# changelog

author: Patsy Griffin <patsy@redhat.com> - 2.40.9000-8
changelog:
  - Auto-sync with upstream branch master,
    commit c5dd659f22058bf9b371ab1cba07631f1206c674.
  - Add more tests of pthread_mutexattr_gettype and pthread_mutexattr_settype
  - libio: Fix a deadlock after fork in popen
  - configure: default to --prefix=/usr on GNU/Linux
  - manual: Document stdio.h functions that may be macros
  - Check time arguments to pthread_timedjoin_np and pthread_clockjoin_np
  - Add .b4-config file
  - linux: Fix tst-syscall-restart.c on old gcc (BZ 32283)
  - sparc: Fix restartable syscalls (BZ 32173)
  - support: Make support_process_state_wait return the found state
  - Enable transliteration rules with two input characters in scn_IT [BZ #32280]


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-9
changelog:
  - Auto-sync with upstream branch master,
    commit 43db5e2c0672cae7edea7c9685b22317eae25471:
  - elf: Signal RT_CONSISTENT after relocation processing in dlopen (bug 31986)
  - elf: Signal LA_ACT_CONSISTENT to auditors after RT_CONSISTENT switch
  - elf: Run constructors on cyclic recursive dlopen (bug 31986)
  - Linux: Match kernel text for SCHED_ macros
  - libio: Correctly link tst-popen-fork against libpthread


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-10
changelog:
  - Auto-sync with upstream branch master,
    commit ac73067cb7a328bf106ecd041c020fc61be7e087:
  - elf: Fix map_complete Systemtap probe in dl_open_worker


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-13
changelog:
  - Restore compatibility with libglvnd by reverting
    "elf: Run constructors on cyclic recursive dlopen (bug 31986)"


author: DJ Delorie <dj@redhat.com> - 2.40.9000-17
changelog:
  - Auto-sync with upstream branch master,
    commit 7b544224f82d20019f9b28522ebf8114a372d1a2.
  - stat.h: Fix missing declaration of struct timespec
  - mach: Fix __xpg_strerror_r on in-range but undefined errors [BZ #32350]
  - x86/string: Use `movsl` instead of `movsd` [BZ #32344]
  - Rename new tst-sem17 test to tst-sem18
  - Avoid uninitialized result in sem_open when file does not exist
  - nptl: initialize rseq area prior to registration
  - s390x: Update ulps
  - elf: avoid jumping over a needed declaration
  - math: Fix log10f on some ABIs
  - stdio-common: Add tests for formatted vsnprintf output specifiers
  - stdio-common: Add tests for formatted vsprintf output specifiers
  - stdio-common: Add tests for formatted vfprintf output specifiers
  - stdio-common: Add tests for formatted vdprintf output specifiers
  - stdio-common: Add tests for formatted vasprintf output specifiers
  - stdio-common: Add tests for formatted vprintf output specifiers
  - stdio-common: Add tests for formatted snprintf output specifiers
  - stdio-common: Add tests for formatted sprintf output specifiers
  - stdio-common: Add tests for formatted fprintf output specifiers
  - stdio-common: Add tests for formatted dprintf output specifiers
  - stdio-common: Add tests for formatted asprintf output specifiers
  - stdio-common: Add tests for formatted printf output specifiers
  - nptl: fix __builtin_thread_pointer detection on LoongArch
  - math: Fix incorrect results of exp10m1f with some GCC versions
  - misc: Align argument name for pkey_*() functions with the manual
  - manual: Use more precise wording for memory protection keys
  - elf: Switch to main malloc after final ld.so self-relocation
  - elf: Introduce _dl_relocate_object_no_relro
  - elf: Do not define consider_profiling, consider_symbind as macros
  - elf: rtld_multiple_ref is always true
  - Add Arm HWCAP2_* constants from Linux 3.15 and 6.2 to <bits/hwcap.h>
  - Add feature test macro _ISOC2Y_SOURCE
  - added license for sysdeps/ieee754/flt-32/e_gammaf_r.c
  - AArch64: Remove SVE erf and erfc tables
  - x86_64: Add exp2m1f with FMA
  - x86_64: Add exp10m1f with FMA
  - math: Use log10p1f from CORE-MATH
  - math: Use log1pf from CORE-MATH
  - math: Use log2p1f from CORE-MATH
  - math: Use log10f from CORE-MATH
  - math: Use expm1f from CORE-MATH
  - math: Use exp2m1f from CORE-MATH
  - math: Use exp10m1f from CORE-MATH
  - benchtests: Add log10p1f benchmark
  - benchtests: Add log1p benchmark
  - benchtests: Add log2p1f benchmark
  - benchtests: Add log10f benchmark
  - benchtests: Add expm1f benchmark
  - benchtests: Add exp2m1f benchmark
  - benchtests: Add exp10m1f benchmark
  - math: Add e_gammaf_r to glibc code and style
  - LoongArch: Add RSEQ_SIG in rseq.h.
  - nptl: Add <thread_pointer.h> for LoongArch
  - Link tst-clock_gettime with $(librt)
  - powerpc64: Obviate the need for ROP protection in clone/clone3
  - Add tests of time, gettimeofday, clock_gettime
  - Add more tests of pthread attributes initial values
  - Document further requirement on mixing streams / file descriptors
  - powerpc64le: Adhere to ABI stack alignment requirement
  - AArch64: Small optimisation in AdvSIMD erf and erfc
  - Revert "elf: Run constructors on cyclic recursive dlopen (bug 31986)"
  - elf: Change ldconfig auxcache magic number (bug 32231)
  - SHARED-FILES: Mention bundled Linux 6.10 headers.
  - libio: Fix crash in fputws [BZ #20632]
  - stdio-common: Fix scanf parsing for NaN types [BZ #30647]


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-19
changelog:
  - Auto-sync with upstream branch master,
    commit 47311cca31e685fa7bfe19bb8cef17d2d3d7fff9:
  - manual: Add description of AArch64-specific pkey flags
  - AArch64: Add support for memory protection keys
  - AArch64: Remove thunderx{,2} memcpy
  - powerpc64le: Optimized strcat for POWER10
  - powerpc: Improve the inline asm for syscall wrappers
  - elf: handle addition overflow in _dl_find_object_update_1 [BZ #32245]
  - x86/string: Use `movsl` instead of `movsd` in strncpy/strncat [BZ #32344]
  - manual: Fix overeager s/int/size_t/ in memory.texi
  - linux: Add support for getrandom vDSO


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-21
changelog:
  - Drop glibc-rh2327564-1.patch, glibc-rh2327564-2.patch.  Fixed upstream.
    (#2327564)
  - Auto-sync with upstream branch master,
    commit e2436d6f5aa47ce8da80c2ba0f59dfb9ffde08f3:
  - malloc: send freed small chunks to smallbin
  - AArch64: Remove zva_128 from memset
  - benchtests: Add calloc test
  - libio: make _IO_least_marker static
  - malloc: Avoid func call for tcache quick path in free()
  - math: Add internal roundeven_finite
  - RISC-V: Use builtin for fma and fmaf
  - RISC-V: Use builtin for copysign and copysignf
  - Silence most -Wzero-as-null-pointer-constant diagnostics
  - sysdeps: linux: Fix output of LD_SHOW_AUXV=1 for AT_RSEQ_*
  - nptl: initialize cpu_id_start prior to rseq registration
  - math: Fix branch hint for 68d7128942
  - ﻿powerpc64le: ROP Changes for strncpy/ppc-mount
  - math: Fix non-portability in the computation of signgam in lgammaf
  - malloc: Split _int_free() into 3 sub functions
  - math: Use tanf from CORE-MATH
  - math: Use lgammaf from CORE-MATH
  - math: Use erfcf from CORE-MATH
  - math: Use erff from CORE-MATH
  - math: Split s_erfF in erff and erfc
  - math: Use cbrtf from CORE-MATH
  - benchtests: Add tanf benchmark
  - benchtests: Add lgammaf benchmark
  - benchtests: Add erfcf benchmark
  - benchtests: Add erff benchmark
  - benchtests: Add cbrtf benchmark
  - elf: Handle static PIE with non-zero load address [BZ #31799]
  - x86/string: Use `movsl` instead of `movsd` in strncat [BZ #32344]
  - stdlib: Make getenv thread-safe in more cases
  - aarch64: Remove non-temporal load/stores from oryon-1's memset
  - aarch64: Remove non-temporal load/stores from oryon-1's memcpy
  - ﻿powerpc64le: _init/_fini file changes for ROP
  - misc: remove extra va_end in error_tail (bug 32233)
  - intl: avoid alloca for arbitrary sizes (bug 32380)


author: Arjun Shankar <arjun@redhat.com> - 2.40.9000-23
changelog:
  - Auto-sync with upstream branch master,
    commit 97b74cbbb0724c26fbbd5037a6ab9f81ac0a10a1:
  - s390: Simplify elf_machine_{load_address, dynamic} [BZ #31799]
  - or1k: Update libm-test-ulps
  - nptl: Add <thread_pointer.h> for or1k
  - Implement C23 atan2pi
  - Clear CXX and TEST_CXX if C++ link test fails
  - math: Remove __XXX math functions from installed math.h [BZ #32418]
  - Optimize bsearch() implementation for performance
  - benchtests: Add benchmark test for bsearch
  - Implement C23 atanpi
  - powerpc64: Fix dl-trampoline.S big-endian / non-ROP build failure
  - powerpc: Use correct procedure call standard for getrandom vDSO call (bug 32440)
  - Add TEST_CC and TEST_CXX support
  - ﻿powerpc64le: ROP changes for the dl-trampoline functions
  - malloc: Add tcache path for calloc
  - Implement C23 asinpi
  - malloc: add indirection for malloc(-like) functions in tests [BZ #32366]
  - Implement C23 acospi
  - ﻿powerpc64le: ROP changes for the *context and setjmp functions
  - nptl: Add <thread_pointer.h> for m68k
  - nptl: Add <thread_pointer.h> for RISC-V
  - nptl: add RSEQ_SIG for RISC-V
  - AArch64: Improve codegen in users of ADVSIMD expm1 helper
  - AArch64: Improve codegen in users of ADVSIMD log1p helper
  - AArch64: Improve codegen in AdvSIMD logs
  - AArch64: Improve codegen in AdvSIMD pow
  - s390x: Regenerated ULPs.
  - htl: move pthread_condattr_setpshared into libc.
  - htl: move pthread_condattr_setclock into libc.
  - htl: move pthread_condattr_init into libc.
  - htl: move pthread_condattr_getpshared into libc.
  - htl: move pthread_condattr_getclock into libc.
  - htl: move __pthread_default_condattr into libc.
  - htl: move pthread_condattr_destroy into libc.
  - math: Add sinpi,cospi,tanpi sparc64 ulps
  - math: Add tanpi aarch64 ulps
  - math: Exclude internal math symbols for tests [BZ #32414]
  - Remove AC_SUBST(libc_cv_mtls_descriptor)
  - Implement C23 tanpi
  - Fix typo in elf/Makefile:postclean-generated
  - math: xfail some sinpi tests for ibm128-libgcc
  - math: xfail some cospi tests for ibm128-libgcc
  - powerpc: Update ulps
  - AArch64: Update libm-test-ulps
  - i686: Update libm-test-ulps
  - x86-64: Update libm-test-ulps
  - Use M_LIT in place of M_MLIT for literals
  - Add further test of TLS
  - hurd: Protect against servers returning bogus read/write lengths
  - Fix and sort variables in Makefiles
  - Implement C23 sinpi
  - Implement C23 cospi
  - malloc: Optimize small memory clearing for calloc
  - Use Linux 6.12 in build-many-glibcs.py
  - locale: More strictly implement ISO 8601 for Esperanto locale
  - elf: Consolidate stackinfo.h
  - manual: Describe struct link_map, support link maps with dlinfo
  - Add threaded test of sem_trywait
  - Add test of ELF hash collisions
  - nptl: Add new test for pthread_spin_trylock


author: DJ Delorie <dj@redhat.com> - 2.40.9000-24
changelog:
  - Auto-sync with upstream branch master,
    commit dd413a4d2f320d5c3bc43e0788919724c89b3dab.
  - Fix sysdeps/x86/fpu/Makefile: Split and sort tests
  - sysdeps/x86/fpu/Makefile: Split and sort tests
  - Use empty initializer to silence GCC 4.9 or older
  - Linux: Check for 0 return value from vDSO getrandom probe
  - hppa: Update libm-test-ulps
  - Revert "Add braces in initializers for GCC 4.9 or older"
  - tst-difftime.c: Use "main (void)"
  - or1k: Update libm-test-ulps
  - htl: move pthread_sigmask into libc.
  - htl: move __pthread_sigstate into libc.
  - htl: move __pthread_sigstate_destroy into libc.
  - Return EXIT_UNSUPPORTED if __builtin_add_overflow unavailable
  - ifuncmain9.c: Return EXIT_UNSUPPORTED for GCC 5.4 or older
  - include/bits/sigstksz.h: Avoid #elif IS_IN (libsupport)
  - regex.h: Avoid #elif __STDC_VERSION__
  - tst-assert-c++.cc: Return EXIT_UNSUPPORTED for GCC 4.9 or older
  - Add braces in initializers for GCC 4.9 or older
  - Return EXIT_UNSUPPORTED if __builtin_mul_overflow unavailable
  - tst-minsigstksz-1.c: Return EXIT_UNSUPPORTED for GCC 4.9 or older
  - tester.c: Use -Wmemset-transposed-args for GCC 5 or newer
  - Makefile.in: Add test to check xcheck rule
  - Don't use TEST_CXX as CXX for build
  - AArch64: Update libm-test-ulps


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-25
changelog:
  - Update glibc-nolink-libc.patch following upstream development.
  - Update glibc-python3.patch to resolve copyright year conflict.
  - Auto-sync with upstream branch master,
    commit cc74583f23657515b1d09d0765032422af71de52:
  - elf: Remove the remaining uses of GET_ADDR_OFFSET
  - elf: Use TLS_DTV_OFFSET in __tls_get_addr
  - s390: Define TLS_DTV_OFFSET instead of GET_ADDR_OFFSET
  - elf: Introduce generic <dl-tls.h>
  - Update copyright dates not handled by scripts/update-copyrights
  - Update copyright in generated files by running "make"
  - Update copyright dates with scripts/update-copyrights
  - mlock, mlock2, munlock: Tell the compiler we don't dereference the pointer
  - elf: Add glibc.rtld.execstack
  - elf: Do not change stack permission on dlopen/dlmopen
  - x86-64: Reorder dynamic linker list in ldd script (bug 32508)
  - libio: asprintf should write NULL upon failure
  - nptl: More useful padding in struct pthread
  - elf: Remove the GET_ADDR_ARGS and related macros from the TLS code
  - build-many-glibcs.py: Add --exclude option
  - NEWS: Mention testing glibc build with a different set of compilers
  - support: Add support_record_failure_barrier
  - io: statx, fstatat: Drop nonnull attribute on the path argument
  - configure: Improve configure output for C++ Compiler
  - getaddrinfo.c: Avoid uninitialized pointer access [BZ #32465]
  - include/sys/cdefs.h: Add __attribute_optimization_barrier__
  - assert: Use __writev in assert.c [BZ #32492]
  - elf: Check PDE load address with non-empty text section
  - Add clang specific warning suppression macros
  - Add include/libc-misc.h
  - Don't redefine INFINITY nor NAN
  - assert: ensure posix compliance, add tests for such
  - posix: fix system when a child cannot be created [BZ #32450]
  - Fix elf: Introduce is_rtld_link_map [BZ #32488]
  - elf: Reorder audit events in dlcose to match _dl_fini (bug 32066)
  - elf: Call la_objclose for proxy link maps in _dl_fini (bug 32065)
  - elf: Signal la_objopen for the proxy link map in dlmopen (bug 31985)
  - elf: Add the endswith function to <endswith.h>
  - elf: Move _dl_rtld_map, _dl_rtld_audit_state out of GL
  - elf: Introduce is_rtld_link_map
  - Add F_CREATED_QUERY from Linux 6.12 to bits/fcntl-linux.h
  - Add HWCAP_LOONGARCH_LSPW from Linux 6.12 to bits/hwcap.h
  - Add MSG_SOCK_DEVMEM from Linux 6.12 to bits/socket.h
  - Linux: Accept null arguments for utimensat pathname
  - x86_64: Remove unused padding from tcbhead_t
  - Add NT_X86_XSAVE_LAYOUT and NT_ARM_POE from Linux 6.12 to elf.h
  - Add SCHED_EXT from Linux 6.12 to bits/sched.h
  - math: Use tanhf from CORE-MATH
  - math: Use sinhf from CORE-MATH
  - math: Use coshf from CORE-MATH
  - math: Use atanhf from CORE-MATH
  - math: Use atan2f from CORE-MATH
  - math: Use atanf from CORE-MATH
  - math: Use asinhf from CORE-MATH
  - math: Use asinf from CORE-MATH
  - math: Use acoshf from CORE-MATH
  - math: Use acosf from CORE-MATH
  - math: Fix the expected carg (inf) results
  - math: Fix the expected atan2f (inf) results
  - math: Fix the expected atanf (inf) results
  - math: Add inf support on gen-auto-libm-tests.c
  - math: Fix spurious-divbyzero flag name
  - benchtests: Add tanhf benchmark
  - benchtests: Add sinhf benchmark
  - benchtests: Add coshf benchmark
  - benchtests: Add atanhf benchmark
  - benchtests: Add atan2f benchmark
  - benchtests: Add atanf benchmark
  - benchtests: Add asinhf benchmark
  - benchtests: Add asinf benchmark
  - benchtests: Add acoshf benchmark
  - benchtests: Add acosf benchmark
  - Update syscall lists for Linux 6.12
  - ungetc: Guarantee single char pushback
  - sys/platform/x86.h: Do not depend on _Bool definition in C++ mode
  - ldbl-96: Set -1 to "int sign_exponent:16"
  - x86: Avoid integer truncation with large cache sizes (bug 32470)
  - AArch64: Improve codegen of AdvSIMD expf family
  - AArch64: Improve codegen of AdvSIMD atan(2)(f)
  - AArch64: Improve codegen of AdvSIMD logf function family
  - manual: Document more sigaction flags
  - Remove duplicated BUILD_CC in Makeconfig
  - iconv: do not report error exit with transliteration [BZ #32448]


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-27
changelog:
  - Drop glibc-nolink-libc.patch, applied upstream.
  - Drop glibc-clone-reset-tid.patch, unnecessary due to upstream reverts.
  - Add glibc-benchtests-extra-pi-inputs.patch to fix aarch64 build failure.
  - Auto-sync with upstream branch master,
    commit 502a71c5785f21ef4e3bad59949fdf86df73d385:
  - i686: Regenerate multiarch ulps
  - Revert "configure: default to --prefix=/usr on GNU/Linux"
  - elf: Minimize library dependencies of tst-nolink-libc.c
  - elf: Second ld.so relocation only if libc.so has been loaded
  - Revert "x86_64: Remove unused padding from tcbhead_t"
  - Revert "nptl: More useful padding in struct pthread"
  - LoongArch: Regenerate preconfigure. [bug 32521]
  - loongarch: Drop __GI_XXX for strcpy/stpcpy IFUNC implementations
  - AArch64: Improve codegen in SVE expm1f and users
  - AArch64: Add vector tanpi routines
  - AArch64: Add vector cospi routines
  - AArch64: Add vector sinpi to libmvec
  - math: Remove no-mathvec flag
  - AArch64: Improve codegen for SVE log1pf users
  - AArch64: Improve codegen for SVE logs
  - AArch64: Improve codegen in SVE tans
  - AArch64: Improve codegen in AdvSIMD asinh
  - math: Add a reference to Clang's <tgmath.h> C23 issue
  - Redirect mempcpy and stpcpy only in libc.a
  - mlock, mlock2, munlock: Use __attr_access_none macro
  - stdlib: random_r: fix unaligned access in initstate and initstate_r [BZ #30584]
  - assert: Remove the use of %n from __assert_fail_base (#2318508)
  - Translations: Regenerate libc.pot


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-30
changelog:
  - CVE-2025-0577: getrandom, arc4random could return predictable data
    after fork (#2338960)
  - Drop glibc-benchtests-extra-pi-inputs.patch, applied upstream.
  - Auto-sync with upstream branch master,
    commit 91bb902f58264a2fd50fbce8f39a9a290dd23706:
  - nptl: Use all of g1_start and g_signals
  - nptl: rename __condvar_quiesce_and_switch_g1
  - nptl: Fix indentation
  - nptl: Use a single loop in pthread_cond_wait instaed of a nested loop
  - nptl: Remove g_refs from condition variables
  - nptl: Remove unnecessary quadruple check in pthread_cond_wait
  - nptl: Remove unnecessary catch-all-wake in condvar group switch
  - nptl: Update comments and indentation for new condvar implementation
  - pthreads NPTL: lost wakeup fix 2
  - Linux: Add tests that check that TLS and rseq area are separate
  - Consolidate TLS block allocation for static binaries with ld.so
  - elf: Iterate over loaded object list in _dl_determine_tlsoffset
  - benchtests: Add dummy in put files cospi, cospif, sinpi, sinpif, tanpi, tanpif
  - Linux: Fixes for getrandom fork handling
  - affinity-inheritance: Overallocate CPU sets
  - inet: Add common IPv6 packet header macros
  - aarch64: Use 64-bit variable to access the special registers
  - x86-64: Cast __rseq_offset to long long int [BZ #32543]
  - Linux: Update internal copy of '<sys/rseq.h>'
  - nptl: Remove the rseq area from 'struct pthread'
  - nptl: Move the rseq area to the 'extra TLS' block
  - nptl: Introduce <rseq-access.h> for RSEQ_* accessors
  - nptl: add rtld_hidden_proto to __rseq_size and __rseq_offset
  - Add Linux 'extra TLS'
  - Add generic 'extra TLS'
  - nptl: Add rseq auxvals
  - Add missing include guards to <dl-tls.h>
  - configure: Clear libc_cv_cc_wimplicit_fallthrough if not supported
  - elf: Always define TLS_TP_OFFSET
  - x86: Add missing #include <features.h> to <thread_pointer.h>
  - Move <thread_pointer.h> to kernel-independent sysdeps directories
  - math: Fix acosf when building with gcc <= 11


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-31
changelog:
  - Auto-sync with upstream branch master,
    commit 1ac28b781882e3f14b41dcb06f3f945d53938948:
  - stdlib: Test for expected sequence of random numbers from rand
  - stdlib: Fix unintended change to the random_r implementation
  - NEWS: Add the extensible rseq ABI to new features
  - Linux: Do not check unused bytes after sched_getattr in tst-sched_setattr
  - aarch64: Fix tests not compatible with targets supporting GCS
  - aarch64: Use __alloc_gcs in makecontext
  - aarch64: Add GCS user-space allocation logic
  - aarch64: Process gnu properties in static exe
  - aarch64: Ignore GCS property of ld.so
  - aarch64: Handle GCS marking
  - aarch64: Use l_searchlist.r_list for bti
  - aarch64: Mark objects with GCS property note
  - aarch64: Enable GCS in dynamic linked exe
  - aarch64: Enable GCS in static linked exe
  - aarch64: Add glibc.cpu.aarch64_gcs tunable
  - aarch64: Add GCS support for makecontext
  - aarch64: Mark swapcontext with indirect_return
  - aarch64: Add GCS support for setcontext
  - aarch64: Add GCS support to vfork
  - aarch64: Add GCS support to longjmp
  - aarch64: Define jmp_buf offset for GCS
  - elf.h: Define GNU_PROPERTY_AARCH64_FEATURE_1_GCS
  - aarch64: Add asm helpers for GCS


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-32
changelog:
  - Auto-sync with upstream branch master,
    commit 76c3f7f81b7b99fedbff6edc07cddff59e2ae6e2:
  - po: Incorporate translations
  - Fix underallocation of abort_msg_s struct (CVE-2025-0395)
  - Fix typo: _POSIX_REATIME_SIGNALS -> _POSIX_REALTIME_SIGNALS [BZ# 32515]
  - aarch64: Add HWCAP_GCS


author: DJ Delorie <dj@redhat.com> - 2.40.9000-35
changelog:
  - Auto-sync with upstream branch master,
    commit 9b2f20dd54079afb68addf23685b039f1accd6e0.
  - po: update translations (final, only timestamp and line number changes)
  - libc.pot: regenerate (only line number changes)
  - INSTALL: update last tested version numbers
  - contrib.texi: minor improvements
  - NEWS: Add some more news from the 2.41 cycle
  - contrib.texi: Update from 2.40..2.41 commit log
  - NEWS: Add reference to (single) advisory
  - NEWS: Add list of bugs fixed in 2.41
  - NEWS: editorial changes (language, line breaks)
  - testsuite: Make stdio-common/tst-printf-format-*-mem UNSUPPORTED if the mtrace output does not exist
  - elf: fix 'valgrind' typo in comment
  - malloc: cleanup casts in tst-calloc
  - stdlib: Test using setenv with updated environ [BZ #32588]
  - LICENSES: update CORE-MATH copyright
  - LICENSES: update location of getaddrinfo.c and getnameinfo.c
  - LICENSES: remove Intel License Agreement
  - stdlib: Re-implement free (environ) compatibility kludge for setenv
  - Revert "stdlib: Support malloc-managed environ arrays for compatibility"
  - stdlib: Support malloc-managed environ arrays for compatibility


author: Florian Weimer <fweimer@redhat.com> - 2.40.9000-4
changelog:
  - Auto-sync with upstream branch master,
    commit fa1b0d5e9f6e0353e16339430770a7a8824c0468:
  - iconv: Input buffering for the iconv program (bug 6050)
  - iconv: Multiple - on command line should not fail (bug 32050)
  - iconv: Support in-place conversions (bug 10460, bug 32033)
  - iconv: Preserve iconv -c error exit on invalid inputs (bug 32046)
  - manual: __is_last is no longer part of iconv internals
  - iconv: Do not use mmap in iconv (the program) (bug 17703)
  - iconv: Base tests for buffer management
  - AArch64: Add vector logp1 alias for log1p
  - Linux: Add missing scheduler constants to <sched.h>
  - Linux: Add the sched_setattr and sched_getattr functions
  - manual: Extract the @manpageurl{func,sec} macro
  - AArch64: Remove memset-reg.h
  - debug: Fix read error handling in pcprofiledump
  - AArch64: Optimize memset
  - aarch64: Avoid redundant MOVs in AdvSIMD F32 logs
  - Document limitations on streams passed to freopen
  - stdlib: Do not use GLIBC_PRIVATE ABI for errno in libc_nonshared.a
  - manual: Safety annotations for clock_gettime, clock_getres
  - timezone: sync to TZDB 2024b
  - Fix freopen handling of ,ccs= (bug 23675)
  - powerpc64le: Build new strtod tests with long double ABI flags (bug 32145)


author: Arjun Shankar <arjun@redhat.com> - 2.40.9000-5
changelog:
  - Auto-sync with upstream branch master,
    commit da29dc24d419656a4a6d6d61598b767b86b1425d:
  - nptl: Prefer setresuid32 in tst-setuid2
  - elf: Move __rtld_malloc_init_stubs call into _dl_start_final
  - elf: Eliminate alloca in open_verify
  - elf: Remove version assert in check_match in elf/dl-lookup.c
  - elf: In rtld_setup_main_map, assume ld.so has a DYNAMIC segment
  - misc: Enable internal use of memory protection keys
  - misc: Link tst-mkstemp-fuse-parallel with $(shared-thread-library)
  - iconv: Use $(run-program-prefix) for running iconv (bug 32197)
  - AArch64: Simplify rounding-multiply pattern in several AdvSIMD routines
  - AArch64: Improve codegen in users of ADVSIMD expm1f helper
  - AArch64: Improve codegen in users of AdvSIMD log1pf helper
  - AArch64: Improve codegen in SVE F32 logs
  - AArch64: Improve codegen in SVE expf & related routines
  - Linux: readdir64_r should not skip d_ino == 0 entries (bug 32126)
  - dirent: Add tst-rewinddir
  - dirent: Add tst-readdir-long
  - Linux: Use readdir64_r for compat __old_readdir64_r (bug 32128)
  - dirent: Add tst-closedir-leaks
  - support: Add valgrind instructions to <support/fuse.h>
  - support: Fix memory leaks in FUSE tests
  - misc: FUSE-based tests for mkstemp
  - Add freopen special-case tests: chroot, EFBIG, stdin/stdout/stderr
  - Make tst-strtod-underflow type-generic
  - Add tests of more strtod special cases
  - Add more tests of strtod end pointer
  - Make tst-strtod2 and tst-strtod5 type-generic
  - Implement run-built-tests=no for make xcheck, always build xtests
  - Test that errno is set to 0 at program startup
  - Add another test for fclose on an unopened file


author: Stephen Smoogen <ssmoogen@redhat.com> - 1.0.3-1
changelog:
  - Update to upstream 1.0.3
  - Changes since 1.0.2: * Image format version 1 was added that allows
    storing overlay whiteouts in a composefs image. * libcomposefs added
    max_version option * mkcomposefs added --version and --max-version
    options * composefs can now be build without go-md2man * Minor bugfix
    handling file read errors


author: Dalton Hubble <dghubble@gmail.com> - 1.6.19-1
changelog:
  - Update to 1.16.19 (rhbz#2159032)
  - Mitigates CVE-2023-25153 / GHSA-259w-8hf6-59c2
  - Mitigates CVE-2023-25173 / GHSA-hmfx-3pcx-653p


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.0.1-1
changelog:
  - Update to release v2.0.1
  - Resolves rhbz#2332367
  - Drops 0001-fsverity.IsEnabled-big-endian-fix.patch. Upstream incorporated
    a change that obviates this patch.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2.0.2-1
changelog:
  - Update to release v2.0.2
  - Resolves rhbz#2337577
  - Upstream release note summary: "The second patch release for containerd
    2.0 includes a number of bug fixes and improvements."


author: Lokesh Mandvekar <lsm5@redhat.com> - 5:0.58.0-17
changelog:
  - Revert "Add a hard requirement on composefs for now" and "Turn on
    composefs and convert_images=true"


author: Irene Diez <idiez@redhat.com> - 0.17.0-2
changelog:
  - Update dracut/scripts: no need to mount the filesystem
    https://github.com/coreos/coreos-installer-dracut/pull/30


author: Packit <hello@packit.dev> - 0.22.1-1
changelog:
  - New upstream release
  - Drop too-strict dependencies patch. Fixed by:
    https://github.com/coreos/coreos-installer/pull/1453


author: Kamil Dudka <kdudka@redhat.com> - 9.2-3
changelog:
  - copy: fix --reflink=auto to fallback in more cases (#2180056)
  - cksum: fix reporting of failed checks (#2180056)


