remove duplicate gprofng debug file entries.
  - Spec file: Fix testsuite failures for RiscV64.


author: Nick Clifton <nickc@redhat.com> - 2.40-7
changelog:
  - Spec File: Fix typo.  (#2186396)
  - BFD library: Fix illegal memory access when loading corrupt symbol version info.  (#2186579)


author: Nick Clifton <nickc@redhat.com> - 2.40-8
changelog:
  - GOLD: Stop an abort triggered by running dwp on a file with no dwo links.  (#2192226)
  - Spec File: Use _prefix.  (#2192118)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.7.0-0.rc8.95c8a35f1c01.66]
changelog:
  - fedora: arm64: enable ethernet on newer TI industrial (Peter Robinson)
  - fedora: arm64: Disable VIDEO_IMX_MEDIA (Peter Robinson)
  - fedora: use common config for Siemens Simatic IPC (Peter Robinson)
  - fedora: arm: enable Rockchip SPI flash (Peter Robinson)
  - fedora: arm64: enable DRM_TI_SN65DSI83 (Peter Robinson)
  - Linux v6.7.0-0.rc8.95c8a35f1c01


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.7.1-0]
changelog:
  - Fix up requires for UKI (Justin M. Forbes)
  - Fix up libperf install (Justin M. Forbes)
  - Drop soname for libcpupower.so since we reverted the bump (Justin M. Forbes)
  - Turn on CONFIG_TCP_AO for Fedora (Justin M. Forbes)
  - temporarily remove LIBBPF_DYNAMIC=1 from perf build (Thorsten Leemhuis)
  - add libperf packages and enable perf, libperf, tools and bpftool packages (Thorsten Leemhuis)
  - Revert "cpupower: Bump soname version" (Justin M. Forbes)
  - Turn on Renesas RZ for Fedora IOT rhbz2257913 (Justin M. Forbes)
  - Add bugs to BugsFixed (Justin M. Forbes)
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo)
  - drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set (Javier Martinez Canillas)
  - Basic scaffolding to create a kernel-headers package (Justin M. Forbes)
  - Initial config for fedora-6.7 branch (Justin M. Forbes)
  - Reset RHEL_RELEASE for 6.8 series (Justin M. Forbes)
  - common: cleanup MX3_IPU (Peter Robinson)
  - all: The Octeon MDIO driver is aarch64/mips (Peter Robinson)
  - common: rtc: remove bq4802 config (Peter Robinson)
  - common: de-dupe MARVELL_GTI_WDT (Peter Robinson)
  - all: Remove CAN_BXCAN (Peter Robinson)
  - common: cleanup SND_SOC_ROCKCHIP (Peter Robinson)
  - common: move RHEL DP83867_PHY to common (Peter Robinson)
  - common: Make ASYMMETRIC_KEY_TYPE enable explicit (Peter Robinson)
  - common: Disable aarch64 ARCH_MA35 universally (Peter Robinson)
  - common: arm64: enable Tegra234 pinctrl driver (Peter Robinson)
  - rhel: arm64: Enable qoriq thermal driver (Peter Robinson)
  - common: aarch64: Cleanup some i.MX8 config options (Peter Robinson)
  - all: EEPROM_LEGACY has been removed (Peter Robinson)
  - all: rmeove AppleTalk hardware configs (Peter Robinson)
  - all: cleanup: remove references to SLOB (Peter Robinson)
  - all: cleanup: Drop unnessary BRCMSTB configs (Peter Robinson)
  - all: net: remove retired network schedulers (Peter Robinson)
  - all: cleanup removed CONFIG_IMA_TRUSTED_KEYRING (Peter Robinson)
  - BuildRequires: lld for build with selftests for x86 (Jan Stancek)
  - spec: add keyutils to selftest-internal subpackage requirements (Artem Savkov) [2166911]
  - redhat/spec: exclude liburandom_read.so from requires (Artem Savkov) [2120968]
  - rtla: sync summary text with upstream and update Requires (Jan Stancek)
  - uki-virt: add systemd-sysext dracut module (Gerd Hoffmann)
  - uki-virt: add virtiofs dracut module (Gerd Hoffmann)
  - common: disable the FB device creation (Peter Robinson)
  - s390x: There's no FB on Z-series (Peter Robinson)
  - Linux v6.7.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.7.2-0]
changelog:
  - redhat: spec: Fix update_scripts run for CentOS builds (Neal Gompa)
  - BPF Tool versioning seems incompatible with stable Fedroa (Justin M. Forbes)
  - Linux v6.7.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.7.3-0]
changelog:
  - Config update for stable backport (Justin M. Forbes)
  - Add some more bugs to BugsFixed (Justin M. Forbes)
  - Linux v6.7.3


author: Augusto Caringi <acaringi@redhat.com> [6.7.4-0]
changelog:
  - Add keyboard resume bugfixes (Justin M. Forbes)
  - Input: atkbd - do not skip atkbd_deactivate() when skipping ATKBD_CMD_GETID (Hans de Goede)
  - Input: atkbd - skip ATKBD_CMD_SETLEDS when skipping ATKBD_CMD_GETID (Hans de Goede)
  - Linux v6.7.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.7.5-0]
changelog:
  - Backported some CVE fixes lets note them in BugsFixed (Justin M. Forbes)
  - selftests: openvswitch: Add validation for the recursion test (Aaron Conole)
  - net: openvswitch: limit the number of recursions from action sets (Aaron Conole)
  - dm: limit the number of targets and parameter size area (Mikulas Patocka)
  - Add btrfs bug for 6.7.5 (Justin M. Forbes)
  - btrfs: don't refill whole delayed refs block reserve when starting transaction (Filipe Manana)
  - Add 6.7.5 fix to BugsFixed (Justin M. Forbes)
  - drm/amd: Stop evicting resources on APUs in suspend (Mario Limonciello)
  - Revert "drm/amd: flush any delayed gfxoff on suspend entry" (Mario Limonciello)
  - smb: client: set correct id, uid and cruid for multiuser automounts (Paulo Alcantara)
  - Turn off CONFIG_INTEL_VSC for Fedora (Justin M. Forbes)
  - platform/x86: Support for mode FN key (Mark Pearson)
  - Linux v6.7.5


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.7a396820222d.10]
changelog:
  - CONFIG_NETFS_SUPPORT should be m after the merge (Justin M. Forbes)
  - Turn FSCACHE and NETFS from m to y in pending (Justin M. Forbes)
  - Linux v6.8.0-0.rc0.7a396820222d


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc1.7ed2632ec7d7.12]
changelog:
  - New configs in drivers/crypto (Fedora Kernel Team)
  - net: bump CONFIG_MAX_SKB_FRAGS to 45 (Marcelo Ricardo Leitner)
  - Enable CONFIG_MARVELL_88Q2XXX_PHY (Izabela Bakollari)
  - Remove CONFIG_NET_EMATCH_STACK file for RHEL (Justin M. Forbes)
  - Linux v6.8.0-0.rc1.7ed2632ec7d7


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc1.615d30064886.13]
changelog:
  - CI: include aarch64 in CKI container image gating (Tales Aparecida)
  - redhat: spec: Fix update_scripts run for CentOS builds (Neal Gompa)
  - Linux v6.8.0-0.rc1.615d30064886


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc1.6098d87eaf31.14]
changelog:
  - redhat/Makefile: fix setup-source and document its caveat (Ondrej Mosnacek)
  - redhat/Makefile: fix race condition when making the KABI tarball (Ondrej Mosnacek)
  - redhat/Makefile: refactor KABI tarball creation (Ondrej Mosnacek)
  - redhat/configs: Remove HOTPLUG_CPU0 configs (Prarit Bhargava)
  - gitlab-ci: merge ark-latest before building in MR pipelines (Michael Hofmann)
  - Linux v6.8.0-0.rc1.6098d87eaf31


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc1.ecb1b8288dc7.15]
changelog:
  - redhat: configs: fedora: Enable sii902x bridge chip driver (Erico Nunes)
  - Enable CONFIG_TCP_CONG_ILLINOIS for RHEL (Davide Caratti)
  - Linux v6.8.0-0.rc1.ecb1b8288dc7


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc1.3a5879d495b2.16]
changelog:
  - Revert "Merge branch 'fix-kabi-build-race' into 'os-build'" (Justin M. Forbes)
  - Linux v6.8.0-0.rc1.3a5879d495b2


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc2.19]
changelog:
  - Remove separate license tag for libperf (Justin M. Forbes)
  - Don't use upstream bpftool version for Fedora package (Justin M. Forbes)
  - Don't ship libperf.a in libperf-devel (Justin M. Forbes)
  - add libperf packages and enable perf, libperf, tools and bpftool packages (Thorsten Leemhuis)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc3.6d280f4d760e.28]
changelog:
  - gitlab-ci: merge ark-latest fixes when running ELN pipelines (Michael Hofmann)
  - gitlab-ci: use all arches for container image gating (Michael Hofmann)
  - Add new os-build targets: rt-devel and automotive-devel (Don Zickus)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc4.33]
changelog:
  - fedora: Enable more Renesas RZ platform drivers (Peter Robinson)
  - fedora: a few aarch64 drivers and cleanups (Peter Robinson)
  - fedora: cavium nitrox cnn55xx (Peter Robinson)
  - Fix dist-get-buildreqs breakage around perl(ExtUtils::Embed) (Don Zickus)
  - Linux v6.8.0-0.rc4


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc4.716f4aaa7b48.34]
changelog:
  - spec: Set EXTRA_CXXFLAGS for perf demangle-cxx.o (Josh Stone) [2233269]
  - Flip values for FSCACHE and NETFS_SUPPORT to avoid mismatch (Justin M. Forbes)
  - Turn on SECURITY_DMESG_RESTRICT (Justin M. Forbes)
  - redhat: forward-port genlog.py updates from c9s (Jan Stancek)
  - arch/x86: mark x86_64-v1 and x86_64-v2 processors as deprecated (Prarit Bhargava)
  - Linux v6.8.0-0.rc4.716f4aaa7b48


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc4.c664e16bb1ba.35]
changelog:
  - redhat/configs: rhel wireless requests (Jose Ignacio Tornos Martinez)
  - Linux v6.8.0-0.rc4.c664e16bb1ba


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc4.c1ca10ceffbb.39]
changelog:
  - Add xe to drm module filters (Justin M. Forbes)
  - Turn off the DRM_XE_KUNIT_TEST for Fedora (Justin M. Forbes)
  - Flip secureboot signature order (Justin M. Forbes)
  - all: clean up some removed configs (Peter Robinson)
  - redhat: add nvidia oot signing key (Dave Airlie)
  - gitlab-ci: support CI for zfcpdump kernel on ELN (Michael Hofmann)
  - Linux v6.8.0-0.rc4.c1ca10ceffbb


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc5.9fc1ccccfd8d.42]
changelog:
  - redhat/configs: For aarch64/RT, default kstack randomization off (Jeremy Linton)
  - redhat/Makefile: remove an unused target (Ondrej Mosnacek)
  - redhat/Makefile: fix setup-source and document its caveat (Ondrej Mosnacek)
  - redhat/Makefile: fix race condition when making the KABI tarball (Ondrej Mosnacek)
  - redhat/Makefile: refactor KABI tarball creation (Ondrej Mosnacek)
  - Turn XFS_SUPPORT_V4 back on for Fedora (Justin M. Forbes)
  - Linux v6.8.0-0.rc5.9fc1ccccfd8d


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc5.39133352cbed.43]
changelog:
  - redhat/self-test: Update CROSS_DISABLED_PACKAGES (Prarit Bhargava)
  - redhat: Do not build libperf with cross builds (Prarit Bhargava)
  - redhat/configs: enable CONFIG_PINCTRL_INTEL_PLATFORM for RHEL (David Arcari)
  - redhat/configs: enable CONFIG_PINCTRL_METEORPOINT for RHEL (David Arcari)
  - redhat/configs: intel pinctrl config cleanup (David Arcari)
  - Linux v6.8.0-0.rc5.39133352cbed


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc5.ab0a97cffa0b.47]
changelog:
  - Enable merge-rt pipeline (Don Zickus)
  - kernel.spec: include the GDB plugin in kernel-debuginfo (Ondrej Mosnacek)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc6.45ec2f5f6ed3.49]
changelog:
  - redhat/configs: Disable CONFIG_INFINIBAND_USNIC (Kamal Heib)
  - Enable CONFIG_BMI323_I2C=m for Fedora x86_64 builds (Hans de Goede)
  - gitlab-ci: drop test_makefile job (Scott Weaver)
  - Linux v6.8.0-0.rc6.45ec2f5f6ed3


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc6.805d849d7c3c.51]
changelog:
  - gitlab-ci: fix merge tree URL for gating pipelines (Michael Hofmann)
  - Revert "net: bump CONFIG_MAX_SKB_FRAGS to 45" (Marcelo Ricardo Leitner)
  - uki: use systemd-pcrphase dracut module (Gerd Hoffmann)
  - Add libperf-debuginfo subpackage (Justin M. Forbes)
  - redhat/kernel.spec.template: Add log_msg macro (Prarit Bhargava)
  - Linux v6.8.0-0.rc6.805d849d7c3c


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc6.04b8076df253.54]
changelog:
  - redhat/configs: Disable CONFIG_INFINIBAND_VMWARE_PVRDMA (Kamal Heib)
  - Linux v6.8.0-0.rc6.04b8076df253


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.50-5
changelog:
  - integrate Adam William's /etc/ssl/certs with Debian-compatibility
  - back out blocklist change since p11-kit .24 is not yet available on rawhide


author: Bob Relyea <rrelyea@redhat.com> - 2021.2.52-2
changelog:
  - Update to CKBI 2.52 from NSS 3.72
  -    Adding:
  -     # Certificate "TunTrust Root CA"
  -     # Certificate "HARICA TLS RSA Root CA 2021"
  -     # Certificate "HARICA TLS ECC Root CA 2021"
  -     # Certificate "HARICA Client RSA Root CA 2021"
  -     # Certificate "HARICA Client ECC Root CA 2021"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-2
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "GlobalSign Root CA - R2"
  -     # Certificate "DST Root CA X3"
  -     # Certificate "Explicitly Distrusted DigiNotar PKIoverheid G2"
  -    Adding:
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "vTrus ECC Root CA"
  -     # Certificate "vTrus Root CA"
  -     # Certificate "ISRG Root X2"
  -     # Certificate "HiPKI Root CA - G1"
  -     # Certificate "Telia Root CA v2"
  -     # Certificate "D-TRUST BR Root CA 1 2020"
  -     # Certificate "D-TRUST EV Root CA 1 2020"
  -     # Certificate "CAEDICOM Root"
  -     # Certificate "I.CA Root CA/RSA"
  -     # Certificate "MULTICERT Root Certification Authority 01"
  -     # Certificate "Certification Authority of WoSign G2"
  -     # Certificate "CA WoSign ECC Root"
  -     # Certificate "CCA India 2015 SPL"
  -     # Certificate "Swedish Government Root Authority v3"
  -     # Certificate "Swedish Government Root Authority v2"
  -     # Certificate "Tunisian Root Certificate Authority - TunRootCA2"
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "OpenTrust Root CA G2"
  -     # Certificate "OpenTrust Root CA G3"
  -     # Certificate "Certplus Root CA G1"
  -     # Certificate "Certplus Root CA G2"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Thailand National Root Certification Authority - G1"
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Certification Authority of WoSign"
  -     # Certificate "CA 沃通根证书"
  -     # Certificate "SSC GDL CA Root B"
  -     # Certificate "SAPO Class 2 Root CA"
  -     # Certificate "SAPO Class 3 Root CA"
  -     # Certificate "SAPO Class 4 Root CA"
  -     # Certificate "CA Disig Root R1"
  -     # Certificate "Autoridad Certificadora Raíz Nacional de Uruguay"
  -     # Certificate "ApplicationCA2 Root"
  -     # Certificate "GlobalSign"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G6"
  -     # Certificate "Symantec Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "Halcom Root CA"
  -     # Certificate "Swisscom Root EV CA 2"
  -     # Certificate "CFCA GT CA"
  -     # Certificate "Digidentity L3 Root CA - G2"
  -     # Certificate "SITHS Root CA v1"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority (G02)"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v2"
  -     # Certificate "Swisscom Root CA 2"
  -     # Certificate "IGC/A AC racine Etat francais"
  -     # Certificate "PersonalID Trustworthy RootCA 2011"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "Swiss Government Root CA II"
  -     # Certificate "Swiss Government Root CA I"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "LuxTrust Global Root"
  -     # Certificate "AC1 RAIZ MTIN"
  -     # Certificate "Microsoft Root Certificate Authority 2011"
  -     # Certificate "CCA India 2011"
  -     # Certificate "ANCERT Certificados Notariales V2"
  -     # Certificate "ANCERT Certificados CGN V2"
  -     # Certificate "EE Certification Centre Root CA"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "China Internet Network Information Center EV Certificates Root"
  -     # Certificate "Verizon Global Root CA"
  -     # Certificate "SwissSign Silver Root CA - G3"
  -     # Certificate "SwissSign Platinum Root CA - G3"
  -     # Certificate "SwissSign Gold Root CA - G3"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "SITHS CA v3"
  -     # Certificate "Certinomis - Autorité Racine"
  -     # Certificate "ANF Server CA"
  -     # Certificate "Thawte Premium Server CA"
  -     # Certificate "Thawte Server CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "KEYNECTIS ROOT CA"
  -     # Certificate "I.CA - Standard Certification Authority, 09/2009"
  -     # Certificate "I.CA - Qualified Certification Authority, 09/2009"
  -     # Certificate "VI Registru Centras RCSC (RootCA)"
  -     # Certificate "CCA India 2007"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira v1"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Actalis Authentication CA G1"
  -     # Certificate "A-Trust-Qual-03"
  -     # Certificate "AddTrust External CA Root"
  -     # Certificate "ECRaizEstado"
  -     # Certificate "Configuration"
  -     # Certificate "FNMT-RCM"
  -     # Certificate "StartCom Certification Authority"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G4"
  -     # Certificate "thawte Primary Root CA - G2"
  -     # Certificate "GeoTrust Primary Certification Authority - G2"
  -     # Certificate "VeriSign Universal Root Certification Authority"
  -     # Certificate "thawte Primary Root CA - G3"
  -     # Certificate "GeoTrust Primary Certification Authority - G3"
  -     # Certificate "E-ME SSI (RCA)"
  -     # Certificate "ACEDICOM Root"
  -     # Certificate "Autoridad Certificadora Raiz de la Secretaria de Economia"
  -     # Certificate "Correo Uruguayo - Root CA"
  -     # Certificate "CNNIC ROOT"
  -     # Certificate "Common Policy"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "Staat der Nederlanden Root CA - G2"
  -     # Certificate "NetLock Platina (Class Platinum) Főtanúsítvány"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "Cisco Root CA 2048"
  -     # Certificate "CA Disig"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "UCA Global Root"
  -     # Certificate "UCA Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Starfield Services Root Certificate Authority"
  -     # Certificate "I.CA - Qualified root certificate"
  -     # Certificate "I.CA - Standard root certificate"
  -     # Certificate "e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi"
  -     # Certificate "Japanese Government"
  -     # Certificate "AdminCA-CD-T01"
  -     # Certificate "Admin-Root-CA"
  -     # Certificate "Izenpe.com"
  -     # Certificate "TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3"
  -     # Certificate "Halcom CA FO"
  -     # Certificate "Halcom CA PO 2"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "ACNLB"
  -     # Certificate "state-institutions"
  -     # Certificate "state-institutions"
  -     # Certificate "SECOM Trust Systems CO.,LTD."
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "D-TRUST Root Class 2 CA 2007"
  -     # Certificate "D-TRUST Root Class 3 CA 2007"
  -     # Certificate "SSC Root CA A"
  -     # Certificate "SSC Root CA B"
  -     # Certificate "SSC Root CA C"
  -     # Certificate "Autoridad de Certificacion de la Abogacia"
  -     # Certificate "Root CA Generalitat Valenciana"
  -     # Certificate "VAS Latvijas Pasts SSI(RCA)"
  -     # Certificate "ANCERT Certificados CGN"
  -     # Certificate "ANCERT Certificados Notariales"
  -     # Certificate "ANCERT Corporaciones de Derecho Publico"
  -     # Certificate "GLOBALTRUST"
  -     # Certificate "Certipost E-Trust TOP Root CA"
  -     # Certificate "Certipost E-Trust Primary Qualified CA"
  -     # Certificate "Certipost E-Trust Primary Normalised CA"
  -     # Certificate "GlobalSign"
  -     # Certificate "IGC/A"
  -     # Certificate "S-TRUST Authentication and Encryption Root CA 2005:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "Swisscom Root CA 1"
  -     # Certificate "Microsec e-Szigno Root CA"
  -     # Certificate "LGPKI"
  -     # Certificate "AC RAIZ DNIE"
  -     # Certificate "Common Policy"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 1"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Staat der Nederlanden Root CA"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "GeoTrust Global CA"
  -     # Certificate "GeoTrust Global CA 2"
  -     # Certificate "GeoTrust Universal CA"
  -     # Certificate "GeoTrust Universal CA 2"
  -     # Certificate "QuoVadis Root Certification Authority"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Microsoft Root Authority"
  -     # Certificate "Microsoft Root Certificate Authority"
  -     # Certificate "Microsoft Root Certificate Authority 2010"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "UTN-USERFirst-Object"
  -     # Certificate "BYTE Root Certification Authority 001"
  -     # Certificate "CISRCA1"
  -     # Certificate "ePKI Root Certification Authority - G2"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -     # Certificate "AC Raíz Certicámara S.A."
  -     # Certificate "SSL.com EV Root Certification Authority RSA"
  -     # Certificate "LuxTrust Global Root 2"
  -     # Certificate "ACA ROOT"
  -     # Certificate "Security Communication ECC RootCA1"
  -     # Certificate "Security Communication RootCA3"
  -     # Certificate "CHAMBERS OF COMMERCE ROOT - 2016"
  -     # Certificate "Network Solutions RSA Certificate Authority"
  -     # Certificate "Network Solutions ECC Certificate Authority"
  -     # Certificate "Australian Defence Public Root CA"
  -     # Certificate "SI-TRUST Root"
  -     # Certificate "Halcom Root Certificate Authority"
  -     # Certificate "Application CA G3 Root"
  -     # Certificate "GLOBALTRUST 2015"
  -     # Certificate "Microsoft ECC Product Root Certificate Authority 2018"
  -     # Certificate "emSign Root CA - G2"
  -     # Certificate "emSign Root CA - C2"
  -     # Certificate "Microsoft ECC TS Root Certificate Authority 2018"
  -     # Certificate "DigiCert CS ECC P384 Root G5"
  -     # Certificate "DigiCert CS RSA4096 Root G5"
  -     # Certificate "DigiCert RSA4096 Root G5"
  -     # Certificate "DigiCert ECC P384 Root G5"
  -     # Certificate "HARICA Code Signing RSA Root CA 2021"
  -     # Certificate "HARICA Code Signing ECC Root CA 2021"
  -     # Certificate "Microsoft Identity Verification Root Certificate Authority 2020"


author: Bob Relyea <rrelyea@redhat.com> - 2022.2.54-5
changelog:
  - Update to CKBI 2.54 from NSS 3.79
  -    Removing:
  -     # Certificate "TrustCor ECA-1"
  -     # Certificate "TrustCor RootCert CA-2"
  -     # Certificate "TrustCor RootCert CA-1"
  -     # Certificate "Network Solutions Certificate Authority"
  -     # Certificate "COMODO Certification Authority"
  -     # Certificate "Autoridad de Certificacion Raiz del Estado Venezolano"
  -     # Certificate "Microsec e-Szigno Root CA 2009"
  -     # Certificate "TWCA Root Certification Authority"
  -     # Certificate "Izenpe.com"
  -     # Certificate "state-institutions"
  -     # Certificate "GlobalSign"
  -     # Certificate "Common Policy"
  -     # Certificate "A-Trust-nQual-03"
  -     # Certificate "A-Trust-Qual-02"
  -     # Certificate "Autoridad de Certificacion Firmaprofesional CIF A62634068"
  -     # Certificate "Government Root Certification Authority"
  -     # Certificate "AC Raíz Certicámara S.A."


author: Frantisek Krenzelok <krenzelok.frantisek@gmail.com> - 2023.2.60-2
changelog:
  - Update to CKBI 2.60 from NSS 3.86
  -    Removing:
  -     # Certificate "Camerfirma Global Chambersign Root"
  -     # Certificate "Staat der Nederlanden EV Root CA"
  -    Adding:
  -     # Certificate "DigiCert TLS ECC P384 Root G5"
  -     # Certificate "DigiCert TLS RSA4096 Root G5"
  -     # Certificate "DigiCert SMIME ECC P384 Root G5"
  -     # Certificate "DigiCert SMIME RSA4096 Root G5"
  -     # Certificate "Certainly Root R1"
  -     # Certificate "Certainly Root E1"
  -     # Certificate "E-Tugra Global Root CA RSA v3"
  -     # Certificate "E-Tugra Global Root CA ECC v3"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT RSA CA"
  -     # Certificate "DIGITALSIGN GLOBAL ROOT ECDSA CA"
  -     # Certificate "Global Chambersign Root"


author: Robert Relyea <rrelyea@redhat.com> - 2023.2.60_v7.0.306-1.0
changelog:
  - Update to CKBI 2.60_v7.0.306 from NSS 3.91
  -    Removing:
  -     # Certificate "OpenTrust Root CA G1"
  -     # Certificate "Swedish Government Root Authority v1"
  -     # Certificate "DigiNotar Root CA G2"
  -     # Certificate "Federal Common Policy CA"
  -     # Certificate "TC TrustCenter Universal CA III"
  -     # Certificate "CCA India 2007"
  -     # Certificate "ipsCA Global CA Root"
  -     # Certificate "ipsCA Main CA Root"
  -     # Certificate "Macao Post eSignTrust Root Certification Authority"
  -     # Certificate "InfoNotary CSP Root"
  -     # Certificate "DigiNotar Root CA"
  -     # Certificate "Root CA"
  -     # Certificate "GPKIRootCA"
  -     # Certificate "D-TRUST Qualified Root CA 1 2007:PN"
  -     # Certificate "TC TrustCenter Universal CA I"
  -     # Certificate "TC TrustCenter Universal CA II"
  -     # Certificate "TC TrustCenter Class 2 CA II"
  -     # Certificate "TC TrustCenter Class 4 CA II"
  -     # Certificate "TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "CertRSA01"
  -     # Certificate "KISA RootCA 3"
  -     # Certificate "A-CERT ADVANCED"
  -     # Certificate "A-Trust-Qual-01"
  -     # Certificate "A-Trust-nQual-01"
  -     # Certificate "Serasa Certificate Authority II"
  -     # Certificate "TDC Internet"
  -     # Certificate "America Online Root Certification Authority 2"
  -     # Certificate "RSA Security Inc"
  -     # Certificate "Public Notary Root"
  -     # Certificate "Autoridade Certificadora Raiz Brasileira"
  -     # Certificate "Post.Trust Root CA"
  -     # Certificate "Entrust.net Secure Server Certification Authority"
  -     # Certificate "ePKI EV SSL Certification Authority - G1"
  -    Adding:
  -     # Certificate "BJCA Global Root CA1"
  -     # Certificate "BJCA Global Root CA2"
  -     # Certificate "Symantec Enterprise Mobile Root for Microsoft"
  -     # Certificate "A-Trust-Root-05"
  -     # Certificate "ADOCA02"
  -     # Certificate "StartCom Certification Authority G2"
  -     # Certificate "ATHEX Root CA"
  -     # Certificate "EBG Elektronik Sertifika Hizmet Sağlayıcısı"
  -     # Certificate "GeoTrust Primary Certification Authority"
  -     # Certificate "thawte Primary Root CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G5"
  -     # Certificate "America Online Root Certification Authority 1"
  -     # Certificate "Juur-SK"
  -     # Certificate "ComSign CA"
  -     # Certificate "ComSign Secured CA"
  -     # Certificate "ComSign Advanced Security CA"
  -     # Certificate "Sonera Class2 CA"
  -     # Certificate "VeriSign Class 3 Public Primary Certification Authority - G3"
  -     # Certificate "VeriSign, Inc."
  -     # Certificate "GTE CyberTrust Global Root"
  -     # Certificate "Equifax Secure Global eBusiness CA-1"
  -     # Certificate "Equifax"
  -     # Certificate "Class 1 Primary CA"
  -     # Certificate "Swiss Government Root CA III"
  -     # Certificate "Application CA G4 Root"
  -     # Certificate "SSC GDL CA Root A"
  -     # Certificate "GlobalSign Code Signing Root E45"
  -     # Certificate "GlobalSign Code Signing Root R45"
  -     # Certificate "Entrust Code Signing Root Certification Authority - CSBR1"


author: Carlos Rodriguez-Fernandez <carlosrodrifernandez@gmail.com> - 2.69-1
changelog:
  - Update to 2.69 (with contribs from Yanko Kaneti <yaneti@declera.com>, and Andrew G. Morgan <morgan@kernel.org>)
  - Update license to SPDX (by Anderson Toshiyuki Sasaki <ansasaki@redhat.com>)
  - Make file lists more explicit to avoid accidental ABI changes (Dominik Mierzejewski <dominik@greysector.net>)


author: Miroslav Lichvar <mlichvar@redhat.com> 4.3-3
changelog:
  - drop default chrony.keys config (#2104918)
  - add chronyd-restricted service for minimal NTP client configurations
  - convert license tag to SPDX


author: Bruno Wolff III <bruno@wolff.to> - 6.13-1
changelog:
  - Fix for CVE-2021-20208: cifs.upcall kerberos auth leak in container
  - get/setcifsacl tools are improved to support changing owner, group and SACLs


author: Bruno Wolff III <bruno@wolff.to> - 6.13-2
changelog:
  - Pull in a couple of upstream fixes slotted for the next release
  - fix regression in kerberos mount
  - fix crash when mount point does not exist


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.15-1
changelog:
  - Upstream release 6.15
  - CVE-2022-27239: mount.cifs: fix length check for ip option parsing
  - CVE-2022-29869: mount.cifs: fix verbose messages on option parsing
  - Fixes: rhbz#2080525


author: DJ Delorie <dj@redhat.com> - 2.36.9000-17
changelog:
  - Auto-sync with upstream branch master,
    commit 5dcd2d0ad02ff12c76355ef4f40947c1857ac482.
  - stdlib: Move _IO_cleanup to call_function_static_weak
  - elf: Do not assume symbol order on tst-audit25{a,b}
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - realloc: Return unchanged if request is within usable size
  - Linux: Consolidate typesizes.h
  - Linux: Make generic fcntl.h the default one
  - Linux: make generic xstatver.h the default one
  - Linux: Remove generic sysdep
  - Linux: Assume and consolidate shutdown wire-up syscall
  - Linux: Assume and consolidate listen wire-up syscall
  - Linux: Assume and consolidate socketpair wire-up syscall
  - Linux: Assume and consolidate socket wire-up syscall
  - Linux: Assume and consolidate bind wire-up syscall
  - Linux: consolidate ____longjmp_chk
  - Linux: consolidate sendfile implementation
  - Linux: consolidate unlink implementation
  - Linux: consolidate symlink implementation
  - Linux: consolidate rmdir implementation
  - Linux: consolidate readlink implementation
  - Linux: consolidate mkdir implementation
  - Linux: consolidate link implementation
  - Linux: consolidate lchown implementation
  - Linux: consolidate inotify_init implementation
  - Lninux: consolidate epoll_create implementation
  - Linux: consolidate dup2 implementation
  - Linux: consolidate chown implementation
  - Linux: consolidate chmod implementation
  - linux: Consolidate dl-origin.c
  - linux: Use long int for syscall return value
  - LoongArch: Use medium cmodel build libc_nonshared.a.
  - x86_64: State assembler is being tested on sysdeps/x86/configure
  - configure: Remove AS check
  - configure: Remove check if ld is GNU
  - configure: Remove check if as is GNU
  - configure: Move locale tools early


author: Florian Weimer <fweimer@redhat.com> - 2.36.9000-18
changelog:
  - Auto-sync with upstream branch master,
    commit c1c0dea38833751f36a145c322ce53c9a08332e1:
  - Linux: Remove epoll_create, inotify_init from syscalls.list (#2154747)
  - Linux: Reflow and sort some Makefile variables
  - mach: Drop remnants of old_CFLAGS
  - mach: Fix passing -ffreestanding when checking for gnumach headers
  - Force use of -ffreestanding when checking for gnumach headers
  - elf: Fix tst-relro-symbols.py argument passing
  - x86: Prevent SIGSEGV in memcmp-sse2 when data is concurrently modified [BZ #29863]
  - Allow _Qp_fgt in sparc64 localplt.data


author: Arjun Shankar <arjun@redhat.com> - 2.36.9000-20
changelog:
  - Drop glibc-rh2155825.patch; fix applied upstream, and
  - Auto-sync with upstream branch master,
    commit 5f55b22f4b3ea14c777a60f239d25dc4555eb804:
  - hurd getcwd: Fix memory leak on error
  - hurd fcntl: Make LOCKED macro more robust
  - hurd: Make dl-sysdep __sbrk check __vm_allocate call
  - htl: Drop duplicate check in __pthread_stack_alloc
  - hurd hurdstartup: Initialize remaining fields of hurd_startup_data
  - hurd _S_msg_add_auth: Initialize new arrays to 0
  - htl: Check error returned by __getrlimit
  - getdelim: ensure error indicator is set on error (bug 29917)
  - htl: Fix sem_wait race between read and gsync_wait
  - Avoid use of atoi in malloc
  - Linux: Pass size argument of epoll_create to the kernel
  - Simplify scripts/cross-test-ssh.sh configuration.
  - Define MADV_COLLAPSE from Linux 6.1
  - powerpc64: Increase SIGSTKSZ and MINSIGSTKSZ
  - Update all PO files in preparation for release.
  - Update kernel version to 6.1 in header constant tests
  - Update syscall lists for Linux 6.1
  - libio: Convert __vswprintf_internal to buffers (bug 27857)
  - libio: Convert __obstack_vprintf_internal to buffers (bug 27124)
  - libio: Convert __vdprintf_internal to buffers
  - libio: Convert __vasprintf_internal to buffers
  - libio: Convert __vsprintf_internal to buffers
  - stdio-common: Add lock optimization to vfprintf and vfwprintf
  - stdio-common: Convert vfprintf and related functions to buffers
  - stdio-common: Add __translated_number_width
  - stdio-common: Add __printf_function_invoke
  - stdio-common: Introduce buffers for implementing printf
  - locale: Implement struct grouping_iterator
  - Use Linux 6.1 in build-many-glibcs.py
  - Avoid use of atoi in some places in libc


author: Patsy Griffin <patsy@redhat.com> - 2.36.9000-21
changelog:
  - Auto-sync with upstream branch master,
    commit 2d2d7e1a8f2e62b442ae8978f0a6c17f385575c4.
  - configure: Allow user override LD, AR, OBJCOPY, and GPROF
  - math: Suppress -O0 warnings for soft-fp fsqrt [BZ #19444]
  - sunrpc: Suppress GCC -O1 warning on user2netname [BZ #19444]
  - locale: Use correct buffer size for utf8_sequence_error [BZ #19444]
  - Add HWCAP2_SVE_EBF16 from Linux 6.1 to AArch64 bits/hwcap.h
  - Add _FORTIFY_SOURCE implementation documentation [BZ #28998]
  - Update copyright dates not handled by scripts/update-copyrights
  - Update copyright dates with scripts/update-copyrights
  - Remove trailing whitespace in gmp.h
  - Remove trailing whitespace
  - C2x semantics for <tgmath.h>
  - time: Set daylight to 1 for matching DST/offset change (bug 29951)
  - Fix ldbl-128 built-in function use
  - x86: Check minimum/maximum of non_temporal_threshold [BZ #29953]
  - i686: Regenerate ulps


author: Florian Weimer <fweimer@redhat.com> - 2.36.9000-22
changelog:
  - Auto-sync with upstream branch master,
    commit 569cfcc6bf35c28112ca8d7112e9eb4a22bed5b8:
  - hurd: Fix _NOFLSH value
  - elf: Fix GL(dl_phdr) and GL(dl_phnum) for static builds [BZ #29864]
  - string: Suppress -Wmaybe-unitialized for wordcopy [BZ #19444]
  - scripts/build-many-glibcs.py: Remove unused RANLIB and STRIP option
  - configure: Move nm, objdump, and readelf to LIBC_PROG_BINUTILS


author: Florian Weimer <fweimer@redhat.com> - 2.36.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit 0d50f477f47ba637b54fb03ac48d769ec4543e8d:
  - stdio-common: Handle -1 buffer size in __sprintf_chk & co (bug 30039)
  - Document '%F' format specifier
  - sparc (64bit): Regenerate ulps
  - ia64: Regenerate ulps
  - Update libc.pot for 2.37 release.
  - x86: Cache computation for AMD architecture.
  - manual: Fix typo
  - Add STATX_DIOALIGN from Linux 6.1 to bits/statx-generic.h
  - Add IPPROTO_L2TP from Linux 6.1 to netinet/in.h
  - AArch64: Improve strrchr
  - AArch64: Optimize strnlen
  - AArch64: Optimize strlen
  - AArch64: Optimize strcpy
  - AArch64: Improve strchrnul
  - AArch64: Optimize strchr
  - AArch64: Improve strlen_asimd
  - AArch64: Optimize memrchr
  - AArch64: Optimize memchr


author: Florian Weimer <fweimer@redhat.com> - 2.36.9000-25
changelog:
  - Apply glibc-dprintf-length.patch to fix dprintf return value regression.
  - Auto-sync with upstream branch master,
    commit 2f39e44a8417b4186a7f15bfeac5d0b557e63e03:
  - Account for octal marker in %#o format (rhbz#2165869)
  - Use binutils 2.40 branch in build-many-glibcs.py
  - Use MPFR 4.2.0, MPC 1.3.1 in build-many-glibcs.py


author: Carlos O'Donell <carlos@redhat.com> - 2.37-1
changelog:
  - Drop already included glibc-dprintf-length.patch patch.
  - Apply glibc-printf-grouping-swbz30068.patch to fix swbz#30068.
  - Auto-sync with upstream branch release/2.37/master,
    commit a704fd9a133bfb10510e18702f48a6a9c88dbbd5:
  - Create ChangeLog.old/ChangeLog.26. (tag: glibc-2.37)
  - Prepare for glibc 2.37 release.
  - x86: Fix strncat-avx2.S reading past length [BZ #30065]
  - Update install.texi, and regenerate INSTALL.
  - Update manual/contrib.texi.
  - Update NEWS file with bug fixes.
  - Regenerate configure.
  - Update all PO files in preparation for release.
  - doc: correct _FORTIFY_SOURCE doc in features.h
  - libio: Update number of written bytes in dprintf implementation


author: Florian Weimer <fweimer@redhat.com> - 2.37-3
changelog:
  - Drop glibc-printf-grouping-swbz30068.patch, applied upstream.
  - Auto-sync with upstream branch release/2.37/master,
    commit ff3a71ec1fc02757b38c9c3209118d14dd10c7b6:
  - gmon: fix memory corruption issues [BZ# 30101]
  - gmon: improve mcount overflow handling [BZ# 27576]
  - gmon: Fix allocated buffer overflow (bug 29444)
  - posix: Fix system blocks SIGCHLD erroneously [BZ #30163]
  - x86_64: Fix asm constraints in feraiseexcept (bug 30305)
  - gshadow: Matching sgetsgent, sgetsgent_r ERANGE handling (bug 30151)
  - stdio-common: tests: don't double-define _FORTIFY_SOURCE
  - elf: Restore ldconfig libc6 implicit soname logic [BZ #30125]
  - stdlib: Undo post review change to 16adc58e73f3 [BZ #27749]
  - elf: Smoke-test ldconfig -p against system /etc/ld.so.cache
  - NEWS: Document CVE-2023-25139.
  - Account for grouping in printf width (bug 30068)
  - Use 64-bit time_t interfaces in strftime and strptime (bug 30053)
  - LoongArch: Add new relocation types.
  - cdefs: Limit definition of fortification macros


author: Florian Weimer <fweimer@redhat.com> - 2.37-4
changelog:
  - Auto-sync with upstream branch release/2.37/master,
    commit 7c32cb7dd88cf100b0b412163896e30aa2ee671a:
  - gmon: Revert addition of tunables to the manual
  - gmon: Revert addition of tunables to preserve GLIBC_PRIVATE ABI


author: Florian Weimer <fweimer@redhat.com> - 2.37-5
changelog:
  - Auto-sync with upstream branch release/2.37/master,
    commit 1a7cbe52c8955beae477cf9c6d88f4bc04f626c1:
  - elf: Move l_init_called_next to old place of l_text_end in link map
  - elf: Remove unused l_text_end field from struct link_map
  - elf: Always call destructors in reverse constructor order (bug 30785)
  - elf: Do not run constructors for proxy objects
  - io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64
  - x86: Fix incorrect scope of setting `shared_per_thread` [BZ# 30745]
  - x86: Use `3/4*sizeof(per-thread-L3)` as low bound for NT threshold.
  - x86: Fix slight bug in `shared_per_thread` cache size calculation.
  - x86: Increase `non_temporal_threshold` to roughly `sizeof_L3 / 4`
  - elf: _dl_find_object may return 1 during early startup (bug 30515)
  - realloc: Limit chunk reuse to only growing requests [BZ #30579]
  - io: Fix F_GETLK, F_SETLK, and F_SETLKW for powerpc64
  - io: Fix record locking contants on 32 bit arch with 64 bit default time_t (BZ#30477)
  - __check_pf: Add a cancellation cleanup handler [BZ #20975]
  - Ignore MAP_VARIABLE in tst-mman-consts.py


author: Arjun Shankar <arjun@redhat.com> - 2.37-9
changelog:
  - Auto-sync with upstream branch release/2.37/master,
    2dfd8c77b546fbc46d93a5d71ae319d9c230746b:
  - i686: Regenerate ulps
  - Document CVE-2023-4806 and CVE-2023-5156 in NEWS
  - Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843]
  - x86: Fix for cache computation on AMD legacy cpus.
  - x86/dl-cacheinfo: remove unsused parameter from handle_amd
  - getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)
  - CVE-2023-4527: Stack read overflow with large TCP responses in no-aaaa mode


author: Arjun Shankar <arjun@redhat.com> - 2.37-10
changelog:
  - Auto-sync with upstream branch release/2.37/master,
    b4e23c75aea756b4bddc4abcf27a1c6dca8b6bd3:
  - tunables: Terminate if end of input is reached (CVE-2023-4911)


author: Florian Weimer <fweimer@redhat.com> - 2.37-11
changelog:
  - Auto-sync with upstream branch release/2.37/master,
    commit 8e20aedfd7fc77b630109a2bcde94e6c95dbcc3d:
  - Revert "elf: Move l_init_called_next to old place of l_text_end in link map"
  - Revert "elf: Always call destructors in reverse constructor order (bug 30785)"
  - Revert "elf: Remove unused l_text_end field from struct link_map"


author: Arjun Shankar <arjun@redhat.com> - 2.37.9000-12
changelog:
  - Auto-sync with upstream branch master,
    commit e3622a8f391deea3b75a577dce70d023dfa3f1c7.
  - time: Also check for EPERM while trying to clock_settime
  - linux: Fail as unsupported if personality call is filtered
  - Remove MAP_VARIABLE from hppa bits/mman.h
  - hurd: Fix x86_64 sigreturn restoring bogus reply_port
  - Add lint-makefiles Makefile linting test.
  - elf: Sort Makefile variables.
  - Fix a few more typos I missed in previous round -- BZ 25337
  - Fix all the remaining misspellings -- BZ 25337
  - Use __nonnull for the epoll_wait(2) family of syscalls
  - Fix invalid use of NULL in epoll_pwait2(2) test
  - getipv4sourcefilter: Get rid of alloca
  - getsourcefilter: Get rid of alloca.
  - tests: fix warn unused results
  - nptl_db/thread_dbP.h: fix warn unused result
  - malloc/{memusage.c, memusagestat.c}: fix warn unused result
  - catgets/gencat.c: fix warn unused result
  - tests: replace ftruncate by xftruncate
  - tests: replace write by xwrite
  - x86-64: Use YMM registers in memcmpeq-evex.S


author: Arjun Shankar <arjun@redhat.com> - 2.37.9000-13
changelog:
  - Auto-sync with upstream branch master,
    commit 85e6d8b4175fcb195011a0a1bad37d6f3b2355db:
  - time: Fix use-after-free in getdate
  - Move {read,write}_all functions to a dedicated header
  - tests: Replace various function calls with their x variant
  - tests: fix warn unused result on asprintf calls
  - pthreads: Use _exit to terminate the tst-stdio1 test
  - support: Add delayed__exit (with two underscores)


