# changelog

author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-1
changelog:
  - Bump version to 2.0.8-1
  - Resolves: Bug 1992609 - EntryUUID syntax plugin breaks replication with older versions


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-2
changelog:
  - Bump version to 2.0.8-2
  - Resolves: Bug 1998464 - LDAP server crashes when dnaInterval attribute is set to 0


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-5
changelog:
  - Bump version to 2.0.8-5
  - Resolves: Bug 2000420 - Not able to preserve users using "ipa user-del --preserve"


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.8-6
changelog:
  - Bump version to 2.0.8-6
  - Resolves: Bug 2000420 - Not able to preserve users using "ipa user-del --preserve"


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.11-1
changelog:
  - Bump version to 2.0.11-1
  - Resolves: Bug 2024693 - Rebase RHEL 9.0 with 389-ds-base
  - Resolves: Bug 2015996 - Log the Auto Member invalid regex rules in the LDAP errors log
  - Resolves: Bug 2020554 - ipa user-add fails with "gecos: value invalid per syntax: Invalid syntax"
  - Resolves: Bug 1779685 - PBKDF2 hashing does not work in FIPS mode


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.13-1
changelog:
  - Bump version to 2.0.13-1
  - Resolves: Bug 2034880 - ipa-restore command is failing when restore after uninstalling the server
  - Resolves: Bug 2045098 - Demoting a supplier to a consumer crashes the server


author: Mark Reynolds <mreynolds@redhat.com> - 2.0.14-1
changelog:
  - Bump version to 2.0.14-1
  - Resolves: Bug 2034880 - ipa-restore command is failing when restore after uninstalling the server (part2)


author: Mark Reynolds <mreynolds@redhat.com> - 2.1.3-1
changelog:
  - Bump version to 2.1.3-1
  - Resolves: Bug 2061801 - rebase 389-ds-base to 2.1.3
  - Resolves: Bug 1872451 - RFE - run as non-root
  - Resolves: Bug 2052527 - RFE - Provide an option to abort an Auto Member rebuild task
  - Resolves: Bug 2057056 - Import may break the replication because changelog starting csn may not be created
  - Resolves: Bug 2057063 - Add support for recursively deleting subentries
  - Resolves: Bug 2062778 - sending crafted message could result in DoS
  - Resolves: Bug 2064781 - expired password was still allowed to access the database
  - Resolves: Bug 2100337 - dsconf backend export userroot fails ldap.DECODING_ERROR


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-2
changelog:
  - Bump version to 2.2.4-2
  - Resolves: Bug 1859271 - RFE - Extend log of operations statistics in access log
  - Resolves: Bug 2093981 - RFE - Create Security Audit Log
  - Resolves: Bug 2109891 - Migrate 389 to pcre2
  - Resolves: Bug 2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: Bug 2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: Bug 2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: Bug 2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: Bug 2132697 - RFE - run as non-root
  - Resolves: Bug 2142636 - pam mutex lock causing high etimes, affecting red hat internal sso


author: Mark Reynolds <mreynolds@redhat.com> - 2.2.4-3
changelog:
  - Bump version to 2.2.4-3
  - Resolves: rhbz#2142636 - pam mutex lock causing high etimes, affecting red hat internal sso
  - Resolves: rhbz#2093981 - RFE - Create Security Audit Log
  - Resolves: rhbz#2132697 - [RFE] 389ds: run as non-root
  - Resolves: rhbz#2124660 - Retro changelog trimming uses maxage incorrectly
  - Resolves: rhbz#2114039 - Current pbkdf2 hardcoded parameters are no longer secure
  - Resolves: rhbz#2112998 - performance search rate: checking if an entry is a referral is expensive
  - Resolves: rhbz#2112361 - Supplier should do periodic update to avoid slow replication when a new direct update happen
  - Resolves: rhbz#2109891 - Migrate 389 to pcre2


author: Caolán McNamara <caolanm@redhat.com> - 2.4.1-5
changelog:
  - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
    longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
    https://github.com/bminor/glibc/blob/master/NEWS causing build failure


author: Mattias Ellert <mattias.ellert@physics.uu.se> - 5.2.0-4
changelog:
  - Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
    empty - no content was marked for inclusion!)
  - Remove scope from dependencies in pom.xml files (fixes missing
    dependencies, dependencies marked with scope provided are ignored by
    the rpm dependency generator)
  - Drop some more commands: shell, exportreport, mbr (uses parts that
    are not packaged)
  - Resolves: rhbz#1985566


author: Michal Sekletar <msekleta@redhat.com> - 0.8-21
changelog:
  - fix file attributes on /run/avahi-daemon (RHEL-5633)
  - avahi-client: fix resource leak (RHEL-27722)
  - fix resource leak in avahi_time_event_queue_new (RHEL-27717)


author: Dalibor Pospisil <dapospis@redhat.com> - 1.20-1
changelog:
  - Rebase to the latest upstream
  - improvements to libraries search
  - docs update
  - some optimizations
  - fixed pattern for mathing port or socket in rlWaitFor*
  - log colorizing on all screen* terminals
  - IFS fixes
  - Use /etc/os-release in rlGetDistro*() (#35)
  - support for curl 7.29.0
  - prefer curl over wget
  - silence status of service in rlService{Start,Stop,Restore} functions (#…
  - TESTPACKAGE variable to force package name (#54)


author: Dalibor Pospisil <dapospis@redhat.com> - 1.21-1
changelog:
  - Rebase to the laster upstream
  - better and more consistent search for libraries
  - ability to parse yaml files including main.fmf and metadata.yaml


author: Dalibor Pospisil <dapospis@redhat.com> - 1.22-1
changelog:
  - ability to parse fmf id references
  - ability the use simpler library name - library(foo), {url: '../foo.git', name: '/'}, meaming the library is n the root folder
  - ability put library even deeper in the tree - library(foo/path/to/the/library), {url: '../foo.git', name: '/path/to/the/library'}
  - rebased yash to 1.0
  - and few more minor fixes


author: Dalibor Pospisil <dapospis@redhat.com> - 1.23-1
changelog:
  - TestResults state indicator
  - profiling code
  - rebased yash to 1.1
  - fixed rlAssertLesser
  - fixed failed library load name logging


author: Dalibor Pospisil <dapospis@redhat.com> - 1.24-1
changelog:
  - rlImport --all imports only required libraries, not recommend
  - implemented chkconfig fallback to systemctl
  - fixed `make test` test suite execution


author: Dalibor Pospisil <dapospis@redhat.com> - 1.25-1
changelog:
  - rebased yash to version 1.2, fixes the backtick iterpretation
  - docs fixes, by Štěpán Němec <snemec@redhat.com>


author: Yara Ahmad <yahmad@redhat.com> - 2.35.2-40
changelog:
  - Fix an illegal memory access when parsing an ELF file containing corrupt symbol version information.  (#2164701)


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
changelog:
  - Forward-port Oracle patches from 2.35.2-24.0.1
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
changelog:
  - Refresh CTF patches from upstream.
    - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
    - Various obscure install-time linking problems
    - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
      a CTF member name, not a section name
    - Improve dumping of types when some types elicit a libctf error
    - Put functions as well as variables in the (misnamed) CTF variable section
    - Improve handling of various forms of corrupted CTF input.
    - Fix errors in comments in <ctf.h> and <ctf-api.h>
    - Make CTF dicts reproducible even when conflicting types are seen
    - Prevent corruption of output when linking multiple object files derived from
      the same source
    - Minor compiler warning and portability fixes
    - Fix (unlikely) crash-inducing uninitialized memory access and wild
      pointer overwrite when linking
    - Fix the reported offsets of fields within unnamed structs/unions
      [Orabug: 35191322]
    - Fix a number of places where operations carried out on child dicts
      that errored were producing errors on the parent, not the child,
      so the caller never noticed them


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-43.0.1
changelog:
  - Forward-port Oracle patches to 2.35.2-43.
    Oracle history:
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.35.2-51
changelog:
  - Backport commit 88141209e25ce19473ec07d7aac09cc68f06a630 to fix stripping lld linked binaries.  (RHEL-50536)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-52
changelog:
  - Backport commit 6fde04116b4b to stop objcopy from crashing when copying non-PE binaries into a PE output.  (RHEL-48882)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-53
changelog:
  - Backport commit bc5baa9f13ff to ensure that objcopy does not loose the minimum section alignment for PE binaries.  (RHEL-30268)


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-54.0.1
changelog:
  - Forward-port Oracle patches to 2.35.2-54.
    Oracle history:
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.35.2-55
changelog:
  - Add linker error/warning messages for executable stacks and RWX segments.  (RHEL-59801, RHEL-59802)


author: Nick Clifton <nickc@redhat.com> - 2.35.2-61
changelog:
  - Add an option to objcopy that creates padding sections that eliminate gaps between segments.  (RHEL-60807)


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
changelog:
  - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Nick Clifton <nickc@redhat.com> - 2.35.2-67
changelog:
  - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options.  (RHEL-109970)


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1
changelog:
  - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-5-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-66.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    August-4-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-65.0.1
    - Merge Oracle patches to 2.35.2-65.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
    - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Bruce McCulloch <bruce.mcculloch@oracle.com> - 2.35.2-72.0.1
changelog:
  - Merge Oracle patches to 2.35.2-72.
      Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    Febuary-19-2026 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-69.0.2
    - Backport upstream commit 57ae980e329 to fix bfd.h includes.
      Reviewed-by: Nick Alcock <nick.alcock@oracle.com>
      Reviewed-by: David Faust <david.faust@oracle.com>
    Febuary-03-2026 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-69.0.1
    - Merge Oracle patches to 2.35.2-69.
      Reviewed-by: David Faust <david.faust@oracle.com>
    December-18-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1.1
    - Merge Oracle patches to 2.35.2-67.1.
    - CVE-2025-11083
      Reviewed-by: David Faust <david.faust@oracle.com>
    September-24-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-67.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-5-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-66.0.1
    - Merge Oracle patches to 2.35.2-66.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-4-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-65.0.1
    - Merge Oracle patches to 2.35.2-65.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-63.0.1
    - Merge Oracle patches to 2.35.2-63.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    January-10-2025 Bruce McCulloch  <bruce.mcculloch@oracle.com> - 2.35.2-55.0.1
     - Forward-port Oracle patches to 2.35.2-55.
     - Refresh CTF patches
    March-27-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-43.0.1
     - Forward-port Oracle patches to 2.35.2-43.
    March-07-2024 Jose E. Marchesi  <jose.marchesi@oracle.com> - 2.35.2-42.0.2.1
    - Do not set version info on unversion symbols.  (RHEL-22601)
    - Reviewed by: Elena Zannoni <elena.zannoni@oracle.com>
    February-06-2024 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-42.0.2
    - Refresh CTF patches from upstream (2.42).
      - Fix more cases where operations on child dicts could leave errors on
        the parent, this time associated with CTF dict creation (upstream PR
        libctf/30985).
      - Fix the cu-mapped link feature (not exposed by GNU ld) to use only
        the last mapping provided for a given translation unit, rather than a
        random mix of first and last
    - Fix dependencies of libctf.so and libctf-nobfd.so to cite the libraries
      the code actually depends on.  (Fixes observed link problems with
      libctf-nobfd.so needing extra libraries on the link line versus upstream:
      libctf.so changes done purely for consistency.)
    - Add upstream commit 2e93abb858ae, allowing NONE relocs against local absolute
      symbols on x86-64.  (Upstream PR ld/31047).
    October-10-2023 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.35.2-42.0.1
    - Forward-port Oracle patches to 2.35.2-42.
    August-04-2023 Nick Alcock <nick.alcock@oracle.com> - 2.35.2-37.0.2
    - Refresh CTF patches from upstream.
      - Avoid spurious corruption error with symtypetab section emitted by old OL8 GCCs
      - Various obscure install-time linking problems
      - Make objdump/readelf --ctf parameter optional; make objdump --ctf-parent take
        a CTF member name, not a section name
      - Improve dumping of types when some types elicit a libctf error
      - Put functions as well as variables in the (misnamed) CTF variable section
      - Improve handling of various forms of corrupted CTF input.
      - Fix errors in comments in <ctf.h> and <ctf-api.h>
      - Make CTF dicts reproducible even when conflicting types are seen
      - Prevent corruption of output when linking multiple object files derived from
        the same source
      - Minor compiler warning and portability fixes
      - Fix (unlikely) crash-inducing uninitialized memory access and wild
        pointer overwrite when linking
      - Fix the reported offsets of fields within unnamed structs/unions
        [Orabug: 35191322]
      - Fix a number of places where operations carried out on child dicts
        that errored were producing errors on the parent, not the child,
        so the caller never noticed them
    March-28-2023 Guillermo E. Martinez  <guillermo.e.martinez@oracle.com> - 2.35.2-37.0.1
    - Forward-port Oracle patches from 2.35.2-24.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 David Faust  <david.faust@oracle.com> - 2.35.2-17.0.1
    - Forward-port Oracle patches from 2.35.2-9.0.1 to 2.35.2-17.0.1
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-23-2021 David Faust  <david.faust@oracle.com> - 2.35.2-9.0.1
    - Enable libctf
    - Backport all CTF improvements since 2.35.2 release, upstream commits:
      6ab5b6d0f3a libctf, lookup: fix bounds of pptrtab lookup
      e695879142a libctf, testsuite: fix various warnings in tests
      b62d5edd0a5 libctf: fix handling of CTF symtypetab sections emitted by older GCC
      ea9c2009115 libctf: try several possibilities for linker versioning flags
      bef9ef8ca0f libtool.m4: fix nm BSD flag detection
      bc4b1401129 libtool.m4: augment symcode for Solaris 11
      7d53105d6ed libctf: link against libiberty before linking in libbfd or libctf-nobfd
      ae064303efe libctf, ld: fix test results for upstream GCC
      49da556c658 libctf, include: support an alternative encoding for nonrepresentable types
      8592be8c7d3 ld: do not rely on the exact size of the CTF symtypetabs in test results
      8f7b22ea2a9 libctf: fix ELF-in-BFD checks in the presence of ASAN
      15131809c23 libctf: fix memory leak in a test
      0bd65ce30a8 libctf: don't dereference out-of-bounds locations in the qualifier hashtab
      5226ef61131 libctf: make ctf_bfdopen_ctfsect a debugger entry point
      86f64bf43f7 libctf, serialize: functions with no args have a NULL dtd_vlen
      24c877f9b19 include: always do unsigned left-shift in CTF_SET_STID
      485170cdb1b libctf, dump: do not emit size or alignment if it would error
      e93388417c1 Provide an inline startswith function in bfd.h
      69a284867c7 libctf: support encodings for enums
      e4c78f303df libctf: a couple of small error-handling fixes
      d7b1416ef2c libctf: types: unify code dealing with small-vs-large struct members
      08c428aff4a libctf: eliminate dtd_u, part 5: structs / unions
      77d724a7ecd libctf: eliminate dtd_u, part 4: enums
      986e9e3aa03 libctf: do not corrupt strings across ctf_serialize
      2a05d50e90c libctf: don't lose track of all valid types upon serialization
      755ba58ebef Add install dependencies for ld -> bfd and libctf -> bfd
      81982d20fac libctf: eliminate dtd_u, part 3: functions
      534444b1ee1 libctf: eliminate dtd_u, part 2: arrays
      7879dd88efd libctf: eliminate dtd_u, part 1: int/float/slice
      eefe721eadf libctf: fix GNU style for do {} while
      b9a964318a7 libctf: split up ctf_serialize
      01cbfcba4bc libctf: fix comment above ctf_dict_t
      bf4c3185a5a libctf: split serialization and file writeout into its own file
      087945261c7 libctf: fix some tabdamage and move some code around
      211bcd01333 bfd, ld, libctf: skip zero-refcount strings in CTF string reporting
      8e7e446446b libctf: free ctf_dynsyms properly
      cf6a0b989a5 libctf: fix signed/unsigned comparison confusion
      4659554b280 libctf: minor error-handling fixes
      f5060e56338 libctf: add a deduplicator-specific type mapping table
      478c04a55ee libctf: remove reference to "unconflicted link mode".
      8915c559d40 libctf, include: remove the nondeduplicating CTF linker
      fd12633780a libctf: fix ChangeLog date
      ac36e134d96 libctf: reimplement many _iter iterators in terms of _next
      eaa2913a7ac libctf: ctf_archive_next should set the parent name consistently
      93993f67849 libctf AC_CANONICAL_TARGET
      f4f60336dae libctf, include: find types of symbols by name
      758f590744b libctf: add missing header in BFD ELF check
      cbd8f5bbcc8 libctf: require a Tcl capable of try/catch to run tests
      95148614026 bfd, opcodes, libctf: support --with-included-gettext
      ee87f50b8d2 libctf: always name nameless types "", never NULL
      5dacd11ddcf libctf: fix uninitialized variable in symbol serialization error handling
      caa170493e8 libctf: prohibit nameless ints, floats, typedefs and forwards
      78f28b89e8c libctf: rip out dead code handling typedefs with no name
      35a01a04544 libctf, ld: fix symtypetab and var section population under ld -r
      f04ce15e831 ld: depend on libctf
      26503e2f5ea libctf, create: fix ctf_type_add of structs with unnamed members
      e05a3e5a491 libctf: lookup_by_name: do not return success for nonexistent pointer types
      0814dbfbfcc libctf, testsuite: adjust for real return type of ctf_member_count
      70d3120f322 libctf, testsuite: don't run without a suitable compiler
      b4b6ea46807 libctf, ld: fix formatting of forwards to unions and enums
      abe4ca69a11 libctf: fix lookups of pointers by name in parent dicts
      8769046e5a9 libctf: remove outdated comment about parent dict importing
      6c3a38777b3 libctf, include: support unnamed structure members better
      abed0b0718a libctf: warn about information loss because of unreleased format changes
      9bc769718db libctf: new test of enum lookups with the _next iterator
      c59e30ed172 libctf: new testsuite
      1038406a8f6 libctf: rip out BFD_DEPENDENCIES / BFD_LIBADD
      37002871ac2 libctf, ld: dump enums: generally improve dump formatting
      ffeece6ac2d libctf, ld: prohibit getting the size or alignment of forwards
      91e7ce2fd7b libctf, ld: more dumper improvements
      57f97d0e6dd libctf, ld: CTF dumper changes for consistency
      b09ad6eae98 libctf: do not print array declarators backwards
      a7c23ac9317 In libctf, make AC_CONFIG_MACRO_DIR consistent with ACLOCAL_AMFLAGS
      e8cda209052 libctf: Pass format argument to asprintf
      96c61be508f binutils: readelf: support CTF dicts with non-native-endian symtabs
      53651de80f8 libctf, include: support foreign-endianness symtabs with CTF
      ef21dd3bcff libctf: do not crash when CTF symbol or variable linking fails
      8f235c90a28 libctf: error-handling fixes
      97a2a623d01 libctf, include: add ctf_getsymsect and ctf_getstrsect
      2c78e92523a libctf, include: CTF-archive-wide symbol lookup
      0e28ade476e libctf, ld: properly deduplicate function types
      0ad70c536ab ld, ctf: new and adjusted CTF tests due to func info / object data sections
      4665e895c37 libctf: adjust dumper for symtypetab changes
      1136c379718 libctf: symbol type linking support
      3d16b64e28a bfd, include, ld, binutils, libctf: CTF should use the dynstr/sym
      83d59285d54 objdump, readelf: Report errors from CTF archive iteration
      ae41200ba80 libctf, include, binutils, gdb: rename CTF-opening functions
      139633c307e libctf, include, binutils, gdb, ld: rename ctf_file_t to ctf_dict_t
      0d01fbe64f6 Remove libctf/mkerrors.sed
      5e9b84f7a2e binutils, ld: dequote libctf error messages
      926c9e76657 libctf, binutils, include, ld: gettextize and improve error handling
      555adca2e3b libctf: compilation failure on MinGW due to missing errno values
      50500ecfefd libctf: compilation failure on MinGW due to missing errno values
      8c419a91d76 libctf: fixes for systems on which sizeof (void *) > sizeof (long)
      734c894234e libctf: fix isspace casts
      4533ed564d6 libctf, binutils: fix big-endian libctf archive opening
      62cdd7b18fc ld, testsuite: do not run CTF tests at all on non-ELF for now
      fa03171fb46 ld: do not produce one empty output .ctf section for every input .ctf
      7cdfc3462fb ld, testsuite: only run CTF tests when ld and GCC support CTF
      b1b33524ad3 ld: new CTF testsuite
      0b884151088 binutils, testsuite: allow compilation before doing run_dump_test
      5dba6f05b7b ld: new options --ctf-variables and --ctf-share-types
      f320bba50ff ld: Reformat CTF errors into warnings.
      3dd6b890b4e binutils: objdump: ctf: drop incorrect linefeeds
      662df3c3f14 libctf, link: tie in the deduplicating linker
      e3e8411bec4 libctf, link: add CTF_LINK_OMIT_VARIABLES_SECTION
      0f0c11f7fc9 libctf, dedup: add deduplicator
      a9b98702066 libctf, dedup: add new configure option --enable-libctf-hash-debugging
      1f2e8b5b87d libctf: add SHA-1 support for libctf
      6dd2819ffc2 libctf, link: add the ability to filter out variables from the link
      19d4b1addca libctf, link: fix spurious conflicts of variables in the variable section
      5f54462c6ab libctf, link: redo cu-mapping handling
      e3f17159e26 libctf, link: fix ctf_link_write fd leak
      8d2229ad1e7 libctf, link: add lazy linking: clean up input members: err/warn cleanup
      e148b730131 libctf: drop error-prone ctf_strerror
      1fa7a0c24e7 libctf: sort out potential refcount loops
      3166467b00a libctf: rename the type_mapping_key to type_key
      43a61d7d3e6 libctf: check for vasprintf
      ac2ff760303 libctf, archive: fix bad error message
      d50c08025d4 libctf, open: fix opening CTF in binaries with no symtab
      70447401740 libctf, dump: fix slice dumping
      8e795b46f58 libctf, dump: migrate towards dumping errors rather than truncation
      b255b35feb8 libctf, decl: avoid leaks of the formatted string on error
      c6e9a1e576c libctf, types: enhance ctf_type_aname to print function arg types
      8b37e7b63ed libctf, ld, binutils: add textual error/warning reporting for libctf
      b7190c821e5 libctf, types: ensure the emission of ECTF_NOPARENT
      ec388c16cd4 libctf: error out on corrupt CTF with invalid header flags
      67d4cc671b7 libctf: pass the thunk down properly when wrapping qsort_r
      e28591b3dfc libctf, next, hash: add dynhash and dynset _next iteration
      688d28f6214 libctf, next: introduce new class of easier-to-use iterators
      2399827bfa1 libctf: add ctf_ref
      9850ce4d7bb libctf: add ctf_forwardable_kind
      2c9ca36be17 libctf: move existing inlines into ctf-inlines.h
      77648241384 libctf, hash: introduce the ctf_dynset
      a49c6c6a656 libctf, hash: save per-item space when no key/item freeing function
      5ceee3dba34 libctf, hash: improve insertion of existing keys into dynhashes
      809f6eb3321 libctf: add new dynhash functions
      469e75b621f libctf: fix __extension__ with non-GNU C compilers
      9c23dfa5aa4 libctf: add ctf_archive_count
      e0325e2cede libctf: add ctf_member_count
      9b15cbb7891 libctf: add ctf_type_kind_forwarded
      01d9317436c libctf: add ctf_type_name_raw
      5ec7465fec8 libctf: having debugging enabled is unlikely
      601e455b758 libctf, archive: stop ctf_arc_bufopen triggering crazy unmaps
      96e3ec29664 libctf, types: ints, floats and typedefs with no name are invalid
      502e838ed96 libctf, types: support slices of anything terminating in an int
      dd987f00430 libctf, create: empty dicts are dirty to start with
      f47ca311356 libctf, create: fix addition of anonymous struct/union members
      ab769488e75 libctf, create: member names of "" and NULL should be the same
      2484ca436ac libctf, open: drop unnecessary historical wart around forwards
      437061996d8 libctf, types: allow ctf_type_reference of dynamic slices
      9943fa3a732 libctf, create: add explicit casts for variables' and slices' types
      afd78bd6f0a libctf, create: do not corrupt function types' arglists at insertion time
      2361f1c8591 libctf, create: support addition of references to the unimplemented type
      7eea9d3bdb0 libctf: restructure error handling to reduce relocations
      b64751cf0bc include, libctf: typo fixes
      df16e041dea Fix problems in CTF handling code exposed by the Coverity static analysis tool.
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-58.0.4
changelog:
  - Fix missing BPF JMP32 instruction class.
  - Backport from upstream commit c54a9b56696e584c2b8c7146caac337c063f5516.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-58.0.5
changelog:
  - Fix BPF relocations, update CGEN support, add simulator support.
  - Backport of the following Oracle-contributed upstream commits:
    - 78c1c35437a013c63acbff6926ff8d254e283d69
    - 12adf8053ba0b241d3973b46109842a1cbfa60de
    - b3db6d07be467fe86f5b4185a8fc7bec49380c1f
    - e9bffec9afc45cf7c49308f0b4b8cc6bf68f58f2
    - d8740be15930b820ab51d7a76695194022a83551
    - 7d8b91fda9fed423b91d4d43b19dd068457fe555
    - f1919c56e1ffce63c5dbd60c9b29c492be9d0787
    - d73be6116811aeaedd1863c2597ede78be3cf4e5
    - 3ee9565c95f49b6f9e80641f6fda51adffc3af1e
    - d844f10ac2735da8e5643236d7007a81098cbc2b
    - aebda2fbcb92b7538ca240effae598338b5d9625
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jose E. Marchesi <jose.marchesi@oracle.com> - 2.30-58.0.6
changelog:
  - Backport of the following BPF related upstream patches:
    4449c81a85eef44b10532032207e8db5858c00ee bpf: add xBPF ISA
    31b3f3e6e42083e411c47e789eb617070d5ba0e4 opcodes: Add missing entries to ebpf_isa_attr
    3ad6c19423eedf84dfd5ea83bc03933dff8a4579 bpf: simulator: correct div, mod insn semantics
  - Reviewed-by: David Faust <david.faust@oracle.com>