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.5-1
changelog:
  - rebase to latest upstream version (rhbz#2272063)
  - sync i18n patch with SUSE (Kudos to Berny Völker!)
  - add some test dependencies to execute additional part of the upstream test-suite


author: Lukáš Zaoral <lzaoral@redhat.com> - 9.6-1
changelog:
  - rebase to latest upstream version (rhbz#2338620)
  - sync i18n patch with SUSE (Kudos to Berny Völker!)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.3
changelog:
  - update from trunk
    - PRs analyzer/111361, analyzer/112705, analyzer/112811, analyzer/112927,
  	analyzer/112977, bootstrap/113554, c++/67898, c++/90463, c++/90464,
  	c++/100707, c++/102607, c++/104594, c++/109640, c++/109642,
  	c++/111357, c++/111410, c++/111607, c++/112594, c++/112632,
  	c++/112820, c++/113256, c++/113347, c++/113405, c++/113498,
  	c++/113529, c/102998, c/107942, c/109708, c/110029, c/113492,
  	c/113518, debug/107058, debug/112718, debug/113382, debug/113488,
  	fortran/48776, fortran/111291, fortran/113377, fortran/113471,
  	ipa/108007, ipa/108470, ipa/110705, ipa/112616, ipa/113490,
  	libstdc++/113500, libstdc++/113512, middle-end/88345,
  	middle-end/112684, middle-end/113574, modula2/113559, other/111966,
  	rtl-optimization/111267, rtl-optimization/113255, target/82420,
  	target/100942, target/108521, target/108640, target/109092,
  	target/109636, target/110934, target/111279, target/112989,
  	target/113030, target/113070, target/113089, target/113095,
  	target/113114, target/113356, target/113420, target/113485,
  	target/113486, target/113495, target/113550, target/113556,
  	target/113572, testsuite/113437, testsuite/113548,
  	tree-optimization/69807, tree-optimization/113364,
  	tree-optimization/113373, tree-optimization/113459,
  	tree-optimization/113462, tree-optimization/113463,
  	tree-optimization/113464, tree-optimization/113491,
  	tree-optimization/113494, tree-optimization/113552,
  	tree-optimization/113576
  - add offloading support for AMD GCN ROCm capable devices


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.4
changelog:
  - update from trunk
    - PRs analyzer/112969, c++/109227, c++/112899, c++/113580, c++/113598,
  	c++/113599, middle-end/112971, other/113575, preprocessor/105608,
  	target/100204, target/100212, target/112987, target/113469,
  	target/113526, target/113538, target/113601, testsuite/113558,
  	tree-optimization/113602
  - temporarily disable -mearly-ldp-fusion -mlate-ldp-fusion on aarch64 again
    (#2260449, #2260560, #2260562)
  - use gcc_major macro in the spec some more
  - require llvm >= 15 and lld >= 15 for the amdgcn offloading
    where they are used as assembler and linker


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.5
changelog:
  - update from trunk
    - PRs analyzer/113253, analyzer/113509, analyzer/113654, c++/94231,
  	c++/107291, c++/107594, c++/109359, c++/110006, c++/110084,
  	c++/110358, c++/111286, c++/112437, c++/112439, c++/112737,
  	c++/112769, c++/112846, c++/113451, c++/113531, c++/113544,
  	c++/113638, c++/113640, c++/113644, c++/113788, c/111059, c/111911,
  	c/112571, c/113438, c/113740, debug/103047, debug/113394,
  	debug/113637, fortran/104908, libfortran/111022, libgcc/113337,
  	libgcc/113402, libgcc/113403, libgcc/113604, libstdc++/109203,
  	libstdc++/113309, libstdc++/113335, libstdc++/90276,
  	middle-end/101195, middle-end/110176, middle-end/112917,
  	middle-end/113100, middle-end/113607, middle-end/113622,
  	middle-end/113699, middle-end/113705, middle-end/113722,
  	modula2/111627, modula2/112506, modula2/113730,
  	rtl-optimization/113656, sanitizer/110676, sanitizer/112644,
  	target/38534, target/59778, target/103503, target/105576,
  	target/108933, target/111677, target/112577, target/112861,
  	target/112862, target/112863, target/112864, target/112950,
  	target/113059, target/113249, target/113255, target/113312,
  	target/113560, target/113615, target/113616, target/113623,
  	target/113636, target/113655, target/113657, target/113689,
  	target/113690, target/113697, target/113700, target/113701,
  	target/113763, target/113766, testsuite/113502,
  	tree-optimization/110603, tree-optimization/111268,
  	tree-optimization/111444, tree-optimization/113467,
  	tree-optimization/113568, tree-optimization/113588,
  	tree-optimization/113603, tree-optimization/113614,
  	tree-optimization/113630, tree-optimization/113639,
  	tree-optimization/113659, tree-optimization/113670,
  	tree-optimization/113691, tree-optimization/113692,
  	tree-optimization/113693, tree-optimization/113707,
  	tree-optimization/113731, tree-optimization/113736,
  	tree-optimization/113737, tree-optimization/113750,
  	tree-optimization/113753, tree-optimization/113756,
  	tree-optimization/113759, tree-optimization/113796
    - fix PCH writing assertion (#2259912)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.6
changelog:
  - update from trunk
    - PRs c++/113814, c/113776, target/113711, target/113733, target/113824,
  	testsuite/113710, tree-optimization/113735, tree-optimization/113808


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.7
changelog:
  - update from trunk
    - PRs analyzer/111266, c++/97202, c++/97990, c++/98388, c++/99573,
  	c++/107126, c++/111682, c++/112436, c++/112580, c++/113158,
  	c++/113332, c++/113545, c++/113612, c++/113649, c++/113658,
  	c++/113674, c++/113706, c++/113708, c++/113760, c++/113789,
  	c++/113834, c++/113853, c++/113908, c++/113929, d/104739, d/113125,
  	d/113667, d/113758, d/113772, fortran/99210, fortran/105847,
  	fortran/113799, fortran/113866, fortran/113883, fortran/113911,
  	ipa/98237, libfortran/107068, libgcc/113850, libgomp/113843,
  	libstdc++/87744, libstdc++/99117, libstdc++/100147,
  	libstdc++/113294, libstdc++/113806, libstdc++/113807,
  	libstdc++/113811, libstdc++/113931, libstdc++/113961,
  	middle-end/107385, middle-end/110754, middle-end/113415,
  	middle-end/113508, middle-end/113576, middle-end/113904,
  	middle-end/113921, modula2/113848, modula2/113888, other/113336,
  	sanitizer/113785, target/106543, target/109349, target/113742,
  	target/113780, target/113855, target/113871, target/113876,
  	target/113909, target/113927, testsuite/113278, testsuite/113448,
  	testsuite/113861, testsuite/113899, tree-optimization/108355,
  	tree-optimization/111054, tree-optimization/111156,
  	tree-optimization/113567, tree-optimization/113734,
  	tree-optimization/113774, tree-optimization/113783,
  	tree-optimization/113818, tree-optimization/113831,
  	tree-optimization/113849, tree-optimization/113863,
  	tree-optimization/113895, tree-optimization/113896,
  	tree-optimization/113898, tree-optimization/113902,
  	tree-optimization/113910
    - fix bugs in Fortran allocatable character component assignments
      (#2261826, PR fortran/113503)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.8
changelog:
  - update from trunk
    - PRs ada/113893, analyzer/110483, analyzer/110520, analyzer/111289,
  	analyzer/111802, analyzer/111881, analyzer/113983, analyzer/113998,
  	analyzer/113999, c++/113083, c++/113966, c++/113970, c/114007,
  	c/114042, fortran/105658, fortran/107071, fortran/114012,
  	fortran/114024, ipa/61159, ipa/70582, ipa/111960, ipa/113476,
  	libfortran/105456, libfortran/105473, middle-end/112344,
  	middle-end/114070, middle-end/114073, middle-end/114084,
  	modula2/113749, modula2/113889, modula2/114026, modula2/114055,
  	other/109668, other/113957, rtl-optimization/54052,
  	rtl-optimization/114044, rtl-optimization/114054, target/90785,
  	target/108120, target/109987, target/112103, target/112375,
  	target/112397, target/113220, target/113295, target/113613,
  	target/113696, target/113805, target/113912, target/113971,
  	target/113995, target/114017, target/114028, target/114094,
  	target/114097, target/114098, testsuite/111462,
  	tree-optimization/91567, tree-optimization/109804,
  	tree-optimization/113205, tree-optimization/113967,
  	tree-optimization/113988, tree-optimization/113993,
  	tree-optimization/114027, tree-optimization/114038,
  	tree-optimization/114040, tree-optimization/114041,
  	tree-optimization/114048, tree-optimization/114068,
  	tree-optimization/114074, tree-optimization/114081,
  	tree-optimization/114090, tree-optimization/114099
    - fix up handling of C++ inline var specializations
      (#2264986, PR c++/114013)
    - punt on vectorization of +- with non-integral emulated vectors
      (#2265489, PR tree-optimization/114075)
    - fix up handling of references of comdat local symbols forced into
      memory (#2260416, PR rtl-optimization/113617)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.11
changelog:
  - update from trunk
    - PRs ada/113979, analyzer/114159, c++/92687, c++/98356, c++/98645,
  	c++/98688, c++/98881, c++/103994, c++/104919, c++/105512,
  	c++/106009, c++/110025, c++/110031, c++/110347, c++/110730,
  	c++/111224, c++/111710, c++/113629, c++/113802, c++/113976,
  	c++/113987, c++/114005, c++/114114, c++/114138, c++/114170,
  	c++/114229, d/112285, d/112290, d/114171, debug/113519,
  	debug/113777, debug/113918, debug/114015, debug/114186,
  	driver/114314, fortran/82943, fortran/86148, fortran/86268,
  	fortran/87477, fortran/89645, fortran/99065, fortran/103707,
  	fortran/104819, fortran/106987, fortran/110826, fortran/114001,
  	fortran/114141, fortran/114280, fortran/114283, ipa/113757,
  	libbacktrace/114201, libcc1/113977, libfortran/105437,
  	libfortran/114304, libgcc/114327, libgomp/114216, libstdc++/66146,
  	libstdc++/113960, libstdc++/114103, libstdc++/114147,
  	libstdc++/114152, libstdc++/114240, libstdc++/114244,
  	libstdc++/114279, libstdc++/114325, middle-end/95351,
  	middle-end/105533, middle-end/113907, middle-end/114108,
  	middle-end/114136, middle-end/114156, middle-end/114157,
  	middle-end/114196, middle-end/114209, middle-end/114299,
  	middle-end/114313, middle-end/114319, middle-end/114332,
  	modula2/102344, modula2/109969, modula2/114227, modula2/114294,
  	modula2/114295, modula2/114333, preprocessor/80755,
  	preprocessor/110558, rtl-optimization/110079,
  	rtl-optimization/113010, rtl-optimization/114190,
  	rtl-optimization/114211, sanitizer/97696, sanitizer/112709,
  	target/92729, target/101737, target/102250, target/108174,
  	target/111362, target/112337, target/112817, target/112871,
  	target/113001, target/113453, target/113510, target/113542,
  	target/113618, target/113720, target/113790, target/113915,
  	target/113950, target/114100, target/114116, target/114130,
  	target/114132, target/114184, target/114187, target/114200,
  	target/114202, target/114232, target/114233, target/114264,
  	target/114284, target/114288, target/114310, target/114339,
  	testsuite/96109, testsuite/108355, testsuite/113418,
  	testsuite/113428, tree-optimization/98238, tree-optimization/110199,
  	tree-optimization/113466, tree-optimization/113557,
  	tree-optimization/114009, tree-optimization/114071,
  	tree-optimization/114121, tree-optimization/114164,
  	tree-optimization/114192, tree-optimization/114197,
  	tree-optimization/114203, tree-optimization/114231,
  	tree-optimization/114239, tree-optimization/114246,
  	tree-optimization/114249, tree-optimization/114269,
  	tree-optimization/114278, tree-optimization/114293,
  	tree-optimization/114297


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.13
changelog:
  - update from trunk
    - PRs analyzer/109251, analyzer/110902, analyzer/110928, analyzer/111305,
  	analyzer/111441, analyzer/112974, analyzer/112975, analyzer/113505,
  	analyzer/113619, analyzer/114286, analyzer/114408, analyzer/114473,
  	bootstrap/114369, c++/59465, c++/100557, c++/110323, c++/111918,
  	c++/112631, c++/112724, c++/114349, c++/114439, c/109619, c/114364,
  	fortran/30802, fortran/55978, fortran/101135, fortran/103715,
  	fortran/107426, fortran/111781, fortran/114475, ipa/108802,
  	ipa/114254, libfortran/107031, libgcc/111731, libgcc/114397,
  	libstdc++/101228, libstdc++/113841, libstdc++/114316,
  	libstdc++/114359, libstdc++/114367, libstdc++/114394,
  	libstdc++/114400, libstdc++/114401, middle-end/111151,
  	middle-end/111632, middle-end/111683, middle-end/113396,
  	middle-end/114347, middle-end/114348, middle-end/114480,
  	modula2/113836, modula2/114296, modula2/114380, modula2/114418,
  	modula2/114422, modula2/114443, modula2/114444, modula2/114478,
  	rtl-optimization/101523, rtl-optimization/112415, sanitizer/111736,
  	target/99829, target/111822, target/112651, target/114049,
  	target/114150, target/114175, target/114194, target/114272,
  	target/114323, target/114334, target/114352, target/114407,
  	target/114431, testsuite/114320, testsuite/114486,
  	tree-optimization/96147, tree-optimization/109925,
  	tree-optimization/111736, tree-optimization/113727,
  	tree-optimization/114057, tree-optimization/114151,
  	tree-optimization/114322, tree-optimization/114329,
  	tree-optimization/114365, tree-optimization/114375,
  	tree-optimization/114396, tree-optimization/114405,
  	tree-optimization/114425, tree-optimization/114433,
  	tree-optimization/114464, tree-optimization/114469,
  	tree-optimization/114471


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.14
changelog:
  - update from trunk
    - PRs analyzer/114588, bootstrap/106472, c++/91079, c++/99377, c++/100667,
  	c++/103825, c++/104040, c++/111132, c++/114377, c++/114462,
  	c++/114479, c++/114537, c++/114561, c++/114562, c++/114572,
  	c++/114580, c/114361, debug/114608, fortran/36337, fortran/50410,
  	fortran/106999, fortran/110987, fortran/112407, fortran/113885,
  	fortran/113956, fortran/114474, fortran/114535, gcov-profile/113765,
  	gcov-profile/114115, gcov-profile/114601, ipa/111571, ipa/113359,
  	ipa/113907, ipa/113964, libquadmath/114533, libquadmath/114623,
  	libstdc++/104606, libstdc++/114519, libstdc++/114633, lto/114655,
  	middle-end/114552, middle-end/114599, middle-end/114604,
  	middle-end/114627, middle-end/114628, modula2/114517,
  	modula2/114520, modula2/114548, modula2/114565, modula2/114617,
  	modula2/114648, rtl-optimization/112560, rtl-optimization/114415,
  	target/88309, target/101865, target/112919, target/113233,
  	target/113986, target/114577, target/114587, target/114590,
  	target/114603, target/114607, testsuite/114034, testsuite/114036,
  	testsuite/114307, testsuite/114614, testsuite/114642,
  	testsuite/114662, tree-optimization/112303,
  	tree-optimization/114115, tree-optimization/114480,
  	tree-optimization/114485, tree-optimization/114551,
  	tree-optimization/114555, tree-optimization/114557,
  	tree-optimization/114566, tree-optimization/114624
    - don't emit VEX encoded AES-NI instructions when just -maes and not -mavx
      is enabled (#2272758, PR target/114576)
    - fix s390* peephole2 to check mode of constant pool entries and for
      64-bit extraction from 128-bit constant pool entry extract the correct
      half of the value (#2273618, PR target/114605)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.15
changelog:
  - update from trunk
    - PRs analyzer/114472, c++/114303, c++/114409, debug/112878,
  	fortran/106500, middle-end/110027, middle-end/114681, target/114639,
  	tree-optimization/109596, tree-optimization/114672
    - fix symbol version of std::__basic_file<char>::native_handle() const
      (PR libstdc++/114692)
    - emit -Whardened warning even for -fhardened -fcf-protection=none
      (#2273610, PR target/114606)


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.16
changelog:
  - update from trunk and releases/gcc-14 branch
    - GCC 14.1.0-rc1
    - PRs c++/93595, c++/99426, c++/106820, c++/107457, c++/109966, c++/111284,
  	c++/113141, c++/114078, c++/114393, c++/114426, c++/114600,
  	c++/114634, c++/114691, c++/114706, c++/114709, c++/114784,
  	c++/114795, c++/114888, c/92880, c/114780, d/111650, fortran/89462,
  	fortran/93678, fortran/102597, fortran/103471, fortran/103496,
  	fortran/113793, fortran/114739, fortran/114825, fortran/114959,
  	gcov-profile/114715, gcov-profile/114720, libgcc/114689,
  	libgcc/114755, libgcc/114762, libstdc++/93672, libstdc++/113386,
  	libstdc++/114750, libstdc++/114770, libstdc++/114803,
  	libstdc++/114863, lto/113208, lto/114574, middle-end/112938,
  	middle-end/114753, modula2/112893, modula2/114745, modula2/114807,
  	modula2/114811, modula2/114836, other/114738, preprocessor/114748,
  	rtl-optimization/114768, sanitizer/114687, sanitizer/114743,
  	target/110621, target/112431, target/112432, target/114416,
  	target/114668, target/114676, target/114696, target/114714,
  	target/114741, target/114752, target/114783, target/114794,
  	target/114810, target/114837, target/114861, target/114885,
  	testsuite/113706, testsuite/114744, testsuite/114768,
  	tree-optimization/114403, tree-optimization/114666,
  	tree-optimization/114733, tree-optimization/114736,
  	tree-optimization/114749, tree-optimization/114769,
  	tree-optimization/114787, tree-optimization/114792,
  	tree-optimization/114799, tree-optimization/114832,
  	tree-optimization/114883
  - switch to --with-arch_64=x86-64-v3 for latest RHEL
  - remove obsolete reason for not shipping *.gch* files


author: Jakub Jelinek <jakub@redhat.com> 14.0.1-0.2
changelog:
  - update from trunk
    - PRs ada/113397, analyzer/106229, analyzer/113150, analyzer/113333,
  	bootstrap/113445, c++/99493, c++/104634, c++/109899, c++/110065,
  	c++/112588, c++/113242, c++/113292, c++/113307, c++/113340,
  	c++/113389, c/111693, fortran/67277, fortran/113305, libstdc++/108822,
  	libstdc++/108827, libstdc++/109536, libstdc++/111327,
  	libstdc++/113318, libstdc++/113450, middle-end/90348,
  	middle-end/110115, middle-end/110847, middle-end/111422,
  	middle-end/111659, middle-end/113354, middle-end/113406,
  	middle-end/113409, middle-end/113410, modula2/111956, other/113399,
  	rtl-optimization/96388, rtl-optimization/111554,
  	rtl-optimization/113048, rust/108111, target/105522, target/107201,
  	target/112573, target/112944, target/112973, target/113122,
  	target/113156, target/113221, target/113247, target/113281,
  	target/113393, target/113404, target/113429, testsuite/109705,
  	testsuite/111850, testsuite/113366, testsuite/113369,
  	testsuite/113446, testsuite/113452, translation/108890,
  	tree-optimization/91624, tree-optimization/107823,
  	tree-optimization/110251, tree-optimization/110422,
  	tree-optimization/110450, tree-optimization/110768,
  	tree-optimization/110794, tree-optimization/110841,
  	tree-optimization/110852, tree-optimization/110941,
  	tree-optimization/112774, tree-optimization/113091,
  	tree-optimization/113287, tree-optimization/113361,
  	tree-optimization/113370, tree-optimization/113371,
  	tree-optimization/113372, tree-optimization/113374,
  	tree-optimization/113385, tree-optimization/113408,
  	tree-optimization/113421, tree-optimization/113431,
  	tree-optimization/113475


author: Marek Polacek <polacek@redhat.com>
changelog:
  - enable hardening and configure with --enable-host-pie --enable-host-bind-now
    on RHEL
  - don't require rocm-runtime on RHEL


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.1.0 release
    - PRs analyzer/111475, c++/89224, c++/114856, c++/114889, c++/114935,
  	ipa/92606, middle-end/114734, middle-end/114907, modula2/113768,
  	modula2/114133, modula2/114929, rtl-optimization/114924,
  	sanitizer/114956, tree-optimization/114876,
  	tree-optimization/114921, tree-optimization/114965


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-4
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/114901, c++/114903, c++/114974, c++/114994, c++/115114,
  	c++/115139, driver/114980, fortran/114827, fortran/114874,
  	fortran/115039, libstdc++/107800, libstdc++/114866, libstdc++/114891,
  	libstdc++/115015, libstdc++/115063, libstdc++/115119,
  	middle-end/114931, sanitizer/115172, target/69374, target/112959,
  	target/114968, target/114975, target/114981, target/115065,
  	target/115069, tree-optimization/114998, tree-optimization/115143,
  	tree-optimization/115152, tree-optimization/115154


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/115270, c/114493, c++/105320, c++/114275, c++/114868, c++/114983,
  	c++/115187, fortran/86100, fortran/115150, libstdc++/109849,
  	libstdc++/111641, libstdc++/114940, libstdc++/115099,
  	libstdc++/115269, libstdc++/115335, middle-end/108789,
  	middle-end/115352, modula2/114886, rtl-optimization/114902,
  	rtl-optimization/115038, rtl-optimization/115092, target/113719,
  	target/115169, target/115297, target/115317, target/115324,
  	tree-optimization/115149, tree-optimization/115192,
  	tree-optimization/115197, tree-optimization/115232,
  	tree-optimization/115307, tree-optimization/115337


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114398, ada/114708, c/115290, c++/99678, c++/115239, c++/115283,
  	c++/115378, c++/115511, driver/115440, fortran/83865, jit/115442,
  	libstdc++/114958, libstdc++/115247, libstdc++/115308,
  	rtl-optimization/115281, target/109549, target/111343, target/115253,
  	target/115353, target/115360, tree-optimization/115544
    - fix s390x ICEs with vector permutations from memory (#2293207, #2292501)


author: Jakub Jelinek <jakub@redhat.com> 14.1.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs c/114930, c/115502, c/115587, c++/115198, c++/115358, c++/115504,
  	c++/115624, fortran/114019, fortran/115390, libstdc++/115454,
  	libstdc++/115575, libstdc++/115668, target/106069, target/114846,
  	target/115342, target/115355, target/115608, tree-optimization/115278,
  	tree-optimization/115508
  - revert the August 2016 workaround for python bytecode compilation (#2294381)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-1
changelog:
  - update from releases/gcc-14 branch
    - GCC 14.2 release
    - PRs analyzer/114899, c++/99241, c++/99242, c++/104981, c++/106760,
  	c++/111890, c++/115165, c++/115476, c++/115550, c++/115561,
  	c++/115583, c++/115623, c++/115754, c++/115783, c++/115865,
  	c++/115897, c++/115900, c++/115986, fortran/59104, fortran/84006,
  	fortran/93635, fortran/98534, fortran/99798, fortran/100027,
  	fortran/103115, fortran/103312, fortran/113363, fortran/115700,
  	ipa/111613, ipa/113291, ipa/113787, ipa/114207, ipa/115033,
  	ipa/115277, ipa/116055, libstdc++/113376, libstdc++/114387,
  	libstdc++/115399, libstdc++/115482, libstdc++/115522,
  	libstdc++/115585, libstdc++/115807, libstdc++/115854,
  	libstdc++/116070, middle-end/115527, middle-end/115836,
  	middle-end/115887, pch/115312, rtl-optimization/115049,
  	rtl-optimization/115565, target/87376, target/88236, target/97367,
  	target/98762, target/105090, target/113715, target/114759,
  	target/114890, target/114936, target/114988, target/115068,
  	target/115153, target/115188, target/115351, target/115389,
  	target/115456, target/115457, target/115459, target/115475,
  	target/115526, target/115554, target/115562, target/115591,
  	target/115611, target/115691, target/115725, target/115726,
  	target/115752, target/115763, target/115840, target/115872,
  	target/115978, target/115981, target/115988, target/116035,
  	testsuite/115826, testsuite/116061, tree-optimization/113673,
  	tree-optimization/115382, tree-optimization/115646,
  	tree-optimization/115669, tree-optimization/115694,
  	tree-optimization/115701, tree-optimization/115723,
  	tree-optimization/115841, tree-optimization/115843,
  	tree-optimization/115867, tree-optimization/115868,
  	tree-optimization/116034, tree-optimization/116057


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-2
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/88313, c++/112288, c++/115296, c++/115656, c++/116071, c++/116219,
  	c++/116223, c++/116327, c++/116384, fortran/108889, fortran/116530,
  	libstdc++/113663, libstdc++/116038, libstdc++/116381,
  	libstdc++/116549, lto/116361, target/85624, target/112108,
  	target/113384, target/115464, target/116007, target/116033,
  	target/116043, target/116174, target/116189, target/116287,
  	target/116295, target/116390, target/116407, target/116512,
  	testsuite/70150, tree-optimization/113281, tree-optimization/116156,
  	tree-optimization/116224, tree-optimization/116501
    - add hint #34 to aarch64 sanitizer asm stubs if -mbranch-protection=standard
      (#2306353)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-3
changelog:
  - update from releases/gcc-14 branch
    - PRs c++/116276, c++/116320, c++/116449, c++/116567, c++/116606,
  	c++/116636, ipa/116410, libstdc++/116159, libstdc++/116641,
  	lto/116614, target/116617
  - backport x86_64 va_arg fix (PR target/116621)


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-5
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/114593, ada/114636, ada/114640, ada/115535, ada/116190,
  	ada/116430, ada/116551, c/116726, c/117230, c++/96097, c++/115361,
  	c++/115987, c++/116369, c++/116418, c++/116424, c++/116476,
  	c++/116492, c++/116534, c++/116676, c++/116678, c++/116929,
  	c++/117054, c++/117107, c++/117259, c++/117274, fortran/84868,
  	fortran/100273, ipa/109985, ipa/115815, libstdc++/37475,
  	libstdc++/108619, libstdc++/116529, libstdc++/116754,
  	libstdc++/116755, libstdc++/116777, libstdc++/116857,
  	libstdc++/117085, libstdc++/117094, libstdc++/117135,
  	middle-end/115110, middle-end/115426, middle-end/115641,
  	middle-end/116258, middle-end/116259, middle-end/116454,
  	middle-end/116891, middle-end/116898, middle-end/116899,
  	middle-end/117086, middle-end/117249, sanitizer/117209, target/115860,
  	target/116237, target/116627, target/116738, target/116839,
  	target/116883, target/116921, target/116953, target/116962,
  	target/117116, target/117159, target/117240, testsuite/116238,
  	tree-optimization/116166, tree-optimization/116258,
  	tree-optimization/116274, tree-optimization/116290,
  	tree-optimization/116380, tree-optimization/116460,
  	tree-optimization/116481, tree-optimization/116585,
  	tree-optimization/116610, tree-optimization/116768,
  	tree-optimization/116850, tree-optimization/116879,
  	tree-optimization/116907, tree-optimization/116982,
  	tree-optimization/116990, tree-optimization/117041,
  	tree-optimization/117104


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-6
changelog:
  - update from releases/gcc-14 branch
    - PRs fortran/79685, jit/117275, libstdc++/117321, libstdc++/117406,
  	middle-end/117354, rtl-optimization/116783, rtl-optimization/117327,
  	target/116415, target/117296, target/117318, tree-optimization/107467,
  	tree-optimization/117287


author: Jakub Jelinek <jakub@redhat.com> 14.2.1-7
changelog:
  - update from releases/gcc-14 branch
    - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
  	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
  	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
  	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
  	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
  	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
  	c++/118069, driver/117942, fortran/84674, fortran/84869,
  	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
  	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
  	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
  	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
  	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
  	libstdc++/109517, libstdc++/109976, libstdc++/112349,
  	libstdc++/112641, libstdc++/117520, libstdc++/117560,
  	libstdc++/117822, libstdc++/117962, libstdc++/117966,
  	libstdc++/118035, libstdc++/118093, middle-end/43374,
  	middle-end/102674, middle-end/116997, middle-end/117433,
  	middle-end/117458, middle-end/117459, middle-end/117847,
  	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
  	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
  	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
  	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
  	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
  	modula2/117660, modula2/117904, modula2/117948, other/116603,
  	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
  	rtl-optimization/117095, sanitizer/117960, target/64242,
  	target/114801, target/114942, target/116371, target/116629,
  	target/116999, target/117045, target/117105, target/117304,
  	target/117357, target/117408, target/117418, target/117443,
  	target/117500, target/117525, target/117562, target/117564,
  	target/117642, target/117659, target/117675, target/117744,
  	target/117926, testsuite/103298, testsuite/109360,
  	tree-optimization/94589, tree-optimization/112376,
  	tree-optimization/116463, tree-optimization/117142,
  	tree-optimization/117254, tree-optimization/117307,
  	tree-optimization/117333, tree-optimization/117398,
  	tree-optimization/117417, tree-optimization/117439,
  	tree-optimization/117574, tree-optimization/117594,
  	tree-optimization/117612, tree-optimization/117912
  - fix up -freport-bug default (#2330362)
  - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
    aarch64 to match upstream


author: Jakub Jelinek <jakub@redhat.com> 15.0.0-0.4
changelog:
  - update from trunk
    - PRs ada/18765, ada/118274, c/116060, c/117866, c/118376, c++/117792,
  	c++/117887, c++/117925, c++/117937, c++/117993, c++/118060,
  	c++/118277, c++/118387, c++/118391, fortran/108434, fortran/118337,
  	ipa/118138, rtl-optimization/117186, rtl-optimization/117467,
  	rtl-optimization/117934, rtl-optimization/118266, target/65181,
  	target/118017, target/118131, target/118188, target/118332,
  	target/118362, testsuite/118025, tree-optimization/88575,
  	tree-optimization/116126, tree-optimization/117927,
  	tree-optimization/118206, tree-optimization/118211,
  	tree-optimization/118344


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.1
changelog:
  - update from trunk
    - PRs c/118112, c++/114630, d/117701, fortran/115788, fortran/118432,
  	lto/118181, middle-end/64242, middle-end/118303, middle-end/118411,
  	middle-end/118415, modula2/118453, rtl-optimization/107455,
  	target/115910, target/115921, target/118418, tree-optimization/117119,
  	tree-optimization/117997, tree-optimization/118409


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.2
changelog:
  - update from trunk
    - PRs ada/118459, c/116871, c++/118445, modula2/116557, target/116030,
  	target/117682, tree-optimization/118405


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.4
changelog:
  - update from trunk
    - PRs c/118639, c++/105440, c++/107522, c++/107741, c++/115769, c++/116417,
  	c++/116568, c++/116756, c++/117153, c++/117397, c++/117602,
  	c++/117775, c++/117827, c++/118047, c++/118049, c++/118101,
  	c++/118124, c++/118139, c++/118147, c++/118199, c++/118214,
  	c++/118225, c++/118245, c++/118255, c++/118278, c++/118355,
  	c++/118390, c++/118396, c++/118454, c++/118486, c++/118509,
  	c++/118513, c++/118523, c++/118525, c++/118528, c++/118532,
  	c++/118534, c++/118582, c++/118590, c++/118604, d/114434, d/115249,
  	d/116373, d/117115, d/118438, d/118448, d/118449, d/118584,
  	fortran/71884, fortran/81978, fortran/96087, fortran/107122,
  	fortran/118321, fortran/118359, fortran/118441, fortran/118613,
  	gcov-profile/116743, ipa/116068, ipa/118400, jit/117886,
  	libfortran/118406, libfortran/118536, libfortran/118571,
  	libstdc++/99995, libstdc++/100249, libstdc++/109849, libstdc++/118158,
  	libstdc++/118185, lto/118238, middle-end/112779, middle-end/113904,
  	middle-end/114596, middle-end/114877, middle-end/118140,
  	middle-end/118273, middle-end/118472, modula2/118010, modula2/118589,
  	objc++/118586, rtl-optimization/109592, rtl-optimization/113994,
  	rtl-optimization/117868, rtl-optimization/118067,
  	rtl-optimization/118562, rtl-optimization/118591,
  	rtl-optimization/1180167, sarif-replay/117670, target/80813,
  	target/110901, target/113257, target/113560, target/114442,
  	target/116256, target/116308, target/116593, target/117079,
  	target/117726, target/118154, target/118170, target/118182,
  	target/118270, target/118329, target/118357, target/118489,
  	target/118497, target/118501, target/118510, target/118511,
  	target/118512, target/118531, target/118560, target/118609,
  	testsuite/116448, testsuite/117958, testsuite/118451,
  	tree-optimization/92539, tree-optimization/102705,
  	tree-optimization/115494, tree-optimization/115777,
  	tree-optimization/115895, tree-optimization/116010,
  	tree-optimization/117668, tree-optimization/117875,
  	tree-optimization/118012, tree-optimization/118077,
  	tree-optimization/118224, tree-optimization/118348,
  	tree-optimization/118360, tree-optimization/118384,
  	tree-optimization/118430, tree-optimization/118456,
  	tree-optimization/118483, tree-optimization/118487,
  	tree-optimization/118514, tree-optimization/118522,
  	tree-optimization/118529, tree-optimization/118552,
  	tree-optimization/118558, tree-optimization/118569,
  	tree-optimization/118572, tree-optimization/118605,
  	tree-optimization/118628, tree-optimization/118634
  - fix libstdc++.modules.json content after relocation