author: Carlos O'Donell <carlos@redhat.com> - 2.37.9000-15
changelog:
  - Auto-sync with upstream branch master,
    commit d35fbd3e684e6bb5e5ec452ad8dac6ada8424bdd:
  - linux: Return unsupported if procfs can not be mount on tst-ttyname-namespace
  - linux: Split tst-ttyname
  - Use Linux 6.4 in build-many-glibcs.py
  - x86: Adjust Linux x32 dl-cache inclusion path
  - elf: Update list of RISC-V relocations
  - Fix tests-clean Makefile target (bug 30545)
  - check_native: Get rid of alloca
  - ifaddrs: Get rid of alloca
  - x86: Make dl-cache.h and readelflib.c not Linux-specific
  - elf: Port ldconfig away from stack-allocated paths
  - Call "CST" a time zone abbreviation, not a name
  - benchtests: fix warn unused result
  - sysdeps/powerpc/fpu/tst-setcontext-fpscr.c: Fix warn unused result
  - rt/tst-mqueue4.c: Fix wrong number of argument for mq_open
  - debug/readlink{, at}_chk.c: Harmonize declaration and definition
  - wcsmbs/bits/wchar2{, -decl}.h: Clearly separate declaration from definitions
  - stdio-common: tests: Incorrect maxlen parameter for swprintf
  - sysdeps/{i386, x86_64}/mempcpy_chk.S: fix linknamespace for __mempcpy_chk
  - hurd: readv: Get rid of alloca
  - hurd: writev: Add back cleanup handler
  - Fix misspellings -- BZ 25337
  - C2x scanf %b support
  - C2x printf %wN, %wfN support (bug 24466)
  - tests: replace system by xsystem
  - tests: replace read by xread
  - hurd: writev: Get rid of alloca
  - grantpt: Get rid of alloca
  - string: strerror must not return NULL (bug 30555)
  - hurd: Add strlcpy, strlcat, wcslcpy, wcslcat to libc.abilist
  - manual: Manual update for strlcat, strlcpy, wcslcat, wclscpy
  - Add the wcslcpy, wcslcat functions
  - Implement strlcpy and strlcat [BZ #178]
  - tests: replace fgets by xfgets
  - tests: replace fread by xfread
  - posix: Add test case for gai_strerror()
  - posix: Handle success in gai_strerror()
  - LoongArch: Add support for dl_runtime_profile
  - malloc: Decrease resource usage for malloc tests
  - stdlib: Tune down fork arc4random tests
  - tst-getdate: Improve testcase flexibility and add test.
  - x86: Make the divisor in setting `non_temporal_threshold` cpu specific
  - x86: Refactor Intel `init_cpu_features`
  - x86: Increase `non_temporal_threshold` to roughly `sizeof_L3 / 4`
  - Remove unused DATEMSK file for tst-getdate
  - resolv_conf: release lock on allocation failure (bug 30527)


author: Frédéric Bérat <fberat@redhat.com> - 2.37.9000-16
changelog:
  - Add "--enable-fortify-source" option to configure
  - Auto-sync with upstream branch master,
    commit 5324d258427fd11ca0f4f595c94016e568b26d6b.
  - fileops: Don't process ,ccs= as individual mode flags (BZ#18906)
  - sysdeps/ieee754/ldbl-128ibm-compat: Fix warn unused result
  - libio/bits/stdio2-decl.h: Avoid PLT entries with _FORTIFY_SOURCE
  - libio/bits/stdio2.h: Clearly separate declaration from definitions
  - misc/bits/syslog.h: Clearly separate declaration from definition
  - misc/bits/select2.h: Clearly separate declaration from definitions
  - unistd: Avoid PLT entries with _FORTIFY_SOURCE
  - posix/bits/unistd.h: Clearly separate declaration from definitions
  - wchar: Avoid PLT entries with _FORTIFY_SOURCE
  - misc/sys/cdefs.h: Create FORTIFY redirects for internal calls
  - stdio: Ensure *_chk routines have their hidden builtin definition available
  - string: Ensure *_chk routines have their hidden builtin definition available
  - sysdeps: Ensure ieee128*_chk routines to be properly named
  - Exclude routines from fortification
  - Allow glibc to be built with _FORTIFY_SOURCE
  - manual: Update documentation of strerror and related functions
  - manual: Enhance documentation of the <ctype.h> functions
  - Always do locking when accessing streams (bug 15142, bug 14697)
  - hurd: Implement MAP_EXCL
  - hurd: Fix mapping at address 0 with MAP_FIXED
  - hurd: Fix calling vm_deallocate (NULL)
  - hurd: Map brk non-executable
  - htl: Let Mach place thread stacks
  - mach: strerror must not return NULL (bug 30555)
  - hppa: xfail debug/tst-ssp-1 when have-ssp is yes (gcc-12 and later)
  - support: Build with exceptions and asynchronous unwind tables [BZ #30587]
  - hurd: Make getrandom return ENOSYS when /dev/random is not set up
  - Stop applying a GCC-specific workaround on clang [BZ #30550]
  - ld.so: Always use MAP_COPY to map the first segment [BZ #30452]
  - setenv.c: Get rid of alloca.
  - Add checks for wday, yday and new date formats
  - aarch64: Add vector implementations of exp routines
  - aarch64: Add vector implementations of log routines
  - aarch64: Add vector implementations of sin routines
  - aarch64: Add vector implementations of cos routines
  - Switch to UTF-8 for INSTALL
  - Make sure INSTALL is ASCII plaintext
  - Update syscall lists for Linux 6.4


author: Arjun Shankar <arjun@redhat.com> - 2.37.9000-17
changelog:
  - Auto-sync with upstream branch master,
    commit 7f079fdc16e88ebb8020e17b2fd900e8924da29a:
  - LoongArch: Add vector implementation for _dl_runtime_resolve.
  - LoongArch: config: Added HAVE_LOONGARCH_VEC_ASM.
  - sysdeps: Add missing hidden definitions for i386
  - sysdeps/s390: Exclude fortified routines from being built with _FORTIFY_SOURCE
  - Translations: Add new ro support and update others.
  - elf: _dl_find_object may return 1 during early startup (bug 30515)
  - LoongArch: config: Rewrite check on static PIE.
  - Revert "hppa: Drop 16-byte pthread lock alignment"
  - realloc: Limit chunk reuse to only growing requests [BZ #30579]
  - vfscanf-internal: Remove potentially unbounded allocas


author: DJ Delorie <dj@redhat.com> - 2.37.9000-19
changelog:
  - Auto-sync with upstream branch master,
    commit 637aac2ae3980de31a6baab236a9255fe853cc76.
  - Include sys/rseq.h in tst-rseq-disable.c
  - string: Fix tester with fortify enabled
  - string: Fix bug-strncat1 with fortify enabled
  - nscd: Use errval, not errno to guide cache update (bug 30662)
  - Restore lookup of IPv4 mapped addresses in files database (bug 25457)
  - Revert "MIPS: Sync elf.h from binutils"
  - riscv: Update rvd libm test ulps
  - MIPS: Sync elf.h from binutils
  - Merge translations (bg, hr, pl, sv)
  - nptl: Unconditionally use a 32-byte rseq area
  - hurd: Fix tst-openloc
  - scripts: Fix fortify checks if compiler does not support _FORTIFY_SOURCE=3
  - configure: Disable building libcrypt by default
  - nptl: Make tst-tls3mod.so explicitly lazy
  - make ‘struct pthread’ a complete type
  - scripts: Add fortify checks on installed headers
  - Update x86_64 libm-test-ulps (x32 ABI)
  - Fix getting return address in elf/tst-audit28.c.
  - [PATCH v1] x86: Use `3/4*sizeof(per-thread-L3)` as low bound for NT threshold.
  - x86: Fix slight bug in `shared_per_thread` cache size calculation.
  - Update i686 libm-test-ulps (again)
  - Update i686 libm-test-ulps
  - Merge translations (de, ro, uk, zh_TW)
  - Regenerate libc.pot
  - configure: Use autoconf 2.71
  - Update sparc libm-test-ulps
  - s390: Add the clone3 wrapper
  - manual: Fix typos in struct dl_find_object
  - sparc: Fix la_symbind for bind-now (BZ 23734)
  - i386: make debug wrappers compatible with static PIE
  - LoongArch: Fix soft-float bug about _dl_runtime_resolve{,lsx,lasx}


author: Patsy Griffin <patsy@redhat.com> - 2.37.9000-20
changelog:
  - Allow for the optional removal of tzdata.
  - Rebuilt for https://fedoraproject.org/wiki/Changes/AllowRemovalOfTzdata


author: Florian Weimer <fweimer@redhat.com> - 2.38-1
changelog:
  - Switch to upstream 2.38 release
  - <sys/platform/x86.h>: Add APX support
  - translations: update cs, nl, vi
  - string: Fix tester build with fortify enable with gcc 6
  - linux: Fix i686 with gcc6
  - i386: Remove memset_chk-nonshared.S
  - i386: Fix build with --enable-fortify=3
  - posix: Fix test-errno build with fortify enable
  - powerpc: Fix powerpc64 strchrnul build with old gcc
  - sunrpc: Fix netname build with older gcc
  - malloc: Fix set-freeres.c with gcc 6
  - nscd: cleanup obsolete _FORTIFY_SOURCE setting


author: Arjun Shankar <arjun@redhat.com> - 2.38-3
changelog:
  - Auto-sync with upstream branch release/2.38/master,
    commit 2af141bda3cd407abd4bedf615f9e45fe79518e2.
  - malloc: Remove bin scanning from memalign (bug 30723)
  - malloc: Enable merging of remainders in memalign (bug 30723)
  - i686: Fix build with --disable-multiarch
  - x86_64: Fix build with --disable-multiarch (BZ 30721)
  - x86: Fix incorrect scope of setting `shared_per_thread` [BZ# 30745]
  - nscd: Do not rebuild getaddrinfo (bug 30709)
  - x86: Fix for cache computation on AMD legacy cpus.
  - stdlib: Improve tst-realpath compatibility with source fortification


author: Florian Weimer <fweimer@redhat.com> - 2.38-4
changelog:
  - Auto-sync with upstream branch release/2.38/master,
    commit 89da8bc588c2296252543b049bf6d9272321f90d:
  - elf: Move l_init_called_next to old place of l_text_end in link map
  - elf: Remove unused l_text_end field from struct link_map
  - elf: Always call destructors in reverse constructor order (bug 30785)
  - elf: Do not run constructors for proxy objects
  - libio: Fix oversized __io_vtables
  - io: Fix record locking contants for powerpc64 with __USE_FILE_OFFSET64
  - sysdeps: tst-bz21269: fix -Wreturn-type
  - sysdeps: tst-bz21269: handle ENOSYS & skip appropriately
  - sysdeps: tst-bz21269: fix test parameter


author: Arjun Shankar <arjun@redhat.com> - 2.38-5
changelog:
  - Auto-sync with upstream branch release/2.38/master,
    f6445dc94da185b3d1ee283f0ca0a34c4e1986cc:
  - Document CVE-2023-4806 and CVE-2023-5156 in NEWS
  - Fix leak in getaddrinfo introduced by the fix for CVE-2023-4806 [BZ #30843]
  - manual/jobs.texi: Add missing @item EPERM for getpgid
  - string: Fix tester build with fortify enable with gcc < 12
  - iconv: restore verbosity with unrecognized encoding names (bug 30694)
  - getaddrinfo: Fix use after free in getcanonname (CVE-2023-4806)
  - CVE-2023-4527: Stack read overflow with large TCP responses in no-aaaa mode


author: Arjun Shankar <arjun@redhat.com> - 2.38-6
changelog:
  - Auto-sync with upstream branch release/2.38/master,
    750a45a783906a19591fb8ff6b7841470f1f5701:
  - tunables: Terminate if end of input is reached (CVE-2023-4911)
  - Propagate GLIBC_TUNABLES in setxid binaries


author: Florian Weimer <fweimer@redhat.com> - 2.38-8
changelog:
  - Drop glibc-rh2239304-1.patch, glibc-rh2239304-2.patch,
    glibc-rh2239304-3.patch; applied upstream.
  - Auto-sync with upstream branch release/2.38/master,
    commit 1e04dcec491bd8f48b5b74ce3e8414132578a645.
  - Revert "elf: Move l_init_called_next to old place of l_text_end in link map"
  - Revert "elf: Always call destructors in reverse constructor order (bug 30785)"
  - Revert "elf: Remove unused l_text_end field from struct link_map"


author: Florian Weimer <fweimer@redhat.com> - 2.38-12
changelog:
  - Auto-sync with upstream branch release/2.38/master,
    commit 63dbbc5c52f9823f86270f32fce20d1e91cdf484:
  - sysdeps: sem_open: Clear O_CREAT when semaphore file is expected to exist [BZ #30789]


author: Arjun Shankar <arjun@redhat.com> - 2.38-15
changelog:
  - Adjust glibc-implicit-object-deps-3.patch; and
  - Auto-sync with upstream branch release/2.38/master,
    commit cfe121910013a46e2477562282c56ae8062089aa:
  - libio: Check remaining buffer size in _IO_wdo_write (bug 31183)
  - getaddrinfo: translate ENOMEM to EAI_MEMORY (bug 31163)
  - NEWS: Mention bug fixes for 30745/30843
  - NEWS: Mention bug fixes for 29039/30694/30709/30721
  - x86-64: Fix the tcb field load for x32 [BZ #31185]
  - x86-64: Fix the dtv field load for x32 [BZ #31184]
  - elf: Add TLS modid reuse test for bug 29039
  - elf: Fix TLS modid reuse generation assignment (BZ 29039)
  - LoongArch: Delete excessively allocated memory.
  - elf: Fix wrong break removal from 8ee878592c


author: Patsy Griffin <patsy@redhat.com> - 2.38-16
changelog:
  - Auto-sync with upstream branch release/2.38/master,
    commit d37c2b20a4787463d192b32041c3406c2bd91de0:
  - syslog: Fix integer overflow in __vsyslog_internal (CVE-2023-6780)
  - syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6779)
  - syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6246)


author: Arjun Shankar <arjun@redhat.com> - 2.38.9000-26
changelog:
  - Drop glibc-benchtests-aarch64.patch; fix applied upstream, and
  - Auto-sync with upstream branch master,
    commit 9469261cf1924d350feeec64d2c80cafbbdcdd4d:
  - x86: Only align destination to 1x VEC_SIZE in memset 4x loop
  - elf: Fix TLS modid reuse generation assignment (BZ 29039)
  - Add TCP_MD5SIG_FLAG_IFINDEX from Linux 5.6 to netinet/tcp.h.
  - elf: Relocate libc.so early during startup and dlmopen (bug 31083)
  - elf: Introduce the _dl_open_relocate_one_object function
  - elf: In _dl_relocate_object, skip processing if object is relocated
  - Remove __access_noerrno
  - malloc: Use __get_nprocs on arena_get2 (BZ 30945)
  - aarch64: Fix libmvec benchmarks


author: Carlos O'Donell <carlos@redhat.com> - 2.38.9000-27
changelog:
  - Drop glibc-rh2248502.patch; fix applied upstream, and
  - Auto-sync with upstream branch master,
    commit b3bee76c5f59498b9c189608f0a3132e2013fa1a:
  - elf: Initialize GLRO(dl_lazy) before relocating libc in dynamic startup
  - Move CVE information into advisories directory
  - powerpc: Optimized strcmp for power10
  - elf: Fix wrong break removal from 8ee878592c
  - localedata: Convert day names in nn_NO locale to UTF-8
  - localedata: Remove trailing whitespace in weekday names in nn_NO locale
  - elf: Refactor process_envvars
  - elf: Ignore LD_BIND_NOW and LD_BIND_NOT for setuid binaries
  - elf: Ignore loader debug env vars for setuid
  - Adapt the security policy for the security page
  - aarch64: correct CFI in rawmemchr (bug 31113)
  - math: Add new exp10 implementation
  - aarch64: fix tested ifunc variants
  - stdlib: Fix array bounds protection in insertion sort phase of qsort
  - Revert "Update code to handle the new ABI for sending inlined port rights."
  - Revert "hurd: Fix build"
  - hurd: Fix build
  - Update code to handle the new ABI for sending inlined port rights.
  - hurd: [!__USE_MISC] Do not #undef BSD macros in ioctls
  - linux: Make fdopendir fail with O_PATH (BZ 30373)
  - Avoid padding in _init and _fini. [BZ #31042]
  - aarch64: Improve special-case handling in AdvSIMD double-precision libmvec routines
  - malloc: Improve MAP_HUGETLB with glibc.malloc.hugetlb=2
  - elf: Add a way to check if tunable is set (BZ 27069)


author: Florian Weimer <fweimer@redhat.com> - 2.38.9000-29
changelog:
  - Auto-sync with upstream branch master,
    commit 61bac1a9d2ab80ebcbc51484722e6ea43414bec7:
  - nss: Remove unused allocation from get_nscd_addresses in getaddrinfo
  - x86/cet: Don't disable CET if not single threaded
  - x86: Modularize sysdeps/x86/dl-cet.c
  - x86/cet: Update tst-cet-vfork-1
  - elf: Add TLS modid reuse test for bug 29039
  - aarch64: Add SIMD attributes to math functions with vector versions
  - aarch64: Add half-width versions of AdvSIMD f32 libmvec routines
  - Fix elf/tst-env-setuid[-static] if test needs to be rerun.
  - Fix elf: Do not duplicate the GLIBC_TUNABLES string
  - tst-setcontext10.c: Undef _FORTIFY_SOURCE
  - Fix elf: Do not duplicate the GLIBC_TUNABLES string
  - riscv: Fix feenvupdate with FE_DFL_ENV (BZ 31022)
  - manual: Clarify undefined behavior of feenableexcept (BZ 31019)
  - x86: Do not raises floating-point exception traps on fesetexceptflag (BZ 30990)
  - i686: Do not raise exception traps on fesetexcept (BZ 30989)
  - powerpc: Do not raise exception traps for fesetexcept/fesetexceptflag (BZ 30988)
  - elf: Do not set invalid tunables values
  - elf: Do not duplicate the GLIBC_TUNABLES string
  - x86/cet: Check CPU_FEATURE_ACTIVE in permissive mode
  - x86/cet: Check legacy shadow stack code in .init_array section
  - x86/cet: Add tests for GLIBC_TUNABLES=glibc.cpu.hwcaps=-SHSTK
  - x86/cet: Check CPU_FEATURE_ACTIVE when CET is disabled
  - x86/cet: Check legacy shadow stack applications
  - localedata: id_ID: change first weekday to Sunday
  - s390: Set psw addr field in getcontext and friends.
  - x86: Unifies 'strlen-evex' and 'strlen-evex512' implementations.
  - x86/cet: Don't assume that SHSTK implies IBT
  - id_ID: Update Time Locales
  - Update code to handle the new ABI for sending inlined port rights.
  - x86/cet: Check user_shstk in /proc/cpuinfo
  - Add a test for setjmp/longjmp within user context
  - Add a test for longjmp from user context
  - powerpc: Add space for HWCAP3/HWCAP4 in the TCB for future Power.
  - powerpc: Fix performance issues of strcmp power10
  - localedata: Convert el_GR and el_CY locales to UTF-8
  - localedata: el_GR: Greece now uses the 24h format for time
  - powerpc : Add optimized memchr for POWER10
  - intl: Treat C.UTF-8 locale like C locale, part 2 (BZ# 16621)
  - resolv: Fix a few unaligned accesses to fields in HEADER
  - x86: Check PT_GNU_PROPERTY early


author: Carlos O'Donell <carlos@redhat.com> - 2.38.9000-31
changelog:
  - Add new locales for kv_RU, su_ID, tok, and zgh_MA.
  - Drop glibc-rh2255506.patch; fix applied upstream.
  - Enable Intel CET only on x86_64.
  - Auto-sync with upstream branch master,
    commit 064c708c78cc2a6b5802dce73108fc0c1c6bfc80:
  - localedata/unicode-gen/utf8_gen.py: fix Hangul syllable name
  - x86_64: Optimize ffsll function code size.
  - localedata: Remove redundant comments
  - RISC-V: Enable static-pie.
  - linux: Fix fstat64 on alpha and sparc64
  - math: remove exp10 wrappers
  - Benchtests: Increase benchmark iterations
  - debug/getwd_chk.c: warning should be emitted for the __getwd_chk symbol.
  - Make __getrandom_nocancel set errno and add a _nostatus version
  - x86-64/cet: Make CET feature check specific to Linux/x86
  - Incorporate translations (zh_CN)
  - Define ISO 639-3 "glk" (Gilaki)
  - resolv: Fix endless loop in __res_context_query
  - localedata: revert all the remaining locale sources to UTF-8
  - localedata: am_ET ber_DZ en_GB en_PH en_US fil_PH kab_DZ om_ET om_KE ti_ET tl_PH: convert to UTF-8
  - localedata: resolve cyclic dependencies
  - localedata: kv_RU: convert to UTF-8
  - localedata: add new locale kv_RU
  - elf: Fix tst-nodeps2 test failure.
  - localedata: Sort Makefile variables.
  - locale: Sort Makefile variables.
  - i386: Remove CET support bits
  - x86-64/cet: Move check-cet.awk to x86_64
  - x86-64/cet: Move dl-cet.[ch] to x86_64 directories
  - x86: Move x86-64 shadow stack startup codes
  - Fix deprecated utcnow() usage in build-many-glibcs.py
  - Fix invalid escape sequence in build-many-glibcs.py
  - math: Fix test-fenv.c feupdateenv tests
  - Remove installed header rule on $(..)include/%.h
  - i386: Fail if configured with --enable-cet
  - i386: Remove CET support
  - x86: Move CET infrastructure to x86_64
  - localedata: su_ID: make lang_name agree with CLDR
  - localedata: add new locale su_ID
  - localedata: add new locale zgh_MA
  - INSTALL: regenerate
  - localedata: add tok/UTF-8 to SUPPORTED
  - localedata: tok: add yY and nN to yesexpr and noexpr
  - localedata: tok: convert to UTF-8
  - localedata: add data for tok (Toki Pona)
  - Remove ia64-linux-gnu
  - localedata: dz_BT, bo_CN: convert to UTF-8
  - localedata: dz_BT, bo_CN: Fix spelling of "phur bu" in both Tibetan and Dzongkha
  - localedata: bo_CN: Fix spelling errors in Tibetan data
  - localedata: bo_CN: Fix incomplete edit in Tibetan yesexpr
  - localedata: dz_BT: Fix spelling errors in Dzongha data
  - localedata: unicode-gen: Remove redundant \s* from regexp, fix comments
  - localedata: convert the remaining *_RU locales to UTF-8
  - Incorporate translations
  - x32: Handle displacement overflow in PLT rewrite [BZ #31218]
  - x86: Fixup some nits in longjmp asm implementation
  - stdlib: Fix stdbit.h with -Wconversion for clang
  - stdlib: Fix stdbit.h with -Wconversion for older gcc
  - elf: Add ELF_DYNAMIC_AFTER_RELOC to rewrite PLT
  - aarch64: Make cpu-features definitions not Linux-specific
  - hurd: Initializy _dl_pagesize early in static builds
  - hurd: Only init early static TLS if it's used to store stack or pointer guards
  - hurd: Make init-first.c no longer x86-specific
  - hurd: Drop x86-specific assembly from init-first.c
  - hurd: Pass the data pointer to _hurd_stack_setup explicitly
  - x86-64/cet: Check the restore token in longjmp
  - localedata: ru_RU, ru_UA: convert to UTF-8
  - localedata: es_??: convert to UTF-8
  - localedata: miq_NI: convert to UTF-8
  - i386: Ignore --enable-cet
  - mach: Drop SNARF_ARGS macro
  - mach: Drop some unnecessary vm_param.h includes
  - hurd: Declare _hurd_intr_rpc_msg* with protected visibility
  - hurd: Add some missing includes
  - localedata: fy_DE: make this "Western Frisian" to agree with the language code "fy"
  - localedata: fy_DE, fy_NL: convert to UTF-8
  - localedata: ast_ES: convert to UTF-8
  - localedata: ast_ES: Remove wrong copyright text
  - localedata: de_{AT,BE,CH,IT,LU}: convert to UTF-8
  - localedata: lv_LV, it_IT, it_CH: convert to UTF-8
  - localedata: it_IT, lv_LV: currency symbol should follow the amount
  - Implement C23 <stdbit.h>
  - localedata: ms_MY should not use 12-hour format
  - localedata: es_ES: convert to UTF-8
  - localedata: es_ES: Add am_pm strings
  - aarch64: Add longjmp test for SME
  - aarch64: Add setcontext support for SME
  - aarch64: Add longjmp support for SME
  - aarch64: Add SME runtime support
  - localedata: convert uz_UZ and uz_UZ@cyrillic to UTF-8
  - localedata: uz_UZ and uz_UZ@cyrillic: Fix decimal point and thousands separator
  - libio: Check remaining buffer size in _IO_wdo_write (bug 31183)
  - getaddrinfo: translate ENOMEM to EAI_MEMORY (bug 31163)
  - string: Add additional output in test-strchr failure
  - Add a setjmp/longjmp test between user contexts
  - x86/cet: Add -fcf-protection=none before -fcf-protection=branch
  - Regenerate libc.pot
  - Omit regex.c pragmas no longer needed
  - Update copyright dates not handled by scripts/update-copyrights
  - Update copyright in generated files by running "make"
  - Update copyright dates with scripts/update-copyrights
  - x86/cet: Run some CET tests with shadow stack
  - x86/cet: Don't set CET active by default
  - x86/cet: Check feature_1 in TCB for active IBT and SHSTK
  - x86/cet: Enable shadow stack during startup
  - elf: Always provide _dl_get_dl_main_map in libc.a
  - x86/cet: Sync with Linux kernel 6.6 shadow stack interface
  - RISC-V: Add support for dl_runtime_profile (BZ #31151)
  - debug: Add fortify wprintf tests
  - debug: Add fortify syslog tests
  - debug: Add fortify dprintf tests
  - debug: Increase tst-fortify checks for compiler without __va_arg_pack support
  - debug: Adapt fortify tests to libsupport
  - localedata: yo_NT: remove redundant comments
  - localedata: convert en_AU, en_NZ, mi_NZ, niu_NZ to UTF-8
  - localedata: First day of the week in AU is Monday, LC_TIME in en_NZ is identical to LC_TIME in en_AU then
  - localedata: convert yo_NG to UTF-8, check that language name in Yoruba agrees with CLDR
  - x86-64: Fix the tcb field load for x32 [BZ #31185]
  - x86-64: Fix the dtv field load for x32 [BZ #31184]


author: DJ Delorie <dj@redhat.com> - 2.38.9000-32
changelog:
  - Auto-sync with upstream branch master,
    commit 709fbd3ec3595f2d1076b4fec09a739327459288.
  - stdlib: Reinstate stable mergesort implementation on qsort
  - x86-64: Check if mprotect works before rewriting PLT
  - aarch64: Add NEWS entry about libmvec for 2.39


author: DJ Delorie <dj@redhat.com> - 2.38.9000-33
changelog:
  - Auto-sync with upstream branch master,
    commit e2803cfd8bb00b54816d1a2c381d2cf82b136da6.
  - NEWS: Mention PLT rewrite on x86-64
  - stdlib: Verify heapsort for two-element cases
  - stdlib: Fix heapsort for cases with exactly two elements
  - localedata: anp_IN: Fix abbreviated month names


author: Florian Weimer <fweimer@redhat.com> - 2.38.9000-35
changelog:
  - Add crh_RU, gbm_IN, ssy_ER locales.
  - Auto-sync with upstream branch master,
    commit 486452affbac684db739b7fcca1e84e8a7ce33d1:
  - manual, NEWS: Document malloc side effect of dynamic TLS changes
  - NEWS: Update temporary files ignored by ldconfig
  - po: Incorporate translations (sr)
  - string: Disable stack protector for memset in early static initialization
  - qsort: Fix a typo causing unnecessary malloc/free (BZ 31276)
  - riscv: add support for static PIE
  - localedata: renamed:    aa_ER@saaho -> ssy_ER
  - Define ISO 639-3 "ssy" (Saho)
  - localedata: add crh_RU, Crimean Tartar language in the Cyrillic script as used in Russia.
  - localedata: tr_TR, ku_TR: Sync with CLDR: “Turkey” -> “Türkiye”
  - localedata: miq_NI: Shorten month names in abmon
  - Update kernel version to 6.7 in header constant tests
  - localedata: add gbm_IN locale
  - Define ISO 639-3 "gbm" (Garhwali)
  - Update syscall lists for Linux 6.7
  - stdlib: Remove unused is_aligned function from qsort.c


author: Arjun Shankar <arjun@redhat.com> - 2.38.9000-37
changelog:
  - Auto-sync with upstream branch master,
    commit ae49a7b29acc184b03c2a6bd6ac01b5e08efd54f:
  - Relicense IBM portions of resolv/base64.c resolv/res_debug.c.
  - localedata: Use consistent values for grouping and mon_grouping
  - manual: fix order of arguments of memalign and aligned_alloc (Bug 27547)


author: Patsy Griffin <patsy@redhat.com> - 2.38.9000-38
changelog:
  - Auto-sync with upstream branch master,
    commit ddf542da94caf97ff43cc2875c88749880b7259b:
  - syslog: Fix integer overflow in __vsyslog_internal (CVE-2023-6780)
  - syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6779)
  - syslog: Fix heap buffer overflow in __vsyslog_internal (CVE-2023-6246)
  - Use binutils 2.42 branch in build-many-glibcs.py
  - elf: correct relocation statistics for !ELF_MACHINE_START_ADDRESS


author: Carlos O'Donell <carlos@redhat.com> - 2.39-1
changelog:
  - Switch to upstream 2.39 release,
    commit ef321e23c20eebc6d6fb4044425c00e6df27b05f
  - Document CVE-2023-6246, CVE-2023-6779, and CVE-2023-6780
  - Update advisory format and introduce some automation
  - manual/io: Fix swapped reading and writing phrase.
  - Fix typo
  - S390: Fix building with --disable-mutli-arch [BZ #31196]
  - NEWS: insert advisories and fixed bugs for 2.39
  - contrib.texi: update
  - INSTALL, install.texi: minor updates, regenerate
  - libc.pot: regenerate
  - version.h, include/features.h: Bump version to 2.39
  - Create ChangeLog.old/ChangeLog.28


author: Carlos O'Donell <carlos@redhat.com> - 2.39.9000-1
changelog:
  - Auto-sync with upstream branch master,
    commit ef7f4b1fef67430a8f3cfc77fa6aada2add851d7:
  - Apply the Makefile sorting fix
  - sysdeps/x86_64/Makefile (tests): Add the end marker
  - sort-makefile-lines.py: Allow '_' in name and "^# name"
  - trivial doc fix: remove weird phrase "syscall takes zero to five arguments"
  - mips: Use builtins for ffs and ffsll
  - x86: Expand the comment on when REP STOSB is used on memset
  - x86: Do not prefer ERMS for memset on Zen3+
  - x86: Fix Zen3/Zen4 ERMS selection (BZ 30994)
  - x86/cet: fix shadow stack test scripts
  - test_printers_common.py: Remove invalid escape sequence
  - elf: Remove attempt at env handling in elf/tst-rtld-list-diagnostics.py
  - Add SOL_VSOCK from Linux 6.7 to bits/socket.h
  - localedata: ssy_ER: Fix syntax error
  - localedata: hr_HR: change currency to EUR/€
  - Change lv_LV collation to agree with the recent change in CLDR
  - Add new AArch64 HWCAP2 definitions from Linux 6.7 to bits/hwcap.h
  - string: Add hidden builtin definition for __strcpy_chk.
  - arm: Remove wrong ldr from _dl_start_user (BZ 31339)
  - LoongArch: Use builtins for ffs and ffsll
  - Remove sysdeps/ia64/math-use-builtins-ffs.h
  - Fix stringop-overflow warning in tst-strlcat2.
  - mips: FIx clone3 implementation (BZ 31325)
  - stdlib: fix qsort example in manual
  - soft-fp: Add brain format support
  - Rename c2x / gnu2x tests to c23 / gnu23
  - manual: Fix up stdbit.texi
  - string: Use builtins for ffs and ffsll
  - misc: tst-poll: Proper synchronize with child before sending the signal
  - math: Remove bogus math implementations
  - Refer to C23 in place of C2X in glibc
  - elf: Remove _dl_sysdep_open_object hook function
  - build-many-glibcs: relax version check to allow non-digit characters
  - Use gcc __builtin_stdc_* builtins in stdbit.h if possible
  - Open master branch for glibc 2.40 development


author: DJ Delorie <dj@redhat.com> - 2.39.9000-2
changelog:
  - Auto-sync with upstream branch master,
    commit b881f1efcd1b30c2afab3599b41ce9cd4864c823.
  - elf: Add new LoongArch reloc types (110 to 126) into elf.h
  - build-many-glibcs.py: Add s390 --disable-multi-arch / multi-arch configurations.
  - sparc: Treat the version field in the FPU control word as reserved
  - Implement setcontext/getcontext/makecontext/swapcontext for Hurd x86_64
  - Use proc_getchildren_rusage when available in getrusage and times.
  - Linux: Switch back to assembly syscall wrapper for prctl (bug 29770)
  - i386: Use generic memrchr in libc (bug 31316)


author: Arjun Shankar <arjun@redhat.com> - 2.39.9000-4
changelog:
  - Analyse glibc-2.39 sources for license information
  - Migrate License field to SPDX identifiers for
    https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    https://docs.fedoraproject.org/en-US/legal/update-existing-packages
    (#2222074)


author: Patsy Griffin <patsy@redhat.com> - 2.39.9000-5
changelog:
  - Auto-sync with upstream branch master,
    commit b6e3898194bbae78910bbe9cd086937014961e45.
  - x86-64: Simplify minimum ISA check ifdef conditional with if
  - manual/tunables - Add entry for enable_secure tunable.
  - NEWS: Move enable_secure_tunable from 2.39 to 2.40.
  - riscv: Add and use alignment-ignorant memcpy
  - riscv: Add ifunc helper method to hwprobe.h
  - riscv: Enable multi-arg ifunc resolvers
  - riscv: Add __riscv_hwprobe pointer to ifunc calls
  - riscv: Add hwprobe vdso call support
  - linux: Introduce INTERNAL_VSYSCALL
  - riscv: Add Linux hwprobe syscall support
  - rtld: Add glibc.rtld.enable_secure tunable.
  - x86-64: Update _dl_tlsdesc_dynamic to preserve AMX registers
  - x86_64: Suppress false positive valgrind error
  - x86: Don't check XFD against /proc/cpuinfo
  - x86-64: Don't use SSE resolvers for ISA level 3 or above
  - x86: Update _dl_tlsdesc_dynamic to preserve caller-saved registers
  - sysdeps/unix/sysv/linux/x86_64/Makefile: Add the end marker
  - cdefs: Drop access attribute for _FORTIFY_SOURCE=3 (BZ #31383)
  - s390: Improve static-pie configure tests
  - x86: Change ENQCMD test to CHECK_FEATURE_PRESENT
  - debug: Improve mqueue.h fortify warnings with clang
  - debug: Improve fcntl.h fortify warnings with clang
  - wcsmbs: Improve fortify with clang
  - syslog: Improve fortify with clang
  - socket: Improve fortify with clang
  - unistd: Improve fortify with clang
  - stdlib: Improve fortify with clang
  - string: Improve fortify with clang
  - libio: Improve fortify with clang
  - cdefs.h: Add clang fortify directives
  - Update SHARED-FILES and license for Unicode 15.1.0.
  - aarch64/fpu: Sync libmvec routines from 2.39 and before with AOR
  - S390: Do not clobber r7 in clone [BZ #31402]
  - x86_64: Exclude SSE, AVX and FMA4 variants in libm multiarch
  - hurd: Reformat Makefile.
  - htl/tests: Reformat Makefile.
  - htl: Reformat Makefile.
  - hesiod: Reformat Makefile.
  - gmon: Reformat Makefile.
  - dlfcn: Reformat Makefile.
  - dirent: Reformat Makefile.
  - ctype: Reformat Makefile.
  - csu: Reformat Makefile.
  - conform: Reformat Makefile.
  - Support compiling .S files with additional options
  - x86-64: Save APX registers in ld.so trampoline
  - benchtests: Add more benchtests for rounding functions.
  - tests: gracefully handle AppArmor userns containment
  - treewide: python-scripts: use `is None` for none-equality
  - powerpc: Remove power7 strstr optimization
  - arm: Use _dl_find_object on __gnu_Unwind_Find_exidx (BZ 31405)
  - math: Update mips64 ulps


author: Stephen Smoogen <ssmoogen@redhat.com> - 1.0.3-1
changelog:
  - Update to upstream 1.0.3
  - Changes since 1.0.2: * Image format version 1 was added that allows
    storing overlay whiteouts in a composefs image. * libcomposefs added
    max_version option * mkcomposefs added --version and --max-version
    options * composefs can now be build without go-md2man * Minor bugfix
    handling file read errors


author: Dalton Hubble <dghubble@gmail.com> - 1.6.19-1
changelog:
  - Update to 1.16.19 (rhbz#2159032)
  - Mitigates CVE-2023-25153 / GHSA-259w-8hf6-59c2
  - Mitigates CVE-2023-25173 / GHSA-hmfx-3pcx-653p


author: Robert-André Mauchin <zebob.m@gmail.com> - 1.1.1-5
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327,
    CVE-2022-27191, CVE-2022-29526, CVE-2022-30629


author: Jonathan Lebon <jonathan@jlebon.com> - 0.12.0-4
changelog:
  - Backport "signing-keys: regular Fedora cycle rotation of keys"
    https://github.com/coreos/coreos-installer/pull/770


author: Jonathan Lebon <jonathan@jlebon.com> - 0.13.1-3
changelog:
  - Backport "blockdev: rework EFI vendor dir checking"
    https://github.com/coreos/coreos-installer/pull/802 for
    https://github.com/coreos/fedora-coreos-tracker/issues/1116


author: Irene Diez <idiez@redhat.com> - 0.17.0-2
changelog:
  - Update dracut/scripts: no need to mount the filesystem
    https://github.com/coreos/coreos-installer-dracut/pull/30


author: Kamil Dudka <kdudka@redhat.com> - 9.1-10
changelog:
  - drop obsolete downstream-only extension of date(1) man page
  - undocument downstream SELinux options deprecated since 2009


author: Kamil Dudka <kdudka@redhat.com> - 9.2-3
changelog:
  - copy: fix --reflink=auto to fallback in more cases (#2180056)
  - cksum: fix reporting of failed checks (#2180056)


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.3
changelog:
  - update from trunk
    - PRs analyzer/108616, analyzer/108633, analyzer/108661, c++/101071,
  	c++/102870, c++/107461, c++/107593, c++/107755, c++/108158,
  	c++/108559, c++/108579, c++/108597, c++/108607, c++/96745, c/108150,
  	c/108192, debug/106746, debug/108573, driver/108572, fortran/103506,
  	fortran/108450, fortran/108451, fortran/108453, fortran/108527,
  	fortran/108592, fortran/108609, fortran/95107, ipa/107300, ipa/108384,
  	ipa/108509, ipa/108511, libstdc++/108636, libstdc++/108672,
  	middle-end/108435, middle-end/108500, middle-end/108625,
  	modula2/107234, modula2/108135, modula2/108462, modula2/108551,
  	modula2/108612, rtl-optimization/108086, rtl-optimization/108463,
  	rtl-optimization/108508, rtl-optimization/108596, sanitizer/108106,
  	target/104921, target/107674, target/108443, target/108484,
  	target/108589, target/108599, testsuite/108604, testsuite/108632,
  	tree-optimization/26854, tree-optimization/106433,
  	tree-optimization/106923, tree-optimization/107570,
  	tree-optimization/108356, tree-optimization/108359,
  	tree-optimization/108385, tree-optimization/108574,
  	tree-optimization/108582, tree-optimization/108601,
  	tree-optimization/108608, tree-optimization/108639,
  	tree-optimization/108647, tree-optimization/108655
  - drop libgfortran dependency on libquadmath for F28+ or RHEL8+, gcc-gfortran
    still needs to depend on both libquadmath and libquadmath-devel though


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.4
changelog:
  - update from trunk
    - PRs analyzer/108704, analyzer/108733, analyzer/108745, c++/106675,
  	c++/107079, c++/108698, d/107469, fortran/69636, fortran/103259,
  	fortran/103475, fortran/103779, fortran/107424, fortran/108512,
  	ipa/108605, ipa/108679, libstdc++/103934, middle-end/26854,
  	middle-end/106080, rtl-optimization/108681, sanitizer/108777,
  	target/96373, target/100758, target/103109, target/108102,
  	target/108516, target/108723, target/108738, target/108787,
  	target/108790, testsuite/106120, tree-optimization/28614,
  	tree-optimization/96921, tree-optimization/106722,
  	tree-optimization/107561, tree-optimization/108316,
  	tree-optimization/108355, tree-optimization/108520,
  	tree-optimization/108571, tree-optimization/108684,
  	tree-optimization/108687, tree-optimization/108688,
  	tree-optimization/108691, tree-optimization/108692,
  	tree-optimization/108724, tree-optimization/108782


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.5
changelog:
  - update from trunk
    - PRs analyzer/108664, analyzer/108666, analyzer/108725, analyzer/108806,
  	c++/52809, c++/53638, c++/87389, c++/89741, c++/92099, c++/97553,
  	c++/101073, c++/104041, c++/104691, c++/107773, c++/108243,
  	c++/108829, c/105660, c/108375, fortran/103608, fortran/104554,
  	libstdc++/108030, target/90458, target/108805, target/108831,
  	target/108832, target/108862, testsuite/108835,
  	tree-optimization/108657, tree-optimization/108783,
  	tree-optimization/108791, tree-optimization/108816,
  	tree-optimization/108819, tree-optimization/108821,
  	tree-optimization/108825, tree-optimization/108855,
  	tree-optimization/108868


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.6
changelog:
  - update from trunk
    - PRs ada/108909, analyzer/107565, analyzer/108830, analyzer/108935,
  	analyzer/108968, analyzer/109016, c++/100127, c++/105224, c++/105839,
  	c++/106259, c++/107574, c++/107938, c++/108218, c++/108219,
  	c++/108550, c++/108606, c++/108702, c++/108848, c++/108934,
  	c++/108998, c/107465, c/107846, c/108880, c/108986, d/108167,
  	d/108763, d/108877, d/108945, d/108946, debug/108716, debug/108772,
  	debug/108967, fortran/96024, fortran/96025, fortran/108621,
  	fortran/108923, fortran/108924, fortran/108937, jit/107999,
  	libquadmath/87204, libquadmath/94756, libstdc++/52590,
  	libstdc++/95989, libstdc++/104852, libstdc++/108846, libstdc++/108856,
  	libstdc++/108952, middle-end/97956, middle-end/106258,
  	middle-end/107411, middle-end/108545, middle-end/108546,
  	middle-end/108854, middle-end/109006, modula2/108261, modula2/108944,
  	modula2/108956, pch/14940, sanitizer/108834, sanitizer/108894,
  	target/51534, target/104882, target/108240, target/108876,
  	target/108881, target/108883, target/108910, target/108919,
  	target/108922, testsuite/79356, testsuite/91419, testsuite/108899,
  	testsuite/108942, testsuite/108973, testsuite/108985,
  	testsuite/108991, translation/108890, tree-optimization/108430,
  	tree-optimization/108603, tree-optimization/108793,
  	tree-optimization/108828, tree-optimization/108888,
  	tree-optimization/108950, tree-optimization/108970,
  	tree-optimization/108979, tree-optimization/108988,
  	tree-optimization/109002


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.7
changelog:
  - update from trunk
    - PRs ada/108858, ada/108983, analyzer/102671, analyzer/105755,
  	analyzer/108251, analyzer/108400, analyzer/108475, analyzer/109059,
  	analyzer/109060, c++/102529, c++/105841, c++/106651, c++/107532,
  	c++/107558, c++/107939, c++/108099, c++/108542, c++/108566,
  	c++/108773, c++/108972, c++/109030, c++/109039, c++/109042, c/108079,
  	driver/108865, fortran/104332, fortran/106856, libgcc/108727,
  	libgomp/90596, libgomp/109062, libstdc++/107572, libstdc++/108362,
  	libstdc++/108882, libstdc++/109024, libstdc++/109064,
  	middle-end/108995, other/108464, plugins/108634, sanitizer/81649,
  	sanitizer/108060, sanitizer/109050, target/107299, target/107703,
  	target/107998, target/108185, target/108429, target/108654,
  	target/109000, testsuite/70150, testsuite/108729, testsuite/108730,
  	testsuite/108810, testsuite/108813, tree-optimization/108980,
  	tree-optimization/109008, tree-optimization/109025


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.8
changelog:
  - update from trunk
    - PRs analyzer/105906, analyzer/108045, analyzer/109097, c++/58538,
  	c++/69410, c++/95036, c++/96830, c++/98056, c++/100288, c++/101869,
  	c++/103871, c++/104107, c++/105406, c++/105809, c++/107128,
  	c++/107280, c++/107310, c++/108179, c++/108242, c++/108468,
  	c++/108975, c++/109096, c++/109172, c/109151, d/109108, d/109144,
  	fortran/37336, fortran/58331, fortran/64290, fortran/67444,
  	fortran/67471, fortran/69298, fortran/70863, fortran/71798,
  	fortran/80524, fortran/82996, fortran/84472, fortran/88735,
  	fortran/91316, fortran/93691, fortran/96122, fortran/103854,
  	fortran/106576, fortran/106945, ipa/107925, libstdc++/62196,
  	libstdc++/109111, libstdc++/109165, middle-end/106133,
  	middle-end/108685, middle-end/109031, modula2/109032, modula2/109089,
  	modula2/109102, modula2/109103, modula2/109125, other/109086,
  	preprocessor/67046, rtl-optimization/107762, rtl-optimization/109179,
  	target/105554, target/108583, target/109092, target/109109,
  	target/109117, testsuite/109118, testsuite/109129, testsuite/109145,
  	tree-optimization/106896, tree-optimization/109005,
  	tree-optimization/109046, tree-optimization/109115,
  	tree-optimization/109123, tree-optimization/109139,
  	tree-optimization/109141, web/88860


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.9
changelog:
  - update from trunk
    - PRs analyzer/109094, c++/106890, c++/109159, c++/109164, fortran/85877,
  	fortran/87127, fortran/99036, fortran/109186, fortran/109206,
  	fortran/109209, fortran/109216, libstdc++/109182, target/109067,
  	target/109178, testsuite/108898, tree-optimization/109170,
  	tree-optimization/109192, tree-optimization/109215,
  	tree-optimization/109219


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.10
changelog:
  - update from trunk
    - PRs analyzer/109239, c++/105996, c++/108390, c++/108795, c++/109177,
  	c++/109241, c/84900, fortran/104572, middle-end/109258,
  	modula2/107630, modula2/109248, modula2/109264, target/103628,
  	target/109137, target/109228, target/109244, testsuite/105959,
  	tree-optimization/99739, tree-optimization/107569,
  	tree-optimization/109176, tree-optimization/109262