author: Guillermo E. Martinez <guillermo.e.martinez@oracle.com> - 2.30-58.0.7
changelog:
  - Backport from upstream commit d3d1cc7b13b4b1f11862d6b58174c81536fb3340
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.1
changelog:
  - Forward-port Oracle patches from 2.30-58.0.8
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.30-108.0.2
changelog:
  - Add ability to control the display of unicode characters.  (#2009172)
  - Backport fix for fencepost bug in CTF pptrtab usage causing coredumps
  - Backport test result fixes for new GCC-based CTF generation
    [Orabug: 33344570]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.36.1-1.0.1
changelog:
  - Update to binutils 2.36.1-1, forward port patches.
  - Enable building aarch64 cross.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.36.1-2.0.1
changelog:
  - For OL9, disable -lto=auto forced into cflags to resolve build issues.
  - Corrected bug number for unicode character display is (#2009183)
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.1
changelog:
  - Update to binutils 2.38 and patches accordingly. Enable all crosses.
    [Orabug: 35054435]
  - Remove bad thunk in binutils-testsuite-fixes.patch.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.2
changelog:
  - Backport BPF patches since 2.38 release, the following upstream commits:
     0dfdb5234a2 opcodes cgen: remove use of PTR
     7f6ebecd56e bpf: fix error conversion from long unsigned int to unsigned int [-Werror=overflow]
     5e4c7a839d1 BPF relocations review / refactoring
     551fde0ae16 Reloc howto access broken for BPF
     ff5a51b3772 gas: support for the BPF pseudo-c assembly syntax
     bba4624d035 gas: BPF pseudo-c syntax tests
     dcdec68b0b5 gas: documentation for the BPF pseudo-c asm syntax
     2b8c7766ea3 gas: bpf: fix tests for pseudo-c syntax
  - Replace bpf-atomics.patch with corrected version.
  - Reviewed-by: Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.3
changelog:
  - Refresh CTF patches from upstream. (Nick Alcock <nick.alcock@oracle.com>)
    - Fix errors in comments in <ctf.h> and <ctf-api.h>
    - Minor compiler warning and portability fixes
    - Fix (unlikely) crash-inducing uninitialized memory access and wild
      pointer overwrite when linking
    - Don't lose libctf errors in some situations when child dicts are in use
    - Fix generated CTF for conflicting types when linking the kernel
    - Fix the reported offsets of fields within unnamed structs/unions
      [Orabug: 35191322]
    - Reviewed-by: David Faust <david.faust@oracle.com>
  - Update BPF backport with the following upstream commits:
     5f784ec9277 Changed ld and gas BPF tests
     c9819077700 gas: fix building tc-bpf.c on s390x
     d218e7fedc7 DesCGENization of the BPF binutils port
     2f3dbc5fb5e bpf: opcodes, gas: support for signed register move V4 instructions
     c24fd9547fb bpf: opcodes, gas: support for signed load V4 instructions
     e8fc65713d6 bpf: disasemble offsets of value 0 as "+0"
     c2ca88d74ba bpf: add support for jal/gotol jump instruction with 32-bit target
     3ccfc0b46ca bpf: gas,opcodes: fix pseudoc syntax for MOVS* and LDXS* insns
     a50ead7822b bpf: gas: fix in manual that MOVS* pseudoc syntax uses = instead of s=
     5cbe549257b bpf: gas,include,opcode: add suppor for instructions BSWAP{16,32,64}
     055a4c8e0f1 bpf: Update atomic instruction pseudo-C syntax
     02f68ef297b bpf: Add atomic compare-and-exchange instructions
     fafcbd14a7e bpf: format not a string literal
     ac284430be5 bpf: gas: add negi and neg32i tests
     9d1e07bd19f bpf: accept # as an inline comment char
     249d4715e41 bpf: gas: support relaxation of V4 jump instructions
     648bd020a28 bpf: remove spurious comment from tc-bpf.c
     03460429385 bpf: gas: add field overflow checking to the BPF assembler
     1e18ffc9915 bpf: include, bfd, opcodes: add EF_BPF_CPUVER ELF header flags
     60a3da00bd5 objdump/opcodes: add syntax highlighting to disassembler output
  - Remove cross-binutils-bpf-atomics.patch, the changes are now part of the
    standard BPF backport (cross-binutils-bpf.patch).
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.4
changelog:
  - Backport the following BPF upstream commits [Orabug 35697460]:
     04896832b2e bpf: fix register NEG[32] instructions
     6bf6f9245ac bpf: use w regs in 32-bit non-fetch atomic pseudo-c
     5b512234c87 bpf: opcodes: fix regression in BPF disassembler
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.5
changelog:
  - Backport the following BPF upstream commits [Orabug 35728819]:
     5be1b787276 bpf: gas: consolidate handling of immediate overflows
     41aa80c5440 bpf: correct neg and neg32 instruction encoding
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 2.38-3.0.6
changelog:
  - Backport the following BPF commits [Orabug 36268623]:
      0c45feb159a bpf: there is no ldinddw nor ldabsdw instructions
      ba7c1e37cfb bpf: fix relocation addend incorrect symbol value
      ad4e57ab110 bpf: Added linker support for R_BPF_64_NODYLD32.
      dd2947e76aa gas: support double-slash line comments in BPF assembly
      4c5f2370fd1 gas: change meaning of ; in the BPF assembler
      97b29a61f7f bpf: Fixed register parsing disambiguating with possible symbol.
      8fbb497b720 gas: bpf: do not allow referring to register names as symbols in operands
      e5d6f72eb3d bpf: avoid creating wrong symbols while parsing
      d3beaa140dd gas: bpf: new test for MOV with C-like numbers ll suffix
      e3e1e1231d7 gas: tc-bpf.c: fix formatting of comment
      8b476884c3c opcodes: bpf-dis.c: fix typo in comment
      3afe50fe197 gas: tc-sparc.c: undo spurious change in 5be1b787276d2adbe85ae7febc709ca517b62f08
  - Backport the following CTF commits [Orabug 36252571]:
      fdb4c2e02e6 libctf: adding CU mappings should be idempotent
      cd4a8fc4f0b libctf: fix creation-time parent/child dict confusions
      29736fc507c libctf: check for problems with error returns
      0f79aa900f3 libctf: Return CTF_ERR in ctf_type_resolve_unsliced PR 30836
      998a4f589d6 libctf: Sanitize error types for PR 30836
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Jakub Martisko <jamartis@redhat.com> - 3.9.0-13
changelog:
  - Add explicit requires to the devel subpackages
  - Note: the the cblas64 seems to be linked against the libblas (not the 64 version)
  - this is not a regression, however in the Fedora it uses libblas64 instead.
  - Resolves: RHEL-5768


author: Jan Friesse <jfriesse@redhat.com> - 1.0-6.ac1d34c.git.5
changelog:
  - Remove net-tools (netstat) dependency and replace it with iproute (ss)
  - Disable running tests during build by default (conditional run_build_tests)


author: Jan Friesse <jfriesse@redhat.com> - 1.0-249.1.977726e.git
changelog:
  - Resolves: rhbz#1961216

  - Do not include unit-test by default
  - Rebase to newest upstream snapshot


author: Alexander Bokovoy <abokovoy@redhat.com> - 6.11-1
changelog:
  - Update to v6.11 release
  - Resolves: rhbz#1876400 - CVE-2020-14342 - cifs-utils: shell command injection


author: Jonathan Lebon <jonathan@jlebon.com> - 6.11-2
changelog:
  - Split out -info subpackage for smb2-quota and smbinfo
    https://bugzilla.redhat.com/show_bug.cgi?id=1909288


author: Paulo Alcantara <paalcant@redhat.com> - 7.0-4
changelog:
  - mount.cifs.rst: add missing reference for sssd
  - mount.cifs.rst: update section about xattr/acl support
  - Resolves: RHEL-22495


author: <thalman@redhat.com> - 0.6.1-16
changelog:
  - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual
    Authentication Tag provided in the JWE
    Resolves: rhbz#2223308


author: Jan Friesse <jfriesse@redhat.com> - 3.1.10-1.1
changelog:
  - Resolves: RHEL-163816
  - Resolves: RHEL-163837

  - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091)
  - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.4-1
changelog:
  - Related: rhbz#1948974
  - Resolves: rhbz#1967485

  - New upstream release (rhbz#1948974)
  - stats: fix crash when iterating over deleted keys (rhbz#1967485)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-3
changelog:
  - Resolves: rhbz#2024652
  - Resolves: rhbz#2024657

  - totem: Add cancel_hold_on_retransmit config option (rhbz#2024652)
  - merge upstream commit cdf72925db5a81e546ca8e8d7d8291ee1fc77be4 (rhbz#2024652)
  - totemsrp: Switch totempg buffers at the right time (rhbz#2024657)
  - merge upstream commit e7a82370a7b5d3ca342d5e42e25763fa2c938739 (rhbz#2024657)


author: Jan Friesse <jfriesse@redhat.com> - 3.1.5-4
changelog:
  - Resolves: rhbz#2070623

  - logrotate: Use copytruncate method by default (rhbz#2070623)
  - merge upstream commit 04362046c4a9d7307feb5b68341d567b7d0b94d6 (rhbz#2070623)


author: Jan Friesse <jfriesse@redhat.com> - 3.0.2-2
changelog:
  - Resolves: rhbz#2180045

  - qdevice: Destroy non blocking client on failure (rhbz#2180045)
  - merge upstream commit 4331c7d5650a8bf44c16512419f1954d0ef96df5 (rhbz#2180045)


author: David Faust <david.faust@oracle.com> - 11.2.1-2.0.1
changelog:
  - Add the following update from native gcc:
    Tue Jan 18 2022 Qing Zhao <qing.zhao@oracle.com>
    + Add more fixes for -ftrivial-auto-var-init support from GCC12
  - Reviewed-by: Qing Zhao <qing.zhao@oracle.com>


author: David Faust <david.faust@oracle.com> - 11.2.1-3.0.1
changelog:
  - Add two more fixes for -ftrivial-auto-var-init bogus warnings from GCC12
    PR104550 and PR102276.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.1
changelog:
  - Upgrade to GCC 12.1.1, match EPEL version and patch level.
  - Enable all crosses.
  - Backport BPF and BTF patches since GCC 12.1, upstream commits:
    + 2df74a891ee bpf: facilitate constant propagation of function addresses
    + ddbe163295b bpf: define __bpf__ as well as __BPF__ as a target macro
    + 8d66fc30fa9 bpf: handle anonymous members in CO-RE reloc [PR106745]
    + 91985be7c2d bpf: remove unused variables from bpf_expand_{prologue,epilogue}
    + dddda0dd3d8 bpf: add preserve_field_info builtin
    + e2468573832 bpf: cleanup missed refactor
    + ba9fd168753 bpf: Use enum for resolved overloaded builtins
    + cc2df4391b8 bpf: avoid possible use of uninitialized variable
    + cdc00c84859 bpf: add define_insn for bswap
    + f7111d5d55d bpf: correct bpf_print_operand for floats [PR108293]
    + 7f748531f65 bpf: disable -fstack-protector in BPF
    + 08b30c74bd2 btf: emit linkage information in BTF_KIND_FUNC entries
    + 380f07fe68e btf: do not use the CHAR `encoding' bit for BTF
    + c42410400c9 btf: Add support to BTF_KIND_ENUM64 type
    + 58580f5093e btf: add 'extern' linkage for variables [PR106773]
    + 1fc2ef20480 btf: fix 'extern const void' variables [PR106773]
    + 73e7495846e btf: correct generation for extern funcs [PR106773]
    + c348a717213 bpf: fix memory constraint of ldx/stx instructions [PR108790]
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.2
changelog:
  - Bundle libisl to avoid dependency issues.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.4
changelog:
  - CVE-2023-4039 mitigation.
    Orabug 35752046.
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: David Faust <david.faust@oracle.com> - 12.1.1-2.0.5
changelog:
  - Backport the following supporting commits from upstream:
      2c05a2d1a8e c: use CONST_DECL for enumerators in TYPE_VALUES
      f25efe50374 docs: Add @defbuiltin family of helpers
  - Backport the following BPF and BTF related commits:
      f995f567730 bpf: fix zero_extendqidi2 ldx template
      1959aeee1e0 bpf: emit empty epilogues in naked functions
      f64448f4ff1 bpf: add constant pointer to helper-skb-ancestor-cgroup-id.c test
      bc77c035c45 Add -gno-strict-dwarf to dg-options in various btf enum tests
      dfc88fb51c1 bpf: Correct BTF for kernel_helper attributed decls
      4a5bb8bc1c5 btf: print string offset in comment
      1502d724df8 btf: change encoding of forward-declared enums [PR111735]
      b8cf266f4ca btf: avoid wrong DATASEC entries for extern vars [PR112849]
      b6abc5dbfa5 BTF: fix PR debug/112656
      9b6e2cb7e61 BTF: fix PR debug/112768
      b506834e7fa bpf: quote section names whenever necessary in assembly output
      72e212c0290 bpf: change ASM_COMMENT_START to '#'
      86903dd94e6 testsuite: move gcc.c-torture/compile/libcall-2.c to gcc.target/i386/libcall-1.c
      4ed0740c6e8 testsuite: fix gcc.c-torture/compile/libcall-2.c in -m32
      880ae958fad varasm.cc: refer to assemble_external_libcall only ifdef ASM_OUTPUT_EXTERNAL
      f31a019d116 Emit funcall external declarations only if actually used.
      099b15e2bdb Fixed problem with BTF defining smaller enums.
      19cc5857e2c bpf: Forces __buildin_memcmp not to generate a call upto 1024 bytes.
      a789af1ca27 bpf: Corrected condition in core_mark_as_access_index.
      61e060c4dce bpf: Delayed the removal of the parser enum plugin handler.
      b6db325ac3e bpf: remove bpf-helpers.h
      8329ba35974 bpf: fix pseudo-c asm emitted for *mulsidi3_zeroextend
      9815ef77313 bpf: testsuite: fix expected regexp in gcc.target/bpf/ldxdw.c
      327d38f1018 bpf: Improvements in CO-RE builtins implementation.
      721f7e2c4e5 Fix tests for PR 106537.
      e2c42860b6b bpf: neg instruction does not accept an immediate
      35b5762a740 bpf: bump maximum frame size limit to 32767 bytes
      e1f45bea274 Add warning options -W[no-]compare-distinct-pointer-types
      b7c50f68f26 bpf: support `naked' function attributes in BPF targets
      5da4c0b85a9 bpf: remove useless define_insn for extendsisi2
      489e1adf779 bpf: fix pseudoc w regs for small modes [PR111029]
      f93a612fc45 bpf: liberate R9 for general register allocation
      6103df1e4fa bpf: allow exceeding max num of args in BPF when always_inline
      e7cae4f873f bpf: Fixed GC mistakes in BPF builtins code.
      c2a447d8404 bpf: CO-RE builtins support tests.
      e0a81559c19 bpf: Implementation of BPF CO-RE builtins
      9f5372707f9 bpf: disable tail call optimization in BPF targets
      14dab1a1bcc bpf: ISA V4 sign-extending move and load insns [PR110782,PR110784]
      9cbf4286a9d bpf: minor doc cleanup for command-line options
      31d18ff4424 bpf: correct pseudo-C template for add3 and sub3
      db189d02ef1 bpf: add v3 atomic instructions
      590a8287bf2 bpf: fix generation of neg and neg32 BPF instructions
      8d36a0f5952 bpf: don't print () in bpf_print_operand_address
      be16bb885ef bpf: add pseudo-c asm dialect for "nop"
      4be3919fb75 bpf: sdiv/smod are now part of BPF V4
      da445a58582 bpf: remove -mkernel option and BPF_KERNEL_VERSION_CODE
      f1e34551e4d bpf: make use of the bswap{16,32,64} V4 BPF instruction
      77d0f9ec380 bpf: pseudo-c assembly dialect support
      13ed106723c bpf: fixed template for neg (added second operand)
      53d12ecd624 bpf: enable instruction scheduling
      934da923a72 btf: fix bootstrap -Wformat errors [PR110073]
      f2e60a00c7c btf: Fix -Wformat errors
      7aae58b04b9 btf: improve -dA comments for testsuite
      00887865398 btf: be clear when record size/type is not used
  - Orabug 36268583
  - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Miro Hrončok <mhroncok@redhat.com> - 1.2.8-9
changelog:
  - Subpackage python2-dbus has been removed
    See https://fedoraproject.org/wiki/Changes/RetirePython2