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.5
changelog:
  - update from trunk
    - PRs c/116357, c++/57533, c++/114292, c++/116524, c++/117855, c++/118239,
  	c++/118285, c++/118632, c++/118655, c++/118673, d/118477,
  	fortran/58857, fortran/110993, fortran/118640, fortran/118683,
  	libstdc++/98749, libstdc++/118413, libstdc++/118563,
  	middle-end/118643, middle-end/118684, middle-end/118692,
  	middle-end/118695, modula2/116073, modula2/117737, modula2/118183,
  	other/118675, preprocessor/118168, rtl-optimization/118320,
  	rtl-optimization/118429, rtl-optimization/118638,
  	rtl-optimization/118662, target/114085, target/116860, target/117173,
  	target/117688, target/118103, target/118490, target/118642,
  	target/118646, target/118663, target/118696, testsuite/118127,
  	tree-optimization/112859, tree-optimization/114052,
  	tree-optimization/115347, tree-optimization/117270,
  	tree-optimization/117424, tree-optimization/117892,
  	tree-optimization/118505, tree-optimization/118637,
  	tree-optimization/118653
  - fix up C++ list conversion for #embed or large series of comma
    separated small constants (PR c++/118671)
  - punt in niters clz/ctz creation if internal function can't be used
    and frontend didn't build __builtin_c{l,t}z{,l,ll} builtins
    (PR tree-optimization/118689)


author: Jakub Jelinek <jakub@redhat.com> 15.0.1-0.6
changelog:
  - update from trunk
    - PRs c++/117501, c++/117516, debug/100530, fortran/108454, fortran/118714,
  	ipa/117432, libstdc++/118156, middle-end/117498, modula2/115032,
  	rtl-optimization/116234, target/113689, target/115673,
  	tree-optimization/114277
  - use rpm.execute instead of posix.fork, posix.exec and posix.wait in libgcc
    scriptlets; guard them on ldconfig macro existence and use that macro instead
    of explicit /sbin/ldconfig (#2291927)


author: Parag Nemade <pnemade AT redhat DOT com> - 2.9.7-30
changelog:
  - As -dicts subpackage installs files under %{_libdir} path it should not be noarch
  - this fixes FTBFS on F37+


author: Paul Wouters <paul.wouters@aiven.io - 2.9.11-1
changelog:
  - Resolves: rhbz#2123955 cracklib-2.9.11 is available
  - Remove old patches, port remaining patches to 2.9.11
  - Use man pages from doc/ instead of pulling them from debian


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git5ed06e0
changelog:
  - BSI: start a BSI TR 02102 policy
  - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
  - FIPS: enforce EMS in FIPS mode
  - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
  - nss: implement EMS enforcement in FIPS mode (not enabled yet)
  - openssl: implement EMS enforcement in FIPS mode
  - gnutls: implement EMS enforcement in FIPS mode (not enabled yet)
  - docs: replace `FIPS 140-2` with just `FIPS 140`


author: Alexander Sosedkin <asosedkin@redhat.com> - 20230920-1.git570ea89
changelog:
  - OSPP subpolicy: tighten beyond reason for OSPP 4.3
  - fips-mode-setup: more thorough --disable, still unsupported


author: Clemens Lang <cllang@redhat.com> - 20231107-1.git8f49dfa
changelog:
  - turn ssh_etm into an etm@SSH tri-state
  - fips-mode-setup: increase chroot-friendliness (rhbz#2164847)


author: Clemens Lang <cllang@redhat.com> - 20231113-1.gitb402e82
changelog:
  - fips-mode-setup: Write error messages to stderr
  - fips-mode-setup: Fix some shellcheck warnings
  - fips-mode-setup: Fix test for empty /boot
  - fips-mode-setup: Avoid 'boot=UUID=' if /boot == /


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240201-1.git9f501f3
changelog:
  - fips-finish-install: make sure ostree is detected in chroot
  - fips-mode-setup: make sure ostree is detected in chroot
  - java: disable ChaCha20-Poly1305 where applicable


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240304-1.git0375239
changelog:
  - packaging: remove perl build-dependency, it's not needed anymore
  - packaging: stop linting at check-time, relying on upstream CI instead
  - packaging: drop stale workarounds
  - libreswan: do not use up pfs= / ikev2= keywords for default behaviour


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240320-1.git58e3d95
changelog:
  - modules/FEDORA32, FEDORA38, TEST-FEDORA39: drop
  - openssl: mark liboqsprovider groups optional with ?
  - TEST-PQ: add more group and sign values, marked experimental
  - TEST-FEDORA41: add a new policy with __openssl_block_sha1_signatures = 1
  - TEST-PQ: also enable sntrup761x25519-sha512@openssh.com


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240515-1.gita24a14b
changelog:
  - gnutls: use tls-session-hash option, enforcing EMS in FIPS mode
  - gnutls: DTLS 0.9 is controllable again
  - gnutls: remove extraneous newline
  - openssh: remove support for old names of RequiredRSASize


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240521-1.gitf71d135
changelog:
  - nss: unconditionally include p11-kit-proxy
  - TEST-PQ: update algorithm list, mark all PQ algorithms experimental


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240628-1.gitddd11d3
changelog:
  - nss: wire KYBER768 to XYBER768D00
  - java: start controlling / disable DTLSv1.0
  - java: disable anon ciphersuites, tying them to NULL
  - java: respect more key size restrictions
  - java: specify jdk.tls.namedGroups system property
  - java: make hash, mac and sign more orthogonal
  - fips-mode-setup: add another scary "unsupported"
  - fips-mode-setup: flashy ticking warning upon use
  - BSI: switch to 3072 minimum RSA key size


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240715-1.gitf8b6a29
changelog:
  - BSI: Update BSI policy for new 2024 minimum recommendations
  - java: use and include jdk.disabled.namedCurves
  - ec_min_size: introduce and use in java, default to 256
  - java: stop specifying jdk.tls.namedGroups in javasystem
  - java: drop unused javasystem backend


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240717-1.git154fd4e
changelog:
  - Changes/OpenSSLDistrustSHA1SigVer: implement, see below
  - DEFAULT: switch to rh-allow-sha1-signatures = no...
  - TEST-FEDORA41: reset to DEFAULT
  - FEDORA40: introduce with the previous contents of DEFAULT
  - nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768
  - TEST-PQ: disable KYBER768


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240725-1.git9555558
changelog:
  - gnutls: wire X25519-KYBER768 to GROUP-X25519-KYBER768
  - openssh: make dss no longer enableble, support is dropped


author: Alexander Sosedkin <asosedkin@redhat.com> - 20240807-1.git5795660
changelog:
  - fips-crypto-policy-overlay: a unit to automount FIPS policy when fips=1
  - fips-setup-helper: add a libexec helper for anaconda
  - fips-mode-setup: force --no-bootcfg when UKI is detected


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241010-1.git8baf557
changelog:
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime
  - openssl: map NULL to TLS_SHA256_SHA256:TLS_SHA384_SHA384


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241011-1.git5930b9a
changelog:
  - nss: rewrite backend for 3.101
  - nss: be stricter with new purposes
  - LEGACY: enable 192-bit ciphers for nss pkcs12/smime


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241018-1.git66c17d1
changelog:
  - openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  - TEST-PQ: enable sntrup761x25519-sha512 and mlkem768x25519-sha256 for openssh


author: Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitbb3f7dc
changelog:
  - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  - update-crypto-policies: don't output FIPS warning in fips mode


author: Alexander Sosedkin <asosedkin@redhat.com> - 20250124-1.git4d262e7
changelog:
  - openssl: stricter enabling of Ciphersuites
  - openssl: make use of -CBC and -AESGCM keywords
  - openssl, BSI: add TLS 1.3 Brainpool identifiers
  - openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
  - update-crypto-policies: don't output FIPS warning in fips mode
  - gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
  - nss: add mlkem768x25519
  - openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
  - Silence harmless error messages from %pre scriptlet
  - openssh, TEST-PQ: rename MLKEM key-exchange to MLKEM768
  - openssh: add support for sntrup761x25519-sha512 and mlkem768x25519-sha256
  - TEST-PQ: enable sntrup761x25519-sha512 and mlkem768x25519-sha256 for openssh


author: Ondrej Kozina <okozina@redhat.com> - 2.7.0-2
changelog:
  - Rebuild for OpenSSL Argon2 implementation (OpenSSL 3.2)
  - patch: Do not compile unused internal argon2 implementation


author: Guenther Deschner <gdeschner@redhat.com> - 4.19.1-1
changelog:
  - resolves: #2243073 - Update to version 4.19.1
  - resolves: #2241881, #2243228: Security fix for CVE-2023-3961
  - resolves: #2241882, #2243231: Security fix for CVE-2023-4091
  - resolves: #2241883, #2243230: Security fix for CVE-2023-4154
  - resolves: #2241884, #2243229: Security fix for CVE-2023-42669
  - resolves: #2241885, #2243232: Security fix for CVE-2023-42670


author: Richard W.M. Jones <rjones@redhat.com> - 2:4.21.1-8
changelog:
  - Rebuild for Jansson 2.14 (https://lists.fedoraproject.org/archives/list/d
    evel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.7-10
changelog:
  - require authselect-libs, since we use PAM modules password-auth or system-auth
  - got pam downstream patch upstream, use the commit from there


author: Zdenek Dohnal <zdohnal@redhat.com> - 1:2.4.7-11
changelog:
  - 2263053 - CUPS/libppd PPD generators didn't check required attrs when deciding which driverless format to use,
    causing PPD generation to fail


author: Jan Macku <jamacku@redhat.com> - 8.7.1-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-2004 - Usage of disabled protocol
      CVE-2024-2379 - QUIC certificate check bypass with wolfSSL
      CVE-2024-2398 - HTTP/2 push headers memory-leak
      CVE-2024-2466 - TLS certificate check bypass with mbedTLS
  - drop upstreamed patches
  - reenable test 0313
  - fix zsh completions, use --with-zsh-functions-dir
  - apply upstream patches for 8.7.1 issues and regressions


author: Paul Howarth <paul@city-fan.org> - 8.8.0-2
changelog:
  - adapt for https://fedoraproject.org/wiki/Changes/OpensslDeprecateEngine
  - added build condition for openssl_engine_support, true by default so as to
    not change the resulting built package (yet)
  - with openssl_engine_support true, BR: openssl-devel-engine
  - with openssl_engine_support false, build with -DOPENSSL_NO_ENGINE


author: Jan Macku <jamacku@redhat.com> - 8.9.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-6874 - macidn punycode buffer overread
      CVE-2024-6197 - freeing stack buffer in utf8asn1str
  - drop upstreamed patches


author: Jan Macku <jamacku@redhat.com> - 8.11.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-9681 - HSTS subdomain overwrites parent cache entry


author: Jan Macku <jamacku@redhat.com> - 8.11.1-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-11053 - netrc and redirect credential leak


author: Paul Howarth <paul@city-fan.org> - 8.11.1-2
changelog:
  - Fix crash with Unexpected error 9 on netlink descriptor 10 (rhbz#2332350)
    - https://github.com/curl/curl/issues/15725
    - https://github.com/curl/curl/pull/15727


author: Kamil Dudka <kdudka@redhat.com> - 8.0.1-3
changelog:
  - tests: re-enable temporarily disabled test-cases
  - tests: attempt to fix a conflict on port numbers
  - apply patches automatically


author: Kamil Dudka <kdudka@redhat.com> - 8.1.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-28321 - IDN wildcard match
      CVE-2023-28322 - more POST-after-PUT confusion


author: Jan Macku <jamacku@redhat.com> - 8.2.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-32001 - fopen race condition


author: Jan Macku <jamacku@redhat.com> - 8.3.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38039 - HTTP headers eat all memory


author: Jan Macku <jamacku@redhat.com> - 8.4.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-38545 - SOCKS5 heap buffer overflow
      CVE-2023-38546 - cookie injection with none file


author: Jan Macku <jamacku@redhat.com> - 8.5.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2023-46218 - cookie mixed case PSL bypass
      CVE-2023-46219 - HSTS long file name clears contents


author: Jan Macku <jamacku@redhat.com> - 8.6.0-1
changelog:
  - new upstream release, which fixes the following vulnerabilities
      CVE-2024-0853 - OCSP verification bypass with TLS session reuse
  - drop 001-dist-add-tests-errorcodes.pl-to-the-tarball.patch (replaced by upstream fix)
  - remove accidentally included mk-ca-bundle.1 man page (upstream bug #12843)


author: Jan Macku <jamacku@redhat.com> - 8.6.0-6
changelog:
  - revert "receive max buffer" + add test case
  - temporarily disable test 0313
  - remove suggests of libcurl-minimal in curl-full


author: Jan Macku <jamacku@redhat.com> - 8.6.0-8
changelog:
  - fix Usage of disabled protocol (CVE-2024-2004)
  - fix HTTP/2 push headers memory-leak (CVE-2024-2398)


author: Lukáš Zaoral <lzaoral@redhat.com> - 7.2-1
changelog:
  - Update to 7.2 (rhbz#2161916)
  - Do not use %{_bindir}/* and %{_mandir}/* as suggested by the packaging
    guidelines.


author: Akira TAGOH <tagoh@redhat.com> - 4.0-5
changelog:
  - Simplified sub-packages and dependencies for CJK.
  - Update serif font to google-noto-serif-gurmukhi-vf-fonts for Punjabi.
    the original serif font for Punjabi, google-noto-naskh-arabic-vf-fonts was
    figured out for Punjabi(Pakistan). but we don't have langpacks-pa_pk.
    So updating based on Punjabi(Indic).


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.8-1
changelog:
  - Update source to upstream version 0.9.8 plus latest staging branch
    * Previous patches 0014 & 0015 are included in the source tarball
    * patches 0001-0044 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0013 are now patches 0045-0057
  - Install /lib/udev/rules.d/99-z-dm-mpath-late.rules


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-1
changelog:
  - Update source to upstream version 0.9.9
    * Previous patches 0001-0044 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0045-0057 are now patches 0001-0013


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.9-6
changelog:
  - Add 0014-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
    * multipath features tracking on failed removes


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.10.0-1
changelog:
  - Update source to upstream version 0.9.9
    * Previous patch 0014-multipathd-fix-flush-check-in-flush_map.patch is
      included in the source tarball
  - Rebase redhat patches


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.10.0-5
changelog:
  - Update source to upstream staging branch for 0.10.y (will be 0.10.2 when
    merged).
  - Rebase redhat patches


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.4-1
changelog:
  - Update to the head of the upstream staging branch
    * Previous patches 0001-0032 are included in the source tarball
    * Patches 0001-0010 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0033-0044 are now patches 0011-0022
  - Add dependency on libmount


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.4-2
changelog:
  - Update to the head of the upstream staging branch
    * Patches 0011-0015 are from the upstream staging branch
  - Rename redhat patches
    * Previous patches 0011-0022 are now patches 0016-0027


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.5-1
changelog:
  - Update to the latest upstream release
    * Previous patches 0001-0015 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0016-0027 are now patches 0001-0012


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.6-1
changelog:
  - Update to the head of the upstream staging branch
  - Rename redhat patches
    * Previous patches 0001-0012 are now patches 0041-0052
  - Add 0053-RH-Add-mpathcleanup.patch
    * add mpathcleanup program


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-1
changelog:
  - Update source to upstream version 0.9.7
    * Previous patches 0001-0040 are included in the source tarball
  - Rename redhat patches
    * Previous patches 0041-0053 are now patches 0001-0013
  - Remove /usr/lib/modules-load.d/multipath.conf
    * has been replaced with modprobe@dm_multipath.service unit Wants.


author: Paul Donohue <git@PaulSD.com> - 0.9.7-2
changelog:
  - Modify 0006-RH-add-mpathconf.patch
  - Modify 0008-RH-reset-default-find_mutipaths-value-to-off.patch
    * Fix find_multipaths values in docs and mpathconf


author: Benjamin Marzinski <bmarzins@redhat.com> - 0.9.7-5
changelog:
  - Add 0014-multipathd-fix-null-pointer-dereference-in-uev_updat.patch
    * Fix auto_resize code to avoid a segfault
  - Add 0015-multipathd-fix-auto-resize-configuration.patch
    * Fix auto_resize default value


author: Than Ngo <than@redhat.com> - 3.10-1
changelog:
  - Fix bz#2208831, update to 3.10
  - Fix bz#2196671, diff -D no longer fails to output #ifndef lines introduced in 3.9


author: Jan Kolarik <jkolarik@redhat.com> - 4.17.0-1
changelog:
  - Update to 4.17.0
  - crypto: Use libdnf crypto API instead of using GnuPG/GpgME
  - Reprotect dnf, unprotect python3-dnf (RhBug:2221905)
  - Block signals during RPM transaction processing (RhBug:2133398)
  - Fix bash completion due to sqlite changes (RhBug:2232052)
  - automatic: allow use of STARTTLS/TLS
  - automatic: use email_port specified in config


author: Jan Kolarik <jkolarik@redhat.com> - 4.18.0-1
changelog:
  - Update to 4.18.0
  - base: Add obsoleters of only latest versions (RhBug:2183279,2176263)
  - comps: Fix marking a group package as installed (RhBug:2066638)
  - distro-sync: Print better info message when no match (RhBug:2011850)
  - Include dist-info for python3-dnf (RhBug:2239323)
  - Revert "Block signals during RPM transaction processing" (RhBug:2133398)
  - Do not print details of verifying (RhBug:1908253)
  - Add Recommends /usr/bin/sqlite3 for bash-completion for Fedora
  - conf: Split $releasever to $releasever_major and $releasever_minor (RhBug:1789346)
  - Allow DNF to be removed by DNF 5 (RhBug:2221907)
  - Update translations


author: Jan Kolarik <jkolarik@redhat.com> - 4.18.1-1
changelog:
  - Update to 4.18.1
  - Do not translate repoquery time format strings (RhBug:2245773)
  - automatic: Fix applying the color option


author: Jan Kolarik <jkolarik@redhat.com> - 4.19.0-1
changelog:
  - Update to 4.19.0
  - filelists metadata loading on demand
  - deltarpm disabled on Fedora by default
  - conf: Introduce new optional_metadata_types option to load filelists on demand
  - cli: Add a hint for user on transaction file dependency failure
  - cli: Setup filelists metadata for commands that need them
  - util: Add function for detecting file in specs
  - Fix failing API unit test on rawhide (RhBug:2261066)
  - automatic: Use add_security_filters, not _update_security_filters


author: Evan Goode <egoode@redhat.com> - 4.19.1-1
changelog:
  - Update to 4.19.1
  - Add required `.readthedocs.yaml`, `conf.py` and set `sphinx_rtd_theme`
  - Drop dnf obsoletion temporarily
  - doc: Update FAQ entry on filelists
  - build: Adapt to changes in Fedora packaging of bash-completion
  - Support RPMTRANS_FLAG_DEPLOOPS
  - Add all candidates for reinstall to solver
  - Fix handling installonly packages reasons
  - Remove confusing sentence from documentation
  - Remove "leaf" word from documentation
  - Update documentation of history userinstalled command
  - Onboard packit tests
  - doc: Makecache with timer tries only one mirror
  - ELN: Don't obsolete DNF with DNF5 yet
  - bash-completion: Complete dnf command only if we own it
  - bash-completion: Prepare ownerships for dnf5 switch


author: Packit <hello@packit.dev> - 5.1.11-1
changelog:
  - Release 5.1.11
  - Update translations from weblate
  - Fix `--skip-unavailable` documentation
  - Make `cachedir`, `system_cachedir` relative to `installroot`
  - Workaround for swig-4.2.0 missing fragment dependency
  - Add `repoquery --recursive` option
  - Add `repoquery --providers-of=PACKAGE_ATTRIBUTE` option
  - Update documentation of repoquery
  - Update documentation for remove command behavior
  - Limit search pattern for remove command to NEVRAs and files
  - Packaging: Require an exact release of libdnf5-cli by dnf5-plugins
  - Disable zchunk on RHEL
  - Add dnf5.conf man page
  - Add RPM package Group attribute to dnf5daemon-server
  - Document changes related to caching
  - Document caching man page
  - Document Global Option `--help-cmd` dropped
  - log_event: Correct message for HINT_ICASE


author: Packit <hello@packit.dev> - 5.1.12-1
changelog:
  - Release 5.1.12
  - Update translations from weblate
  - Drop dnf obsoletion temporarily
  - Use regex for tmt plan names
  - Add tmt tests identifiers
  - PackageQuery: Add `filter_{latest,earliest}_evr_ignore_arch`
  - Suggest to use dnf5 command to install dnf5 plugins
  - Added arch option to the download command
  - CI: Upgrade action/checkout to a version with Node.js 20
  - Document explicit nevra remove commands and aliases dropped
  - build: Include <unistd.h> for isatty()
  - Change user info display on history command to include display name and username
  - Revert "Use focusbest: prefer latest deps versions over smaller transactions"
  - Fix a warning when building docs.
  - modules: Add a test for enabling default modules
  - modules: Add a new module stream to test data
  - modules: Respect defaults when enabling multiple streams of a module
  - modules: Fix TransactionItemType for not found modules
  - Build: Require GCC 10.1 for std::in_range<>()
  - Add --urlprotocol option to download command
  - dnfdaemon: Explicitly specify allowed config overrides
  - Disable dnf and dnf5daemon tests
  - needs-restarting: get systemd boot time from UnitsLoadStartTimestamp
  - doc: Add --destdir option to upgrade command manual
  - Move number placeholder to postposition in copr_repo.cpp
  - Added url option
  - Load protected packages from installroot
  - Make protected_packages an append options
  - doc: Create a man page for Aliases
  - I18N: Annotate literals in advisory command
  - Extend filter_release and filter_version tests
  - package_query: Fix filter_version with non EQ comparator
  - Fix clang format
  - Fix code for string deduplication
  - Use placeholders to deduplicate strings
  - Add __hash__(), __str__(), and __repr__() for Package
  - Add __hash__() for Reldep Python binding
  - Add __repr__() to python bindings of Reldep
  - Define tp_str slot for Reldep Class
  - group: Fix using allowerasing option
  - Fix misspellings
  - I18N: Remove duplicate empty message IDs from catalogs
  - I18N: Do not mark empty strings for a translation


author: Packit <hello@packit.dev> - 5.1.13-1
changelog:
  - Release 5.1.13
  - build: Adapt to changes in Fedora packaging of bash-completion
  - Change location of automatic.conf
  - Limit message log to one on dnf5 start
  - Implement waiting for network for dnf5 automatic
  - Write dnf5 commandline to the log
  - Implement dnf5-automatic: Tool for managing automatic upgrades
  - Parametrize output stream in transaction table
  - Add `download --srpm` option
  - Add missing dbus signal registations
  - Add new versionlock bindings
  - Implement `dnf5 versionlock` command


author: Packit <hello@packit.dev> - 5.1.14-1
changelog:
  - Update translations from weblate
  - Make the error to resolve module metadata more descriptive
  - Switch off deltarpm support
  - Limit number of dnf5daemon simultaneously active sessions
  - Make info and list commands case insesitive
  - Allow dnf5daemon configuration overrides for root
  - Add repoquery.hpp for swig-4.2.1 support


author: Packit <hello@packit.dev> - 5.1.15-1
changelog:
  - Update translations from weblate
  - Automatically set `upgrade --downloadonly` when `--destdir` is used
  - Write warnings to stderr too in config-manager plugin
  - Add repoid to generated repository name in config-manager plugin
  - Bump sdbus-cpp requirement to 0.9.0
  - Document and implement dnf5daemon Rpm interface
  - Document and implement dnf5daemon Goal interface
  - Document and implement dnf5daemon Repo interface
  - Document and implement dnf5daemon Base interface
  - Document and implement dnf5daemon Advisory interface
  - Document and implement dnf5daemon SessionManager interface
  - Add `dnf5daemon repo --enable/--disable` commands
  - automatic: Skip network availability check without remote repo
  - dnf5daemon: Rpm.list() works with commandline pkgs


author: Packit <hello@packit.dev> - 5.1.16-1
changelog:
  - Update translations from weblate
  - Document system-upgrade aliases
  - Improved Bash Completion
  - Print command line hints after resolve failure
  - Docuent Advisory.list() API usage
  - Add NEVRA field to advisory packages in dnf5daemon
  - Review and fix missing commands
  - Document dnf5daemon advisory
  - Document system-upgrade
  - system-upgrade: offline status subcommand
  - Add aliases `offline-distrosync`, `offline-upgrade`
  - Add `system-upgrade --offline` option
  - Add `offline`, `system-upgrade` commands