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.11
changelog:
  - update from trunk
    - PRs analyzer/109098, bootstrap/84402, bootstrap/109310, c++/105481,
  	c++/106969, c++/107163, c++/109309, c++/109320, c++/109321, c/107002,
  	fortran/104321, fortran/104949, fortran/109314, gcov-profile/109297,
  	ipa/105685, ipa/106124, libgcc/108891, libstdc++/103387,
  	libstdc++/109288, libstdc++/109299, lto/109263, middle-end/106190,
  	other/109163, other/109293, rtl-optimization/109187,
  	rtl-optimization/109237, target/106282, target/109072, target/109082,
  	target/109140, target/109167, target/109276, target/109296,
  	target/109312, tree-optimization/54498, tree-optimization/106912,
  	tree-optimization/107087, tree-optimization/108129,
  	tree-optimization/108357, tree-optimization/109154,
  	tree-optimization/109230, tree-optimization/109238,
  	tree-optimization/109265, tree-optimization/109274,
  	tree-optimization/109301, tree-optimization/109327,
  	tree-optimization/109331


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.12
changelog:
  - update from trunk
    - PRs analyzer/107396, bootstrap/101834, c++/101118, c++/105221, c++/105452,
  	c++/107897, c++/108887, c++/109278, c++/109319, libstdc++/109242,
  	libstdc++/109339, libstdc++/109340, modula2/109315, modula2/109336,
  	target/85048, target/109254, target/109328, tree-optimization/91645,
  	tree-optimization/109342, tree-optimization/109362


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.1
changelog:
  - update from trunk
    - PRs c++/105593, fortran/108421, go/108426, ipa/106077, libstdc++/108288,
  	libstdc++/108413, other/108413, target/55522, target/96795,
  	target/105980, target/107515, target/108272, tree-optimization/94793,
  	tree-optimization/106523
  - don't build ppc64le unwinder with -fno-omit-frame-pointer (#2161595)


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.2
changelog:
  - update from trunk
    - PRs analyzer/108455, analyzer/108507, analyzer/108524, bootstrap/90543,
  	c++/53288, c++/53932, c++/105300, c++/107267, c++/107303, c++/107329,
  	c++/107797, c++/108195, c++/108437, c++/108474, c++/108496,
  	c++/108503, c++/108504, c++/108525, c++/108526, c/108424,
  	fortran/102331, fortran/102595, fortran/108420, fortran/108434,
  	fortran/108501, fortran/108502, fortran/108528, fortran/108529,
  	fortran/108544, fortran/108558, ipa/106061, ipa/107944,
  	libstdc++/102301, libstdc++/108530, libstdc++/108554,
  	libstdc++/108568, lto/108445, middle-end/108086, middle-end/108459,
  	middle-end/108543, modula2/102343, modula2/108144, modula2/108182,
  	modula2/108405, modula2/108480, modula2/108553, modula2/108555,
  	other/108560, target/107568, target/107678, target/107731,
  	target/108177, target/108348, target/108396, target/108411,
  	target/108436, target/108442, target/108505, testsuite/104756,
  	testsuite/107808, testsuite/108533, tree-optimization/96373,
  	tree-optimization/108306, tree-optimization/108440,
  	tree-optimization/108447, tree-optimization/108449,
  	tree-optimization/108457, tree-optimization/108482,
  	tree-optimization/108498, tree-optimization/108500,
  	tree-optimization/108522, tree-optimization/108523,
  	tree-optimization/108540, tree-optimization/108547


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.13
changelog:
  - update from trunk
    - PRs c++/53164, c++/105848, c++/107484, c++/109160, c++/109300, ipa/109303,
  	modula2/109388, other/109306, sanitizer/109107, target/102146,
  	target/108699, target/108807, target/109375, target/109376,
  	target/109384, tree-optimization/109304, tree-optimization/109386


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.14
changelog:
  - update from trunk and releases/gcc-13 branch
    - PRs analyzer/108722, bootstrap/109510, c++/109277, c++/109357, c++/109420,
  	c++/109514, c++/109531, driver/108241, fortran/61615, fortran/85686,
  	fortran/87477, fortran/88247, fortran/91941, fortran/92779,
  	fortran/93339, fortran/93813, fortran/98408, fortran/99982,
  	fortran/100948, fortran/102106, fortran/104272, fortran/104312,
  	fortran/104349, fortran/105205, fortran/106918, fortran/109492,
  	fortran/109511, ipa/107769, ipa/108959, ipa/109318, libstdc++/108291,
  	libstdc++/108827, libstdc++/108969, libstdc++/109482,
  	libstdc++/109525, modula2/109423, modula2/109488, modula2/109496,
  	modula2/109497, target/54816, target/70243, target/99708,
  	target/104989, target/108812, target/108892, target/108947,
  	target/109040, target/109104, target/109374, target/109402,
  	target/109458, target/109479, target/109508, testsuite/108809,
  	testsuite/108815, tree-optimization/108139, tree-optimization/109392,
  	tree-optimization/109410, tree-optimization/109417,
  	tree-optimization/109427, tree-optimization/109434,
  	tree-optimization/109462, tree-optimization/109469,
  	tree-optimization/109473, tree-optimization/109491,
  	tree-optimization/109502, tree-optimization/109524,
  	tree-optimization/109539


author: Jakub Jelinek <jakub@redhat.com> 13.0.1-0.16
changelog:
  - update from trunk and releases/gcc-13 branch
    - GCC 13.1-rc3
    - PRs tree-optimization/109564
  - fix ICE on fneg/fadd optimization (PR tree-optimization/109583)
  - include amxcomplexintrin.h header on x86 (#2188608)


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/91618, c++/96604, c++/109506, c++/109640, c++/109642, c++/109666,
  	c++/109671, c++/109756, c/107682, c/109409, c/109412, debug/109676,
  	fortran/109622, libffi/109447, libgomp/108098, libstdc++/40380,
  	libstdc++/109694, libstdc++/109703, rtl-optimization/109585,
  	target/108758, target/109069, target/109535, target/109661,
  	target/109762, tree-optimization/109573, tree-optimization/109609,
  	tree-optimization/109724, tree-optimization/109778


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/80488, c++/83258, c++/97700, c++/103807, c++/109651, c++/109745,
  	c++/109761, c++/109774, c++/109868, c++/109884, fortran/109641,
  	fortran/109846, libstdc++/109816, libstdc++/109883, target/104338,
  	target/109697


author: Jakub Jelinek <jakub@redhat.com> 13.1.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs bootstrap/110085, c++/109871, fortran/100607, libgcc/109670,
  	libgcc/109685, libstdc++/108178, libstdc++/109261, libstdc++/109758,
  	libstdc++/109822, libstdc++/109949, libstdc++/110139,
  	middle-end/110200, target/82931, target/92729, target/104327,
  	target/105753, target/106907, target/109547, target/109650,
  	target/109800, target/109939, target/109954, target/110036,
  	target/110044, target/110088, target/110108, target/110227,
  	tree-optimization/109505, tree-optimization/110165,
  	tree-optimization/110166


author: Jakub Jelinek <jakub@redhat.com> 13.2.1-1
changelog:
  - update from releases/gcc-13 branch
    - GCC 13.2 release
    - PRs c++/109247, c++/110102, c++/110122, c++/110463, c++/110468,
  	c++/110524, c++/110535, c++/110595, c++/110809, d/103944, d/106977,
  	d/108842, d/108962, d/110113, d/110359, d/110471, d/110514, d/110516,
  	debug/110295, fortran/86277, fortran/95947, fortran/100297,
  	fortran/110288, fortran/110585, fortran/110658, ipa/109983,
  	ipa/110276, libgcc/109712, libgcc/110179, libstdc++/95048,
  	libstdc++/100285, libstdc++/104299, libstdc++/109741,
  	libstdc++/109921, libstdc++/110149, libstdc++/110239,
  	libstdc++/110432, libstdc++/110542, libstdc++/110574,
  	middle-end/98619, middle-end/103979, middle-end/110055,
  	middle-end/110420, modula2/108121, modula2/109586, modula2/109675,
  	modula2/109729, modula2/110246, rtl-optimization/110237,
  	target/101469, target/105325, target/106966, target/108743,
  	target/109932, target/110011, target/110100, target/110132,
  	target/110136, target/110206, target/110264, target/110309,
  	target/110406, target/110560, target/110624, testsuite/66005,
  	testsuite/83904, testsuite/110230, tree-optimization/109143,
  	tree-optimization/110228, tree-optimization/110298,
  	tree-optimization/110381, tree-optimization/110392,
  	tree-optimization/110515, tree-optimization/110556,
  	tree-optimization/110557, tree-optimization/110669,
  	tree-optimization/110731, tree-optimization/110755,
  	tree-optimization/110766, tree-optimization/110799,
  	tree-optimization/110829


author: Patsy Griffin <patsy@redhat.com>
changelog:
  - allow for the optional removal of tzdata
    - see https://fedoraproject.org/wiki/Changes/AllowRemovalOfTzdata


author: Jakub Jelinek <jakub@redhat.com> 13.2.1-2
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/92407, c++/106310, c++/106652, c++/109678, c++/109751, c++/110197,
  	c++/110566, c++/110927, debug/111080, fortran/99326, fortran/102109,
  	fortran/102112, fortran/102190, fortran/102532, fortran/108961,
  	fortran/109684, fortran/109948, fortran/110825, libgcc/110956,
  	libstdc++/110593, libstdc++/110708, libstdc++/110719,
  	libstdc++/110807, libstdc++/110860, libstdc++/110862,
  	libstdc++/110917, libstdc++/110968, libstdc++/110970,
  	libstdc++/110974, libstdc++/110990, middle-end/111017, modula2/108119,
  	modula2/108344, modula2/109779, modula2/109810, modula2/109830,
  	modula2/109879, modula2/109908, modula2/109952, modula2/110003,
  	modula2/110019, modula2/110125, modula2/110126, modula2/110161,
  	modula2/110174, modula2/110189, modula2/110284, modula2/110631,
  	modula2/110779, modula2/110865, target/89835, target/109713,
  	target/109725, target/110220, target/110484, target/110741,
  	target/111010, target/111127, tree-optimization/110280,
  	tree-optimization/110702, tree-optimization/110914,
  	tree-optimization/111015, tree-optimization/111019,
  	tree-optimization/111039, tree-optimization/111070,
  	tree-optimization/111109


author: Jakub Jelinek <jakub@redhat.com> 13.2.1-3
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/111357, modula2/111330, target/96762, target/111306,
  	target/111335, target/111340, target/111412


author: Jakub Jelinek <jakub@redhat.com> 13.2.1-4
changelog:
  - update from releases/gcc-13 branch
    - PRs ada/110488, ada/111434, c++/99631, c++/111471, c++/111485, c++/111493,
  	c++/111512, fortran/68155, fortran/92586, fortran/111674,
  	libstdc++/108046, libstdc++/111050, libstdc++/111102,
  	libstdc++/111511, middle-end/111699, modula2/111510, target/111121,
  	target/111411, tree-optimization/110315, tree-optimization/110386,
  	tree-optimization/111331, tree-optimization/111519


author: Jakub Jelinek <jakub@redhat.com> 13.2.1-5
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
  	fortran/111837, fortran/112316, libbacktrace/111315,
  	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
  	libstdc++/111936, libstdc++/112089, libstdc++/112314,
  	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
  	target/101177, target/110170, target/111001, target/111366,
  	target/111367, target/111380, target/111935, target/112443,
  	tree-optimization/111397, tree-optimization/111445,
  	tree-optimization/111489, tree-optimization/111583,
  	tree-optimization/111614, tree-optimization/111622,
  	tree-optimization/111694, tree-optimization/111764,
  	tree-optimization/111820, tree-optimization/111833,
  	tree-optimization/111917
    - fix aarch64 RA ICE (#2241139, PR target/111528)
  - fix ia32 doubleword rotates (#2238781, PR target/110792)


author: Jakub Jelinek <jakub@redhat.com> 13.2.1-6
changelog:
  - update from releases/gcc-13 branch
    - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
  	c/112339, fortran/111880, fortran/112764, libgomp/111413,
  	libstdc++/112348, libstdc++/112491, libstdc++/112607,
  	middle-end/111497, target/53372, target/110411, target/111408,
  	target/111815, target/111828, target/112672, tree-optimization/111137,
  	tree-optimization/111465, tree-optimization/111967,
  	tree-optimization/112496


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.2
changelog:
  - update from trunk
    - PRs ada/113397, analyzer/106229, analyzer/113150, analyzer/113333,
  	bootstrap/113445, c++/99493, c++/104634, c++/109899, c++/110065,
  	c++/112588, c++/113242, c++/113292, c++/113307, c++/113340,
  	c++/113389, c/111693, fortran/67277, fortran/113305, libstdc++/108822,
  	libstdc++/108827, libstdc++/109536, libstdc++/111327,
  	libstdc++/113318, libstdc++/113450, middle-end/90348,
  	middle-end/110115, middle-end/110847, middle-end/111422,
  	middle-end/111659, middle-end/113354, middle-end/113406,
  	middle-end/113409, middle-end/113410, modula2/111956, other/113399,
  	rtl-optimization/96388, rtl-optimization/111554,
  	rtl-optimization/113048, rust/108111, target/105522, target/107201,
  	target/112573, target/112944, target/112973, target/113122,
  	target/113156, target/113221, target/113247, target/113281,
  	target/113393, target/113404, target/113429, testsuite/109705,
  	testsuite/111850, testsuite/113366, testsuite/113369,
  	testsuite/113446, testsuite/113452, translation/108890,
  	tree-optimization/91624, tree-optimization/107823,
  	tree-optimization/110251, tree-optimization/110422,
  	tree-optimization/110450, tree-optimization/110768,
  	tree-optimization/110794, tree-optimization/110841,
  	tree-optimization/110852, tree-optimization/110941,
  	tree-optimization/112774, tree-optimization/113091,
  	tree-optimization/113287, tree-optimization/113361,
  	tree-optimization/113370, tree-optimization/113371,
  	tree-optimization/113372, tree-optimization/113374,
  	tree-optimization/113385, tree-optimization/113408,
  	tree-optimization/113421, tree-optimization/113431,
  	tree-optimization/113475


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.3
changelog:
  - update from trunk
    - PRs analyzer/111361, analyzer/112705, analyzer/112811, analyzer/112927,
  	analyzer/112977, bootstrap/113554, c++/67898, c++/90463, c++/90464,
  	c++/100707, c++/102607, c++/104594, c++/109640, c++/109642,
  	c++/111357, c++/111410, c++/111607, c++/112594, c++/112632,
  	c++/112820, c++/113256, c++/113347, c++/113405, c++/113498,
  	c++/113529, c/102998, c/107942, c/109708, c/110029, c/113492,
  	c/113518, debug/107058, debug/112718, debug/113382, debug/113488,
  	fortran/48776, fortran/111291, fortran/113377, fortran/113471,
  	ipa/108007, ipa/108470, ipa/110705, ipa/112616, ipa/113490,
  	libstdc++/113500, libstdc++/113512, middle-end/88345,
  	middle-end/112684, middle-end/113574, modula2/113559, other/111966,
  	rtl-optimization/111267, rtl-optimization/113255, target/82420,
  	target/100942, target/108521, target/108640, target/109092,
  	target/109636, target/110934, target/111279, target/112989,
  	target/113030, target/113070, target/113089, target/113095,
  	target/113114, target/113356, target/113420, target/113485,
  	target/113486, target/113495, target/113550, target/113556,
  	target/113572, testsuite/113437, testsuite/113548,
  	tree-optimization/69807, tree-optimization/113364,
  	tree-optimization/113373, tree-optimization/113459,
  	tree-optimization/113462, tree-optimization/113463,
  	tree-optimization/113464, tree-optimization/113491,
  	tree-optimization/113494, tree-optimization/113552,
  	tree-optimization/113576
  - add offloading support for AMD GCN ROCm capable devices


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.4
changelog:
  - update from trunk
    - PRs analyzer/112969, c++/109227, c++/112899, c++/113580, c++/113598,
  	c++/113599, middle-end/112971, other/113575, preprocessor/105608,
  	target/100204, target/100212, target/112987, target/113469,
  	target/113526, target/113538, target/113601, testsuite/113558,
  	tree-optimization/113602
  - temporarily disable -mearly-ldp-fusion -mlate-ldp-fusion on aarch64 again
    (#2260449, #2260560, #2260562)
  - use gcc_major macro in the spec some more
  - require llvm >= 15 and lld >= 15 for the amdgcn offloading
    where they are used as assembler and linker


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.5
changelog:
  - update from trunk
    - PRs analyzer/113253, analyzer/113509, analyzer/113654, c++/94231,
  	c++/107291, c++/107594, c++/109359, c++/110006, c++/110084,
  	c++/110358, c++/111286, c++/112437, c++/112439, c++/112737,
  	c++/112769, c++/112846, c++/113451, c++/113531, c++/113544,
  	c++/113638, c++/113640, c++/113644, c++/113788, c/111059, c/111911,
  	c/112571, c/113438, c/113740, debug/103047, debug/113394,
  	debug/113637, fortran/104908, libfortran/111022, libgcc/113337,
  	libgcc/113402, libgcc/113403, libgcc/113604, libstdc++/109203,
  	libstdc++/113309, libstdc++/113335, libstdc++/90276,
  	middle-end/101195, middle-end/110176, middle-end/112917,
  	middle-end/113100, middle-end/113607, middle-end/113622,
  	middle-end/113699, middle-end/113705, middle-end/113722,
  	modula2/111627, modula2/112506, modula2/113730,
  	rtl-optimization/113656, sanitizer/110676, sanitizer/112644,
  	target/38534, target/59778, target/103503, target/105576,
  	target/108933, target/111677, target/112577, target/112861,
  	target/112862, target/112863, target/112864, target/112950,
  	target/113059, target/113249, target/113255, target/113312,
  	target/113560, target/113615, target/113616, target/113623,
  	target/113636, target/113655, target/113657, target/113689,
  	target/113690, target/113697, target/113700, target/113701,
  	target/113763, target/113766, testsuite/113502,
  	tree-optimization/110603, tree-optimization/111268,
  	tree-optimization/111444, tree-optimization/113467,
  	tree-optimization/113568, tree-optimization/113588,
  	tree-optimization/113603, tree-optimization/113614,
  	tree-optimization/113630, tree-optimization/113639,
  	tree-optimization/113659, tree-optimization/113670,
  	tree-optimization/113691, tree-optimization/113692,
  	tree-optimization/113693, tree-optimization/113707,
  	tree-optimization/113731, tree-optimization/113736,
  	tree-optimization/113737, tree-optimization/113750,
  	tree-optimization/113753, tree-optimization/113756,
  	tree-optimization/113759, tree-optimization/113796
    - fix PCH writing assertion (#2259912)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.6
changelog:
  - update from trunk
    - PRs c++/113814, c/113776, target/113711, target/113733, target/113824,
  	testsuite/113710, tree-optimization/113735, tree-optimization/113808


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.7
changelog:
  - update from trunk
    - PRs analyzer/111266, c++/97202, c++/97990, c++/98388, c++/99573,
  	c++/107126, c++/111682, c++/112436, c++/112580, c++/113158,
  	c++/113332, c++/113545, c++/113612, c++/113649, c++/113658,
  	c++/113674, c++/113706, c++/113708, c++/113760, c++/113789,
  	c++/113834, c++/113853, c++/113908, c++/113929, d/104739, d/113125,
  	d/113667, d/113758, d/113772, fortran/99210, fortran/105847,
  	fortran/113799, fortran/113866, fortran/113883, fortran/113911,
  	ipa/98237, libfortran/107068, libgcc/113850, libgomp/113843,
  	libstdc++/87744, libstdc++/99117, libstdc++/100147,
  	libstdc++/113294, libstdc++/113806, libstdc++/113807,
  	libstdc++/113811, libstdc++/113931, libstdc++/113961,
  	middle-end/107385, middle-end/110754, middle-end/113415,
  	middle-end/113508, middle-end/113576, middle-end/113904,
  	middle-end/113921, modula2/113848, modula2/113888, other/113336,
  	sanitizer/113785, target/106543, target/109349, target/113742,
  	target/113780, target/113855, target/113871, target/113876,
  	target/113909, target/113927, testsuite/113278, testsuite/113448,
  	testsuite/113861, testsuite/113899, tree-optimization/108355,
  	tree-optimization/111054, tree-optimization/111156,
  	tree-optimization/113567, tree-optimization/113734,
  	tree-optimization/113774, tree-optimization/113783,
  	tree-optimization/113818, tree-optimization/113831,
  	tree-optimization/113849, tree-optimization/113863,
  	tree-optimization/113895, tree-optimization/113896,
  	tree-optimization/113898, tree-optimization/113902,
  	tree-optimization/113910
    - fix bugs in Fortran allocatable character component assignments
      (#2261826, PR fortran/113503)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/113893, analyzer/110483, analyzer/110520, analyzer/111289,
  	analyzer/111802, analyzer/111881, analyzer/113983, analyzer/113998,
  	analyzer/113999, c++/113083, c++/113966, c++/113970, c/114007,
  	c/114042, fortran/105658, fortran/107071, fortran/114012,
  	fortran/114024, ipa/61159, ipa/70582, ipa/111960, ipa/113476,
  	libfortran/105456, libfortran/105473, middle-end/112344,
  	middle-end/114070, middle-end/114073, middle-end/114084,
  	modula2/113749, modula2/113889, modula2/114026, modula2/114055,
  	other/109668, other/113957, rtl-optimization/54052,
  	rtl-optimization/114044, rtl-optimization/114054, target/90785,
  	target/108120, target/109987, target/112103, target/112375,
  	target/112397, target/113220, target/113295, target/113613,
  	target/113696, target/113805, target/113912, target/113971,
  	target/113995, target/114017, target/114028, target/114094,
  	target/114097, target/114098, testsuite/111462,
  	tree-optimization/91567, tree-optimization/109804,
  	tree-optimization/113205, tree-optimization/113967,
  	tree-optimization/113988, tree-optimization/113993,
  	tree-optimization/114027, tree-optimization/114038,
  	tree-optimization/114040, tree-optimization/114041,
  	tree-optimization/114048, tree-optimization/114068,
  	tree-optimization/114074, tree-optimization/114081,
  	tree-optimization/114090, tree-optimization/114099
    - fix up handling of C++ inline var specializations
      (#2264986, PR c++/114013)
    - punt on vectorization of +- with non-integral emulated vectors
      (#2265489, PR tree-optimization/114075)
    - fix up handling of references of comdat local symbols forced into
      memory (#2260416, PR rtl-optimization/113617)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.9.7-30
changelog:
  - As -dicts subpackage installs files under %{_libdir} path it should not be noarch
  - this fixes FTBFS on F37+


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220802-1.gita99dfd2
changelog:
  - tests/java: fix java.security.disableSystemPropertiesFile=true
  - docs: add customization recommendation


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220824-1.gitd4b71ab
changelog:
  - disable SHA-1 further for a Fedora 38 Rawhide "jump scare"
    as described at
    https://fedoraproject.org/wiki/Changes/StrongCryptoSettings3Forewarning2
    This change will be reverted for the branched-off Fedora 38,
    but never for Fedora 39.
    Thus the change will reach the users with Fedora 39 release.
    `update-crypto-policies --set FEDORA38` for the former, obsolete DEFAULT.
  - openssh: control HostbasedAcceptedAlgorithms
    Systems having it set at /etc/ssh/sshd_config
    will have the value ignored and should instead configure it per-host.


author: Alexander Sosedkin <asosedkin@redhat.com> - 20220824-2.git2187e9c
changelog:
  - revert premature Fedora 38 Rawhide SHA-1 "jump scare" until
    https://fedoraproject.org/wiki/Changes/StrongCryptoSettings3Forewarning2
    gets approved


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230301-1.git2ea6d2a
changelog:
  - rpm-sequoia: add separate rpm-sequoia backend
  - DEFAULT: allow SHA-1 and 1024 bit DSA in RPM (https://pagure.io/fesco/issue/2960)


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git5ed06e0
changelog:
  - BSI: start a BSI TR 02102 policy
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (not enabled yet)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (not enabled yet)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git570ea89
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Clemens Lang <cllang@redhat.com> - 20231107-1.git8f49dfa
changelog:
  - turn ssh_etm into an etm@SSH tri-state
  - fips-mode-setup: increase chroot-friendliness (rhbz#2164847)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gitb402e82
changelog:
  - fips-mode-setup: Write error messages to stderr
  - fips-mode-setup: Fix some shellcheck warnings
  - fips-mode-setup: Fix test for empty /boot
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == /


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240201-1.git9f501f3
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.git0375239
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: stop linting at check-time, relying on upstream CI instead
  - packaging: drop stale workarounds
  - libreswan: do not use up pfs= / ikev2= keywords for default behaviour


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Guenther Deschner <gdeschner@redhat.com> - 4.17.4-0
changelog:
  - resolves: #2153906 - Update to version 4.17.4
  - resolves: #2154362, #2154363 - Security fixes for CVE-2022-38023
  - resolves: #2154303, #2154304 - Security fixes for CVE-2022-37966
  - resolves: #2154320, #2154322 - Security fixes for CVE-2022-37967


author: Guenther Deschner <gdeschner@redhat.com> - 4.18.1-0
changelog:
  - resolves: #2182787 - Update to version 4.18.1
  - resolves: #2182772, #2182773 - Security fixes for CVE-2023-0225
  - resolves: #2182774, #2182775 - Security fixes for CVE-2023-0922
  - resolves: #2182776, #2182777 - Security fixes for CVE-2023-0614


author: Guenther Deschner <gdeschner@redhat.com> - 4.18.5-0
changelog:
  - resolves: #2224040 - Update to version 4.18.5
  - resolves: #2222791, #2224254 - Security fix for CVE-2022-2127
  - resolves: #2222792, #2224255 - Security fix for CVE-2023-3347
  - resolves: #2222793, #2224253 - Security fix for CVE-2023-34966
  - resolves: #2222794, #2224252 - Security fix for CVE-2023-34967
  - resolves: #2222795, #2224250 - Security fix for CVE-2023-34968


author: Guenther Deschner <gdeschner@redhat.com> - 4.18.8-1
changelog:
  - Update to 4.18.8
  - resolves: #2241881, #2243228: Security fix for CVE-2023-3961
  - resolves: #2241882, #2243231: Security fix for CVE-2023-4091
  - resolves: #2241883, #2243230: Security fix for CVE-2023-4154
  - resolves: #2241884, #2243229: Security fix for CVE-2023-42669
  - resolves: #2241885, #2243232: Security fix for CVE-2023-42670


author: Guenther Deschner <gdeschner@redhat.com> - 4.19.1-1
changelog:
  - resolves: #2243073 - Update to version 4.19.1
  - resolves: #2241881, #2243228: Security fix for CVE-2023-3961
  - resolves: #2241882, #2243231: Security fix for CVE-2023-4091
  - resolves: #2241883, #2243230: Security fix for CVE-2023-4154
  - resolves: #2241884, #2243229: Security fix for CVE-2023-42669
  - resolves: #2241885, #2243232: Security fix for CVE-2023-42670


author: Kamil Dudka <kdudka@redhat.com> - 7.85.0-1
changelog:
  - new upstream release, which fixes the following vulnerability
      CVE-2022-35252 - control code in cookie denial of service


author: Kamil Dudka <kdudka@redhat.com> - 7.86.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2022-42916 - HSTS bypass via IDN
      CVE-2022-42915 - HTTP proxy double-free
      CVE-2022-35260 - .netrc parser out-of-bounds access
      CVE-2022-32221 - POST following PUT confusion


author: Kamil Dudka <kdudka@redhat.com> - 7.87.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2022-43552 - HTTP Proxy deny use-after-free
      CVE-2022-43551 - Another HSTS bypass via IDN


author: Kamil Dudka <kdudka@redhat.com> - 7.87.0-5
changelog:
  - fix HTTP multi-header compression denial of service (CVE-2023-23916)
  - share HSTS between handles (CVE-2023-23915 CVE-2023-23914)


author: Kamil Dudka <kdudka@redhat.com> - 7.87.0-7
changelog:
  - fix SSH connection too eager reuse still (CVE-2023-27538)
  - fix HSTS double-free (CVE-2023-27537)
  - fix GSS delegation too eager connection re-use (CVE-2023-27536)
  - fix FTP too eager connection reuse (CVE-2023-27535)
  - fix SFTP path ~ resolving discrepancy (CVE-2023-27534)
  - fix TELNET option IAC injection (CVE-2023-27533)


author: Kamil Dudka <kdudka@redhat.com> - 8.0.1-1
changelog:
  - tests: re-enable temporarily disabled test-cases
  - tests: attempt to fix a conflict on port numbers
  - apply patches automatically
  - rebase to latest upstream release (#2192665)


author: Jan Macku <jamacku@redhat.com> - 8.0.1-5
changelog:
  - fix cookie injection with none file (CVE-2023-38546)
  - fix SOCKS5 heap buffer overflow (CVE-2023-38545)


author: Kamil Dudka <kdudka@redhat.com> - 8.0.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-27538 - SSH connection too eager reuse still
      CVE-2023-27537 - HSTS double-free
      CVE-2023-27536 - GSS delegation too eager connection re-use
      CVE-2023-27535 - FTP too eager connection reuse
      CVE-2023-27534 - SFTP path ~ resolving discrepancy
      CVE-2023-27533 - TELNET option IAC injection


author: Kamil Dudka <kdudka@redhat.com> - 8.0.1-3
changelog:
  - tests: re-enable temporarily disabled test-cases
  - tests: attempt to fix a conflict on port numbers
  - apply patches automatically


author: Kamil Dudka <kdudka@redhat.com> - 8.1.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-28321 - IDN wildcard match
      CVE-2023-28322 - more POST-after-PUT confusion


author: Jan Macku <jamacku@redhat.com> - 8.2.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-32001 - fopen race condition


author: Jan Macku <jamacku@redhat.com> - 8.2.1-4
changelog:
  - fix HSTS long file name clears contents (CVE-2023-46219)
  - fix cookie mixed case PSL bypass (CVE-2023-46218)


author: Jan Macku <jamacku@redhat.com> - 8.3.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38039 - HTTP headers eat all memory


author: Jan Macku <jamacku@redhat.com> - 8.4.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38545 - SOCKS5 heap buffer overflow
      CVE-2023-38546 - cookie injection with none file


author: Jan Macku <jamacku@redhat.com> - 8.5.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-46218 - cookie mixed case PSL bypass
      CVE-2023-46219 - HSTS long file name clears contents


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.16-1
changelog:
  - Update to upstream version 2.03.16.
  - Devices file feature - see lvmdevices(8).
  - Changes in udev support:
    - obtain_device_list_from_udev defaults to 0.
    - see devices/external_device_info_source,
      devices/obtain_device_list_from_udev, and devices/multipath_wwids_file help
      in lvm.conf
  - Remove service based autoactivation. global/event_activation = 0 is NOOP.
    - see lvmautoactivation(7).
  - Many fixes and improvements, see WHATS_NEW and WHATS_NEW_DM for more.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.17-1
changelog:
  - Update to upstream version 2.03.17.
  - Add new options (--fs, --fsmode) for FS handling when resizing LVs.
  - Many bugfixes mainly in VDO, lvmdbusd and devices file support.
  - See WHATS_NEW and WHATS_NEW_DM for more information.


author: Marian Csontos <mcsontos@redhat.com> - 2.03.19-2
changelog:
  - Fix lvresize's check for mounted and renamed LVs to handle spaces.
  - Fix segfault when using -S|--select with log/report_command_log=1.


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.7-8
changelog:
  - Add 0036-RH-add-support-to-mpathconf-for-setting-arbitrary-de.patch
    * add the ability for mpathconf to set arbitray options with --option
  - Add 0037-RH-add-support-to-mpathconf-for-setting-recheck_wwid.patch
    * add --recheck_wwid option to mpathconf


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.8.9-1
changelog:
  - Update source to upstream version 0.8.9
    * Previous patches 0001-0024 & 0035 are included in the commit.
  - Add patches from upstream staging branch
    * Patches 0001-0005 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0025-0034 are now patches 0006-0015
  - Combine redhat patches
    * Previous patches 0036 & 0037 are now part of patch 0011
  - Add 0016-RH-add-scsi-device-handlers-to-modules-load.d.patch
  - Spec file changes
    * Install multipath.conf and scsi_dh.conf to /usr/lib/modules-load.d


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.0-1
changelog:
  - Update source to upstream version 0.9.0
    * Previous patches 0001-0005 are included in the commit.
    * This version deprecates multiple options: mutlipath_dir, config_dir, and
      getuid_callout, along with the "default_" prefixed alternate names for the
      default section parameters.
  - Add patches from upstream staging branch
    * Patches 0001-0006 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0006-0016 are now patches 0007-0017


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.0-3
changelog:
  - Update to the head of the upstream staging branch
    * Patches 0005-0042 are from the upstream staging branch
    * Previous patches 0005 & 0006 are now patches 0023 & 0005
  - Rename redhat patches
    * Previous patches 0007-0017 are now patches 0043-0053
  - Change from using readline to libedit
    * readline is licensed GPL v3, and multipathd includes code
      licensed gpl v2.
  - Remove README.alua
    * information moved to README.md


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.3-1
changelog:
  - Update to the head of the upstream staging branch
    * Previous patches 0001-0042 are included in the source tarball
    * Patches 0001-0032 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0043-0053 are now patches 0033-0043
  - Change back to using readline instead of libedit
    * The code the uses readline has been isolated from the code that
      is licensed gpl v2 only.
  - Add libmpathutil libraries to spec file
  - Add multipathc program to spec file
  - Add multipath.conf systemd tempfile configuration to spec file
  - Misc spec file cleanups


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.4-1
changelog:
  - Update to the head of the upstream staging branch
    * Previous patches 0001-0032 are included in the source tarball
    * Patches 0001-0010 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0033-0044 are now patches 0011-0022
  - Add dependency on libmount


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.4-2
changelog:
  - Update to the head of the upstream staging branch
    * Patches 0011-0015 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0011-0022 are now patches 0016-0027


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.5-1
changelog:
  - Update to the latest upstream release
    * Previous patches 0001-0015 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0016-0027 are now patches 0001-0012


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.6-1
changelog:
  - Update to the head of the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0012 are now patches 0041-0052
  - Add 0053-RH-Add-mpathcleanup.patch
    * add mpathcleanup program


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-1
changelog:
  - Update source to upstream version 0.9.7
    * Previous patches 0001-0040 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0041-0053 are now patches 0001-0013
  - Remove /usr/lib/modules-load.d/multipath.conf
    * has been replaced with modprobe@dm_multipath.service unit Wants.


author: Paul Donohue <git@PaulSD.com> - 0.9.7-2
changelog:
  - Modify 0006-RH-add-mpathconf.patch
  - Modify 0008-RH-reset-default-find_mutipaths-value-to-off.patch
    * Fix find_multipaths values in docs and mpathconf


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-5
changelog:
  - Add 0014-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
    * Fix auto_resize code to avoid a segfault
  - Add 0015-multipathd-fix-auto-resize-configuration.patch
    * Fix auto_resize default value


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Pavel Valena <pvalena@redhat.com> - 057-3
changelog:
  - Re-add patch Never-enable-the-bluetooth-module-by-default-1521
  - Recommend tpm2-tools package, as it's required by crypt module


author: Pavel Valena <pvalena@redhat.com> - 059-4
changelog:
  - fix(dmsquash-live): restore compatibility with earlier releases
  - Re-add overlayfs module (drop patch 1934)
  - revert(network-manager): avoid restarting NetworkManager


author: Pavel Valena <pvalena@redhat.com> - 059-1
changelog:
  - Update to 059
  - feat(dracut.sh): option to skip creating initrd
  - feat(kernel-modules): driver support for macbook keyboards


author: Pavel Valena <pvalena@redhat.com> - 059-2
changelog:
  - fix(dmsquash-live): restore compatibility with earlier releases
  - fix(dracut.sh): handle --kmoddir with trailing /
  - revert(network-manager): avoid restarting NetworkManager
  - feat(network): include 98-default-mac-none.link if it exists


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Mark Wielaard <mjw@fedoraproject.org> - 0.188-5
changelog:
  - Add elfutils-0.188-deprecated-CURLINFO.patch,
    elfutils-0.188-CURL_AT_LEAST_VERSION.patch and
    elfutils-0.188-CURLOPT_PROTOCOLS_STR.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-relr.patch
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
    elfutils-0.189-c99-compat.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@fedoraproject.org> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2


author: Sundeep Anand <suanand@redhat.com> - 0.21-15.0.20220203
changelog:
  - add Provides: gettext-runtime to gettext package for forward compatibility.
  - and removed Provides: gettext-tools


author: Sundeep Anand <suanand@redhat.com> - 0.21-20.0.20220203
changelog:
  - Include doc and man pages for envsubst subpackage.
    Move _libdir and _datadir from gettext-runtime to gettext package.


author: Miro Hrončok <mhroncok@redhat.com> - 39-0.3
changelog:
  - Drop fedora-repos-modular and fedora-repos-rawhide-modular packages
  - https://fedoraproject.org/wiki/Changes/RetireModularity


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.12.0-1
changelog:
  - 1.12.0 release (resolves: rhbz#2129268)
  - remove unneeded BR for hidapi-hidraw
  - change to SPDX license (BSD -> BSD-2-Clause)
  - add check section


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Martin Osvald <mosvald@redhat.com> - 3.18-1
changelog:
  - Filesystem has a dependency on /bin/sh (#1306489)
  - Add /usr/share/X11/fonts/ to default filesystem (#2107447)
  - Remove obsolete and forbidden Group tag
  - Own zsh and fish completions directories (rhbz#1312594)
  - Improve directory creation to avoid 'Argument list too long' error


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 8.1.1-4
changelog:
  - Backport fix handling of formattable types implicitly convertible to pointers (fixes: rhbz#2059736)


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Todd Zullinger <tmz@pobox.com> - 2.38.1-2
changelog:
  - don't ship contrib/persistent-https as documentation
  - update license data and convert to SPDX format


author: Kalev Lember <klember@redhat.com> - 2.73.3-3
changelog:
  - Rebuild so that we can include it in the GNOME 43.rc mega-update as
    various updates in there depend on new glib.


author: Kalev Lember <klember@redhat.com> - 2.79.0-1
changelog:
  - Update to 2.79.0
  - Rebase gnutls-hmac.patch
  - Add gir and typelib files that moved here from gobject-introspection
  - Explicitly conflict with older gobject-introspection
  - Switch to building docs with gi-docgen instead of gtk-doc


author: Todd Zullinger <tmz@pobox.com> - 2.3.7-4
changelog:
  - update BR/R versions for libassuan, libgpg-error, and libksba
  - drop with/without unversioned_gpg, last used with fedora-29


author: Marie Loise Nolden <loise@kde.org> - 1.20.0-1
changelog:
  - Update to 1.20.0 and enable/add qt6 build for qgpgme. The qt5 and qt6
    rpms have been split out into separate libs and -devel rpms for compatibility.


author: Jaroslav Škarvada <jskarvad@redhat.com> - 3.7-1
changelog:
  - New version
    Resolves: rhbz#1993631
  - Temporarily switch to the included regex until glibc bug (glibc#11053)
    is fixed


author: Hans de Goede <hdegoede@redhat.com> - 2.06-107
changelog:
  - spec: Switch back to static enablement for grub services in tools package
  - spec: Add %triggerpostun to apply grub-boot-success.timer preset
    when upgrading from older versions where this was not a preset
  - Resolves: #2247635


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-109
changelog:
  - Linker: added --no-warn-rwx-segments as build will fail after
  ld.bfd default options have been changed.
  https://fedoraproject.org/wiki/Changes/Linker_Error_On_Security_Issues


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-113
changelog:
  - xfs: some bios systems with /boot partition created with
    xfsprog < 6.5.0 can't boot with one of the xfs upstream patches
  - Resolves: #2254370


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-116
changelog:
  - grub-core/commands: add flag to only search root dev
  - Resolves: #2223437
  - Resolves: #2224951
  - Resolves: #2258096 
  - Resolves: CVE-2023-4001


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-116
changelog:
  - grub-core/commands: add flag to only search root dev
  - Resolves: #2223437
  - Resolves: #2224951
  - Resolves: #2258096
  - Resolves: CVE-2023-4001


author: Leo Sandoval <lsandova@redhat.com> - 2.06-118
changelog:
  - xfs: include the 'directory extent parsing patch', otherwise
  XFS-formatted partitions do not boot. This change effectively
  reverts 2.06-115
  - Resolves: #2259266


author: Robbie Harwood <rharwood@redhat.com> - 1:2.06-62
changelog:
  - Try dropping custom sort again
  - See-also: https://github.com/rpm-software-management/rpm/pull/2249


author: Jakub Martisko <jamartis@redhat.com> - 1.11-1
changelog:
  - Rebase to gzip 1.11
  - Run the tests in the check section instead of the build section
  Resolve: rhbz#2001025


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Benjamin Gilbert <bgilbert@redhat.com> - 2.13.0-4
changelog:
  - Rename -validate-nonlinux subpackage to -validate-redistributable
  - Add static Linux binaries to -redistributable
  - Fix macro invocation in comment


author: Steven Presti <spresti@redhat.com> - 2.14.0-1
changelog:
  - New release
  - Add ignition-apply symlink
  - Add ignition-rmcfg symlink and ignition-delete-config.service


author: Robert-André Mauchin <zebob.m@gmail.com> - 2.14.0-2
changelog:
  - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,
    CVE-2022-29526, CVE-2022-30629


author: Jan Macku <jamacku@redhat.com> - 10.13-1
changelog:
  - ifup-routes: Log when using `ip $type replace`
  - ifup-routes: Use `ip route repace` to avoid race
  - Translated using Weblate (German)
  - Add LGTM badges to README
  - ci: set default merge method to rebase
  - ci: disable comments under opened PR in order to fix CI
  - network scripts: do not use c-style for-loop
  - network scripts: replace "<<<" with pipe
  - rc.d/functions: do not use "+=" to concatenate string
  - ci: Use default github-token (#395)
  - ci(Mergify): configuration update (#394)
  - ci: Output shellcheck results using PR comments (#393)
  - ci: Update path to csdiff repository (#391)
  - spec: Fix issue with $NEXT_VERSION (#390)
  - Translated using Weblate (Indonesian)
  - Translated using Weblate (Spanish)
  - Translated using Weblate (Czech)


author: Jan Macku <jamacku@redhat.com> - 10.14-1
changelog:
  - ifup-routes: Revert quotes
  - ifup-routes: Use `ip replace` only on type `route`
  - ci(Mergify): configuration update
  - ci: remove testing branch from `shellcheck_test.yml`


author: Jan Macku <jamacku@redhat.com> - 10.15-1
changelog:
  - spec: network-scripts needs to depend on dbus-tools for NetworkManager detection
  - packit: Run copr builds on release as well
  - ci: Update `.packit.yml` to run on `c8s` `c9s` and `rawhide`
  - Translated using Weblate (Finnish)
  - ci: Use Differential ShellCheck action
  - ci(Mergify): configuration update


author: Jan Macku <jamacku@redhat.com> - 10.17-1
changelog:
  - service: Exit when `/etc/init.d` is missing
  - ci: Update workflows to run on main branch
  - ci: remove differential-shellcheck configs
  - doc: Use main branch in links
  - dependabot: Monthly updates
  - ci(Mergify): configuration update
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Georgian)
  - ci: Update `packit.yml`
  - ci: Update Github workflows & add Dependabot
  - Translated using Weblate (Estonian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Georgian)
  - Translated using Weblate (Czech)
  - Drop unnecessary obsoletes


author: Jan Macku <jamacku@redhat.com> - 10.18-1
changelog:
  - Translated using Weblate (English (United Kingdom))
  - migrate to SPDX license
  - ci(Mergify): configuration update
  - Translated using Weblate (German)
  - Translated using Weblate (English (United Kingdom))
  - doc: update badges
  - ci(lint): Add Differential PyLint GitHub Action
  - ci(lint): Add permission `security-events: write`
  - ci: Update Differential ShellCheck to `@v4`
  - doc: fix markdown warnings and update badge
  - ci: Setup CodeQL to replace deprecated LGTM
  - releng: Enable Packit to handle Fedora updates
  - releng: Convert to rpmautospec
  - build(deps): bump redhat-plumbers-in-action/differential-shellcheck


author: Jan Macku <jamacku@redhat.com> - 10.19-1
changelog:
  - ci: update Packit configuration
  - spec: add missing changelog entry
  - Revert "releng: Enable Packit to handle Fedora updates"
  - Revert "releng: Convert to rpmautospec"
  - doc: update translations
  - spec: remove changelog


author: Phil Sutter <psutter@redhat.com> - 1.8.7-13
changelog:
  - doc: ebtables-nft.8: Adjust for missing atomic-options
  - nft: Fix for non-verbose check command
  - Build services sub-package as noarch


author: Phil Sutter <psutter@redhat.com> - 1.8.7-16
changelog:
  - Improve error messages for unsupported extensions
  - xshared: Fix response to unprivileged users
  - libxtables: Register only the highest revision extension
  - Ignore typical 'fedpkg local' results in .gitignore


author: Phil Sutter <psutter@redhat.com> - 1.8.9-1
changelog:
  - Make iptables-xml a relative symlink
  - Drop not needed xtables.conf
  - Ship iptables.xslt with iptables-legacy package
  - Ship ebtables-translate tool with iptables-nft package
  - Update to 1.8.9.


author: Timothée Ravier <tim@siosm.fr> - 2:1.9.0-1
changelog:
  - Update to 1.9.0 (fedora#1952715 fedora#2091169 fedora#2063926)
  - Fix EnvironmentFile location in systemd unit (fedora#2058510)
  - Use upstream environment file in systemd unit


author: Adam Williamson <awilliam@redhat.com> - 2.4.0-8
changelog:
  - Symlink fa.map.gz to ara.map.gz so Arabic console layout works (#2015972)
  - Drop one mapping from fa.map that causes it to fail to load