author: Alexey Tikhonov <atikhono@redhat.com> - 0.6.1-51
changelog:
  - Resolves: rhbz#1938708 - review of important potential issues detected by static analyzers in ding-libs-0.6.1-47.el9


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-2
changelog:
  - edk2-NetworkPkg-IScsiDxe-wrap-IScsiCHAP-source-files-to-8.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-simplify-ISCSI_CHAP_AUTH_DATA.In.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-clean-up-ISCSI_CHAP_AUTH_DATA.Ou.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-clean-up-library-class-dependenc.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-fix-potential-integer-overflow-i.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-assert-that-IScsiBinToHex-always.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-reformat-IScsiHexToBin-leading-c.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-hex-parsing.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-fix-IScsiHexToBin-buffer-overflo.patch [bz#1961100]
  - edk2-NetworkPkg-IScsiDxe-check-IScsiHexToBin-return-value.patch [bz#1961100]
  - edk2-redhat-build-UefiShell.iso-with-xorriso-rather-than-.patch [bz#1971840]
  - Resolves: bz#1961100
    (edk2: remote buffer overflow in IScsiHexToBin function in NetworkPkg/IScsiDxe [rhel-9.0])
  - Resolves: bz#1971840
    (Please replace genisoimage with xorriso)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-3
changelog:
  - edk2-OvmfPkg-Remove-PrintDxe-RHEL-only.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-EbcDxe-RHEL-only.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-EbcDxe-RHEL-only.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-VirtioGpu-device-driver-RHEL-only.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-QemuRamfbDxe-display-device-driver-RH.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-QemuRamfbDxe-display-device-driver.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-NvmExpressDxe-device-driver-RHEL-only.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-NvmExpressDxe-device-driver-RHEL-o.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL-on.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-VirtioFsDxe-filesystem-driver-RHEL.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-UdfDxe-filesystem-driver-RHEL-only.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-TftpDynamicCommand-from-shell-RHEL-on.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-TftpDynamicCommand-from-shell-RHEL.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-HttpDynamicCommand-from-shell-RHEL-on.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-HttpDynamicCommand-from-shell-RHEL.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-LinuxInitrdDynamicShellCommand-RHEL-o.patch [bz#1967747]
  - edk2-ArmVirtPkg-Remove-LinuxInitrdDynamicShellCommand-RHE.patch [bz#1967747]
  - edk2-OvmfPkg-Remove-Xen-Drivers-RHEL-only.patch [bz#1967747]
  - Resolves: bz#1967747
    (edk2: review features and drivers shipped in RHEL)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-4
changelog:
  - edk2-spec-remove-Group-and-defattr.patch [bz#1983789]
  - edk2-spec-Add-BuildRequires-make.patch [bz#1983789]
  - edk2-spec-don-t-conditionalize-package-definitions.patch [bz#1983789]
  - edk2-spec-Use-autosetup-with-our-required-git-config-opti.patch [bz#1983789]
  - edk2-spec-Replace-ifarch-else-conditionals-with-build_XXX.patch [bz#1983789]
  - edk2-spec-Move-D-TPM_ENABLE-to-common-CC_FLAGS.patch [bz#1983789]
  - edk2-spec-Add-qemu_package-and-qemu_binary.patch [bz#1983789]
  - edk2-spec-Remove-extra-true-at-end-of-check.patch [bz#1983789]
  - edk2-spec-Move-check-to-between-install-and-files.patch [bz#1983789]
  - edk2-spec-Add-qosb_testing-macro.patch [bz#1983789]
  - edk2-spec-Split-out-build_iso-function.patch [bz#1983789]
  - edk2-spec-Replace-RPM_BUILD_ROOT-with-buildroot.patch [bz#1983789]
  - edk2-spec-Use-make_build-macro.patch [bz#1983789]
  - edk2-spec-Factor-out-OVMF_FLAGS-and-OVMF_SB_FLAGS.patch [bz#1983789]
  - edk2-spec-Don-t-put-build-output-in-the-top-directory.patch [bz#1983789]
  - edk2-spec-Centralize-non-firmware-install-files-at-the-to.patch [bz#1983789]
  - Resolves: bz#1983789
    (Make spec easier to share with Fedora)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-5
changelog:
  - edk2-MdeModulePkg-PartitionDxe-Ignore-PMBR-BootIndicator-.patch [bz#1988760]
  - Resolves: bz#1988760
    (edk2 does not ignore PMBR protective record BootIndicator as required by UEFI spec)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-7
changelog:
  - edk2-fix-tpm-build-options.patch [bz#2000396]
  - Resolves: bz#2000396
    ([aarch64][RHEL9] The lack of TPMFinalLog in efi causes the tpm self-test in the guest to fail)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20210527gite1999b264f1f-8
changelog:
  - edk2-Revert-advertise-OpenSSL-on-TianoCore-splash-screen-.patch [bz#2027286]
  - Resolves: bz#2027286
    (Remove the customized boot splash logo patch)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-1
changelog:
  - Rebase to latest upstream release [bz#2018388]
  - Resolves: bz#2018388
    ([rebase] update edk2 to nov '21 release (edk2-stable202111xx))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-2
changelog:
  - edk2-OvmfPkg-remove-unused-TPM-options-from-MicrovmX64.ds.patch [bz#1935497]
  - edk2-OvmfPkg-move-tcg-configuration-to-dsc-and-fdf-includ.patch [bz#1935497]
  - edk2-OvmfPkg-drop-TPM_CONFIG_ENABLE.patch [bz#1935497]
  - edk2-OvmfPkg-create-Tcg12ConfigPei.inf.patch [bz#1935497]
  - edk2-OvmfPkg-rework-TPM-configuration.patch [bz#1935497]
  - edk2-spec-adapt-specfile-to-build-option-changes-disable-.patch [bz#1935497]
  - Resolves: bz#1935497
    (edk2  implements and/or uses the deprecated MD5 and SHA-1 algorithms by default)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-3
changelog:
  - edk2-spec-build-amdsev-variant.patch [bz#2054661]
  - edk2-OvmfPkg-AmdSev-SecretPei-Mark-SEV-launch-secret-area.patch [bz#2041755]
  - Resolves: bz#2054661
    (RFE:  Support measured AMD SEV boot with kernel/initrd/cmdline in OVMF)
  - Resolves: bz#2041755
    (Mark SEV launch secret area as reserved)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220126gitbb1bba3d77-4
changelog:
  - edk2-Revert-OvmfPkg-Remove-NvmExpressDxe-device-driver-RH.patch [bz#2044196]
  - edk2-Revert-ArmVirtPkg-Remove-NvmExpressDxe-device-driver.patch [bz#2044196]
  - Resolves: bz#2044196
    (RFE: [nvme-vfio] The virt-install interface throws info "Failed to set new efi boot target"  when install a vm on a hostdev nvme disk)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220221gitb24306f15d-1
changelog:
  - Rebae to edk-stable-202202 [bz#2056910]
  - Resolves: bz#2056910
    ([rebase] update edk2 to feb '22 release (edk2-stable202202xx))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220221gitb24306f15d-2
changelog:
  - edk2-Revert-ArmVirtPkg-Remove-QemuRamfbDxe-display-device.patch [bz#2087220]
  - edk2-Revert-OvmfPkg-Remove-QemuRamfbDxe-display-device-dr.patch [bz#2087220]
  - Resolves: bz#2087220
    (VNC display show "Guest has not initialized the display" when using ramfb + ovmf)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220526git16779ede2d36-1
changelog:
  - Rebase to edk2-stable-202205 [bz#2074831]
  - Resolves: bz#2074831
    (rebase edk2 to May 2022 release (edk2-stable202205))


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220526git16779ede2d36-2
changelog:
  - edk2-OvmfPkg-Update-target-machines-config.patch [bz#2090752]
  - Resolves: bz#2090752
    (Add RHEL 8.5, 8,6 and 9.x machine types to firmware descriptor files 50-edk2-ovmf-{amdsev,cc}.json)


author: Miroslav Rezanina <mrezanin@redhat.com> - 20220526git16779ede2d36-3
changelog:
  - edk2-openssl-jump-to-8.7.0-branch-2022-07-22.patch [bz#2074843]
  - edk2-ovmf-vars-generator-Use-max-cpu.patch [bz#2111567]
  - Resolves: bz#2074843
    (edk2: sync openssl sources with rhel openssl rpm)
  - Resolves: bz#2111567
    (EDK2 build stuck with qemu-kvm-7.0.0-8.el9 or newer)


author: Felipe Borges <feborges@redhat.com> - 40.1-3
changelog:
  - Split evince-previewer into its own package
  - See https://github.com/fedora-silverblue/issue-tracker/issues/122


author: Marek Kasik <mkasik@redhat.com> - 40.1-5
changelog:
  - Use tmp dir as containing folder for non-native files
  - Backport fixes for issues found by Coverity Scan
  - Fix some other issues found by Coverity Scan
  - Resolves: #1975150


author: Alan Steinberg <alan.steinberg@oracle.com> - 28-10.0.1
changelog:
  - Updated Summary and description to be production neutral in spec file
  - Replaced default-bookmarks.html with Oracle's default-bookmarks.html [Orabug: 30069264]


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-33
changelog:
  - fence_virt: add note that reboot-action doesnt power on nodes that
    are powered off
    Resolves: rhbz#2132008


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-36
changelog:
  - fence_virtd: add link to uri examples and uri w/socket path
    example for when VMS are run as non-root user to manpage
    Resolves: rhbz#2138823


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-42
changelog:
  - fencing/fence_wti: add --plug-separator to be able to avoid
    characters that are in node name(s)
    Resolves: rhbz#2152107


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-43
changelog:
  - fence_vmware_soap: set login_timeout lower than default
    pcmk_monitor_timeout (20s) to remove tmp dirs
    Resolves: rhbz#2122944


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
changelog:
  - bundled dateutil: fix tarfile CVE-2007-4559
    Resolves: rhbz#2217902
  - fence_ipmilan: fix typos in metadata
    Resolves: rhbz#2224267


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-56
changelog:
  - fence_scsi: fix registration handling if ISID conflicts
    Resolves: RHEL-5396
  - bundled certifi: fix CVE-2023-37920
    Resolves: RHEL-9446


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-60
changelog:
  - all agents: update metadata in non-I/O agents to Power or Network
    fencing
    Resolves: RHEL-14030


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62
changelog:
  - bundled urllib3: fix CVE-2023-45803
    Resolves: RHEL-18139
  - bundled pycryptodome: fix CVE-2023-52323
    Resolves: RHEL-20917
  - bundled jinja2: fix CVE-2024-22195
    Resolves: RHEL-21345


author: Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-62.1
changelog:
  - ha-cloud-support: upgrade bundled pyroute2 libs to fix issue in
    gcp-vpc-move-route's stop-action
    Resolves: RHEL-29668


author: Richard Hughes <richard@hughsie.com> 1.2-7
changelog:
  - Disable JLink support to remove one extra dep we are not going to support
  - Resolves: rhbz#1948597


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.9.18-0.6.20200715git0cd2e4a
changelog:
  - Use newest code from upstream, fixes build
  - Update foma-harden-build.patch
  - Package the pkgconfig file


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.9.18-0.9.20200928gitb44022c
changelog:
  - Fix typo in spec
  - Rewrite patch, name it foma-harden-build-fedora.patch and explain the need for it


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 0.10.0-0.1.20210601gitdfe1ccb
changelog:
  - Upstream "release" 0.10.0
  - The release has not been made into a tarball yet
  - Fixes bugs, including segfaults, so I'm using the git checkout in Fedora


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-1
changelog:
  - Update to 20201107 version (#1895648)
  - removed %gittag0 macro, as it cause problem to automated package update script


author: Parag Nemade <pnemade AT redhat DOT com> - 20201107-7
changelog:
  - Resolves: RHEL-138206
    CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138228
    CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
  - Resolves: RHEL-138158
    CVE-2025-15269 SFD File Parsing Use-After-Free


author: Nicolas Mailhot <nim@fedoraproject.org>
changelog:
  - 3.0.3-1
  🐞 Fix bugs in the 3.0.2 refactoring
  - 3.0.2-1
  🐞 Workaround Fedora problems created by rpm commit 93604e2
     harder


author: Peter Hutterer <peter.hutterer@redhat.com> 1.2.1-2
changelog:
  - Fix the Conflicts line to properly conflict with the -50 font-utils,
    without a {?dist} <= doesn't work as expected.


author: Michel Lind <salimma@centosproject.org> - 2.10.4-10
changelog:
  - Fix for CVE-2025-27363 out-of-bound write vulnerability
  - Patch initially by Marc Deslauriers of Canonical
  - https://www.openwall.com/lists/oss-security/2025/03/14/3
  - Adjusted for EL9 by Jonathan Wright of AlmaLinux
  - and a member of the Meta security team
  - Resolves: RHEL-83105


author: Marek Kasik <mkasik@redhat.com> - 2.10.4-1
changelog:
  - Update to 2.10.4
  - Test bitmap size earlier for PNGs
  - Fix memory leak in pngshim.c
  - Enable man pages for demos
  - Resolves: #1887084, #1890211


author: Akira TAGOH <tagoh@redhat.com> - 2.10.4-3
changelog:
  - Enable HarfBuzz support
  - Add bootstrap without HarfBuzz
  - Resolves: #1853937
  - Resolves: #1906714


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
changelog:
  - Forward-port Oracle patches for ol9-u4
    Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    Oracle history:
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Patsy Griffin <patsy@redhat.com> - 2.34-122
changelog:
  - elf: Clarify and invert second argument of _dl_allocate_tls_init
  - elf: Avoid re-initializing already allocated TLS in dlopen (RHEL-36148)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
changelog:
  - Forward-port Oracle patches for ol9-u5
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1
changelog:
  - Forward-port Oracle patches for ol9-u6
    Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    February-18-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-160.0.1
    - Forward-port Oracle patches for ol9-u6 DP
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-12-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
    - Forward-port Oracle patches for ol9-u5
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-231.0.1
changelog:
  - Forward-port Oracle patches for ol9-u7
    Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    Oracle history:
    September-8-2025 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-228.0.1
    - Forward-port Oracle patches for ol9-u7
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-217.0.1
    - Forward-port Oralce patches for ol9-u7
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.23
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    June-30-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.20
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    June-9-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.19
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-17-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.14
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-6-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1
    - Forward-port Oracle patches for ol9-u6
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-18-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-160.0.1
    - Forward-port Oracle patches for ol9-u6 DP
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-12-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
    - Forward-port Oracle patches for ol9-u5
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Frédéric Bérat <fberat@redhat.com> - 2.34-265
changelog:
  - Fix null pointer dereference and assertion failures in __nss_database_get
    (bug 28940) (RHEL-150269)


author: Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-266.0.1
changelog:
  - Forward-port Oracle patches for ol9-u8
    Reviewed-by: David Faust <david.faust@oracle.com>
    Oracle history:
    March-25-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-262.0.1
    - Forward-port Oracle patches for ol9-u8
      Reviewed-by: David Faust <david.faust@oracle.com>
    March-6-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-256.0.1
    - Forward-port Oracle patches for ol9-u8
      Reviewed-by: David Faust <david.faust@oracle.com>
    February-3-2026 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-245.0.1
    - Forward-port Oracle patches for ol9-u8
      Reviewed-by: David Faust <david.faust@oracle.com>
    November-14-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-231.0.1.1
    - Forward-port Oracle patches for ol9-u7
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-24-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-231.0.1
    - Forward-port Oracle patches for ol9-u7
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-8-2025 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-228.0.1
    - Forward-port Oracle patches for ol9-u7
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-217.0.1
    - Forward-port Oralce patches for ol9-u7
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    August-5-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.23
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    June-30-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.20
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    June-9-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.19
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: David Faust <david.faust@oracle.com>
    May-17-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1.14
    - Forward-port Oracle patches for ol9-u6
      Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-6-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-168.0.1
    - Forward-port Oracle patches for ol9-u6
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-18-2025 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-160.0.1
    - Forward-port Oracle patches for ol9-u6 DP
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    November-12-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-125.0.1.1
    - Forward-port Oracle patches for ol9-u5
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-1-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.4
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    August-26-2024 Jose E. Marchesi <jose.marchesi@oracle.com> - 2.34-100.0.1.3
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: David Faust <david.faust@oracle.com>
    May-24-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1.2
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-30-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4
      Reviewed by: Indu Bhagat <indu.bhagat@oracle.com>
    March-28-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-100.0.1
    - Forward-port Oracle patches for ol9-u4-beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March 15 2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.12
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    February-26-2024 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.2.7
    - OraBug 36322437 getaddrinfo does not return correct ipv6 address and family
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-24-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-83.0.1.7
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    October-4-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-82.0.1
    - Forward-port Oracle patches for ol9
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-18-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.2
    - OraBug 35305078 Glibc tunable to disable huge pages on pthread_create stacks
    - Created tunable glibc.pthread.stack_hugetlb to control when hugepages
      can be used for stack allocation.
    - In case THP are enabled and glibc.pthread.stack_hugetlb is set to
      0, glibc will madvise the kernel not to use allow hugepages for stack
      allocations.
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    March-28-2023 Cupertino Miranda <cupertino.miranda@oracle.com> - 2.34-60.0.1
    - Merge Oracle patches for ol9-u2 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    September-28-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-40.0.1
    - Merge Oracle patches for ol9-u1 beta
      Reviewed by: Jose E. Marchesi <jose.marchesi@oracle.com>
    April-25-2022 Patrick McGehearty <patrick.mcgehearty@oracle.com> - 2.34-28.0.1
    - Merge Oracle patches with ol9 beta
    - Reviewed-by: Jose E. Marchesi <jose.marchesi@oracle.com>