author: Packit <hello@packit.dev> - 5.2.0.0-1
changelog:
  - Update translations from weblate
  - [DNF5] `--enable-plugin` and `--disable-pluin`: no match found message
  - [DNF5] API: Move Context::libdnf5_plugins_enablement to p_impl
  - spec: Add conflict with the former provider of plugin man pages
  - spec: Add conflict with the old provider of dnf.conf
  - [DNF5] Fix: Remove transaction_store_path from public, add getter/setter
  - [libdnf5 API] Base::get_plugins_info
  - [libdnf5 plugins] include iplugin.hpp in plugins instead of base.hpp
  - repo_sack: Treat all repos with solv_repo created as loaded (RhBug:2275530)
  - [DNF5] API: No inline methods in shared_options.hpp
  - [DNF5] API: offline::OfflineTransactionState: no inline methods, move cpp
  - [DNF5] API: Remove unused and buggy RpmTransactionItem class
  - [DNF5] Command: no inline methods
  - [DNF5] API: Context: add p_impl, move public vars to p_impl, getters
  - API: cli::session: no inline methods and public vars in opts classes
  - API: cli::session::Command: no inline methods
  - API: add p_impl to cli::session::Session
  - API: rpm::TransactionCallbacks: no inline methods
  - API: repo::RepoCallbacks: no inline methods
  - Prepare for switch of dnf5 in Rawhide
  - base: Make get_transaction_history unstable
  - Set `group` reason for packages removed by a group removal
  - [DNF5] Implement `--enable-plugin` and `--disable-pluin`
  - [libdnf5 API] Base::enable_disable_plugins
  - spec: Simplify man page files
  - Loggers: Fix: Add missing "null_loger.cpp" file
  - Loggers API: unify, explicit ctors, non-inline methods, use p_impl
  - doc: Review of DNF4 vs DNF5 CLI and configuration changes
  - Re-enable clang builds after API changes
  - Add `--store` option for storing arbitrary transaction
  - libdnf5::Goal: when adding serialized transaction accept local items
  - Goal: change `add_serialized_transaction()` to accept path to trans
  - Add group/env paths for transaction parsing/serializing
  - base::Transaction: during serialization allow specifying paths
  - base::Transaction: add `store_comps(...)` method
  - repo_sack: add stored_transaction repo and its private API
  - repo: add private API `add_xml_comps(path)`
  - Generalize logging of `read_group_solvable_from_xml(..)`
  - Add `environment_no_groups` to `GoalJobSettings`
  - libdnf5 IPlugin: Pass IPluginData instead of Base to constructor
  - libdnf5 IPlugin: Use pImpl
  - libdnf5 IPlugin: Do not use inline methods
  - dnf5 IPlugin: Do not use inline methods on API
  - libdnf5 IPlugin: Add argumets description
  - libdnf5 plugins: New hooks `pre/post_add_cmdline_packages`
  - libdnf5 plugins: New hook `repos_loaded`
  - libdnf5 plugins: New hook `repos_configured`
  - Base: notify_repos_configured and are_repos_configured methods
  - Fix: implicit conversion changes signedness, unused value
  - Disable unit tests for Copr dnf5 plugin
  - dnfdaemon: Document Polit CheckAuthorization call
  - dnfdaemon: Catch timeout during CheckAuthorization
  - Not handle compatibility.conf as configuration file
  - config: add search (se) and info (if) aliases
  - Improve documentation of repo config directories
  - Cross reference documentation
  - Document Repos and Vars Dirs
  - doc: Unify style and move "Files" section
  - Document repos configuration overrides
  - doc: Remove ":" in titles
  - Bump libdnf5/libdnf5-cli so version
  - Mark multiple strings for translation
  - Set locale for dnf5 run
  - spec: Add missing dnf-config-manager.8.gz file
  - Generate documentation for ConfigRepo Class
  - [Doc] Describe denerating repo cache path
  - dnf5daemon: Make availability case insensitive
  - dnf5: Drop unneeded severities capitalization
  - dnf5: Document --available as default for advisory cmd
  - dnf5daemon-client: Drop unneeded severities capitalization
  - advisory: filter_severity and filter_type case insensitive
  - dnfdaemon: Fix and enhance Advisory interface doc
  - Enable import data from DNF4 for systems without state dir
  - libdnf5 options: Unify constructors - pass args for storing by value
  - dnfdaemon: Missing signal registration
  - doc: config manager plugin: wrap too long lines
  - doc: document config-manager plugin
  - Packit: get version from specfile for copr_builds againts main
  - Update tests to use new `load_repos()` API
  - Use new load_repos instead of deprecated update_and_load_enabled_repos
  - Make `libdnf5::repo::Repo::load()` private
  - Deprecate: `update_and_load_enabled_repos`
  - RepoSack: add new `load_repos` method
  - Move update_and_load_repos and fix_group_missing_xml to Impl
  - Prevent loading plugins for unittests
  - Respect plugins configuration option for loading plugins
  - Add pImpl to `libdnf5::LogRouter`
  - Add pImpl to `libdnf5::MemoryBufferLogger`
  - Add pImpl to `libdnf5::OptionBinds`
  - Add pImpl to `libdnf5::OptionBinds::Item`
  - Add pImpl to `libdnf5::Config`
  - Add pImpl to `libdnf5::OptionStringList`
  - OptionStringList: remove assignment operators and move constructor
  - Add pImpl to `libdnf5::OptionBool`
  - OptionBool: remove assignment operators and move constructor
  - Add pImpl to `libdnf5::OptionNumber`
  - Add pImpl to `libdnf5::OptionPath`
  - Add pImpl to `libdnf5::OptionString`
  - libdnf5::OptionEnum: remove template, add pImpl
  - Add pImpl to `libdnf5::Option`
  - modules: Report problems with switching module streams
  - modules: Report switched module streams
  - modules: Add switching module streams as a possible transaction action
  - modules: Add replaces and replaced_by to TransactionModule
  - Add missing info updates alias, to match list command
  - Update `package_info_sections` not to use `scols_table_print_range`
  - libdnf-cli: Extract package info printing
  - ArgumentParser: use p_impl, no inline methods
  - ArgumentParser:PositionalArg: Unit tests: Support repeating of pos arg
  - ArgumentParser:PositionalArg: Support repeating of positional argument
  - Hide/Remove deprecated `libdnf5::repo::Repo` API
  - Remove deprecated members from `/include/libdnf5/logger/factory.hpp`
  - Remove deprecated unused function `create_forcearch_option()`
  - builddep: Don't escape globs, use expand_globs = false
  - builddep: Don't try to expand globs in pkg specs
  - libdnf5-cli::output: Use ifaces instead templates. Move code to .cpp files
  - Interfaces and adapters
  - module::ModuleStatus: Move to separate header file
  - comps::PackageType: Move to separate header file
  - cmp_naevr: Fix: pass by reference
  - modules: Report module solver problems
  - Accept SolverProblems for transacion resolve log
  - modules: Return problems from the module solver
  - modules: Add a method to process module solver problems
  - modules: Add a separate set of problem rules for modules
  - modules: Store the original module context also in the libsolv solvable
  - modules: Internalize modular repositories
  - Add pImpl to `libdnf5::repo::RepoCache` and `RepoCacheRemoveStatistics`
  - Add pImpl to `libdnf5::repo::RepoQuery`
  - Hide deprecated `libdnf5::base::with_config_file_path` into Impl
  - Remove deprecated `libdnf5::Base::load_config_from_file`
  - Move all `libdnf5::Base` members to pImpl
  - Add pImpl to `libdnf5::rpm::Reldep`
  - Add pImpl to `libdnf5::rpm::Changelog`
  - Add pImpl to `libdnf5::rpm::Nevra`
  - Add pImpl to `libdnf5::rpm::Checksum`
  - Add pImpl to `libdnf5::rpm::Package`
  - Adjust code to new rpm::PackageQuery::filter_* methods after the rebase
  - Add a method accepting std::string for filter_repo_id()
  - Add a method accepting std::string for filter_location()
  - Add a method accepting std::string for filter_file()
  - Add a method accepting std::string for filter_supplements()
  - Add a method accepting std::string for filter_enhances()
  - Add a method accepting std::string for filter_suggests()
  - Add a method accepting std::string for filter_recommends()
  - Add a method accepting std::string for filter_obsoletes()
  - Add a method accepting std::string for filter_conflicts()
  - Add a method accepting std::string for filter_requires()
  - Add a method accepting std::string for filter_description()
  - Add a method accepting std::string for filter_summary()
  - Add a method accepting std::string for filter_url()
  - Add a method accepting std::string for filter_sourcerpm()
  - Add a method accepting std::string for filter_nevra()
  - Add a method accepting std::string for filter_evr()
  - Add a method accepting std::string for filter_arch()
  - Add a method accepting std::string for filter_release()
  - Add a method accepting std::string for filter_version()
  - Add a method accepting std::string and int for filter_epoch()
  - Add a method accepting std::string for filter_name()
  - Add a method accepting std::string for filter_provides()
  - Extend version to four numbers (5.x.y.z)
  - Unify smallest version number name
  - cmake: rename PROJECT_VERSION_* to just VERSION_*
  - dnf5daemon: Document before_begin / after_complete signals
  - dnf5daemon: Signals to wrap rpm transaction execution
  - rpm: New callback to wrap whole rpm transaction
  - Add pImpl to `libdnf5::module::ModuleProfile`
  - Add pImpl to `libdnf5::module::ModuleDependency`
  - Add pImpl to `libdnf5::module::Nsvcap`
  - Add pImpl to `libdnf5::module::ModuleQuery`
  - Add pImpl to `libdnf5::comps::EnvironmentQuery`
  - Add pImpl to `libdnf5::comps::GroupQuery`
  - Add pImpl to `libdnf5::comps::Environment`
  - Add pImpl to `libdnf5::comps::Package`
  - Add pImpl to `libdnf5::comps::Group`
  - Remove unused `libdnf5::comps::GroupSack`
  - Remove unused `libdnf5::comps::EnvironmentSack`
  - Remove unused `libdnf5::comps::Comps`
  - Add pImpl to `libdnf5::advisory::Advisory`
  - Add pImpl to `libdnf5::advisory::AdvisoryReference`
  - Add pImpl to `libdnf5::advisory::AdvisoryCollection`
  - Add pImpl to `libdnf5::advisory::AdvisoryQuery`
  - Add pImpl to `libdnf5::rpm::RpmSignature`
  - Add pImpl to `libdnf5::transaction::Transaction`
  - Add pImpl to `libdnf5::rpm::KeyInfo`
  - Add pImpl to `libdnf5::repo::RepoSack`
  - Add pImpl to `libdnf5::base::SolverProblems`
  - Add pImpl to `libdnf5::base::LogEvent`
  - Add pImpl to `libdnf5::ConfigParser`
  - Add pImpl to `libdnf5::Vars`
  - Add pImpl to `libdnf5::transaction::TransactionHistory`
  - Add pImpl to `libdnf5::transaction::Package`
  - Add pImpl to `libdnf5::transaction::CompsGroup`
  - Add pImpl to `libdnf5::transaction::CompsEnvironment`
  - Add pImpl to `libdnf5::transaction::TransactionItem`
  - Remove several not needed imports
  - repo: add p_Impl and several needed utility methods
  - Repo: remove unused `fresh()` and `timestamp` attribute
  - Add pImpl to `ModuleItem` and remove definitions from header
  - Add pImpl to `libdnf5::base::transaction_*` classes
  - Add p_impl to libdnf5::GoalJobSettings and add getters and setters
  - Add p_impl to libdnf5::ResolveSpecSettings and add getters and setters
  - dnf5: bash completion: Prefer using "_comp_initialize" with fallback
  - dnf5: Bash completion: Switch to `_init_completion`
  - Fix `DISTRO_SYNC_ALL` (distro-sync without arguments, system upgrade)
  - Support RPMTRANS_FLAG_DEPLOOPS
  - Give inline methods hidden visibility by default
  - dnfdaemon: Make only internally used funcs static
  - dnfdaemon: Enhance Rpm.list() / Rpm.list_fd() documentation
  - doc: Add example of Rpm.list_fd usage in Python
  - dnf5daemon-client: Repoquery uses new Rpm:list_fd() API
  - dnfdaemon: New method list_fd() on Rpm interface
  - dnfdaemon: Serialize package object to JSON string
  - dnf5daemon: Handler that return data using UNIX_FD
  - dnf5daemon: Auxiliary method to write string to fd
  - dnf5daemon: Move utils functions into dnfdaemon namespace
  - dnf5daemon: get_session() method for D-Bus services
  - dnf5daemon-server: Ignore SIGPIPE
  - Vars: Add unit tests for API methods
  - Vars::unset: API method for removing variable
  - dnf5daemon-server/dbus: Install config files into /usr
  - Fix: libdnf5-cli::output::action_color: Move implementation to .cpp file
  - Fix: Do not use Variable-length arrays (VLAs) in C++ code
  - Add a hint to call base.setup() prior loading repositories
  - dnf5daemon-client: New switches for group list
  - doc: Include comps.Group interface to D-Bus API documentatin
  - dnfdaemon: Enhance comps.Group.list() method
  - dnf5daemon-client: Fix group.get_installed()
  - man: Link dnf5 pages to dnf


author: Packit <hello@packit.dev> - 5.2.1.0-1
changelog:
  - Update translations from weblate
  - bindings: Tests for using struct attributes in Python
  - bindings: Add Python attributes for structs
  - docs: Fix diff link on the dnf 5.2.0.0 changes page
  - docs: Add diff with API changes in dnf5-5.2.0.0
  - docs: Add a page about public API changes in dnf 5.2.0.0
  - system-upgrade: fix missing \n before transaction test
  - system-upgrade: comment to clarify progress bar logic
  - system-upgrade: drop [[maybe_unused]] from reboot() arg
  - system-upgrade: fix progress bars, set transaction description
  - system-upgrade: adapt to new transaction serialization format
  - system-upgrade: clean up releasever logic
  - system-upgrade: fix poweroff_after
  - copr: the dnf5 copr enable sets CoprRepoPart.enabled = true
  - Add file search result for repoquery --whatprovides
  - doc: Add enviroment variables and clarify options for loading the plugins
  - dnfdaemon: Fix Rpm interface introspection file


author: Packit <hello@packit.dev> - 5.2.2.0-1
changelog:
  - Vars::substitute: fix use-out-of-scope leaks
  - docs: correct the default for pluginconfpath
  - cli: Add skipped packages to the transaction table
  - i18n: Improve formatting an error message for multiple streams
  - Add/fix documentation for rpm::PackageQuery methods
  - i18n: Unwind "No {} to remove for argument: {}"
  - `history list`: count also groups and envs in total `Altered`
  - Fix typo in translatable string
  - [libdnf5] Actions plugin: Add hooks `repos_configured`, `repos_loaded`, `pre/post_add_cmdline_packages`
  - Option `--providers-of` doesn't require available repos
  - Improve docs regarding the keepcache option and download command
  - needs_restarting: Fix invalid reference usage
  - download: add `--source` alias for `--srpm`
  - automatic: Fix documentation and ship config file
  - fix: quote `dnf5-command({})' in command suggestion when plugin not found
  - i18n: Unwind "Cannot {} package \"{}\"" message
  - base: Add repository to solver problem messages
  - conf: New classes for append options
  - docs: Document changes to repoinfo and repolist
  - dnf5daemon: The buildtime attribute has been added to the package_attrs option


author: Packit <hello@packit.dev> - 5.2.3.0-1
changelog:
  - Update translations from weblate
  - const: Shared constant defining RPM transaction lock file
  - main: Implement checking of privileges before executing commands
  - exception: Add new exception for user insufficient privileges
  - locker: Move to public API
  - distro-sync: Add downloadonly option
  - commands: Fix using store option
  - Enhance warning about RPMs that were not validate by RPM


author: Packit <hello@packit.dev> - 5.2.4.0-1
changelog:
  * spec: Fix files and directories ownership by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1527
   * Add --minimal option for check-ugrade command by @j-mracek in https://github.com/rpm-software-management/dnf5/pull/1519
   * repolist: Implement JSON output by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1522
   * repoinfo: Implement JSON output by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1529
   * Move offline from dnf5 to libdnf5 by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1520
   * Add `history undo` command by @kontura in https://github.com/rpm-software-management/dnf5/pull/1452
   * Do not export internal symbols in shared object files by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1307
   * Build libdnf5 static library, re-enable unit tests that use hidden (private) libdnf5 symbols by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1507
   * daemon: Generate transfer_id on server side by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1517
   * Fix: dnf5 builddep plugin: Link with "common" by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1546
   * builddep: Add build-dep alias by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1532
   * `undo` command man page and translations by @kontura in https://github.com/rpm-software-management/dnf5/pull/1549
   * Add JSON output to advisory list by @stewartsmith in https://github.com/rpm-software-management/dnf5/pull/1531
   * docs: Update nightly copr repo name by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1551
   * [libdnf, actions plugin] Support get/set repositories options, ver 1.1.0 by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1539
   * Add `replay` command to replay stored transactions by @kontura in https://github.com/rpm-software-management/dnf5/pull/1536
   * Add "Complete!" message after succesfull transaction by @j-mracek in https://github.com/rpm-software-management/dnf5/pull/1553
   * Release 5.2.4.0 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1565

   * @stewartsmith made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1531

   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.3.0...5.2.4.0


author: Packit <hello@packit.dev> - 5.2.4.0-1
changelog:
  - spec: Fix files and directories ownership by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1527
  - Add --minimal option for check-ugrade command by @j-mracek in https://github.com/rpm-software-management/dnf5/pull/1519
  - repolist: Implement JSON output by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1522
  - repoinfo: Implement JSON output by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1529
  - Move offline from dnf5 to libdnf5 by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1520
  - Add `history undo` command by @kontura in https://github.com/rpm-software-management/dnf5/pull/1452
  - Do not export internal symbols in shared object files by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1307
  - Build libdnf5 static library, re-enable unit tests that use hidden (private) libdnf5 symbols by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1507
  - daemon: Generate transfer_id on server side by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1517
  - Fix: dnf5 builddep plugin: Link with "common" by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1546
  - builddep: Add build-dep alias by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1532
  - `undo` command man page and translations by @kontura in https://github.com/rpm-software-management/dnf5/pull/1549
  - Add JSON output to advisory list by @stewartsmith in https://github.com/rpm-software-management/dnf5/pull/1531
  - docs: Update nightly copr repo name by @jan-kolarik in https://github.com/rpm-software-management/dnf5/pull/1551
  - [libdnf, actions plugin] Support get/set repositories options, ver 1.1.0 by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1539
  - Add `replay` command to replay stored transactions by @kontura in https://github.com/rpm-software-management/dnf5/pull/1536
  - Add "Complete!" message after succesfull transaction by @j-mracek in https://github.com/rpm-software-management/dnf5/pull/1553
  - Release 5.2.4.0 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1565


author: Packit <hello@packit.dev> - 5.2.5.0-1
changelog:
  - Support colon in username, use LRO_USERNAME and LRO_PASSWORD by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1560
  - Debuginfo-install command by @j-mracek in https://github.com/rpm-software-management/dnf5/pull/1566
  - Implement conditional compilation `-DWITH_MODULEMD=OFF` by @kontura in https://github.com/rpm-software-management/dnf5/pull/1521
  - Add reports when corresponding debug package is not available by @j-mracek in https://github.com/rpm-software-management/dnf5/pull/1572
  - Add history rollback command and transaction merging by @kontura in https://github.com/rpm-software-management/dnf5/pull/1558
  - Fix DNF5: Don't trigger filelists download if abs path to local RPM by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1578
  - Documentation: ABI: Defining public (exported) symbols by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1576
  - dnfdaemon: Support to run transactions offline by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1543
  - TransactionReplay: handle group package types by @kontura in https://github.com/rpm-software-management/dnf5/pull/1569
  - Improvements and fixes for storing transactions by @kontura in https://github.com/rpm-software-management/dnf5/pull/1585
  - Release 5.2.5.0 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1591


author: Packit <hello@packit.dev> - 5.2.6.0-1
changelog:
  * Make offline transactions work with local rpm files by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1586
   * Add `history redo` command by @kontura in https://github.com/rpm-software-management/dnf5/pull/1595
   * Improve "After this operation" disk usage messages by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1600
   * Add an example how to disable repo to `repo` command man page by @kontura in https://github.com/rpm-software-management/dnf5/pull/1601
   * dnfdaemon: implement D-Bus API for cleaning caches by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1589
   * Add some docs about environments by @dschwoerer in https://github.com/rpm-software-management/dnf5/pull/1562
   * Fix a use-after-free in EmitterEmail::notify() by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1604
   * spec: Stricten a dependency on DNF libraries in plugin subpackages by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1607
   * Reduce the noise around running scriptlets by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1606
   * builddep: Support the --with/--without options to toggle bconds by @dm0- in https://github.com/rpm-software-management/dnf5/pull/1509
   * Use `SOLVER_FLAG_FOCUS_NEW` to install latests versions of deps by @kontura in https://github.com/rpm-software-management/dnf5/pull/1582
   * spec: fix cmake focus_new arg by @kontura in https://github.com/rpm-software-management/dnf5/pull/1615
   * dnfdaemon: system-upgrade API and command by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1588
   * Enhance docs for `system_cachedir`, `cachedir` and `logdir` by @kontura in https://github.com/rpm-software-management/dnf5/pull/1618
   * Backport countme bucket calculation fix by @kontura in https://github.com/rpm-software-management/dnf5/pull/1613
   * doc: Use ~ instead of /home/$USER by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1619
   * doc: fix arguments for install, upgrade and remove by @kontura in https://github.com/rpm-software-management/dnf5/pull/1621
   * doc: Naming of source and debug repos by @pkratoch in https://github.com/rpm-software-management/dnf5/pull/1627
   * Use correct path when destdir option is set by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1628
   * doc: Revise packages filtering doc section by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1632
   * spec: fix modularity man page by @kontura in https://github.com/rpm-software-management/dnf5/pull/1639
   * Update toml11-devel usage for 4.0.0 by @kontura in https://github.com/rpm-software-management/dnf5/pull/1625
   * Better error messages for system state loading by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1623
   * Implement a default user_agent string by @lleyton in https://github.com/rpm-software-management/dnf5/pull/1590
   * [dnf5] Add argument "-c" - alias to "--config" (dnf4 compatibility) by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1650
   * Install `defs.h` include for `libdnf5-cli` by @kontura in https://github.com/rpm-software-management/dnf5/pull/1657
   * Show the output of failed scriptlets to the user by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1652
   * doc: configuration options update by @kontura in https://github.com/rpm-software-management/dnf5/pull/1648
   * Print diagnostic messages on stderr, not stdout by @evan-goode in https://github.com/rpm-software-management/dnf5/pull/1641
   * daemon: D-Bus API to cancel current transaction by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1665
   * config-manager: Fix addrepo from-repofile with empty/comment lines by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1671
   * Fix regressions from stderr/stdout changes by @evan-goode in https://github.com/rpm-software-management/dnf5/pull/1677
   * doc: TransactionCallbacks class documentation by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1670
   * dnfdaemon: Correct D-Bus signal argument type by @mcrha in https://github.com/rpm-software-management/dnf5/pull/1679
   * Release 5.2.6.0 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1686

   * @dschwoerer made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1562
   * @dm0- made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1509
   * @lleyton made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1590

   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.5.0...5.2.6.0


author: Packit <hello@packit.dev> - 5.2.6.1-1
changelog:
  * doc: dnf5-repoquery: Mention %{reason} query tag at --userinstalled by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1683
   * automatic: Use original dnf4 config file location by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1690
   * spec: Recommend dnf5-plugins if dnf-plugins-core installed by @evan-goode in https://github.com/rpm-software-management/dnf5/pull/1691
   * transaction_callbacks: Deprecate confusing alias by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1689
   * offline: Update usage of toml11-devel by @evan-goode in https://github.com/rpm-software-management/dnf5/pull/1694
   * doc: add typical dnf5 workflow by @kontura in https://github.com/rpm-software-management/dnf5/pull/1661
   * swig: Add wrappers for TransactionEnvironment and TransactionGroup by @pkratoch in https://github.com/rpm-software-management/dnf5/pull/1697
   * I18N: Mark messages in "dnf install" output for a translation by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1696
   * doc: Document arch override for API users by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1695
   * Fix: libdnf5-cli: TransactionSummary counters data type by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1701
   * I18N: Mark messages in "dnf info" output for a translation by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1698
   * dnf5: Run transaction test for offline transactions by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1672
   * Warn on sign conversion by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1703
   * dnf clean: Do not report an error on a nonexistent cache directory by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1707
   * Release 5.2.6.1 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1714


   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.6.0...5.2.6.1


author: Packit <hello@packit.dev> - 5.2.6.2-1
changelog:
  * chore: static_cast to fix sign conversion warning by @evan-goode in https://github.com/rpm-software-management/dnf5/pull/1715
   * Fix `sdbus::ObjectPath` when checking signals `object_path` by @kontura in https://github.com/rpm-software-management/dnf5/pull/1711
   * Do not install /var/cache/libdnf5 directory by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1712
   * setlocale: If locale setting fails, try using C.UTF-8 as fallback by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1713
   * Birectional communication of libdnf5 actions plugin with running processes - "json" mode by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1642
   * Release 5.2.6.2 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1719


   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.6.1...5.2.6.2


author: Packit <hello@packit.dev> - 5.2.7.0-1
changelog:
  * copr: use pubkey URL returned by Copr API by @FrostyX in https://github.com/rpm-software-management/dnf5/pull/1725
   * Package file documenting dnf4/dnf5 changes as man page by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1729
   * daemon: Reset the goal by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1678
   * Consistently use "removing" instead of "erasing" packages by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1732
   * Add --allmirros option for `dnf download --url` by @alimirjamali in https://github.com/rpm-software-management/dnf5/pull/1735
   * comps: Fix memory issues in group serialization by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1743
   * Print RPM messages to the user by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1728
   * i18n: Update translation templates from Weblate by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1745
   * i18n: Fix plural forms for "Warning: skipped PGP checks..." message by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1746
   * Set `POOL_FLAG_ADDFILEPROVIDESFILTERED` only when not loading filelists by @kontura in https://github.com/rpm-software-management/dnf5/pull/1741
   * When writing main solv file (primary.xml) don't store filelists by @kontura in https://github.com/rpm-software-management/dnf5/pull/1752
   * Fix libdnf5::utils::patterns: Include missing headers, no inline API funcs, mark `noexcept` by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1742
   * Allow unlimited number of arguments for history `list` and `info` by @kontura in https://github.com/rpm-software-management/dnf5/pull/1755
   * [swig] Bindings and tests for libdnf5::utils::[is_glob_pattern | is_file_pattern] by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1738
   * doc: "dnf repoquery --unsatisfied" is not supported by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1758
   * comps: add get_base() to {Group,Environment}{,Query} by @gotmax23 in https://github.com/rpm-software-management/dnf5/pull/1722
   * Make most descriptions for `dnf5 --help` translatable. by @bc-lee in https://github.com/rpm-software-management/dnf5/pull/1751
   * test: Normalize Python code by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1762
   * Recommend --use-host-config if --installroot is used and not all repositories can be enabled by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1760
   * log: Preserve log messages during RPM transaction by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1772
   * chore: Clean up Fedora 37-related conditionals in RPM spec by @bc-lee in https://github.com/rpm-software-management/dnf5/pull/1765
   * Change `gpgcheck` option to `pkg_gpgcheck` but stay compatible by @kontura in https://github.com/rpm-software-management/dnf5/pull/1766
   * Drop `errorlevel` config option by @kontura in https://github.com/rpm-software-management/dnf5/pull/1788
   * build: Remove an explicit swig option -ruby by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1795
   * Revert "Drop `errorlevel` config option" by @kontura in https://github.com/rpm-software-management/dnf5/pull/1793
   * Update dnf5.conf.5 to reflect change in fastestmirror behavior by @PhirePhly in https://github.com/rpm-software-management/dnf5/pull/1784
   * historydb: Prevent insertion of duplicate group packages by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1798
   * Optimize getting counts of transaction items by @kontura in https://github.com/rpm-software-management/dnf5/pull/1778
   * Fix parsing of offline transaction JSON file by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1807
   * When `multi_progress_bar` finishes print new line automatically by @kontura in https://github.com/rpm-software-management/dnf5/pull/1805
   * Run "makecache" periodically to keep the cache ready. by @gordonmessmer in https://github.com/rpm-software-management/dnf5/pull/1791
   * DownloadCallbacks: Ensure `end` for every successful `add_new_download` by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1814
   * Clear up changes doc about optional subcommands by @kontura in https://github.com/rpm-software-management/dnf5/pull/1834
   * MultiProgressBar now buffers the output text to a single write by @Giedriusj1 in https://github.com/rpm-software-management/dnf5/pull/1825
   * repo: Fix invalid free() by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1850
   * daemon: API to reset the session.base instance by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1757
   * Release 5.2.7.0 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1857

   * @FrostyX made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1725
   * @alimirjamali made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1735
   * @bc-lee made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1751
   * @PhirePhly made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1784
   * @Giedriusj1 made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1825

   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.6.2...5.2.7.0


author: Packit <hello@packit.dev> - 5.2.8.0-1
changelog:
  * rpm: Reset RPM log callback upon RpmLogGuard destruction by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1870
   * SWIG bindings for user_cb_data in repo::DownloadCallbacks, unit tests by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1849
   * I18N: Mark messages in "dnf search" output for a translation by @sunwire in https://github.com/rpm-software-management/dnf5/pull/1861
   * Hint when an unknown option is available on different commands by @kontura in https://github.com/rpm-software-management/dnf5/pull/1858
   * builddep: add support for remote arguments by @kontura in https://github.com/rpm-software-management/dnf5/pull/1874
   * I18N: Mark "Total" message in MultiProgressBar() for a translation by @sunwire in https://github.com/rpm-software-management/dnf5/pull/1885
   * Make `test_multi_progress_bar` test more resilient by @kontura in https://github.com/rpm-software-management/dnf5/pull/1882
   * package_downloader: Ensure creation of intermediate directories by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1876
   * I18N: Mark <unknown> message in dnf list --installed output for a translation by @sunwire in https://github.com/rpm-software-management/dnf5/pull/1883
   * repo: Make Repo::download_metadata() method public by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1878
   * repo: While cloning root metadata copy also metalink by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1880
   * spec: toggle dnf5_obsoletes_dnf for RHEL 11 by @yselkowitz in https://github.com/rpm-software-management/dnf5/pull/1886
   * rpm: New API to check PGP signature of RPM file by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1877
   * repo: Add option to download all repository metadata by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1879
   * Add packit job to run ABI check on testing farm by @kontura in https://github.com/rpm-software-management/dnf5/pull/1869
   * Fix copr chroot specification: replace faulty regex with simpler split by @kontura in https://github.com/rpm-software-management/dnf5/pull/1863
   * Download cmd: Require at leats one argument/package to download by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1905
   * Install defs.h for /usr/include/dnf5/context.hpp by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1914
   * doc: Use PGP instead of GPG by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1917

   * @sunwire made their first contribution in https://github.com/rpm-software-management/dnf5/pull/1861

   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.7.0...5.2.8.0


author: Packit <hello@packit.dev> - 5.2.8.1-1
changelog:
  * Fix libdnf5 actions plugin sign conversion compilation err by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1921
   * builddep: Add support for --spec and --srpm options by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1907
   * Implement reposync plugin by @m-blaha in https://github.com/rpm-software-management/dnf5/pull/1903
   * `MultiProgressBar` fixes and tests by @kontura in https://github.com/rpm-software-management/dnf5/pull/1925
   * changes_from_dnf4: fix formatting of indented `list` points by @kontura in https://github.com/rpm-software-management/dnf5/pull/1930
   * Python API: Method `DownloadCallbacks.add_new_download` can return `None` by @jrohel in https://github.com/rpm-software-management/dnf5/pull/1929
   * doc: Use OpenPGP instead of PGP by @ppisar in https://github.com/rpm-software-management/dnf5/pull/1931
   * Release 5.2.8.1 by @github-actions in https://github.com/rpm-software-management/dnf5/pull/1934


   **Full Changelog**: https://github.com/rpm-software-management/dnf5/compare/5.2.8.0...5.2.8.1


author: Petr Pisar <ppisar@redhat.com> - 5.2.8.1-3
changelog:
  - Fix plural form in "Replacing N packages" message
  - Fix reporting disk space to be freed on a pure package removal (GH #1938)
  - Fix a library name in libdnf5-cli pkg-config file
  - Fix expanding "{body}" in command_format option of automatic plugin
    (GH #1951)
  - Display remaining time as nonnegative number (bug #2332931)
  - Document removal of "userinstalled" subcommand (bug #2335257)
  - Own /var/lib/dnf by libdnf5 (bug #2332856)
  - Fix a memory leak in copr plugin
  - Fix a crash when reporting metadata download errors (GH #1919)
  - Fix end-of-lines in messages sent by email emitter of automatic plugin
    (bug #2335508)


author: Petr Menšík <pemensik@redhat.com> - 2.89-3
changelog:
  - Add separate SPDX licenses also to translations
  - Include localized man pages simpler way, make them noarch


author: Bradley G Smith <bradley.g.smith@gmail.com> - 27.4.0~rc.4-1
changelog:
  - Update to release v27.4.0-rc.4
  - Resolves rhbz#2330680
  - Release candidate 4. Significant changes from v27.3. See upstream change
    log.


author: Bradley G Smith <bradley.g.smith@gmail.com> - 27.4.0-1
changelog:
  - Update to release v27.4.0
  - Resolves rhbz#2331204
  - Significant bug fixes and enhancements. See upstream change log.


author: Manuel Fombuena <fombuena@outlook.com> - 059-21
changelog:
  - fix(pkcs11): delete trailing dot on libcryptsetup-token-systemd-pkcs11.so
  - fix(pcsc): add opensc load module file
  - fix(pcsc): add --disable-polkit to pcscd.service


author: Adam Williamson <awilliam@redhat.com> - 060-2
changelog:
  - Backport fix to pull in required libs for systemd (dracut-ng PR #118)
  - Backport fix to move hook directory for systemd (dracut-ng PR #194)


author: Pavel Valena <pvalena@redhat.com> - 103-1
changelog:
  - Update to dracut 103.
  - build: enable dracut-cpio binary
  - feat(fips-crypto-policies): make c-p follow FIPS mode automatically
  - fix(fips-crypto-policies): make it depend on fips dracut module
  - build: package fips-crypto-policies module


author: Brian J. Murrell <brian@interlinx.bc.ca> - 1.47.0-5
changelog:
  - Recommends: /usr/sbin/sendmail rather than sendmail as many packages
    can provide a /usr/sbin/sendmail command


author: Eric Sandeen <sandeen@sandeen.net> - 1.47.1-1
changelog:
  - New upstream version (#2282078)
  - Build against fuse3 rather than fuse(2) (#1940259)
  - New udev rule to prohibit auto-mounting, from upstreamg


author: Pavel Reichl <preichl@redhat.com> - 1.47.2-1
changelog:
  - Update to the latest upstream version
  - Drop patch added in 1.47.1-6 release because it is already in 1.47.2


author: Nicolas Frayer <nfrayer@redhat.com>
changelog:
  - Migrate to SPDX license
  - Please refer to https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Mark Wielaard <mjw@fedoraproject.org> - 0.189-3
changelog:
  - Add elfutils-0.189-elf_getdata_rawchunk.patch
  - Add elfutils-0.189-debuginfod_config_cache-double-close.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 0.190-1
changelog:
  - Upgrade to upstream elfutils 0.190
  - Add eu-srcfiles
  - Drop upstreamed patches
    elfutils-0.189-relr.patch
    elfutils-0.189-debuginfod_config_cache-double-close.patch
    elfutils-0.189-elf_getdata_rawchunk.patch
    elfutils-0.189-elfcompress.patch
    elfutils-0.189-c99-compat.patch
  - Only package debuginfod-client-config.7 manpage for debuginfod-client


author: Aaron Merey <amerey@fedoraproject.org> - 0.191-1
changelog:
  - Upgrade to upstream elfutils 0.191
  - Drop upstreamed patches
    elfutils-0.190-fix-core-noncontig.patch
    elfutils-0.190-gcc-14.patch
    elfutils-0.190-remove-ET_REL-unstrip-test.patch
  - Drop testcore-noncontig.bz2


author: Michel Lind <salimma@fedoraproject.org> - 0.191-3
changelog:
  - Add feature flag for reenabling elfutils-libelf-devel-static and elfutils-devel-static
  - Add dependency on libzstd-static for elfutils-libelf-devel-static


author: Mark Wielaard <mjw@fedoraproject.org> - 0.191-6
changelog:
  - eu-srcfiles directly links to libdebuginfod.so so explicitly
    Require elfutils-debuginfod-client not just Recommends.


author: Aaron Merey <amerey@fedoraproject.org> - 0.192-1
changelog:
  - Upgrade to upstream elfutils 0.192
  - Drop upstreamed patches
    Add elfutils-0.190-profile-empty-urls.patch
    Add elfutils-0.190-riscv-flatten.patch


author: Aaron Merey <amerey@fedoraproject.org> - 0.192-5
changelog:
  - Enable debuginfod IMA verification
  - Add elfutils-0.192-fix-configure-conditional.patch
  - Add elfutils-0.192-fix-zsh-profile.patch


author: Sundeep Anand <suanand@redhat.com> - 0.21-20.0.20220203
changelog:
  - Include doc and man pages for envsubst subpackage.
    Move _libdir and _datadir from gettext-runtime to gettext package.


author: Manish Tiwari <matiwari@redhat.com> - 0.23-1
changelog:
  - update to 0.23 release
  - https://savannah.gnu.org/news/?id=10699
  - Add patch to fix compilation error with libxml2 >= 2.12.0 and gcc >= 14.
  - Remove gettext-0.22-disable-libtextstyle patch


author: Tomas Korbar <tkorbar@redhat.com> - 2.6.3-1
changelog:
  - Rebase to version 2.6.3
  - Resolves: rhbz#2309690
  - Resolves: CVE-2024-45492
  - Resolves: CVE-2024-45491
  - Resolves: CVE-2024-45490


author: Miro Hrončok <mhroncok@redhat.com> - 39-0.3
changelog:
  - Drop fedora-repos-modular and fedora-repos-rawhide-modular packages
  - https://fedoraproject.org/wiki/Changes/RetireModularity