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.0.0-0.rc1.12]
changelog:
  - Add python3-setuptools buildreq for perf (Justin M. Forbes)
  - Add cros_kunit to mod-internal.list (Justin M. Forbes)
  - Add new tests to mod-internal.list (Justin M. Forbes)
  - Turn off some Kunit tests in pending (Justin M. Forbes)
  - Clean up a mismatch in Fedora configs (Justin M. Forbes)
  - redhat/configs: Sync up Retbleed configs with centos-stream (Waiman Long)
  - Change CRYPTO_BLAKE2S_X86 from m to y (Justin M. Forbes)
  - Leave CONFIG_ACPI_VIDEO on for x86 only (Justin M. Forbes)
  - Fix up merge thinko (Justin M. Forbes)
  - Fix BLAKE2S_ARM and BLAKE2S_X86 configs in pending (Justin M. Forbes)
  - Fix pending for ACPI_VIDEO (Justin M. Forbes)
  - Reset release (Justin M. Forbes)
  - redhat/configs: Fix rm warning on config warnings (Eric Chanudet)
  - redhat/Makefile: Deprecate PREBUILD_GIT_ONLY variable (Prarit Bhargava)
  - redhat/Makefile: Deprecate SINGLE_TARBALL variable (Prarit Bhargava)
  - redhat/Makefile: Deprecate GIT variable (Prarit Bhargava)
  - Update CONFIG_LOCKDEP_CHAINS_BITS to 18 (cmurf)
  - Add new FIPS module name and version configs (Vladis Dronov)
  - redhat/configs/fedora: Make PowerPC's nx-gzip buildin (Jakub Čajka)
  - omit unused Provides (Dan Horák)
  - self-test: Add test for DIST=".eln" (Prarit Bhargava)
  - redhat: Enable CONFIG_LZ4_COMPRESS on Fedora (Prarit Bhargava)
  - fedora: armv7: enable MMC_STM32_SDMMC (Peter Robinson)
  - .gitlab-ci.yaml: Add test for dist-get-buildreqs target (Prarit Bhargava)
  - redhat/docs: Add information on build dependencies (Prarit Bhargava)
  - redhat/Makefile: Add better pass message for dist-get-buildreqs (Prarit Bhargava)
  - redhat/Makefile: Provide a better message for system-sb-certs (Prarit Bhargava)
  - redhat/Makefile: Change dist-buildreq-check to a non-blocking target (Prarit Bhargava)
  - create-data: Parallelize spec file data (Prarit Bhargava)
  - create-data.sh: Store SOURCES Makefile variable (Prarit Bhargava)
  - redhat/Makefile: Split up setup-source target (Prarit Bhargava)
  - create-data.sh: Redefine varfilename (Prarit Bhargava)
  - create-data.sh: Parallelize variable file creation (Prarit Bhargava)
  - redhat/configs: Enable CONFIG_LZ4_COMPRESS (Prarit Bhargava)
  - redhat/docs: Update brew information (Prarit Bhargava)
  - redhat/Makefile: Fix eln BUILD_TARGET (Prarit Bhargava)
  - redhat/Makefile: Set BUILD_TARGET for dist-brew (Prarit Bhargava)
  - kernel.spec.template: update (s390x) expoline.o path (Joe Lawrence)
  - arm64: config: Enable DRM_V3D (Nicolas Saenz Julienne)
  - ARM: configs: Enable DRM_V3D (Peter Robinson)
  - ARM: dts: bcm2711: Enable V3D (Peter Robinson)
  - drm/v3d: Add support for bcm2711 (Peter Robinson)
  - drm/v3d: Get rid of pm code (Peter Robinson)
  - dt-bindings: gpu: v3d: Add BCM2711's compatible (Peter Robinson)
  - soc: bcm: bcm2835-power: Bypass power_on/off() calls (Nicolas Saenz Julienne)
  - soc: bcm: bcm2835-power: Add support for BCM2711's RPiVid ASB (Stefan Wahren)
  - soc: bcm: bcm2835-power: Resolve ASB register macros (Stefan Wahren)
  - soc: bcm: bcm2835-power: Refactor ASB control (Stefan Wahren)
  - mfd: bcm2835-pm: Add support for BCM2711 (Stefan Wahren)
  - mfd: bcm2835-pm: Use 'reg-names' to get resources (Nicolas Saenz Julienne)
  - ARM: dts: bcm2711: Use proper compatible in PM/Watchdog node (Nicolas Saenz Julienne)
  - ARM: dts: bcm2835/bcm2711: Introduce reg-names in watchdog node (Nicolas Saenz Julienne)
  - dt-bindings: soc: bcm: bcm2835-pm: Add support for bcm2711 (Stefan Wahren)
  - dt-bindings: soc: bcm: bcm2835-pm: Introduce reg-names (Nicolas Saenz Julienne)
  - dt-bindings: soc: bcm: bcm2835-pm: Convert bindings to DT schema (Nicolas Saenz Julienne)
  - drm: Prevent drm_copy_field() to attempt copying a NULL pointer (Javier Martinez Canillas)
  - drm: Use size_t type for len variable in drm_copy_field() (Javier Martinez Canillas)
  - fedora: enable BCM_NET_PHYPTP (Peter Robinson)
  - net: phy: Add support for 1PPS out and external timestamps (Jonathan Lemon)
  - net: phy: broadcom: Add PTP support for some Broadcom PHYs. (Jonathan Lemon)
  - net: phy: broadcom: Add Broadcom PTP hooks to bcm-phy-lib (Jonathan Lemon)
  - Fedora 5.19 configs update part 2 (Justin M. Forbes)
  - redhat/Makefile: Change fedora BUILD_TARGET (Prarit Bhargava)
  - New configs in security/keys (Fedora Kernel Team)
  - Fedora: arm: enable a pair of drivers (Peter Robinson)
  - redhat: make kernel-zfcpdump-core to not provide kernel-core/kernel (Herton R. Krzesinski)
  - redhat/configs: Enable QAT devices for arches other than x86 (Vladis Dronov)
  - Fedora 5.19 configs pt 1 (Justin M. Forbes)
  - redhat: Exclude cpufreq.h from kernel-headers (Patrick Talbert)
  - Add rtla subpackage for kernel-tools (Justin M. Forbes)
  - fedora: arm: enable a couple of QCom drivers (Peter Robinson)
  - redhat/Makefile: Deprecate BUILD_SCRATCH_TARGET (Prarit Bhargava)
  - redhat: enable CONFIG_DEVTMPFS_SAFE (Mark Langsdorf)
  - redhat/Makefile: Remove deprecated variables and targets (Prarit Bhargava)
  - Split partner modules into a sub-package (Alice Mitchell)
  - Enable kAFS and it's dependancies in RHEL (Alice Mitchell)
  - Enable Marvell OcteonTX2 crypto device in ARK (Vladis Dronov)
  - redhat/Makefile: Remove --scratch from BUILD_TARGET (Prarit Bhargava)
  - redhat/Makefile: Fix dist-brew and distg-brew targets (Prarit Bhargava)
  - fedora: arm64: Initial support for TI Keystone 3 (ARCH_K3) (Peter Robinson)
  - fedora: arm: enable Hardware Timestamping Engine support (Peter Robinson)
  - fedora: wireless: disable SiLabs and PureLiFi (Peter Robinson)
  - fedora: updates for 5.19 (Peter Robinson)
  - fedora: minor updates for Fedora configs (Peter Robinson)
  - configs/fedora: Enable the pinctrl SC7180 driver built-in (Enric Balletbo i Serra)
  - redhat/configs: enable CONFIG_DEBUG_NET for debug kernel (Hangbin Liu)
  - redhat/Makefile: Add SPECKABIVERSION variable (Prarit Bhargava)
  - redhat/self-test: Provide better failure output (Prarit Bhargava)
  - redhat/self-test: Reformat tests to kernel standard (Prarit Bhargava)
  - redhat/self-test: Add purpose and header to each test (Prarit Bhargava)
  - Drop outdated CRYPTO_ECDH configs (Vladis Dronov)
  - Brush up crypto SHA512 and USER configs (Vladis Dronov)
  - Brush up crypto ECDH and ECDSA configs (Vladis Dronov)
  - redhat/self-test: Update data set (Prarit Bhargava)
  - create-data.sh: Reduce specfile data output (Prarit Bhargava)
  - redhat/configs: restore/fix core INTEL_LPSS configs to be builtin again (Hans de Goede)
  - Enable CKI on os-build MRs only (Don Zickus)
  - self-test: Fixup Makefile contents test (Prarit Bhargava)
  - redhat/self-test: self-test data update (Prarit Bhargava)
  - redhat/self-test: Fix up create-data.sh to not report local variables (Prarit Bhargava)
  - redhat/configs/fedora: Enable a set of modules used on some x86 tablets (Hans de Goede)
  - redhat/configs: Make INTEL_SOC_PMIC_CHTDC_TI builtin (Hans de Goede)
  - redhat/configs/fedora: enable missing modules modules for Intel IPU3 camera support (Hans de Goede)
  - Common: minor cleanups (Peter Robinson)
  - fedora: some minor Fedora cleanups (Peter Robinson)
  - fedora: drop X86_PLATFORM_DRIVERS_DELL dupe (Peter Robinson)
  - redhat: change tools_make macro to avoid full override of variables in Makefile (Herton R. Krzesinski)
  - Fix typo in Makefile for Fedora Stable Versioning (Justin M. Forbes)
  - Remove duplicates from ark/generic/s390x/zfcpdump/ (Vladis Dronov)
  - Move common/debug/s390x/zfcpdump/ configs to ark/debug/s390x/zfcpdump/ (Vladis Dronov)
  - Move common/generic/s390x/zfcpdump/ configs to ark/generic/s390x/zfcpdump/ (Vladis Dronov)
  - Drop RCU_EXP_CPU_STALL_TIMEOUT to 0, we are not really android (Justin M. Forbes)
  - redhat/configs/README: Update the README (Prarit Bhargava)
  - redhat/docs: fix hyperlink typo (Patrick Talbert)
  - all: net: remove old NIC/ATM drivers that use virt_to_bus() (Peter Robinson)
  - Explicitly turn off CONFIG_KASAN_INLINE for ppc (Justin M. Forbes)
  - redhat/docs: Add a description of kernel naming (Prarit Bhargava)
  - Change CRYPTO_CHACHA_S390 from m to y (Justin M. Forbes)
  - enable CONFIG_NET_ACT_CTINFO in ark (Davide Caratti)
  - redhat/configs: enable CONFIG_SP5100_TCO (David Arcari)
  - redhat/configs: Set CONFIG_VIRTIO_IOMMU on x86_64 (Eric Auger) [2089765]
  - Turn off KASAN_INLINE for RHEL ppc in pending (Justin M. Forbes)
  - redhat/kernel.spec.template: update selftest data via "make dist-self-test-data" (Denys Vlasenko)
  - redhat/kernel.spec.template: remove stray *.hardlink-temporary files, if any (Denys Vlasenko)
  - Fix up ZSMALLOC config for s390 (Justin M. Forbes)
  - Turn on KASAN_OUTLINE for ppc debug (Justin M. Forbes)
  - Turn on KASAN_OUTLINE for PPC debug to avoid mismatch (Justin M. Forbes)
  - Fix up crypto config mistmatches (Justin M. Forbes)
  - Fix up config mismatches (Justin M. Forbes)
  - generic/fedora: cleanup and disable Lightning Moutain SoC (Peter Robinson)
  - redhat: Set SND_SOC_SOF_HDA_PROBES to =m (Patrick Talbert)
  - Fix versioning on stable Fedora (Justin M. Forbes)
  - Revert "crypto: rng - Override drivers/char/random in FIPS mode" (Justin M. Forbes)
  - Enable PAGE_POOL_STATS for arm only (Justin M. Forbes)
  - Revert "Merge branch 'fix-ci-20220523' into 'os-build'" (Patrick Talbert)
  - Fix changelog one more time post rebase (Justin M. Forbes)
  - Flip CONFIG_RADIO_ADAPTERS to module for Fedora (Justin M. Forbes)
  - Reset Release for 5.19 (Justin M. Forbes)
  - redhat/Makefile: Drop quotation marks around string definitions (Prarit Bhargava)
  - Fedora: arm: Updates for QCom devices (Peter Robinson)
  - Fedora arm and generic updates for 5.17 (Peter Robinson)
  - enable COMMON_CLK_SI5341 for Xilinx ZYNQ-MP (Peter Robinson)
  - Turn on CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING for Fedora (Justin M. Forbes)
  - redhat/self-test/data: Update data set (Prarit Bhargava)
  - Revert variable switch for lasttag (Justin M. Forbes)
  - redhat: Add self-tests to .gitlab-ci.yml (Prarit Bhargava)
  - redhat/self-test: Update data (Prarit Bhargava)
  - redhat/self-test: Unset Makefile variables (Prarit Bhargava)
  - redhat/self-test: Omit SHELL variable from test data (Prarit Bhargava)
  - Add CONFIG_EFI_DXE_MEM_ATTRIBUTES (Justin M. Forbes)
  - Update filter-modules for mlx5-vfio-pci (Justin M. Forbes)
  - Fedora configs for 5.18 (Justin M. Forbes)
  - self-test/data/create-data.sh: Avoid SINGLE_TARBALL warning (Prarit Bhargava)
  - redhat/Makefile: Rename PREBUILD to UPSTREAMBUILD (Prarit Bhargava)
  - redhat/Makefile: Rename BUILDID to LOCALVERSION (Prarit Bhargava)
  - redhat/Makefile: Fix dist-brew & distg-brew targets (Prarit Bhargava)
  - redhat/Makefile: Reorganize MARKER code (Prarit Bhargava)
  - redhat/scripts/new_release.sh: Use Makefile variables (Prarit Bhargava)
  - redhat/Makefile: Rename __YSTREAM and __ZSTREAM (Prarit Bhargava)
  - redhat/genspec.sh: Add comment about SPECBUILDID variable (Prarit Bhargava)
  - redhat/kernel.spec.template: Move genspec variables into one section (Prarit Bhargava)
  - redhat/kernel.spec.template: Remove kversion (Prarit Bhargava)
  - redhat/Makefile: Add SPECTARFILE_RELEASE comment (Prarit Bhargava)
  - redhat/Makefile: Rename RPMVERSION to BASEVERSION (Prarit Bhargava)
  - redhat/Makefile: Target whitespace cleanup (Prarit Bhargava)
  - redhat/Makefile: Move SPECRELEASE to genspec.sh (Prarit Bhargava)
  - redhat/Makefile: Add kernel-NVR comment (Prarit Bhargava)
  - redhat/Makefile: Use SPECFILE variable (Prarit Bhargava)
  - redhat/Makefile: Remove KEXTRAVERSION (Prarit Bhargava)
  - redhat: Enable VM kselftests (Nico Pache) [1978539]
  - redhat: enable CONFIG_TEST_VMALLOC for vm selftests (Nico Pache)
  - redhat: Enable HMM test to be used by the kselftest test suite (Nico Pache)
  - redhat/Makefile.variables: Change git hash length to default (Prarit Bhargava)
  - redhat/Makefile: Drop quotation marks around string definitions (Prarit Bhargava)
  - Turn on INTEGRITY_MACHINE_KEYRING for Fedora (Justin M. Forbes)
  - redhat/configs: fix CONFIG_INTEL_ISHTP_ECLITE (David Arcari)
  - redhat/configs: Fix rm warning on error (Prarit Bhargava)
  - Fix nightly merge CI (Don Zickus)
  - redhat/kernel.spec.template: fix standalone tools build (Jan Stancek)
  - Add system-sb-certs for RHEL-9 (Don Zickus)
  - Fix dist-buildcheck-reqs (Don Zickus)
  - move DAMON configs to correct directory (Chris von Recklinghausen)
  - redhat: indicate HEAD state in tarball/rpm name (Jarod Wilson)
  - Fedora 5.18 config set part 1 (Justin M. Forbes)
  - fedora: arm: Enable new Rockchip 356x series drivers (Peter Robinson)
  - fedora: arm: enable DRM_I2C_NXP_TDA998X on aarch64 (Peter Robinson)
  - redhat/self-test: Add test to verify Makefile declarations. (Prarit Bhargava)
  - redhat/Makefile: Add RHTEST (Prarit Bhargava)
  - redhat: shellcheck cleanup (Prarit Bhargava)
  - redhat/self-test/data: Cleanup data (Prarit Bhargava)
  - redhat/self-test: Add test to verify SPEC variables (Prarit Bhargava)
  - redhat/Makefile: Add 'duplicate' SPEC entries for user set variables (Prarit Bhargava)
  - redhat/Makefile: Rename TARFILE_RELEASE to SPECTARFILE_RELEASE (Prarit Bhargava)
  - redhat/genspec: Rename PATCHLIST_CHANGELOG to SPECPATCHLIST_CHANGELOG (Prarit Bhargava)
  - redhat/genspec: Rename DEBUG_BUILDS_ENABLED to SPECDEBUG_BUILDS_ENABLED (Prarit Bhargava)
  - redhat/Makefile: Rename PKGRELEASE to SPECBUILD (Prarit Bhargava)
  - redhat/genspec: Rename BUILDID_DEFINE to SPECBUILDID (Prarit Bhargava)
  - redhat/Makefile: Rename CHANGELOG to SPECCHANGELOG (Prarit Bhargava)
  - redhat/Makefile: Rename RPMKEXTRAVERSION to SPECKEXTRAVERSION (Prarit Bhargava)
  - redhat/Makefile: Rename RPMKSUBLEVEL to SPECKSUBLEVEL (Prarit Bhargava)
  - redhat/Makefile: Rename RPMKPATCHLEVEL to SPECKPATCHLEVEL (Prarit Bhargava)
  - redhat/Makefile: Rename RPMKVERSION to SPECKVERSION (Prarit Bhargava)
  - redhat/Makefile: Rename KVERSION to SPECVERSION (Prarit Bhargava)
  - redhat/Makefile: Deprecate some simple targets (Prarit Bhargava)
  - redhat/Makefile: Use KVERSION (Prarit Bhargava)
  - redhat/configs: Set GUP_TEST in debug kernel (Joel Savitz)
  - enable DAMON configs (Chris von Recklinghausen) [2004233]
  - redhat: add zstream switch for zstream release numbering (Herton R. Krzesinski)
  - redhat: change kabi tarballs to use the package release (Herton R. Krzesinski)
  - redhat: generate distgit changelog in genspec.sh as well (Herton R. Krzesinski)
  - redhat: make genspec prefer metadata from git notes (Herton R. Krzesinski)
  - redhat: use tags from git notes for zstream to generate changelog (Herton R. Krzesinski)
  - ARK: Remove code marking drivers as tech preview (Peter Georg)
  - ARK: Remove code marking devices deprecated (Peter Georg)
  - ARK: Remove code marking devices unmaintained (Peter Georg)
  - rh_message: Fix function name (Peter Georg) [2019377]
  - Turn on CONFIG_RANDOM_TRUST_BOOTLOADER (Justin M. Forbes)
  - redhat/configs: aarch64: enable CPU_FREQ_GOV_SCHEDUTIL (Mark Salter)
  - Move CONFIG_HW_RANDOM_CN10K to a proper place (Vladis Dronov)
  - redhat/self-test: Clean up data set (Prarit Bhargava)
  - redhat/Makefile.rhpkg: Remove quotes for RHDISTGIT (Prarit Bhargava)
  - redhat/scripts/create-tarball.sh: Use Makefile variables (Prarit Bhargava)
  - redhat/Makefile: Deprecate SINGLE_TARBALL (Prarit Bhargava)
  - redhat/Makefile: Move SINGLE_TARBALL to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Use RPMVERSION (Prarit Bhargava)
  - redhat/scripts/rh-dist-git.sh: Use Makefile variables (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Use Makefile variables (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Use Makefile variables (Prarit Bhargava)
  - redhat/kernel.spec.template: Use RPM_BUILD_NCPUS (Prarit Bhargava)
  - redhat/configs/generate_all_configs.sh: Use Makefile variables (Prarit Bhargava)
  - redhat/configs: enable nf_tables SYNPROXY extension on ark (Davide Caratti)
  - fedora: Disable fbdev drivers missed before (Javier Martinez Canillas)
  - Redhat: enable Kfence on production servers (Nico Pache)
  - redhat: ignore known empty patches on the patches rpminspect test (Herton R. Krzesinski)
  - kernel-ark: arch_hw Update CONFIG_MOUSE_VSXXXAA=m (Tony Camuso) [2062909]
  - spec: keep .BTF section in modules for s390 (Yauheni Kaliuta) [2071969]
  - kernel.spec.template: Ship arch/s390/lib/expoline.o in kernel-devel (Ondrej Mosnacek)
  - redhat: disable tv/radio media device infrastructure (Jarod Wilson)
  - redhat/configs: clean up INTEL_LPSS configuration (David Arcari)
  - Have to rename the actual contents too (Justin M. Forbes)
  - The CONFIG_SATA_MOBILE_LPM_POLICY rebane was reverted (Justin M. Forbes)
  - redhat: Enable KASAN on all ELN debug kernels (Nico Pache)
  - redhat: configs: Enable INTEL_IOMMU_DEBUGFS for debug builds (Jerry Snitselaar)
  - generic: can: disable CAN_SOFTING everywhere (Peter Robinson)
  - redhat/configs: Enable CONFIG_DM_ERA=m for all (Yanko Kaneti)
  - redhat/configs: enable CONFIG_SAMPLE_VFIO_MDEV_MTTY (Patrick Talbert)
  - Build intel_sdsi with %{tools_make} (Justin M. Forbes)
  - configs: remove redundant Fedora config for INTEL_IDXD_COMPAT (Jerry Snitselaar)
  - redhat/configs: enable CONFIG_RANDOMIZE_KSTACK_OFFSET_DEFAULT (Joel Savitz) [2026319]
  - configs: enable CONFIG_RMI4_F3A (Benjamin Tissoires)
  - redhat: configs: Disable TPM 1.2 specific drivers (Jerry Snitselaar)
  - redhat/configs: Enable cr50 I2C TPM interface (Akihiko Odaki)
  - spec: make HMAC file encode relative path (Jonathan Lebon)
  - redhat/kernel.spec.template: Add intel_sdsi utility (Prarit Bhargava)
  - Spec fixes for intel-speed-select (Justin M. Forbes)
  - Add Partner Supported taint flag to kAFS (Alice Mitchell) [2038999]
  - Add Partner Supported taint flag (Alice Mitchell) [2038999]
  - Enabled INTEGRITY_MACHINE_KEYRING for all configs. (Peter Robinson)
  - redhat/configs: Enable CONFIG_RCU_SCALE_TEST & CONFIG_RCU_REF_SCALE_TEST (Waiman Long)
  - Add clk_test and clk-gate_test to mod-internal.list (Justin M. Forbes)
  - redhat/self-tests: Ignore UPSTREAM (Prarit Bhargava)
  - redhat/self-tests: Ignore RHGITURL (Prarit Bhargava)
  - redhat/Makefile.variables: Extend git hash length to 15 (Prarit Bhargava)
  - redhat/self-test: Remove changelog from spec files (Prarit Bhargava)
  - redhat/genspec.sh: Rearrange genspec.sh (Prarit Bhargava)
  - redhat/self-test: Add spec file data (Prarit Bhargava)
  - redhat/self-test: Add better dist-dump-variables test (Prarit Bhargava)
  - redhat/self-test: Add variable test data (Prarit Bhargava)
  - redhat/config: Remove obsolete CONFIG_MFD_INTEL_PMT (David Arcari)
  - redhat/configs: enable CONFIG_INTEL_ISHTP_ECLITE (David Arcari)
  - Avoid creating files in $RPM_SOURCE_DIR (Nicolas Chauvet)
  - Flip CRC64 from off to y (Justin M. Forbes)
  - New configs in lib/Kconfig (Fedora Kernel Team)
  - disable redundant assignment of CONFIG_BQL on ARK (Davide Caratti)
  - redhat/configs: remove unnecessary GPIO options for aarch64 (Brian Masney)
  - redhat/configs: remove viperboard related Kconfig options (Brian Masney)
  - redhat/configs/process_configs.sh: Avoid race with find (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Remove CONTINUEONERROR (Prarit Bhargava)
  - Remove i686 configs and filters (Justin M. Forbes)
  - redhat/configs: Set CONFIG_X86_AMD_PSTATE built-in on Fedora (Prarit Bhargava)
  - Fix up mismatch with CRC64 (Justin M. Forbes)
  - Fedora config updates to fix process_configs (Justin M. Forbes)
  - redhat: Fix release tagging (Prarit Bhargava)
  - redhat/self-test: Fix version tag test (Prarit Bhargava)
  - redhat/self-test: Fix BUILD verification test (Prarit Bhargava)
  - redhat/self-test: Cleanup SRPM related self-tests (Prarit Bhargava)
  - redhat/self-test: Fix shellcheck test (Prarit Bhargava)
  - redhat/configs: Disable watchdog components (Prarit Bhargava)
  - redhat/README.Makefile: Add a Makefile README file (Prarit Bhargava)
  - redhat/Makefile: Remove duplicated code (Prarit Bhargava)
  - Add BuildRequires libnl3-devel for intel-speed-select (Justin M. Forbes)
  - Add new kunit tests for 5.18 to mod-internal.list (Justin M. Forbes)
  - Fix RHDISTGIT for Fedora (Justin M. Forbes)
  - redhat/configs/process_configs.sh: Fix race with tools generation (Prarit Bhargava)
  - New configs in drivers/dax (Fedora Kernel Team)
  - Fix up CONFIG_SND_AMD_ACP_CONFIG files (Patrick Talbert)
  - Remove CONFIG_SND_SOC_SOF_DEBUG_PROBES files (Patrick Talbert)
  - SATA_MOBILE_LPM_POLICY is now SATA_LPM_POLICY (Justin M. Forbes)
  - Define SNAPSHOT correctly when VERSION_ON_UPSTREAM is 0 (Justin M. Forbes)
  - redhat/Makefile: Fix dist-git (Prarit Bhargava)
  - Clean up the changelog (Justin M. Forbes)
  - Change the pending-ark CONFIG_DAX to y due to mismatch (Justin M. Forbes)
  - Reset Makefile.rhelver for the 5.18 cycle (Justin M. Forbes)
  - Enable net reference count trackers in all debug kernels (Jiri Benc)
  - redhat/Makefile: Reorganize variables (Prarit Bhargava)
  - redhat/Makefile: Add some descriptions (Prarit Bhargava)
  - redhat/Makefile: Move SNAPSHOT check (Prarit Bhargava)
  - redhat/Makefile: Deprecate BREW_FLAGS, KOJI_FLAGS, and TEST_FLAGS (Prarit Bhargava)
  - redhat/genspec.sh: Rework RPMVERSION variable (Prarit Bhargava)
  - redhat/Makefile: Remove dead comment (Prarit Bhargava)
  - redhat/Makefile: Cleanup KABI* variables. (Prarit Bhargava)
  - redhat/Makefile.variables: Default RHGITCOMMIT to HEAD (Prarit Bhargava)
  - redhat/scripts/create-tarball.sh: Use Makefile TARBALL variable (Prarit Bhargava)
  - redhat/Makefile: Remove extra DIST_BRANCH (Prarit Bhargava)
  - redhat/Makefile: Remove STAMP_VERSION (Prarit Bhargava)
  - redhat/Makefile: Move NO_CONFIGCHECKS to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Move RHJOBS to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Move RHGIT* variables to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Move PREBUILD_GIT_ONLY to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Move BUILD to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Move BUILD_FLAGS to Makefile.variables. (Prarit Bhargava)
  - redhat/Makefile: Move BUILD_PROFILE to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Move BUILD_TARGET and BUILD_SCRATCH_TARGET to Makefile.variables (Prarit Bhargava)
  - redhat/Makefile: Remove RHPRODUCT variable (Prarit Bhargava)
  - redhat/Makefile: Cleanup DISTRO variable (Prarit Bhargava)
  - redhat/Makefile: Move HEAD to Makefile.variables. (Prarit Bhargava)
  - redhat: Combine Makefile and Makefile.common (Prarit Bhargava)
  - redhat/koji/Makefile: Decouple koji Makefile from Makefile.common (Prarit Bhargava)
  - Set CONFIG_SND_SOC_SOF_MT8195 for Fedora and turn on VDPA_SIM_BLOCK (Justin M. Forbes)
  - Add asus_wmi_sensors modules to filters for Fedora (Justin M. Forbes)
  - redhat: spec: trigger dracut when modules are installed separately (Jan Stancek)
  - Last of the Fedora 5.17 configs initial pass (Justin M. Forbes)
  - redhat/Makefile: Silence dist-clean-configs output (Prarit Bhargava)
  - Fedora 5.17 config updates (Justin M. Forbes)
  - Setting CONFIG_I2C_SMBUS to "m" for ark (Gopal Tiwari)
  - Print arch with process_configs errors (Justin M. Forbes)
  - Pass RHJOBS to process_configs for dist-configs-check as well (Justin M. Forbes)
  - redhat/configs/process_configs.sh: Fix issue with old error files (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Parallelize execution (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Provide better messages (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Create unique output files (Prarit Bhargava)
  - redhat/configs/build_configs.sh: Add local variables (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Parallelize execution (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Provide better messages (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Create unique output files (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Add processing config function (Prarit Bhargava)
  - redhat: Unify genspec.sh and kernel.spec variable names (Prarit Bhargava)
  - redhat/genspec.sh: Remove options and use Makefile variables (Prarit Bhargava)
  - Add rebase note for 5.17 on Fedora stable (Justin M. Forbes)
  - More Fedora config updates for 5.17 (Justin M. Forbes)
  - redhat/configs: Disable CONFIG_MACINTOSH_DRIVERS in RHEL. (Prarit Bhargava)
  - redhat: Fix "make dist-release-finish" to use the correct NVR variables (Neal Gompa) [2053836]
  - Build CROS_EC Modules (Jason Montleon)
  - redhat: configs: change aarch64 default dma domain to lazy (Jerry Snitselaar)
  - redhat: configs: disable ATM protocols (Davide Caratti)
  - configs/fedora: Enable the interconnect SC7180 driver built-in (Enric Balletbo i Serra)
  - configs: clean up CONFIG_PAGE_TABLE_ISOLATION files (Ondrej Mosnacek)
  - redhat: configs: enable CONFIG_INTEL_PCH_THERMAL for RHEL x86 (David Arcari)
  - redhat/Makefile: Fix dist-dump-variables target (Prarit Bhargava)
  - redhat/configs: Enable DEV_DAX and DEV_DAX_PMEM modules on aarch64 for fedora (D Scott Phillips)
  - redhat/configs: Enable CONFIG_TRANSPARENT_HUGEPAGE on aarch64 for fedora (D Scott Phillips)
  - configs/process_configs.sh: Remove orig files (Prarit Bhargava)
  - redhat: configs: Disable CONFIG_MPLS for s390x/zfcpdump (Guillaume Nault)
  - Fedora 5.17 configs round 1 (Justin M. Forbes)
  - redhat: configs: disable the surface platform (David Arcari)
  - redhat: configs: Disable team driver (Hangbin Liu) [1945477]
  - configs: enable LOGITECH_FF for RHEL/CentOS too (Benjamin Tissoires)
  - redhat/configs: Disable CONFIG_SENSORS_NCT6683 in RHEL for arm/aarch64 (Dean Nelson) [2041186]
  - redhat: fix make {distg-brew,distg-koji} (Andrea Claudi)
  - [fedora] Turn on CONFIG_VIDEO_OV5693 for sensor support (Dave Olsthoorn)
  - Cleanup 'disabled' config options for RHEL (Prarit Bhargava)
  - redhat: move CONFIG_ARM64_MTE to aarch64 config directory (Herton R. Krzesinski)
  - Change CONFIG_TEST_BPF to a module (Justin M. Forbes)
  - Change CONFIG_TEST_BPF to module in pending MR coming for proper review (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_TEST_BPF (Viktor Malik)
  - Enable KUNIT tests for testing (Nico Pache)
  - Makefile: Check PKGRELEASE size on dist-brew targets (Prarit Bhargava)
  - kernel.spec: Add glibc-static build requirement (Prarit Bhargava)
  - Enable iSER on s390x (Stefan Schulze Frielinghaus)
  - redhat/configs: Enable CONFIG_ACER_WIRELESS (Peter Georg) [2025985]
  - kabi: Add kABI macros for enum type (Čestmír Kalina) [2024595]
  - kabi: expand and clarify documentation of aux structs (Čestmír Kalina) [2024595]
  - kabi: introduce RH_KABI_USE_AUX_PTR (Čestmír Kalina) [2024595]
  - kabi: rename RH_KABI_SIZE_AND_EXTEND to AUX (Čestmír Kalina) [2024595]
  - kabi: more consistent _RH_KABI_SIZE_AND_EXTEND (Čestmír Kalina) [2024595]
  - kabi: use fixed field name for extended part (Čestmír Kalina) [2024595]
  - kabi: fix dereference in RH_KABI_CHECK_EXT (Čestmír Kalina) [2024595]
  - kabi: fix RH_KABI_SET_SIZE macro (Čestmír Kalina) [2024595]
  - kabi: expand and clarify documentation (Čestmír Kalina) [2024595]
  - kabi: make RH_KABI_USE replace any number of reserved fields (Čestmír Kalina) [2024595]
  - kabi: rename RH_KABI_USE2 to RH_KABI_USE_SPLIT (Čestmír Kalina) [2024595]
  - kabi: change RH_KABI_REPLACE2 to RH_KABI_REPLACE_SPLIT (Čestmír Kalina) [2024595]
  - kabi: change RH_KABI_REPLACE_UNSAFE to RH_KABI_BROKEN_REPLACE (Čestmír Kalina) [2024595]
  - kabi: introduce RH_KABI_ADD_MODIFIER (Čestmír Kalina) [2024595]
  - kabi: Include kconfig.h (Čestmír Kalina) [2024595]
  - kabi: macros for intentional kABI breakage (Čestmír Kalina) [2024595]
  - kabi: fix the note about terminating semicolon (Čestmír Kalina) [2024595]
  - kabi: introduce RH_KABI_HIDE_INCLUDE and RH_KABI_FAKE_INCLUDE (Čestmír Kalina) [2024595]
  - spec: don't overwrite auto.conf with .config (Ondrej Mosnacek)
  - New configs in drivers/crypto (Fedora Kernel Team)
  - Add test_hash to the mod-internal.list (Justin M. Forbes)
  - configs: disable CONFIG_CRAMFS (Abhi Das) [2041184]
  - spec: speed up "cp -r" when it overwrites existing files. (Denys Vlasenko)
  - redhat: use centos x509.genkey file if building under centos (Herton R. Krzesinski)
  - Revert "[redhat] Generate a crashkernel.default for each kernel build" (Coiby Xu)
  - spec: make linux-firmware weak(er) dependency (Jan Stancek)
  - rtw89: enable new driver rtw89 and device RTK8852AE (Íñigo Huguet)
  - Config consolidation into common (Justin M. Forbes)
  - Add packaged but empty /lib/modules/<kver>/systemtap/ (Justin M. Forbes)
  - filter-modules.sh.rhel: Add ntc_thermistor to singlemods (Prarit Bhargava)
  - Move CONFIG_SND_SOC_TLV320AIC31XX as it is now selected by CONFIG_SND_SOC_FSL_ASOC_CARD (Justin M. Forbes)
  - Add dev_addr_lists_test to mod-internal.list (Justin M. Forbes)
  - configs/fedora: Enable CONFIG_NFC_PN532_UART for use PN532 NFC module (Ziqian SUN (Zamir))
  - redhat: ignore ksamples and kselftests on the badfuncs rpminspect test (Herton R. Krzesinski)
  - redhat: disable upstream check for rpminspect (Herton R. Krzesinski)
  - redhat: switch the vsyscall config to CONFIG_LEGACY_VSYSCALL_XONLY=y (Herton R. Krzesinski) [1876977]
  - redhat: configs: increase CONFIG_DEBUG_KMEMLEAK_MEM_POOL_SIZE (Rafael Aquini)
  - move CONFIG_STRICT_SIGALTSTACK_SIZE to the appropriate directory (David Arcari)
  - redhat/configs: Enable CONFIG_DM_MULTIPATH_IOA for fedora (Benjamin Marzinski)
  - redhat/configs: Enable CONFIG_DM_MULTIPATH_HST (Benjamin Marzinski) [2000835]
  - redhat: Pull in openssl-devel as a build dependency correctly (Neal Gompa) [2034670]
  - redhat/configs: Migrate ZRAM_DEF_* configs to common/ (Neal Gompa)
  - redhat/configs: Enable CONFIG_CRYPTO_ZSTD (Neal Gompa) [2032758]
  - Turn CONFIG_DEVMEM back off for aarch64 (Justin M. Forbes)
  - Clean up excess text in Fedora config files (Justin M. Forbes)
  - Fedora config updates for 5.16 (Justin M. Forbes)
  - redhat/configs: enable CONFIG_INPUT_KEYBOARD for AARCH64 (Vitaly Kuznetsov)
  - Fedora configs for 5.16 pt 1 (Justin M. Forbes)
  - redhat/configs: NFS: disable UDP, insecure enctypes (Benjamin Coddington) [1952863]
  - Update rebase-notes with dracut 5.17 information (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_CRYPTO_BLAKE2B (Neal Gompa) [2031547]
  - Enable CONFIG_BPF_SYSCALL for zfcpdump (Jiri Olsa)
  - Enable CONFIG_CIFS_SMB_DIRECT for ARK (Ronnie Sahlberg)
  - mt76: enable new device MT7921E in CentOs/RHEL (Íñigo Huguet) [2004821]
  - Disable CONFIG_DEBUG_PREEMPT on normal builds (Phil Auld)
  - redhat/configs: Enable CONFIG_PCI_P2PDMA for ark (Myron Stowe)
  - pci.h: Fix static include (Prarit Bhargava)
  - Enable CONFIG_VFIO_NOIOMMU for Fedora (Justin M. Forbes)
  - redhat/configs: enable CONFIG_NTB_NETDEV for ark (John W. Linville)
  - drivers/pci/pci-driver.c: Fix if/ifdef typo (Prarit Bhargava)
  - common: arm64: ensure all the required arm64 errata are enabled (Peter Robinson)
  - kernel/rh_taint.c: Update to new messaging (Prarit Bhargava) [2019377]
  - redhat/configs: enable CONFIG_AMD_PTDMA for ark (John W. Linville)
  - redhat/configs: enable CONFIG_RD_ZSTD for rhel (Tao Liu) [2020132]
  - fedora: build TEE as a module for all arches (Peter Robinson)
  - common: build TRUSTED_KEYS in everywhere (Peter Robinson)
  - redhat: make Patchlist.changelog generation conditional (Herton R. Krzesinski)
  - redhat/configs: Add two new CONFIGs (Prarit Bhargava)
  - redhat/configs: Remove dead CONFIG files (Prarit Bhargava)
  - redhat/configs/evaluate_configs: Add find dead configs option (Prarit Bhargava)
  - Add more rebase notes for Fedora 5.16 (Justin M. Forbes)
  - Fedora: Feature: Retire wireless Extensions (Peter Robinson)
  - fedora: arm: some SoC enablement pieces (Peter Robinson)
  - fedora: arm: enable PCIE_ROCKCHIP_DW for rk35xx series (Peter Robinson)
  - fedora: enable RTW89 802.11 WiFi driver (Peter Robinson)
  - fedora: arm: Enable DRM_PANEL_EDP (Peter Robinson)
  - fedora: sound: enable new sound drivers (Peter Robinson)
  - redhat/configs: unset KEXEC_SIG for s390x zfcpdump (Coiby Xu)
  - spec: Keep .BTF section in modules (Jiri Olsa)
  - Fix up PREEMPT configs (Justin M. Forbes)
  - New configs in drivers/media (Fedora Kernel Team)
  - New configs in drivers/net/ethernet/litex (Fedora Kernel Team)
  - spec: add bpf_testmod.ko to kselftests/bpf (Viktor Malik)
  - New configs in drivers/net/wwan (Fedora Kernel Team)
  - New configs in drivers/i2c (Fedora Kernel Team)
  - redhat/docs/index.rst: Add local build information. (Prarit Bhargava)
  - Fix up preempt configs (Justin M. Forbes)
  - Turn on CONFIG_HID_NINTENDO for controller support (Dave Olsthoorn)
  - Fedora: Enable MediaTek bluetooth pieces (Peter Robinson)
  - Add rebase notes to check for PCI patches (Justin M. Forbes)
  - redhat: configs: move CONFIG_ACCESSIBILITY from fedora to common (John W. Linville)
  - Filter updates for hid-playstation on Fedora (Justin M. Forbes)
  - Revert "Force DWARF4 because crash does not support DWARF5 yet" (Lianbo Jiang)
  - Enable CONFIG_VIRT_DRIVERS for ARK (Vitaly Kuznetsov)
  - redhat/configs: Enable Nitro Enclaves on aarch64 (Vitaly Kuznetsov)
  - Enable e1000 in rhel9 as unsupported (Ken Cox) [2002344]
  - Turn on COMMON_CLK_AXG_AUDIO for Fedora rhbz 2020481 (Justin M. Forbes)
  - Fix up fedora config options from mismatch (Justin M. Forbes)
  - Add nct6775 to filter-modules.sh.rhel (Justin M. Forbes)
  - Enable PREEMPT_DYNAMIC for all but s390x (Justin M. Forbes)
  - Add memcpy_kunit to mod-internal.list (Justin M. Forbes)
  - New configs in fs/ksmbd (Fedora Kernel Team)
  - Add nct6775 to Fedora filter-modules.sh (Justin M. Forbes)
  - New configs in fs/ntfs3 (Fedora Kernel Team)
  - Make CONFIG_IOMMU_DEFAULT_DMA_STRICT default for all but x86 (Justin M. Forbes)
  - redhat/configs: enable  KEXEC_IMAGE_VERIFY_SIG for RHEL (Coiby Xu)
  - redhat/configs: enable KEXEC_SIG for aarch64 RHEL (Coiby Xu) [1994858]
  - Fix up fedora and pending configs for PREEMPT to end mismatch (Justin M. Forbes)
  - Enable binder for fedora (Justin M. Forbes)
  - Reset RHEL_RELEASE for 5.16 (Justin M. Forbes)
  - redhat: configs: Update configs for vmware (Kamal Heib)
  - Fedora configs for 5.15 (Justin M. Forbes)
  - redhat/kernel.spec.template: don't hardcode gcov arches (Jan Stancek)
  - redhat/configs: create a separate config for gcov options (Jan Stancek)
  - Update documentation with FAQ and update frequency (Don Zickus)
  - Document force pull option for mirroring (Don Zickus)
  - Ignore the rhel9 kabi files (Don Zickus)
  - Remove legacy elrdy cruft (Don Zickus)
  - redhat/configs/evaluate_configs: walk cfgvariants line by line (Jan Stancek)
  - redhat/configs/evaluate_configs: insert EMPTY tags at correct place (Jan Stancek)
  - redhat: make dist-srpm-gcov add to BUILDOPTS (Jan Stancek)
  - Build CONFIG_SPI_PXA2XX as a module on x86 (Justin M. Forbes)
  - redhat/configs: enable CONFIG_BCMGENET as module (Joel Savitz)
  - Fedora config updates (Justin M. Forbes)
  - Enable CONFIG_FAIL_SUNRPC for debug builds (Justin M. Forbes)
  - fedora: Disable fbdev drivers and use simpledrm instead (Javier Martinez Canillas)
  - spec: Don't fail spec build if ksamples fails (Jiri Olsa)
  - Enable CONFIG_QCOM_SCM for arm (Justin M. Forbes)
  - redhat: Disable clang's integrated assembler on ppc64le and s390x (Tom Stellard)
  - redhat/configs: enable CONFIG_IMA_WRITE_POLICY (Bruno Meneguele)
  - Fix dist-srpm-gcov (Don Zickus)
  - redhat: configs: add CONFIG_NTB and related items (John W. Linville)
  - Add kfence_test to mod-internal.list (Justin M. Forbes)
  - Enable KUNIT tests for redhat kernel-modules-internal (Nico Pache)
  - redhat: add *-matched meta packages to rpminspect emptyrpm config (Herton R. Krzesinski)
  - Use common config for NODES_SHIFT (Mark Salter)
  - redhat: fix typo and make the output more silent for dist-git sync (Herton R. Krzesinski)
  - Fedora NTFS config updates (Justin M. Forbes)
  - Fedora 5.15 configs part 1 (Justin M. Forbes)
  - Fix ordering in genspec args (Justin M. Forbes)
  - redhat/configs: Enable Hyper-V guests on ARM64 (Vitaly Kuznetsov) [2007430]
  - redhat: configs: Enable CONFIG_THINKPAD_LMI (Hans de Goede)
  - redhat/docs: update Koji link to avoid redirect (Joel Savitz)
  - redhat: add support for different profiles with dist*-brew (Herton R. Krzesinski)
  - redhat: configs: Disable xtables and ipset (Phil Sutter) [1945179]
  - redhat: Add mark_driver_deprecated() (Phil Sutter) [1945179]
  - Change s390x CONFIG_NODES_SHIFT from 4 to 1 (Justin M. Forbes)
  - Build CRYPTO_SHA3_*_S390 inline for s390 zfcpdump (Justin M. Forbes)
  - redhat: move the DIST variable setting to Makefile.variables (Herton R. Krzesinski)
  - redhat/kernel.spec.template: Cleanup source numbering (Prarit Bhargava)
  - redhat/kernel.spec.template: Reorganize RHEL and Fedora specific files (Prarit Bhargava)
  - redhat/kernel.spec.template: Add include_fedora and include_rhel variables (Prarit Bhargava)
  - redhat/Makefile: Make kernel-local global (Prarit Bhargava)
  - redhat/Makefile: Use flavors file (Prarit Bhargava)
  - Turn on CONFIG_CPU_FREQ_GOV_SCHEDUTIL for x86 (Justin M. Forbes)
  - redhat/configs: Remove CONFIG_INFINIBAND_I40IW (Kamal Heib)
  - cleanup CONFIG_X86_PLATFORM_DRIVERS_INTEL (David Arcari)
  - redhat: rename usage of .rhel8git.mk to .rhpkg.mk (Herton R. Krzesinski)
  - Manually add pending items that need to be set due to mismatch (Justin M. Forbes)
  - Clean up pending common (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_BLK_CGROUP_IOLATENCY & CONFIG_BLK_CGROUP_FC_APPID (Waiman Long) [2006813]
  - redhat: remove kernel.changelog-8.99 file (Herton R. Krzesinski)
  - redhat/configs: enable CONFIG_SQUASHFS_ZSTD which is already enabled in Fedora 34 (Tao Liu) [1998953]
  - redhat: bump RHEL_MAJOR and add the changelog file for it (Herton R. Krzesinski)
  - redhat: add documentation about the os-build rebase process (Herton R. Krzesinski)
  - redhat/configs: enable SYSTEM_BLACKLIST_KEYRING which is already enabled in rhel8 and Fedora 34 (Coiby Xu)
  - Build kernel-doc for Fedora (Justin M. Forbes)
  - x86_64: Enable Elkhart Lake Quadrature Encoder Peripheral support (Prarit Bhargava)
  - Update CONFIG_WERROR to disabled as it can cause issue with out of tree modules. (Justin M. Forbes)
  - Fixup IOMMU configs in pending so that configs are sane again (Justin M. Forbes)
  - Some initial Fedora config items for 5.15 (Justin M. Forbes)
  - arm64: use common CONFIG_MAX_ZONEORDER for arm kernel (Mark Salter)
  - Create Makefile.variables for a single point of configuration change (Justin M. Forbes)
  - rpmspec: drop traceevent files instead of just excluding them from files list (Herton R. Krzesinski) [1967640]
  - redhat/config: Enablement of CONFIG_PAPR_SCM for PowerPC (Gustavo Walbon) [1962936]
  - Attempt to fix Intel PMT code (David Arcari)
  - CI: Enable realtime branch testing (Veronika Kabatova)
  - CI: Enable realtime checks for c9s and RHEL9 (Veronika Kabatova)
  - [fs] dax: mark tech preview (Bill O'Donnell) [1995338]
  - ark: wireless: enable all rtw88 pcie wirless variants (Peter Robinson)
  - wireless: rtw88: move debug options to common/debug (Peter Robinson)
  - fedora: minor PTP clock driver cleanups (Peter Robinson)
  - common: x86: enable VMware PTP support on ark (Peter Robinson)
  - [scsi] megaraid_sas: re-add certain pci-ids (Tomas Henzl)
  - Disable liquidio driver on ark/rhel (Herton R. Krzesinski) [1993393]
  - More Fedora config updates (Justin M. Forbes)
  - Fedora config updates for 5.14 (Justin M. Forbes)
  - CI: Rename ARK CI pipeline type (Veronika Kabatova)
  - CI: Finish up c9s config (Veronika Kabatova)
  - CI: Update ppc64le config (Veronika Kabatova)
  - CI: use more templates (Veronika Kabatova)
  - Filter updates for aarch64 (Justin M. Forbes)
  - increase CONFIG_NODES_SHIFT for aarch64 (Chris von Recklinghausen) [1890304]
  - redhat: configs: Enable CONFIG_WIRELESS_HOTKEY (Hans de Goede)
  - redhat/configs: Update CONFIG_NVRAM (Desnes A. Nunes do Rosario) [1988254]
  - common: serial: build in SERIAL_8250_LPSS for x86 (Peter Robinson)
  - powerpc: enable CONFIG_FUNCTION_PROFILER (Diego Domingos) [1831065]
  - crypto: rng - Override drivers/char/random in FIPS mode (Herbert Xu) [1984784]
  - redhat/configs: Disable Soft-RoCE driver (Kamal Heib)
  - redhat/configs/evaluate_configs: Update help output (Prarit Bhargava)
  - redhat/configs: Double MAX_LOCKDEP_CHAINS (Justin M. Forbes)
  - fedora: configs: Fix WM5102 Kconfig (Hans de Goede)
  - powerpc: enable CONFIG_POWER9_CPU (Diego Domingos) [1876436]
  - redhat/configs: Fix CONFIG_VIRTIO_IOMMU to 'y' on aarch64 (Eric Auger) [1972795]
  - filter-modules.sh: add more sound modules to filter (Jaroslav Kysela)
  - redhat/configs: sound configuration cleanups and updates (Jaroslav Kysela)
  - common: Update for CXL (Compute Express Link) configs (Peter Robinson)
  - redhat: configs: disable CRYPTO_SM modules (Herton R. Krzesinski) [1990040]
  - Remove fedora version of the LOCKDEP_BITS, we should use common (Justin M. Forbes)
  - Re-enable sermouse for x86 (rhbz 1974002) (Justin M. Forbes)
  - Fedora 5.14 configs round 1 (Justin M. Forbes)
  - redhat: add gating configuration for centos stream/rhel9 (Herton R. Krzesinski)
  - x86: configs: Enable CONFIG_TEST_FPU for debug kernels (Vitaly Kuznetsov) [1988384]
  - redhat/configs: Move CHACHA and POLY1305 to core kernel to allow BIG_KEYS=y (root) [1983298]
  - kernel.spec: fix build of samples/bpf (Jiri Benc)
  - Enable OSNOISE_TRACER and TIMERLAT_TRACER (Jerome Marchand) [1979379]
  - rpmspec: switch iio and gpio tools to use tools_make (Herton R. Krzesinski) [1956988]
  - configs/process_configs.sh: Handle config items with no help text (Patrick Talbert)
  - fedora: sound config updates for 5.14 (Peter Robinson)
  - fedora: Only enable FSI drivers on POWER platform (Peter Robinson)
  - The CONFIG_RAW_DRIVER has been removed from upstream (Peter Robinson)
  - fedora: updates for 5.14 with a few disables for common from pending (Peter Robinson)
  - fedora: migrate from MFD_TPS68470 -> INTEL_SKL_INT3472 (Peter Robinson)
  - fedora: Remove STAGING_GASKET_FRAMEWORK (Peter Robinson)
  - Fedora: move DRM_VMWGFX configs from ark -> common (Peter Robinson)
  - fedora: arm: disabled unused FB drivers (Peter Robinson)
  - fedora: don't enable FB_VIRTUAL (Peter Robinson)
  - redhat/configs: Double MAX_LOCKDEP_ENTRIES (Waiman Long) [1940075]
  - rpmspec: fix verbose output on kernel-devel installation (Herton R. Krzesinski) [1981406]
  - Build Fedora x86s kernels with bytcr-wm5102 (Marius Hoch)
  - Deleted redhat/configs/fedora/generic/x86/CONFIG_FB_HYPERV (Patrick Lang)
  - rpmspec: correct the ghost initramfs attributes (Herton R. Krzesinski) [1977056]
  - rpmspec: amend removal of depmod created files to include modules.builtin.alias.bin (Herton R. Krzesinski) [1977056]
  - configs: remove duplicate CONFIG_DRM_HYPERV file (Patrick Talbert)
  - CI: use common code for merge and release (Don Zickus)
  - rpmspec: add release string to kernel doc directory name (Jan Stancek)
  - redhat/configs: Add CONFIG_INTEL_PMT_CRASHLOG (Michael Petlan) [1880486]
  - redhat/configs: Add CONFIG_INTEL_PMT_TELEMETRY (Michael Petlan) [1880486]
  - redhat/configs: Add CONFIG_MFD_INTEL_PMT (Michael Petlan) [1880486]
  - redhat/configs: enable CONFIG_BLK_DEV_ZONED (Ming Lei) [1638087]
  - Add --with clang_lto option to build the kernel with Link Time Optimizations (Tom Stellard)
  - common: disable DVB_AV7110 and associated pieces (Peter Robinson)
  - Fix fedora-only config updates (Don Zickus)
  - Fedor config update for new option (Justin M. Forbes)
  - redhat/configs: Enable stmmac NIC for x86_64 (Mark Salter)
  - all: hyperv: use the DRM driver rather than FB (Peter Robinson)
  - all: hyperv: unify the Microsoft HyperV configs (Peter Robinson)
  - all: VMWare: clean up VMWare configs (Peter Robinson)
  - Update CONFIG_ARM_FFA_TRANSPORT (Patrick Talbert)
  - CI: Handle all mirrors (Veronika Kabatova)
  - Turn on CONFIG_STACKTRACE for s390x zfpcdump kernels (Justin M. Forbes)
  - arm64: switch ark kernel to 4K pagesize (Mark Salter)
  - Disable AMIGA_PARTITION and KARMA_PARTITION (Prarit Bhargava) [1802694]
  - all: unify and cleanup i2c TPM2 modules (Peter Robinson)
  - redhat/configs: Set CONFIG_VIRTIO_IOMMU on aarch64 (Eric Auger) [1972795]
  - redhat/configs: Disable CONFIG_RT_GROUP_SCHED in rhel config (Phil Auld)
  - redhat/configs: enable KEXEC_SIG which is already enabled in RHEL8 for s390x and x86_64 (Coiby Xu) [1976835]
  - rpmspec: do not BuildRequires bpftool on noarch (Herton R. Krzesinski)
  - redhat/configs: disable {IMA,EVM}_LOAD_X509 (Bruno Meneguele) [1977529]
  - redhat: add secureboot CA certificate to trusted kernel keyring (Bruno Meneguele)
  - redhat/configs: enable IMA_ARCH_POLICY for aarch64 and s390x (Bruno Meneguele)
  - redhat/configs: Enable CONFIG_MLXBF_GIGE on aarch64 (Alaa Hleihel) [1858599]
  - common: enable STRICT_MODULE_RWX everywhere (Peter Robinson)
  - COMMON_CLK_STM32MP157_SCMI is bool and selects COMMON_CLK_SCMI (Justin M. Forbes)
  - kernel.spec: Add kernel{,-debug}-devel-matched meta packages (Timothée Ravier)
  - Turn off with_selftests for Fedora (Justin M. Forbes)
  - Don't build bpftool on Fedora (Justin M. Forbes)
  - Fix location of syscall scripts for kernel-devel (Justin M. Forbes)
  - fedora: arm: Enable some i.MX8 options (Peter Robinson)
  - Enable Landlock for Fedora (Justin M. Forbes)
  - Filter update for Fedora aarch64 (Justin M. Forbes)
  - rpmspec: only build debug meta packages where we build debug ones (Herton R. Krzesinski)
  - rpmspec: do not BuildRequires bpftool on nobuildarches (Herton R. Krzesinski)
  - redhat/configs: Consolidate CONFIG_HMC_DRV in the common s390x folder (Thomas Huth) [1976270]
  - redhat/configs: Consolidate CONFIG_EXPOLINE_OFF in the common folder (Thomas Huth) [1976270]
  - redhat/configs: Move CONFIG_HW_RANDOM_S390 into the s390x/ subfolder (Thomas Huth) [1976270]
  - redhat/configs: Disable CONFIG_HOTPLUG_PCI_SHPC in the Fedora settings (Thomas Huth) [1976270]
  - redhat/configs: Remove the non-existent CONFIG_NO_BOOTMEM switch (Thomas Huth) [1976270]
  - redhat/configs: Compile the virtio-console as a module on s390x (Thomas Huth) [1976270]
  - redhat/configs: Enable CONFIG_S390_CCW_IOMMU and CONFIG_VFIO_CCW for ARK, too (Thomas Huth) [1976270]
  - Revert "Merge branch 'ec_fips' into 'os-build'" (Vladis Dronov) [1947240]
  - Fix typos in fedora filters (Justin M. Forbes)
  - More filtering for Fedora (Justin M. Forbes)
  - Fix Fedora module filtering for spi-altera-dfl (Justin M. Forbes)
  - Fedora 5.13 config updates (Justin M. Forbes)
  - fedora: cleanup TCG_TIS_I2C_CR50 (Peter Robinson)
  - fedora: drop duplicate configs (Peter Robinson)
  - More Fedora config updates for 5.13 (Justin M. Forbes)
  - redhat/configs: Enable needed drivers for BlueField SoC on aarch64 (Alaa Hleihel) [1858592 1858594 1858596]
  - redhat: Rename mod-blacklist.sh to mod-denylist.sh (Prarit Bhargava)
  - redhat/configs: enable CONFIG_NET_ACT_MPLS (Marcelo Ricardo Leitner)
  - configs: Enable CONFIG_DEBUG_KERNEL for zfcpdump (Jiri Olsa)
  - kernel.spec: Add support to use vmlinux.h (Don Zickus)
  - spec: Add vmlinux.h to kernel-devel package (Jiri Olsa)
  - Turn off DRM_XEN_FRONTEND for Fedora as we had DRM_XEN off already (Justin M. Forbes)
  - Fedora 5.13 config updates pt 3 (Justin M. Forbes)
  - all: enable ath11k wireless modules (Peter Robinson)
  - all: Enable WWAN and associated MHI bus pieces (Peter Robinson)
  - spec: Enable sefltests rpm build (Jiri Olsa)
  - spec: Allow bpf selftest/samples to fail (Jiri Olsa)
  - kvm: Add kvm_stat.service file and kvm_stat logrotate config to the tools (Jiri Benc)
  - kernel.spec: Add missing source files to kernel-selftests-internal (Jiri Benc)
  - kernel.spec: selftests: add net/forwarding to TARGETS list (Jiri Benc)
  - kernel.spec: selftests: add build requirement on libmnl-devel (Jiri Benc)
  - kernel.spec: add action.o to kernel-selftests-internal (Jiri Benc)
  - kernel.spec: avoid building bpftool repeatedly (Jiri Benc)
  - kernel.spec: selftests require python3 (Jiri Benc)
  - kernel.spec: skip selftests that failed to build (Jiri Benc)
  - kernel.spec: fix installation of bpf selftests (Jiri Benc)
  - redhat: fix samples and selftests make options (Jiri Benc)
  - kernel.spec: enable mptcp selftests for kernel-selftests-internal (Jiri Benc)
  - kernel.spec: Do not export shared objects from libexecdir to RPM Provides (Jiri Benc)
  - kernel.spec: add missing dependency for the which package (Jiri Benc)
  - kernel.spec: add netfilter selftests to kernel-selftests-internal (Jiri Benc)
  - kernel.spec: move slabinfo and page_owner_sort debuginfo to tools-debuginfo (Jiri Benc)
  - kernel.spec: package and ship VM tools (Jiri Benc)
  - configs: enable CONFIG_PAGE_OWNER (Jiri Benc)
  - kernel.spec: add coreutils (Jiri Benc)
  - kernel.spec: add netdevsim driver selftests to kernel-selftests-internal (Jiri Benc)
  - redhat/Makefile: Clean out the --without flags from the baseonly rule (Jiri Benc)
  - kernel.spec: Stop building unnecessary rpms for baseonly builds (Jiri Benc)
  - kernel.spec: disable more kabi switches for gcov build (Jiri Benc)
  - kernel.spec: Rename kabi-dw base (Jiri Benc)
  - kernel.spec: Fix error messages during build of zfcpdump kernel (Jiri Benc)
  - kernel.spec: perf: remove bpf examples (Jiri Benc)
  - kernel.spec: selftests should not depend on modules-internal (Jiri Benc)
  - kernel.spec: build samples (Jiri Benc)
  - kernel.spec: tools: sync missing options with RHEL 8 (Jiri Benc)
  - redhat/configs: nftables: Enable extra flowtable symbols (Phil Sutter)
  - redhat/configs: Sync netfilter options with RHEL8 (Phil Sutter)
  - Fedora 5.13 config updates pt 2 (Justin M. Forbes)
  - Move CONFIG_ARCH_INTEL_SOCFPGA up a level for Fedora (Justin M. Forbes)
  - fedora: enable the Rockchip rk3399 pcie drivers (Peter Robinson)
  - Fedora 5.13 config updates pt 1 (Justin M. Forbes)
  - Fix version requirement from opencsd-devel buildreq (Justin M. Forbes)
  - configs/ark/s390: set CONFIG_MARCH_Z14 and CONFIG_TUNE_Z15 (Philipp Rudo) [1876435]
  - configs/common/s390: Clean up CONFIG_{MARCH,TUNE}_Z* (Philipp Rudo)
  - configs/process_configs.sh: make use of dummy-tools (Philipp Rudo)
  - configs/common: disable CONFIG_INIT_STACK_ALL_{PATTERN,ZERO} (Philipp Rudo)