author: Arjun Shankar <arjun@redhat.com> - 2.34-53
changelog:
  - Sync with upstream branch release/2.34/master,
    commit a4217408a3d6050a7f42ac23adb6ac7218dca85f:
  - Apply asm redirections in syslog.h before first use [BZ #27087]
  - _Static_assert needs two arguments for compatibility with GCC before 9


author: Florian Weimer <fweimer@redhat.com> - 2.34-57
changelog:
  - Sync with upstream branch release/2.34/master,
    commit 6484ae5b8c4d4314f748e4d3c9a9baa5385e57c5
  - malloc: Fix -Wuse-after-free warning in tst-mallocalign1 [BZ #26779]
  - s_sincosf.h: Change pio4 type to float [BZ #28713]
  - math: Properly cast X_TLOSS to float [BZ #28713]
  - Regenerate ulps on x86_64 with GCC 12
  - Avoid -Wuse-after-free in tests [BZ #26779].
  - Fix build of nptl/tst-thread_local1.cc with GCC 12
  - Fix stdio-common tests for GCC 12 -Waddress
  - Fix stdlib/tst-setcontext.c for GCC 12 -Warray-compare
  - resolv: Avoid GCC 12 false positive warning [BZ #28439].
  - intl: Avoid -Wuse-after-free [BZ #26779]
  - elf: Drop elf/tls-macros.h in favor of __thread and tls_model attributes [BZ #28152] [BZ #28205]
  - time: Set daylight to 1 for matching DST/offset change (RHBZ#2155352)
  - elf/tst-tlsopt-powerpc fails when compiled with -mcpu=power10 (BZ# 29776)
  - time: Use 64 bit time on tzfile
  - nscd: Use 64 bit time_t on libc nscd routines (BZ# 29402)
  - nis: Build libnsl with 64 bit time_t
  - Use LFS and 64 bit time for installed programs (BZ #15333)


author: Felipe Borges <feborges@redhat.com> - 40.0.1-10
changelog:
  - Default power-button-action to poweroff on servers
    (except when power-button-action=nothing)
    Resolves: #1885639


author: Ray Strode <rstrode@redhat.com> - 40.0.1-13
changelog:
  - Revert hard dependency on subscription-manager since we're going to put it in gnome-session instead
    Related: #2175675


author: Ray Strode <rstrode@redhat.com> - 40.0.1-15
changelog:
  - Fix crashers in g-s-d and control-center related to
    making subscription-manager a soft dep
    Related: RHEL-20449


author: Felipe Borges <feborges@redhat.com> - 40.0.1-22
changelog:
  - Use mount path in "Low disk" notification when multiple mount points have same name
    Related: RHEL-11910


author: Daniel P. Berrangé <berrange@redhat.com> - 1.2.0-1
changelog:
  - Update to 1.2.0 release
  - Drop outdated conditionals
  - Drop outdated ldconfig script
  - Use versioned obsoletes tags
  - Resolves: rhbz#1949474


author: Mike FABIAN <mfabian@redhat.com> - 1.12.4-1
changelog:
  - Update to 1.12.4
  - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
    zh_CN is 100% complete now.


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-1
changelog:
  - Update to 1.12.5
  - Return False in _execute_command_commit_candidate_number(self, number)
    if number out of range
  - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
  - remove Use-from-unittest-import-mock-instead-of-just-import.patch
    (included upstream)
  - Update translations from Weblate (New translation for Sinhala (si) started)


author: Mike FABIAN <mfabian@redhat.com> - 1.12.5-3
changelog:
  - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
  - Improve CI tests and add gating.yaml


author: Mike FABIAN <mfabian@redhat.com> - 1.3.10-1
changelog:
  - update to latest upstream 1.3.10
  - latex: add most of Unicode 9.0 block Mathematical Alphanumeric Symbols
    (thanks to Pavel Zorin-Kranich)


author: Mike FABIAN <mfabian@redhat.com> - 1.3.11-1
changelog:
  - update to latest upstream 1.3.11
  - Add Vietnamese input methods Telex and VNI
    (thanks to Nguyễn Gia Phong <vn.mcsinyx@gmail.com>)
  - Extend russian translit for latin slavic layouts
    (thanks to Marek Nečada <marek@necada.org>)


author: Mike FABIAN <mfabian@redhat.com> - 1.3.12-1
changelog:
  - update to latest upstream 1.3.12
  - Integrate traditional Mongolian (mongol_bichig.txt) table
    (Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/23)
  - improvements in the latex.txt table
    (https://github.com/moebiuscurve/ibus-table-others/pull/22)
  - improvements in the mathwriter-ibus.txt table


author: Christian Kellner <ckellner@redhat.com> - 49-1
changelog:
  - New upstream release 49
  - Switch to meson build system.
  - Ship the pkg-config file.
  - Remove ldconfig scriptlets.


author: Chris Leech <cleech@redhat.com> - 6.2.1.9-18.gita65a472
changelog:
  - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
  - new meson build system, sync with fedora packaging


author: EL Errata <el-errata_ww@oracle.com> - 6.2.1.11-0.git4b3e853.0.1
changelog:
  - Correct the typos in email addresses in changelog in OL9.5 [Orabug: 37910459]
  - Change the order of restart iscsi services in spec file [Orabug: 37749406]
  - Rate limit session reopen and initial connect log messages [Orabug: 37681887]
  - Change the log_level of log_debug message in actor_delete()
  - Remove incorrect keyword from install section in iscsi-init [Orabug: 37544462]
  - Add python3-rpm-macros to BuildRequires
  - Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
  - Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Chris Leech <cleech@redhat.com> - 6.2.1.2-1.git13e7f58
changelog:
  - iscsiadm overflow regression when discovering many targets at once
  - check for invalid session id during stop connection
  - add ability to attempt target logins asynchronously


author: Darren Archibald <darren.archibald@oracle.com> - 6.2.1.4-2.git2a8f9d8.0.1
changelog:
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: EL Errata <el-errata_ww@oracle.com> - 6.2.1.4-3.git2a8f9d8.0.1
changelog:
  - Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
  - Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Alex Burmashev <alexander.burmashev@oracle.com> - 6.2.1.9-18.gita65a472.0.1
changelog:
  - Add python3-rpm-macros to BuildRequires
  - Allow systemd-remount-fs complete before iscsi-init.service [Orabug: 34325406]
  - Allow iscsi-init.service to start after local-fs.target [Orabug: 33930979]
  - Rename 0008-use-red-hat-name.patch to 0008-use-oracle-for-name.patch
    and use com.oracle in prefix
  - Complete the following tasks to address [Orabug: 29311709]
    The following patches address [Orabug: 29128380] (Jianchao Wang)
    Add 0032-Add-Requires-iscsid.service-in-iscsi.service.patch
    The following patch addresses [Orabug: 29306329]
    Add 0033-Update-systemd-to-always-restart-iscsid-service.patch
  - Print vital iscsid messages on console using rsyslog facility. This
    is particularly useful when using iscsi boot and there is a connection
    or session issue. [Orabug: 29503805]
  - Modify iscsi-mark-root-nodes script to only update node.startup to onboot
    for iscsi sessions that are active during boot. [Orabug: 29653342]
  - Modify iscsi-mark-root nodes script to not mark nodes when iscsi.service
    is restarted. [Orabug: 29851447]
  - Modify patches 0007 and 0032-0035 to apply cleanly
  - Tune TimeoutSec of iscsid service to 10 minutes [Orabug: 29869817]


author: Gulam Mohamed <gulam.mohamed@oracle.com> - 6.2.1.9-18.gita65a472.0.3
changelog:
  - Rate limit session reopen and initial connect log messages [Orabug: 37681887]
  - Change the log_level of log_debug message in actor_delete()


author: Chris Leech <cleech@redhat.com> - 0.101-1
changelog:
  - update to 0.101
  - bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
  - setup new upstream tests as gating


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u412-b01 (EA)
  - Update release notes for shenandoah-8u412-b01.
  - Switch to EA mode.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.1.ea
changelog:
  - Introduce tar_opts to avoid repetition of lengthy tar creation options
  - Normalise whitespace
  - Turn off xz multi-threading on i686 as it fails with an out of memory error


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b01-0.2.ea
changelog:
  - Move to upstream tag style (shenandoah8ux-by) in preparation for eventually moving back to official sources
  - generate_source_tarball.sh: Rename JCONSOLE_JS_PATCH{,_DEFAULT} to JCONSOLE_PATCH{,_DEFAULT} for brevity
  - generate_source_tarball.sh: Adapt OPENJDK_LATEST logic to work with 8u Shenandoah fork
  - generate_source_tarball.sh: Adapt version logic to work with 8u
  - generate_source_tarball.sh: Add quoting for SCRIPT_DIR and JCONSOLE_PATCH (SC2086)
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - icedtea_sync.sh: Reinstate from rhel-8.8.0 branch
  - Move maintenance scripts to a scripts subdirectory
  - icedtea_sync.sh: Update with a VCS mode that retrieves sources from a Mercurial repository
  - jconsole.desktop.in: Restored by running icedtea_sync.sh
  - policytool.desktop.in: Likewise.
  - Restore IcedTea sources correctly in spec file
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - Remove pointless empty file generate_singlerepo_source_tarball.sh
  - Remove pointless empty file update_main_sources.sh
  - generate_source_tarball.sh: Handle an existing checkout
  - generate_source_tarball.sh: Sync indentation with java-21-openjdk version
  - generate_source_tarball.sh: Support using a subdirectory via TO_COMPRESS


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b07-0.1.ea
changelog:
  - Update to shenandoah-jdk8u412-b07 (EA)
  - Update release notes for shenandoah-8u412-b07.
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.412.b08-1
changelog:
  - Update to shenandoah-jdk8u412-b08 (GA)
  - Update release notes for shenandoah-8u412-b08.
  - Complete release note for Certainly roots
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b01-0.1.ea
changelog:
  - Update to shenandoah-jdk8u422-b01 (EA)
  - Update release notes for shenandoah-8u422-b01.
  - Switch to EA mode.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.422.b05-1.1
changelog:
  - Update to shenandoah-jdk8u422-b05 (GA)
  - Update release notes for shenandoah-8u422-b05.
  - Rebase PR2462 patch following patched hunk being removed by JDK-8322106
  - Switch to GA mode.
  - Limit Java only tests to one architecture using jdk_test_arch
  - Remove unused policy repacking script repackReproduciblePolycies.sh
  - Sync README.md with RHEL 8
  - Add missing build dependency on zlib-devel
  - Update LCMS version to match JDK-8245400
  - Move unstripped, misc and doc tarball handling into normal build / no suffix blocks
  - Drop unneeded tzdata-java build dependency following 11d4d3308dd3334acae563101c007be9db017b83
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: OPENJDK-3183
  - Resolves: OPENJDK-3187
  - Resolves: OPENJDK-3193


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.1.ea
changelog:
  - Update to 8u442-b05 (EA).
  - Update release notes for 8u442-b05.
  - Switch to EA mode for pre-release.


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b05-0.2.ea
changelog:
  - Include backport of JDK-8141590 to allow bundling of libffi on Zero architectures
  - Rebase FIPS patch after application of 8141590
  - Add local patch on top of 8141590 to improve path detection for s390x
  - Don't attempt to strip libffi.so*


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.442.b06-1
changelog:
  - Update to 8u442-b06 (GA)
  - Update release notes for 8u442-b06.
  - Switch to GA mode for final release
  - Revise JDK-8141590 backport to install libffi.so* in lib as well as jre/lib


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.452.b09-1
changelog:
  - Update to 8u452-b09 (GA)
  - Update release notes for 8u452-b09.
  - Remove long option documentation from JDK-8335912/JDK-8337499 as not present in 8u
  - ** This tarball is embargoed until 2025-04-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-1
changelog:
  - Update to 8u462-b08 (GA)
  - Update release notes for 8u462-b08.
  - Add early backport of JDK-8339414
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **
  - Resolves: OPENJDK-3965


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.462.b08-2
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Resolves: OPENJDK-3952


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:1.8.0.472.b08-1
changelog:
  - Update to 8u472-b08 (GA).
  - Update release notes for 8u472-b08.
  - Drop local JDK-8339414 fix as this is now included upstream
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: OPENJDK-4125


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:11.0.22.0.7-1
changelog:
  - Update to jdk-11.0.22+7 (GA)
  - Update release notes to 11.0.22+7
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2024-01-16 @ 1pm PT. **


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.23.0.9-1
changelog:
  - Update to jdk-11.0.23+9 (GA)
  - Update release notes to 11.0.23+9
  - Switch to GA mode for release
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Speed up PPC build by removing ppc64le --with-jobs=1 workaround
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.6-0.1.ea
changelog:
  - Update to jdk-11.0.24+6 (EA)
  - Update release notes to 11.0.24+6
  - Switch to EA mode
  - Update LCMS to 2.16 (JDK-8321489)
  - Improve VCS exclusion in generate_source_tarball.sh script
  - Bring outdated patch macros in the spec file up to date


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.6-0.2.ea
changelog:
  - Add zlib build required or bundled version (1.3.1), depending on system_libs setting
  - Related: OPENJDK-3066


author: Anton Bobrov <abobrov@redhat.com> - 1:11.0.24.0.8-1
changelog:
  - Update to jdk-11.0.24+8 (GA)
  - Update release notes to 11.0.24+8
  - Switch to GA mode for release
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.12.0.5-0.3.ea
changelog:
  - Re-run jlink to regenerate the jmods directory and lib/modules with stripped libraries
  - Resolves: OPENJDK-3055


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.6-0.1.ea
changelog:
  - Update to jdk-17.0.12+6 (EA)
  - Update .gitignore to ignore openjdk-17.0.12+6-ea.tar.xz
  - Update buildver to 6
  - Reset rpmrelease to 1
  - Update sources to openjdk-17.0.12+6-ea.tar.xz
  - Update NEWS for 17.0.12+6
  - Remove --enable-compatible-cds-alignment configure option
  - Resolves: OPENJDK-3134


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.12.0.6-0.2.ea
changelog:
  - NEWS: Import 21 entries for JDK-8256660, JDK-8326891, JDK-8325496,
    JDK-8281658, and JDK-8315503, use 21 formatting for JDK-8256660,
    JDK-8316138


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.12.0.7-1
changelog:
  - Update to jdk-17.0.12+7 (GA)
  - Update .gitignore to ignore openjdk-17.0.12+7.tar.xz
  - Update NEWS for 17.0.12+7 (GA)
  - Set buildver to 7
  - Set rpmrelease to 1
  - Set is_ga to 1
  - Update sources to openjdk-17.0.12+7.tar.xz
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.16.0.8-1
changelog:
  - Update to jdk-17.0.16+8
  - Add to .gitignore openjdk-17.0.16+8.tar.xz
  - Set buildver to 8
  - Set is_ga to 1
  - Update sources to openjdk-17.0.16+8.tar.xz
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:17.0.16.0.8-1
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Related: OPENJDK-3950


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.7-0.1.ea
changelog:
  - Update to jdk-17.0.17+7 (EA)
  - Add to .gitignore openjdk-17.0.17+7-ea.tar.xz
  - Set updatever to 17
  - Set buildver to 7
  - Set is_ga to 0
  - Update sources to openjdk-17.0.17+7-ea.tar.xz
  - Set bundled harfbuzz version to 11.2.0
  - Update NEWS for jdk-17.0.17+7 (EA)


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:17.0.17.0.10-1
changelog:
  - Update to jdk-17.0.17+10 (GA)
  - Add to .gitignore openjdk-17.0.17+10.tar.xz
  - Set buildver to 10
  - Set is_ga to 1
  - Update sources to openjdk-17.0.17+10.tar.xz
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - generate_source_tarball.sh: Add WITH_TEMP environment variable
  - generate_source_tarball.sh: Multithread xz on all available cores
  - generate_source_tarball.sh: Add OPENJDK_LATEST environment variable
  - generate_source_tarball.sh: Update comment about tarball naming
  - generate_source_tarball.sh: Reformat comment header
  - generate_source_tarball.sh: Reformat and update help output
  - generate_source_tarball.sh: Do a shallow clone, for speed
  - generate_source_tarball.sh: Append -ea designator when required
  - generate_source_tarball.sh: Eliminate some removal prompting
  - generate_source_tarball.sh: Make tarball reproducible
  - generate_source_tarball.sh: Prefix temporary directory with temp-
  - generate_source_tarball.sh: Remove temporary directory exit conditions
  - generate_source_tarball.sh: Fix -ea logic to add dash
  - generate_source_tarball.sh: Set compile-command in Emacs
  - generate_source_tarball.sh: Remove REPO_NAME from FILE_NAME_ROOT
  - generate_source_tarball.sh: Move PROJECT_NAME and REPO_NAME checks
  - generate_source_tarball.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - generate_source_tarball.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: shellcheck: Do not use -a (SC2166)
  - generate_source_tarball.sh: shellcheck: Do not use $ on arithmetic variables (SC2004)
  - Use backward-compatible patch syntax
  - generate_source_tarball.sh: Ignore -ga tags with OPENJDK_LATEST
  - generate_source_tarball.sh: Fix whitespace
  - generate_source_tarball.sh: Remove trailing period in echo
  - generate_source_tarball.sh: Use long-style argument to grep
  - generate_source_tarball.sh: Add license
  - generate_source_tarball.sh: Add indentation instructions for Emacs
  - Remove -T0 argument from systemtap tar invocation


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.1-0.2.ea
changelog:
  - generate_source_tarball.sh: Update examples in header for clarity
  - generate_source_tarball.sh: Cleanup message issued when checkout already exists
  - generate_source_tarball.sh: Create directory in TMPDIR when using WITH_TEMP
  - generate_source_tarball.sh: Only add --depth=1 on non-local repositories
  - icedtea_sync.sh: Reinstate from rhel-8.9.0 branch
  - Move maintenance scripts to a scripts subdirectory
  - discover_trees.sh: Set compile-command and indentation instructions for Emacs
  - discover_trees.sh: shellcheck: Do not use -o (SC2166)
  - discover_trees.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - discover_trees.sh: shellcheck: Double-quote variable references (SC2086)
  - generate_source_tarball.sh: Add authorship
  - icedtea_sync.sh: Set compile-command and indentation instructions for Emacs
  - icedtea_sync.sh: shellcheck: Double-quote variable references (SC2086)
  - icedtea_sync.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: Set compile-command and indentation instructions for Emacs
  - openjdk_news.sh: shellcheck: Double-quote variable references (SC2086)
  - openjdk_news.sh: shellcheck: Remove x-prefixes since we use Bash (SC2268)
  - openjdk_news.sh: shellcheck: Remove deprecated egrep usage (SC2196)
  - generate_source_tarball.sh: Output values of new options WITH_TEMP and OPENJDK_LATEST
  - generate_source_tarball.sh: Double-quote DEPTH reference (SC2086)
  - Vary reproducible tar creation by version of tar detected
  - Set OPENJDK_UPSTREAM_TAG_EPOCH & VERSION_FILE at start of build section as in 17u
  - generate_source_tarball.sh: Avoid empty DEPTH reference while still appeasing shellcheck