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.12.0-1
changelog:
  - 1.12.0 release (resolves: rhbz#2129268)
  - remove unneeded BR for hidapi-hidraw
  - change to SPDX license (BSD -> BSD-2-Clause)
  - add check section


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 1.13.0-1
changelog:
  - Update to 1.13.0 release ( resolves: rhbz#2172297 )
  - Perform some deglobing of files per packaging guidelines


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 3.18-33
changelog:
  - Add more missing names for /usr/sbin symlinks
  - Hopefully resolves issue with a missing symlink for /sbin/zfcpconf.sh
    required by dracut.


author: Martin Osvald <mosvald@redhat.com> - 3.18-1
changelog:
  - Filesystem has a dependency on /bin/sh (#1306489)
  - Add /usr/share/X11/fonts/ to default filesystem (#2107447)
  - Remove obsolete and forbidden Group tag
  - Own zsh and fish completions directories (rhbz#1312594)
  - Improve directory creation to avoid 'Argument list too long' error


author: Kefu Chai <tchaikov@gmail.com> - 10.2.1-5
changelog:
  - Backport upstream to address FTBFS with the latest Clang, see https://github.com/fmtlib/fmt/pull/4187


author: Akira TAGOH <tagoh@redhat.com> - 2.14.2-5
changelog:
  - Update 65-nonlatin.conf to 69-nonlatin.conf
    This basically provides substitutes for certain languages and is helpful
    to determine default behavior though, we have per-package config for similar purpose.
    Since 65 is mostly used for default fonts and this config prevents some behavior for
    packages named something coming later than "nonlatin" in the alphabetical order.
    So moving this to the safer priority.
    This would fixes an issue, particularly Lohit Marathi vs Lohit Devanagari after
    updating their priorities from 65 to 66.


author: Akira TAGOH <tagoh@redhat.com> - 1.0.11-3
changelog:
  - Fix security issues, CVE-2022-25308, CVE-2022-25309, CVE-2022-25310.
    Resolves: rhbz#2067039, rhbz#2067043, rhbz#2067045


author: Richard W.M. Jones <rjones@redhat.com> - 3.14.1-2
changelog:
  - Force fuse3 and fuse3-libs versions to be identical
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/LYQUYUAS7FG6FFGJBBWP7XEV563V4LBS/


author: Jakub Martisko <jamartis@redhat.com> - 5.2.2-1
changelog:
  - New upstream release - 5.2.2
  - Disable the pma test for now (it breaks the build right now).
  Resolves rhbz#2124101


author: Jakub Martisko <jamartis@redhat.com> - 5.3.0-1
changelog:
  - New upstream release - 5.3.0
  - libsigsegv should no longer be needed for the build
  Resolves rhbz#2247650


author: Kalev Lember <klember@redhat.com> - 2.79.0-1
changelog:
  - Update to 2.79.0
  - Rebase gnutls-hmac.patch
  - Add gir and typelib files that moved here from gobject-introspection
  - Explicitly conflict with older gobject-introspection
  - Switch to building docs with gi-docgen instead of gtk-doc


author: Akira TAGOH <tagoh@redhat.com> - 20230801-3
changelog:
  - Add Noto Sans Sinhala as monospace for a workaround that
    Noto Serif Sinhala is picked up for monospace.
    Resolves: rhbz#2236485


author: Akira TAGOH <tagoh@redhat.com> - 20230801-4
changelog:
  - Add binding="same" for Noto Sans Symbols to prevent lower priority than
    urw-base35-standard-symbols-ps-fonts even though priority number in fontconfig is higher than it.
    Resolves: rhbz#2088665


author: Akira TAGOH <tagoh@redhat.com> - 20240101-4
changelog:
  - Updates to monthly release of 24.1.1
  - Remove substitute config for Symbol.
    Resolves: rhbz#2259962


author: Akira TAGOH <tagoh@redhat.com> - 20240201-2
changelog:
  - Add Obsolsetes: google-noto-sans-phags-pa-fonts in google-noto-sans-phagspa-fonts
    Resolves: rhbz#2265259


author: Akira TAGOH <tagoh@redhat.com> - 20240301-3
changelog:
  - Add google-noto-fonts-all, google-noto-fonts-all-vf, and
    google-noto-fonts-all-static meta packages.


author: Marie Loise Nolden <loise@kde.org> - 1.20.0-1
changelog:
  - Update to 1.20.0 and enable/add qt6 build for qgpgme. The qt5 and qt6
    rpms have been split out into separate libs and -devel rpms for compatibility.


author: Parag Nemade <pnemade AT redhat DOT com> - 1.3.14-13
changelog:
  - Migrate to SPDX license expression
  - Drop Netscape license reference as no test file using it in 1.3.x releases


author: Hans de Goede <hdegoede@redhat.com> - 2.06-107
changelog:
  - spec: Switch back to static enablement for grub services in tools package
  - spec: Add %triggerpostun to apply grub-boot-success.timer preset
    when upgrading from older versions where this was not a preset
  - Resolves: #2247635


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-109
changelog:
  - Linker: added --no-warn-rwx-segments as build will fail after
  ld.bfd default options have been changed.
  https://fedoraproject.org/wiki/Changes/Linker_Error_On_Security_Issues


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-116
changelog:
  - grub-core/commands: add flag to only search root dev
  - Resolves: #2223437
  - Resolves: #2224951
  - Resolves: #2258096
  - Resolves: CVE-2023-4001


author: Leo Sandoval <lsandova@redhat.com> - 2.06-118
changelog:
  - xfs: include the 'directory extent parsing patch', otherwise
  XFS-formatted partitions do not boot. This change effectively
  reverts 2.06-115
  - Resolves: #2259266


author: Nicolas Frayer <nfrayer@redhat.com> - 2.06-120
changelog:
  - GRUB2 NTFS driver vulnerabilities
  - (CVE-2023-4692)
  - (CVE-2023-4693)
  - Resolves: #2236613
  - Resolves: #2241978
  - Resolves: #2241976
  - Resolves: #2238343


author: Marta Lewandowska <mlewando@redhat.com> - 2.12-16
changelog:
  - 99-grub-mkconfig.install: Disable BLS and run grub2-mkconfig when GRUB_ENABLE_BLSCFG is disable
  - Resolves: #2325960


author: Jakub Martisko <jamartis@redhat.com> - 1.13-1
changelog:
  - Rebase to gzip 1.13
  - There's a bug on s390x: https://lists.gnu.org/archive/html/bug-gzip/2023-10/msg00000.html
  - Revert the s390x build options in the next release
  Resolves: rhbz#2232890


author: Timothée Ravier <tim@siosm.fr> - 2:1.9.0-1
changelog:
  - Update to 1.9.0 (fedora#1952715 fedora#2091169 fedora#2063926)
  - Fix EnvironmentFile location in systemd unit (fedora#2058510)
  - Use upstream environment file in systemd unit


author: Richard W.M. Jones <rjones@redhat.com> - 2.14-1
changelog:
  - New upstream version 2.14
  - Switch to using forge macros for easier maintenance.
  - Fix upstream URL and source.
  - Unconditionally run autoreconf.
  - Remove obsolete %ldconfig_scriptlets macro.


author: Coiby Xu <coxu@redhat.com> - 2.0.27-4
changelog:
  - update to makedumpfile-1.7.4
  - kdump-lib.sh: add extra 64M to default crashkernel if sme/sev is active
  - Allow _crashkernel_add to address larger memory ranges


author: Coiby Xu <coxu@redhat.com> - 2.0.28-1
changelog:
  - kexec-tools 2.0.28 (Simon Horman)
  - Use the same /etc/resolve.conf in kdump initrd if it's managed manually
  - dracut-module-setup: consolidate s390 network device config


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.12.1-0]
changelog:
  - Bluetooth: btusb: add Foxconn 0xe0fc for Qualcomm WCN785x (Mark Pearson) [2329005]
  - Initial set up for stable Fedora branch (Justin M. Forbes)
  - arm64: dts: qcom: x1e80100-vivobook-s15: Enable the gpu (Maud Spierings)
  - tools/rtla: fix collision with glibc sched_attr/sched_set_attr (Jan Stancek)
  - tools/rtla: drop __NR_sched_getattr (Jan Stancek)
  - Reset RHEL_RELEASE for 6.13 (Justin M. Forbes)
  - redhat: Move perf_dlfilter.h from libperf-devel to perf (Akihiko Odaki)
  - Consolidate configs to common for 6.12 (Justin M. Forbes)
  - Linux v6.12.1


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.12.2-0]
changelog:
  - Add new config for 6.12.2 (Justin M. Forbes)
  - Revert "udp: avoid calling sock_def_readable() if possible" (Fernando Fernandez Mancera)
  - Fedora: arm64: Enable Rockchip QP HDMI driver (Peter Robinson)
  - arm64: dts: rockchip: Enable HDMI on Hardkernel ODROID-M2 (Jonas Karlman)
  - arm64: dts: rockchip: Enable HDMI0 on FriendlyElec CM3588 NAS (Jonas Karlman)
  - arm64: dts: rockchip: Enable HDMI0 on rock-5a (Cristian Ciocaltea)
  - arm64: dts: rockchip: Enable HDMI0 on rk3588-nanopc-t6 (Marcin Juszkiewicz)
  - arm64: dts: rockchip: Enable HDMI0 on Orange Pi 5 (Jimmy Hon)
  - arm64: dts: rockchip: add and enable gpu node for Radxa ROCK 5A (FUKAUMI Naoki)
  - arm64: dts: rockchip: Enable HDMI0 on orangepi-5-plus (Cristian Ciocaltea)
  - arm64: dts: rockchip: Enable HDMI0 on rk3588-evb1 (Cristian Ciocaltea)
  - arm64: dts: rockchip: Enable HDMI0 on rock-5b (Cristian Ciocaltea)
  - arm64: dts: rockchip: Add HDMI0 node to rk3588 (Cristian Ciocaltea)
  - drm/rockchip: Add basic RK3588 HDMI output support (Cristian Ciocaltea)
  - drm/rockchip: Load crtc devices in preferred order (Jonas Karlman)
  - drm/rockchip: dw_hdmi: Enable 4K@60Hz mode on RK3399 and RK356x (Jonas Karlman)
  - drm/rockchip: dw_hdmi: Use auto-generated tables (Douglas Anderson)
  - drm/rockchip: dw_hdmi: Set cur_ctr to 0 always (Douglas Anderson)
  - drm/rockchip: dw_hdmi: Add phy_config for 594Mhz pixel clock (Nickey Yang)
  - drm/bridge: synopsys: Add DW HDMI QP TX Controller support library (Cristian Ciocaltea)
  - redhat: Drop bpftool from kernel spec (Viktor Malik)
  - Revert "add pci_hw_vendor_status()" (Justin M. Forbes)
  - Linux v6.12.2


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.12.4-0]
changelog:
  - Fix up QCOM_EMAC config for Fedora (Justin M. Forbes)
  - wifi: rtl8xxxu: add more missing rtl8192cu USB IDs (Hans de Goede)
  - Linux v6.12.4


author: Justin M. Forbes <jforbes@fedoraproject.org> [6.12.5-0]
changelog:
  - New config item for 6.12.5 (Justin M. Forbes)
  - x86/cpu: Add Lunar Lake to list of CPUs with a broken MONITOR  implementation (Mark Pearson) [2332094]
  - Add a bug to BugsFixed (Justin M. Forbes)
  - Turn off libbpf dynamic for perf on f40 (Justin M. Forbes)
  - Linux v6.12.5


author: Augusto Caringi <acaringi@redhat.com> [6.12.8-0]
changelog:
  - Fix up last of fallout from ZRAM Backend churn (Justin M. Forbes)
  - Add more missing config items for ZRAM backend (Justin M. Forbes)
  - redhat/configs: Re-enable ZRAM backends (Neal Gompa)
  - Linux v6.12.8


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc0.aaf20f870da0.10]
changelog:
  - redhat/configs: enable SERIAL_AMBA_PL011 for automotive (Radu Rendec)
  - c10s: disable tests in CKI pipelines (Michael Hofmann)
  - redhat: Drop bpftool from kernel spec (Viktor Malik)
  - Linux v6.13.0-0.rc0.aaf20f870da0


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc1.cdd30ebb1b9f.15]
changelog:
  - redhat/configs: default to PREEMPT_LAZY on x86, riscv (Michal Schmidt)
  - redhat/configs: New config CONFIG_PREEMPT_LAZY (Michal Schmidt)
  - Linux v6.13.0-0.rc1.cdd30ebb1b9f


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc1.feffde684ac2.17]
changelog:
  - x86/insn_decoder_test: allow longer symbol-names (David Rheinsberg)
  - kernel.spec: update license field (Scott Weaver)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc1.feffde684ac2.17]
changelog:
  - redhat: configs: enable INTEL_PLR_TPMI for RHEL (David Arcari)
  - configs: Enable CONFIG_NETKIT for RHEL (Toke Høiland-Jørgensen)
  - redhat: fix build/install targets in netfilter kselftest (Davide Caratti)
  - RHEL: disable the btt driver (Jeff Moyer)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc1.b8f52214c61a.18]
changelog:
  - redhat/kernel.spec.template: Link rtla against in-tree libcpupower (Tomas Glozar)
  - Linux v6.13.0-0.rc1.b8f52214c61a


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc2.7cb1b4663150.22]
changelog:
  - gitlab-ci: disable clang CI pipelines (Scott Weaver)
  - redhat/configs: Remove obsolete arch64/64k/CONFIG_FORCE_MAX_ZONEORDER (Waiman Long)
  - Fix up QCOM_EMAC config for Fedora (Justin M. Forbes)
  - Linux v6.13.0-0.rc2.7cb1b4663150


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc2.f92f4749861b.23]
changelog:
  - crypto: rng - Fix extrng EFAULT handling (Herbert Xu)
  - redhat: configs: rhel: aarch64: Support NV Jetson MIPI camera (Kate Hsuan)
  - Linux v6.13.0-0.rc2.f92f4749861b


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc2.231825b2e1ff.24]
changelog:
  - generic: Remove and cleanups from staging 6.13 (Peter Robinson)
  - redhat: configs: Clean up DVB settings in RHEL (Kate Hsuan)
  - Move CONFIG_ARCH_TEGRA_241_SOC config/common so that it is enabled for RHEL as well as Fedora. Get rid of uneeded CONFIG_TEGRA241_CMDQV in configs/fedora while we're at it. (Mark Salter)
  - fedora: arm64: Enable the rockchip HDMI QP support (Peter Robinson)
  - Linux v6.13.0-0.rc2.231825b2e1ff


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc2.f932fb9b4074.25]
changelog:
  - redhat/configs: Enable the CS42L84 driver on Fedora (Neal Gompa)
  - Linux v6.13.0-0.rc2.f932fb9b4074


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc3.28]
changelog:
  - redhat/configs: automotive: disable CONFIG_NET_DROP_MONITOR (Davide Caratti)
  - Linux v6.13.0-0.rc3


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc3.f44d154d6e3d.29]
changelog:
  - redhat/configs: Re-enable CONFIG_INFINIBAND_VMWARE_PVRDMA (Vitaly Kuznetsov)
  - redhat/configs: PREEMPT_NOTIFIERS does not need to be explicitly listed (Michal Schmidt)
  - redhat/configs: delete all CONFIG_PREEMPT_*BEHAVIOUR (Michal Schmidt)
  - Linux v6.13.0-0.rc3.f44d154d6e3d


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc6.09a0fa92e5b4.49]
changelog:
  - redhat/kernel.spec.template: Require kernel-tools-libs in rtla (Tomas Glozar)
  - redhat: make kernel-debug-uki-virt installable without kernel-debug-core (Vitaly Kuznetsov)
  - redhat/configs: enable CONFIG_USB_XHCI_PCI_RENESAS on RHEL (Desnes Nunes) [RHEL-72093]
  - redhat/configs: Re-enable ZRAM backends and unify configuration (Neal Gompa)
  - Linux v6.13.0-0.rc6.09a0fa92e5b4


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.13.0-0.rc6.2144da25584e.51]
changelog:
  - RHEL: Set correct config option for CRYPTO_HMAC_S390 (Mete Durlu) [RHEL-24137]
  - redhat/kernel.spec: add iputils to the requires list for selftests-internal (Brian Masney)
  - Linux v6.13.0-0.rc6.2144da25584e


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.14.0-0.rc0.d0d106a2bd21.3]
changelog:
  - Fix up CONFIG_CRC_T10DIF_IMPL_GENERIC mismatch (Justin M. Forbes)
  - Fix mismatches for 6.13 merge window (Justin M. Forbes)
  - Linux v6.14.0-0.rc0.d0d106a2bd21


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.14.0-0.rc0.aa22f4da2a46.6]
changelog:
  - redhat/configs: automotive: set CONFIG_TIMEOUT_PANIC (Enric Balletbo i Serra)
  - drop %{_datadir}/perf-core/* from kernel.spec (Thorsten Leemhuis)
  - put new misc_minor_kunit in modules-internal (Thorsten Leemhuis)
  - put new cirrus kunit tests in modules-internal (Thorsten Leemhuis)
  - redhat/configs: enable iBFT parsing on aarch64 (Chris Leech)
  - redhat: kernel.spec: fix build with merged-sbin (Zbigniew Jędrzejewski-Szmek)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.14.0-0.rc0.6d61a53dd6f5.8]
changelog:
  - redhat/kernel.spec: work around find-debuginfo aborting cross builds (Jan Stancek)
  - redhat/configs: Default to batched invalidation on s390 (Jerry Snitselaar)
  - Linux v6.14.0-0.rc0.6d61a53dd6f5


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.14.0-0.rc0.72deda0abee6.10]
changelog:
  - redhat/configs: disable CONFIG_AF_UNIX_OOB on RHEL (Marcelo Ricardo Leitner)
  - redhat/configs: automotive: Disable wireless network and it's dependencies (Dorinda Bassey)
  - Linux v6.14.0-0.rc0.72deda0abee6


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.14.0-0.rc0.72deda0abee6.11]
changelog:
  - s390/bitops: Use correct constraint for arch_test_bit() inline assembly (Heiko Carstens)
  - Add -fzero-init-padding-bits to bindgen_skip_cflags (Justin M. Forbes)
  - s390: Add '-std=gnu11' to decompressor and purgatory CFLAGS (Nathan Chancellor)
  - apply -Wno-error=unterminated-string-initialization temporarily (Thorsten Leemhuis)
  - x86/boot: Use '-std=gnu11' to fix build with GCC 15 (Nathan Chancellor)
  - kbuild: Use -fzero-init-padding-bits=all (Kees Cook)
  - include/linux: Adjust headers for C23 (Jakub Jelinek)
  - x86/insn_decoder_test: allow longer symbol-names (David Rheinsberg)


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.7.0-0.rc8.95c8a35f1c01.66]
changelog:
  - fedora: arm64: enable ethernet on newer TI industrial (Peter Robinson)
  - fedora: arm64: Disable VIDEO_IMX_MEDIA (Peter Robinson)
  - fedora: use common config for Siemens Simatic IPC (Peter Robinson)
  - fedora: arm: enable Rockchip SPI flash (Peter Robinson)
  - fedora: arm64: enable DRM_TI_SN65DSI83 (Peter Robinson)
  - Linux v6.7.0-0.rc8.95c8a35f1c01


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.9f8413c4a66f.1]
changelog:
  - Reset RHEL_RELEASE for 6.8 series (Justin M. Forbes)
  - common: cleanup MX3_IPU (Peter Robinson)
  - all: The Octeon MDIO driver is aarch64/mips (Peter Robinson)
  - common: rtc: remove bq4802 config (Peter Robinson)
  - common: de-dupe MARVELL_GTI_WDT (Peter Robinson)
  - all: Remove CAN_BXCAN (Peter Robinson)
  - common: cleanup SND_SOC_ROCKCHIP (Peter Robinson)
  - common: move RHEL DP83867_PHY to common (Peter Robinson)
  - common: Make ASYMMETRIC_KEY_TYPE enable explicit (Peter Robinson)
  - common: Disable aarch64 ARCH_MA35 universally (Peter Robinson)
  - common: arm64: enable Tegra234 pinctrl driver (Peter Robinson)
  - rhel: arm64: Enable qoriq thermal driver (Peter Robinson)
  - common: aarch64: Cleanup some i.MX8 config options (Peter Robinson)
  - all: EEPROM_LEGACY has been removed (Peter Robinson)
  - all: rmeove AppleTalk hardware configs (Peter Robinson)
  - all: cleanup: remove references to SLOB (Peter Robinson)
  - all: cleanup: Drop unnessary BRCMSTB configs (Peter Robinson)
  - all: net: remove retired network schedulers (Peter Robinson)
  - all: cleanup removed CONFIG_IMA_TRUSTED_KEYRING (Peter Robinson)
  - BuildRequires: lld for build with selftests for x86 (Jan Stancek)
  - spec: add keyutils to selftest-internal subpackage requirements (Artem Savkov) [2166911]
  - redhat/spec: exclude liburandom_read.so from requires (Artem Savkov) [2120968]
  - rtla: sync summary text with upstream and update Requires (Jan Stancek)
  - uki-virt: add systemd-sysext dracut module (Gerd Hoffmann)
  - uki-virt: add virtiofs dracut module (Gerd Hoffmann)
  - common: disable the FB device creation (Peter Robinson)
  - s390x: There's no FB on Z-series (Peter Robinson)
  - Linux v6.8.0-0.rc0.9f8413c4a66f


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.ab27740f7665.3]
changelog:
  - Flip CONFIG_INTEL_PMC_CORE to m for Fedora (Justin M. Forbes)
  - Add CONFIG_ZRAM_TRACK_ENTRY_ACTIME=y to avoid a mismatch (Justin M. Forbes)
  - Linux v6.8.0-0.rc0.ab27740f7665


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.de927f6c0b07.4]
changelog:
  - Fix up ZRAM_TRACK_ENTRY_ACTIME in pending (Justin M. Forbes)
  - random: replace import_single_range() with import_ubuf() (Justin M. Forbes)
  - Linux v6.8.0-0.rc0.de927f6c0b07


author: Fedora Kernel Team <kernel-team@fedoraproject.org> [6.8.0-0.rc0.70d201a40823.5]
changelog:
  - redhat: kABI: add missing RH_KABI_SIZE_ALIGN_CHECKS Kconfig option (Sabrina Dubroca)
  - redhat: rh_kabi: introduce RH_KABI_EXCLUDE_WITH_SIZE (Sabrina Dubroca)
  - redhat: rh_kabi: move semicolon inside __RH_KABI_CHECK_SIZE (Sabrina Dubroca)
  - Linux v6.8.0-0.rc0.70d201a40823


author: Coiby <coxu@redhat.com> - 2.0.25-4
changelog:
  - dracut-module-setup.sh: stop overwriting dracut's trap handler
  - fadump: avoid status check while starting in fadump mode
  - fadump: add a kernel install hook to clean up fadump initramfs
  - fadump: fix default initrd backup and restore logic
  - fadump: use 'zstd' as the default compression method


author: Coiby <coxu@redhat.com> - 2.0.26-1
changelog:
  - Update kexec-tools to 2.0.25
  - Don't try to update crashkernel when bootloader is not installed
  - dracut-module-setup.sh: also install the driver of physical NIC for Hyper-V VM with accelerated networking
  - dracut-module-setup.sh: skip installing driver for the loopback interface


author: Coiby <coxu@redhat.com> - 2.0.26-3
changelog:
  - kdumpctl: make do_estimate more robust
  - kdumpctl: refractor check_rebuild
  - kdumpctl: cleanup 'stop'
  - kdumpctl: cleanup 'start'
  - kdump-lib: fix prepare_cmdline
  - kdumpctl: move aws workaround to kdump-lib
  - unit tests: add tests for prepare_cmdline
  - kdump-lib: always specify version in is_squash_available
  - mkfadumprd: drop unset globals from debug output
  - kdumpctl: merge check_current_{kdump,fadump}_status
  - dracut-early-kdump: explicitly use bash
  - dracut-early-kdump: fix shellcheck findings
  - kdumpctl: simplify check_failure_action_config
  - makedumpfile: Fix wrong exclusion of slab pages on Linux 6.2-rc1


author: Coiby <coxu@redhat.com> - 2.0.26-4
changelog:
  - kdumpctl: Add support for systemd-boot paths
  - mkdumprd: add --aggressive-strip as default dracut args
  - kdumpctl: Add basic UKI support
  - kdumpctl: Move temp file in get_kernel_size to global temp dir
  - kdumpctl: Move get_kernel_size to kdumpctl
  - kdumpctl: fix is_dracut_mod_omitted
  - kdump-lib: move is_dracut_mod_omitted to kdumpctl
  - kdump-lib: remove get_nmcli_connection_apath_by_ifname
  - kdump-lib: remove get_nmcli_field_by_conpath
  - dracut-module-setup: remove dead source_ifcfg_file
  - kdump-lib-initramfs: remove is_fs_dump_target
  - kdump-lib-initramfs: harden is_mounted
  - Show how much time kdump has waited for the network to be ready
  - Tell nmcli to not escape colon when getting the path of connection profile
  - kdumpctl: lower the log level in reset_crashkernel_for_installed_kernel
  - Install nfsv4-related drivers when users specify nfs dumping via dracut_args
  - sysconfig: add zfcp.allow_lun_scan to KDUMP_COMMANDLINE_REMOVE on s390
  - Use the correct command to get architecture


author: Coiby <coxu@redhat.com> - 2.0.26-5
changelog:
  - Simplify the management of the kernel parameter crashkernel
  - Let _update_kernel_cmdline return the correct return code
  - mkdumprd: call dracut with --add-device to install the drivers needed by /boot partition automatically for FIPS
  - kdump-lib: fix the matching pattern for debug-kernel


author: Coiby <coxu@redhat.com> - 2.0.26-7
changelog:
  - kdumpctl: Fix the matching of plus symbol by grep's EREs
  - kdump-lib: Evaluate the memory consumption by smmu and mlx5 separately
  - kdump-lib: add support for 64K aarch64
  - kdump-lib: Introduce parse_kver_from_path() to get kernel version from its path name
  - kdump-lib: Introduce a help function _crashkernel_add()


author: Julien Rische <jrische@redhat.com> - 1.20.1-6
changelog:
  - Set aes256-cts-hmac-sha384-192 as EXAMLE.COM master key in kdc.conf
  - Add AES SHA-2 HMAC family as EXAMPLE.COM supported etypes in kdc.conf
    Resolves: rhbz#2114771


author: Julien Rische <jrische@redhat.com> - 1.20.1-8
changelog:
  - Bypass FIPS restrictions to use KRB5KDF in case AES SHA-1 HMAC is enabled
  - Lazily load MD4/5 from OpenSSL if using RADIUS or RC4 enctype in FIPS mode


author: Julien Rische <jrische@redhat.com> - 1.21-1
changelog:
  - New upstream version (1.21)
  - Do not disable PKINIT if some of the well-known DH groups are unavailable
    Resolves: rhbz#2214297
  - Make PKINIT CMS SHA-1 signature verification available in FIPS mode
    Resolves: rhbz#2214300
  - Allow to set PAC ticket signature as optional
    Resolves: rhbz#2181311
  - Add support for MS-PAC extended KDC signature (CVE-2022-37967)
    Resolves: rhbz#2166001
  - Fix syntax error in aclocal.m4
    Resolves: rhbz#2143306


author: Julien Rische <jrische@redhat.com> - 1.21.2-1
changelog:
  - New upstream version (1.21.2)
  - Fix double-free in KDC TGS processing (CVE-2023-39975)
    Resolves: rhbz#2229113
  - Make tests compatible with Python 3.12
    Resolves: rhbz#2224013


author: Julien Rische <jrische@redhat.com> - 1.21.2-3
changelog:
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Store krb5-tests files in architecture-specific directories
    Resolves: rhbz#2244601


author: Julien Rische <jrische@redhat.com> - 1.21.2-6
changelog:
  - CVE-2024-37370 CVE-2024-37371: GSS message token handling
    Resolves: rhbz#2294678 rhbz#2294680
  - Fix double free in klist's show_ccache()
    Resolves: rhbz#2257301
  - Do not include files with "~" termination in krb5-tests


author: Julien Rische <jrische@redhat.com> - 1.21.3-1
changelog:
  - New upstream version (1.21.3)
  - CVE-2024-26458: Memory leak in src/lib/rpc/pmap_rmt.c
    Resolves: rhbz#2266732
  - CVE-2024-26461: Memory leak in src/lib/gssapi/krb5/k5sealv3.c
    Resolves: rhbz#2266741
  - CVE-2024-26462: Memory leak in src/kdc/ndr.c
    Resolves: rhbz#2266743
  - Add missing SPDX license identifiers
    Resolves: rhbz#2265333


author: Julien Rische <jrische@redhat.com> - 1.21.3-3
changelog:
  - libkrad: implement support for Message-Authenticator (CVE-2024-3596)
    Resolves: rhbz#2304071
  - Fix various issues detected by static analysis
    Resolves: rhbz#2322704
  - Remove RSA protocol for PKINIT
    Resolves: rhbz#2322706
  - Make TCP waiting time configurable
    Resolves: rhbz#2322711


author: Julien Rische <jrische@redhat.com> - 1.21.3-5
changelog:
  - Prevent overflow when calculating ulog block size (CVE-2025-24528)
    Resolves: rhbz#2342798
  - Support PKCS11 EC client certs in PKINIT
    Resolves: rhbz#2341962
  - kdb5_util: fix DB entry flags on modification
    Resolves: rhbz#2336555
  - Add ECDH support for PKINIT (RFC5349)
    Resolves: rhbz#2214326
  - Remove dependency of krb5-libs on gawk and sed
    Resolves: rhbz#2323859


author: Zuzana Miklankova <zmiklank@redhat.com> - 3.45.0-1
changelog:
  - Updated to version 3.45.0 (https://sqlite.org/releaselog/3_45_0.html)
  - List versioned soname in files, preventing unnoticed soname bumps
  - Disable func4 tests for i686 arch due to failing float<->int conversions


author: Peter Hutterer <peter.hutterer@redhat.com> - 1.8.7-1
changelog:
  - libX11 1.8.7
    - CVE-2023-43785 libX11: out-of-bounds memory access in _XkbReadKeySyms()
    - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in
      PutSubImage()
    - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to
     a heap overflow
    - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer()
    - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap


author: Karel Zak <kzak@redhat.com> - 2.39.2-1
changelog:
  - fix libmount atime regression
  - upgrade to v2.39.2
    https://kernel.org/pub/linux/utils/util-linux/v2.39/v2.39.2-ReleaseNotes


author: Colin Walters <walters@verbum.org> - 2.40-0.9.rc1
changelog:
  - Backport https://github.com/util-linux/util-
    linux/commit/211a9da0b4e9704eea210d7944b723fa78272c79


author: Steve Grubb <sgrubb@redhat.com> 0.8.4-1
changelog:
  - New upstream bugfix release
  - Drop libcap-ng-0.8.3-apply-disable.patch since things should be fixed