  - configs/common/aarch64: disable CONFIG_RELR (Philipp Rudo)
  - redhat/config: enable STMICRO nic for RHEL (Mark Salter)
  - redhat/configs: Enable ARCH_TEGRA on RHEL (Mark Salter)
  - redhat/configs: enable IMA_KEXEC for supported arches (Bruno Meneguele)
  - redhat/configs: enable INTEGRITY_SIGNATURE to all arches (Bruno Meneguele)
  - configs: enable CONFIG_LEDS_BRIGHTNESS_HW_CHANGED (Benjamin Tissoires)
  - RHEL: disable io_uring support (Jeff Moyer) [1964537]
  - all: Changing CONFIG_UV_SYSFS to build uv_sysfs.ko as a loadable module. (Frank Ramsay)
  - Enable NITRO_ENCLAVES on RHEL (Vitaly Kuznetsov)
  - Update the Quick Start documentation (David Ward)
  - redhat/configs: Set PVPANIC_MMIO for x86 and PVPANIC_PCI for aarch64 (Eric Auger) [1961178]
  - bpf: Fix unprivileged_bpf_disabled setup (Jiri Olsa)
  - Enable CONFIG_BPF_UNPRIV_DEFAULT_OFF (Jiri Olsa)
  - configs/common/s390: disable CONFIG_QETH_{OSN,OSX} (Philipp Rudo) [1903201]
  - nvme: nvme_mpath_init remove multipath check (Mike Snitzer)
  - team: mark team driver as deprecated (Hangbin Liu) [1945477]
  - Make CRYPTO_EC also builtin (Simo Sorce) [1947240]
  - Do not hard-code a default value for DIST (David Ward)
  - Override %{debugbuildsenabled} if the --with-release option is used (David Ward)
  - Improve comments in SPEC file, and move some option tests and macros (David Ward)
  - configs: enable CONFIG_EXFAT_FS (Pavel Reichl) [1943423]
  - Revert s390x/zfcpdump part of a9d179c40281 and ecbfddd98621 (Vladis Dronov)
  - Embed crypto algos, modes and templates needed in the FIPS mode (Vladis Dronov) [1947240]
  - configs: Add and enable CONFIG_HYPERV_TESTING for debug kernels (Mohammed Gamal)
  - mm/cma: mark CMA on x86_64 tech preview and print RHEL-specific infos (David Hildenbrand) [1945002]
  - configs: enable CONFIG_CMA on x86_64 in ARK (David Hildenbrand) [1945002]
  - rpmspec: build debug-* meta-packages if debug builds are disabled (Herton R. Krzesinski)
  - UIO: disable unused config options (Aristeu Rozanski) [1957819]
  - ARK-config: Make amd_pinctrl module builtin (Hans de Goede)
  - rpmspec: revert/drop content hash for kernel-headers (Herton R. Krzesinski)
  - rpmspec: fix check that calls InitBuildVars (Herton R. Krzesinski)
  - fedora: enable zonefs (Damien Le Moal)
  - redhat: load specific ARCH keys to INTEGRITY_PLATFORM_KEYRING (Bruno Meneguele)
  - redhat: enable INTEGRITY_TRUSTED_KEYRING across all variants (Bruno Meneguele)
  - redhat: enable SYSTEM_BLACKLIST_KEYRING across all variants (Bruno Meneguele)
  - redhat: enable INTEGRITY_ASYMMETRIC_KEYS across all variants (Bruno Meneguele)
  - Remove unused boot loader specification files (David Ward)
  - redhat/configs: Enable mlx5 IPsec and TLS offloads (Alaa Hleihel) [1869674 1957636]
  - Force DWARF4 because crash does not support DWARF5 yet (Justin M. Forbes)
  - common: disable Apple Silicon generally (Peter Robinson)
  - cleanup Intel's FPGA configs (Peter Robinson)
  - common: move PTP KVM support from ark to common (Peter Robinson)
  - Enable CONFIG_DRM_AMDGPU_USERPTR for everyone (Justin M. Forbes)
  - redhat: add initial rpminspect configuration (Herton R. Krzesinski)
  - fedora: arm updates for 5.13 (Peter Robinson)
  - fedora: Enable WWAN and associated MHI bits (Peter Robinson)
  - Update CONFIG_MODPROBE_PATH to /usr/sbin (Justin Forbes)
  - Fedora set modprobe path (Justin M. Forbes)
  - Keep sctp and l2tp modules in modules-extra (Don Zickus)
  - Fix ppc64le cross build packaging (Don Zickus)
  - Fedora: Make amd_pinctrl module builtin (Hans de Goede)
  - Keep CONFIG_KASAN_HW_TAGS off for aarch64 debug configs (Justin M. Forbes)
  - New configs in drivers/bus (Fedora Kernel Team)
  - RHEL: Don't build KVM PR module on ppc64 (David Gibson) [1930649]
  - Flip CONFIG_USB_ROLE_SWITCH from m to y (Justin M. Forbes)
  - Set valid options for CONFIG_FW_LOADER_USER_HELPER (Justin M. Forbes)
  - Clean up CONFIG_FB_MODE_HELPERS (Justin M. Forbes)
  - Turn off CONFIG_VFIO for the s390x zfcpdump kernel (Justin M. Forbes)
  - Delete unused CONFIG_SND_SOC_MAX98390 pending-common (Justin M. Forbes)
  - Update pending-common configs, preparing to set correctly (Justin M. Forbes)
  - Update fedora filters for surface (Justin M. Forbes)
  - Build CONFIG_CRYPTO_ECDSA inline for s390x zfcpdump (Justin M. Forbes)
  - Replace "flavour" where "variant" is meant instead (David Ward)
  - Drop the %{variant} macro and fix --with-vanilla (David Ward)
  - Fix syntax of %kernel_variant_files (David Ward)
  - Change description of --without-vdso-install to fix typo (David Ward)
  - Config updates to work around mismatches (Justin M. Forbes)
  - CONFIG_SND_SOC_FSL_ASOC_CARD selects CONFIG_MFD_WM8994 now (Justin M. Forbes)
  - wireguard: disable in FIPS mode (Hangbin Liu) [1940794]
  - Enable mtdram for fedora (rhbz 1955916) (Justin M. Forbes)
  - Remove reference to bpf-helpers man page (Justin M. Forbes)
  - Fedora: enable more modules for surface devices (Dave Olsthoorn)
  - Fix Fedora config mismatch for CONFIG_FSL_ENETC_IERB (Justin M. Forbes)
  - hardlink is in /usr/bin/ now (Justin M. Forbes)
  - Ensure CONFIG_KVM_BOOK3S_64_PR stays on in Fedora, even if it is turned off in RHEL (Justin M. Forbes)
  - Set date in package release from repository commit, not system clock (David Ward)
  - Use a better upstream tarball filename for snapshots (David Ward)
  - Don't create empty pending-common files on pending-fedora commits (Don Zickus)
  - nvme: decouple basic ANA log page re-read support from native multipathing (Mike Snitzer)
  - nvme: allow local retry and proper failover for REQ_FAILFAST_TRANSPORT (Mike Snitzer)
  - nvme: Return BLK_STS_TARGET if the DNR bit is set (Mike Snitzer)
  - Add redhat/configs/pending-common/generic/s390x/zfcpdump/CONFIG_NETFS_SUPPORT (Justin M. Forbes)
  - Create ark-latest branch last for CI scripts (Don Zickus)
  - Replace /usr/libexec/platform-python with /usr/bin/python3 (David Ward)
  - Turn off ADI_AXI_ADC and AD9467 which now require CONFIG_OF (Justin M. Forbes)
  - Export ark infrastructure files (Don Zickus)
  - docs: Update docs to reflect newer workflow. (Don Zickus)
  - Use upstream/master for merge-base with fallback to master (Don Zickus)
  - Fedora: Turn off the SND_INTEL_BYT_PREFER_SOF option (Hans de Goede)
  - filter-modules.sh.fedora: clean up "netprots" (Paul Bolle)
  - filter-modules.sh.fedora: clean up "scsidrvs" (Paul Bolle)
  - filter-*.sh.fedora: clean up "ethdrvs" (Paul Bolle)
  - filter-*.sh.fedora: clean up "driverdirs" (Paul Bolle)
  - filter-*.sh.fedora: remove incorrect entries (Paul Bolle)
  - filter-*.sh.fedora: clean up "singlemods" (Paul Bolle)
  - filter-modules.sh.fedora: drop unused list "iiodrvs" (Paul Bolle)
  - Update mod-internal to fix depmod issue (Nico Pache)
  - Turn on CONFIG_VDPA_SIM_NET (rhbz 1942343) (Justin M. Forbes)
  - New configs in drivers/power (Fedora Kernel Team)
  - Turn on CONFIG_NOUVEAU_DEBUG_PUSH for debug configs (Justin M. Forbes)
  - Turn off KFENCE sampling by default for Fedora (Justin M. Forbes)
  - Fedora config updates round 2 (Justin M. Forbes)
  - New configs in drivers/soc (Jeremy Cline)
  - filter-modules.sh: Fix copy/paste error 'input' (Paul Bolle)
  - Update module filtering for 5.12 kernels (Justin M. Forbes)
  - Fix genlog.py to ensure that comments retain "%" characters. (Mark Mielke)
  - New configs in drivers/leds (Fedora Kernel Team)
  - Limit CONFIG_USB_CDNS_SUPPORT to x86_64 and arm in Fedora (David Ward)
  - Fedora: Enable CHARGER_GPIO on aarch64 too (Peter Robinson)
  - Fedora config updates (Justin M. Forbes)
  - wireguard: mark as Tech Preview (Hangbin Liu) [1613522]
  - configs: enable CONFIG_WIREGUARD in ARK (Hangbin Liu) [1613522]
  - Remove duplicate configs acroos fedora, ark and common (Don Zickus)
  - Combine duplicate configs across ark and fedora into common (Don Zickus)
  - common/ark: cleanup and unify the parport configs (Peter Robinson)
  - iommu/vt-d: enable INTEL_IDXD_SVM for both fedora and rhel (Jerry Snitselaar)
  - REDHAT: coresight: etm4x: Disable coresight on HPE Apollo 70 (Jeremy Linton)
  - configs/common/generic: disable CONFIG_SLAB_MERGE_DEFAULT (Rafael Aquini)
  - Remove _legacy_common_support (Justin M. Forbes)
  - redhat/mod-blacklist.sh: Fix floppy blacklisting (Hans de Goede)
  - New configs in fs/pstore (CKI@GitLab)
  - New configs in arch/powerpc (Fedora Kernel Team)
  - configs: enable BPF LSM on Fedora and ARK (Ondrej Mosnacek)
  - configs: clean up LSM configs (Ondrej Mosnacek)
  - New configs in drivers/platform (CKI@GitLab)
  - New configs in drivers/firmware (CKI@GitLab)
  - New configs in drivers/mailbox (Fedora Kernel Team)
  - New configs in drivers/net/phy (Justin M. Forbes)
  - Update CONFIG_DM_MULTIPATH_IOA (Augusto Caringi)
  - New configs in mm/Kconfig (CKI@GitLab)
  - New configs in arch/powerpc (Jeremy Cline)
  - New configs in arch/powerpc (Jeremy Cline)
  - New configs in drivers/input (Fedora Kernel Team)
  - New configs in net/bluetooth (Justin M. Forbes)
  - New configs in drivers/clk (Fedora Kernel Team)
  - New configs in init/Kconfig (Jeremy Cline)
  - redhat: allow running fedora-configs and rh-configs targets outside of redhat/ (Herton R. Krzesinski)
  - all: unify the disable of goldfish (android emulation platform) (Peter Robinson)
  - common: minor cleanup/de-dupe of dma/dmabuf debug configs (Peter Robinson)
  - common/ark: these drivers/arches were removed in 5.12 (Peter Robinson)
  - Correct kernel-devel make prepare build for 5.12. (Paulo E. Castro)
  - redhat: add initial support for centos stream dist-git sync on Makefiles (Herton R. Krzesinski)
  - redhat/configs: Enable CONFIG_SCHED_STACK_END_CHECK for Fedora and ARK (Josh Poimboeuf) [1856174]
  - CONFIG_VFIO now selects IOMMU_API instead of depending on it, causing several config mismatches for the zfcpdump kernel (Justin M. Forbes)
  - Turn off weak-modules for Fedora (Justin M. Forbes)
  - redhat: enable CONFIG_FW_LOADER_COMPRESS for ARK (Herton R. Krzesinski) [1939095]
  - Fedora: filters: update to move dfl-emif to modules (Peter Robinson)
  - drop duplicate DEVFREQ_GOV_SIMPLE_ONDEMAND config (Peter Robinson)
  - efi: The EFI_VARS is legacy and now x86 only (Peter Robinson)
  - common: enable RTC_SYSTOHC to supplement update_persistent_clock64 (Peter Robinson)
  - generic: arm: enable SCMI for all options (Peter Robinson)
  - fedora: the PCH_CAN driver is x86-32 only (Peter Robinson)
  - common: disable legacy CAN device support (Peter Robinson)
  - common: Enable Microchip MCP251x/MCP251xFD CAN controllers (Peter Robinson)
  - common: Bosch MCAN support for Intel Elkhart Lake (Peter Robinson)
  - common: enable CAN_PEAK_PCIEFD PCI-E driver (Peter Robinson)
  - common: disable CAN_PEAK_PCIEC PCAN-ExpressCard (Peter Robinson)
  - common: enable common CAN layer 2 protocols (Peter Robinson)
  - ark: disable CAN_LEDS option (Peter Robinson)
  - Fedora: Turn on SND_SOC_INTEL_SKYLAKE_HDAUDIO_CODEC option (Hans de Goede)
  - Fedora: enable modules for surface devices (Dave Olsthoorn)
  - Turn on SND_SOC_INTEL_SOUNDWIRE_SOF_MACH for Fedora again (Justin M. Forbes)
  - common: fix WM8804 codec dependencies (Peter Robinson)
  - Build SERIO_SERPORT as a module (Peter Robinson)
  - input: touchscreen: move ELO and Wacom serial touchscreens to x86 (Peter Robinson)
  - Sync serio touchscreens for non x86 architectures to the same as ARK (Peter Robinson)
  - Only enable SERIO_LIBPS2 on x86 (Peter Robinson)
  - Only enable PC keyboard controller and associated keyboard on x86 (Peter Robinson)
  - Generic: Mouse: Tweak generic serial mouse options (Peter Robinson)
  - Only enable PS2 Mouse options on x86 (Peter Robinson)
  - Disable bluetooth highspeed by default (Peter Robinson)
  - Fedora: A few more general updates for 5.12 window (Peter Robinson)
  - Fedora: Updates for 5.12 merge window (Peter Robinson)
  - Fedora: remove dead options that were removed upstream (Peter Robinson)
  - redhat: remove CONFIG_DRM_PANEL_XINGBANGDA_XBD599 (Herton R. Krzesinski)
  - New configs in arch/powerpc (Fedora Kernel Team)
  - Turn on CONFIG_PPC_QUEUED_SPINLOCKS as it is default upstream now (Justin M. Forbes)
  - Update pending-common configs to address new upstream config deps (Justin M. Forbes)
  - rpmspec: ship gpio-watch.debug in the proper debuginfo package (Herton R. Krzesinski)
  - Removed description text as a comment confuses the config generation (Justin M. Forbes)
  - New configs in drivers/dma-buf (Jeremy Cline)
  - Fedora: ARMv7: build for 16 CPUs. (Peter Robinson)
  - Fedora: only enable DEBUG_HIGHMEM on debug kernels (Peter Robinson)
  - process_configs.sh: fix find/xargs data flow (Ondrej Mosnacek)
  - Fedora config update (Justin M. Forbes)
  - fedora: minor arm sound config updates (Peter Robinson)
  - Fix trailing white space in redhat/configs/fedora/generic/CONFIG_SND_INTEL_BYT_PREFER_SOF (Justin M. Forbes)
  - Add a redhat/rebase-notes.txt file (Hans de Goede)
  - Turn on SND_INTEL_BYT_PREFER_SOF for Fedora (Hans de Goede)
  - CI: Drop MR ID from the name variable (Veronika Kabatova)
  - redhat: add DUP and kpatch certificates to system trusted keys for RHEL build (Herton R. Krzesinski)
  - The comments in CONFIG_USB_RTL8153_ECM actually turn off CONFIG_USB_RTL8152 (Justin M. Forbes)
  - Update CKI pipeline project (Veronika Kabatova)
  - Turn off additional KASAN options for Fedora (Justin M. Forbes)
  - Rename the master branch to rawhide for Fedora (Justin M. Forbes)
  - Makefile targets for packit integration (Ben Crocker)
  - Turn off KASAN for rawhide debug builds (Justin M. Forbes)
  - New configs in arch/arm64 (Justin Forbes)
  - Remove deprecated Intel MIC config options (Peter Robinson)
  - redhat: replace inline awk script with genlog.py call (Herton R. Krzesinski)
  - redhat: add genlog.py script (Herton R. Krzesinski)
  - kernel.spec.template - fix use_vdso usage (Ben Crocker)
  - redhat: remove remaining references of CONFIG_RH_DISABLE_DEPRECATED (Herton R. Krzesinski)
  - Turn off vdso_install for ppc (Justin M. Forbes)
  - Remove bpf-helpers.7 from bpftool package (Jiri Olsa)
  - New configs in lib/Kconfig.debug (Fedora Kernel Team)
  - Turn off CONFIG_VIRTIO_CONSOLE for s390x zfcpdump (Justin M. Forbes)
  - New configs in drivers/clk (Justin M. Forbes)
  - Keep VIRTIO_CONSOLE on s390x available. (Jakub Čajka)
  - New configs in lib/Kconfig.debug (Jeremy Cline)
  - Fedora 5.11 config updates part 4 (Justin M. Forbes)
  - Fedora 5.11 config updates part 3 (Justin M. Forbes)
  - Fedora 5.11 config updates part 2 (Justin M. Forbes)
  - Update internal (test) module list from RHEL-8 (Joe Lawrence) [1915073]
  - Fix USB_XHCI_PCI regression (Justin M. Forbes)
  - fedora: fixes for ARMv7 build issue by disabling HIGHPTE (Peter Robinson)
  - all: s390x: Increase CONFIG_PCI_NR_FUNCTIONS to 512 (#1888735) (Dan Horák)
  - Fedora 5.11 configs pt 1 (Justin M. Forbes)
  - redhat: avoid conflict with mod-blacklist.sh and released_kernel defined (Herton R. Krzesinski)
  - redhat: handle certificate files conditionally as done for src.rpm (Herton R. Krzesinski)
  - specfile: add %{?_smp_mflags} to "make headers_install" in tools/testing/selftests (Denys Vlasenko)
  - specfile: add %{?_smp_mflags} to "make samples/bpf/" (Denys Vlasenko)
  - Run MR testing in CKI pipeline (Veronika Kabatova)
  - Reword comment (Nicolas Chauvet)
  - Add with_cross_arm conditional (Nicolas Chauvet)
  - Redefines __strip if with_cross (Nicolas Chauvet)
  - fedora: only enable ACPI_CONFIGFS, ACPI_CUSTOM_METHOD in debug kernels (Peter Robinson)
  - fedora: User the same EFI_CUSTOM_SSDT_OVERLAYS as ARK (Peter Robinson)
  - all: all arches/kernels enable the same DMI options (Peter Robinson)
  - all: move SENSORS_ACPI_POWER to common/generic (Peter Robinson)
  - fedora: PCIE_HISI_ERR is already in common (Peter Robinson)
  - all: all ACPI platforms enable ATA_ACPI so move it to common (Peter Robinson)
  - all: x86: move shared x86 acpi config options to generic (Peter Robinson)
  - All: x86: Move ACPI_VIDEO to common/x86 (Peter Robinson)
  - All: x86: Enable ACPI_DPTF (Intel DPTF) (Peter Robinson)
  - All: enable ACPI_BGRT for all ACPI platforms. (Peter Robinson)
  - All: Only build ACPI_EC_DEBUGFS for debug kernels (Peter Robinson)
  - All: Disable Intel Classmate PC ACPI_CMPC option (Peter Robinson)
  - cleanup: ACPI_PROCFS_POWER was removed upstream (Peter Robinson)
  - All: ACPI: De-dupe the ACPI options that are the same across ark/fedora on x86/arm (Peter Robinson)
  - Enable the vkms module in Fedora (Jeremy Cline)
  - Fedora: arm updates for 5.11 and general cross Fedora cleanups (Peter Robinson)
  - Add gcc-c++ to BuildRequires (Justin M. Forbes)
  - Update CONFIG_KASAN_HW_TAGS (Justin M. Forbes)
  - fedora: arm: move generic power off/reset to all arm (Peter Robinson)
  - fedora: ARMv7: build in DEVFREQ_GOV_SIMPLE_ONDEMAND until I work out why it's changed (Peter Robinson)
  - fedora: cleanup joystick_adc (Peter Robinson)
  - fedora: update some display options (Peter Robinson)
  - fedora: arm: enable TI PRU options (Peter Robinson)
  - fedora: arm: minor exynos plaform updates (Peter Robinson)
  - arm: SoC: disable Toshiba Visconti SoC (Peter Robinson)
  - common: disable ARCH_BCM4908 (NFC) (Peter Robinson)
  - fedora: minor arm config updates (Peter Robinson)
  - fedora: enable Tegra 234 SoC (Peter Robinson)
  - fedora: arm: enable new Hikey 3xx options (Peter Robinson)
  - Fedora: USB updates (Peter Robinson)
  - fedora: enable the GNSS receiver subsystem (Peter Robinson)
  - Remove POWER_AVS as no longer upstream (Peter Robinson)
  - Cleanup RESET_RASPBERRYPI (Peter Robinson)
  - Cleanup GPIO_CDEV_V1 options. (Peter Robinson)
  - fedora: arm crypto updates (Peter Robinson)
  - CONFIG_KASAN_HW_TAGS for aarch64 (Justin M. Forbes)
  - Fedora: cleanup PCMCIA configs, move to x86 (Peter Robinson)
  - New configs in drivers/rtc (Fedora Kernel Team)
  - redhat/configs: Enable CONFIG_GCC_PLUGIN_STRUCTLEAK_BYREF_ALL (Josh Poimboeuf) [1856176]
  - redhat/configs: Enable CONFIG_GCC_PLUGIN_STRUCTLEAK (Josh Poimboeuf) [1856176]
  - redhat/configs: Enable CONFIG_GCC_PLUGINS on ARK (Josh Poimboeuf) [1856176]
  - redhat/configs: Enable CONFIG_KASAN on Fedora (Josh Poimboeuf) [1856176]
  - New configs in init/Kconfig (Fedora Kernel Team)
  - build_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - genspec.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - mod-blacklist.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - Enable Speakup accessibility driver (Justin M. Forbes)
  - New configs in init/Kconfig (Fedora Kernel Team)
  - Fix fedora config mismatch due to dep changes (Justin M. Forbes)
  - New configs in drivers/crypto (Jeremy Cline)
  - Remove duplicate ENERGY_MODEL configs (Peter Robinson)
  - This is selected by PCIE_QCOM so must match (Justin M. Forbes)
  - drop unused BACKLIGHT_GENERIC (Peter Robinson)
  - Remove cp instruction already handled in instruction below. (Paulo E. Castro)
  - Add all the dependencies gleaned from running `make prepare` on a bloated devel kernel. (Paulo E. Castro)
  - Add tools to path mangling script. (Paulo E. Castro)
  - Remove duplicate cp statement which is also not specific to x86. (Paulo E. Castro)
  - Correct orc_types failure whilst running `make prepare` https://bugzilla.redhat.com/show_bug.cgi?id=1882854 (Paulo E. Castro)
  - redhat: ark: enable CONFIG_IKHEADERS (Jiri Olsa)
  - Add missing '$' sign to (GIT) in redhat/Makefile (Augusto Caringi)
  - Remove filterdiff and use native git instead (Don Zickus)
  - New configs in net/sched (Justin M. Forbes)
  - New configs in drivers/mfd (CKI@GitLab)
  - New configs in drivers/mfd (Fedora Kernel Team)
  - New configs in drivers/firmware (Fedora Kernel Team)
  - Temporarily backout parallel xz script (Justin M. Forbes)
  - redhat: explicitly disable CONFIG_IMA_APPRAISE_SIGNED_INIT (Bruno Meneguele)
  - redhat: enable CONFIG_EVM_LOAD_X509 on ARK (Bruno Meneguele)
  - redhat: enable CONFIG_EVM_ATTR_FSUUID on ARK (Bruno Meneguele)
  - redhat: enable CONFIG_EVM in all arches and flavors (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_LOAD_X509 on ARK (Bruno Meneguele)
  - redhat: set CONFIG_IMA_DEFAULT_HASH to SHA256 (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_READ_POLICY on ARK (Bruno Meneguele)
  - redhat: set default IMA template for all ARK arches (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_DEFAULT_HASH_SHA256 for all flavors (Bruno Meneguele)
  - redhat: disable CONFIG_IMA_DEFAULT_HASH_SHA1 (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_ARCH_POLICY for ppc and x86 (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_APPRAISE_MODSIG (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_APPRAISE_BOOTPARAM (Bruno Meneguele)
  - redhat: enable CONFIG_IMA_APPRAISE (Bruno Meneguele)
  - redhat: enable CONFIG_INTEGRITY for aarch64 (Bruno Meneguele)
  - kernel: Update some missing KASAN/KCSAN options (Jeremy Linton)
  - kernel: Enable coresight on aarch64 (Jeremy Linton)
  - Update CONFIG_INET6_ESPINTCP (Justin Forbes)
  - New configs in net/ipv6 (Justin M. Forbes)
  - fedora: move CONFIG_RTC_NVMEM options from ark to common (Peter Robinson)
  - configs: Enable CONFIG_DEBUG_INFO_BTF (Don Zickus)
  - fedora: some minor arm audio config tweaks (Peter Robinson)
  - Ship xpad with default modules on Fedora and RHEL (Bastien Nocera)
  - Fedora: Only enable legacy serial/game port joysticks on x86 (Peter Robinson)
  - Fedora: Enable the options required for the Librem 5 Phone (Peter Robinson)
  - Fedora config update (Justin M. Forbes)
  - Fedora config change because CONFIG_FSL_DPAA2_ETH now selects CONFIG_FSL_XGMAC_MDIO (Justin M. Forbes)
  - redhat: generic  enable CONFIG_INET_MPTCP_DIAG (Davide Caratti)
  - Fedora config update (Justin M. Forbes)
  - Enable NANDSIM for Fedora (Justin M. Forbes)
  - Re-enable CONFIG_ACPI_TABLE_UPGRADE for Fedora since upstream disables this if secureboot is active (Justin M. Forbes)
  - Ath11k related config updates (Justin M. Forbes)
  - Fedora config updates for ath11k (Justin M. Forbes)
  - Turn on ATH11K for Fedora (Justin M. Forbes)
  - redhat: enable CONFIG_INTEL_IOMMU_SVM (Jerry Snitselaar)
  - More Fedora config fixes (Justin M. Forbes)
  - Fedora 5.10 config updates (Justin M. Forbes)
  - Fedora 5.10 configs round 1 (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Allow kernel-tools to build without selftests (Don Zickus)
  - Allow building of kernel-tools standalone (Don Zickus)
  - redhat: ark: disable CONFIG_NET_ACT_CTINFO (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_TEQL (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_SFB (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_QFQ (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_PLUG (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_PIE (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_HHF (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_DSMARK (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_DRR (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_CODEL (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_CHOKE (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_CBQ (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_SCH_ATM (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_EMATCH and sub-targets (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_TCINDEX (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_RSVP6 (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_RSVP (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_ROUTE4 (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_CLS_BASIC (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_ACT_SKBMOD (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_ACT_SIMP (Davide Caratti)
  - redhat: ark: disable CONFIG_NET_ACT_NAT (Davide Caratti)
  - arm64/defconfig: Enable CONFIG_KEXEC_FILE (Bhupesh Sharma) [1821565]
  - redhat/configs: Cleanup CONFIG_CRYPTO_SHA512 (Prarit Bhargava)
  - New configs in drivers/mfd (Fedora Kernel Team)
  - Fix LTO issues with kernel-tools (Don Zickus)
  - Point pathfix to the new location for gen_compile_commands.py (Justin M. Forbes)
  - configs: Disable CONFIG_SECURITY_SELINUX_DISABLE (Ondrej Mosnacek)
  - [Automatic] Handle config dependency changes (Don Zickus)
  - configs/iommu: Add config comment to empty CONFIG_SUN50I_IOMMU file (Jerry Snitselaar)
  - New configs in kernel/trace (Fedora Kernel Team)
  - Fix Fedora config locations (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - configs: enable CONFIG_CRYPTO_CTS=y so cts(cbc(aes)) is available in FIPS mode (Vladis Dronov) [1855161]
  - Partial revert: Add master merge check (Don Zickus)
  - Update Maintainers doc to reflect workflow changes (Don Zickus)
  - WIP: redhat/docs: Update documentation for single branch workflow (Prarit Bhargava)
  - Add CONFIG_ARM64_MTE which is not picked up by the config scripts for some reason (Justin M. Forbes)
  - Disable Speakup synth DECEXT (Justin M. Forbes)
  - Enable Speakup for Fedora since it is out of staging (Justin M. Forbes)
  - Modify patchlist changelog output (Don Zickus)
  - process_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - generate_all_configs.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - redhat/self-test: Initial commit (Ben Crocker)
  - Fixes "acpi: prefer booting with ACPI over DTS" to be RHEL only (Peter Robinson)
  - arch/x86: Remove vendor specific CPU ID checks (Prarit Bhargava)
  - redhat: Replace hardware.redhat.com link in Unsupported message (Prarit Bhargava) [1810301]
  - x86: Fix compile issues with rh_check_supported() (Don Zickus)
  - KEYS: Make use of platform keyring for module signature verify (Robert Holmes)
  - Input: rmi4 - remove the need for artificial IRQ in case of HID (Benjamin Tissoires)
  - ARM: tegra: usb no reset (Peter Robinson)
  - arm: make CONFIG_HIGHPTE optional without CONFIG_EXPERT (Jon Masters)
  - redhat: rh_kabi: deduplication friendly structs (Jiri Benc)
  - redhat: rh_kabi add a comment with warning about RH_KABI_EXCLUDE usage (Jiri Benc)
  - redhat: rh_kabi: introduce RH_KABI_EXTEND_WITH_SIZE (Jiri Benc)
  - redhat: rh_kabi: Indirect EXTEND macros so nesting of other macros will resolve. (Don Dutile)
  - redhat: rh_kabi: Fix RH_KABI_SET_SIZE to use dereference operator (Tony Camuso)
  - redhat: rh_kabi: Add macros to size and extend structs (Prarit Bhargava)
  - Removing Obsolete hba pci-ids from rhel8 (Dick Kennedy) [1572321]
  - mptsas: pci-id table changes (Laura Abbott)
  - mptsas: Taint kernel if mptsas is loaded (Laura Abbott)
  - mptspi: pci-id table changes (Laura Abbott)
  - qla2xxx: Remove PCI IDs of deprecated adapter (Jeremy Cline)
  - be2iscsi: remove unsupported device IDs (Chris Leech) [1574502 1598366]
  - mptspi: Taint kernel if mptspi is loaded (Laura Abbott)
  - hpsa: remove old cciss-based smartarray pci ids (Joseph Szczypek) [1471185]
  - qla4xxx: Remove deprecated PCI IDs from RHEL 8 (Chad Dupuis) [1518874]
  - aacraid: Remove depreciated device and vendor PCI id's (Raghava Aditya Renukunta) [1495307]
  - megaraid_sas: remove deprecated pci-ids (Tomas Henzl) [1509329]
  - mpt*: remove certain deprecated pci-ids (Jeremy Cline)
  - kernel: add SUPPORT_REMOVED kernel taint (Tomas Henzl) [1602033]
  - Rename RH_DISABLE_DEPRECATED to RHEL_DIFFERENCES (Don Zickus)
  - Add option of 13 for FORCE_MAX_ZONEORDER (Peter Robinson)
  - s390: Lock down the kernel when the IPL secure flag is set (Jeremy Cline)
  - efi: Lock down the kernel if booted in secure boot mode (David Howells)
  - efi: Add an EFI_SECURE_BOOT flag to indicate secure boot mode (David Howells)
  - security: lockdown: expose a hook to lock the kernel down (Jeremy Cline)
  - Make get_cert_list() use efi_status_to_str() to print error messages. (Peter Jones)
  - Add efi_status_to_str() and rework efi_status_to_err(). (Peter Jones)
  - Add support for deprecating processors (Laura Abbott) [1565717 1595918 1609604 1610493]
  - arm: aarch64: Drop the EXPERT setting from ARM64_FORCE_52BIT (Jeremy Cline)
  - iommu/arm-smmu: workaround DMA mode issues (Laura Abbott)
  - rh_kabi: introduce RH_KABI_EXCLUDE (Jakub Racek) [1652256]
  - ipmi: do not configure ipmi for HPE m400 (Laura Abbott) [1670017]
  - kABI: Add generic kABI macros to use for kABI workarounds (Myron Stowe) [1546831]
  - add pci_hw_vendor_status() (Maurizio Lombardi) [1590829]
  - ahci: thunderx2: Fix for errata that affects stop engine (Robert Richter) [1563590]
  - Vulcan: AHCI PCI bar fix for Broadcom Vulcan early silicon (Robert Richter) [1563590]
  - bpf: set unprivileged_bpf_disabled to 1 by default, add a boot parameter (Eugene Syromiatnikov) [1561171]
  - add Red Hat-specific taint flags (Eugene Syromiatnikov) [1559877]
  - tags.sh: Ignore redhat/rpm (Jeremy Cline)
  - put RHEL info into generated headers (Laura Abbott) [1663728]
  - acpi: prefer booting with ACPI over DTS (Mark Salter) [1576869]
  - aarch64: acpi scan: Fix regression related to X-Gene UARTs (Mark Salter) [1519554]
  - ACPI / irq: Workaround firmware issue on X-Gene based m400 (Mark Salter) [1519554]
  - modules: add rhelversion MODULE_INFO tag (Laura Abbott)
  - ACPI: APEI: arm64: Ignore broken HPE moonshot APEI support (Al Stone) [1518076]
  - Add Red Hat tainting (Laura Abbott) [1565704 1652266]
  - Introduce CONFIG_RH_DISABLE_DEPRECATED (Laura Abbott)
  - Stop merging ark-patches for release (Don Zickus)
  - Fix path location for ark-update-configs.sh (Don Zickus)
  - Combine Red Hat patches into single patch (Don Zickus)
  - New configs in drivers/misc (Jeremy Cline)
  - New configs in drivers/net/wireless (Justin M. Forbes)
  - New configs in drivers/phy (Fedora Kernel Team)
  - New configs in drivers/tty (Fedora Kernel Team)
  - Set SquashFS decompression options for all flavors to match RHEL (Bohdan Khomutskyi)
  - configs: Enable CONFIG_ENERGY_MODEL (Phil Auld)
  - New configs in drivers/pinctrl (Fedora Kernel Team)
  - Update CONFIG_THERMAL_NETLINK (Justin Forbes)
  - Separate merge-upstream and release stages (Don Zickus)
  - Re-enable CONFIG_IR_SERIAL on Fedora (Prarit Bhargava)
  - Create Patchlist.changelog file (Don Zickus)
  - Filter out upstream commits from changelog (Don Zickus)
  - Merge Upstream script fixes (Don Zickus)
  - kernel.spec: Remove kernel-keys directory on rpm erase (Prarit Bhargava)
  - Add mlx5_vdpa to module filter for Fedora (Justin M. Forbes)
  - Add python3-sphinx_rtd_theme buildreq for docs (Justin M. Forbes)
  - redhat/configs/process_configs.sh: Remove *.config.orig files (Prarit Bhargava)
  - redhat/configs/process_configs.sh: Add process_configs_known_broken flag (Prarit Bhargava)
  - redhat/Makefile: Fix '*-configs' targets (Prarit Bhargava)
  - dist-merge-upstream: Checkout known branch for ci scripts (Don Zickus)
  - kernel.spec: don't override upstream compiler flags for ppc64le (Dan Horák)
  - Fedora config updates (Justin M. Forbes)
  - Fedora confi gupdate (Justin M. Forbes)
  - mod-sign.sh: Fix syntax flagged by shellcheck (Ben Crocker)
  - Swap how ark-latest is built (Don Zickus)
  - Add extra version bump to os-build branch (Don Zickus)
  - dist-release: Avoid needless version bump. (Don Zickus)
  - Add dist-fedora-release target (Don Zickus)
  - Remove redundant code in dist-release (Don Zickus)
  - Makefile.common rename TAG to _TAG (Don Zickus)
  - Fedora config change (Justin M. Forbes)
  - Fedora filter update (Justin M. Forbes)
  - Config update for Fedora (Justin M. Forbes)
  - enable PROTECTED_VIRTUALIZATION_GUEST for all s390x kernels (Dan Horák)
  - redhat: ark: enable CONFIG_NET_SCH_TAPRIO (Davide Caratti)
  - redhat: ark: enable CONFIG_NET_SCH_ETF (Davide Caratti)
  - More Fedora config updates (Justin M. Forbes)
  - New config deps (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - First half of config updates for Fedora (Justin M. Forbes)
  - Updates for Fedora arm architectures for the 5.9 window (Peter Robinson)
  - Merge 5.9 config changes from Peter Robinson (Justin M. Forbes)
  - Add config options that only show up when we prep on arm (Justin M. Forbes)
  - Config updates for Fedora (Justin M. Forbes)
  - fedora: enable enery model (Peter Robinson)
  - Use the configs/generic config for SND_HDA_INTEL everywhere (Peter Robinson)
  - Enable ZSTD compression algorithm on all kernels (Peter Robinson)
  - Enable ARM_SMCCC_SOC_ID on all aarch64 kernels (Peter Robinson)
  - iio: enable LTR-559 light and proximity sensor (Peter Robinson)
  - iio: chemical: enable some popular chemical and partical sensors (Peter Robinson)
  - More mismatches (Justin M. Forbes)
  - Fedora config change due to deps (Justin M. Forbes)
  - CONFIG_SND_SOC_MAX98390 is now selected by SND_SOC_INTEL_DA7219_MAX98357A_GENERIC (Justin M. Forbes)
  - Config change required for build part 2 (Justin M. Forbes)
  - Config change required for build (Justin M. Forbes)
  - Fedora config update (Justin M. Forbes)
  - Add ability to sync upstream through Makefile (Don Zickus)
  - Add master merge check (Don Zickus)
  - Replace hardcoded values 'os-build' and project id with variables (Don Zickus)
  - redhat/Makefile.common: Fix MARKER (Prarit Bhargava)
  - gitattributes: Remove unnecesary export restrictions (Prarit Bhargava)
  - Add new certs for dual signing with boothole (Justin M. Forbes)
  - Update secureboot signing for dual keys (Justin M. Forbes)
  - fedora: enable LEDS_SGM3140 for arm configs (Peter Robinson)
  - Enable CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG (Justin M. Forbes)
  - redhat/configs: Fix common CONFIGs (Prarit Bhargava)
  - redhat/configs: General CONFIG cleanups (Prarit Bhargava)
  - redhat/configs: Update & generalize evaluate_configs (Prarit Bhargava)
  - fedora: arm: Update some meson config options (Peter Robinson)
  - redhat/docs: Add Fedora RPM tagging date (Prarit Bhargava)
  - Update config for renamed panel driver. (Peter Robinson)
  - Enable SERIAL_SC16IS7XX for SPI interfaces (Peter Robinson)
  - s390x-zfcpdump: Handle missing Module.symvers file (Don Zickus)
  - Fedora config updates (Justin M. Forbes)
  - redhat/configs: Add .tmp files to .gitignore (Prarit Bhargava)
  - disable uncommon TCP congestion control algorithms (Davide Caratti)
  - Add new bpf man pages (Justin M. Forbes)
  - Add default option for CONFIG_ARM64_BTI_KERNEL to pending-common so that eln kernels build (Justin M. Forbes)
  - redhat/Makefile: Add fedora-configs and rh-configs make targets (Prarit Bhargava)
  - redhat/configs: Use SHA512 for module signing (Prarit Bhargava)
  - genspec.sh: 'touch' empty Patchlist file for single tarball (Don Zickus)
  - Fedora config update for rc1 (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - redhat/Makefile.common: fix RPMKSUBLEVEL condition (Ondrej Mosnacek)
  - redhat/Makefile: silence KABI tar output (Ondrej Mosnacek)
  - One more Fedora config update (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fix PATCHLEVEL for merge window (Justin M. Forbes)
  - Change ark CONFIG_COMMON_CLK to yes, it is selected already by other options (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - More module filtering for Fedora (Justin M. Forbes)
  - Update filters for rnbd in Fedora (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fix up module filtering for 5.8 (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - More Fedora config work (Justin M. Forbes)
  - RTW88BE and CE have been extracted to their own modules (Justin M. Forbes)
  - Set CONFIG_BLK_INLINE_ENCRYPTION_FALLBACK for Fedora (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Arm64 Use Branch Target Identification for kernel (Justin M. Forbes)
  - Change value of CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE (Justin M. Forbes)
  - Fedora config updates (Justin M. Forbes)
  - Fix configs for Fedora (Justin M. Forbes)
  - Add zero-commit to format-patch options (Justin M. Forbes)
  - Copy Makefile.rhelver as a source file rather than a patch (Jeremy Cline)
  - Move the sed to clear the patch templating outside of conditionals (Justin M. Forbes)
  - Match template format in kernel.spec.template (Justin M. Forbes)
  - Break out the Patches into individual files for dist-git (Justin M. Forbes)
  - Break the Red Hat patch into individual commits (Jeremy Cline)
  - Fix update_scripts.sh unselective pattern sub (David Howells)
  - Add cec to the filter overrides (Justin M. Forbes)
  - Add overrides to filter-modules.sh (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_SMC91X and disable CONFIG_SMC911X (Prarit Bhargava) [1722136]
  - Include bpftool-struct_ops man page in the bpftool package (Jeremy Cline)
  - Add sharedbuffer_configuration.py to the pathfix.py script (Jeremy Cline)
  - Use __make macro instead of make (Tom Stellard)
  - Sign off generated configuration patches (Jeremy Cline)
  - Drop the static path configuration for the Sphinx docs (Jeremy Cline)
  - redhat: Add dummy-module kernel module (Prarit Bhargava)
  - redhat: enable CONFIG_LWTUNNEL_BPF (Jiri Benc)
  - Remove typoed config file aarch64CONFIG_SM_GCC_8150 (Justin M. Forbes)
  - Add Documentation back to kernel-devel as it has Kconfig now (Justin M. Forbes)
  - Copy distro files rather than moving them (Jeremy Cline)
  - kernel.spec: fix 'make scripts' for kernel-devel package (Brian Masney)
  - Makefile: correct help text for dist-cross-<arch>-rpms (Brian Masney)
  - redhat/Makefile: Fix RHEL8 python warning (Prarit Bhargava)
  - redhat: Change Makefile target names to dist- (Prarit Bhargava)
  - configs: Disable Serial IR driver (Prarit Bhargava)
  - Fix "multiple %files for package kernel-tools" (Pablo Greco)
  - Introduce a Sphinx documentation project (Jeremy Cline)
  - Build ARK against ELN (Don Zickus)
  - Drop the requirement to have a remote called linus (Jeremy Cline)
  - Rename 'internal' branch to 'os-build' (Don Zickus)
  - Only include open merge requests with "Include in Releases" label (Jeremy Cline)
  - Package gpio-watch in kernel-tools (Jeremy Cline)
  - Exit non-zero if the tag already exists for a release (Jeremy Cline)
  - Adjust the changelog update script to not push anything (Jeremy Cline)
  - Drop --target noarch from the rh-rpms make target (Jeremy Cline)
  - Add a script to generate release tags and branches (Jeremy Cline)
  - Set CONFIG_VDPA for fedora (Justin M. Forbes)
  - Add a README to the dist-git repository (Jeremy Cline)
  - Provide defaults in ark-rebase-patches.sh (Jeremy Cline)
  - Default ark-rebase-patches.sh to not report issues (Jeremy Cline)
  - Drop DIST from release commits and tags (Jeremy Cline)
  - Place the buildid before the dist in the release (Jeremy Cline)
  - Sync up with Fedora arm configuration prior to merging (Jeremy Cline)
  - Disable CONFIG_PROTECTED_VIRTUALIZATION_GUEST for zfcpdump (Jeremy Cline)
  - Add RHMAINTAINERS file and supporting conf (Don Zickus)
  - Add a script to test if all commits are signed off (Jeremy Cline)
  - Fix make rh-configs-arch (Don Zickus)
  - Drop RH_FEDORA in favor of the now-merged RHEL_DIFFERENCES (Jeremy Cline)
  - Sync up Fedora configs from the first week of the merge window (Jeremy Cline)
  - Migrate blacklisting floppy.ko to mod-blacklist.sh (Don Zickus)
  - kernel packaging: Combine mod-blacklist.sh and mod-extra-blacklist.sh (Don Zickus)
  - kernel packaging: Fix extra namespace collision (Don Zickus)
  - mod-extra.sh: Rename to mod-blacklist.sh (Don Zickus)
  - mod-extra.sh: Make file generic (Don Zickus)
  - Fix a painfully obvious YAML syntax error in .gitlab-ci.yml (Jeremy Cline)
  - Add in armv7hl kernel header support (Don Zickus)
  - Disable all BuildKernel commands when only building headers (Don Zickus)
  - Drop any gitlab-ci patches from ark-patches (Jeremy Cline)
  - Build the srpm for internal branch CI using the vanilla tree (Jeremy Cline)
  - Pull in the latest ARM configurations for Fedora (Jeremy Cline)
  - Fix xz memory usage issue (Neil Horman)
  - Use ark-latest instead of master for update script (Jeremy Cline)
  - Move the CI jobs back into the ARK repository (Jeremy Cline)
  - Sync up ARK's Fedora config with the dist-git repository (Jeremy Cline)
  - Pull in the latest configuration changes from Fedora (Jeremy Cline)
  - configs: enable CONFIG_NET_SCH_CBS (Marcelo Ricardo Leitner)
  - Drop configuration options in fedora/ that no longer exist (Jeremy Cline)
  - Set RH_FEDORA for ARK and Fedora (Jeremy Cline)
  - redhat/kernel.spec: Include the release in the kernel COPYING file (Jeremy Cline)
  - redhat/kernel.spec: add scripts/jobserver-exec to py3_shbang_opts list (Jeremy Cline)
  - redhat/kernel.spec: package bpftool-gen man page (Jeremy Cline)
  - distgit-changelog: handle multiple y-stream BZ numbers (Bruno Meneguele)
  - redhat/kernel.spec: remove all inline comments (Bruno Meneguele)
  - redhat/genspec: awk unknown whitespace regex pattern (Bruno Meneguele)
  - Improve the readability of gen_config_patches.sh (Jeremy Cline)
  - Fix some awkward edge cases in gen_config_patches.sh (Jeremy Cline)
  - Update the CI environment to use Fedora 31 (Jeremy Cline)
  - redhat: drop whitespace from with_gcov macro (Jan Stancek)
  - configs: Enable CONFIG_KEY_DH_OPERATIONS on ARK (Ondrej Mosnacek)
  - configs: Adjust CONFIG_MPLS_ROUTING and CONFIG_MPLS_IPTUNNEL (Laura Abbott)
  - New configs in lib/crypto (Jeremy Cline)
  - New configs in drivers/char (Jeremy Cline)
  - Turn on BLAKE2B for Fedora (Jeremy Cline)
  - kernel.spec.template: Clean up stray *.h.s files (Laura Abbott)
  - Build the SRPM in the CI job (Jeremy Cline)
  - New configs in net/tls (Jeremy Cline)
  - New configs in net/tipc (Jeremy Cline)
  - New configs in lib/kunit (Jeremy Cline)
  - Fix up released_kernel case (Laura Abbott)
  - New configs in lib/Kconfig.debug (Jeremy Cline)
  - New configs in drivers/ptp (Jeremy Cline)
  - New configs in drivers/nvme (Jeremy Cline)
  - New configs in drivers/net/phy (Jeremy Cline)
  - New configs in arch/arm64 (Jeremy Cline)
  - New configs in drivers/crypto (Jeremy Cline)
  - New configs in crypto/Kconfig (Jeremy Cline)
  - Add label so the Gitlab to email bridge ignores the changelog (Jeremy Cline)
  - Temporarily switch TUNE_DEFAULT to y (Jeremy Cline)
  - Run config test for merge requests and internal (Jeremy Cline)
  - Add missing licensedir line (Laura Abbott)
  - redhat/scripts: Remove redhat/scripts/rh_get_maintainer.pl (Prarit Bhargava)
  - configs: Take CONFIG_DEFAULT_MMAP_MIN_ADDR from Fedra (Laura Abbott)
  - configs: Turn off ISDN (Laura Abbott)
  - Add a script to generate configuration patches (Laura Abbott)
  - Introduce rh-configs-commit (Laura Abbott)
  - kernel-packaging: Remove kernel files from kernel-modules-extra package (Prarit Bhargava)
  - configs: Enable CONFIG_DEBUG_WX (Laura Abbott)
  - configs: Disable wireless USB (Laura Abbott)
  - Clean up some temporary config files (Laura Abbott)
  - configs: New config in drivers/gpu for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/powerpc for v5.4-rc1 (Jeremy Cline)
  - configs: New config in crypto for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/usb for v5.4-rc1 (Jeremy Cline)
  - AUTOMATIC: New configs (Jeremy Cline)
  - Skip ksamples for bpf, they are broken (Jeremy Cline)
  - configs: New config in fs/erofs for v5.4-rc1 (Jeremy Cline)
  - configs: New config in mm for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/md for v5.4-rc1 (Jeremy Cline)
  - configs: New config in init for v5.4-rc1 (Jeremy Cline)
  - configs: New config in fs/fuse for v5.4-rc1 (Jeremy Cline)
  - merge.pl: Avoid comments but do not skip them (Don Zickus)
  - configs: New config in drivers/net/ethernet/pensando for v5.4-rc1 (Jeremy Cline)
  - Update a comment about what released kernel means (Laura Abbott)
  - Provide both Fedora and RHEL files in the SRPM (Laura Abbott)
  - kernel.spec.template: Trim EXTRAVERSION in the Makefile (Laura Abbott)
  - kernel.spec.template: Add macros for building with nopatches (Laura Abbott)
  - kernel.spec.template: Add some macros for Fedora differences (Laura Abbott)
  - kernel.spec.template: Consolodate the options (Laura Abbott)
  - configs: Add pending direcory to Fedora (Laura Abbott)
  - kernel.spec.template: Don't run hardlink if rpm-ostree is in use (Laura Abbott)
  - configs: New config in net/can for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/phy for v5.4-rc1 (Jeremy Cline)
  - configs: Increase x86_64 NR_UARTS to 64 (Prarit Bhargava) [1730649]
  - configs: turn on ARM64_FORCE_52BIT for debug builds (Jeremy Cline)
  - kernel.spec.template: Tweak the python3 mangling (Laura Abbott)
  - kernel.spec.template: Add --with verbose option (Laura Abbott)
  - kernel.spec.template: Switch to using %install instead of %__install (Laura Abbott)
  - kernel.spec.template: Make the kernel.org URL https (Laura Abbott)
  - kernel.spec.template: Update message about secure boot signing (Laura Abbott)
  - kernel.spec.template: Move some with flags definitions up (Laura Abbott)
  - kernel.spec.template: Update some BuildRequires (Laura Abbott)
  - kernel.spec.template: Get rid of %clean (Laura Abbott)
  - configs: New config in drivers/char for v5.4-rc1 (Jeremy Cline)
  - configs: New config in net/sched for v5.4-rc1 (Jeremy Cline)
  - configs: New config in lib for v5.4-rc1 (Jeremy Cline)
  - configs: New config in fs/verity for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/aarch64 for v5.4-rc4 (Jeremy Cline)
  - configs: New config in arch/arm64 for v5.4-rc1 (Jeremy Cline)
  - Flip off CONFIG_ARM64_VA_BITS_52 so the bundle that turns it on applies (Jeremy Cline)
  - New configuration options for v5.4-rc4 (Jeremy Cline)
  - Correctly name tarball for single tarball builds (Laura Abbott)
  - configs: New config in drivers/pci for v5.4-rc1 (Jeremy Cline)
  - Allow overriding the dist tag on the command line (Laura Abbott)
  - Allow scratch branch target to be overridden (Laura Abbott)
  - Remove long dead BUILD_DEFAULT_TARGET (Laura Abbott)
  - Amend the changelog when rebasing (Laura Abbott)
  - configs: New config in drivers/platform for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/pinctrl for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/wireless for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/ethernet/mellanox for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/net/can for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/hid for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/dma-buf for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/crypto for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/s390 for v5.4-rc1 (Jeremy Cline)
  - configs: New config in block for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/cpuidle for v5.4-rc1 (Jeremy Cline)
  - redhat: configs: Split CONFIG_CRYPTO_SHA512 (Laura Abbott)
  - redhat: Set Fedora options (Laura Abbott)
  - Set CRYPTO_SHA3_*_S390 to builtin on zfcpdump (Jeremy Cline)
  - configs: New config in drivers/edac for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/firmware for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/hwmon for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/iio for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/mmc for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/tty for v5.4-rc1 (Jeremy Cline)
  - configs: New config in arch/s390 for v5.4-rc1 (Jeremy Cline)
  - configs: New config in drivers/bus for v5.4-rc1 (Jeremy Cline)
  - Add option to allow mismatched configs on the command line (Laura Abbott)
  - configs: New config in drivers/crypto for v5.4-rc1 (Jeremy Cline)
  - configs: New config in sound/pci for v5.4-rc1 (Jeremy Cline)
  - configs: New config in sound/soc for v5.4-rc1 (Jeremy Cline)
  - gitlab: Add CI job for packaging scripts (Major Hayden)
  - Speed up CI with CKI image (Major Hayden)
  - Disable e1000 driver in ARK (Neil Horman)
  - configs: Fix the pending default for CONFIG_ARM64_VA_BITS_52 (Jeremy Cline)
  - configs: Turn on OPTIMIZE_INLINING for everything (Jeremy Cline)
  - configs: Set valid pending defaults for CRYPTO_ESSIV (Jeremy Cline)
  - Add an initial CI configuration for the internal branch (Jeremy Cline)
  - New drop of configuration options for v5.4-rc1 (Jeremy Cline)
  - New drop of configuration options for v5.4-rc1 (Jeremy Cline)
  - Pull the RHEL version defines out of the Makefile (Jeremy Cline)
  - Sync up the ARK build scripts (Jeremy Cline)
  - Sync up the Fedora Rawhide configs (Jeremy Cline)
  - Sync up the ARK config files (Jeremy Cline)
  - configs: Adjust CONFIG_FORCE_MAX_ZONEORDER for Fedora (Laura Abbott)
  - configs: Add README for some other arches (Laura Abbott)
  - configs: Sync up Fedora configs (Laura Abbott)
  - [initial commit] Add structure for building with git (Laura Abbott)
  - [initial commit] Add Red Hat variables in the top level makefile (Laura Abbott)
  - [initial commit] Red Hat gitignore and attributes (Laura Abbott)
  - [initial commit] Add changelog (Laura Abbott)
  - [initial commit] Add makefile (Laura Abbott)
  - [initial commit] Add files for generating the kernel.spec (Laura Abbott)
  - [initial commit] Add rpm directory (Laura Abbott)
  - [initial commit] Add files for packaging (Laura Abbott)
  - [initial commit] Add kabi files (Laura Abbott)
  - [initial commit] Add scripts (Laura Abbott)
  - [initial commit] Add configs (Laura Abbott)
  - [initial commit] Add Makefiles (Laura Abbott)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.0.0-0.rc1.3cc40a443a04.13]
changelog:
  - redhat/Makefile: Clean linux tarballs (Prarit Bhargava)
  - redhat/configs: Cleanup CONFIG_ACPI_AGDI (Prarit Bhargava)
  - spec: add cpupower daemon reload on install/upgrade (Jarod Wilson)
  - redhat: properly handle binary files in patches (Ondrej Mosnacek)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.0.0-0.rc1.50cd95ac4654.17]
changelog:
  - redhat/docs: Add dist-brew BUILD_FLAGS information (Prarit Bhargava)
  - redhat: change the changelog item for upstream merges (Herton R. Krzesinski)
  - redhat: fix dist-release build number test (Herton R. Krzesinski)
  - redhat: fix release number bump when dist-release-changed runs (Herton R. Krzesinski)
  - redhat: use new genlog.sh script to detect changes for dist-release (Herton R. Krzesinski)
  - redhat: move changelog addition to the spec file back into genspec.sh (Herton R. Krzesinski)
  - redhat: always add a rebase entry when ark merges from upstream (Herton R. Krzesinski)
  - redhat: drop merge ark patches hack (Herton R. Krzesinski)
  - redhat: don't hardcode temporary changelog file (Herton R. Krzesinski)
  - redhat: split changelog generation from genspec.sh (Herton R. Krzesinski)
  - Linux v6.0.0-0.rc1.50cd95ac4654