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.7-0.1.ea
changelog:
  - Update to jdk-21.0.3+7 (EA)
  - Update release notes to 21.0.3+7
  - Require tzdata 2024a due to upstream inclusion of JDK-8322725
  - Only require tzdata 2023d for now as 2024a is unavailable in buildroot
  - Drop JDK-8009550 which is now available upstream
  - Re-generate FIPS patch against 21.0.3+7 following backport of JDK-8325254


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-1
changelog:
  - Update to jdk-21.0.3+9 (GA)
  - Update release notes to 21.0.3+9
  - Switch to GA mode.
  - Change --with-source-date value to 'version' to match Temurin builds
  - ** This tarball is embargoed until 2024-04-16 @ 1pm PT. **
  - Resolves: OPENJDK-2585


author: Thomas Fitzsimmons <fitzsim@redhat.com> - 1:21.0.3.0.9-2
changelog:
  - createtar: Add exclude option
  - packagejdk: Exclude debuginfo when creating jdkarchive and jrearchive tarballs
  - Resolves: OPENJDK-2995


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.3.0.9-3
changelog:
  - Re-run jlink to regenerate the jmods directory and lib/modules with stripped libraries
  - Rebuild CDS archives against the updated lib/modules
  - Resolves: OPENJDK-2829


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.4+1 (EA)
  - Update release notes to 21.0.4+1
  - Switch to EA mode
  - Bump LCMS 2 version to 2.16.0 following JDK-8321489
  - Add zlib build requirement or bundled version (1.3.1), depending on system_libs setting
  - Resolves: OPENJDK-3060
  - Resolves: OPENJDK-3063


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.5-0.1.ea
changelog:
  - Update to jdk-21.0.4+5 (EA)
  - Update release notes to 21.0.4+5
  - Move unstripped, misc and doc tarball handling into normal build / no suffix blocks
  - Limit Java only tests to one architecture using jdk_test_arch
  - Drop unneeded tzdata-java build dependency following 3e3cf8fa2df7bac2f6a60a0ddd596ec39228a3e1
  - Resolves: OPENJDK-3132
  - Resolves: OPENJDK-3194
  - Resolves: OPENJDK-3181
  - Resolves: OPENJDK-3189


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.4.0.7-1
changelog:
  - Update to jdk-21.0.4+7 (GA)
  - Update release notes to 21.0.4+7
  - Switch to GA mode.
  - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. **
  - Resolves: OPENJDK-2756
  - Resolves: OPENJDK-3163


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update to jdk-21.0.8+1 (EA)
  - Update release notes to 21.0.8+1
  - Bump freetype version to 2.13.3 following JDK-8348596
  - Bump harfbuzz version to 10.4.0 following JDK-8348597
  - Bump lcms2 version to 2.17.0 following JDK-8348110
  - Bump libpng version to 1.6.47 following JDK-8348598
  - Switch to EA mode
  - Drop JDK-8351500 local patch which is now available in 21.0.8+1 upstream


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.1-0.1.ea
changelog:
  - Update get_bundle_versions.sh to match other scripts
  - * get_bundle_versions.sh: Add license
  - * get_bundle_versions.sh: Set compile-command in Emacs
  - * get_bundle_versions.sh: Use different error codes for different failures
  - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version
  - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086)
  - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002)
  - Add OpenJDK 8u support to get_bundle_versions.sh
  - Print bundle updates and backouts at end of openjdk_news.sh output
  - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh
  - Resolves: OPENJDK-3949


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.2-0.1.ea
changelog:
  - Update to jdk-21.0.8+2 (EA)
  - Update release notes to 21.0.8+2
  - Add timezone data update check to openjdk_news.sh
  - Add duplicate check to openjdk_news.sh
  - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh
  - Related: OPENJDK-3949


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-1
changelog:
  - Update to jdk-21.0.8+9 (GA)
  - Update release notes to 21.0.8+9
  - Switch to GA mode
  - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. **


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.8.0.9-2
changelog:
  - Depend on a devkit with the annobin plugin and stop filtering it out of the build flags
  - Install annobin plugin as gcc-annobin in the same way as the gcc spec file
  - Resolves: OPENJDK-4142


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:21.0.9.0.10-1
changelog:
  - Update to jdk-21.0.9+10 (GA)
  - Update release notes to 21.0.9+10
  - Bump harfbuzz version to 11.2.0 following JDK-8355528
  - Add NEWS corrections from Thomas
  - Use double spacing consistently in notes for this release
  - Correct 11u release reference to corresponding 21u release as pointed out by Kieran
  - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. **
  - Resolves: OPENJDK-4131


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 6.0.0-10
changelog:
  - Introduce javapackages-extra and javapackages-common subpackages
  - Drop metadata for com.sun:tools and sun.jdk:jconsole
  - Re-enable tests
  - Re-add manpages
  - Drop bootstrap mode


author: Darren Archibald <darren.archibald@oracle.com> - 6.0.0-7
changelog:
  - Use Java 11 build tool bindings for package builds
  - Make OpenJDK 17 the default JRE/JDK
  - Related: RHEL-62403
  - Include java-21-headless in generated auto-requires
  - Related: RHEL-62409


author: Orion Poplawski <orion@nwra.com> - 0.19-3
changelog:
  - Use autoreconf -f to remove rpath
  - Use --disable-static to disable static builds
  - Use current make macros


author: Fabio Valentini <decathorpe@gmail.com> - 1.2-8
changelog:
  - Set javac source and target to 1.8 to fix Java 11 builds.
  - Remove one test case that is harmlessly broken with Java 11.


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.19-1
changelog:
  - New upstream release
  - Add native support for openssl 3.0 (drop API COMPAT macros).
  - Code cleanup of public APIs. Lots of lines of code moved around, no
    functional changes.
  - Removed kronosnetd unsupported code completely
  - Removed unused poc-code from the source tree
  - Make sure to initialize epoll events structures


author: Fabio M. Di Nitto <fdinitto@redhat.com> - 1.20-1
changelog:
  - New upstream release
  - Fix TX/RX stats collections
  - Minor test suite improvements
  - Minor build fixes


author: Christine Caulfield <ccaulfie@redhat.com> - 1.24-2
changelog:
  - Fix libnozzle tests failing & covscan warning on api_knet_handle_new test
    Resolves: rhbz#2024090


author: Christine Caulfield <ccaulfie@redhat.com> - 1.28-1
changelog:
  Rebase to 1.28 for startup and performance fixes
     threads: add config check to match min value with pong timeouts
     rx: allow links to be active faster
     links: fix ping interval and pong timeout value checking
     crypto: Try crypt and decrypt on crypto_init
     tx: Remove expensive memsets
     log: Add a TRACE log level
    Resolves: #RHEL-11787


author: Dodji Seketeli <dodji@redhat.com> - 1.8-1
changelog:
  - Update to upstream 1.8
  - Add 'make check-self-compare' to the regression tests run.
  - BuildRequires python3-koji


author: Dodji Seketeli <dodji@seketeli.org> - 1.8.1-1
changelog:
  - Update to upstream fixes up to libabigail-1.8.1
    This encompasses this fixes, compared to the last 1.8 release:
        ir: Add better comments to types_have_similar_structure
        mainpage: Update web page for 1.8 release
        Bug 26992 - Try harder to resolve declaration-only classes
        Bug 27204 -  potential loss of some aliased ELF function symbols
        Ignore duplicated functions and those not associated with ELF symbols
        Bug 27236 - Pointer comparison wrongly fails because of typedef change
        Bug 27233 - fedabipkgdiff fails on package gnupg2 from Fedora 33
        Bug 27232 - fedabipkgdiff fails on gawk from Fedora 33
        dwarf-reader: Support fast DW_FORM_line_strp string comparison
        gen-changelog.py: Update call to subprocess.Popen & cleanup
        Bug 27255 - fedabipkgdiff fails on nfs-utils on Fedora 33
        abidiff: support --dump-diff-tree with --leaf-changes-only
        ir: Arrays are indirect types for type structure similarity purposes
        Add qualifier / typedef / array / pointer test
        abg-ir: Optimize calls to std::string::find() for a single char.
        abipkgdiff: Address operator precedence warning


author: Dodji Seketeli <dodji@redhat.com> - 2.0-1
changelog:
  - Update to upstream 2.0 tarball
  - Change License to ASL 2.0 to comply with the upstream license change.


author: Tomas Popela <tpopela@redhat.com> - 1.42.2-1
changelog:
  - Initial RHEL packaging based on Fedora package with rpmautospec disabled,
    disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
    be able to compile with glib2 2.68 (thanks to Milan Crha)
  - Resolves: RHEL-3234


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-4
changelog:
  - Memory leaks fixes backport
    Resolves: rhbz#1938757
  - Fix default key size for non XTS ciphers
    Resolves: rhbz#1954005


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-6
changelog:
  - Add workarounds for some LVM test issues
    Resolves: rhbz#1976174
  - Adapt tests to xfsprogs 5.12 changes
    Resolves: rhbz#1976176


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-10
changelog:
  - Fix reading statistics for VDO pools with VDO 8
    Resolves: rhbz#1994220
  - vdo_stats: Default to 100 % savings for invalid savings values
    Resolves: rhbz#2025880
  - Add support for creating and unlocking standalone integrity devices
    Resolves: rhbz#2011365


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-11
changelog:
  - tests: Wait for raid and mirrored LVs to be synced before removing
    Resolves: rhbz#2030647
  - spec: Require the same version of utils for lvm-devel and lvm-dbus-devel
    Resolves: rhbz#2028113


author: Vojtech Trefny <vtrefny@redhat.com> - 2.25-14
changelog:
  - tests: Fix expected extended partition flags with new parted
    Related: rhbz#2109026
  - mdraid: Fix copy-paste error when checking return value
    Related: rhbz#2109026


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-4
changelog:
  - nvme: Fix namespace identifiers
    Resolves: rhbz#2151535
  - nvme: Avoid sending NVME_IDENTIFY_CNS_NS_DESC_LIST on older devices
    Related: rhbz#2151535


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-5
changelog:
  - Allow resizing of inactive LVs with latest LVM
    Resolves: rhbz#2161181
  - Fix test_swapon_pagesize on systems with 64k pages
    Resolves: rhbz#2168220


author: Tomas Bzatek <tbzatek@redhat.com> - 2.28-9
changelog:
  - nvme: HostID fixes for TP4126
    Resolves: RHEL-1375
  - nvme: Stack smashing fixes
    Resolves: RHEL-13127
    Resolves: RHEL-8037


author: Vojtech Trefny <vtrefny@redhat.com> - 2.28-1
changelog:
  - Rebase to the latest upstream release 2.28
    Resolves: rhbz#2123346
  - Add dependency on device-mapper-multipath to libblockdev-mpath
    Resolves: rhbz#2121072
  - Fix spec issues found by rpminspect
    Resolves: rhbz#2116544


author: Vojtech Trefny <vtrefny@redhat.com> - 2.2-1
changelog:
  - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
  - src/gettext: fix warning if gettext is already present (giulio.benetti)
  - Update README.md (vpodzime)
  - fix build on shells where test == fails (tbier)
  - Add POT file to git and do not rebuild it during every build (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.3-1
changelog:
  - Fix memory leak in bs_size_new_from_str (vtrefny)
  - Translated using Weblate (Turkish) (oguzersen)
  - add translation platform widget (jean-baptiste)
  - Update translation files (noreply)
  - Do not regenerate POT file during 'make release' (vtrefny)
  - Remove Zanata from our build and release processes (vtrefny)
  - Add PO files to git (vtrefny)
  - Sync spec with downstream (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.4-1
changelog:
  - Add Travis build status badge (vtrefny)
  - Add Travis CI config and Dockerfiles for running tests (vtrefny)
  - Add ansible playbook for installing test dependencies (vtrefny)
  - remove msgcat dependency (Aduskett)
  - Translated using Weblate (Bengali (India)) (akarshan.biswas)
  - Update translation files (noreply)
  - Added translation using Weblate (Bengali (India)) (akarshan.biswas)
  - Fix library version in pkgconfig file (vtrefny)


author: Vojtech Trefny <vtrefny@redhat.com> - 2.5-1
changelog:
  - Translated using Weblate (Hebrew) (sh.yaron)
  - Added translation using Weblate (Hebrew) (sh.yaron)
  - Add support to ppc64le for debian build (74309971+gururajrkatti)
  - Translated using Weblate (Finnish) (ricky.tigg)
  - tools: Read input from stdin when not running in a tty (vtrefny)
  - travis: Print logs after failed tests (vtrefny)
  - tests: Run pylint and pycodestyle on bscalc (vtrefny)
  - bscalc: Add option to print only single "human readable" result (vtrefny)
  - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
  - Translated using Weblate (Asturian) (fitoschido)
  - Update translation files (noreply)
  - Translated using Weblate (Spanish) (fitoschido)
  - Sync spec with downstream (vtrefny)


author: Filip Januš <fjanus@redhat.com> - 5.3.28-54
changelog:
  - Add db_converter into -utils subpackage
  - It allowes to convert BerkeleyDB database format to GDBM/LMDB format
  - Resolves: RHEL-35607


author: Davide Caratti <dcaratti@redhat.com> - 0.41-2
changelog:
  - add gating test that uses acd-client.c. Related: rhbz#1973511
  - drop tests dependency on libell-devel. Related: rhbz#1973511


author: Kalev Lember <klember@redhat.com> - 1.1.90-2
changelog:
  - Update to 1.1.90 and libhandy 1 ABI, based on earlier libhandy1 packaging
  - Obsolete separate libhandy1 and libhandy1-devel packages


author: Keith Seitz <keiths@redhat.com> - 2.0.4-2
changelog:
  - Add support for pre-generated documenation, allowing removal
    of pandoc dependency. (RHBZ 1943531, Keith Seitz)


author: Sahana Prasad <sahana@redhat.com> - 1.2.1-1
changelog:
  - Update to upstream version 1.2.1
  - Remove patch fix MSG_MORE uasge as it is added upstream
  - Remove cppcheck dependency for rhel bz#1931518
  - Add a patch to fix fuzz tests


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-1
changelog:
  - Update to new upstream release 1.4.0
    Resolves: RHEL-5367
  - Add a patch to fix auxiliary tests in FIPS mode
    Resolves: RHEL-2405
  - Add a patch to zeroize kcapi-hasher for FIPS 140-3
    Resolves: RHEL-15112
  - Add a patch to allow overriding target file in kcapi-hasher
    Resolves: RHEL-15298


author: Zoltan Fridrich <zfridric@redhat.com> - 1.4.0-2
changelog:
  - Backport fixes for kcapi-hasher target option
    Related: RHEL-15298
  - Fix kcapi tests in FIPS mode
    Resolves: RHEL-2405


author: Michel Alexandre Salim <salimma@fedoraproject.org> - 0.5.0-3
changelog:
  - Minor fixes for Python 3.12 compatibility
  - Fix Python unit tests to use the right assert methods
  - Explicitly BR python3-setuptools


author: Wen Liang <wenliang@redhat.com> - 1.26.0-2
changelog:
  - Add Conflicts tag because the bash-completion scripts moved from the main package
    to the utils sub package causing a file conflict on multilib systems between the
    old 32 bit main package and the new 64 bit utils sub package.


author: Hangbin Liu <haliu@redhat.com> - 1.8-1
changelog:
  - 1.8 release (rhbz#1958933)
  - libndp,ndptool: use poll() instead of select()
  - libndp: avoid static buffer for debug string in ndp_sock_recv()
  - ndptool: avoid static buffer for string in ndptool
  - libndp: use thread local variables for static return arguments
  - ndptool: don't use static variable for local context in msgrcv_handler_func()
  - ndptool: fix printing dnssl lifetime in ndptool
  - ndptool: fix potential memory leak caused by strdup
  - ndptool: add -D dest support
  - libndp: fix nd_msg typo when setting target address
  - libndp: close sockfd after using to avoid handle leak
  - ndptool: fix target parameter typo
  - ndptool: add -T target support


author: Phil Sutter <psutter@redhat.com> - 1.0.0-22
changelog:
  - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
  - examples: kill the "invalid argument" error in nftc-helper-add
  - examples: fix double free in nftc-helper-add
  - include: Sync with kernel headers
  - src: fix use after free


author: Andreas Schneider <asn@redhat.com> - 1.1.3-1
changelog:
  - Update to version 1.1.3
    * https://gitlab.com/cwrap/pam_wrapper/-/blob/master/CHANGELOG
    * resolves: #1816943


author: Attila Lakatos <alakatos@redhat.com> - 1.10.0-4
changelog:
  - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections
    resolves: rhbz#1990735
  - Add patch to comply with crypto policies
  - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName
  - Enable openssl
    resolves: rhbz#1972067


author: Karel Zak <kzak@redhat.com> 2.37.3-1
changelog:
  - upgrade to v2.37.3 (fix CVE-2021-3996, CVE-2021-3995)
  - fix #2040366 - uuidd can't access lock/status file


author: Karel Zak <kzak@redhat.com> 2.37.3-2
changelog:
  - fix #2021462 - partitons detection broken on systems not including the parent name in partition name
  - fix #2033622 - logger from util-linux incorrectly handles long messages
  - fix #2000137 - pam_env bypassed for root user when using su
  - fix #2000477 - rpm -V setup fail on /var/log/lastlog
  - fix #2047952 - rpm -V / --verify reports bad user/group/mtime for /run/uuidd


author: Karel Zak <kzak@redhat.com> 2.37.4-4
changelog:
  - fix #2079652 - remove uclampset, unsupported by RHEL kernel
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2092943 - uuidd time based UUIDs are without MAC address
  - fix #2074486 - wipefs to erase all available signatures against read only rom
  - fix #2064810 - RFE: complete libblkid FSSIZE implementation
  - fix #2078787 - Activity "lsirq -s column" produces wrong result i.e. not sorting properly. 
  - fix #2076829 - dmesg new option "--since" is not working if timestamp format is not provided
  - fix #2109459 - fix compiler warnings/errors


author: Karel Zak <kzak@redhat.com> 2.37.4-6
changelog:
  - fix #2094216 - lslogins reports incorrect "Password is locked" status
  - fix #2117203 - loop-overlay test failed


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-1
changelog:
  - Resolves: rhbz#1952922 - Rebase SSSD for RHEL 9-Beta
  - Resolves: rhbz#1975691 - covscan NULL pointer dereference cache_req_data_create()


author: Alexey Tikhonov <atikhono@redhat.com> - 2.5.2-5
changelog:
  - Resolves: rhbz#1909755 - Suppress log message "[sssd] [service_signal_done] (0x0010): Unable to signal service [2]: No such file or directory" during logrote
  - Resolves: rhbz#1962123 - [sssd] RHEL 9.0 Beta Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.1-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#1966201 - sssd: incorrect checks on length values during packet decoding in unpack_authtok()
  - Resolves: rhbz#977803 - incorrect checks of `strto*()` string to number convertion functions
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1992973 - Lookup with fully-qualified name does not work with 'cache_first = True'
  - Resolves: rhbz#1996151 - Add support for CKM_RSA_PKCS in smart card authentication.
  - Resolves: rhbz#1998459 - 2.5.x based SSSD adds more AD domains than it should based on the configuration file (not trusted and from a different forest)
  - Resolves: rhbz#2000476 - disabled root ad domain causes subdomains to be marked offline
  - Resolves: rhbz#2014249 - Consistency in defaults between OpenSSH and SSSD
  - Resolves: rhbz#2029419 - 'exclude_groups' option provided in SSSD for session recording (tlog) doesn't work as expected