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.7.0-8
changelog:
  - Update license to SPDX format
  - spec file tidy/modernization
    - use modern cmake build and install
    - properly own include directories in the devel package
    - de-glob some files to follow packaging guidelines


author: Gary Buhrmaster <gary.buhrmaster@gmail.com> - 0.10.2-1
changelog:
  - Update to version 0.10.2 ( resolves: rhbz#1880885 )
  - Revise specs per packaging guidelines for globs of soname


author: Filip Janus <fjanus@redhat.com> - 5.3.25-57
changelog:
  - Add convert-util subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Disable shiping libdb for rhel except convert-tool


author: Jerry James <loganjerry@gmail.com> - 3.1-53.20240808cvs
changelog:
  - New version (20240808-3.1)
  - Man pages have been renamed to avoid collisions
    - history*.3 -> el_history*.3
    - tok*.3 -> el_tok*.3


author: Pavol Žáčik <pzacik@redhat.com> - 2.1.12-13
changelog:
  - Update license identifiers to SPDX in subpackages
  - Add Apache-2.0 license which appears in sample/ssl-client-mbedtls.c


author: Carlos O'Donell <carlos@redhat.com> - 3.4.4-8
changelog:
  - Analyze libffi-3.4.4-7.fc40 sources for license information
  - Migrate License field to SPDX identifiers for
    https://docs.fedoraproject.org/en-US/legal/allowed-licenses/
    https://docs.fedoraproject.org/en-US/legal/update-existing-packages
    (#2222084)


author: Jakub Jelen <jjelen@redhat.com> - 1.11.0-4
changelog:
  - Run annocheck as part of the build
  - Use upstream CF protection patches
  - Fix PAC/BTI protection for Aarch64
  - Fix CVE-2024-2236 (#2274128)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-3
changelog:
  - Disable enumeration support for IPA and AD providers.
    Deprecation was announced in F39 release notes:
    https://docs.fedoraproject.org/en-US/fedora/latest/release-notes/sysadmin/Security/#_support_for_the_enumeration_feature_has_been_deprecated_for_ad_and_ipa_backends
    This is a backport of upstream patch:
    https://github.com/SSSD/sssd/commit/9240bca7dcc28371ae5dce31c01e85d28409cd04


author: Pavel Březina <pbrezina@redhat.com> - 2.9.4-1
changelog:
  - Rebase to SSSD 2.9.4
  - Files provider suport remove (rhbz#2253183)
  - i686 support removed (rhbz#2069738)


author: Ondrej Mosnáček <omosnacek@gmail.com> - 1.5.0-4
changelog:
  - Do not ship duplicate kcapi-hasher in libkcapi-tools
  - Ship kcapi-hasher manpage in libkcapi-hasher


author: Jiri Pirko <jiri@nvidia.com> - 1.9-1
changelog:
  - 1.9 release
  - ndptool: add support for PREF64 option
  - libndp: add support for PREF64 option
  - libndp: valid route information option length
  - SubmittingPatches: update mailing list


author: Peter Fordham <peter.fordham@gmail.com> - 1.0.8-6
changelog:
  - Port autoconf script to C99 and enable autoreconf for this package.
    https://bugzilla.netfilter.org/show_bug.cgi?id=1654


author: Steve Dickson <steved@redhat.com> 2.6.3-1.rc3
changelog:
  - Updated to the latest RC release: nfs-utils-2-6-4-rc3
  - Fixed a regression in the junction code (bz 2213669)


author: Christian Glombek <cglombek@redhat.com> 2.6.3-2.rc3
changelog:
  - Rely on presets and use standard macros for systemd unit handling (bz 2218006)
  - Cleanup is moved to %posttrans


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 2.6.4-0.rc6.1
changelog:
  - Move files from /usr/sbin to /usr/bin in rpm file listing
    (https://pagure.io/packaging-committee/pull-request/1355)


author: Steve Dickson <steved@redhat.com> 2.8.1-3.rc2
changelog:
  - nfsidmap(v2): Add guards around [nfsidmap] usages of [sysconf]
  - exports: Fix referrals when --enable-junction=no


author: Steve Dickson <steved@redhat.com> 2.8.1-5.rc2
changelog:
  - Patch for broken libnfsimapd static and regex plugins
  - NFS export symlink vulnerability fix
  - nfsd: fix version sanity check (RHEL-72477)


author: Phil Sutter <psutter@redhat.com> - 1.2.6-1
changelog:
  - Drop outdated libnftables provides, it might clash with the new
    nftables-provided libnftables at some point in future
  - Backport one late fix from upstream
  - new version 1.2.6


author: Phil Sutter <psutter@redhat.com> - 1.2.6-6
changelog:
  - Upstream dropped JSON parsing support in version 1.1.2, drop remains
  - Update upstream tarball source URL
  - Drop references to libnftables-devel package which retired in 2014
  - Add upstream-identified fixes


author: Jan Macku <jamacku@redhat.com> 1.60.0-1
changelog:
  - update to the latest upstream release
  - update PGP key from https://keyserver.ubuntu.com/pks/lookup?op=vindex&search=0x7e8403d5d673c366


author: Jan Macku <jamacku@redhat.com> 1.61.0-1
changelog:
  - update to the latest upstream release
  - fixes CVE-2024-28182 - HTTP/2 CONTINUATION frames can be utilized for DoS attacks


author: Lukáš Zaoral <lzaoral@redhat.com> - 0.21.2-5
changelog:
  - migrate to SPDX license format
    - the old and new license tags are identical, this changelog entry just
      indicates that it was checked to be correct


author: Paul Wouters <paul.wouters@aiven.io - 1.4.5-1
changelog:
  - Resolves: rhbz#2154991 libpwquality fails to build with Python 3.12: ModuleNotFoundError: No module named 'distutils'
  - Resolves: rhbz#2006063 RFE: Support running without cracklib-dicts installed
  - Cleanup and remove python2/3 conditional macros


author: Jaroslav Rohel <jrohel@redhat.com> - 1.14.4-1
changelog:
  - Update to 1.14.4
  - Use nanosec precision for timestamp of checksum cache (RhBug:2077864)
  - Fix alloc/free mismatches and memory leaks


author: Jaroslav Rohel <jrohel@redhat.com> - 1.15.1-1
changelog:
  - Update to 1.15.1
  - Adds API support for waiting on network in an event driven manner (new API function lr_handle_network_wait)
  - OpenPGP API extension and fixes (new API functions lr_gpg_*)
  - Update license format to "LGPL-2.1-or-later"


author: Jan Kolarik <jkolarik@redhat.com> - 1.15.2-1
changelog:
  - Update to 1.15.2
  - Fixes and optimizations in header files
  - Fix lr_gpg_list_keys function when keys are empty
  - Update PGP test vectors
  - Fix CMake warnings
  - Bump glib version


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.0-1
changelog:
  - Update to 1.17.0
  - lr_gpg_check_signature: Forward PGP error messages from RPM
  - PGP: fix: Support importing binary public keys in librpm backend
  - PGP: Enable creating a UID directory for GnuGP agent socket in /run/gnupg/user
  - PGP: Set a default creation SELinux labels on GnuPG directories


author: Jan Kolarik <jkolarik@redhat.com> - 1.17.1-1
changelog:
  - Update to 1.17.1
  - gpg_gpgme.c: fix build errors with older gcc
  - Change header files to match a configured ABI regarding a zchunk support
  - Fix building zchunk code if zchunk is enabled
  - Fix compiler warnings


author: Evan Goode <egoode@redhat.com> - 1.18.0-1
changelog:
  - Update to 1.18.0 (note: skipped 1.17.2 downstream)
  - API: Add LRO_USERNAME and LRO_PASSWORD options
  - Add a private dependency on zck to librepo.pc if zchunk support is enabled
  - Hash cache: Improved work with extended file attributes
  - Improve performance of large number of package downloads
  - Fix error handling, Fix examples and build them


author: Evan Goode <egoode@redhat.com> - 1.18.1-1
changelog:
  - gpg: Check is_selinux_enabled() before trying to label
  - spec: Correct setting -DENABLE_SELINUX cmake argument
  - tests: Adapt to CURL without NTLM support
  - Fix a memory leak in select_next_target()
  - Fix memory leaks when using zchunk


author: Evan Goode <egoode@redhat.com> - 1.19.0-1
changelog:
  - Fix input termination for pgpParsePkts
  - Convert all xattr strings to lower case to be compatible to Amazon S3 buckets
  - Introduce entropy for fastestmirror option


author: Packit <hello@packit.dev> - 2.17.7-1
changelog:
  - Release version 2.17.7 (Michal Srb)
  - spec: Add disttag (Michal Srb)
  - Update changelog (Michal Srb)
  - Fix rpm -V issue with missing reporter-bugzilla-python in f38 (Michal Srb)
  - Fix TypeError (Michal Srb)
  - Update pot file (Matěj Grabovský)
  - readme: Add diagram of related projects (Matěj Grabovský)
  - Update translations (mgrabovsky)
  - Use SPDX format for license field (Matěj Grabovský)
  - ignored_words: Add KeyboardInterrupt (Michal Fabik)
  - packit: Add dependencies for SRPM build (Matěj Grabovský)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.8-1
changelog:
  - Release version 2.17.8 (Michal Srb)
  - Update changelog (Michal Srb)
  - reporter-bugzilla: Fix KeyError when HOME env var is not set (Michal Srb)
  - Update changelog (Michal Srb)
  - reporter-bugzilla: Fix password prompt in client/server mode (Michal Srb)


author: Packit <hello@packit.dev> - 2.17.9-1
changelog:
  - Release version 2.17.9 (Michal Srb)
  - reporter-bugzilla: Fix string interpolation (Matěj Grabovský)
  - reporter-bugzilla: Replace flags with just keyword arg (Michal Srb)
  - reporter-bugzilla: Make sure that the creator of a bug is always in CC (Michal Srb)
  - reporter-bugzilla: Don't fail if reported_to file doesn't exist (Michal Srb)
  - reporter-bugzilla: Fix reporting when the bug already exists (Michal Srb)
  - use $XDG_CONFIG_HOME to access user's configuration files (Yann Droneaud)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.10-1
changelog:
  - Release version 2.17.10 (Matěj Grabovský)
  - reporter-upload: Fix a use-after-free error in string handling (Matěj Grabovský)
  - Update translations (mgrabovsky)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.11-1
changelog:
  - Release version 2.17.11 (Michal Srb)
  - spec: Add missing requires for python3-libreport (Michal Srb)
  - Build URL with urllib.parse.urljoin() (Michal Srb)
  - Add XDG_ACTIVATION_TOKEN to the list of ignored words (Michal Srb)
  - Attachments are minor updates in Bugzilla (Michal Srb)
  - Retry Bugzilla search queries with delays (Michal Srb)
  - Fix "NameError: name 'ticket' is not defined" exception (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.14-1
changelog:
  - Release version 2.17.14 (Michal Srb)
  - reporter-bugzilla: Reduce number of duplicate bug reports (Michal Srb)
  - reporter-bugzilla: Fix config loading (Michal Srb)
  - reporter-bugzilla: API key must consist of latin-1 characters (Michal Srb)
  - reporter-bugzilla: Fix typo (Michal Srb)
  - reporter-bugzilla: Fix creating binary attachments (Michal Srb)
  - Update translations (mgrabovsky)


author: Packit <hello@packit.dev> - 2.17.15-1
changelog:
  - Release version 2.17.15 (Michal Srb)
  - reporter-bugzilla: Make the supplementary bugs easily identifiable (Michal Srb)
  - reporter-bugzilla: Fix formatting in the supplementary bugs (Michal Srb)
  - reporter-bugzilla: Fix code comment (Michal Srb)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-6
changelog:
  - restorecon: Include <selinux/label.h>
  - Fix integer comparison issues when compiling for 32-bit
  - deprecate security_disable(3)


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-3
changelog:
  - sepol_compute_sid: Do not destroy uninitialized context
  - cil: Check that sym_index is within bounds


author: Vit Mojzis <vmojzis@redhat.com> - 3.7-4
changelog:
  - cil: Initialize avtab_datum on declaration
  - mls: Do not destroy context on memory error
  - cil/cil_post: Initialize tmp on declaration
  - Initialize "strs" on declaration


author: Jiri Pirko <jiri@resnulli.us> - 1.32-1
changelog:
  teamd: Add option to change evaluation logic of multiple link-watchers
  Revert: teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  teamd: lacp: don't move the port state from disabled when admin state is down
  teamd: lacp: set port to disabled state during removal
  teamd: lacp: make sure that lacp_port_agg_update() works with correct unselectable state
  libteam: clear changed bits in case of TEAM_IFINFO_CHANGE
  misc: fix possible strncpy truncation bug
  teamd: stop iterating callbacks when a loop restart is requested
  teamd: do no remove the ports on shutdown with -N
  binding/python: ifindex 0 is invalid so do not process it
  teamd: Include missing headers for strrchr and memcmp
  libteamdctl: validate the bus name before using it
  options: move option temporary check after the err check
  teamd: lacp: increase "min_ports" upper limit to 1024
  fix build on OpenWRT/musl-libc
  teamd: increase the waitting time for daemon killing
  Revert "teamd: Disregard current state when considering port enablement"


author: Matej Mužila <mmuzila@redhat.com> - 4.5.0-3
changelog:
  - New upstream release 4.5.0 (#2153870)
  - Fix CVE-2022-3570, CVE-2022-2867, CVE-2022-2868, CVE-2022-2869, CVE-2022-2519,
    CVE-2022-2953, CVE-2022-3597, CVE-2022-3598, CVE-2022-3599, CVE-2022-3626,
    CVE-2022-3627, CVE-2022-3970 (#2142735, #2118854, #2118867, #2118875,


author: Kate Hsuan <hpa@redhat.com> - 1.0.27-1
changelog:
  - Update to 1.0.27
  - Update to 1.0.27
  - Add tests, including init_context, set_option, and stress_mt


author: Björn Esser <besser82@fedoraproject.org> - 4.4.36-8
changelog:
  - Add some upstream patches mostly fixing manpages
  - Add patch to use TLS to make crypt and crypt_gensalt functions MT-Safe


author: Björn Esser <besser82@fedoraproject.org> - 4.4.36-10
changelog:
  - Build with -Wl,--no-tls-get-addr-optimize on ppc64(le)
  - Remove cludge from patch for MT-Safeness in crypt and crypt_gensalt


author: Björn Esser <besser82@fedoraproject.org> - 4.4.36-11
changelog:
  - Drop -Wl,--no-tls-get-addr-optimize, as binutils are fixed now
  - Update patch for MT-Safeness in crypt and crypt_gensalt


author: Björn Esser <besser82@fedoraproject.org> - 4.4.36-12
changelog:
  - Update patch for MT-Safeness in crypt and crypt_gensalt
  - Apply small upstream patch for testsuite


author: Björn Esser <besser82@fedoraproject.org> - 4.4.33-5
changelog:
  - Simplify transitional Requires and Obsoletes for legacy packages
  - Drop versioned BR on perl-interpreter
  - Fix README.posix file, as the fcrypt function is still available


author: Björn Esser <besser82@fedoraproject.org> - 4.4.37-2
changelog:
  - Backport upstream patch to fix build with upcoming GCC-15
  - Update patch for MT-Safeness in crypt and crypt_gensalt


author: Frantisek Sumsal <frantisek@sumsal.cz> - 2.5.1-32
changelog:
  - Disable zntune, since the respective driver was dropped in kernel 5.19
  - Bring back autotools to make the new and previous patches actually work


author: Kefu Chai <kefu.chai@scylladb.com> - 18.1.8-2
changelog:
  - Fix a crash in context senstive PGO (CSPGO) build by applying the patch
    of https://github.com/llvm/llvm-project/commit/ffd337b995658266d83e15630d656e57882bcf0d


author: Timm Bäder <tbaeder@redhat.com> - 18.1.8-6
changelog:
  - Fix missing cstdint include that broke the build.
  - See https://bugzilla.redhat.com/show_bug.cgi?id=2338982


author: Jan Staněk <jstanek@redhat.com> - 0.9.29-7
changelog:
  - Fix source file definition and handling
  - Use archive name expected by GitLab, then the archive does not contain
    whole commit reference.
  - Use standard %forgemeta macros, although some detail neede to be fill in
    – GitLab handling is not detected from URL.
  - Fix upstream URL.


author: Kamil Dudka <kdudka@redhat.com> - 3.20.1-1
changelog:
  - new upstream version 3.20.1, which fixes the following security issue:
      CVE-2022-1348 - potential DoS from unprivileged users via the state file


author: Tom Callaway <spot@fedoraproject.org> - 5.4.6-3
changelog:
  - disable "corrupted binary dump" test that has issues on big-endian architectures
  - apply upstream fix for 5.4.6 bug 1


author: Lianbo Jiang <lijiang@redhat.com> - 1.7.5-11
changelog:
  - Fix failure of hugetlb pages exclusion on Linux 6.9 and later
  - Fix wrong exclusion of Slab pages on Linux 6.10-rc1 and later


author: Jonathan Wright <jonathan@almalinux.org> - 4.3-6
changelog:
  - fix FTBFS on gcc15 rhbz#2340833
  - fix permissions on /usr/share/mdadm to be world-readable rhbz#2322402


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.63.20160912git
changelog:
  - Resolves: #2114821 - The output of `route -A inet6` does not display properly when the 'Use' column output is over 6 digits


author: Michal Ruprich <mruprich@redhat.com> - 2.0-0.64.20160912git
changelog:
  - Resolves: #2077846 - net-tools utilities display incorrect statistics for interfaces with 15-character names


author: Kevin Fenzi <kevin@scrye.com> - 1.0.7-1
changelog:
  - Update to 1.0.7. Fixes rhbz#2155658
  - Build the package with setuptools instead of distutils. Fixes: rhbz#2154872


author: Phil Sutter <psutter@redhat.com> - 1:1.0.9-1
changelog:
  - Fix devel sub-package description
  - Utilize pyproject-rpm-macros for the python sub-package
  - new version 1.0.9


author: Michael J Gruber <mjg@fedoraproject.org> - 1.7-1
changelog:
  - update to upstream release 1.7 (rhbz#2265629)
  - use pkgconf/npth.c instead of npth-config
  - new functions npth_poll and npth_ppoll


author: Michael J Gruber <mjg@fedoraproject.org> - 1.8-1
changelog:
  - update to upstream release 1.8 (rhbz#2325474)
  - New function npth_get_version.  New macros NPTH_VERSION and
    NPTH_VERSION_NUMBER.
  - Fix INSERT_EXPOSE_RWLOCK_API for musl C library.
  - Return a run-time error if npth_rwlock_timedrdlock is not supported.


author: Jan Pazdziora <jpazdziora@redhat.com> - 2.23.0-1
changelog:
  - Rebase to 2.23.0 (fedora#2036375)
  - Change upstream to https://github.com/flatcar/nss-altfiles
  - Enable all maps (fedora#2036375)


author: Timothée Ravier <tim@siosm.fr> - 2.23.0-4
changelog:
  - Fix macro expansion in description
  - Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Use SPDX identifiers for license: https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_3


author: Jonathan Wright <jonathan@almalinux.org> - 2.0.19-1
changelog:
  - update to 2.0.19 rhbz#2321909
  - Fixes "numactl exits if MPOL_PREFERRED_MANY isn't supported"
    https://github.com/numactl/numactl/issues/231


author: Tomas Bzatek <tbzatek@redhat.com> - 2.10.2-2
changelog:
  - Install NetworkManager override for nbft interfaces
  - Rename reconnect NetworkManager hook to 99-nvme-nbft-connect.sh


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 6.9.8-2.D20220919gitb041f6d
changelog:
  - Update to the latest git, expecially:
    - Update to Unicode 15.0 (upstream #272)
    - [[:punct:]] behavoir change (upsteam #268)


author: Simon Pichugin <spichugi@redhat.com> - 2.6.7-1
changelog:
  - Rebase to version 2.6.7 (rhbz#2261163)
  - Use systemd-sysusers for ldap user and group (rhbz#2173965)
  - Fix compiler errors (rhbz#2261427)
  - Replace License with SPDX identifier


author: Simon Pichugin <spichugi@redhat.com> - 2.6.8-5
changelog:
  - Clean up spec file so it's aligned with c10s
  - Remove UPGRADE_INSTRUCTIONS for openldap-server upgrade (rhbz#2133526)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.3p1-8
changelog:
  - Split including crypto-policies to a separate config (rhbz#1970566)
  - Disable forking of ssh-agent on startup (rhbz#2148555)
  - Remove sshd.socket unit (rhbz#2025716)
  - Minor optimization of ssh_krb5_kuserok (rhbz#2112501)


author: Norbert Pocs <npocs@redhat.com> - 9.3p1-9
changelog:
  - pkcs11: Add support for 'serial' in PKCS#11 URI
  - Apply the upstream MR related to the previous pkcs11 issue
  - https://github.com/openssh/openssh-portable/pull/406


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 9.3p1-13
changelog:
  - Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224)
  - https://github.com/openssh-gsskex/openssh-gsskex/pull/19


author: Daniel Milnes <daniel@daniel-milnes.uk> - 9.6p1-1
changelog:
  - Update to OpenSSH 9.6
    Original patches from https://src.fedoraproject.org/rpms/openssh/pull-request/63
    Tuned by Dmitry Belyavskiy for GSS and PKCS#11 URI processing


author: Daniel Milnes <daniel@daniel-milnes.uk> - 9.6p1-1.3
changelog:
  - Backport fix for CVE-2024-6387 (rhbz#2294879)
  - Backport fix for ObscureKeystrokeTiming logic error from OpenSSH 9.8


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.6p1-1.7
changelog:
  - Only set PAM_RHOST if the remote host is not "UNKNOWN"
    https://src.fedoraproject.org/rpms/openssh/pull-request/71
    Patch by Daan De Meyer <daan.j.demeyer@gmail.com>
  - Some spec cleanup
    https://src.fedoraproject.org/rpms/openssh/pull-request/74
    by Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.6p1-1.3
changelog:
  - Build OpenSSH without engine support
  - Make tests run at build phase (using parallel run mechanism by Alexander Sosedkin)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-1
changelog:
  - Backport rebase to OpenSSH 9.9p1 from rawhide
  - Fix MLKEM for BE platforms
  - Separate ssh-keysign to a dedicated package


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 9.9p1-4
changelog:
  - Resolve memory management issues after rebase
  - Define OPTIONS env in systemd modules (https://src.fedoraproject.org/rpms/openssh/pull-request/92)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.0.8-1
changelog:
  - Rebase to upstream version 3.0.8
    Resolves: CVE-2022-4203
    Resolves: CVE-2022-4304
    Resolves: CVE-2022-4450
    Resolves: CVE-2023-0215
    Resolves: CVE-2023-0216
    Resolves: CVE-2023-0217
    Resolves: CVE-2023-0286
    Resolves: CVE-2023-0401


author: Sahana Prasad <sahana@redhat.com> - 1:3.0.8-2
changelog:
  - Upload new upstream sources without manually hobbling them.
  - Remove the hobbling script as it is redundant. It is now allowed to ship
    the sources of patented EC curves, however it is still made unavailable to use
    by compiling with the 'no-ec2m' Configure option. The additional forbidden
    curves such as P-160, P-192, wap-tls curves are manually removed by updating
    0011-Remove-EC-curves.patch.
  - Enable Brainpool curves.
  - Apply the changes to ec_curve.c and  ectest.c as a new patch
    0010-Add-changes-to-ectest-and-eccurve.patch instead of replacing them.
  - Modify 0011-Remove-EC-curves.patch to allow Brainpool curves.
  - Modify 0011-Remove-EC-curves.patch to allow code under macro OPENSSL_NO_EC2M.
    Resolves: rhbz#2130618, rhbz#2141672


author: Sahana Prasad <sahana@redhat.com> - 1:3.1.1-1
changelog:
  - Rebase to upstream version 3.1.1
    Resolves: CVE-2023-0464
    Resolves: CVE-2023-0465
    Resolves: CVE-2023-0466
    Resolves: CVE-2023-1255
    Resolves: CVE-2023-2650


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.1-3
changelog:
  - Minimize skipping tests
  - Allow ignoring unknown signature algorithms and groups (upstream #23050)
  - Allow specifying provider algorithms in SignatureAlgorithms (upstream #22779)


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-2
changelog:
  - As upstream disables TLS 1.0/1.1 on any SECLEVEL > 0, there is no point
    keeping the SHA1 permission at SECLEVEL=1 anymore.


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-3
changelog:
  - Moving engine-related files to a separate subpackage to be deprecated in future
    Resolves: rhbz#2276420


author: Sahana Prasad <sahana@redhat.com> - 1:3.2.2-4
changelog:
  - Assign IANA numbers for hybrid PQ KEX
  - Porting the fix in https://github.com/openssl/openssl/pull/22803


author: Sahana Prasad <sahana@redhat.com> - 1:3.2.2-8
changelog:
  - Synchorize patches in CentOS10 and Fedora with the following changes
  - Fix CVE-2024-5535: SSL_select_next_proto buffer overread
  - Use PBMAC1 by default when creating PKCS#12 files in FIPS mode
  - Support key encapsulation/decapsulation in openssl pkeyutl command
  - Fix typo in the patch numeration
  - Enable KTLS, temporary disable KTLS tests
  - Speedup SSL_add_{file,dir}_cert_subjects_to_stack
  - Resolve SAST package scan results
  - An interface to create PKCS #12 files in FIPS compliant way


author: Dmitry Belyavskiy <dbelyavs@redhat.com> - 1:3.2.2-13
changelog:
  - Locally configured providers should not interfere with openssl build-time tests
  - Load system default cipher string from crypto-policies configuration file
    include /etc/crypto-policies/back-ends/opensslcnf.config and remove
    /etc/crypto-policies/back-ends/openssl.config.


author: Hedayat Vatankhah <hedayat.fwd+rpmchlog@gmail.com> - 1.81-1
changelog:
  - Update to latest upstream version with better support for latest OSes,
    closes rhbz#2090942
  - Remove 'which' dependency, closes rhbz#2111531
  - Add support for detecting EFI shell binary (shell.efi), closes rhbz#2101953
  - Add support for Win 11 on ARM 64 systems


author: Leo Sandoval <lsandova@redhat.com> - 1.81-9
changelog:
  - 90fallback: include possible kernel parameters from grub's default file
  - common.sh: do not resolve symbolic link on mapped device filesystems
  - Related: RHEL-44705


author: Colin Walters <walters@verbum.org> - 2023.6-2
changelog:
  - Cherry pick
    https://github.com/ostreedev/ostree/pull/3060/commits/3b2fd6e9ff0a3a91a2b72f524492e4f198069dec


author: Colin Walters <walters@verbum.org> - 2023.7-3
changelog:
  - Add a composefs requirement; this is not actually a requirement
    right now, but will be in the near future, so let's prepare for it.


author: Colin Walters <walters@verbum.org> - 2023.7-4
changelog:
  - Enable composefs only on fedora/rhel10 to fix COPR builds
    which pull from this dist-git
  - Exclude x86 on FedoraELN since composefs is
  - Always disable soup to re-sync with ostree upstream logic


author: Colin Walters <walters@verbum.org> - 2023.8-4
changelog:
  - Backport https://github.com/ostreedev/ostree/pull/3129/commits/a1c1c0b500
    d23ff129adbfe9486a067788b24969 To aid https://github.com/coreos/fedora-
    coreos-config/pull/2783


author: Björn Esser <besser82@fedoraproject.org> - 1.5.3-1
changelog:
  - Rebase to release 1.5.3
    Resolves: #2196709
  - Drop pam-1.5.2-pwhistory-config.patch and pam-1.5.2-configure-c99.patch,
    as those patches are implemented upstream
  - Realign left-over patches
  - Update build requirements for documentation (docbook5)
  - Remove --enable-vendordir from configuration
  - Enable (deprecated) pam_lastlog module


author: Iker Pedrosa <ipedrosa@redhat.com> - 1.7.0-1
changelog:
  - Rebase to release 1.7.0 (#2321512)
  - Rebase to pam-redhat-1.2.0
  - build: update to meson build system
  - doc: disable build for i686


author: Mikel Olasagasti Uranga <mikel@olasagasti.info> - 0.1.1-2
changelog:
  - Misc changes
  - Move meson_test to check section
  - Reorder BuildRequires alphabetically
  - Reorder install files
  - Use %%{buildroot} instead of RPM_BUILD_ROOT
  - Use %%autorelease for Release tag


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230818.g0af928e-1
changelog:
  - Install pasta as hard link to ensure SELinux file context match
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_06_27.289301b..2023_08_18.0af928e


author: Stefano Brivio <sbrivio@redhat.com> - 0^20230907.gee58f37-1
changelog:
  - Replace pasta hard links by separate builds
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_08_23.a7e4bfb..2023_09_07.ee58f37


author: Stefano Brivio <sbrivio@redhat.com> - 0^20231107.g56d9f6d-1
changelog:
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2023_10_04.f851084..2023_11_07.56d9f6d
  - SELinux: allow passt_t to use unconfined_t UNIX domain sockets for
    --fd option (https://bugzilla.redhat.com/show_bug.cgi?id=2247221)


author: Stefano Brivio <sbrivio@redhat.com> - 0^20240318.g615d370-1
changelog:
  - Switch license identifier to SPDX (Dan Čermák)
  - Upstream changes: https://passt.top/passt/log/?qt=range&q=2024_02_20.1e6f92b..2024_03_18.615d370


author: Lukas Javorsky <ljavorsk@redhat.com> - 10.42-1
changelog:
  - Rebase to version 10.42
  - RISC-V is JIT enabled according to the https://github.com/PCRE2Project/pcre2/issues/14


author: Ed Santiago <santiago@redhat.com> - 5:4.9.1-2
changelog:
  - Much-belated cleanup
  - remove all references to cgroups v1. That code never worked, and "cgroups
    v2" in test names was misleading because it implied an alternative.
    Remove it.
  - refactor podman remote and local tests
  - clean up docs
  - Ansible bitrot cleanup ("this is deprecated, use that")


author: Vit Mojzis <vmojzis@redhat.com> - 3.5-5
changelog:
  - python/sepolicy: Fix spec file dependencies
  - python/sepolicy: Fix template for confined user policy modules
  - Improve man pages and add examples


author: Petr Lautrbach <lautrbach@redhat.com> - 3.5-7
changelog:
  - python: improve format strings for proper localization
  - python: Drop hard formating from localized strings
  - sepolicy: port to dnf4 python API (rhbz#2209404)


author: Jan Rybar <jrybar@redhat.com> - 122-4
changelog:
  - Switch 'polkitd' to static UID/GID (fpc#1189) (on behalf of lucab)
  - Resolves: https://bugzilla.redhat.com/show_bug.cgi?id=2104615


author: Christian Glombek <cglombek@redhat.com> - 123-2
changelog:
  - Provide a sysusers.d file to get user() and group() provides
    (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format).


author: Jan Rybar <jrybar@redhat.com> - 124-3
changelog:
  - pkexec: no session for cookie error fixed
  - pkttyagent: fix of generation of coredump if EOF (Ctrl+D) sent to password prompt


author: Jan Rybar <jrybar@redhat.com> - 124-4
changelog:
  - pkla-compat is now recommends: pkla is obsolete and binaries are run every time
  - polkitbackend watches only session changes to reduce cpu usage
  - PolkitPermission: only sessions that really changed state send CheckAuthorization


author: Jan Rybar <jrybar@redhat.com> - 125-1.1
changelog:
  - Setting loglevels and target via LogControl now allowed to root only
  - dropped %attr from  /usr/share/polkit-1


author: Jan Rybar <jrybar@redhat.com> - 0.1-26
changelog:
  - use build macros, on behalf of original author Tom Stellard (tstellar)
  - Pagure doesn't allow one-click rebase, AFAIK


author: Panu Matilainen <pmatilai@redhat.com> - 1.19~rc1-1
changelog:
  - Rebase to 1.19-rc1 (https://github.com/rpm-software-management/popt/releases/tag/popt-1.19-rc1)
  - Remove manual .la cleanup, it's automatic nowadays
  - Add a guard against accidental soname changes


author: Panu Matilainen <pmatilai@redhat.com> - 4.18.92-3
changelog:
  - Fix regression on uncompressing 7zip compressed sources (#2229984)
  - Fix a conflict with pre-existing scl-utils %_root_prefix macro (#2233454)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.0-2
changelog:
  - Ensure central package ops log via rpm-plugin-audit recommends (#1476926)
  - Own our Python module directory (#2248555)
  - Fix sysusers.d generator barfing on legit content (#2246236)


author: Panu Matilainen <pmatilai@redhat.com> - 4.19.91-7
changelog:
  - Resurrect rpmbuild --buildroot option for cpack (#2284124)
  - Bring back %{buildsubdir} requirement for debuginfo generation
  - Bring back %{_buildrootdir} macro definition


author: Michal Domonkos <mdomonko@redhat.com> - 4.20.0-2
changelog:
  - Drop build option for legacy OpenPGP parser (#2239780)
  - Fix Python examples directory ownership (#2279750)
  - Drop rpmdb migration scripts (#2274332)