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.2.0-0.rc8.f6feea56f66d.57]
changelog:
  - redhat/configs: update scripts and docs for ark -> rhel rename (Clark Williams)
  - redhat/configs: rename ark configs dir to rhel (Clark Williams)
  - Turn off CONFIG_DEBUG_INFO_COMPRESSED_ZLIB for ppc64le (Justin M. Forbes)
  - kernel.spec: package unstripped kselftests/bpf/test_progs (Jan Stancek)
  - kernel.spec: allow to package some binaries as unstripped (Jan Stancek)
  - redhat/configs: Make merge.py portable for older python (Desnes Nunes)
  - Linux v6.2.0-0.rc8.f6feea56f66d


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.2.0-0.rc8.e1c04510f521.58]
changelog:
  - Consolidate common configs for 6.2 (Justin M. Forbes)
  - aarch64: enable zboot (Gerd Hoffmann)
  - redhat: remove duplicate pending-rhel config items (Patrick Talbert)
  - Disable frame pointers (Justin M. Forbes)
  - Linux v6.2.0-0.rc8.e1c04510f521


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.2.0-0.rc8.033c40a89f55.59]
changelog:
  - Fix underline mark-up after text change (Justin M. Forbes)
  - Turn on CONFIG_XFS_RT for Fedora (Justin M. Forbes)
  - Linux v6.2.0-0.rc8.033c40a89f55


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.1-0]
changelog:
  - Add UKI revert patch to allow builds on F36 and F37 (Justin M. Forbes)
  - Turn E1000 back on (Justin M. Forbes)
  - More files for stable Fedora (Justin M. Forbes)
  - Update Makefile.variables for stable releases (Justin M. Forbes)
  - drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set (Javier Martinez Canillas)
  - enable efifb for Nvidia (Justin M. Forbes)
  - Fix up configs for dropped patches (Justin M. Forbes)
  - Reset RHEL_RELEASE to 0 for the 6.3 cycle (Justin M. Forbes)
  - redhat/configs: Enable CONFIG_V4L_TEST_DRIVERS related drivers (Enric Balletbo i Serra)
  - Linux v6.2.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.2-1]
changelog:
  - Bump for rebuild (Justin M. Forbes)
  - iommu/amd: Do not identity map v2 capable device when snp is enabled (Vasant Hegde)
  - iommu: Attach device group to old domain in error path (Vasant Hegde)
  - iommu/amd: Improve page fault error reporting (Vasant Hegde)
  - iommu/amd: Skip attach device domain is same as new domain (Vasant Hegde)
  - iommu/amd: Fix error handling for pdev_pri_ats_enable() (Vasant Hegde)
  - redhat/kernel.spec.template: Fix RHEL systemd-boot-unsigned dependency (Prarit Bhargava)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.3-0]
changelog:
  - Add new config option for 6.2.3 (Justin M. Forbes)
  - Only build the efiuki for F37 and newer (Justin M. Forbes)
  - Reset release (Justin M. Forbes)
  - Linux v6.2.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.5-0]
changelog:
  - Revert "wifi: cfg80211: Fix use after free for wext" (Justin M. Forbes)
  - Fix up buildReqs for UKI (Justin M. Forbes)
  - Linux v6.2.5


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.6-0]
changelog:
  - Add Fedora 37 and 36 to release targets (Justin M. Forbes)
  - wifi: cfg80211: Fix use after free for wext (Alexander Wetzel)
  - Drop the applypatches for f37 (Justin M. Forbes)
  - Linux v6.2.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.7-0]
changelog:
  - NFS: Correct timing for assigning access cache timestamp (Chengen Du)
  - usb: ucsi: Fix ucsi->connector race (Hans de Goede)
  - usb: ucsi_acpi: Increase the command completion timeout (Hans de Goede)
  - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (Hans de Goede)
  - Enable CONFIG_NET_SCH_FQ_PIE for Fedora (Justin M. Forbes)
  - Fix build issue with efiuki conditional (Justin M. Forbes)
  - Move endif to correct location for efiuki conditional (Justin M. Forbes)
  - EFI UKI revert now conditionalized in spec. Drop revert (Justin M. Forbes)
  - Linux v6.2.7


author: Augusto Caringi <acaringi@redhat.com> [6.2.8-0]
changelog:
  - Add new config option for 6.2.8 (Augusto Caringi)
  - Revert "usb: xhci-pci: Set PROBE_PREFER_ASYNCHRONOUS" (Kate Hsuan)
  - Linux v6.2.8


author: Augusto Caringi <acaringi@redhat.com> [6.2.9-0]
changelog:
  - Add bug numbers from recent MRs (Justin M. Forbes)
  - net: wwan: iosm: fixes 7560 modem crash (M Chetan Kumar)
  - Input: alps - fix compatibility with -funsigned-char (msizanoen)
  - Input: focaltech - use explicitly signed char type (Jason A. Donenfeld)
  - drm/nouveau/kms: Fix backlight registration (Hans de Goede)
  - Add bugs addressed so far for the 6.2.9 build (Justin M. Forbes)
  - btrfs: fix race between quota disable and quota assign ioctls (Filipe Manana)
  - redhat/configs: Enable CONFIG_SND_SOC_CS42L83 (Neal Gompa)
  - Add patch to turn off EFI_ZBOOT for Fedora 36 (Justin M. Forbes)
  - Linux v6.2.9


author: Augusto Caringi <acaringi@redhat.com> [6.2.10-0]
changelog:
  - fedora: arm: Enable DRM_PANEL_HIMAX_HX8394 (Peter Robinson)
  - arm64: dts: rk3399-pinephone-pro: Add touchscreen support (Martijn Braam)
  - arm64: dts: rk3399-pinephone-pro: Add internal display support (Martijn Braam)
  - drm: panel: Add Himax HX8394 panel controller driver (Kamil Trzciński)
  - dt-bindings: display: Add Himax HX8394 panel controller (Javier Martinez Canillas)
  - Fix up revert patch for F36 zboot (Justin M. Forbes)
  - Linux v6.2.10


author: Augusto Caringi <acaringi@redhat.com> [6.2.12-0]
changelog:
  - Add bugs fixed by 6.2.12 (Justin M. Forbes)
  - Use RHJOBS for create-tarball (Don Zickus)
  - Linux v6.2.12


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.2.15-0]
changelog:
  - redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV2740 for x86 platform (Kate Hsuan)
  - Add Bugs to be fixed in 6.2.15 (Justin M. Forbes)
  - xfs: verify buffer contents when we skip log replay (Darrick J. Wong)
  - Linux v6.2.15


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.3.2-0]
changelog:
  - redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV2740 for x86 platform (Kate Hsuan)
  - Add BugsFixed for 6.3 (Justin M. Forbes)
  - xfs: verify buffer contents when we skip log replay (Darrick J. Wong)
  - Fix up buildReqs for UKI (Justin M. Forbes)
  - Linux v6.3.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.3.3-0]
changelog:
  - [PATCH] ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (Mark Pearson) [2203317]
  - Linux v6.3.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.3.4-0]
changelog:
  - Revert "Turn off DEBUG_VM for non debug Fedora kernels" (Justin M. Forbes)
  - Turn off DEBUG_VM for non debug Fedora kernels (Justin M. Forbes)
  - Fix up some Fedora config items (Justin M. Forbes)
  - enable efifb for Nvidia (Justin M. Forbes)
  - Turn on NFT_CONNLIMIT for Fedora (Justin M. Forbes)
  - Linux v6.3.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.3.4-1]
changelog:
  - Bump rhelver for build with xfs fix (Justin M. Forbes)
  - xfs: fix livelock in delayed allocation at ENOSPC (Dave Chinner)
  - Turn off some debug options found to impact performance (Justin M. Forbes)


author: Augusto Caringi <acaringi@redhat.com> [6.3.6-0]
changelog:
  - Add the nvidia bug to BugsFixed (Justin M. Forbes)
  - drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set (Javier Martinez Canillas)
  - Linux v6.3.6


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.3.7-0]
changelog:
  - redhat/configs: Enable CONFIG_SC_GPUCC_8280XP for fedora (Andrew Halaney)
  - redhat/configs: Enable CONFIG_QCOM_IPCC for fedora (Andrew Halaney)
  - Linux v6.3.7


author: Augusto Caringi <acaringi@redhat.com> [6.3.8-0]
changelog:
  - usb: typec: ucsi: Fix command cancellation (Heikki Krogerus)
  - Add a CVE to BugsFixed (Justin M. Forbes)
  - Linux v6.3.8


author: Augusto Caringi <acaringi@redhat.com> [6.3.9-0]
changelog:
  - Turn on CONFIG_RMNET for Fedora (Justin M. Forbes)
  - redhat/config: common: Enable CONFIG_GPIO_SIM for software development (Kate Hsuan)
  - Add the MT7922 Bluetooth bug to BugsFixed (Augusto Caringi)
  - Bluetooth: Add VID/PID 0489/e0e4 for MediaTek MT7922 (Meng Tang)
  - Linux v6.3.9


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.3.1-0]
changelog:
  - Set up variables and scripts for Fedora stable (Justin M. Forbes)
  - remove invalid rhel io_uring config (Justin M. Forbes)
  - Turn E1000 back on (Justin M. Forbes)
  - Reset RHEL_RELEASE for the 6.4 cycle (Justin M. Forbes)
  - Fix up the RHEL configs for xtables and ipset (Justin M. Forbes)
  - ark: enable wifi on aarch64 (Íñigo Huguet)
  - fedora: wifi: hermes: disable 802.11b driver (Peter Robinson)
  - fedora: wifi: libertas: use the LIBERTAS_THINFIRM driver (Peter Robinson)
  - fedora: wifi: disable Zydas vendor (Peter Robinson)
  - redhat: fix python ValueError in error path of merge.py (Clark Williams)
  - fedora: arm: minor updates (Peter Robinson)
  - Linux v6.3.1


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.4.0-59]
changelog:
  - redhat/kernel.spec.template: Disable 'extracting debug info' messages (Prarit Bhargava)
  - kernel/rh_messages.c: Another gcc12 warning on redundant NULL test (Florian Weimer) [2216678]
  - redhat: fix signing for realtime and arm64_64k non-debug variants (Jan Stancek)
  - redhat: treat with_up consistently (Jan Stancek)
  - redhat: make with_realtime opt-in (Jan Stancek)
  - Linux v6.4.0


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.1-0]
changelog:
  - drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set (Javier Martinez Canillas)
  - Turn E1000 back on (Justin M. Forbes)
  - Set up variables and scripts for Fedora stable (Justin M. Forbes)
  - Linux v6.4.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.3-0]
changelog:
  - drm/amd: Don't try to enable secure display TA multiple times (Mario Limonciello)
  - drm/amdgpu: fix number of fence calculations (Christian König)
  - drm/amdgpu: check RAS irq existence for VCN/JPEG (Tao Zhou)
  - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (Kenneth Feng)
  - drm/amdgpu/sdma4: set align mask to 255 (Alex Deucher)
  - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (Evan Quan)
  - drm/amdgpu: Skip mark offset for high priority rings (Jiadong Zhu)
  - drm/amdgpu: make sure that BOs have a backing store (Christian König)
  - drm/amdgpu: make sure BOs are locked in amdgpu_vm_get_memory (Christian König)
  - Linux 6.4.3 (Greg Kroah-Hartman)
  - fork: lock VMAs of the parent process when forking (Suren Baghdasaryan)
  - bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page (Liu Shixin)
  - mm: call arch_swap_restore() from do_swap_page() (Peter Collingbourne)
  - mm: lock newly mapped VMA with corrected ordering (Hugh Dickins)
  - mm: lock newly mapped VMA which can be modified after it becomes visible (Suren Baghdasaryan)
  - mm: lock a vma before stack expansion (Suren Baghdasaryan)
  - fedora: arm: some minor updates (Peter Robinson)
  - fedora: bluetooth: enable AOSP extensions (Peter Robinson)
  - Fix up buildReqs for UKI (Justin M. Forbes)
  - mm: disable CONFIG_PER_VMA_LOCK until its fixed (Suren Baghdasaryan)
  - fork: lock VMAs of the parent process when forking (Suren Baghdasaryan)
  - Turn on NET_VENDOR_QUALCOMM so that rmnet builds (Justin M. Forbes)
  - Fix missing rhel config (Justin M. Forbes)
  - Linux v6.4.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.4-0]
changelog:
  - move ownership of /lib/modules/<ver>/ to kernel-core (Thorsten Leemhuis)
  - Let kernel-modules-core own the files depmod generates. (Thorsten Leemhuis)
  - Add more bugs fixed in 6.4.4 (Justin M. Forbes)
  - Add some bugs to be fixed in 6.4.4 (Justin M. Forbes)
  - Add kunit configs for 6.4.4 (Justin M. Forbes)
  - Add hid-uclogic-test to mod-internal.list (Thorsten Leemhuis)
  - Add input_test to mod-intenal.list (Thorsten Leemhuis)
  - fedora: wifi: tweak ZYDAS WiFI config options (Peter Robinson)
  - Fix module filters for aarch64 and ppc (Justin M. Forbes)
  - Fix up some config mismatches (Justin M. Forbes)
  - Linux v6.4.4


author: Augusto Caringi <acaringi@redhat.com> [6.4.6-0]
changelog:
  - Change pathfix.py to %py3_shebang_fix (Justin M. Forbes)
  - Add config option coming to a stable update soon (Justin M. Forbes)
  - Linux v6.4.6


author: Augusto Caringi <acaringi@redhat.com> [6.4.8-0]
changelog:
  - redhat: configs: Disable CONFIG_CRYPTO_STATS since performance issue for storage (Kate Hsuan) [2227793]
  - Linux v6.4.8


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.9-0]
changelog:
  - Config updates for 6.4.9 (Justin M. Forbes)
  - Update BugsFixed for 6.4.9 (Justin M. Forbes)
  - Add some BugsFixed for the 6.4.9 update (Justin M. Forbes)
  - ACPI: resource: revert "Remove "Zen" specific match and quirks" (Hans de Goede)
  - arm: i.MX: Some minor NXP i.MX cleanups (Peter Robinson)
  - Linux v6.4.9


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.10-0]
changelog:
  - More security bug fixes for 6.4.10 (Justin M. Forbes)
  - KVM: SEV: remove ghcb variable declarations (Paolo Bonzini)
  - KVM: SEV: only access GHCB fields once (Paolo Bonzini)
  - KVM: SEV: snapshot the GHCB before accessing it (Paolo Bonzini)
  - Add another bug fixed by the 6.4.10 release (Justin M. Forbes)
  - drm/amd/display: Fix a regression on Polaris cards (Mario Limonciello)
  - redhat/configs: Remove `CONFIG_HZ_1000 is not set` for aarch64 (Enric Balletbo i Serra)
  - Add new CVEs fixed in 6.4.9 to BugsFixed (Justin M. Forbes)
  - Linux v6.4.10


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.11-0]
changelog:
  - Add more bugfixes for 6.4.11 (Justin M. Forbes)
  - Turn off DMABUF_SYSFS_STATS (Justin M. Forbes)
  - Revert "KVM: SEV: remove ghcb variable declarations" (Justin M. Forbes)
  - Add bug fixed for 6.4.11 (Justin M. Forbes)
  - redhat: Add arm64-16k kernel flavor scaffold for 16K page-size'd AArch64 (Neal Gompa)
  - Linux v6.4.11


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.12-0]
changelog:
  - ASoC: SOF: intel: hda: Clean up link DMA for IPC3 during stop (Ranjani Sridharan)
  - Make sure posttrans script doesn't fail if restorecon is not installed (Daan De Meyer)
  - Linux v6.4.12


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.4.14-0]
changelog:
  - Add bug fixed by 6.4.14 (Justin M. Forbes)
  - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)
  - Linux v6.4.14


author: Augusto Caringi <acaringi@redhat.com> [6.4.15-0]
changelog:
  - Add TPM bug to BugsFixed (Justin M. Forbes)
  - tpm: Enable hwrng only for Pluton on AMD CPUs (Jarkko Sakkinen)
  - Linux v6.4.15


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.4.0-0.rc7.e660abd551f1.55]
changelog:
  - redhat/configs: enable CONFIG_MANA_INFINIBAND=m for ARK (Vitaly Kuznetsov)
  - redhat/config: common: Enable CONFIG_GPIO_SIM for software development (Kate Hsuan)
  - redhat: fix problem with RT kvm modules listed twice in rpm generation (Clark Williams)
  - redhat: turn off 64k kernel builds with rtonly (Clark Williams)
  - redhat: turn off zfcpdump for rtonly (Clark Williams)
  - redhat: don't allow with_rtonly to turn on unsupported arches (Clark Williams)
  - redhat: update self-test data for addition of RT and 64k-page variants (Clark Williams)
  - redhat: fix realtime and efiuki build conflict (Jan Stancek)
  - arm64-64k: Add new kernel variant to RHEL9/CS9 for 64K page-size'd ARM64 (Donald Dutile) [2153073]
  - redhat: TEMPORARY set configs to deal with PREEMPT_RT not available (Clark Williams)
  - redhat: TEMPORARY default realtime to off (Clark Williams)
  - redhat: moved ARM errata configs to arm dir (Clark Williams)
  - redhat: RT packaging changes (Clark Williams)
  - redhat: miscellaneous commits needed due to CONFIG_EXPERT (Clark Williams)
  - redhat: realtime config entries (Clark Williams)
  - Linux v6.4.0-0.rc7.e660abd551f1


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.4.0-0.rc7.dad9774deaf1.56]
changelog:
  - kernel.spec: drop obsolete ldconfig (Jan Stancek)
  - Consolidate config items to common for 6.4 cycle (Justin M. Forbes)
  - Turn on CO?NFIg_RMNET for Fedora (Justin M. Forbes)
  - Linux v6.4.0-0.rc7.dad9774deaf1