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-1
changelog:
  - Resolves: rhbz#2011224 - Rebase SSSD for RHEL 9.0-GA
  - Resolves: rhbz#2017390 - [sssd] RHEL 9.0 GA Tier 0 Localization
  - Resolves: rhbz#2013263 - [RHEL9] Add ability to parse child log files
  - Resolves: rhbz#2013262 - [RHEL9] Add tevent chain ID logic into responders
  - Resolves: rhbz#1992432 - Add client certificate validation D-Bus API
  - Resolves: rhbz#1940517 - [RFE] Health and Support Analyzer: Add sssctl sub-command to select and display a single request from the logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.6.2-2
changelog:
  - Resolves: rhbz#2035244 - AD Domain in the AD Forest Missing after sssd latest update
  - Resolves: rhbz#2041560 - sssd does not use kerberos port that is set.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.0-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#2072640 - sssd_nss exiting (due to missing 'sssd' local user) making SSSD service to restart in a loop
  - Resolves: rhbz#2070189 - sssd error triggers backtrace : [write_krb5info_file_from_fo_server] (0x0020): [RID#73501] There is no server that can be written into kdc info file.
  - Resolves: rhbz#2070138 - SSSD authenticating to LDAP with obfuscated password produces Invalid authtoken type message causing sssd_be to go offline (cross inter_ference of different provider plugins options)
  - Resolves: rhbz#2065693 - [RHEL9] Ship new sub-package called sssd-idp into sssd
  - Resolves: rhbz#2065098 - Use right sdap_domain in ad_domain_info_send
  - Resolves: rhbz#2062716 - [Improvement] Add user and group version of sss_nss_getorigbyname()
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol
  - Resolves: rhbz#2056482 - [RFE] Add sssd internal krb5 plugin for authentication against external IdP via OAuth2
  - Resolves: rhbz#1937895 - SSSD update prompts for smartcard pin twice - After update to 7.9
  - Resolves: rhbz#1925559 - [RFE] Implement time logging for the LDAP queries and warning of high queries time
  - Resolves: rhbz#1915564 - sssd does not enforce smartcard auth for kde screen locker
  - Resolves: rhbz#1859751 - [RFE] Allow SSSD to use anonymous pkinit for FAST
  - Resolves: rhbz#1749279 - 2FA prompting setting ineffective
  - Resolves: rhbz#1661055 - sssd fails GPO-based access if AD have setup with Japanese language
  - Resolves: rhbz#1245367 - [RFE] Implement memory cache for SID requests to improve performance


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1893192 - sdap_nested_group_deref_direct_process() triggers internal watchdog for large data sets
  - Resolves: rhbz#1927553 - [Improvement] add SSSD support for more than one CRL PEM file name with parameters certificate_verification and crl_file
  - Resolves: rhbz#2089216 - pam_sss_gss ceased to work after upgrade to 8.6
  - Resolves: rhbz#2090776 - Add idp authentication indicator in man page of sssd.conf
  - Resolves: rhbz#1927195 - sssd runs out of proxy child slots and doesn't clear the counter for Active requests
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation
  - Resolves: rhbz#2082455 - 'getent hosts' not return hosts if they have more than one CN in LDAP
  - Resolves: rhbz#2087581 - Regression "Missing internal domain data." when setting ad_domain to incorrect


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.1-2
changelog:
  - Resolves: rhbz#2073095 - Harden kerberos ticket validation (additional patch)
  - Resolves: rhbz#2061795 - Unable to lookup AD user if the AD group contains '@' symbol (additional patch)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-1
changelog:
  - Resolves: rhbz#2069376 - Rebase SSSD for RHEL 9.1
  - Resolves: rhbz#1936551 - [Improvement] Provide user feedback when login fails due to blocked PIN
  - Resolves: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)
  - Resolves: rhbz#2062665 - [sssd] RHEL 9.1 Tier 0 Localization


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-2
changelog:
  - Resolves: rhbz#2106660 - [regression] sssd goes offline with forced ldaps configuration
  - Resolves: rhbz#2109451 - virsh command will hang after the host run several auto test cases
  - Resolves: rhbz#2098654 - cache_req_data_set_hybrid_lookup: cache_req_data should never be NULL
  - Resolves: rhbz#2106685 - [regression] sssctl analyze fails to parse PAM related sssd logs


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-3
changelog:
  - Resolves: rhbz#2116389 - rpc.gssd crash when access a same file on krb5 nfs mount with multiple uids simultaneously since sssd-2.7.3-2.el9
  - Resolves: rhbz#2119373 - sssctl analyze --logdir option requires sssd to be configured
  - Resolves: rhbz#2120657 - Incorrect request ID tracking from responder to backend


author: Alexey Tikhonov <atikhono@redhat.com> - 2.7.3-4
changelog:
  - Related: rhbz#1978119 - [Improvement] avoid interlocking among threads that use `libsss_nss_idmap` API (or other sss_client libs)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.1-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1507035 - [RFE] SSSD does not support to change the user’s password when option ldap_pwd_policy equals to shadow in sssd.conf file
  - Resolves: rhbz#1766490 - Use negative cache better and domain checks for lookup by SIDs
  - Resolves: rhbz#1964121 - RFE: Add an option to sssd config to convert home directories to lowercase (or add a new template for the 'override_homedir' option)
  - Resolves: rhbz#2074307 - reduce debug level in case well_known_sid_to_name() fails
  - Resolves: rhbz#2096031 - SSSD: sdap_handle_id_collision_for_incomplete_groups debug message missing a new line
  - Resolves: rhbz#2103325 - Supported AD group types should be explained in the docs
  - Resolves: rhbz#2111388 - authenticating against external IdP services okta (native app) with OAuth client secret failed
  - Resolves: rhbz#2115171 - SSSD: duplicate dns_resolver_* option in man sssd.conf
  - Resolves: rhbz#2127492 - sssd timezone issues sudonotafter
  - Resolves: rhbz#2128840 - [RFE] provide dbus method to find users by attr
  - Resolves: rhbz#2128883 - Cannot SSH with AD user to ipa-client (`krb5_validate` and `pac_check` settings conflict)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-1
changelog:
  - Resolves: rhbz#2127510 - Rebase SSSD for RHEL 9.2
  - Resolves: rhbz#1608496 - sssd failing to register dynamic DNS addresses against an AD server due to unnecessary DNS search
  - Resolves: rhbz#2110091 - SSSD doesn't handle changes in 'resolv.conf' properly (when started right before network service)
  - Resolves: rhbz#2136791 - Lower the severity of the log message for SSSD so that it is not shown at the default debug level.
  - Resolves: rhbz#2139684 - [sssd] RHEL 9.2 Tier 0 Localization
  - Resolves: rhbz#2139837 - Analyzer: Optimize and remove duplicate messages in verbose list
  - Resolves: rhbz#2142794 - SSSD: `sssctl analyze` command shouldn't require 'root' privileged
  - Resolves: rhbz#2144893 - changing password with ldap_password_policy = shadow does not take effect immediately
  - Resolves: rhbz#2148737 - UPN check cannot be disabled explicitly but requires krb5_validate = false' as a work-around


author: Alexey Tikhonov <atikhono@redhat.com> - 2.8.2-2
changelog:
  - Resolves: rhbz#2160001 - Reference to 'sssd-ldap-attributes' man page is missing in 'sssd-ldap', etc man pages
  - Resolves: rhbz#2143159 - automount killed by SIGSEGV


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys
  - Resolves: rhbz#1913839 - filter_groups doesn't filter GID from 'id' output: AD + 'ldap_id_mapping = True' corner case
  - Resolves: rhbz#2100789 - [Improvement] sssctl config-check command does not show an error when we don't have id_provider in the domain section
  - Resolves: rhbz#2152177 - [RFE] Add support for ldapi:// URLs
  - Resolves: rhbz#2164852 - man page entry should make clear that a nested group needs a name
  - Resolves: rhbz#2166627 - Improvement: sss_client: add 'getsidbyusername()' and 'getsidbygroupname()' and corresponding python bindings
  - Resolves: rhbz#2166943 - kinit switches KCM away from the newly issued ticket
  - Resolves: rhbz#2167728 - [sssd] Auth fails if client cannot speak to forest root domain (ldap_sasl_interactive_bind_s failed)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.0-4
changelog:
  - Related: rhbz#2190415 - Rebase Samba to the latest 4.18.x release
    Rebuild against rebased Samba libs.


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.1-1
changelog:
  - Resolves: rhbz#2167837 - Rebase SSSD for RHEL 9.3
  - Resolves: rhbz#2196816 - [RHEL9] [sssd] User lookup on IPA client fails with 's2n get_fqlist request failed'
  - Resolves: rhbz#2162552 - sssd client caches old data after removing netgroup member on IDM
  - Resolves: rhbz#2189542 - [sssd] RHEL 9.3 Tier 0 Localization
  - Resolves: rhbz#2133854 - [RHEL9] In some cases when `sdap_add_incomplete_groups()` is called with `ignore_group_members = true`, groups should be treated as complete
  - Resolves: rhbz#1765354 - [RFE] - Show password expiration warning when IdM users login with SSH keys


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-3
changelog:
  - Resolves: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
  - Resolves: rhbz#2237301 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working in sssd-2.7)


author: Eduardo Lima (Etrunko) <etrunko@redhat.com> - 2.9.1-4
changelog:
  - Related: rhbz#2236236 - dbus and crond getting terminated with SIGBUS in sss_client code
    Handle all invalidations consistently
    Supply a valid pointer to `sss_mmap_cache_validate_or_reinit()`, not a pointer to a local var


author: Darren Archibald <darren.archibald@oracle.com> - 2.9.1-4.0.1.5
changelog:
  - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [RHEL-19213]
  - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users [RHEL-19993]
  - SSSD GPO lacks group resolution on hosts [RHEL-21089]
  - Make sure 8.9.z/9.3.z doesn't build 'passkey' code [RHEL-21165]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.2-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: rhbz#2234829 - SSSD runs multiples lookup search for each NFS request (SBUS req chaining stopped working)
  - Resolves: rhbz#2236119 - dbus and crond getting terminated with SIGBUS in sss_client code


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.3-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-14427 - Expected cn in RDN, got uid
  - Resolves: RHEL-12229 - HANA validation on RHEL 9.2 issue possibly related to libc/nss_sss behaviour
  - Resolves: RHEL-3925 - SSSD goes offline when, while reading a single user, misses a required attribute (i.e. SID)
  - Resolves: RHEL-2319 - Passkey authentication for centrally managed users
  - Resolves: RHEL-4146 - Incorrect handling of reverse IPv6 update results in update failure
  - Resolves: RHEL-4971 - sssd-kcm does not appear to expire Kerberos tickets (RFE: sssd_kcm should have the option to automatically delete the expired tickets)


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-1
changelog:
  - Resolves: RHEL-2632 - Rebase SSSD for RHEL 9.4
  - Resolves: RHEL-18395 - latest sssd breaks logging in via XDMCP for LDAP/Kerberos users
  - Resolves: RHEL-17498 - New sssd.conf seems not to be backwards compatible (wrt SmartCard auth of local users using 'files provider') [rhel-9]
  - Resolves: RHEL-21079 - SSSD GPO lacks group resolution on hosts [rhel-9]
  - Resolves: RHEL-19211 - Excessive logging to sssd_nss and sssd_be in multi-domain AD forest [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-2
changelog:
  - Resolves: RHEL-12503 - AD users are unable to log in due to case sensitivity of user because the domain is found as an alias to the email address. 
  - Resolves: RHEL-22288 - ssh pubkey stored in ldap/AD no longer works to authenticate via sssd
  - Resolves: RHEL-22194 - gdm smartcard login fails with sssd-2.9.3 in case of multiple identities


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.4-6
changelog:
  - Resolves: RHEL-27209 - Race condition during authorization leads to GPO policies functioning inconsistently [rhel-9.4.0]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-1
changelog:
  - Resolves: RHEL-36586 - Rebase SSSD for RHEL 9.5
  - Resolves: RHEL-27716 - SSSD fails to process AD groups with 'Global Scope' correctly causing incomplete group-membership on RHEL if cache is empty
  - Resolves: RHEL-17659 - [RfE] SSSD Failover Enhancements
  - Resolves: RHEL-35781 - Passkey errors when handling multiple altSecurityIdentities values
  - Resolves: RHEL-30142 - sssd_pac is crashing
  - Resolves: RHEL-22206 - Errors in krb5_child.log every time a user authenticates - Pre-authentication failed: No pkinit_anchors supplied
  - Resolves: RHEL-32595 - Excessive "Domain not found' messages logged to sssd_nss & sssd_be in multidomain AD forest
  - Resolves: RHEL-28666 - sssctl config-check is reporting false positive error msg
  - Resolves: RHEL-29454 - NULL dereference in inotify handling
  - Resolves: RHEL-1654 - Improve documentation for allowing e-mail address as username


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-2
changelog:
  - Resolves: RHEL-40742 - passkey_child with wrong owner
  - Resolves: RHEL-41047 - sssd is skipping GPO evaluation with auto_private_groups
  - Resolves: RHEL-40570 - GPO access the wrong memory location


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4
changelog:
  - Resolves: RHEL-49711 - SYSDB: remove index on dataExpireTimestamp
  - Resolves: RHEL-49811 - 2FA is being enforced after upgrading 2.9.1->2.9.4


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.5-4.1
changelog:
  - Resolves: RHEL-59876 - EL9/CentOS Stream 9 lost offline smart card authentication
  - Resolves: RHEL-50912 - possible regression of rhbz#2196521


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.6-1
changelog:
  - Resolves: RHEL-70189 - Rebase SSSD for RHEL 9.6
  - Resolves: RHEL-67670 - Label DP_OPT_DYNDNS_REFRESH_OFFSET has no corresponding option [rhel-9]
  - Resolves: RHEL-68369 - sssd backend process segfaults when krb5.conf is invalid
  - Resolves: RHEL-66266 - SSSD needs an option to indicate if the LDAP server can run the exop with an anonymous bind or not [rhel-9]


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-1
changelog:
  - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
  - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
  - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
  - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
  - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-3
changelog:
  - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  - Resolves: RHEL-103434 - cache_credentials = true not working


author: Alexey Tikhonov <atikhono@redhat.com> - 2.9.7-4
changelog:
  - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
    Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.


author: Kalev Lember <klember@redhat.com> - 3.39.92-2
changelog:
  - Split sysprof-capture library and header files out to sysprof-capture-devel
  - Update minimum required glib2 version


author: Hangbin Liu <haliu@redhat.com> - 1.31-8
changelog:
  - Build util team2bond in teamd rpm [1986788]
  - Add some cautions to util team2bond [1986788]
  - Add team2bond man doc [1986788]


author: Long Xin <lxin@redhat.com> - 1.31-16
changelog:
  - fix the Requires package name for teamd-devel
  - teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.3
changelog:
  - Add -Wno-error=deprecated-declarations, to ignore OpenSSL 3.0 deprecation warnings.
    Fixes: rhbz#1958054


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.5
changelog:
  - Fixes CVE-2021-3623: out-of-bounds access when trying to resume the state of the vTPM
    Resolves: rhbz#1976814


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.8.2-0.20210301git729fc6a4ca.7
changelog:
  - Fixes CVE-2021-3746 libtpms: out-of-bounds access via specially crafted TPM 2 command packets
    Resolves: rhbz#1999303


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.9.1-3.20211126git1ff6fe1f43
changelog:
  - Backport "tpm2: Check size of buffer before accessing it" (CVE-2023-1017 & CVE-2023-1018)
    Resolves: rhbz#2173960
    Resolves: rhbz#2173967


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.5-1
changelog:
  - Update license to GPL-2.0 OR MIT
  - Add io_uring_prep_epoll_ctl()
  - Add io_uring_get_probe(), io_uring_get_probe_ring()
  - Add io_uring_register_probe()
  - Add io_uring_{register,unregister}_personality()
  - Add io_uring_prep_{recv,send}()
  - Add io_uring_prep_openat2()
  - Add io_uring_ring_dontfork()
  - Add io_uring_prep_read() and io_uring_prep_write()
  - Documentation fixes and improvements


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.6-1
changelog:
  - add io_uring_prep_splice()
  - add io_uring_prep_provide_buffers()
  - add io_uring_prep_remove_buffers()
  - add io_uring_register_eventfd_async()
  - reinstate io_uring_unregister_eventfd() (it was accidentally removed in 0.4)


author: Stefan Hajnoczi <stefanha@redhat.com> - 0.7-1
changelog:
  - Add io_uring_cq_eventfd_toggle() helper for new IORING_CQ_EVENTFD_DISABLED flag
  - Add IORING_OP_TEE
  - Documentation fixes and improvements


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-1
changelog:
  - Update to 4.3
  - Add GPG signature check for the source
  - Fix pycached stuff
  - Remove old python_provide macro
  - Remove ldconfig_scriptlets macro
  - Only use VFST for now, HFST can be provided in a later update


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-2
changelog:
  - Bump release for a new Copr build
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild


author: Ville-Pekka Vainio <vpvainio AT iki.fi> - 4.3-3
changelog:
  - The dictionary data directory will now be /usr/lib/voikko on all architectures
  - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
  - This was suggested in the review of the voikko-fi package, see rhbz#1919688
  - Use the license macro


author: Caolán McNamara <caolanm@redhat.com> - 0.2.12-6
changelog:
  - document that libwmf bundles a modified old copy of gd 2.0.1
    https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle


author: Michal Ruprich <mruprich@redhat.com> - 1.0.225-3
changelog:
  - Resolves: #1965253 - CVE-2021-28902 libyang: NULL pointer dereference in read_yin_container()
  - Resolves: #1965255 - CVE-2021-28903 libyang: recursive call to lyxml_parse_mem() lead to crash


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-1.gitf1dd9eb
changelog:
  - Rebase to 1.1.1
  - Fix program segfaults after entering the quit command (RHEL-5814)
  - Fix setting interface status not survive reboot (RHEL-5824)
  - Fix some other bugs


author: Hangbin Liu <haliu@redhat.com> - 1.1.1-3.gitf1dd9eb
changelog:
  - Rebase to latest upstream code
  - Remove interface configure if the interface deleted (RHEL-13242)
  - Fix strdup is not freed (RHEL-37524)
  - Fix using uninitialized value (RHEL-37548)
  - Fix copy past error (RHEL-37679)
  - Fix resource leak (RHEL-37685)


author: Konrad Kleine <kkleine@redhat.com> - 19.1.5-1
changelog:
  - Update to 19.1.5
  - Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
  - Remove HTML documentation
  - Add lldb man pages
  - Fix profiling after a binutils NOTE change (rhbz#2322754)
  - Install i386 config files on x86_64


author: Kashyap Chamarthy <kchamart@redhat.com> - 20.1.7-2
changelog:
  - Add riscv64 enablement bits; thanks: Songsong Zhang
     (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)


author: Tom Stellard <tstellar@redhat.com> - 20.1.8-2
changelog:
  - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
  - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
  - Backport fix for build of highway package on ppc64le (rhbz#2383182)


author: José Expósito <jexposit@redhat.com> - 24.1.2-3
changelog:
  - Match mesa-libEGL version
    Cherry-picked from: https://src.fedoraproject.org/rpms/mesa/pull-request/24
    Resolves: https://issues.redhat.com/browse/RHEL-50229


author: José Expósito <jexposit@redhat.com> - 24.2.8-2
changelog:
  - AMD Navi4x support
    Backport fixes for radeonsi and disable GFX12 on radv
    Resolves: https://issues.redhat.com/browse/RHEL-53419


author: Anusha Srivatsa <asrivats@redhat.com> - 24.2.8-3
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-107885


author: Anusha Srivatsa <asrivats@redhat.com> - 25.0.7-2
changelog:
  - NV dGFX fix for firefox crashing
    Backport fixes for NV dGFX driver crashing firefox
    Resolves: https://issues.redhat.com/browse/RHEL-93219


author: Sandro Mani <manisandro@gmail.com> - 140-1
changelog:
  - Don't unset _PREFIX in mingw-env macro, it leads to ${_PREFIX}
    being empty when evaluated the lines above


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.10.0-1
changelog:
  - Rebase to 16.10.0, add corepack, fix PowerShell dependency
  - Resolves: RHBZ#2000539, #2000548, #2000549, #2002177