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 4.20.0-4
changelog:
  - Merge /usr/sbin and /usr/bin (2nd attempt)
    https://fedoraproject.org/wiki/Changes/Unify_bin_and_sbin


author: Panu Matilainen <pmatilai@redhat.com> - 4.20.0-5
changelog:
  - Enable hard dependencies for users and groups as a part of
    https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers


author: Panu Matilai <pmatilai@redhat.com> - 4.20.0-8
changelog:
  - Enable rpm sysusers.d integration via native systemd-sysusers for
    https://fedoraproject.org/wiki/Changes/RPMSuportForSystemdSysusers


author: Cole Robinson <crobinso@redhat.com> - 8.2.0-7
changelog:
  - Enable PIE for qemu-user-static builds
  - Replace PVH build fix patch with version that should work on centos


author: Michal Ruprich <mruprich@redhat.com> - 3.2.5-1
changelog:
  - New version 3.2.5
  - Resolves: #2115430 - remote arbitrary files write inside the directories of connecting peers
  - Fix for CVE-2022-37434


author: Michal Ruprich <mruprich@redhat.com> - 3.2.6-2
changelog:
  - Resolves: #2128682 - rsync fail with "ERROR: rejecting unrequested file-list name..." depend of parameters order


author: Michal Ruprich <mruprich@redhat.com> - 3.4.0-1
changelog:
  - New version 3.4.0
  - Fix for CVE-2024-12084, CVE-2024-12085, CVE-2024-12086
  - Fix for CVE-2024-12087, CVE-2024-12088, CVE-2024-12747


author: Bradley G Smith <bradley.g.smith@gmail.com> - 2:1.1.15-1
changelog:
  - Update to v1.1.15
  - It fixes a few issues with seccomp, leaked mounts, and system
    performance. See upstream change log.


author: Luca BRUNO <lucab@lucabruno.net> - 0.0.24-6
changelog:
  - Add explicit service unit ordering, after multi-user.target
    Backports: https://github.com/coreos/zincati/pull/831


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 1.2.0-1
changelog:
  - Version 1.2.0
  - See https://github.com/systemd/zram-generator/releases/tag/v1.2.0 for
    overview of changes.


author: Dan Horák <dan[at]danny.cz> - 2:2.33.1-3
changelog:
  - "which" is not required any more
  - Revert "zipl/src: Fix problems when target parameters are specified by user"


author: Paolo Bonzini <pbonzini@redhat.com> - 4.9-1
changelog:
  - Rebase to 4.9
  - Update downstream patches
  - Resolves: rhbz#2140486
  - Remove change to gnulib tests, they pass anyway
  - Install valgrind and langpacks to increase test coverage


author: Zdenek Pytela <zpytela@redhat.com> - 40.5-1
changelog:
  - Allow map xserver_tmpfs_t files when xserver_clients_write_xshm is on
  - Allow graphical applications work in Wayland
  - Allow kdump work with PrivateTmp
  - Allow dovecot-auth work with PrivateTmp
  - Allow nfsd get attributes of all filesystems
  - Allow unconfined_domain_type use io_uring cmd on domain
  - ci: Only run Rawhide revdeps tests on the rawhide branch
  - Label /var/run/auditd.state as auditd_var_run_t
  - Allow fido-device-onboard (FDO) read the crack database
  - Allow ip an explicit domain transition to other domains
  - Label /usr/libexec/selinux/selinux-autorelabel with semanage_exec_t
  - Allow  winbind_rpcd_t processes access when samba_export_all_* is on
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection
  - Allow ntp to bind and connect to ntske port.
  - Allow system_mail_t manage exim spool files and dirs
  - Dontaudit keepalived setattr on keepalived_unconfined_script_exec_t
  - Label /run/pcsd.socket with cluster_var_run_t
  - ci: Run cockpit tests in PRs


author: Zdenek Pytela <zpytela@redhat.com> - 40.6-1
changelog:
  - Add afterburn to modules-targeted-contrib.conf
  - Update cifs interfaces to include fs_search_auto_mountpoints()
  - Allow sudodomain read var auth files
  - Allow spamd_update_t read hardware state information
  - Allow virtnetworkd domain transition on tc command execution
  - Allow sendmail MTA connect to sendmail LDA
  - Allow auditd read all domains process state
  - Allow rsync read network sysctls
  - Add dhcpcd bpf capability to run bpf programs
  - Dontaudit systemd-hwdb dac_override capability
  - Allow systemd-sleep create efivarfs files


author: Zdenek Pytela <zpytela@redhat.com> - 40.7-1
changelog:
  - Make named_zone_t and named_var_run_t a part of the mountpoint attribute
  - Allow sysadm execute traceroute in sysadm_t domain using sudo
  - Allow sysadm execute tcpdump in sysadm_t domain using sudo
  - Allow opafm search nfs directories
  - Add support for syslogd unconfined scripts
  - Allow gpsd use /dev/gnss devices
  - Allow gpg read rpm cache
  - Allow virtqemud additional permissions
  - Allow virtqemud manage its private lock files
  - Allow virtqemud use the io_uring api
  - Allow ddclient send e-mail notifications
  - Allow postfix_master_t map postfix data files
  - Allow init create and use vsock sockets
  - Allow thumb_t append to init unix domain stream sockets
  - Label /dev/vas with vas_device_t
  - Change domain_kernel_load_modules boolean to true
  - Create interface selinux_watch_config and add it to SELinux users


author: Zdenek Pytela <zpytela@redhat.com> - 40.8-1
changelog:
  - Allow hypervkvp_t write access to NetworkManager_etc_rw_t
  - Add interface for write-only access to NetworkManager rw conf
  - Allow systemd-sleep send a message to syslog over a unix dgram socket
  - Allow init create and use netlink netfilter socket
  - Allow qatlib load kernel modules
  - Allow qatlib run lspci
  - Allow qatlib manage its private runtime socket files
  - Allow qatlib read/write vfio devices
  - Label /etc/redis.conf with redis_conf_t
  - Remove the lockdown-class rules from the policy
  - Allow init read all non-security socket files
  - Replace redundant dnsmasq pattern macros
  - Remove unneeded symlink perms in dnsmasq.if
  - Add additions to dnsmasq interface
  - Allow nvme_stas_t create and use netlink kobject uevent socket
  - Allow collectd connect to statsd port
  - Allow keepalived_t to use sys_ptrace of cap_userns
  - Allow dovecot_auth_t connect to postgresql using UNIX socket


author: Zdenek Pytela <zpytela@redhat.com> - 40.9-1
changelog:
  - Allow systemd-sleep set attributes of efivarfs files
  - Allow samba-dcerpcd read public files
  - Allow spamd_update_t the sys_ptrace capability in user namespace
  - Allow bluetooth devices work with alsa
  - Allow alsa get attributes filesystems with extended attributes


author: Zdenek Pytela <zpytela@redhat.com> - 40.10-1
changelog:
  - Allow chronyd-restricted read chronyd key files
  - Allow conntrackd_t to use bpf capability2
  - Allow systemd-networkd manage its runtime socket files
  - Allow init_t nnp domain transition to colord_t
  - Allow polkit status systemd services
  - nova: Fix duplicate declarations
  - Allow httpd work with PrivateTmp
  - Add interfaces for watching and reading ifconfig_var_run_t
  - Allow collectd read raw fixed disk device
  - Allow collectd read udev pid files
  - Set correct label on /etc/pki/pki-tomcat/kra
  - Allow systemd domains watch system dbus pid socket files
  - Allow certmonger read network sysctls
  - Allow mdadm list stratisd data directories
  - Allow syslog to run unconfined scripts conditionally
  - Allow syslogd_t nnp_transition to syslogd_unconfined_script_t
  - Allow qatlib set attributes of vfio device files


author: Zdenek Pytela <zpytela@redhat.com> - 40.11-1
changelog:
  - Replace init domtrans rule for confined users to allow exec init
  - Update dbus_role_template() to allow user service status
  - Allow polkit status all systemd services
  - Allow setroubleshootd create and use inherited io_uring
  - Allow load_policy read and write generic ptys
  - Allow gpg manage rpm cache
  - Allow login_userdomain name_bind to howl and xmsg udp ports
  - Allow rules for confined users logged in plasma
  - Label /dev/iommu with iommu_device_t
  - Remove duplicate file context entries in /run
  - Dontaudit getty and plymouth the checkpoint_restore capability
  - Allow su domains write login records
  - Revert "Allow su domains write login records"
  - Allow login_userdomain delete session dbusd tmp socket files
  - Allow unix dgram sendto between exim processes
  - Allow su domains write login records
  - Allow smbd_t to watch user_home_dir_t if samba_enable_home_dirs is on


author: Zdenek Pytela <zpytela@redhat.com> - 40.12-1
changelog:
  - Rename all /var/lock file context entries to /run/lock
  - Rename all /var/run file context entries to /run
  - Invert the "/var/run = /run" equivalency


author: Zdenek Pytela <zpytela@redhat.com> - 40.13-1
changelog:
  - Only allow confined user domains to login locally without unconfined_login
  - Add userdom_spec_domtrans_confined_admin_users interface
  - Only allow admindomain to execute shell via ssh with ssh_sysadm_login
  - Add userdom_spec_domtrans_admin_users interface
  - Move ssh dyntrans to unconfined inside unconfined_login tunable policy
  - Update ssh_role_template() for user ssh-agent type
  - Allow init to inherit system DBus file descriptors
  - Allow init to inherit fds from syslogd
  - Allow any domain to inherit fds from rpm-ostree
  - Update afterburn policy
  - Allow init_t nnp domain transition to abrtd_t


author: Zdenek Pytela <zpytela@redhat.com> - 40.14-1
changelog:
  - Allow userdomain get attributes of files on an nsfs filesystem
  - Allow opafm create NFS files and directories
  - Allow virtqemud create and unlink files in /etc/libvirt/
  - Allow virtqemud domain transition on swtpm execution
  - Add the swtpm.if interface file for interactions with other domains
  - Allow samba to have dac_override capability
  - systemd: allow sys_admin capability for systemd_notify_t
  - systemd: allow systemd_notify_t to send data to kernel_t datagram sockets
  - Allow thumb_t to watch and watch_reads mount_var_run_t
  - Allow krb5kdc_t map krb5kdc_principal_t files
  - Allow unprivileged confined user dbus chat with setroubleshoot
  - Allow login_userdomain map files in /var
  - Allow wireguard work with firewall-cmd
  - Differentiate between staff and sysadm when executing crontab with sudo
  - Add crontab_admin_domtrans interface
  - Allow abrt_t nnp domain transition to abrt_handle_event_t
  - Allow xdm_t to watch and watch_reads mount_var_run_t
  - Dontaudit subscription manager setfscreate and read file contexts
  - Don't audit crontab_domain write attempts to user home
  - Transition from sudodomains to crontab_t when executing crontab_exec_t
  - Add crontab_domtrans interface
  - Fix label of pseudoterminals created from sudodomain
  - Allow utempter_t use ptmx
  - Dontaudit rpmdb attempts to connect to sssd over a unix stream socket
  - Allow admin user read/write on fixed_disk_device_t


author: Zdenek Pytela <zpytela@redhat.com> - 40.15-1
changelog:
  - Update mmap_rw_file_perms to include the lock permission
  - Allow plymouthd log during shutdown
  - Add logging_watch_all_log_dirs() and logging_watch_all_log_files()
  - Allow journalctl_t read filesystem sysctls
  - Allow cgred_t to get attributes of cgroup filesystems
  - Allow wdmd read hardware state information
  - Allow wdmd list the contents of the sysfs directories
  - Allow linuxptp configure phc2sys and chronyd over a unix domain socket
  - Allow sulogin relabel tty1
  - Dontaudit sulogin the checkpoint_restore capability
  - Modify sudo_role_template() to allow getpgid
  - Remove incorrect "local" usage in varrun-convert.sh


author: Zdenek Pytela <zpytela@redhat.com> - 40.16-1
changelog:
  - Allow keyutils-dns-resolver connect to the system log service
  - Allow qemu-ga read vm sysctls
  - postfix: allow qmgr to delete mails in bounce/ directory
  - policy: support pidfs
  - Confine selinux-autorelabel-generator.sh
  - Allow logwatch_mail_t read/write to init over a unix stream socket
  - Allow logwatch read logind sessions files
  - files_dontaudit_getattr_tmpfs_files allowed the access and didn't dontaudit it
  - files_dontaudit_mounton_modules_object allowed the access and didn't dontaudit it
  - Allow NetworkManager the sys_ptrace capability in user namespace
  - dontaudit execmem for modemmanager
  - Allow dhcpcd use unix_stream_socket
  - Allow dhcpc read /run/netns files


author: Zdenek Pytela <zpytela@redhat.com> - 40.17-1
changelog:
  - Define transitions for /run/libvirt/common and /run/libvirt/qemu
  - Allow systemd-sleep read raw disk data
  - Allow numad to trace processes in user namespace
  - Allow abrt-dump-journal-core connect to systemd-userdbd
  - Allow plymouthd read efivarfs files
  - Update the auth_dontaudit_read_passwd_file() interface
  - Label /dev/mmcblk0rpmb character device with removable_device_t
  - fix hibernate on btrfs swapfile (F40)
  - Allow nut to statfs()
  - Allow system dbusd service status systemd services
  - Allow systemd-timedated get the timemaster service status


author: Zdenek Pytela <zpytela@redhat.com> - 40.18-1
changelog:
  - Allow virtqemud read vfio devices
  - Allow virtqemud get attributes of a tmpfs filesystem
  - Allow svirt_t read vm sysctls
  - Allow virtqemud create and unlink files in /etc/libvirt/
  - Allow virtqemud get attributes of cifs files
  - Allow virtqemud get attributes of filesystems with extended attributes
  - Allow virtqemud get attributes of NFS filesystems
  - Allow virt_domain read and write usb devices conditionally
  - Allow virtstoraged use the io_uring API
  - Allow virtstoraged execute lvm programs in the lvm domain
  - Allow virtnodevd_t map /var/lib files
  - Allow svirt_tcg_t map svirt_image_t files
  - Allow abrt-dump-journal-core connect to systemd-homed
  - Allow abrt-dump-journal-core connect to systemd-machined
  - Allow sssd create and use io_uring
  - Allow selinux-relabel-generator create units dir
  - Allow dbus-broker read/write inherited user ttys


author: Zdenek Pytela <zpytela@redhat.com> - 40.19-1
changelog:
  - Allow postfix smtpd map aliases file
  - Ensure dbus communication is allowed bidirectionally
  - Label systemd configuration files with systemd_conf_t
  - Label /run/systemd/machine with systemd_machined_var_run_t
  - Allow systemd-hostnamed read the vsock device
  - Allow sysadm execute dmidecode using sudo
  - Allow sudodomain list files in /var
  - Allow setroubleshootd get attributes of all sysctls
  - Allow various services read and write z90crypt device
  - Allow nfsidmap connect to systemd-homed
  - Allow sandbox_x_client_t dbus chat with accountsd
  - Allow system_cronjob_t dbus chat with avahi_t
  - Allow staff_t the io_uring sqpoll permission
  - Allow staff_t use the io_uring API
  - Add support for secretmem anon inode


author: Zdenek Pytela <zpytela@redhat.com> - 40.20-1
changelog:
  - Allow journald read systemd config files and directories
  - Allow systemd_domain read systemd_conf_t dirs
  - Fix bad Python regexp escapes
  - Allow fido services connect to postgres database


author: Zdenek Pytela <zpytela@redhat.com> - 40.21-1
changelog:
  - Add policy for second batch of generators
  - Update policy for systemd generators
  - ci: Adjust Cockpit test plans


author: Zdenek Pytela <zpytela@redhat.com> - 40.22-1
changelog:
  - Allow systemd-machined manage runtime sockets
  - Allow systemd-gpt-generator setfscreate
  - Allow bootupd search efivarfs dirs
  - Sync policy for confined systemd generators with rawhide
  - Update policy for fstab and gpt generators
  - Allow systemd (PID 1) manage systemd conf files
  - Allow pulseaudio map its runtime files
  - Update policy for getty-generator
  - Allow systemd-machined manage runtime sockets
  - Allow fstab-generator create unit file symlinks
  - Dontaudit systemd-coredump sys_admin capability
  - Update policy for fstab-generator
  - Allow virtqemud read vm sysctls
  - Add policy for second batch of generators
  - Update policy for systemd generators
  - ci: Adjust Cockpit test plans


author: Zdenek Pytela <zpytela@redhat.com> - 40.23-1
changelog:
  - Synchronize policy for systemd-generators with rawhide
  - Allow certmonger read and write tpm devices
  - Allow virt_driver_domain dbus chat with policykit
  - Allow login_userdomain execute systemd-tmpfiles in the caller domain
  - Revert "Allow systemd-machined manage runtime sockets"
  - Label /usr/bin/ntfsck with fsadm_exec_t
  - Escape "interface" as a file name in a virt filetrans pattern
  - Allow gnome-software work for login_userdomain


author: Zdenek Pytela <zpytela@redhat.com> - 40.24-1
changelog:
  - Allow the staff user use wireshark
  - Allow locate stream connect to systemd-userdbd
  - Allow postfix-smtpd read mysql config files
  - Allow virtnetworkd exec shell when virt_hooks_unconfined is on
  - Allow systemd-networkd write files in /var/lib/systemd/network
  - Allow systemd-networkd list /var/lib/systemd/network
  - Allow abrt-dump-journal read all non_security socket files
  - Add support for libvirt hooks
  - Allow to create and delete socket files created by rhsm.service


author: Zdenek Pytela <zpytela@redhat.com> - 40.25-1
changelog:
  - Allow virtqemud connect to sanlock over a unix stream socket
  - Allow virtqemud relabel virt_var_run_t directories
  - Allow svirt_tcg_t read vm sysctls
  - Allow virtnodedevd connect to systemd-userdbd over a unix socket
  - Allow svirt read virtqemud fifo files
  - Allow svirt attach_queue to a virtqemud tun_socket
  - Allow virtqemud run ssh client with a transition
  - Sync systemd-generator policy with rawhide
  - Allow staff use watch /run/systemd
  - Update keyutils policy
  - Allow updatedb connect to userdbd over a unix stream socket
  - Allow systemd-coredump read nsfs files


author: Zdenek Pytela <zpytela@redhat.com> - 40.26-1
changelog:
  - Label /run/modprobe.d with modules_conf_t
  - Allow virtstoraged manage files with virt_content_t type
  - Allow virtqemud unmount a filesystem with extended attributes
  - Allow svirt_t connect to unconfined_t over a unix domain socket
  - Allow ssh_t to change role to system_r
  - Allow systemd_getty_generator_t to read and write to tty_device_t


author: Zdenek Pytela <zpytela@redhat.com> - 40.27-1
changelog:
  - Allow NetworkManager_dispatcher_t send SIGKILL to plugins
  - Allow setroubleshootd execute sendmail with a domain transition
  - Allow key.dns_resolve set attributes on the kernel key ring
  - Update fstab and cryptsetup generators policy
  - Allow cryptsetup-generator read and write fstab-generator unit file
  - Allow postfix_domain map postfix_etc_t files
  - Update qatlib policy for v24.02 with new features
  - Label /var/lib/systemd/sleep with systemd_sleep_var_lib_t
  - Allow tlp status power services
  - Allow login_userdomain read aliases file
  - Allow login_userdomain read ipsec config files
  - Allow login_userdomain read all pid files
  - Allow xdm_t read and write the dma device
  - Allow rsyslog read systemd-logind session files


author: Zdenek Pytela <zpytela@redhat.com> - 40.28-1
changelog:
  - Allow chronyc sendto to chronyd-restricted
  - Allow cups sys_ptrace capability in the user namespace
  - Allow abrt-dump-journal-core connect to winbindd
  - Allow sysadm_t to create PF_KEY sockets
  - Allow init and systemd-logind to inherit fds from sshd
  - Label /usr/bin/noping and /usr/bin/oping with ping_exec_t
  - Allow virtstoraged get attributes of configfs dirs
  - Update policy for rpc-virtstorage
  - Allow thumb_t map dri devices
  - Allow samba use the io_uring API
  - Allow nut-upsmon read systemd-logind session files
  - Support SGX devices


author: Zdenek Pytela <zpytela@redhat.com> - 38.25-1
changelog:
  - ci: Move srpm/rpm build to packit
  - .copr: Avoid subshell and changing directory
  - Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
  - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
  - Make insights_client_t an unconfined domain
  - Allow insights-client manage user temporary files
  - Allow insights-client create all rpm logs with a correct label
  - Allow insights-client manage generic logs
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t
  - Allow insights-client read and write cluster tmpfs files
  - Allow ipsec read nsfs files
  - Make tuned work with mls policy
  - Remove nsplugin_role from mozilla.if
  - allow mon_procd_t self:cap_userns sys_ptrace
  - Allow pdns name_bind and name_connect all ports
  - Set the MLS range of fsdaemon_t to s0 - mls_systemhigh
  - ci: Move to actions/checkout@v3 version
  - .copr: Replace chown call with standard workflow safe.directory setting
  - .copr: Enable `set -u` for robustness
  - .copr: Simplify root directory variable


author: Zdenek Pytela <zpytela@redhat.com> - 38.26-1
changelog:
  - Change file transition for systemd-network-generator
  - Additional support for gnome-initial-setup
  - Update gnome-initial-setup policy for geoclue
  - Allow openconnect vpn open vhost net device
  - Allow cifs.upcall to connect to SSSD also through the /var/run socket
  - Grant cifs.upcall more required capabilities
  - Allow xenstored map xenfs files
  - Update policy for fdo
  - Allow keepalived watch var_run dirs
  - Allow svirt to rw /dev/udmabuf
  - Allow qatlib  to modify hardware state information.
  - Allow key.dns_resolve connect to avahi over a unix stream socket
  - Allow key.dns_resolve create and use unix datagram socket
  - Use quay.io as the container image source for CI


author: Zdenek Pytela <zpytela@redhat.com> - 38.27-1
changelog:
  - Allow fedora-third-party get generic filesystem attributes
  - Allow sssd use usb devices conditionally
  - Update policy for qatlib
  - Allow ssh_agent_type manage generic cache home files


author: Zdenek Pytela <zpytela@redhat.com> - 38.28-1
changelog:
  - Allow sssd domain transition on passkey_child execution conditionally
  - Allow login_userdomain watch lnk_files in /usr
  - Allow login_userdomain watch video4linux devices
  - Change systemd-network-generator transition to include class file
  - Revert "Change file transition for systemd-network-generator"
  - Allow nm-dispatcher winbind plugin read/write samba var files
  - Allow systemd-networkd write to cgroup files
  - Allow kdump create and use its memfd: objects


author: Zdenek Pytela <zpytela@redhat.com> - 38.29-1
changelog:
  - Allow sssd send SIGKILL to passkey_child running in ipa_otpd_t
  - Allow systemd-localed create Xserver config dirs
  - Allow sssd read symlinks in /etc/sssd
  - Label /dev/gnss[0-9] with gnss_device_t
  - Allow systemd-sleep read/write efivarfs variables
  - ci: Fix version number of packit generated srpms
  - Dontaudit rhsmcertd write memory device
  - Allow ssh_agent_type create a sockfile in /run/user/USERID
  - Set default file context of /var/lib/authselect/backups to <<none>>
  - Allow prosody read network sysctls
  - Allow cupsd_t to use bpf capability


author: Zdenek Pytela <zpytela@redhat.com> - 40.1-1
changelog:
  - Allow named and ndc use the io_uring api
  - Deprecate common_anon_inode_perms usage
  - Improve default file context(None) of /var/lib/authselect/backups
  - Allow udev_t to search all directories with a filesystem type
  - Implement proper anon_inode support
  - Allow targetd write to the syslog pid sock_file
  - Add ipa_pki_retrieve_key_exec() interface
  - Allow kdumpctl_t to list all directories with a filesystem type
  - Allow udev additional permissions
  - Allow udev load kernel module
  - Allow sysadm_t to mmap modules_object_t files
  - Add the unconfined_read_files() and unconfined_list_dirs() interfaces
  - Set default file context of HOME_DIR/tmp/.* to <<none>>
  - Allow kernel_generic_helper_t to execute mount(1)


author: Zdenek Pytela <zpytela@redhat.com> - 40.2-1
changelog:
  - Add the virt_supplementary module to modules-targeted-contrib.conf
  - Make new virt drivers permissive
  - Split virt policy, introduce virt_supplementary module
  - Allow apcupsd cgi scripts read /sys
  - Merge pull request #1893 from WOnder93/more-early-boot-overlay-fixes
  - Allow kernel_t to manage and relabel all files
  - Add missing optional_policy() to files_relabel_all_files()


author: Zdenek Pytela <zpytela@redhat.com> - 40.3-1
changelog:
  - Add policy for nvme-stas
  - Confine systemd fstab,sysv,rc-local
  - Label /etc/aliases.lmdb with etc_aliases_t
  - Create policy for afterburn
  - Add nvme_stas to modules-targeted-contrib.conf
  - Add plans/tests.fmf


author: Zdenek Pytela <zpytela@redhat.com> - 40.4-1
changelog:
  - Add map_read map_write to kernel_prog_run_bpf
  - Allow systemd-fstab-generator read all symlinks
  - Allow systemd-fstab-generator the dac_override capability
  - Allow rpcbind read network sysctls
  - Support using systemd containers
  - Allow sysadm_t to connect to iscsid using a unix domain stream socket
  - Add policy for coreos installer
  - Add coreos_installer to modules-targeted-contrib.conf


author: Zdenek Pytela <zpytela@redhat.com> - 40.21-1
changelog:
  - Add policy for a generic generator
  - Add policy for tpm2 generator
  - Add policy for ssh-generator
  - Add policy for second batch of generators
  - Update policy for systemd generators
  - ci: Adjust Cockpit test plans


author: Zdenek Pytela <zpytela@redhat.com> - 41.1-1
changelog:
  - Allow fstab-generator create unit file symlinks
  - Update policy for cryptsetup-generator
  - Update policy for fstab-generator
  - Allow virtqemud read vm sysctls
  - Allow collectd to trace processes in user namespace
  - Allow bootupd search efivarfs dirs
  - Add policy for systemd-mountfsd
  - Add policy for systemd-nsresourced
  - Update policy generators
  - Add policy for anaconda-generator
  - Update policy for fstab and gpt generators
  - Add policy for kdump-dep-generator


author: Petr Lautrbach <lautrbach@redhat.com> 41.8-4
changelog:
  - Move %postInstall to %posttrans
  - Use `Requires(meta): (rpm-plugin-selinux if rpm-libs)`
  - Drop obsolete modules from config
  - Install dnf protected files only when policy is built


author: Zdenek Pytela <zpytela@redhat.com> - 41.9-1
changelog:
  - Allow virtqemud connect to sanlock over a unix stream socket
  - Allow virtqemud relabel virt_var_run_t directories
  - Allow svirt_tcg_t read vm sysctls
  - Allow virtnodedevd connect to systemd-userdbd over a unix socket
  - Allow svirt read virtqemud fifo files
  - Allow svirt attach_queue to a virtqemud tun_socket
  - Allow virtqemud run ssh client with a transition
  - Allow virt_dbus_t connect to virtqemud_t over a unix stream socket
  - Update keyutils policy
  - Allow sshd_keygen_t connect to userdbd over a unix stream socket
  - Allow postfix-smtpd read mysql config files
  - Allow locate stream connect to systemd-userdbd
  - Allow the staff user use wireshark
  - Allow updatedb connect to userdbd over a unix stream socket
  - Allow gpg_t set attributes of public-keys.d
  - Allow gpg_t get attributes of login_userdomain stream
  - Allow systemd_getty_generator_t read /proc/1/environ
  - Allow systemd_getty_generator_t to read and write to tty_device_t


author: Zdenek Pytela <zpytela@redhat.com> - 41.10-1
changelog:
  - Update afterburn file transition policy
  - Allow systemd_generator read attributes of all filesystems
  - Allow fstab-generator read and write cryptsetup-generator unit file
  - Allow cryptsetup-generator read and write fstab-generator unit file
  - Allow systemd_generator map files in /etc
  - Allow systemd_generator read init's process state
  - Allow coreos-installer-generator read sssd public files
  - Allow coreos-installer-generator work with partitions
  - Label /etc/mdadm.conf.d with mdadm_conf_t
  - Confine coreos generators
  - Label /run/metadata with afterburn_runtime_t
  - Allow afterburn list ssh home directory
  - Label samba certificates with samba_cert_t
  - Label /run/coreos-installer-reboot with coreos_installer_var_run_t
  - Allow virtqemud read virt-dbus process state
  - Allow staff user dbus chat with virt-dbus
  - Allow staff use watch /run/systemd
  - Allow systemd_generator to write kmsg


author: Zdenek Pytela <zpytela@redhat.com> - 41.11-1
changelog:
  - Make cgroup_memory_pressure_t a part of the file_type attribute
  - Allow ssh_t to change role to system_r
  - Update policy for coreos generators
  - Allow init_t nnp domain transition to firewalld_t
  - Label /run/modprobe.d with modules_conf_t
  - Allow virtnodedevd run udev with a domain transition
  - Allow virtnodedev_t create and use virtnodedev_lock_t
  - Allow virtstoraged manage files with virt_content_t type
  - Allow virtqemud unmount a filesystem with extended attributes
  - Allow svirt_t connect to unconfined_t over a unix domain socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.12-1
changelog:
  - Update bootupd policy
  - Allow rhsmcertd read/write access to /dev/papr-sysparm
  - Label /dev/papr-sysparm and /dev/papr-vpd
  - Allow abrt-dump-journal-core connect to winbindd
  - Allow systemd-hostnamed shut down nscd
  - Allow systemd-pstore send a message to syslogd over a unix domain
  - Allow postfix_domain map postfix_etc_t files
  - Allow microcode create /sys/devices/system/cpu/microcode/reload
  - Allow rhsmcertd read, write, and map ica tmpfs files
  - Support SGX devices
  - Allow initrc_t transition to passwd_t
  - Update fstab and cryptsetup generators policy
  - Allow xdm_t read and write the dma device
  - Update stalld policy for bpf usage
  - Allow systemd_gpt_generator to getattr on DOS directories


author: Zdenek Pytela <zpytela@redhat.com> - 41.13-1
changelog:
  - Allow NetworkManager_dispatcher_t send SIGKILL to plugins
  - Allow setroubleshootd execute sendmail with a domain transition
  - Allow key.dns_resolve set attributes on the kernel key ring
  - Update qatlib policy for v24.02 with new features
  - Label /var/lib/systemd/sleep with systemd_sleep_var_lib_t
  - Allow tlp status power services
  - Allow virtqemud domain transition on passt execution
  - Allow virt_driver_domain connect to systemd-userdbd over a unix socket
  - Allow boothd connect to systemd-userdbd over a unix socket
  - Update policy for awstats scripts
  - Allow bitlbee execute generic programs in system bin directories
  - Allow login_userdomain read aliases file
  - Allow login_userdomain read ipsec config files
  - Allow login_userdomain read all pid files
  - Allow rsyslog read systemd-logind session files
  - Allow libvirt-dbus stream connect to virtlxcd