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.4.0-0.rc7.8a28a0b6f1a1.57]
changelog:
  - redhat/configs: Disable qcom armv7 drippings in the aarch64 tree (Jeremy Linton)
  - Linux v6.4.0-0.rc7.8a28a0b6f1a1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.5.1-0]
changelog:
  - erofs: ensure that the post-EOF tails are all zeroed (Gao Xiang)
  - Add bug to BugsFixed (Justin M. Forbes)
  - Turn off CONFIG_MEMORY_HOTPLUG_DEFAULT_ONLINE for Fedora s390x (Justin M. Forbes)
  - drm/msm/a690: Switch to a660_gmu.bin (Rob Clark)
  - drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set (Javier Martinez Canillas)
  - Turn E1000 back on (Justin M. Forbes)
  - Set up variables and scripts for Fedora stable (Justin M. Forbes)
  - Update self-test data (Justin M. Forbes)
  - all: x86: move wayward x86 specific config home (Peter Robinson)
  - all: de-dupe non standard config options (Peter Robinson)
  - all: x86: clean up microcode loading options (Peter Robinson)
  - common: remove unnessary CONFIG_SND_MESON_AXG* (Peter Robinson)
  - Linux v6.5.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.5.2-0]
changelog:
  - Move squashfs to kernel-modules-core (Justin M. Forbes)
  - Add TPM bug to BugsFixed (Justin M. Forbes)
  - tpm: Enable hwrng only for Pluton on AMD CPUs (Jarkko Sakkinen)
  - Linux v6.5.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.5.3-0]
changelog:
  - Revert "misc: rtsx: judge ASPM Mode to set PETXCFG Reg" (Justin M. Forbes)
  - Config updates for 6.5.3 (Justin M. Forbes)
  - Fix up buildReqs for UKI (Justin M. Forbes)
  - Linux v6.5.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.5.4-0]
changelog:
  - Add F38 and F37 as release targets (Justin M. Forbes)
  - Add NFS bug fix for 6.5.4 (Justin M. Forbes)
  - selinux: fix handling of empty opts in selinux_fs_context_submount() (Ondrej Mosnacek)
  - Turn off appletalk for fedora (Justin M. Forbes)
  - Linux v6.5.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.5.5-0]
changelog:
  - iommu/apple-dart: Handle DMA_FQ domains in attach_dev() (Hector Martin)
  - Note fix for atomic locking in BugsFixed (Justin M. Forbes)
  - locking/atomic: scripts: fix fallback ifdeffery (Mark Rutland)
  - redhat: spec: Fix typo for kernel_variant_preun for 16k-debug flavor (Neal Gompa)
  - Fix installreq for UKI (Justin M. Forbes)
  - Add btrfs bug to BugsFixed for 6.5.5 (Justin M. Forbes)
  - btrfs: adjust overcommit logic when very close to full (Josef Bacik)
  - btrfs: properly report 0 avail for very full file systems (Josef Bacik)
  - Linux v6.5.5


author: Augusto Caringi <acaringi@redhat.com> [6.5.6-0]
changelog:
  - power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint (Kai-Heng Feng)
  - Revert "Add linux-next specific files for 20231004" (Justin M. Forbes)
  - redhat/configs: enable missing Kconfig options for Qualcomm RideSX4 (Brian Masney)
  - add a couple of CVEs to BugsFixed (Justin M. Forbes)
  - Add another F39 FE bug to BugsFixed (Justin M. Forbes)
  - Add linux-next specific files for 20231004 (Stephen Rothwell)
  - common: aarch64: enable NXP Flex SPI (Peter Robinson)
  - fedora: Switch TI_SCI_CLK and TI_SCI_PM_DOMAINS symbols to built-in (Javier Martinez Canillas)
  - Add bug for amdgpu to BugsFixed for 6.5.6 (Justin M. Forbes)
  - drm/amdgpu: set completion status as preempted for the resubmission (Jiadong Zhu)
  - Add CVE-2023-42756 to BugsFixed for 6.5.6 (Justin M. Forbes)
  - Linux v6.5.6


author: Augusto Caringi <acaringi@redhat.com> [6.5.9-0]
changelog:
  - Updated Fedora configs (Justin M. Forbes)
  - Add UFSHCD bug to BugsFixed (Justin M. Forbes)
  - Turn on UFSHCD for Fedora x86 (Justin M. Forbes)
  - redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV01A10 for x86 platform (Hans de Goede)
  - Linux v6.5.9


author: Augusto Caringi <acaringi@redhat.com> [6.5.12-0]
changelog:
  - Add bug for AMD ACPI alarm (Justin M. Forbes)
  - rtc: cmos: Use ACPI alarm for non-Intel x86 systems too (Mario Limonciello)
  - Linux v6.5.12


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.5.0-0.rc7.f7757129e3de.51.eln130]
changelog:
  - redhat/configs: Enable CONFIG_DEVICE_PRIVATE on aarch64 (David Hildenbrand) [2231407]
  - redhat/configs: disable CONFIG_ROCKCHIP_ERRATUM_3588001 for RHEL (Mark Salter)
  - redhat: shellcheck fixes (Prarit Bhargava)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.5.0-0.rc7.89bf6209cad6.52.eln130]
changelog:
  - redhat/self-test: Remove rpmlint test (Prarit Bhargava)
  - Remove the armv7 config directory from Fedora again (Justin M. Forbes)
  - Enable CONFIG_EXPERT for both RHEL and Fedora (Justin M. Forbes)
  - Linux v6.5.0-0.rc7.89bf6209cad6


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.5.0-0.rc7.93f5de5f648d.53.eln130]
changelog:
  - Consolidate configs to common for 6.5 (Justin M. Forbes)
  - Remove unused config entry for Fedora (Justin M. Forbes)
  - Linux v6.5.0-0.rc7.93f5de5f648d


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.5.0-0.rc7.7d2f353b2682.55.eln130]
changelog:
  - redhat/kernel.spec.template: update compression variables to support zstd (Brian Masney)
  - Linux v6.5.0-0.rc7.7d2f353b2682


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.5.0-58.eln130]
changelog:
  - redhat: Fix UKI install with systemd >= 254 (Vitaly Kuznetsov)
  - redhat: Use named parameters for kernel_variant_posttrans()/kernel_variant_preun() (Vitaly Kuznetsov)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.5.2-301]
changelog:
  - Revert "misc: rtsx: judge ASPM Mode to set PETXCFG Reg" (Justin M. Forbes)
  - Config updates for 6.5.3 (Justin M. Forbes)
  - Fix up buildReqs for UKI (Justin M. Forbes)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.2-0]
changelog:
  - Add bug for AMD ACPI alarm (Justin M. Forbes)
  - rtc: cmos: Use ACPI alarm for non-Intel x86 systems too (Mario Limonciello)
  - Add bluetooth fixes to BugsFixed (Justin M. Forbes)
  - Drop F37 from release targets as it will not rebase to 6.6 (Justin M. Forbes)
  - Linux v6.6.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.3-0]
changelog:
  - Add BugsFixed for 6.6.3 (Justin M. Forbes)
  - Update BugsFixed (Justin M. Forbes)
  - Turn on USB_DWC3 for Fedora (rhbz 2250955) (Justin M. Forbes)
  - Revert "netfilter: nf_tables: remove catchall element in GC sync path" (Justin M. Forbes)
  - More BugsFixed (Justin M. Forbes)
  - netfilter: nf_tables: remove catchall element in GC sync path (Pablo Neira Ayuso)
  - frop the build number back to 200 for fedora-srpm.sh (Justin M. Forbes)
  - ACPI: video: Use acpi_device_fix_up_power_children() (Hans de Goede)
  - ACPI: PM: Add acpi_device_fix_up_power_children() function (Hans de Goede)
  - Linux v6.6.3


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.4-0]
changelog:
  - redhat: Fix macro for kernel-uki-virt flavor (Neal Gompa)
  - Change the uki reqs for Fedora (Justin M. Forbes)
  - Linux v6.6.4


author: Augusto Caringi <acaringi@redhat.com> [6.6.7-0]
changelog:
  - Add rhbz#2253632 rhbz#2253633 to BugsFixed (Justin M. Forbes)
  - Turn on DRM_ACCEL drivers for Fedora (Justin M. Forbes)
  - Linux v6.6.7


author: Augusto Caringi <acaringi@redhat.com> [6.6.8-0]
changelog:
  - Add BugsFixed entries for rhbz#2254797 and #rhbz2254704 (Justin M. Forbes)
  - Add support for various laptops using CS35L41 HDA without _DSD (Stefan Binding)
  - fedora: arm64: Enable required AllWinner pinctrl drivers (Peter Robinson)
  - fedora: arm64: cleanup Allwinner Pinctrl drivers (Peter Robinson)
  - fedora: aarch64: Enable some DW drivers (Peter Robinson)
  - Basic scaffolding to create a kernel-headers package (Justin M. Forbes)
  - Linux v6.6.8


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.9-0]
changelog:
  - ALSA: hda: cs35l41: Add notification support into component binding (Stefan Binding)
  - ALSA: hda: cs35l41: Support mute notifications for CS35L41 HDA (Stefan Binding)
  - Linux v6.6.9


author: Augusto Caringi <acaringi@redhat.com> [6.6.12-0]
changelog:
  - Add CVE Fixes to BugsFixed for 6.6.12 (Justin M. Forbes)
  - ida: Fix crash in ida_free when the bitmap is empty (Matthew Wilcox (Oracle))
  - wifi: ath10k: fix NULL pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev() (Xingyuan Mo)
  - Linux v6.6.12


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.6.0-0.rc7.d88520ad73b7.55]
changelog:
  - redhat: remove pending-rhel CONFIG_XFS_ASSERT_FATAL file (Patrick Talbert)
  - New configs in fs/xfs (Fedora Kernel Team)
  - crypto: rng - Override drivers/char/random in FIPS mode (Herbert Xu)
  - random: Add hook to override device reads and getrandom(2) (Herbert Xu)
  - Linux v6.6.0-0.rc7.d88520ad73b7


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.6.0-0.rc7.4f82870119a4.56]
changelog:
  - redhat: configs: generic: x86: Disable CONFIG_VIDEO_OV01A10 for x86 platform (Hans de Goede)
  - Linux v6.6.0-0.rc7.4f82870119a4


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.6.0-0.rc7.611da07b89fd.57]
changelog:
  - Updated Fedora configs (Justin M. Forbes)
  - Turn on UFSHCD for Fedora x86 (Justin M. Forbes)
  - Linux v6.6.0-0.rc7.611da07b89fd


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.1-0]
changelog:
  - drivers/firmware: skip simpledrm if nvidia-drm.modeset=1 is set (Javier Martinez Canillas)
  - Added required files for rebase (Augusto Caringi)
  - Reset RHEL_RELEASE for rebase (Justin M. Forbes)
  - [Scheduled job] Catch config mismatches early during upstream merge (Don Zickus)
  - redhat/self-test: Update data for KABI xz change (Prarit Bhargava)
  - redhat/scripts: Switch KABI tarballs to xz (Prarit Bhargava)
  - redhat/kernel.spec.template: Switch KABI compression to xz (Prarit Bhargava)
  - redhat: self-test: Use a more complete SRPM file suffix (Andrew Halaney)
  - redhat: makefile: remove stray rpmbuild --without (Eric Chanudet)
  - Linux v6.6.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.2-201]
changelog:
  - Turn on USB_DWC3 for Fedora (rhbz 2250955) (Justin M. Forbes)
  - Revert "netfilter: nf_tables: remove catchall element in GC sync path" (Justin M. Forbes)
  - More BugsFixed (Justin M. Forbes)
  - netfilter: nf_tables: remove catchall element in GC sync path (Pablo Neira Ayuso)
  - frop the build number back to 200 for fedora-srpm.sh (Justin M. Forbes)
  - ACPI: video: Use acpi_device_fix_up_power_children() (Hans de Goede)
  - ACPI: PM: Add acpi_device_fix_up_power_children() function (Hans de Goede)


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.6.8-200]
changelog:
  - ALSA: hda: cs35l41: Add notification support into component binding (Stefan Binding)
  - ALSA: hda: cs35l41: Support mute notifications for CS35L41 HDA (Stefan Binding)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.9f8413c4a66f.1]
changelog:
  - Reset RHEL_RELEASE for 6.8 series (Justin M. Forbes)
  - common: cleanup MX3_IPU (Peter Robinson)
  - all: The Octeon MDIO driver is aarch64/mips (Peter Robinson)
  - common: rtc: remove bq4802 config (Peter Robinson)
  - common: de-dupe MARVELL_GTI_WDT (Peter Robinson)
  - all: Remove CAN_BXCAN (Peter Robinson)
  - common: cleanup SND_SOC_ROCKCHIP (Peter Robinson)
  - common: move RHEL DP83867_PHY to common (Peter Robinson)
  - common: Make ASYMMETRIC_KEY_TYPE enable explicit (Peter Robinson)
  - common: Disable aarch64 ARCH_MA35 universally (Peter Robinson)
  - common: arm64: enable Tegra234 pinctrl driver (Peter Robinson)
  - rhel: arm64: Enable qoriq thermal driver (Peter Robinson)
  - common: aarch64: Cleanup some i.MX8 config options (Peter Robinson)
  - all: EEPROM_LEGACY has been removed (Peter Robinson)
  - all: rmeove AppleTalk hardware configs (Peter Robinson)
  - all: cleanup: remove references to SLOB (Peter Robinson)
  - all: cleanup: Drop unnessary BRCMSTB configs (Peter Robinson)
  - all: net: remove retired network schedulers (Peter Robinson)
  - all: cleanup removed CONFIG_IMA_TRUSTED_KEYRING (Peter Robinson)
  - BuildRequires: lld for build with selftests for x86 (Jan Stancek)
  - spec: add keyutils to selftest-internal subpackage requirements (Artem Savkov) [2166911]
  - redhat/spec: exclude liburandom_read.so from requires (Artem Savkov) [2120968]
  - rtla: sync summary text with upstream and update Requires (Jan Stancek)
  - uki-virt: add systemd-sysext dracut module (Gerd Hoffmann)
  - uki-virt: add virtiofs dracut module (Gerd Hoffmann)
  - common: disable the FB device creation (Peter Robinson)
  - s390x: There's no FB on Z-series (Peter Robinson)
  - Linux v6.8.0-0.rc0.9f8413c4a66f


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.ab27740f7665.3]
changelog:
  - Flip CONFIG_INTEL_PMC_CORE to m for Fedora (Justin M. Forbes)
  - Add CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y to avoid a mismatch (Justin M. Forbes)
  - Linux v6.8.0-0.rc0.ab27740f7665


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.de927f6c0b07.4]
changelog:
  - Fix up ZRAM_TRACK_ENTRY_ACTIME in pending (Justin M. Forbes)
  - random: replace import_single_range() with import_ubuf() (Justin M. Forbes)
  - Linux v6.8.0-0.rc0.de927f6c0b07


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.70d201a40823.5]
changelog:
  - redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option (Sabrina Dubroca)
  - redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE (Sabrina Dubroca)
  - redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE (Sabrina Dubroca)
  - Linux v6.8.0-0.rc0.70d201a40823


author: Coiby <coxu@redhat.com> - 2.0.25-3
changelog:
  - kdumpctl: Optimize _find_kernel_path_by_release regex string
  - unit tests: adapt check_config to gen-kdump-conf.sh
  - kdump.conf: use a simple generator script to maintain
  - Don't run kdump_check_setup_iscsi in a subshell in order to collect needed network interfaces
  - Simplify setup_znet by copying connection profile to initrd
  - Wait for the network to be truly ready before dumping vmcore
  - Address the cases where a NIC has a different name in kdump kernel
  - Reduce kdump memory consumption by only installing needed NIC drivers
  - Reduce kdump memory consumption by not letting NetworkManager manage unneeded network interfaces
  - Set up kdump network by directly copying NM connection profile to initrd
  - Stop dracut 35network-manager from running nm-initrd-generator
  - Apply the timeout configuration of nm-initrd-generator
  - Determine whether IPv4 or IPv6 is needed
  - Add functions to copy NetworkManage connection profiles to the initramfs
  - Fix error for vlan over team network interface
  - Skip reset_crashkernel_after_update during package install
  - Don't check fs modified when dump target is lvm2 thinp
  - tests: use .nmconnection to set up test network
  - fadump: preserve file modification time to help with hardlinking
  - fadump: do not use squash to reduce image size
  - selftest: Add lvm2 thin provision for kdump test
  - selftest: Only iterate the .sh files for test execution
  - Add dependency of dracut lvmthinpool-monitor module
  - lvm.conf should be check modified if lvm2 thinp enabled
  - Add lvm2 thin provision dump target checker


author: Coiby <coxu@redhat.com> - 2.0.25-4
changelog:
  - dracut-module-setup.sh: stop overwriting dracut's trap handler
  - fadump: avoid status check while starting in fadump mode
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: fix default initrd backup and restore logic
  - fadump: use 'zstd' as the default compression method


author: Coiby <coxu@redhat.com> - 2.0.26-1
changelog:
  - Update kexec-tools to 2.0.25
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - dracut-module-setup.sh: skip installing driver for the loopback interface


author: Coiby <coxu@redhat.com> - 2.0.26-3
changelog:
  - kdumpctl: make do_estimate more robust
  - kdumpctl: refractor check_rebuild
  - kdumpctl: cleanup 'stop'
  - kdumpctl: cleanup 'start'
  - kdump-lib: fix prepare_cmdline
  - kdumpctl: move aws workaround to kdump-lib
  - unit tests: add tests for prepare_cmdline
  - kdump-lib: always specify version in is_squash_available
  - mkfadumprd: drop unset globals from debug output
  - kdumpctl: merge check_current_{kdump,fadump}_status
  - dracut-early-kdump: explicitly use bash
  - dracut-early-kdump: fix shellcheck findings
  - kdumpctl: simplify check_failure_action_config
  - makedumpfile: Fix wrong exclusion of slab pages on Linux 6.2-rc1


author: Coiby <coxu@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add support for systemd-boot paths
  - mkdumprd: add --aggressive-strip as default dracut args
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdumpctl: fix is_dracut_mod_omitted
  - kdump-lib: move is_dracut_mod_omitted to kdumpctl
  - kdump-lib: remove get_nmcli_connection_apath_by_ifname
  - kdump-lib: remove get_nmcli_field_by_conpath
  - dracut-module-setup: remove dead source_ifcfg_file
  - kdump-lib-initramfs: remove is_fs_dump_target
  - kdump-lib-initramfs: harden is_mounted
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel
  - Install nfsv4-related drivers when users specify nfs dumping via dracut_args
  - sysconfig: add zfcp.allow_lun_scan to KDUMP_COMMANDLINE_REMOVE on s390
  - Use the correct command to get architecture


author: Coiby <coxu@redhat.com> - 2.0.26-5
changelog:
  - Simplify the management of the kernel parameter crashkernel
  - Let _update_kernel_cmdline return the correct return code
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - kdump-lib: fix the matching pattern for debug-kernel


author: Coiby <coxu@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()


author: Coiby Xu <coxu@redhat.com> - 2.0.27-4
changelog:
  - update to makedumpfile-1.7.4
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges


author: Coiby Xu <coxu@redhat.com> - 2.0.28-1
changelog:
  - kexec-tools 2.0.28 (Simon Horman)
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually
  - dracut-module-setup: consolidate s390 network device config


author: Yauheni Kaliuta <ykaliuta@redhat.com> - 29-5
changelog:
  - kmod.spec: enable debug
  - weak-modules: compare_initramfs_modules: exit on pushd/popd failures
  - weak-modules: split modules into array with read -a
  - Add default config file, /etc/depmod.d/dist.conf


author: Andreas Schneider <asn@redhat.com> - 1.19.2-12
changelog:
  - Use baserelease to set the release number
  - Do not define netlib, but use autoconf detection for res_* functions
  - Add missing BR for resolv_wrapper to run t_discover_uri.py


author: Julien Rische <jrische@redhat.com> - 1.20.1-1
changelog:
  - New upstream version (1.20.1)
  - Resolves: rhbz#2124463
  - Restore "supportedCMSTypes" attribute in PKINIT preauth requests
  - Set SHA-512 or SHA-256 with RSA as preferred CMS signature algorithms
  - Resolves: rhbz#2114766
  - Update error checking for OpenSSL CMS_verify
  - Resolves: rhbz#2119704
  - Remove invalid password expiry warning
  - Resolves: rhbz#2129113


author: Julien Rische <jrische@redhat.com> - 1.20.1-6
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
  - Resolves: rhbz#2114771


author: Julien Rische <jrische@redhat.com> - 1.20.1-8
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.20.1-6
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2114771


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.42.0-1
changelog:
  - Updated to version 3.42.0 (https://sqlite.org/releaselog/3_42_0.html)
  - Use %patch -P N instead of deprecated %patchN


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Karel Zak <kzak@redhat.com> - 2.38-1
changelog:
  - upgrade to v2.38
  - don't (re)generate build-system
  - modernize spec file style (thanks to Zbigniew)


author: Karel Zak <kzak@redhat.com> - 2.39-1
changelog:
  - upgrade to v2.39
  - remove dependence on libuser
  - remove util-linux-user subpackage
  - enable translated man pages
  - add util-linux-i18n subpackage


author: Karel Zak <kzak@redhat.com> - 2.39.2-1
changelog:
  - fix libmount atime regression
  - upgrade to v2.39.2
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes


author: Colin Walters <walters@verbum.org> - 2.40-0.9.rc1
changelog:
  - Backport https://github.com/util-linux/util-
    linux/commit/211a9da0b4e9704eea210d7944b723fa78272c79


author: Jay W <git.jaydobuleu@gmail.com> - 2:0.7.0-2
changelog:
  - Ensure PREFIX=/usr INCLUDEDIR=/usr/include are set so that flatpak is
    able to build libbpf as dependency.


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Filip Janus <fjanus@redhat.com> - 5.3.25-57
changelog:
  - Add convert-util subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Disable shiping libdb for rhel except convert-tool


author: Carlos O'Donell <carlos@redhat.com> - 3.4.4-8
changelog:
  - Analyze libffi-3.4.4-7.fc40 sources for license information
  - Migrate License field to SPDX identifiers for
    https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    https://docs.fedoraproject.org/en-US/legal/update-existing-packages
    (#2222084)


author: Pavel Březina <pbrezina@redhat.com> - 2.9.4-1
changelog:
  - Rebase to SSSD 2.9.4
  - Files provider suport remove (rhbz#2253183)
  - i686 support removed (rhbz#2069738)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Richard Hughes <richard@hughsie.com> 0.1.6-1
changelog:
  - New upstream release
  - Fall back to the AliasId for validation
  - Fix jcat_context_verify_blob() to use self verify for checksums


author: Richard Hughes <richard@hughsie.com> 0.1.9-1
changelog:
  - New upstream release
  - Return an error if we try to self-sign no bytes of data
  - Set which backends are supported in the pkgconfig file


author: Richard Hughes <richard@hughsie.com> 0.1.10-1
changelog:
  - New upstream release
  - Add ED25519 support
  - Define three more types used for the firmware transparency log


author: Richard Hughes <richard@hughsie.com> 0.1.12-1
changelog:
  - New upstream release
  - Correctly export the AliasIds in all cases
  - Install all files to fix the installed-tests


author: Petr Pisar <ppisar@redhat.com> - 2.13.0-3
changelog:
  - Accept an invalid buildorder 18446744073709551615 found in RHEL 8 repositories
    (https://pagure.io/koji/issue/3025)


author: Jiri Pirko <jiri@nvidia.com> - 1.8-1
changelog:
  - 1.8 release
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Steve Dickson <steved@redhat.com> 2.6.2-2.rc4
changelog:
  - Updated to the latest RC release: nfs-utils-2-6-3-rc4 (bz 2144605)
  - Remove old nfsconvert dependencies (bz 2144179)


author: Steve Dickson <steved@redhat.com> 2.6.3-1.rc3
changelog:
  - Updated to the latest RC release: nfs-utils-2-6-4-rc3
  - Fixed a regression in the junction code (bz 2213669)


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: Phil Sutter <psutter@redhat.com> - 1.2.6-1
changelog:
  - Drop outdated libnftables provides, it might clash with the new
    nftables-provided libnftables at some point in future
  - Backport one late fix from upstream
  - new version 1.2.6


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Björn Esser <besser82@fedoraproject.org> - 2.0.0-2
changelog:
  - Add logic for closing the loop hole on soname bumps
  - Explicitly force manual intervention for soname bumps


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Paul Wouters <paul.wouters@aiven.io> - 1.4.4-6
changelog:
  - Resolves: rhbz#1992607 libpwquality: regression in minimal image size because of hard dependency on cracklib-dicts


author: Paul Wouters <paul.wouters@aiven.io - 1.4.5-1
changelog:
  - Resolves: rhbz#2154991 libpwquality fails to build with Python 3.12: ModuleNotFoundError: No module named 'distutils'
  - Resolves: rhbz#2006063 RFE: Support running without cracklib-dicts installed
  - Cleanup and remove python2/3 conditional macros


author: Jaroslav Rohel <jrohel@redhat.com> - 1.14.4-1
changelog:
  - Update to 1.14.4
  - Use nanosec precision for timestamp of checksum cache (RhBug:2077864)
  - Fix alloc/free mismatches and memory leaks


author: Jaroslav Rohel <jrohel@redhat.com> - 1.15.1-1
changelog:
  - Update to 1.15.1
  - Adds API support for waiting on network in an event driven manner (new API function lr_handle_network_wait)
  - OpenPGP API extension and fixes (new API functions lr_gpg_*)
  - Update license format to "LGPL-2.1-or-later"


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Packit <hello@packit.dev> - 2.17.3-1
changelog:
  - Release version 2.17.3 (Michal Fabik)
  - Update changelog (Michal Fabik)
  - Run autoupdate to get rid of obsolete/deprecated macros (Michal Fabik)
  - Makefile: Move README.md to EXTRA_DIST (Michal Fabik)
  - Don't build rhel-bugzilla --without-bugzilla (Michal Fabik)
  - doc: Make anaconda_event.conf depend on BZ (Michal Fabik)
  - Fix build --without-bugzilla (Michal Fabik)
  - spec: Don't list files twice (Michal Fabik)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.4-1
changelog:
  - Release version 2.17.4 (Michal Fabik)
  - Update changelog (Michal Fabik)
  - reporter_bugzilla.py: Don't ask for API key if we already have it (Michal Srb)
  - internal/bz_connection.py: Fix "TypeError: 'builtin_function_or_method' object is not subscriptable" (Michal Srb)
  - reporter_bugzilla.py: Fix condition (Michal Srb)
  - internal/reported_to.py: Prevent possible ValueError if the line is for example empty (Michal Srb)
  - reporter_bugzilla.py: Prevent possible KeyError exception (Michal Srb)
  - reporter_bugzilla.py: Default value for `b_create_private` is False (Michal Srb)
  - reporter_bugzilla.py: Prevent possible KeyError exception (Michal Srb)


author: Packit <hello@packit.dev> - 2.17.5-1
changelog:
  - Release version 2.17.5 (Michal Srb)
  - Update changelog (Michal Srb)
  - dump_dir.py: check that the filename doesn't start with "/" (Michal Srb)
  - dump_dir.py: Don't pass libreport flags to open() (Michal Srb)
  - reporter-bugzilla: Fix exceptions (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.6-1
changelog:
  - Release version 2.17.6 (Michal Srb)
  - Update translations (mgrabovsky)
  - Update changelog (Michal Srb)
  - reporter-bugzilla: Fix TypeError (Michal Srb)


author: Packit <hello@packit.dev> - 2.17.7-1
changelog:
  - Release version 2.17.7 (Michal Srb)
  - spec: Add disttag (Michal Srb)
  - Update changelog (Michal Srb)
  - Fix rpm -V issue with missing reporter-bugzilla-python in f38 (Michal Srb)
  - Fix TypeError (Michal Srb)
  - Update pot file (Matěj Grabovský)
  - readme: Add diagram of related projects (Matěj Grabovský)
  - Update translations (mgrabovsky)
  - Use SPDX format for license field (Matěj Grabovský)
  - ignored_words: Add KeyboardInterrupt (Michal Fabik)
  - packit: Add dependencies for SRPM build (Matěj Grabovský)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.8-1
changelog:
  - Release version 2.17.8 (Michal Srb)
  - Update changelog (Michal Srb)
  - reporter-bugzilla: Fix KeyError when HOME env var is not set (Michal Srb)
  - Update changelog (Michal Srb)
  - reporter-bugzilla: Fix password prompt in client/server mode (Michal Srb)


author: Packit <hello@packit.dev> - 2.17.9-1
changelog:
  - Release version 2.17.9 (Michal Srb)
  - reporter-bugzilla: Fix string interpolation (Matěj Grabovský)
  - reporter-bugzilla: Replace flags with just keyword arg (Michal Srb)
  - reporter-bugzilla: Make sure that the creator of a bug is always in CC (Michal Srb)
  - reporter-bugzilla: Don't fail if reported_to file doesn't exist (Michal Srb)
  - reporter-bugzilla: Fix reporting when the bug already exists (Michal Srb)
  - use $XDG_CONFIG_HOME to access user's configuration files (Yann Droneaud)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.10-1
changelog:
  - Release version 2.17.10 (Matěj Grabovský)
  - reporter-upload: Fix a use-after-free error in string handling (Matěj Grabovský)
  - Update translations (mgrabovsky)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.11-1
changelog:
  - Release version 2.17.11 (Michal Srb)
  - spec: Add missing requires for python3-libreport (Michal Srb)
  - Build URL with urllib.parse.urljoin() (Michal Srb)
  - Add XDG_ACTIVATION_TOKEN to the list of ignored words (Michal Srb)
  - Attachments are minor updates in Bugzilla (Michal Srb)
  - Retry Bugzilla search queries with delays (Michal Srb)
  - Fix "NameError: name 'ticket' is not defined" exception (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Packit <hello@packit.dev> - 2.17.2-1
changelog:
  - Release version 2.17.2 (Michal Fabik)
  - reporter_bugzilla.py: Build, install (Michal Fabik)
  - reporter_bugzilla.py: Add tests (Michal Fabik)
  - reporter_bugzilla.py: Initial commit (Michal Fabik)
  - Update translations (mgrabovsky)
  - abrt_xmlrpc: Don't warn about discarded const (Michal Fabik)
  - Update translations (mgrabovsky)
  - Update translations (mgrabovsky)
  - Use conventional lseek arg order (Michal Fabik)
  - Update translations (mgrabovsky)
  - ignored_words: Ignore more debuginfod URLs (Matěj Grabovský)


author: Jiri Pirko <jiri@resnulli.us> - 1.32-1
changelog:
  teamd: Add option to change evaluation logic of multiple link-watchers
  Revert: teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  teamd: lacp: don't move the port state from disabled when admin state is down
  teamd: lacp: set port to disabled state during removal
  teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  libteam: clear changed bits in case of TEAM_IFINFO_CHANGE
  misc: fix possible strncpy truncation bug
  teamd: stop iterating callbacks when a loop restart is requested
  teamd: do no remove the ports on shutdown with -N
  binding/python: ifindex 0 is invalid so do not process it
  teamd: Include missing headers for strrchr and memcmp
  libteamdctl: validate the bus name before using it
  options: move option temporary check after the err check
  teamd: lacp: increase "min_ports" upper limit to 1024
  fix build on OpenWRT/musl-libc
  teamd: increase the waitting time for daemon killing
  Revert "teamd: Disregard current state when considering port enablement"


author: Frederic Berat <fberat@redhat.com> - 2.4.6-48
changelog:
  - Add support for "-fsanitize", rhbz#2024647
  - Add support for "-fuse-ld", rhbz#2024647
  - Use make macros (based on Tom Stellard work for f33 and Timm Bäder)
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable non-PIC test for ARM as this is not supported on this arch
  - Use autosetup
  - Use plain %configure


author: Mike FABIAN <mfabian@redhat.com> - 0.9.10-12
changelog:
  - Fix memory leak in vasnprint. Resolves: rhbz#1938800
    (Backported from upstream: https://git.savannah.gnu.org/cgit/gnulib.git/commit/?id=4d288a80bf7ebe29334b9805cdcc70eacb6059c1)
  - Fix spelling in license GPLV2+ -> GPLv2+


author: Kate Hsuan <hpa@redhat.com> - 1.0.27-1
changelog:
  - Update to 1.0.27
  - Update to 1.0.27
  - Add tests, including init_context, set_option, and stress_mt


author: Björn Esser <besser82@fedoraproject.org> - 4.4.31-4
changelog:
  - Add BR for perl modules to run the skip-if-exec-format-error script
  - Move the BR for minimum Perl version to perl-interpreter


author: Björn Esser <besser82@fedoraproject.org> - 4.4.33-3
changelog:
  - Convert License to SPDX expression
  - Add upstream patch to improve performance on some type-cast operations


author: Björn Esser <besser82@fedoraproject.org> - 4.4.33-5
changelog:
  - Simplify transitional Requires and Obsoletes for legacy packages
  - Drop versioned BR on perl-interpreter
  - Fix README.posix file, as the fcrypt function is still available


author: Frantisek Sumsal <frantisek@sumsal.cz> - 2.5.1-32
changelog:
  - Disable zntune, since the respective driver was dropped in kernel 5.19
  - Bring back autotools to make the new and previous patches actually work


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Kamil Dudka <kdudka@redhat.com> - 3.20.1-1
changelog:
  - new upstream version 3.20.1, which fixes the following security issue:
      CVE-2022-1348 - potential DoS from unprivileged users via the state file


author: Tom Callaway <spot@fedoraproject.org> - 5.4.3-4
changelog:
  - apply upstream fix for CVE-2021-44647
  - apply upstream fixes for known lua bugs 4-10 (11 assumes other changes beyond 5.4.3)


author: Tom Callaway <spot@fedoraproject.org> - 5.4.4-1
changelog:
  - update to 5.4.4, update bootstrap code to 5.3.6
  - 5.4.4 contains the fix for 5.4.3 bug7, which is also CVE-2021-43519
    This fix was also in 5.4.3-4, so you do not need to update solely for that.


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.11-32
changelog:
  - Apply IBM patch for compressBound() function
  - Source from https://github.com/madler/zlib/issues/410#issuecomment-947212824
  - Resolves: #2057484


author: Lukas Javorsky <ljavorsk@redhat.com> - 1.2.12-5
changelog:
  - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
  - Resolves: CVE-2022-37434


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Michael J Gruber <mjg@fedoraproject.org> - 1.7-1
changelog:
  - update to upstream release 1.7 (rhbz#2265629)
  - use pkgconf/npth.c instead of npth-config
  - new functions npth_poll and npth_ppoll


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Timothée Ravier <tim@siosm.fr> - 2.23.0-4
changelog:
  - Fix macro expansion in description
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use SPDX identifiers for license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_3


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.1-1
changelog:
  - Update to new major release OpenLDAP 2.6.1 (#1955293)
    + rediff all patches and remove patches now upstream
    + use upstream source location for check password module
    + and rediff patch due to this
    + add patch to fix build issue in 2.5.4 (from upstream)
    + clean and sort buildreqs
    + remove various refs to bdb
    + remove now default -DLDAP_USE_NON_BLOCKING_TLS
    + add new modules and enable load balancer as module
    + disable wiredtired backend due to missing build deps
    + don't remove files that don't exist
    + let check-config work on *.mdb over legacy files
    + remove refs to old-style config
    + new soname names
    + remove libldap_r link as the library was merged with libldap
    + refactor openldap-compat package to support the transition from 2.4
    + add UPGRADE_INSTRUCTIONS for openldap-server upgrade
  - The original patch was submitted by Fedora user - terjeros
    https://src.fedoraproject.org/rpms/openldap/pull-request/6


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Dusty Mabe <dusty@dustymabe.com> - 9.0p1-11
changelog:
  - Provide a systemd unit for restoring default host key permissions (rhbz#2172956)
  - Co-Authored by Timothée Ravier <tim@siosm.fr>


author: Dusty Mabe <dusty@dustymabe.com> - 9.0p1-12
changelog:
  - Mark /var/lib/.ssh-host-keys-migration as %ghost file
  - Make ssh-host key migration less conditional


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.3p1-8
changelog:
  - Split including crypto-policies to a separate config (rhbz#1970566)
  - Disable forking of ssh-agent on startup (rhbz#2148555)
  - Remove sshd.socket unit (rhbz#2025716)
  - Minor optimization of ssh_krb5_kuserok (rhbz#2112501)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.3p1-10
changelog:
  - Forbid shell metasymbols in username/hostname
    Resolves: CVE-2023-51385
  - Fix Terrapin attack
    Resolves: CVE-2023-48795
  - Apply destination constraints to all PKCS#11 keys
    Resolves: CVE-2023-51384


author: Norbert Pocs <npocs@redhat.com> - 9.0p1-18
changelog:
  - Fix pkcs11 issue with the recent changes
  - Clarify HostKeyAlgorithms relation with crypto-policies


author: Norbert Pocs <npocs@redhat.com> - 9.3p1-9
changelog:
  - pkcs11: Add support for 'serial' in PKCS#11 URI
  - Apply the upstream MR related to the previous pkcs11 issue
  - https://github.com/openssh/openssh-portable/pull/406


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.3p1-13
changelog:
  - Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224)
  - https://github.com/openssh-gsskex/openssh-gsskex/pull/19


author: Daniel Milnes <daniel@daniel-milnes.uk> - 9.6p1-1
changelog:
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.5-6
changelog:
  - CVE-2022-3602: X.509 Email Address Buffer Overflow
  - CVE-2022-3786: X.509 Email Address Buffer Overflow
    Resolves: CVE-2022-3602
    Resolves: CVE-2022-3786


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.7-1
changelog:
  - Rebase to upstream version 3.0.7
  - C99 compatibility in downstream-only 0032-Force-fips.patch
    Resolves: rhbz#2152504
  - Adjusting include for the FIPS_mode macro
    Resolves: rhbz#2083876


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.8-1
changelog:
  - Rebase to upstream version 3.0.8
    Resolves: CVE-2022-4203
    Resolves: CVE-2022-4304
    Resolves: CVE-2022-4450
    Resolves: CVE-2023-0215
    Resolves: CVE-2023-0216
    Resolves: CVE-2023-0217
    Resolves: CVE-2023-0286
    Resolves: CVE-2023-0401


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.8-2
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2141672


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.9-1
changelog:
  - Rebase to upstream version 3.0.9
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


author: Sahana Prasad <sahana@redhat.com> - 1:3.1.1-1
changelog:
  - Rebase to upstream version 3.1.1
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Dusty Mabe <dusty@dustymabe.com> - 2023.3-3
changelog:
  - Backport log message fix in https://github.com/ostreedev/ostree/pull/2870
  - Backport fallocate fix in https://github.com/ostreedev/ostree/pull/2871


author: Colin Walters <walters@verbum.org> - 2023.6-2
changelog:
  - Cherry pick
    https://github.com/ostreedev/ostree/pull/3060/commits/3b2fd6e9ff0a3a91a2b72f524492e4f198069dec


author: Colin Walters <walters@verbum.org> - 2023.7-3
changelog:
  - Add a composefs requirement; this is not actually a requirement
    right now, but will be in the near future, so let's prepare for it.


author: Colin Walters <walters@verbum.org> - 2023.7-4
changelog:
  - Enable composefs only on fedora/rhel10 to fix COPR builds
    which pull from this dist-git
  - Exclude x86 on FedoraELN since composefs is
  - Always disable soup to re-sync with ostree upstream logic


author: Colin Walters <walters@verbum.org> - 2023.8-4
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/3129/commits/a1c1c0b500
    d23ff129adbfe9486a067788b24969 To aid https://github.com/coreos/fedora-
    coreos-config/pull/2783


author: Packit Service <user-cont-team+packit-service@redhat.com> - 0.24.1-1
changelog:
  - Release 0.24.1 (Daiki Ueno)
  - common: Support copying attribute array recursively (Daiki Ueno)
  - common: Add assert_ptr_cmp (Daiki Ueno)
  - gtkdoc: remove dependencies on custom target files (Eli Schwartz)
  - doc: Replace occurrence of black list with blocklist (Daiki Ueno)
  - build: Suppress cppcheck false-positive on array bounds (Daiki Ueno)
  - ci: Use Docker image from the same repository (Daiki Ueno)
  - ci: Integrate Docker image building to GitHub workflow (Daiki Ueno)
  - rpc: Fallback to version 0 if server does not support negotiation (Daiki Ueno)
  - build: Port e850e03be65ed573d0b69ee0408e776c08fad8a3 to meson (Daiki Ueno)
  - Link libp11-kit so that it cannot unload (Emmanuel Dreyfus)
  - trust: Use dngettext for plurals (Daiki Ueno)
  - rpc: Support protocol version negotiation (Daiki Ueno)
  - rpc: Separate authentication step from transaction (Daiki Ueno)
  - Meson: p11_system_config_modules instead of p11_package_config_modules (Issam E. Maghni)
  - shell: test -a|o is not POSIX (Issam E. Maghni)
  - Meson: Add libtasn1 to trust programs (Issam E. Maghni)
  - meson: optionalise glib's development files for gtk_doc (Đoàn Trần Công Danh)


author: Pavel Březina <pbrezina@redhat.com> - 1.5.2-8
changelog:
  - systemd-auth, smartcard-auth, fingerprint-auth, password-auth and postlogin are now owned by authselect (#2023738)


author: Björn Esser <besser82@fedoraproject.org> - 1.5.3-1
changelog:
  - Rebase to release 1.5.3
    Resolves: #2196709
  - Drop pam-1.5.2-pwhistory-config.patch and pam-1.5.2-configure-c99.patch,
    as those patches are implemented upstream
  - Realign left-over patches
  - Update build requirements for documentation (docbook5)
  - Remove --enable-vendordir from configuration
  - Enable (deprecated) pam_lastlog module


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.1.1-2
changelog:
  - Misc changes
  - Move meson_test to check section
  - Reorder BuildRequires alphabetically
  - Reorder install files
  - Use %%{buildroot} instead of RPM_BUILD_ROOT
  - Use %%autorelease for Release tag


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230310.g70c0765-1
changelog:
  - Install SELinux interface files to shared include directory
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_03_09.7c7625d..2023_03_10.70c0765


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230317.gdd23496-1
changelog:
  - Refresh SELinux labels in scriptlets, require -selinux package
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_03_10.70c0765..2023_03_17.dd23496


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230329.gb10b983-1
changelog:
  - Adjust path for SELinux policy and interface file to latest guidelines
  - Don't install useless SELinux interface file for pasta
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_03_21.1ee2f7c..2023_03_29.b10b983


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230509.g96f8d55-1
changelog:
  - Relicense to GPL 2.0, or any later version
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_03_29.b10b983..2023_05_09.96f8d55


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-1
changelog:
  - Install pasta as hard link to ensure SELinux file context match
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_06_27.289301b..2023_08_18.0af928e


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230907.gee58f37-1
changelog:
  - Replace pasta hard links by separate builds
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_08_23.a7e4bfb..2023_09_07.ee58f37


author: Stefano Brivio <sbrivio@redhat.com> - 0^20231107.g56d9f6d-1
changelog:
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_10_04.f851084..2023_11_07.56d9f6d
  - SELinux: allow passt_t to use unconfined_t UNIX domain sockets for
    --fd option (https://bugzilla.redhat.com/show_bug.cgi?id=2247221)


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.37-3
changelog:
  - Revert of copying the old posix library - After rebuilding all
  - dependend packages we don't need to backport the old library


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.42-1
changelog:
  - Rebase to version 10.42
  - RISC-V is JIT enabled according to the https://github.com/PCRE2Project/pcre2/issues/14


author: Ed Santiago <santiago@redhat.com> - 5:4.9.1-2
changelog:
  - Much-belated cleanup
  - remove all references to cgroups v1. That code never worked, and "cgroups
    v2" in test names was misleading because it implied an alternative.
    Remove it.
  - refactor podman remote and local tests
  - clean up docs
  - Ansible bitrot cleanup ("this is deprecated, use that")


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-5
changelog:
  - gettext: handle unsupported languages properly (#2100378)
  - semodule: rename --rebuild-if-modules-changed to --refresh
  - python: Split "semanage import" into two transactions (#2063353)
  - selinux-autorelabel: Do not force reboot (#2093133)


author: Petr Lautrbach <plautrba@redhat.com> - 3.4-6
changelog:
  - Run autorelabel in parallel by default
    https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel


author: Petr Lautrbach <lautrbach@redhat.com> - 3.4-7.1
changelog:
  - Rebase on upstream f56a72ac9e86
  - sepolicy: fix sepolicy manpage -w
  - sandbox: add -R option to alternate XDG_RUNTIME_DIR
  - Remove dependency on the Python module distutils


author: Vit Mojzis <vmojzis@redhat.com> - 3.5-5
changelog:
  - python/sepolicy: Fix spec file dependencies
  - python/sepolicy: Fix template for confined user policy modules
  - Improve man pages and add examples


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-7
changelog:
  - python: improve format strings for proper localization
  - python: Drop hard formating from localized strings
  - sepolicy: port to dnf4 python API (rhbz#2209404)


author: Jan Rybar <jrybar@redhat.com> - 122-4
changelog:
  - Switch 'polkitd' to static UID/GID (fpc#1189) (on behalf of lucab)
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2104615


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Panu Matilainen <pmatilai@redhat.com> - 1.19~rc1-1
changelog:
  - Rebase to 1.19-rc1 (https://github.com/rpm-software-management/popt/releases/tag/popt-1.19-rc1)
  - Remove manual .la cleanup, it's automatic nowadays
  - Add a guard against accidental soname changes


author: Than Ngo <than@redhat.com> - 1.3.11-4
changelog:
  - Fix negative values seen while running lpar
  - Fix lparstat error with mixed SMT state
  - Fix negative values seen while running lparstat with -E option


author: Panu Matilainen <pmatilai@redhat.com> - 4.18.0-2
changelog:
  - Drop the temporary build-dependency on pandoc before it grows a beard
  - Start utilizing %patchlist, finally


author: Panu Matilainen <pmatilai@redhat.com> - 4.18.0-11
changelog:
  - Disable debuginfod lookups in rpmbuild scripts
  - Exclude kernel modules from ELF dependency generation


author: Miro Hrončok <mhroncok@redhat.com> - 4.18.1-3
changelog:
  - Explicitly require rpm-sequoia >= 1.4.0 on runtime to avoid
    rpm: symbol lookup error: /lib64/librpmio.so.9: undefined symbol: _pgpVerifySignature2


author: Panu Matilainen <pmatilai@redhat.com> - 4.18.92-3
changelog:
  - Fix regression on uncompressing 7zip compressed sources (#2229984)
  - Fix a conflict with pre-existing scl-utils %_root_prefix macro (#2233454)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.0-2
changelog:
  - Ensure central package ops log via rpm-plugin-audit recommends (#1476926)
  - Own our Python module directory (#2248555)
  - Fix sysusers.d generator barfing on legit content (#2246236)


author: Richard W.M. Jones <rjones@redhat.com> - 7.2.0-7
changelog:
  - Fix virtio-blk-pci detect-zeroes=unmap (RHBZ#2173357)
  - Fix build with glib2 2.75.3 (RHBZ#2173639)
  - Disable the tests on i686


author: Cole Robinson <crobinso@redhat.com> - 8.2.0-7
changelog:
  - Enable PIE for qemu-user-static builds
  - Replace PVH build fix patch with version that should work on centos


author: Colin Walters <walters@verbum.org> - 2023.1-4
changelog:
  - Cherry pick
    https://github.com/coreos/rpm-ostree/pull/4308/commits/476afb1d08513cb74cd1d28490c5e028c70f67c2


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-1
changelog:
  - New version 3.2.5
  - Resolves: #2115430 - remote arbitrary files write inside the directories of connecting peers
  - Fix for CVE-2022-37434


author: Michal Ruprich <mruprich@redhat.com> - 3.2.6-2
changelog:
  - Resolves: #2128682 - rsync fail with "ERROR: rejecting unrequested file-list name..." depend of parameters order