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-1
changelog:
  - Update to latest version
  - Use jinja and jq
  - Don't fix python3
  - Resolves: CVE-2022-21824, CVE-2021-44531, CVE-2021-44532, CVE-2021-44533
  - Resolves CVE-2020-15095
  - Resolves: CVE-2021-3918, CVE-2021-22959, CVE-2021-22960
  - Resolves: CVE-2021-3807, CVE-2021-27290


author: Zuzana Svetlikova <zsvetlik@redhat.com> - 1:16.14.0-2
changelog:
  - Build with bootstrap by default due to old versions of dependencies available
  - Resolves: #2042995, #2042970, #2042981, #2042989
  - Resolves: #2029936, #2024890, #2014499, #2014135
  - Resolves: #2013834, #1945299


author: Jan Staněk <jstanek@redhat.com> - 16.16.0-1
changelog:
  - Rebase to version 16.16.0
    Resolves: RHBZ#2106290
    Resolves: CVE-2022-32212 CVE-2022-32213 CVE-2022-32214 CVE-2022-32215


author: Milan Crha <mcrha@redhat.com> - 2.3-38
changelog:
  - Related: #2013578 (Add patch to build against samba 4.15)
  - Avoid build time dependencies related to server, when it's not built


author: Darren Archibald <darren.archibald@oracle.com> - 28-10.0.1
changelog:
  - Renamed the package to oracle-bookmarks [Orabug: 33802033]
  - Updated Summary and description to be production neutral in spec file
  - Replaced default-bookmarks.html with Oracle's default-bookmarks.html [Orabug: 30069264]


author: Chris Lumens <clumens@redhat.com> - 2.1.7-2
changelog:
  - Rebase on upstream 2.1.7-rc4 release
  - Use systemd-sysusers to create user/group
  - Pacemaker Remote nodes can validate against later schema versions
  - Related: RHEL-17225
  - Resolves: RHEL-7665


author: Chris Lumens <clumens@redhat.com> - 2.1.7-3
changelog:
  - Rebase on upstream 2.1.7 final release
  - Fix documentation for Pacemaker Remote schema transfers
  - Do not check CIB feature set version when CIB_file is set
  - Consolidate attrd cache handling
  - Avoid duplicating option metadata across daemons
  - Related: RHEL-7665
  - Related: RHEL-13216
  - Resolves: RHEL-7702


author: Chris Lumens <clumens@redhat.com> - 2.1.7-4
changelog:
  - Properly validate attribute set type in pacemaker-attrd
  - Fix `crm_attribute -t nodes --node localhost`
  - Resolves: RHEL-13216
  - Resolves: RHEL-17225
  - Resolves: RHEL-23498


author: Chris Lumens <clumens@redhat.com> - 2.1.8-1
changelog:
  - Rebase on upstream 2.1.8-rc1 release
  - Fix a typo in the help output of pacemaker-fenced
  - Fix escaping characters in XML attribute output
  - Resolves: RHEL-25819
  - Resolves: RHEL-30822


author: Chris Lumens <clumens@redhat.com> - 2.1.8-2
changelog:
  - Rebase on upstream 2.1.8-rc4 release
  - Add ability to immediately shutdown system with PCMK_panic_action=
  - Fix a memory leak in the attribute daemon
  - Add ability to list options and parameters as parseable metadata
  - crm_verify now reports invalid fence level indexes
  - Fix an error in node ID handling in `crm_node -i`
  - Fix regression in attrd_updater output
  - Resolves: RHEL-39057
  - Resolves: RHEL-40117
  - Resolves: RHEL-23401
  - Resolves: RHEL-2996
  - Resolves: RHEL-47249
  - Resolves: RHEL-45935


author: Chris Lumens <clumens@redhat.com> - 2.1.9-1
changelog:
  - Rebase on upstream 2.1.9 final release
  - Use async communication to establish TLS connections
  - Fix regression in adding alerts to CIB
  - Fix a crash in command line tools when stderr is closed
  - Resolves: RHEL-61382
  - Resolves: RHEL-34276
  - Resolves: RHEL-55458
  - Resolves: RHEL-59043


author: Chris Lumens <clumens@redhat.com> - 2.1.10-1
changelog:
  - Rebase on upstream 2.1.10-rc1 release
  - Use dbus to detect completion of systemd resource start/stop actions
  - Add an option for controlling remote node fencing behavior
  - Related: RHEL-89134
  - Resolves: RHEL-86143
  - Resolves: RHEL-84018


author: EL Errata <el-errata_ww@oracle.com> - 2.1.10-1.0.1
changelog:
  - Replace bug url [Orabug: 34202300]
  - Upstream reference in pacemaker crm_report binary [Orabug: 32825154]


author: Chris Lumens <clumens@redhat.com> - 2.1.10-2
changelog:
  - Handle large timeouts correctly in crm_resource --wait
  - Do not try to connect to subdaemons before they're respawned
  - Don't evict IPC clients as long as they're still processing messages
  - Don't overwhelm the FSA queue with repeated CIB queries
  - Resolves: RHEL-45869
  - Resolves: RHEL-87484
  - Resolves: RHEL-114894


author: Ken Gaillot <kgaillot@redhat.com> - 2.1.3-1
changelog:
  - Unable to show metadata for "service" agents with "@" and "." in the name
  - Resource ocf:pacemaker:attribute does not comply with the OCF 1.1 standard
  - Pacemaker does not convert & to &amp; when generating metadata for non-ocf agents
  - Rebase pacemaker on upstream 2.1.3 release
  - Resolves: rhbz2045110
  - Resolves: rhbz2049720
  - Resolves: rhbz2050259
  - Resolves: rhbz2072108


author: Chris Lumens <clumens@redhat.com> - 2.1.4-5.1
changelog:
  - Fix regression where reordered resources do not get moved
  - Execute resource metadata actions asynchronously
  - Resolves: rhbz2128035
  - Resolves: rhbz2128036


author: Chris Lumens <clumens@redhat.com> - 2.1.5-1
changelog:
  - Rebase on upstream 2.1.5-rc2 release
  - Resolves: rhbz2123727
  - Resolves: rhbz2125337
  - Resolves: rhbz2125344
  - Resolves: rhbz2133546
  - Resolves: rhbz2142683


author: Chris Lumens <clumens@redhat.com> - 2.1.5-4
changelog:
  - Rebase pacemaker on upstream 2.1.5 final release
  - Add support for sync points to attribute daemon
  - Resolves: rhbz2122353


author: Chris Lumens <clumens@redhat.com> - 2.1.5-6
changelog:
  - Backport fix for migration history cleanup causing resource recovery
  - Backport fix for SIGABRT during pacemaker-fenced shutdown
  - Resolves: rhbz2166393
  - Resolves: rhbz2166967


author: Chris Lumens <clumens@redhat.com> - 2.1.5-7
changelog:
  - Additional fixes for SIGABRT during pacemaker-fenced shutdown
  - Backport fix for attrd_updater -QA not displaying all nodes
  - Related: rhbz2166967
  - Resolves: rhbz2169829


author: Chris Lumens <clumens@redhat.com> - 2.1.6-4
changelog:
  - Fix moving groups when there's a constraint for a single group member
  - Resolves: rhbz2218218
  - Resolves: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-5
changelog:
  - Clone instances should not shuffle unnecessarily
  - Fix a bug in clone resource description display
  - Resolves: rhbz2222055
  - Related: rhbz2189301


author: Chris Lumens <clumens@redhat.com> - 2.1.6-6
changelog:
  - Apply dampening when creating attributes with attrd_updater -U
  - Resolves: rhbz2224051
  - Related: rhbz2189301


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 2.1.7-5.2.0.1
changelog:
  - Memory leak in pacemaker-attrd
  - crm_node mishandles node IDs
  - Resolves: RHEL-40118
  - Resolves: RHEL-49925


author: Jens Petersen <petersen@redhat.com> - 2.9.2.1-5
changelog:
  - https://hackage.haskell.org/package/pandoc-2.9.2.1/changelog
  - subpackage base-noprelude
  - bitarray and unicode-transforms were packaged


author: Paul Howarth <paul@city-fan.org> - 0.400002-13
changelog:
  - Avoid optional test dependency perl(Moo) for EPEL builds
  - Use author-independent source URL
  - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 1.16-10
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Classify builds by usage
    - Drop redundant buildroot cleaning in %install section
    - Don't need to delete empty directories from the buildroot
    - Make %files list more explicit


author: Paul Howarth <paul@city-fan.org> - 1.22-1
changelog:
  - Update to 1.22
    - Removed embedded copy of Config::AutoConf from distro.; instead, this is
      now a configure phase prereq. (GH#19)
    - Moved list of constants in libmagic that we care about to one module (GH#20)
    - Add support for setting libmagic processing limits (GH#15, GH#22)
    - Add two class methods that provide introspection on the available limit
      processing parameters, max_param_constant() and limit_key_is_supported()
      (GH#24)
    - Check all libmagic function return values properly and croak on failure
      (GH#21)
    - Switched to using GitHub issues
  - Package CONTRIBUTING.md


author: Paul Howarth <paul@city-fan.org> - 1.23-1
changelog:
  - Update to 1.23
    - Fixed a bug with the Makefile.PL that caused every call to "make" to
      recompile the object file for the package's XS code (GH#28)


author: Emmanuel Seyman <emmanuel@seyman.fr> - 2.003006-1
changelog:
  - Update to 2.003006
  - Replace calls to %{__perl} with /usr/bin/perl
  - Replace calls to "make pure_install" with %{make_install}
  - Replace calls to make with %{make_build}
  - Pass NO_PERLLOCAL=1 to Makefile.PL


author: Tom Stellard <tstellar@redhat.com> - 1.8-3
changelog:
  - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
    - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
    - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker


author: Paul Howarth <paul@city-fan.org> - 2.100-1
changelog:
  - Update to 2.100
    - Declare vars with our instead of use vars (GH#7)
    - Quote $VERSION to preserve formatting (GH#6)
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 0.25-24
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.16-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Drop redundant buildroot cleaning in %install section
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Paul Howarth <paul@city-fan.org> - 0.05-15
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build requirements
    - Simplify find command using -delete


author: Paul Howarth <paul@city-fan.org> - 0.19-1
changelog:
  - Update to 0.19
    - Noted that the module is now deprecated
    - Added a list of alternatives to SEE ALSO


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845547


author: Red Hat PKI Team <rhcs-maint@redhat.com> - 3.0.26-13
changelog:
  - Replace jboss-annotations-1.2-api with jakarta-annotations
  - Drop log4j dependency
  - Add jakarta-activation dependency


author: Fridrich Strba <fstrba@suse.com>
changelog:
  - Upgrade to version 2.1.0
  - Removed patch:
    * 0001-Port-to-current-qdox.patch
      + integrated upstream
  - Added patch:
    * plexus-containers-asm6.patch
      + allow building against asm6
  - Specify maven.compiler.release to fix build with jdk9+ and newer
    maven-javadoc-plugin


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-1.20210323git8a3c9bb
changelog:
  - Update to 0.9.5 + a bunch of extra fixes from git (new upstream git snapshot)
  - Fixes 1896929 - systemd complains about Unit configured to use KillMode=none


author: Hans de Goede <hdegoede@redhat.com> - 0.9.5-2.20210331git1ea1020
changelog:
  - New git snapshot
  - Fixes 1933378 - Bootsplash doesn't always fully clear on boot to console
  - Fixes 1941329 - Flickering plymouth on shutdown/reboot
  - Prune spec-file changelog a bit


author: Honza Horak <hhorak@redhat.com> - 13.3-6
changelog:
  - Do not provide pkgconfig(libpq) to not trick packages that actually require
    libpq-devel
    Resolves: #1980992


author: Filip Januš <fjanus@redhat.com> - 13.3-9
changelog:
  - Remove tests failing with openssl3, now pgp is tested only with
    supported ciphers
    Add postgresql-pgcrypto-openssl3-init.patch - Correctly init ciphers
    Add postgresql-pgcrypto-openssl3-tests.patch - disable unsupported
    ciphers in the test suite
    Related discussion: #2008773
    Resolves: #1964848


author: Marek Kulik <mkulik@redhat.com> - 13.5-1
changelog:
  - Update to 13.5 (#2023301)
    Remove patch postgresql-pgcrypto-openssl3-init.patch - Already in upstream


author: Filip Januš <fjanus@redhat.com> - 13.7-1
changelog:
  - Resolves: CVE-2022-1552
  - Update to 13.7
  - Release notes: https://www.postgresql.org/docs/release/13.7/


author: Jan Rybar <jrybar@redhat.com> - 3.3.16-2
changelog:
  - ps: new exe format option to show real path to exe
  - pidof: new -w option to show kernel worker threads
  - pkill: manpage to document -e option
  - Resolves: bz#1629413
  - Resolves: bz#1399206


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-6
changelog:
  - free: backport new 'used' calculation
  - sysctl: backport support of systemd glob patterns
  - Resolves: rhbz#2003033
  - Resolves: rhbz#2052536


author: Jan Rybar <jrybar@redhat.com> - 3.3.17-7
changelog:
  - sysctl: backport - keys with dots instead of slashes again
  - Resolves: rhbz#2116977
  - Related: rhbz#2052536


author: Miro Hrončok <mhroncok@redhat.com> - 1.4-7
changelog:
  - Subpackage python2-blinker has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.2-9
changelog:
  - Resolves: rhbz#1960905 : License corrected to ASL 2.0
  - See upstream commit 4bdf076 and release 1.0.7
  - Added CI tests


author: Miro Hrončok <mhroncok@redhat.com> - 20.3-1
changelog:
  - Update to 20.3
  - Add support for PEP 600: Future manylinux Platform Tags
  - New resolver
  - Fixes: rhbz#1893470


author: Miro Hrončok <mhroncok@redhat.com> - 21.0.1-2
changelog:
  - python-pip-wheel: Remove bundled provides and libcrypt recommends for Python 2
    (The wheel is Python 3 only for a while)


author: Tomas Orsava <torsava@redhat.com> - 21.0.1-5
changelog:
  - Provide the platform-python-pip name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Miro Hrončok <mhroncok@redhat.com> - 4.0-8
changelog:
  - Subpackage python2-pytest-runner has been removed
    See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.1-1
changelog:
  - Update to 51.1.1
  - Fixes test failures with pip 20.3 as well as with pytest 6.2+
  - Fixes: rhbz#1909575


author: Miro Hrončok <mhroncok@redhat.com> - 51.1.2-1
changelog:
  - Update to 51.1.2
  - Removes tests from the wheel
  - https://setuptools.readthedocs.io/en/latest/history.html#v51-1-2
  - Fixes: rhbz#1914481


author: Miro Hrončok <mhroncok@redhat.com> - 53.0.0-1
changelog:
  - Update to 53.0.0
  - https://setuptools.readthedocs.io/en/latest/history.html#v53-0-0
  - Fixes: rhbz#1923249


author: Tomas Orsava <torsava@redhat.com> - 53.0.0-5
changelog:
  - Provide the platform-python-setuptools name for backwards compatibility
    with RHEL 8
  - Related: rhbz#1891487


author: Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-1.el9
changelog:
  - ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
  - ACPI ERST: bios-tables-test testcase (Eric DeVolder)
  - ACPI ERST: qtest for ERST (Eric DeVolder)
  - ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
  - ACPI ERST: build the ACPI ERST table (Eric DeVolder)
  - ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
  - ACPI ERST: header file for ERST (Eric DeVolder)
  - ACPI ERST: PCI device_id for ERST (Eric DeVolder)
  - hw/nvme: fix CVE-2021-3929 (Klaus Jensen) [Orabug: 33866395] {CVE-2021-3929}
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
  - oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
  - tests/plugin/syscall.c: fix compiler warnings (Juro Bystricky)
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
  - migration: increase listening socket backlog (Elena Ufimtseva)
  - virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
  - virtiofsd: Drop membership of all supplementary groups (CVE-2022-0358) (Vivek Goyal) [Orabug: 33816690] {CVE-2022-0358}
  - acpi: validate hotplug selector on access (Michael S. Tsirkin) [Orabug: 33816625] {CVE-2021-4158}
  - Update to QEMU 6.1.1 (Karl Heubaum)


author: Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-2.el9
changelog:
  - vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941752] {CVE-2022-26354}
  - qemu_regdump.py/qmp-regdump: Switch to Python 3 (Karl Heubaum)
  - block/mirror: fix NULL pointer dereference in mirror_wait_on_conflicts() (Stefano Garzarella) [Orabug: 33916572] {CVE-2021-4145}


author: Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-3.el9
changelog:
  - acpi: pcihp: pcie: set power on cap on parent slot (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - pci: implement power state (Gerd Hoffmann) [Orabug: 33984018] [Orabug: 33995665]
  - tests: bios-tables-test update expected blobs (Igor Mammedov) [Orabug: 33984018] [Orabug: 33995665]
  - hw/i386/acpi-build: Deny control on PCIe Native Hot-plug in _OSC (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
  - bios-tables-test: Allow changes in DSDT ACPI tables (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]
  - hw/acpi/ich9: Add compat prop to keep HPC bit set for 6.1 machine type (Julia Suvorova) [Orabug: 33984018] [Orabug: 33995665]


author: Karl Heubaum <karl.heubaum@oracle.com> - 6.1.1-4.el9
changelog:
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34591445] {CVE-2021-4207}
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34591281] {CVE-2021-4206}
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34590706] {CVE-2022-0216}
  - tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34590706] {CVE-2022-0216}
  - virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 34538375] {CVE-2022-26353}
  - vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34528963]
  - Revert "vfio: Avoid disabling and enabling vectors repeatedly in VFIO migration" (Mike Longpeng) [Orabug: 34528963]
  - vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
  - vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34528963]
  - vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34528963]
  - kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34528963]
  - kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34528963]
  - event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34528963]
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)
  - vhost-vdpa: backend feature should set only once (Si-Wei Liu)
  - vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)
  - virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)
  - virtio: fix the condition for iommu_platform not supported (Halil Pasic)
  - vdpa: Make ncs autofree (Eugenio Perez)
  - vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)
  - vhost-vdpa: stick to -errno error return convention (Roman Kagan)
  - vdpa: Add dummy receive callback (Eugenio Perez)
  - vdpa: Check for existence of opts.vhostdev (Eugenio Perez)
  - vdpa: Replace qemu_open_old by qemu_open at (Eugenio Perez)
  - vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez)
  - vhost: Rename last_index to vq_index_end (Eugenio Perez)
  - net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)
  - vhost-vdpa: Set discarding of RAM broken when initializing the backend (David Hildenbrand)
  - vhost-vdpa: multiqueue support (Jason Wang)
  - virtio-net: vhost control virtqueue support (Jason Wang)
  - vhost: record the last virtqueue index for the virtio device (Jason Wang)
  - virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)
  - vhost-net: control virtqueue support (Jason Wang)
  - net: introduce control client (Jason Wang)
  - vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)
  - vhost-vdpa: prepare for the multiqueue support (Jason Wang)
  - vhost-vdpa: classify one time request (Jason Wang)
  - vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)
  - vdpa: Check for iova range at mappings changes (Eugenio Perez)
  - vdpa: Add vhost_vdpa_section_end (Eugenio Perez)
  - net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)
  - net/vhost-user: Fix device compatibility check (Kevin Wolf)
  - net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)
  - memory: Name all the memory listeners (Peter Xu)
  - vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)
  - vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)
  - vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)
  - vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)
  - vhost_net: do not assume nvqs is always 2 (Jason Wang)
  - vhost: use unsigned int for nvqs (Jason Wang)
  - vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)
  - vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)
  - vhost-vdpa: remove unused variable "acked_features" (Jason Wang)
  - vhost: correctly detect the enabling IOMMU (Jason Wang)
  - virtio-pci: implement iommu_enabled() (Jason Wang)
  - virtio-bus: introduce iommu_enabled() (Jason Wang)
  - hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)
  - vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez)
  - target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]