author: Zdenek Pytela <zpytela@redhat.com> - 41.14-1
changelog:
  - Update libvirt policy
  - Add port 80/udp and 443/udp to http_port_t definition
  - Additional updates stalld policy for bpf usage
  - Label systemd-pcrextend and systemd-pcrlock properly
  - Allow coreos_installer_t work with partitions
  - Revert "Allow coreos-installer-generator work with partitions"
  - Add policy for systemd-pcrextend
  - Update policy for systemd-getty-generator
  - Allow ip command write to ipsec's logs
  - Allow virt_driver_domain read virtd-lxc files in /proc
  - Revert "Allow svirt read virtqemud fifo files"
  - Update virtqemud policy for libguestfs usage
  - Allow virtproxyd create and use its private tmp files
  - Allow virtproxyd read network state
  - Allow virt_driver_domain create and use log files in /var/log
  - Allow samba-dcerpcd work with ctdb cluster


author: Zdenek Pytela <zpytela@redhat.com> - 41.15-1
changelog:
  - Allow setsebool_t relabel selinux data files
  - Allow virtqemud relabelfrom virtqemud_var_run_t dirs
  - Use better escape method for "interface"
  - Allow init and systemd-logind to inherit fds from sshd
  - Allow systemd-ssh-generator read sysctl files
  - Sync modules.conf with Fedora targeted modules
  - Allow virtqemud relabel user tmp files and socket files
  - Add missing sys_chroot capability to groupadd policy
  - Label /run/libvirt/qemu/channel with virtqemud_var_run_t
  - Allow virtqemud relabelfrom also for file and sock_file
  - Add virt_create_log() and virt_write_log() interfaces
  - Call binaries without full path


author: Zdenek Pytela <zpytela@redhat.com> - 41.16-1
changelog:
  - Label /etc/mdevctl.d with mdevctl_conf_t
  - Sync users with Fedora targeted users
  - Update policy for rpc-virtstorage
  - Allow virtstoraged get attributes of configfs dirs
  - Fix SELinux policy for sandbox X server to fix 'sandbox -X' command
  - Update bootupd policy when ESP is not mounted
  - Allow thumb_t map dri devices
  - Allow samba use the io_uring API
  - Allow the sysadm user use the secretmem API
  - Allow nut-upsmon read systemd-logind session files
  - Allow sysadm_t to create PF_KEY sockets
  - Update bootupd policy for the removing-state-file test
  - Allow coreos-installer-generator manage mdadm_conf_t files


author: Petr Lautrbach <lautrbach@redhat.com> - 41.17-1
changelog:
  - Clean up and sync securetty_types
  - Bring config files from dist-git into the source repo
  - Confine gnome-remote-desktop
  - Allow virtstoraged execute mount programs in the mount domain
  - Make mdevctl_conf_t member of the file_type attribute


author: Petr Lautrbach <lautrbach@redhat.com> - 41.18-1
changelog:
  - Drop ru man pages
  - mls/modules.conf - fix typo
  - Allow unprivileged user watch /run/systemd
  - Allow boothd connect to kernel over a unix socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.19-1
changelog:
  - Add policy for systemd-homed
  - Remove fc entry for /usr/bin/pump
  - Label /usr/bin/noping and /usr/bin/oping with ping_exec_t
  - Allow accountsd read gnome-initial-setup tmp files
  - Allow xdm write to gnome-initial-setup fifo files
  - Allow rngd read and write generic usb devices
  - Allow qatlib search the content of the kernel debugging filesystem
  - Allow qatlib connect to systemd-machined over a unix socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.2-1
changelog:
  - Allow postfix_domain connect to postgresql over a unix socket
  - Dontaudit systemd-coredump sys_admin capability
  - Allow all domains read and write z90crypt device
  - Allow tpm2 generator setfscreate
  - Allow systemd (PID 1) manage systemd conf files
  - Allow pulseaudio map its runtime files
  - Update policy for getty-generator
  - Allow systemd-hwdb send messages to kernel unix datagram sockets
  - Allow systemd-machined manage runtime sockets


author: Zdenek Pytela <zpytela@redhat.com> - 41.20-1
changelog:
  - Remove the openct module sources
  - Remove the timidity module sources
  - Enable the slrn module
  - Remove i18n_input module sources
  - Enable the distcc module
  - Remove the ddcprobe module sources
  - Remove the timedatex module sources
  - Remove the djbdns module sources
  - Confine iio-sensor-proxy
  - Allow staff user nlmsg_write
  - Update policy for xdm with confined users
  - Allow virtnodedev watch mdevctl config dirs
  - Allow ssh watch home config dirs
  - Allow ssh map home configs files
  - Allow ssh read network sysctls
  - Allow chronyc sendto to chronyd-restricted
  - Allow cups sys_ptrace capability in the user namespace


author: Zdenek Pytela <zpytela@redhat.com> - 41.21-1
changelog:
  - Remove the fail2ban module sources
  - Remove the linuxptp module sources
  - Remove legacy rules for slrnpull
  - Remove the aiccu module sources
  - Remove the bcfg2 module sources
  - Remove the amtu module sources
  - Remove the rhev module sources
  - Remove all file context entries for /bin and /lib
  - Allow ptp4l the sys_admin capability
  - Confine power-profiles-daemon
  - Label /var/cache/systemd/home with systemd_homed_cache_t
  - Allow login_userdomain connect to systemd-homed over a unix socket
  - Allow boothd connect to systemd-homed over a unix socket
  - Allow systemd-homed get attributes of a tmpfs filesystem
  - Allow abrt-dump-journal-core connect to systemd-homed over a unix socket
  - Allow aide connect to systemd-homed over a unix socket
  - Label /dev/hfi1_[0-9]+ devices
  - Suppress semodule's stderr


author: Zdenek Pytela <zpytela@redhat.com> - 41.22-1
changelog:
  - Allow systemd-homework write to init pid socket
  - Allow init create /var/cache/systemd/home
  - Confine the pcm service
  - Allow login_userdomain read thumb tmp files
  - Update power-profiles-daemon policy
  - Fix the /etc/mdevctl\.d(/.*)? regexp
  - Grant rhsmcertd chown capability & userdb access
  - Allow iio-sensor-proxy the bpf capability
  - Allow systemd-machined the kill user-namespace capability


author: Zdenek Pytela <zpytela@redhat.com> - 41.23-1
changelog:
  - Allow systemd-homework connect to init over a unix socket
  - Fix systemd-homed blobs directory permissions
  - Allow virtqemud read sgx_vepc devices
  - Allow lldpad create and use netlink_generic_socket


author: Zdenek Pytela <zpytela@redhat.com> - 41.24-1
changelog:
  - Allow dirsrv read network sysctls
  - Label /run/sssd with sssd_var_run_t
  - Label /etc/sysctl.d and /run/sysctl.d with system_conf_t
  - Allow unconfined_t execute kmod in the kmod domain
  - Allow confined users r/w to screen unix stream socket
  - Label /root/.screenrc and /root/.tmux.conf with screen_home_t
  - Allow virtqemud read virtd_t files
  - Allow ping_t read network sysctls


author: Zdenek Pytela <zpytela@redhat.com> - 41.25-1
changelog:
  - Allow dirsrv-snmp map dirsv_tmpfs_t files
  - Label /usr/lib/node_modules_22/npm/bin with bin_t
  - Add policy for /usr/libexec/samba/samba-bgqd
  - Allow gnome-remote-desktop watch /etc directory
  - Allow rpcd read network sysctls
  - Allow journalctl connect to systemd-userdbd over a unix socket
  - Allow some confined users send to lldpad over a unix dgram socket
  - Allow lldpad send to unconfined_t over a unix dgram socket
  - Allow lldpd connect to systemd-machined over a unix socket
  - Confine the ktls service


author: Zdenek Pytela <zpytela@redhat.com> - 41.26-1
changelog:
  - [5/5][sync from 'mysql-selinux'] Add mariadb-backup
  - [4/5][sync from 'mysql-selinux'] Fix regex to also match '/var/lib/mysql/mysqlx.sock'
  - [3/5][sync from 'mysql-selinux'] Allow mysqld_t to read and write to the 'memory.pressure' file in cgroup2
  - [2/5][sync from 'mysql-selinux'] 2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705
  - [1/5][sync from 'mysql-selinux'] Allow 'mysqld' to use '/usr/bin/hostname'
  - Allow systemd-networkd read mount pid files
  - Update policy for samba-bgqd
  - Allow chronyd read networkmanager's pid files
  - Allow staff user connect to generic tcp ports
  - Allow gnome-remote-desktop dbus chat with policykit
  - Allow tlp the setpgid process permission
  - Update the bootupd policy
  - Allow sysadm_t use the io_uring API
  - Allow sysadm user dbus chat with virt-dbus
  - Allow virtqemud_t read virsh_t files
  - Allow virt_dbus_t connect to virtd_t over a unix stream socket
  - Allow systemd-tpm2-generator read hardware state information
  - Allow coreos-installer-generator execute generic programs
  - Allow coreos-installer domain transition on udev execution
  - Revert "Allow unconfined_t execute kmod in the kmod domain"
  - Allow iio-sensor-proxy create and use unix dgram socket
  - Allow virtstoraged read vm sysctls
  - Support ssh connections via systemd-ssh-generator
  - Label all semanage store files in /etc as semanage_store_t
  - Add file transition for nvidia-modeset


author: Zdenek Pytela <zpytela@redhat.com> - 41.27-1
changelog:
  - Update ktlsh policy
  - Allow request-key to read /etc/passwd
  - Allow request-key to manage all domains' keys
  - Add support for the KVM guest memfd anon inodes
  - Allow auditctl signal auditd
  - Dontaudit systemd-coredump the sys_resource capability
  - Allow traceroute_t bind rawip sockets to unreserved ports
  - Fix the cups_read_pid_files() interface to use read_files_pattern
  - Allow virtqemud additional permissions for tmpfs_t blk devices
  - Allow virtqemud rw access to svirt_image_t chr files
  - Allow virtqemud rw and setattr access to fixed block devices
  - Label /etc/mdevctl.d/scripts.d with bin_t
  - Allow virtqemud open svirt_devpts_t char files
  - Allow virtqemud relabelfrom virt_log_t files
  - Allow svirt_tcg_t read virtqemud_t fifo_files
  - Allow virtqemud rw and setattr access to sev devices
  - Allow virtqemud directly read and write to a fixed disk
  - Allow virtqemud_t relabel virt_var_lib_t files
  - Allow virtqemud_t relabel virtqemud_var_run_t sock_files
  - Add gnome_filetrans_gstreamer_admin_home_content() interface
  - Label /dev/swradio, /dev/v4l-subdev, /dev/v4l-touch with v4l_device_t
  - Make bootupd_t permissive
  - Allow init_t nnp domain transition to locate_t
  - allow gdm and iiosensorproxy talk to each other via D-bus
  - Allow systemd-journald getattr nsfs files
  - Allow sendmail to map mail server configuration files
  - Allow procmail to read mail aliases
  - Allow cifs.idmap helper to set attributes on kernel keys
  - Allow irqbalance setpcap capability in the user namespace
  - Allow sssd_selinux_manager_t the setcap process permission
  - Allow systemd-sleep manage efivarfs files
  - Allow systemd-related domains getattr nsfs files
  - Allow svirt_t the sys_rawio capability
  - Allow alsa watch generic device directories
  - Move systemd-homed interfaces to seperate optional_policy block
  - Update samba-bgqd policy
  - Update virtlogd policy
  - Allow svirt_t the sys_rawio capability
  - Allow qemu-ga the dac_override and dac_read_search capabilities
  - Allow bacula execute container in the container domain
  - Allow httpd get attributes of dirsrv unit files
  - Allow samba-bgqd read cups config files
  - Add label rshim_var_run_t for /run/rshim.pid


author: Zdenek Pytela <zpytela@redhat.com> - 41.28-1
changelog:
  - Update virtqemud policy regarding the svirt_tcg_t domain
  - Allow virtqemud domain transition on numad execution
  - Support virt live migration using ssh
  - Allow virtqemud permissions needed for live migration
  - Allow virtqemud the getpgid process permission
  - Allow virtqemud manage nfs dirs when virt_use_nfs boolean is on
  - Allow virtqemud relabelfrom virt_log_t files
  - Allow virtqemud relabel tun_socket
  - Add policy for systemd-import-generator
  - Confine vsftpd systemd system generator
  - Allow virtqemud read and write sgx_vepc devices
  - Allow systemd-networkd list cgroup directories
  - Allow xdm dbus chat with power-profiles-daemon
  - Allow ssh_t read systemd config files
  - Add Valkey rules to Redis module


author: Zdenek Pytela <zpytela@redhat.com> - 41.29-1
changelog:
  - Allow virtqemud domain transition to nbdkit
  - Add nbdkit interfaces defined conditionally
  - Allow samba-bgqd connect to cupsd over an unix domain stream socket
  - Confine the switcheroo-control service
  - Allow svirt_t read sysfs files
  - Add rhsmcertd interfaces
  - Add the ssh_exec_sshd() interface
  - Add the gpg_domtrans_agent() interface
  - Label /usr/bin/dnf5 with rpm_exec_t
  - Label /dev/pmem[0-9]+ with fixed_disk_device_t
  - allow kdm to create /root/.kde/ with correct label
  - Change /usr/sbin entries to use /usr/bin or remove them
  - Allow systemd-homed get filesystem quotas
  - Allow login_userdomain getattr nsfs files
  - Allow virtqemud send a generic signal to the ssh client domain
  - Dontaudit request-key read /etc/passwd


author: Zdenek Pytela <zpytela@redhat.com> - 41.30-1
changelog:
  - Allow systemd-generator connect to syslog over a unix stream socket
  - Allow virtqemud manage fixed disk device nodes
  - Allow iio-sensor-proxy connect to syslog over a unix stream socket
  - Allow virtstoraged write to sysfs files
  - Allow power-profiles-daemon write sysfs files
  - Update iiosensorproxy policy
  - Allow pcmsensor write nmi_watchdog state information
  - Label /proc/sys/kernel/nmi_watchdog with sysctl_nmi_watchdog_t
  - Allow virtnodedev create /etc/mdevctl.d/scripts.d with bin_t type
  - Add the gpg_read_user_secrets() interface
  - Allow gnome-remote-desktop read resolv.conf
  - Update switcheroo policy
  - Allow nfsidmap connect to systemd-homed over a unix socket
  - Add the auth_write_motd_var_run_files() interface
  - Add the bind_exec_named_checkconf() interface
  - Add the virt_exec_virsh() interface


author: Zdenek Pytela <zpytela@redhat.com> - 41.31-1
changelog:
  - Allow snapperd execute systemctl in the caller domain
  - Allow svirt_tcg_t to connect to nbdkit over a unix stream socket
  - Allow iio-sensor-proxy read iio devices
  - Label /dev/iio:device[0-9]+ devices
  - Allow systemd-coredump the sys_admin capability
  - Allow apcupsd's apccontrol to send messages using wall
  - contrib/thumb: also allow per-user thumbnailers
  - contrib/thumb: fix thunar thumbnailer (rhbz#2315893)
  - Allow virt_domain to use pulseaudio - conditional
  - Allow pcmsensor read nmi_watchdog state information
  - Allow init_t nnp domain transition to gssproxy_t


author: Martin Osvald <mosvald@redhat.com> - 2.14.1-1
changelog:
  - bashrc sets hardcoded umask (#1902166)
  - bashrc: clean up unused references to VTE
  - uidgid: simplify table format and other format enhancements
  - uidgid: fix news and lock entries, move basic groups to systemd


author: Martin Osvald <mosvald@redhat.com> - 2.14.2-1
changelog:
  - sysusers.d: add script and configuration fragments for groups
  - passwd: align 'nologin' shell path with systemd defaults
  - uidgid: assign GID 101 for 'ssh_keys' group
  - uidgid: assign UID/GID 114 for 'polkitd'
  - passwd: update GECOS field for 'root' user
  - services: remove commas from aliases for ircu-3
  - setup.spec: throw away newaliases output again


author: Martin Osvald <mosvald@redhat.com> - 2.14.3-1
changelog:
  - sysusers.d: add script and generate configuration fragment for users
  - Add fallback to hostname determination for csh.login (rhbz#2079768)
  - Remove ancient Conflicts
  - files: mark /run/motd as an ephemeral ghost entry


author: Martin Osvald <mosvald@redhat.com> - 2.14.4-1
changelog:
  - protocols: add mptcp (262)
  - setup.spec: make setup protected package (rhbz#2155547)
  - setup.spec: don't report rpm -Va error on /run/motd (rhbz#2160954)
  - services: replace hostmon with llmnr for port 5355 (rhbz#2216914)


author: Martin Osvald <mosvald@redhat.com> - 2.14.5-1
changelog:
  - bashrc: switch PROMPT_COMMAND to be an array (rhbz#2097525)
  - profile: don't overwrite the HISTSIZE environment variable
  - hosts: use "example.org" as example domain (rhbz#2246220)
  - csh.login: source csh.local (RHEL-17226)


author: Martin Osvald <mosvald@redhat.com> - 2.14.6-1
changelog:
  - New version 2.14.6
  - Remove uidgid pair 77:77 for arpwatch
  - Define all hardware groups that systemd needs via sysusers
  - Switch to rpmautospec


author: Tomas Bzatek <tbzatek@redhat.com> - 1.48-4
changelog:
  - udev rules: avoid spurious warning for non-SCSI devices
  - Install missing 00-scsi-sg3_config.rules
  - Fix file references to other udev rules


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.14.0-5
changelog:
  - passwd: Provide binary from this package. Enable libpam and
    disable account-tools-setuid. Provide passwd PAM service file.
    Resolves: #2233275
  - passwd: provide --stdin option


author: Iker Pedrosa <ipedrosa@redhat.com> - 2:4.15.1-1
changelog:
  - Wrong versioning for 4.15.0 RC releases makes the oficial release look lower than them.
    Fix it by bumping the minor release to 4.15.1. Resolves: #2268690


author: Zbigniew Jedrzejewski-Szmek <zbyszek@in.waw.pl> - 2:4.15.1-4
changelog:
  - Fix build with %_bindir==%_sbindir
  - Add virtual Provides for old file paths used by other packages


author: Björn Esser <besser82@fedoraproject.org> - 2:4.17.0~rc1-2
changelog:
  - Remove potentially dangerous {C,LD}FLAGS shenanigans
  - Fail linking if there are undefined symbols at link-time


author: Peter Jones <pjones@redhat.com> - 15.8-2
changelog:
  - Update to shim-15.8
    Resolves: CVE-2023-40546
    Resolves: CVE-2023-40547
    Resolves: CVE-2023-40548
    Resolves: CVE-2023-40549
    Resolves: CVE-2023-40550
    Resolves: CVE-2023-40551
    Resolves: rhbz#2113005
    Resolves: rhbz#2189197
    Resolves: rhbz#2238884
    Resolves: rhbz#2259264


author: Bruno Wolff III <bruno@wolff.to> - 4.6-1
changelog:
  - 4.6 release
  - PR #231 was merged
  - See https://github.com/plougher/squashfs-tools/blob/master/CHANGES


author: Bruno Wolff III <bruno@wolff.to> - 4.6.1-1
changelog:
  - Phillip is now doing two tags per release and we can
  - use the one that works better with forgemeta
  - There are a few fixes after the 4.6 release. I think only
  - one applies to Fedora because of the build options we use.
  - It was not something that affects image builds.


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup


author: Clark Williams <williams@redhat.com> - 1.17.1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  - stalld: Detect runnable dying tasks
  - stalld: Fix nr_periods calculation in do_fifo_boost()
  - stalld.conf: Lower threshold to 20
  - utils.c: Exit early if enabling HRTICK fails when using SCHED_DEADLINE
  - Add support for loongarch


author: Clark Williams <williams@redhat.com> - 1.18.1
changelog:
  - queue_track: Use LIBBPF_MAJOR/MINOR_VERSION to detect deprecated functions
  - utils: Close file descriptor
  - stalld: Fix function name of daemonize()
  - docs: Fix typo in the manual
  - queue_track: Use bpf_map__resize on older libbpf versions
  - utils: Let tgid to arrive at the fill proccess comm
  - stalld: Fix log message on idle detection
  - stalld: Add -b/--backend option
  - stalld: Add queue track eBPF based backend
  - stalld: Add fill_process_comm helper
  - stalld: Include regex.h on stalld.h
  - stalld: Get nr of cpus only once
  - stalld: Add the backend abstraction
  - sched_debug: Move sched debug functions to an specific file


author: Clark Williams <williams@redhat.com> - 1.19.1
changelog:
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Clark Williams <williams@redhat.com> - 1.19.2
changelog:
  - Make fill_process_comm() open comm file as READ_ONLY
  - throttlectl.sh: use legal value for exit on fail
  - stalld: free malloc'd buffer on function exit
  - throttling.c:  null terminate input buffer
  - stalld.conf: Fix stalld service start fail
  - Conditionalize BPF and queue_track build per architecture
  - clean up Makefile install logic and add .bz2 to .gitignore
  - modify Makefiles so install works with relative paths
  - rename 'redhat' to 'systemd' and remove redhat packaging logic
  - update SPDX tags to non-deprecated values
  - stalld: Add -a/--affinity option
  - Adding SPDX license info to each file
  - man/stalld.8:  change starving threshold to match code
  - utils: Fix freeing of invalid pointer
  - add bpftool as BuildRequires


author: Clark Williams <williams@redhat.com> - 1.19.3
changelog:
  - src/utils.c: fix off-by-one error in buffer allocation
  - Makefile:  change build to use FORTIFY_SOURCE=3


author: Clark Williams <williams@redhat.com> - 1.19.5
changelog:
  - Makefile:  refactor CFLAGS/LDFLAGS for local and koji builds
  - doc/Releases.md:  Add a note about tagging


author: Clark Williams <williams@redhat.com> - 1.19.6
changelog:
  - systemd: add BE environment variable to select backend
  - Makefile: add uninstall target
  - version bump to 1.19.6


author: Clark Williams <williams@redhat.com> - 1.19.7
changelog:
  - stalld.c: use a more reasonable size for reading /proc/stat
  - systemd/Makefile:  remove typo in uninstall line
  - Makefile:  change modes on throttled and stalld
  - throttlectl: clean up throttling script due to reported CVE-2024-54159


author: Clark Williams <williams@redhat.com> - 1.19.8
changelog:
  - Added glibc41 fix to source tree, removed patch 
  - stalld.h:  fix prototype mis-match with cleanup_regex()


author: Radovan Sroka <rsroka@redhat.com> - 1.9.12-1
changelog:
  - Rebase to sudo 1.9.12p2
  - sudo-1.9.12p2 is available Resolves: rhbz#2137775
  - sudo: arbitrary file write with privileges of the RunAs user Resolves:
    CVE-2023-22809


author: Radovan Sroka <rsroka@redhat.com> - 1.9.13-1
changelog:
  - Rebase to sudo 1.9.13p2
  - sudo-1.9.13p2 is available Resolves: rhbz#2169840
  - sudo: double free with per-command chroot sudoers rules Resolves:
    CVE-2023-27320


author: Yaakov Selkowitz <yselkowi@redhat.com> - 1.9.14-1
changelog:
  - Rebase to 1.9.14p3
  - sudo-1_9_14p2 is available Resolves: rhbz#2175672
  - sudo fails to build with Python 3.12: FAILED: testcase
    check_example_group_plugin_is_able_to_debug() Resolves: rhbz#2186412


author: Radovan Sroka <rsroka@redhat.com> - 1.9.15-1
changelog:
  - Rabase to 1.9.15p5
  - sudo-1_9_15p5 is available Resolves: rhbz#2248505
  - TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
    Variables Resolves: rhbz#2255569


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.5-1
changelog:
  - Version 255.5
  - Many different small fixes: systemd itself, systemd-networkd, systemd-
    journal-remote, compilation fixes for newer kernels and clang, systemd-
    homed, systemd-resolved, ukify, systemd-tmpfiles, various other.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.6-1
changelog:
  - Version 256.6
  - Fixes for systemd, systmed-resolved, systemd-journald, systemd-journal-
    remote, systemd-cryptsetup, systemd-portabled, systemd-networkd, systemd-
    boot, varlink implementation, shell completions, build reproducibility,
    and various smaller fixes in other tools.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255-1
changelog:
  - Version 255
  - Just a few bugfixes since 255-rc4: seccomp filters, logging,
    documentation, systemd-repart
  - Includes a hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255-3
changelog:
  - Move config files to /usr/lib/systemd (e.g. /etc/systemd/system.conf →
    /usr/lib/systemd/systemd.conf). Both config file locations were already
    supported, and the files installed in /etc/ were "empty" (i.e. they had
    only comments and section headers). The move does not change the
    configuration, but just makes /etc more empty by default. See
    https://github.com/systemd/systemd/commit/6495361c7d for more discussion
    and details.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.2-1
changelog:
  - Version 255.2
  - Fixes missing DNSSEC validity check in SOA DNS packets (CVE-2023-7008)
  - systemd-resolved and systemd-networkd are restarted after an upgrade.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 255.3-1
changelog:
  - Version 255.3
  - A bunch of various fixes for memory and behaviour, in many different
    components (bootctl, systemd, udev, systemd-networkd, systemd-homed,
    systemd-logind, systemd-resolve, systemd-repart, systemd-analyze,
    systemd-dissect, systemd-boot, pam modules, systemd-storagetm, systemd-
    journal-remote, kernel-install)
  - Improved detection of virtualization (Google Compute Engine, Apple Virt)
  - Updates for shell completions and docs
  - An update for hardware database


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.8-1
changelog:
  - Version 256.8
  - Improvements to logging, documentation, systemd, systemd-repart, systemd-
    networkd, systemd-network-generator, systemd-nspawn, systemd-resolved,
    systemd-run, systemd-dissect, systemd-pcrlock, systemd-logind, systemd-
    bsod, udev, ukify
  - Resolves #2323323: system will boot to cgroup v2 automatically unless
    overriden
  - Resolves #2321268: freezing of user processes is disabled
  - Hardware database is updated


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.10-1
changelog:
  - Version 256.10
  - Fixes for man pages, shell completion, logging, systemd-networkd,
    systemd-resolved, systemctl edit.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.11-1
changelog:
  - Version 256.11
  - Fixes for assertion crashes and memory access issues in pid1 and systemd-
    machined, and other fixes for systemd-repart, systemd-resolved, systemd-
    stdio-bridge, sd-device, hibernation, and the hardware database.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.3-1
changelog:
  - Version 256.3
  - A bunch of fixes for systemd (pid1)
  - Various upgrades related to running tests in mkosi


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 256.5-1
changelog:
  - Version 256.5
  - Includes the patches for the kernel change with kernel threads in leaf
    cgroups (https://github.com/systemd/systemd/pull/33885)
  - Various smaller fixes


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257~rc2-1
changelog:
  - Version 257~rc2
  - Changes in systemd-measure, systemd-networkd, documentation, systemd-
    sysupdated, systemd-sbsign, systemd-boot, systemd-stub, systemd-nspawn,
    run0, ukify
  - Hardware database update


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257~rc3-1
changelog:
  - Version 257~rc3
  - A bunch of small fixes here and there: virtualization detection, udev,
    systemd-networked, pid1.
  - Includes a hardware database update.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257-1
changelog:
  - Version 257
  - A bunch of small fixes in various components: systemd itself, systemd-
    cryptenroll, sd-varlink, sd-boot, documentation, tests
  - Includes an update of the hardware database


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.1-1
changelog:
  - Version 257.1
  - A bunch of post-release fixes, incl. for systemd-resolved, tpm2 support,
    systemd-networkd, systemd-logind, journalct.
  - Should fix rhbz#2325780.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.2-1
changelog:
  - Version 257.2
  - Fixes for assertion crashes and memory access issues in pid1 and systemd-
    machined, and other fixes for systemd-repart, systemd-resolved, systemd-
    stdio-bridge, systemctl, journalctl, sd-device, hibernation, and the
    hardware database.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 257.2-4
changelog:
  - Revert use of PrivateTmp=disconnected (rhbz#2334015,
    https://github.com/coreos/fedora-coreos-tracker/issues/1857)


author: Patsy Griffin <patsy@redhat.com> - 2023a-1
changelog:
  - Rebase to tzdata-2023a
   - Egypt reintroduced DST, from April through October.
   - Morocco springs forward April 23, not April 30.
   - Palestine delayed the start of DST this year.


author: Patsy Griffin <patsy@redhat.com> - 2023d-1
changelog:
  - Rebase to tzdata-2023d
    - Include time zone changes for Ittoqqortoormiit, Greenland
      and Vostok, Antarctica.
    - Update the expiration date for the leap-seconds.list file.
      No new leap seconds were added.


author: Patsy Griffin <patsy@redhat.com> - 2023d-2
changelog:
  - Migrate License field to SPDX identifiers for
    https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_2


author: Patsy Griffin <patsy@redhat.com> - 2024a-1
changelog:
  - Rebase to tzdata-2024a
    - Kazakhstan will transition from UTC+6 to UTC+5 on 2024-03-01.
    - Palestine will spring forward a week later than previously
      predicted.


author: Patsy Griffin <patsy@redhat.com> - 2024a-8
changelog:
  - zic now defaults to "-b slim" to control data bloat.
    For now, build with ZFLAGS="-b fat" for backward compatibitliy.


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Rebase to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Patsy Griffin <patsy@redhat.com> - 2024b-1
changelog:
  - Update to tzdata-2024b (#2310315)
    - Improve historical data for Mexico, Mongolia, and Portugal.
    - System V names are now obsolescent.
    - The main data form now uses %z.
    - The code now conforms to RFC 8536 for early timestamps.
    - Support POSIX.1-2024, which removes asctime_r and ctime_r.
    - Assume POSIX.2-1992 or later for shell scripts.
    - SUPPORT_C89 now defaults to 1.
    - Include two upstream patches for month names as in April vs Apr.
  - Harden against links to removed zones


author: Michael Jeanson <mjeanson@efficios.com> - 0.15.0-1
changelog:
  - New upstream release
  - The 'signal' flavour of liburcu was removed upstream
  - Enable compiler atomics


author: Zdenek Dohnal <zdohnal@redhat.com> - 2:9.1.076-2
changelog:
  - enable building without GPM support - build with GPM in Fedora
  - 2262371 - gvim: symbol lookup error: gvim: undefined symbol: g_once_init_enter_pointer


author: Eric Sandeen <sandeen@redhat.com> - 6.10.1-1
changelog:
  - Update to latest upstream version
  - Fix C++ compilation errors in xfs_fs.h
  - Related: rhbz#2309693, rhbz#2308609


author: Richard W.M. Jones <rjones@redhat.com> - 1:5.6.3-2
changelog:
  - perl-Compress-Raw-Lzma dep has been removed, rebuild
    https://src.fedoraproject.org/rpms/perl-Compress-Raw-Lzma/pull-request/3


author: Daniel P. Berrangé <berrange@redhat.com> - 2.1.0-21
changelog:
  - Switch to using git for managing patches
  - Fix potential buffer overread (CVE-2017-16516)
  - Fix integer overflow leading to heap corruption (CVE-2022-24795)
  - Fix multiple memory leaks (CVE-2023-33460)


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.0-1
changelog:
  - Add option to generate a zchunk header from an uncompressed file without
    actually creating a zchunk file


author: Jonathan Dieter <jdieter@gmail.com> - 1.3.1-1
changelog:
  - Fix a few low severity security bugs including
    - An off-by-one overflow when reading compressed integers from a
      malicious zchunk file
    - Error handling being skipped when the number of bytes read doesn't
      match what's expected
    - Not freeing memory when attempting to reallocate to size 0


author: Jonathan Dieter <jdieter@gmail.com> - 1.4.0-1
changelog:
  - Add native OpenSSL 3 compatibility
  - Add new function for getting zchunk context from chunk
  - Fix bug when assembling from multiple sources