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 2:1.1.1-1
changelog:
  - Bump to v1.1.1
  - add hardening flags
  - remove unused packages
  - update license and bundled provides


author: Maxwell G <gotmax@e.email> - 2:1.1.2-1
changelog:
  - Update to 1.1.2. Fixes rhbz#2069648.
  - Mitigate CVE-2022-29162 / GHSA-f3fp-gc8g-vw66.
  - Don't pull in git unnecessarily


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.24-6
changelog:
  - Add explicit service unit ordering, after multi-user.target
    Backports: https://github.com/coreos/zincati/pull/831


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 37.7-1
changelog:
  - Update winbind_rpcd_t
  - Allow some domains use sd_notify()
  - Revert "Allow rabbitmq to use systemd notify"
  - fix(sedoctool.py): Fix syntax warning: "is not" with a literal
  - Allow nm-dispatcher console plugin manage etc files
  - Allow networkmanager_dispatcher_plugin list NetworkManager_etc_t dirs
  - Allow nm-dispatcher console plugin setfscreate
  - Support using systemd-update-helper in rpm scriptlets
  - Allow nm-dispatcher winbind plugin read samba config files
  - Allow domain use userfaultfd over all domains
  - Allow cups-lpd read network sysctls


author: Zdenek Pytela <zpytela@redhat.com> - 37.8-1
changelog:
  - Allow sa-update to get init status and start systemd files
  - Use insights_client_filetrans_named_content
  - Make default file context match with named transitions
  - Allow nm-dispatcher tlp plugin send system log messages
  - Allow nm-dispatcher tlp plugin create and use unix_dgram_socket
  - Add permissions to manage lnk_files into gnome_manage_home_config
  - Allow rhsmcertd to read insights config files
  - Label /etc/insights-client/machine-id
  - fix(devices.fc): Replace single quote in comment to solve parsing issues
  - Make NetworkManager_dispatcher_custom_t an unconfined domain


author: Zdenek Pytela <zpytela@redhat.com> - 37.9-1
changelog:
  - Allow nm-dispatcher custom plugin dbus chat with nm
  - Allow nm-dispatcher sendmail plugin get status of systemd services
  - Allow xdm read the kernel key ring
  - Allow login_userdomain check status of mount units
  - Allow postfix/smtp and postfix/virtual read kerberos key table
  - Allow services execute systemd-notify
  - Do not allow login_userdomain use sd_notify()
  - Allow launch-xenstored read filesystem sysctls
  - Allow systemd-modules-load write to /dev/kmsg and send a message to syslogd
  - Allow openvswitch fsetid capability
  - Allow openvswitch use its private tmpfs files and dirs
  - Allow openvswitch search tracefs dirs
  - Allow pmdalinux read files on an nfsd filesystem
  - Allow winbind-rpcd write to winbind pid files
  - Allow networkmanager to signal unconfined process
  - Allow systemd_hostnamed label /run/systemd/* as hostnamed_etc_t
  - Allow samba-bgqd get a printer list
  - fix(init.fc): Fix section description
  - Allow fedora-third-party read the passwords file
  - Remove permissive domain for rhcd_t
  - Allow pmie read network state information and network sysctls
  - Revert "Dontaudit domain the fowner capability"
  - Allow sysadm_t to run bpftool on the userdomain attribute
  - Add the userdom_prog_run_bpf_userdomain() interface
  - Allow insights-client rpm named file transitions
  - Add /var/tmp/insights-archive to insights_client_filetrans_named_content


author: Zdenek Pytela <zpytela@redhat.com> - 37.10-1
changelog:
  - Allow ipsec_t read/write tpm devices
  - Allow rhcd execute all executables
  - Update rhcd policy for executing additional commands 2
  - Update insights-client policy for additional commands execution 2
  - Allow sysadm_t read raw memory devices
  - Allow chronyd send and receive chronyd/ntp client packets
  - Allow ssh client read kerberos homedir config files
  - Label /var/log/rhc-worker-playbook with rhcd_var_log_t
  - Update insights-client policy (auditctl, gpg, journal)
  - Allow system_cronjob_t domtrans to rpm_script_t
  - Allow smbd_t process noatsecure permission for winbind_rpcd_t
  - Update tor_bind_all_unreserved_ports interface
  - Allow chronyd bind UDP sockets to ptp_event ports.
  - Allow unconfined and sysadm users transition for /root/.gnupg
  - Add gpg_filetrans_admin_home_content() interface
  - Update rhcd policy for executing additional commands
  - Update insights-client policy for additional commands execution
  - Add userdom_view_all_users_keys() interface
  - Allow gpg read and write generic pty type
  - Allow chronyc read and write generic pty type
  - Allow system_dbusd ioctl kernel with a unix stream sockets
  - Allow samba-bgqd to read a printer list
  - Allow stalld get and set scheduling policy of all domains.
  - Allow unconfined_t transition to targetclid_home_t


author: Zdenek Pytela <zpytela@redhat.com> - 37.11-1
changelog:
  - Allow tor get filesystem attributes
  - Allow utempter append to login_userdomain stream
  - Allow login_userdomain accept a stream connection to XDM
  - Allow login_userdomain write to boltd named pipes
  - Allow staff_u and user_u users write to bolt pipe
  - Allow login_userdomain watch various directories
  - Update rhcd policy for executing additional commands 5
  - Update rhcd policy for executing additional commands 4
  - Allow rhcd create rpm hawkey logs with correct label
  - Allow systemd-gpt-auto-generator to check for empty dirs
  - Update rhcd policy for executing additional commands 3
  - Allow journalctl read rhcd fifo files
  - Update insights-client policy for additional commands execution 5
  - Allow init remount all file_type filesystems
  - Confine insights-client systemd unit
  - Update insights-client policy for additional commands execution 4
  - Allow pcp pmcd search tracefs and acct_data dirs
  - Allow httpd read network sysctls
  - Dontaudit domain map permission on directories
  - Revert "Allow X userdomains to mmap user_fonts_cache_t dirs"
  - Revert "Allow xdm_t domain to mmap /var/lib/gdm/.cache/fontconfig BZ(1725509)"
  - Update insights-client policy for additional commands execution 3
  - Allow systemd permissions needed for sandboxed services
  - Add rhcd module
  - Make dependency on rpm-plugin-selinux unordered


author: Zdenek Pytela <zpytela@redhat.com> - 37.12-1
changelog:
  - nut-upsd: kernel_read_system_state, fs_getattr_cgroup
  - Add numad the ipc_owner capability
  - Allow gst-plugin-scanner read virtual memory sysctls
  - Allow init read/write inherited user fifo files
  - Update dnssec-trigger policy: setsched, module_request
  - added policy for systemd-socket-proxyd
  - Add the new 'cmd' permission to the 'io_uring' class
  - Allow winbind-rpcd read and write its key ring
  - Label /run/NetworkManager/no-stub-resolv.conf net_conf_t
  - blueman-mechanism can read ~/.local/lib/python*/site-packages directory
  - pidof executed by abrt can readlink /proc/*/exe
  - Fix typo in comment
  - Do not run restorecon /etc/NetworkManager/dispatcher.d in mls and minimum


author: Zdenek Pytela <zpytela@redhat.com> - 37.13-1
changelog:
  - Remove the ipa module
  - Allow sss daemons read/write unnamed pipes of cloud-init
  - Allow postfix_mailqueue create and use unix dgram sockets
  - Allow xdm watch user home directories
  - Allow nm-dispatcher ddclient plugin load a kernel module
  - Stop ignoring standalone interface files
  - Drop cockpit module
  - Allow init map its private tmp files
  - Allow xenstored change its hard resource limits
  - Allow system_mail-t read network sysctls
  - Add bgpd sys_chroot capability


author: Zdenek Pytela <zpytela@redhat.com> - 37.14-1
changelog:
  - Allow rotatelogs read httpd_log_t symlinks
  - Add winbind-rpcd to samba_enable_home_dirs boolean
  - Allow system cronjobs dbus chat with setroubleshoot
  - Allow setroubleshootd read device sysctls
  - Allow virt_domain read device sysctls
  - Allow rhcd compute selinux access vector
  - Allow insights-client manage samba var dirs
  - Label ports 10161-10162 tcp/udp with snmp
  - Allow aide to connect to systemd_machined with a unix socket.
  - Allow samba-dcerpcd use NSCD services over a unix stream socket
  - Allow vlock search the contents of the /dev/pts directory
  - Allow insights-client send null signal to rpm and system cronjob
  - Label port 15354/tcp and 15354/udp with opendnssec
  - Allow ftpd map ftpd_var_run files
  - Allow targetclid to manage tmp files
  - Allow insights-client connect to postgresql with a unix socket
  - Allow insights-client domtrans on unix_chkpwd execution
  - Add file context entries for insights-client and rhc
  - Allow pulseaudio create gnome content (~/.config)
  - Allow login_userdomain dbus chat with rhsmcertd
  - Allow sbd the sys_ptrace capability
  - Allow ptp4l_t name_bind ptp_event_port_t


author: Zdenek Pytela <zpytela@redhat.com> - 38.1-1
changelog:
  - Revert "Allow sysadm_t read raw memory devices"
  - Allow systemd-socket-proxyd get attributes of cgroup filesystems
  - Allow rpc.gssd read network sysctls
  - Allow winbind-rpcd get attributes of device and pty filesystems
  - Allow insights-client domain transition on semanage execution
  - Allow insights-client create gluster log dir with a transition
  - Allow insights-client manage generic locks
  - Allow insights-client unix_read all domain semaphores
  - Add domain_unix_read_all_semaphores() interface
  - Allow winbind-rpcd use the terminal multiplexor
  - Allow mrtg send mails
  - Allow systemd-hostnamed dbus chat with init scripts
  - Allow sssd dbus chat with system cronjobs
  - Add interface to watch all filesystems
  - Add watch_sb interfaces
  - Add watch interfaces
  - Allow dhcpd bpf capability to run bpf programs
  - Allow netutils and traceroute bpf capability to run bpf programs
  - Allow pkcs_slotd_t bpf capability to run bpf programs
  - Allow xdm bpf capability to run bpf programs
  - Allow pcscd bpf capability to run bpf programs
  - Allow lldpad bpf capability to run bpf programs
  - Allow keepalived bpf capability to run bpf programs
  - Allow ipsec bpf capability to run bpf programs
  - Allow fprintd bpf capability to run bpf programs
  - Allow systemd-socket-proxyd get filesystems attributes
  - Allow dirsrv_snmp_t to manage dirsrv_config_t & dirsrv_var_run_t files


author: Zdenek Pytela <zpytela@redhat.com> - 38.3-1
changelog:
  - Allow insights-client dbus chat with various services
  - Allow insights-client tcp connect to various ports
  - Allow insights-client run lpr and allow the proper role
  - Allow insights-client work with pcp and manage user config files
  - Allow redis get user names
  - Allow kernel threads to use fds from all domains
  - Allow systemd-modules-load load kernel modules
  - Allow login_userdomain watch systemd-passwd pid dirs
  - Allow insights-client dbus chat with abrt
  - Grant kernel_t certain permissions in the system class
  - Allow systemd-resolved watch tmpfs directories
  - Allow systemd-timedated watch init runtime dir
  - Make `bootc` be `install_exec_t`
  - Allow systemd-coredump create user_namespace
  - Allow syslog the setpcap capability
  - donaudit virtlogd and dnsmasq execmem


author: Zdenek Pytela <zpytela@redhat.com> - 38.4-1
changelog:
  - Allow NetworkManager and wpa_supplicant the bpf capability
  - Allow systemd-rfkill the bpf capability
  - Allow winbind-rpcd manage samba_share_t files and dirs
  - Label /var/lib/httpd/md(/.*)? with httpd_sys_rw_content_t
  - Allow gpsd the sys_ptrace userns capability
  - Introduce gpsd_tmp_t for sockfiles managed by gpsd_t
  - Allow load_policy_t write to unallocated ttys
  - Allow ndc read hardware state information
  - Allow system mail service read inherited certmonger runtime files
  - Add lpr_roles  to system_r roles
  - Revert "Allow insights-client run lpr and allow the proper role"
  - Allow stalld to read /sys/kernel/security/lockdown file
  - Allow keepalived to set resource limits
  - Add policy for mptcpd
  - Add policy for rshim
  - Allow admin users to create user namespaces
  - Allow journalctl relabel with var_log_t and syslogd_var_run_t files
  - Do not run restorecon /etc/NetworkManager/dispatcher.d in targeted
  - Trim changelog so that it starts at F35 time
  - Add mptcpd and rshim modules


author: Zdenek Pytela <zpytela@redhat.com> - 38.5-1
changelog:
  - Allow insights client work with gluster and pcp
  - Add insights additional capabilities
  - Add interfaces in domain, files, and unconfined modules
  - Label fwupdoffline and fwupd-detect-cet with fwupd_exec_t
  - Allow sudodomain use sudo.log as a logfile
  - Allow pdns server map its library files and bind to unreserved ports
  - Allow sysadm_t read/write ipmi devices
  - Allow prosody manage its runtime socket files
  - Allow kernel threads manage kernel keys
  - Allow systemd-userdbd the sys_resource capability
  - Allow systemd-journal list cgroup directories
  - Allow apcupsd dbus chat with systemd-logind
  - Allow nut_domain manage also files and sock_files in /var/run
  - Allow winbind-rpcd make a TCP connection to the ldap port
  - Label /usr/lib/rpm/rpmdb_migrate with rpmdb_exec_t
  - Allow tlp read generic SSL certificates
  - Allow systemd-resolved watch tmpfs directories
  - Revert "Allow systemd-resolved watch tmpfs directories"


author: Zdenek Pytela <zpytela@redhat.com> - 38.6-1
changelog:
  - Boolean: allow qemu-ga read ssh home directory
  - Allow kernel_t to read/write all sockets
  - Allow kernel_t to UNIX-stream connect to all domains
  - Allow systemd-resolved send a datagram to journald
  - Allow kernel_t to manage and have "execute" access to all files
  - Fix the files_manage_all_files() interface
  - Allow rshim bpf cap2 and read sssd public files
  - Allow insights-client work with su and lpstat
  - Allow insights-client tcp connect to all ports
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  - Allow unconfined user filetransition for sudo log files
  - Allow modemmanager create hardware state information files
  - Allow ModemManager all permissions for netlink route socket
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  - Allow hostname_t to read network sysctls.
  - Dontaudit ftpd the execmem permission
  - Allow svirt request the kernel to load a module
  - Allow icecast rename its log files
  - Allow upsd to send signal to itself
  - Allow wireguard to create udp sockets and read net_conf
  - Use '
  %setup       -q


  ' instead of '%setup'
  - Pass -p 1 to '
  %setup       -q


  '


author: Zdenek Pytela <zpytela@redhat.com> - 38.7-1
changelog:
  - Allowing snapper to create snapshots of /home/ subvolume/partition
  - Add boolean qemu-ga to run unconfined script
  - Label systemd-journald feature LogNamespace
  - Add none file context for polyinstantiated tmp dirs
  - Allow certmonger read the contents of the sysfs filesystem
  - Add journalctl the sys_resource capability
  - Allow nm-dispatcher plugins read generic files in /proc
  - Add initial policy for the /usr/sbin/request-key helper
  - Additional support for rpmdb_migrate
  - Add the keyutils module


author: Zdenek Pytela <zpytela@redhat.com> - 38.8-1
changelog:
  - Confine gnome-initial-setup
  - Allow qemu-guest-agent create and use vsock socket
  - Allow login_pgm setcap permission
  - Allow chronyc read network sysctls
  - Enhancement of the /usr/sbin/request-key helper policy
  - Fix opencryptoki file names in /dev/shm
  - Allow system_cronjob_t transition to rpm_script_t
  - Revert "Allow system_cronjob_t domtrans to rpm_script_t"
  - Add tunable to allow squid bind snmp port
  - Allow staff_t getattr init pid chr & blk files and read krb5
  - Allow firewalld to rw z90crypt device
  - Allow httpd work with tokens in /dev/shm
  - Allow svirt to map svirt_image_t char files
  - Allow sysadm_t run initrc_t script and sysadm_r role access
  - Allow insights-client manage fsadm pid files


author: Zdenek Pytela <zpytela@redhat.com> - 38.9-1
changelog:
  - Allow sssd read accountsd fifo files
  - Add support for the passt_t domain
  - Allow virtd_t and svirt_t work with passt
  - Add new interfaces in the virt module
  - Add passt interfaces defined conditionally
  - Allow tshark the setsched capability
  - Allow poweroff create connections to system dbus
  - Allow wg load kernel modules, search debugfs dir
  - Boolean: allow qemu-ga manage ssh home directory
  - Label smtpd with sendmail_exec_t
  - Label msmtp and msmtpd with sendmail_exec_t
  - Allow dovecot to map files in /var/spool/dovecot


author: Zdenek Pytela <zpytela@redhat.com> - 38.10-1
changelog:
  - Allow certmonger dbus chat with the cron system domain
  - Allow geoclue read network sysctls
  - Allow geoclue watch the /etc directory
  - Allow logwatch_mail_t read network sysctls
  - Allow insights-client read all sysctls
  - Allow passt manage qemu pid sock files


author: Zdenek Pytela <zpytela@redhat.com> - 38.11-1
changelog:
  - Allow dovecot-deliver write to the main process runtime fifo files
  - Allow dmidecode write to cloud-init tmp files
  - Allow chronyd send a message to cloud-init over a datagram socket
  - Allow cloud-init domain transition to insights-client domain
  - Allow mongodb read filesystem sysctls
  - Allow mongodb read network sysctls
  - Allow accounts-daemon read generic systemd unit lnk files
  - Allow blueman watch generic device dirs
  - Allow nm-dispatcher tlp plugin create tlp dirs
  - Allow systemd-coredump mounton /usr
  - Allow rabbitmq to read network sysctls


author: Zdenek Pytela <zpytela@redhat.com> - 38.12-1
changelog:
  - Allow telnetd read network sysctls
  - Allow munin system plugin read generic SSL certificates
  - Allow munin system plugin create and use netlink generic socket
  - Allow login_userdomain create user namespaces
  - Allow request-key to send syslog messages
  - Allow request-key to read/view any key
  - Add fs_delete_pstore_files() interface
  - Allow insights-client work with teamdctl
  - Allow insights-client read unconfined service semaphores
  - Allow insights-client get quotas of all filesystems
  - Add fs_read_pstore_files() interface
  - Allow generic kernel helper to read inherited kernel pipes


author: Zdenek Pytela <zpytela@redhat.com> - 38.13-1
changelog:
  - Add initial policy for cifs-helper
  - Label key.dns_resolver with keyutils_dns_resolver_exec_t
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  - Allow some systemd services write to cgroup files
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files
  - Allow systemd resolved to bind to arbitrary nodes
  - Allow plymouthd_t bpf capability to run bpf programs
  - Allow cupsd to create samba_var_t files
  - Allow rhsmcert request the kernel to load a module
  - Allow virsh name_connect virt_port_t
  - Allow certmonger manage cluster library files
  - Allow plymouthd read init process state
  - Add chromium_sandbox_t setcap capability
  - Allow snmpd read raw disk data
  - Allow samba-rpcd work with passwords
  - Allow unconfined service inherit signal state from init
  - Allow cloud-init manage gpg admin home content
  - Allow cluster_t dbus chat with various services
  - Allow nfsidmapd work with systemd-userdbd and sssd
  - Allow unconfined_domain_type use IORING_OP_URING_CMD on all device nodes
  - Allow plymouthd map dri and framebuffer devices
  - Allow rpmdb_migrate execute rpmdb
  - Allow logrotate dbus chat with systemd-hostnamed
  - Allow icecast connect to kernel using a unix stream socket
  - Allow lldpad connect to systemd-userdbd over a unix socket
  - Allow journalctl open user domain ptys and ttys
  - Allow keepalived to manage its tmp files
  - Allow ftpd read network sysctls
  - Label /run/bgpd with zebra_var_run_t
  - Allow gssproxy read network sysctls
  - Add the cifsutils module


author: Zdenek Pytela <zpytela@redhat.com> - 38.14-1
changelog:
  - Remove permissive domain for cifs_helper_t
  - Update the cifs-helper policy
  - Replace cifsutils_helper_domtrans() with keyutils_request_domtrans_to()
  - Update pkcsslotd policy for sandboxing
  - Allow abrt_t read kernel persistent storage files
  - Dontaudit targetd search httpd config dirs
  - Allow init_t nnp domain transition to policykit_t
  - Allow rpcd_lsad setcap and use generic ptys
  - Allow samba-dcerpcd connect to systemd_machined over a unix socket
  - Allow wireguard to rw network sysctls
  - Add policy for boothd
  - Allow kernel to manage its own BPF objects
  - Label /usr/lib/systemd/system/proftpd.* & vsftpd.* with ftpd_unit_file_t


author: Zdenek Pytela <zpytela@redhat.com> - 38.15-1
changelog:
  - Update policy for systemd-sleep
  - Remove permissive domain for rshim_t
  - Remove permissive domain for mptcpd_t
  - Allow systemd-bootchartd the sys_ptrace userns capability
  - Allow sysadm_t read nsfs files
  - Allow sysadm_t run kernel bpf programs
  - Update ssh_role_template for ssh-agent
  - Update ssh_role_template to allow read/write unallocated ttys
  - Add the booth module to modules.conf
  - Allow firewalld rw ica_tmpfs_t files


author: Zdenek Pytela <zpytela@redhat.com> - 38.16-1
changelog:
  - Add support for the systemd-pstore service
  - Allow kdumpctl_t to execmem
  - Update sendmail policy module for opensmtpd
  - Allow nagios-mail-plugin exec postfix master
  - Allow subscription-manager execute ip
  - Allow ssh client connect with a user dbus instance
  - Add support for ksshaskpass
  - Allow rhsmcertd file transition in /run also for socket files
  - Allow keyutils_dns_resolver_t execute keyutils_dns_resolver_exec_t
  - Allow plymouthd read/write X server miscellaneous devices
  - Allow systemd-sleep read udev pid files
  - Allow exim read network sysctls
  - Allow sendmail request load module
  - Allow named map its conf files
  - Allow squid map its cache files
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition


author: Zdenek Pytela <zpytela@redhat.com> - 38.17-1
changelog:
  - Label /dev/userfaultfd with userfaultfd_t
  - Allow blueman send general signals to unprivileged user domains
  - Allow dkim-milter domain transition to sendmail
  - Label /usr/sbin/cifs.idmap with cifs_helper_exec_t
  - Allow cifs-helper read sssd kerberos configuration files
  - Allow rpm_t sys_admin capability
  - Allow dovecot_deliver_t create/map dovecot_spool_t dir/file
  - Allow collectd_t read proc_net link files
  - Allow insights-client getsession process permission
  - Allow insights-client work with pipe and socket tmp files
  - Allow insights-client map generic log files
  - Update cyrus_stream_connect() to use sockets in /run
  - Allow keyutils-dns-resolver read/view kernel key ring
  - Label /var/log/kdump.log with kdump_log_t


author: Zdenek Pytela <zpytela@redhat.com> - 38.18-1
changelog:
  - Add support for kafs-dns requested by keyutils
  - Allow insights-client execmem
  - Add support for chronyd-restricted
  - Add init_explicit_domain() interface
  - Allow fsadm_t to get attributes of cgroup filesystems
  - Add list_dir_perms to kerberos_read_keytab
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t
  - Allow sendmail manage its runtime files
  - Allow keyutils_dns_resolver_exec_t be an entrypoint
  - Allow collectd_t read network state symlinks
  - Revert "Allow collectd_t read proc_net link files"
  - Allow nfsd_t to list exports_t dirs
  - Allow cupsd dbus chat with xdm
  - Allow haproxy read hardware state information
  - Add the kafs module


author: Zdenek Pytela <zpytela@redhat.com> - 38.19-1
changelog:
  - Change init_audit_control default value to true
  - Allow nfsidmapd connect to systemd-userdbd with a unix socket
  - Add the qatlib  module
  - Add the fdo module
  - Add the bootupd module
  - Set default ports for keylime policy
  - Create policy for qatlib
  - Add policy for FIDO Device Onboard
  - Add policy for bootupd
  - Add the qatlib module
  - Add the fdo module
  - Add the bootupd module


author: Zdenek Pytela <zpytela@redhat.com> - 38.20-1
changelog:
  - Allow httpd tcp connect to redis port conditionally
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  - Dontaudit aide the execmem permission
  - Remove permissive from fdo
  - Allow sa-update manage spamc home files
  - Allow sa-update connect to systemlog services
  - Label /usr/lib/systemd/system/mimedefang.service with antivirus_unit_file_t
  - Allow nsd_crond_t write nsd_var_run_t & connectto nsd_t
  - Allow bootupd search EFI directory


author: Zdenek Pytela <zpytela@redhat.com> - 38.21-1
changelog:
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files
  - Revert "Allow insights client map cache_home_t"
  - Allow nfsidmapd connect to systemd-machined over a unix socket
  - Allow snapperd connect to kernel over a unix domain stream socket
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  - Allow targetd read network sysctls
  - Set the abrt_handle_event boolean to on
  - Permit kernel_t to change the user identity in object contexts
  - Allow insights client map cache_home_t
  - Label /usr/sbin/mariadbd with mysqld_exec_t
  - Trim changelog so that it starts at F37 time
  - Define equivalency for /run/systemd/generator.early


author: Zdenek Pytela <zpytela@redhat.com> - 38.22-1
changelog:
  - Allow systemd-network-generator send system log messages
  - Dontaudit the execute permission on sock_file globally
  - Allow fsadm_t the file mounton permission
  - Allow named and ndc the io_uring sqpoll permission
  - Allow sssd io_uring sqpoll permission
  - Fix location for /run/nsd
  - Allow qemu-ga get fixed disk devices attributes
  - Update bitlbee policy
  - Label /usr/sbin/sos with sosreport_exec_t
  - Update policy for the sblim-sfcb service
  - Add the files_getattr_non_auth_dirs() interface
  - Fix the CI to work with DNF5


author: Zdenek Pytela <zpytela@redhat.com> - 38.23-1
changelog:
  - Revert "Allow winbind-rpcd use its private tmp files"
  - Allow upsmon execute upsmon via a helper script
  - Allow openconnect vpn read/write inherited vhost net device
  - Allow winbind-rpcd use its private tmp files
  - Update samba-dcerpc policy for printing
  - Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty
  - Allow nscd watch system db dirs
  - Allow qatlib to read sssd public files
  - Allow fedora-third-party read /sys and proc
  - Allow systemd-gpt-generator mount a tmpfs filesystem
  - Allow journald write to cgroup files
  - Allow rpc.mountd read network sysctls
  - Allow blueman read the contents of the sysfs filesystem
  - Allow logrotate_t to map generic files in /etc
  - Boolean: Allow virt_qemu_ga create ssh directory


author: Zdenek Pytela <zpytela@redhat.com> - 38.24-1
changelog:
  - Allow rhsmcertd dbus chat with policykit
  - Allow polkitd execute pkla-check-authorization with nnp transition
  - Allow user_u and staff_u get attributes of non-security dirs
  - Allow unconfined user filetrans chrome_sandbox_home_t
  - Allow svnserve execute postdrop with a transition
  - Do not make postfix_postdrop_t type an MTA executable file
  - Allow samba-dcerpc service manage samba tmp files
  - Add use_nfs_home_dirs boolean for mozilla_plugin
  - Fix labeling for no-stub-resolv.conf


author: Zdenek Pytela <zpytela@redhat.com> - 38.25-1
changelog:
  - ci: Move srpm/rpm build to packit
  - .copr: Avoid subshell and changing directory
  - Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
  - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
  - Make insights_client_t an unconfined domain
  - Allow insights-client manage user temporary files
  - Allow insights-client create all rpm logs with a correct label
  - Allow insights-client manage generic logs
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t
  - Allow insights-client read and write cluster tmpfs files
  - Allow ipsec read nsfs files
  - Make tuned work with mls policy
  - Remove nsplugin_role from mozilla.if
  - allow mon_procd_t self:cap_userns sys_ptrace
  - Allow pdns name_bind and name_connect all ports
  - Set the MLS range of fsdaemon_t to s0 - mls_systemhigh
  - ci: Move to actions/checkout@v3 version
  - .copr: Replace chown call with standard workflow safe.directory setting
  - .copr: Enable `set -u` for robustness
  - .copr: Simplify root directory variable


author: Zdenek Pytela <zpytela@redhat.com> - 38.26-1
changelog:
  - Change file transition for systemd-network-generator
  - Additional support for gnome-initial-setup
  - Update gnome-initial-setup policy for geoclue
  - Allow openconnect vpn open vhost net device
  - Allow cifs.upcall to connect to SSSD also through the /var/run socket
  - Grant cifs.upcall more required capabilities
  - Allow xenstored map xenfs files
  - Update policy for fdo
  - Allow keepalived watch var_run dirs
  - Allow svirt to rw /dev/udmabuf
  - Allow qatlib  to modify hardware state information.
  - Allow key.dns_resolve connect to avahi over a unix stream socket
  - Allow key.dns_resolve create and use unix datagram socket
  - Use quay.io as the container image source for CI


author: Zdenek Pytela <zpytela@redhat.com> - 38.27-1
changelog:
  - Allow fedora-third-party get generic filesystem attributes
  - Allow sssd use usb devices conditionally
  - Update policy for qatlib
  - Allow ssh_agent_type manage generic cache home files


author: Zdenek Pytela <zpytela@redhat.com> - 38.27-1
changelog:
  - Allow fedora-third-party get generic filesystem attributes
  - Allow sssd use usb devices conditionally
  - Update policy for qatlib
  - Allow ssh_agent_type manage generic cache home files
  - Update make-rhat-patches.sh file to use the f39 dist-git branch in F39


author: Zdenek Pytela <zpytela@redhat.com> - 38.28-1
changelog:
  - Allow sssd domain transition on passkey_child execution conditionally
  - Allow login_userdomain watch lnk_files in /usr
  - Allow login_userdomain watch video4linux devices
  - Change systemd-network-generator transition to include class file
  - Revert "Change file transition for systemd-network-generator"
  - Allow nm-dispatcher winbind plugin read/write samba var files
  - Allow systemd-networkd write to cgroup files
  - Allow kdump create and use its memfd: objects


author: Zdenek Pytela <zpytela@redhat.com> - 38.29-1
changelog:
  - Allow sssd send SIGKILL to passkey_child running in ipa_otpd_t
  - Allow systemd-localed create Xserver config dirs
  - Allow sssd read symlinks in /etc/sssd
  - Label /dev/gnss[0-9] with gnss_device_t
  - Allow systemd-sleep read/write efivarfs variables
  - ci: Fix version number of packit generated srpms
  - Dontaudit rhsmcertd write memory device
  - Allow ssh_agent_type create a sockfile in /run/user/USERID
  - Set default file context of /var/lib/authselect/backups to <<none>>
  - Allow prosody read network sysctls
  - Allow cupsd_t to use bpf capability


author: Zdenek Pytela <zpytela@redhat.com> - 38.30-1
changelog:
  - Support using systemd containers
  - Allow kernel_t to manage and relabel all files
  - Add missing optional_policy() to files_relabel_all_files()
  - Allow apcupsd cgi scripts read /sys
  - Improve default file context(None) of /var/lib/authselect/backups
  - Allow targetd write to the syslog pid sock_file
  - Add ipa_pki_retrieve_key_exec() interface
  - Allow kdumpctl_t to list all directories with a filesystem type
  - Allow udev additional permissions
  - Allow udev load kernel module
  - Allow sysadm_t to mmap modules_object_t files
  - Add the unconfined_read_files() and unconfined_list_dirs() interfaces
  - Set default file context of HOME_DIR/tmp/.* to <<none>>
  - Allow kernel_generic_helper_t to execute mount(1)


author: Zdenek Pytela <zpytela@redhat.com> - 38.2-1
changelog:
  - Don't make kernel_t an unconfined domain
  - Don't allow kernel_t to execute bin_t/usr_t binaries without a transition
  - Allow kernel_t to execute systemctl to do a poweroff/reboot
  - Grant basic permissions to the domain created by systemd_systemctl_domain()
  - Allow kernel_t to request module loading
  - Allow kernel_t to do compute_create
  - Allow kernel_t to manage perf events
  - Grant almost all capabilities to kernel_t
  - Allow kernel_t to fully manage all devices
  - Revert "In domain_transition_pattern there is no permission allowing caller domain to execu_no_trans on entrypoint, this patch fixing this issue"
  - Allow pulseaudio to write to session_dbusd tmp socket files
  - Allow systemd and unconfined_domain_type create user_namespace
  - Add the user_namespace security class
  - Reuse tmpfs_t also for the ramfs filesystem
  - Label udf tools with fsadm_exec_t
  - Allow networkmanager_dispatcher_plugin work with nscd
  - Watch_sb all file type directories.
  - Allow spamc read hardware state information files
  - Allow sysadm read ipmi devices
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  - Allow insights client read raw memory devices
  - Allow the spamd_update_t domain get generic filesystem attributes
  - Dontaudit systemd-gpt-generator the sys_admin capability
  - Allow ipsec_t only read tpm devices
  - Allow cups-pdf connect to the system log service
  - Allow postfix/smtpd read kerberos key table
  - Allow syslogd read network sysctls
  - Allow cdcc mmap dcc-client-map files
  - Add watch and watch_sb dosfs interface


author: Zdenek Pytela <zpytela@redhat.com> - 38.6-1
changelog:
  - Boolean: allow qemu-ga read ssh home directory
  - Allow kernel_t to read/write all sockets
  - Allow kernel_t to UNIX-stream connect to all domains
  - Allow systemd-resolved send a datagram to journald
  - Allow kernel_t to manage and have "execute" access to all files
  - Fix the files_manage_all_files() interface
  - Allow rshim bpf cap2 and read sssd public files
  - Allow insights-client work with su and lpstat
  - Allow insights-client tcp connect to all ports
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  - Allow unconfined user filetransition for sudo log files
  - Allow modemmanager create hardware state information files
  - Allow ModemManager all permissions for netlink route socket
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  - Allow hostname_t to read network sysctls.
  - Dontaudit ftpd the execmem permission
  - Allow svirt request the kernel to load a module
  - Allow icecast rename its log files
  - Allow upsd to send signal to itself
  - Allow wireguard to create udp sockets and read net_conf
  - Use 
  %setup       -q



  - Pass -p 1 to 
  %setup       -q


author: Zdenek Pytela <zpytela@redhat.com> - 39.1-1
changelog:
  - Support using systemd containers
  - Allow kernel_t to manage and relabel all files
  - Add missing optional_policy() to files_relabel_all_files()
  - Improve default file context(None) of /var/lib/authselect/backups
  - Allow targetd write to the syslog pid sock_file
  - Add ipa_pki_retrieve_key_exec() interface
  - Allow kdumpctl_t to list all directories with a filesystem type
  - Allow udev additional permissions
  - Allow udev load kernel module
  - Allow sysadm_t to mmap modules_object_t files
  - Add the unconfined_read_files() and unconfined_list_dirs() interfaces
  - Set default file context of HOME_DIR/tmp/.* to <<none>>
  - Allow kernel_generic_helper_t to execute mount(1)


author: Zdenek Pytela <zpytela@redhat.com> - 39.2-1
changelog:
  - Allow graphical applications work in Wayland
  - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
  - Allow kdump work with PrivateTmp
  - Allow dovecot-auth work with PrivateTmp
  - Allow nfsd get attributes of all filesystems
  - Allow fido-device-onboard (FDO) read the crack database
  - Allow  winbind_rpcd_t processes access when samba_export_all_* is on
  - Allow ntp to bind and connect to ntske port.
  - Allow apcupsd cgi scripts read /sys
  - Allow rpcbind read network sysctls


author: Zdenek Pytela <zpytela@redhat.com> - 39.3-1
changelog:
  - Allow init create and use vsock sockets
  - Allow ddclient send e-mail notifications
  - Allow postfix_master_t map postfix data files
  - Allow thumb_t append to init unix domain stream sockets
  - Allow spamd_update_t read hardware state information
  - Allow systemd-sleep create efivarfs files


author: Zdenek Pytela <zpytela@redhat.com> - 39.4-1
changelog:
  - Allow collectd read raw fixed disk device
  - Allow collectd read udev pid files
  - Allow httpd work with PrivateTmp
  - Allow certmonger read network sysctls
  - Allow systemd-sleep set attributes of efivarfs files
  - Allow spamd_update_t the sys_ptrace capability in user namespace
  - Allow alsa get attributes filesystems with extended attributes
  - Allow systemd-sleep send a message to syslog over a unix dgram socket


author: Zdenek Pytela <zpytela@redhat.com> - 40.5-1
changelog:
  - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
  - Allow graphical applications work in Wayland
  - Allow kdump work with PrivateTmp
  - Allow dovecot-auth work with PrivateTmp
  - Allow nfsd get attributes of all filesystems
  - Allow unconfined_domain_type use io_uring cmd on domain
  - ci: Only run Rawhide revdeps tests on the rawhide branch
  - Label /var/run/auditd.state as auditd_var_run_t
  - Allow fido-device-onboard (FDO) read the crack database
  - Allow ip an explicit domain transition to other domains
  - Label /usr/libexec/selinux/selinux-autorelabel with semanage_exec_t
  - Allow  winbind_rpcd_t processes access when samba_export_all_* is on
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection
  - Allow ntp to bind and connect to ntske port.
  - Allow system_mail_t manage exim spool files and dirs
  - Dontaudit keepalived setattr on keepalived_unconfined_script_exec_t
  - Label /run/pcsd.socket with cluster_var_run_t
  - ci: Run cockpit tests in PRs


author: Zdenek Pytela <zpytela@redhat.com> - 40.6-1
changelog:
  - Add afterburn to modules-targeted-contrib.conf
  - Update cifs interfaces to include fs_search_auto_mountpoints()
  - Allow sudodomain read var auth files
  - Allow spamd_update_t read hardware state information
  - Allow virtnetworkd domain transition on tc command execution
  - Allow sendmail MTA connect to sendmail LDA
  - Allow auditd read all domains process state
  - Allow rsync read network sysctls
  - Add dhcpcd bpf capability to run bpf programs
  - Dontaudit systemd-hwdb dac_override capability
  - Allow systemd-sleep create efivarfs files


author: Zdenek Pytela <zpytela@redhat.com> - 40.7-1
changelog:
  - Make named_zone_t and named_var_run_t a part of the mountpoint attribute
  - Allow sysadm execute traceroute in sysadm_t domain using sudo
  - Allow sysadm execute tcpdump in sysadm_t domain using sudo
  - Allow opafm search nfs directories
  - Add support for syslogd unconfined scripts
  - Allow gpsd use /dev/gnss devices
  - Allow gpg read rpm cache
  - Allow virtqemud additional permissions
  - Allow virtqemud manage its private lock files
  - Allow virtqemud use the io_uring api
  - Allow ddclient send e-mail notifications
  - Allow postfix_master_t map postfix data files
  - Allow init create and use vsock sockets
  - Allow thumb_t append to init unix domain stream sockets
  - Label /dev/vas with vas_device_t
  - Change domain_kernel_load_modules boolean to true
  - Create interface selinux_watch_config and add it to SELinux users


author: Zdenek Pytela <zpytela@redhat.com> - 40.8-1
changelog:
  - Allow hypervkvp_t write access to NetworkManager_etc_rw_t
  - Add interface for write-only access to NetworkManager rw conf
  - Allow systemd-sleep send a message to syslog over a unix dgram socket
  - Allow init create and use netlink netfilter socket
  - Allow qatlib load kernel modules
  - Allow qatlib run lspci
  - Allow qatlib manage its private runtime socket files
  - Allow qatlib read/write vfio devices
  - Label /etc/redis.conf with redis_conf_t
  - Remove the lockdown-class rules from the policy
  - Allow init read all non-security socket files
  - Replace redundant dnsmasq pattern macros
  - Remove unneeded symlink perms in dnsmasq.if
  - Add additions to dnsmasq interface
  - Allow nvme_stas_t create and use netlink kobject uevent socket
  - Allow collectd connect to statsd port
  - Allow keepalived_t to use sys_ptrace of cap_userns
  - Allow dovecot_auth_t connect to postgresql using UNIX socket


author: Zdenek Pytela <zpytela@redhat.com> - 40.9-1
changelog:
  - Allow systemd-sleep set attributes of efivarfs files
  - Allow samba-dcerpcd read public files
  - Allow spamd_update_t the sys_ptrace capability in user namespace
  - Allow bluetooth devices work with alsa
  - Allow alsa get attributes filesystems with extended attributes


author: Zdenek Pytela <zpytela@redhat.com> - 40.10-1
changelog:
  - Allow chronyd-restricted read chronyd key files
  - Allow conntrackd_t to use bpf capability2
  - Allow systemd-networkd manage its runtime socket files
  - Allow init_t nnp domain transition to colord_t
  - Allow polkit status systemd services
  - nova: Fix duplicate declarations
  - Allow httpd work with PrivateTmp
  - Add interfaces for watching and reading ifconfig_var_run_t
  - Allow collectd read raw fixed disk device
  - Allow collectd read udev pid files
  - Set correct label on /etc/pki/pki-tomcat/kra
  - Allow systemd domains watch system dbus pid socket files
  - Allow certmonger read network sysctls
  - Allow mdadm list stratisd data directories
  - Allow syslog to run unconfined scripts conditionally
  - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
  - Allow qatlib set attributes of vfio device files


author: Zdenek Pytela <zpytela@redhat.com> - 40.11-1
changelog:
  - Replace init domtrans rule for confined users to allow exec init
  - Update dbus_role_template() to allow user service status
  - Allow polkit status all systemd services
  - Allow setroubleshootd create and use inherited io_uring
  - Allow load_policy read and write generic ptys
  - Allow gpg manage rpm cache
  - Allow login_userdomain name_bind to howl and xmsg udp ports
  - Allow rules for confined users logged in plasma
  - Label /dev/iommu with iommu_device_t
  - Remove duplicate file context entries in /run
  - Dontaudit getty and plymouth the checkpoint_restore capability
  - Allow su domains write login records
  - Revert "Allow su domains write login records"
  - Allow login_userdomain delete session dbusd tmp socket files
  - Allow unix dgram sendto between exim processes
  - Allow su domains write login records
  - Allow smbd_t to watch user_home_dir_t if samba_enable_home_dirs is on


author: Zdenek Pytela <zpytela@redhat.com> - 40.12-1
changelog:
  - Rename all /var/lock file context entries to /run/lock
  - Rename all /var/run file context entries to /run
  - Invert the "/var/run = /run" equivalency


author: Zdenek Pytela <zpytela@redhat.com> - 40.13-1
changelog:
  - Only allow confined user domains to login locally without unconfined_login
  - Add userdom_spec_domtrans_confined_admin_users interface
  - Only allow admindomain to execute shell via ssh with ssh_sysadm_login
  - Add userdom_spec_domtrans_admin_users interface
  - Move ssh dyntrans to unconfined inside unconfined_login tunable policy
  - Update ssh_role_template() for user ssh-agent type
  - Allow init to inherit system DBus file descriptors
  - Allow init to inherit fds from syslogd
  - Allow any domain to inherit fds from rpm-ostree
  - Update afterburn policy
  - Allow init_t nnp domain transition to abrtd_t


author: Zdenek Pytela <zpytela@redhat.com> - 40.1-1
changelog:
  - Allow named and ndc use the io_uring api
  - Deprecate common_anon_inode_perms usage
  - Improve default file context(None) of /var/lib/authselect/backups
  - Allow udev_t to search all directories with a filesystem type
  - Implement proper anon_inode support
  - Allow targetd write to the syslog pid sock_file
  - Add ipa_pki_retrieve_key_exec() interface
  - Allow kdumpctl_t to list all directories with a filesystem type
  - Allow udev additional permissions
  - Allow udev load kernel module
  - Allow sysadm_t to mmap modules_object_t files
  - Add the unconfined_read_files() and unconfined_list_dirs() interfaces
  - Set default file context of HOME_DIR/tmp/.* to <<none>>
  - Allow kernel_generic_helper_t to execute mount(1)


author: Zdenek Pytela <zpytela@redhat.com> - 40.2-1
changelog:
  - Add the virt_supplementary module to modules-targeted-contrib.conf
  - Make new virt drivers permissive
  - Split virt policy, introduce virt_supplementary module
  - Allow apcupsd cgi scripts read /sys
  - Merge pull request #1893 from WOnder93/more-early-boot-overlay-fixes
  - Allow kernel_t to manage and relabel all files
  - Add missing optional_policy() to files_relabel_all_files()


author: Zdenek Pytela <zpytela@redhat.com> - 40.3-1
changelog:
  - Add policy for nvme-stas
  - Confine systemd fstab,sysv,rc-local
  - Label /etc/aliases.lmdb with etc_aliases_t
  - Create policy for afterburn
  - Add nvme_stas to modules-targeted-contrib.conf
  - Add plans/tests.fmf


author: Zdenek Pytela <zpytela@redhat.com> - 40.4-1
changelog:
  - Add map_read map_write to kernel_prog_run_bpf
  - Allow systemd-fstab-generator read all symlinks
  - Allow systemd-fstab-generator the dac_override capability
  - Allow rpcbind read network sysctls
  - Support using systemd containers
  - Allow sysadm_t to connect to iscsid using a unix domain stream socket
  - Add policy for coreos installer
  - Add coreos_installer to modules-targeted-contrib.conf


author: Martin Osvald <mosvald@redhat.com> - 2.13.10-1
changelog:
  - Move /var/log/lastlog ownership to systemd (#1798685)
  - tcsh sets variable p to /usr/sbin from /etc/csh.login (#2019874)
  - 'history -a' doesn't belong in /etc/bashrc (#1871744)
  - localhost.localdomain in wrong order /etc/hosts (#1724539)


author: Martin Osvald <mosvald@redhat.com> - 2.14.1-1
changelog:
  - bashrc sets hardcoded umask (#1902166)
  - bashrc: clean up unused references to VTE
  - uidgid: simplify table format and other format enhancements
  - uidgid: fix news and lock entries, move basic groups to systemd


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Bruno Wolff III <bruno@wolff.to> - 4.5-24.20220308git8b6ee89
changelog:
  - Continue testing upstream patches prior to 4.5.1 release.
  - Minor fixes
  - Man page tweaks
  - Tentative 4.5.1 change log


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