author: Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-1.el9
changelog:
  - vl: Add an -action option to override MCE handling (Mark Kanda)
  - hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)
  - migration: increase listening socket backlog (Elena Ufimtseva)
  - virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)
  - Update to QEMU 7.2.0 (Karl Heubaum)


author: Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-2.el9
changelog:
  - spec: allow have_tools 0 (Steve Sistare)
  - spec: allow no block device modules (Steve Sistare)
  - qemu-kvm.spec: fix Linux io_uring support (Mark Kanda)
  - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219295]
  - oslib-posix: fix uninitialized var in wait_mem_prealloc() (Mark Kanda)
  - vfio/migration: Rename entry points (Alex Williamson)
  - docs/devel: Document VFIO device dirty page tracking (Avihai Horon)
  - vfio/migration: Query device dirty page tracking support (Joao Martins)
  - vfio/migration: Block migration with vIOMMU (Joao Martins)
  - vfio/common: Add device dirty page bitmap sync (Joao Martins)
  - vfio/common: Extract code from vfio_get_dirty_bitmap() to new function (Avihai Horon)
  - vfio/common: Add device dirty page tracking start/stop (Joao Martins)
  - vfio/common: Record DMA mapped IOVA ranges (Joao Martins)
  - vfio/common: Add helper to consolidate iova/end calculation (Joao Martins)
  - vfio/common: Consolidate skip/invalid section into helper (Joao Martins)
  - vfio/common: Use a single tracepoint for skipped sections (Joao Martins)
  - vfio/common: Add helper to validate iova/end against hostwin (Joao Martins)
  - vfio/common: Add VFIOBitmap and alloc function (Avihai Horon)
  - vfio/common: Abort migration if dirty log start/stop/sync fails (Avihai Horon)
  - vfio/common: Fix wrong %m usages (Avihai Horon)
  - vfio/common: Fix error reporting in vfio_get_dirty_bitmap() (Avihai Horon)
  - docs/devel: Align VFIO migration docs to v2 protocol (Avihai Horon)
  - vfio: Alphabetize migration section of VFIO trace-events file (Avihai Horon)
  - vfio/migration: Remove VFIO migration protocol v1 (Avihai Horon)
  - vfio/migration: Implement VFIO migration protocol v2 (Avihai Horon)
  - vfio/migration: Rename functions/structs related to v1 protocol (Avihai Horon)
  - vfio/migration: Move migration v1 logic to vfio_migration_init() (Avihai Horon)
  - vfio/migration: Block multiple devices migration (Avihai Horon)
  - vfio/common: Change vfio_devices_all_running_and_saving() logic to equivalent one (Avihai Horon)
  - vfio/migration: Allow migration without VFIO IOMMU dirty tracking support (Avihai Horon)
  - vfio/migration: Fix NULL pointer dereference bug (Avihai Horon)
  - linux-headers: Update to v6.2-rc8 (Avihai Horon)
  - migration/qemu-file: Add qemu_file_get_to_fd() (Avihai Horon)
  - migration: Rename res_{postcopy,precopy}_only (Juan Quintela)
  - migration: Remove unused res_compatible (Juan Quintela)
  - migration: In case of postcopy, the memory ends in res_postcopy_only (Juan Quintela)
  - migration: I messed state_pending_exact/estimate (Juan Quintela)
  - linux-headers: Update to v6.1 (Peter Xu)
  - migration: simplify migration_iteration_run() (Juan Quintela)
  - migration: Remove unused threshold_size parameter (Juan Quintela)
  - migration: Split save_live_pending() into state_pending_* (Juan Quintela)
  - migration: No save_live_pending() method uses the QEMUFile parameter (Juan Quintela)
  - Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Karl Heubaum) [Orabug: 35161059]
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
  - oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]
  - qemu-kvm.spec: vhost-user is conditional (Steve Sistare) 
  - qemu-kvm.spec: libseccomp is conditional (Steve Sistare)


author: Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-3.el9
changelog:
  - vfio/migration: Skip log_sync during migration SETUP state (Avihai Horon) [Orabug: 35384144]
  - migration: fix ram_state_pending_exact() (Juan Quintela) [Orabug: 35384144]


author: Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-4.el9
changelog:
  - vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
  - vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
  - sysemu: Add pre VM state change callback (Avihai Horon)
  - vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
  - vfio/common: Add an option to relax vIOMMU usage (Joao Martins)
  - virtio-rng-pci: fix transitional migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
  - virtio-rng-pci: fix migration compat for vectors (David Alan Gilbert) [Orabug: 35595177]
  - vfio: Fix null pointer dereference bug in vfio_bars_finalize() (Avihai Horon)
  - vfio/migration: Return bool type for vfio_migration_realize() (Zhenzhong Duan)
  - vfio/migration: Remove print of "Migration disabled" (Zhenzhong Duan)
  - vfio/migration: Free resources when vfio_migration_realize fails (Zhenzhong Duan)
  - vfio/migration: Change vIOMMU blocker from global to per device (Zhenzhong Duan)
  - vfio/pci: Disable INTx in vfio_realize error path (Zhenzhong Duan)
  - vfio/pci: Free leaked timer in vfio_realize error path (Zhenzhong Duan)
  - vfio/pci: Fix a segfault in vfio_realize (Zhenzhong Duan)
  - vfio/migration: Make VFIO migration non-experimental (Avihai Horon)
  - vfio/migration: Reset bytes_transferred properly (Avihai Horon)
  - vfio/pci: Call vfio_prepare_kvm_msi_virq_batch() in MSI retry path (Shameer Kolothum)
  - vfio/migration: Add support for switchover ack capability (Avihai Horon)
  - vfio/migration: Add VFIO migration pre-copy support (Avihai Horon)
  - vfio/migration: Store VFIO migration flags in VFIOMigration (Avihai Horon)
  - vfio/migration: Refactor vfio_save_block() to return saved data size (Avihai Horon)
  - tests: Add migration switchover ack capability test (Avihai Horon)
  - migration: Enable switchover ack capability (Avihai Horon)
  - migration: Implement switchover ack logic (Avihai Horon)
  - migration: Add switchover ack capability (Avihai Horon)
  - target/i386: Add EPYC-Genoa model to support Zen 4 processor series (Babu Moger) [Orabug: 35555649]
  - target/i386: Add VNMI and automatic IBRS feature bits (Babu Moger) [Orabug: 35555649]
  - target/i386: Add missing feature bits in EPYC-Milan model (Babu Moger) [Orabug: 35555649]
  - target/i386: Add feature bits for CPUID_Fn80000021_EAX (Babu Moger) [Orabug: 35555649]
  - target/i386: Add a couple of feature bits in 8000_0008_EBX (Babu Moger) [Orabug: 35555649]
  - target/i386: Add new EPYC CPU versions with updated cache_info (Michael Roth) [Orabug: 35555649]
  - target/i386: allow versioned CPUs to specify new cache_info (Michael Roth) [Orabug: 35555649]
  - target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 35562155]
  - Makefile: qemu-bundle is a directory (Juan Quintela)
  - 9pfs: prevent opening special files (CVE-2023-2861) (Christian Schoenebeck) [Orabug: 35570017] {CVE-2023-2861}
  - pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 33642532]
  - pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]
  - pc: q35: Bump max_cpus to 1024 (Suravee Suthikulpanit) [Orabug: 35425619]


author: Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-5.el9
changelog:
  - virtio-crypto: verify src&dst buffer length for sym request (zhenwei pi) [Orabug: 35683774] {CVE-2023-3180}
  - io: remove io watch if TLS channel is closed during handshake (Daniel P. Berrangé) [Orabug: 35683826] {CVE-2023-3354}
  - ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255) (Mauro Matteo Cascella) [Orabug: 35683770] {CVE-2023-3255}
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35683817] {CVE-2023-0330}
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha) [Orabug: 35649138] {CVE-2023-3301}
  - qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)


author: Karl Heubaum <karl.heubaum@oracle.com> - 7.2.0-6.el9
changelog:
  - hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35869694]
  - hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35869694]
  - hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35869694]
  - machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35869694]
  - migration/multifd: Move load_cleanup inside incoming_state_destroy (Leonardo Bras) [Orabug: 35829153]
  - migration/multifd: Join all multifd threads in order to avoid leaks (Leonardo Bras) [Orabug: 35829153]
  - migration/multifd: Remove unnecessary assignment on multifd_load_cleanup() (Leonardo Bras) [Orabug: 35829153]
  - migration/multifd: Change multifd_load_cleanup() signature and usage (Leonardo Bras) [Orabug: 35829153]
  - vfio/migration: Block VFIO migration with background snapshot (Avihai Horon)
  - vfio/migration: Block VFIO migration with postcopy migration (Avihai Horon)
  - migration: Add .save_prepare() handler to struct SaveVMHandlers (Avihai Horon)
  - migration: Move more initializations to migrate_init() (Avihai Horon)
  - vfio/migration: Fail adding device with enable-migration=on and existing blocker (Avihai Horon)
  - migration: Add migration prefix to functions in target.c (Avihai Horon)
  - vfio/migration: Allow migration of multiple P2P supporting devices (Avihai Horon)
  - vfio/migration: Add P2P support for VFIO migration (Avihai Horon)
  - vfio/migration: Refactor PRE_COPY and RUNNING state checks (Joao Martins)
  - qdev: Add qdev_add_vm_change_state_handler_full() (Avihai Horon)
  - sysemu: Add prepare callback to struct VMChangeStateEntry (Avihai Horon)
  - vfio/migration: Move from STOP_COPY to STOP in vfio_save_cleanup() (Avihai Horon)
  - hw/vfio: Add number of dirty pages to vfio_get_dirty_bitmap tracepoint (Joao Martins)
  - exec/ram_addr: Return number of dirty pages in cpu_physical_memory_set_dirty_lebitmap() (Joao Martins)
  - migration: fix populate_vfio_info (Steve Sistare)
  - vfio/migration: Revert out of tree P2P support (Joao Martins)
  - async: clarify usage of barriers in the polling case (Paolo Bonzini) [Orabug: 35871058]
  - async: update documentation of the memory barriers (Paolo Bonzini) [Orabug: 35871058]
  - physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35871058]
  - qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
  - qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35871058]
  - qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35871058]
  - dump: kdump-zlib data pages not dumped with pvtime/aarch64 (Dongli Zhang) [Orabug: 35777876]
  - hw/smbios: fix field corruption in type 4 table (Julia Suvorova) [Orabug: 35756216]
  - kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35728782]
  - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35728782]
  - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35728782]


author: Colin Walters <walters@verbum.org> - 2022.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2022.8
    Resolves: rhbz#2077062
    Resolves: rhbz#2023325


author: Luca BRUNO <lucab@redhat.com> - 2022.13-1
changelog:
  - New upstream version
    https://github.com/coreos/rpm-ostree/releases/tag/v2022.12
    Resolves: rhbz#2126108


author: Colin Walters <walters@verbum.org> - 2023.8-2
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2023.8
    https://issues.redhat.com/browse/RHEL-11294


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.3-1
changelog:
  - https://github.com/coreos/rpm-ostree/releases/tag/v2024.3
    Backport https://github.com/coreos/rpm-ostree/commit/fe586621e5014d14f92b913338171a02ed29e6cc
    Resolves: #RHEL-26186


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2024.5-1
changelog:
  - Rebase to 2024.5
    Adds fix for https://github.com/coreos/rpm-ostree/security/advisories/GHSA-2m76-cwhg-7wv6
    Resolves: #RHEL-30415


author: Joseph Marrero <jmarrero@fedoraproject.org> - 2025.6-4
changelog:
  - Backport: https://github.com/coreos/rpm-ostree/pull/5322
    Backport: https://github.com/coreos/rpm-ostree/pull/5339
    Resolves: #RHEL-84466


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 2.2.1-8
changelog:
  - Wrap rexml depedency with fedora release
  - Add upstream patch for rouge change
  - Add upstream patch to silence warnings from minitest


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
  - Regenerate spec file with gem2rpm.


author: Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 0.9.1-1
changelog:
  - Add BRs for tests, enable tests in %check.
  - Require /usr/bin/groff, not the package in case the file is moved.
  - Keep the license file in the original location.
  - Adjust various macros and invocations.


author: Michal Fabik <mfabik@redhat.com> 0.35-1
changelog:
  - New upstream version
   - Fix leaks in koops stacktrace- and report-handling code
   - Replace utility code with GLib functions
   - Fix unit test portability issue
   - Add build dependency on make


author: Michal Fabik <mfabik@redhat.com> 0.38-1
changelog:
  - New upstream version
   - lib: Use GLib for computing SHA-1 digests
   - sr_distances_cluster_objects: Check arg safety


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.22-1
changelog:
  - Allow sshd read filesystem sysctl files
  Resolves: rhbz#2036585
  - Revert "Allow sshd read sysctl files"
  Resolves: rhbz#2036585


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.23-1
changelog:
  - Allow systemd nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Label /var/run/user/%{USERID}/dbus with session_dbusd_tmp_t
  Resolves: rhbz#2000039
  - Change /run/user/[0-9]+ to /run/user/%{USERID} for proper labeling
  Resolves: rhbz#2000039
  - Allow scripts to enter LUKS password
  Resolves: rhbz#2048521
  - Allow system_mail_t read inherited apache system content rw files
  Resolves: rhbz#2049372
  - Add apache_read_inherited_sys_content_rw_files() interface
  Related: rhbz#2049372
  - Allow sanlock get attributes of filesystems with extended attributes
  Resolves: rhbz#2047811
  - Associate stratisd_data_t with device filesystem
  Resolves: rhbz#2039974
  - Allow init read stratis data symlinks
  Resolves: rhbz#2039974
  - Label /run/stratisd with stratisd_var_run_t
  Resolves: rhbz#2039974
  - Allow domtrans to sssd_t and role access to sssd
  Resolves: rhbz#2039757
  - Creating interface sssd_run_sssd()
  Resolves: rhbz#2039757
  - Fix badly indented used interfaces
  Resolves: rhbz#2039757
  - Allow domain transition to sssd_t
  Resolves: rhbz#2039757
  - Label /dev/nvme-fabrics with fixed_disk_device_t
  Resolves: rhbz#2039759
  - Allow local_login_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Allow xdm_t nnp_transition to login_userdomain
  Resolves: rhbz#2039453
  - Make cupsd_lpd_t a daemon
  Resolves: rhbz#2039449
  - Label utilities for exFAT filesystems with fsadm_exec_t
  Resolves: rhbz#1972225
  - Dontaudit sfcbd sys_ptrace cap_userns
  Resolves: rhbz#2040311


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.24-1
changelog:
  - Allow tumblerd write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow login_userdomain create session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gkeyringd_domain write to session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow systemd-logind delete session_dbusd tmp socket files
  Resolves: rhbz#2000039
  - Allow gdm-x-session write to session dbus tmp sock files
  Resolves: rhbz#2000039
  - Allow sysadm_t nnp_domtrans to systemd_tmpfiles_t
  Resolves: rhbz#2039453
  - Label exFAT utilities at /usr/sbin
  Resolves: rhbz#1972225


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.25-1
changelog:
  - Allow systemd watch unallocated ttys
  Resolves: rhbz#2054150
  - Allow alsa bind mixer controls to led triggers
  Resolves: rhbz#2049732
  - Allow alsactl set group Process ID of a process
  Resolves: rhbz#2049732
  - Allow unconfined to run virtd bpf
  Resolves: rhbz#2033504


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.26-1
changelog:
  - Remove permissive domain for insights_client_t
  Resolves: rhbz#2055823
  - New policy for insight-client
  Resolves: rhbz#2055823
  - Allow confined sysadmin to use tool vipw
  Resolves: rhbz#2053458
  - Allow chage domtrans to sssd
  Resolves: rhbz#2054657
  - Remove label for /usr/sbin/bgpd
  Resolves: rhbz#2055578
  - Dontaudit pkcsslotd sys_admin capability
  Resolves: rhbz#2055639
  - Do not change selinuxuser_execmod and selinuxuser_execstack
  Resolves: rhbz#2055822
  - Allow tuned to read rhsmcertd config files
  Resolves: rhbz#2055823


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.27-1
changelog:
  - Allow ModemManager connect to the unconfined user domain
  Resolves: rhbz#2000196
  - Label /dev/wwan.+ with modem_manager_t
  Resolves: rhbz#2000196
  - Allow systemd-coredump userns capabilities and root mounton
  Resolves: rhbz#2057435
  - Allow systemd-coredump read and write usermodehelper state
  Resolves: rhbz#2057435
  - Allow sysadm_passwd_t to relabel passwd and group files
  Resolves: rhbz#2053458
  - Allow systemd-sysctl read the security state information
  Resolves: rhbz#2056999
  - Remove unnecessary /etc file transitions for insights-client
  Resolves: rhbz#2055823
  - Label all content in /var/lib/insights with insights_client_var_lib_t
  Resolves: rhbz#2055823
  - Update insights-client policy
  Resolves: rhbz#2055823
  - Update insights-client: fc pattern, motd, writing to etc
  Resolves: rhbz#2055823
  - Update specfile to buildrequire policycoreutils-devel >= 3.3-5
  - Add modules_checksum to %files


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.28-1
changelog:
  - Allow logrotate a domain transition to cluster administrative domain
  Resolves: rhbz#2061277
  - Change the selinuxuser_execstack boolean value to true
  Resolves: rhbz#2064274


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1
changelog:
  - Allow qemu-kvm create and use netlink rdma sockets
  Resolves: rhbz#2063612
  - Label corosync-cfgtool with cluster_exec_t
  Resolves: rhbz#2061277


author: EL Errata <el-errata_ww@oracle.com> - 34.1.29-1.0.1
changelog:
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow administrative users the bpf capability [Orabug: 33803450]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1.1
changelog:
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2106147
  - Allow transition to insights_client named content
  Resolves: rhbz#2106147
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2106147
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2106147
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2106147
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2106147
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2106147
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2106147
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2106147
  - Change rpm_setattr_db_files() to use a pattern
  Resolves: rhbz#2106147
  - Add rpm setattr db files macro
  Resolves: rhbz#2106147
  - Fix insights client
  Resolves: rhbz#2106147
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2106147
  - Label /var/cache/insights with insights_client_cache_t
  Resolves: rhbz#2106147
  - Allow insights-client manage gpg admin home content
  Resolves: rhbz#2106147
  - Add the gpg_manage_admin_home_content() interface
  Resolves: rhbz#2106147
  - Allow insights-client create and use unix_dgram_socket
  Resolves: rhbz#2106147
  - Allow insights-client search gconf homedir
  Resolves: rhbz#2106147
  - Allow insights-client create_socket_perms for tcp/udp sockets
  Resolves: rhbz#2106147
  - Allow insights-client read rhnsd config files
  Resolves: rhbz#2106147


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.29-1.2
changelog:
  - Allow insights-client rpm named file transitions
  Resolves: rhbz#2106147
  - Add /var/tmp/insights-archive to insights_client_filetrans_named_content
  Resolves: rhbz#2106147
  - Use insights_client_filetrans_named_content
  Resolves: rhbz#2106147
  - Make default file context match with named transitions
  Resolves: rhbz#2106147
  - Allow rhsmcertd to read insights config files
  Resolves: rhbz#2106147
  - Label /etc/insights-client/machine-id
  Resolves: rhbz#2106147
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#2106147
  - Add the insights_search_config() interface
  Resolves: rhbz#2106147


author: EL Errata <el-errata_ww@oracle.com> - 34.1.29-1.0.4
changelog:
  - Add the corecmd_watch_bin_dirs() interface [Orabug: 34322059]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow administrative users the bpf capability [Orabug: 33803450]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.35-1
changelog:
  -Add the corecmd_watch_bin_dirs() interface
  Resolves: rhbz#1965013
  - Update rhcd policy
  Resolves: rhbz#1965013
  - Allow rhcd search insights configuration directories
  Resolves: rhbz#1965013
  - Add the kernel_read_proc_files() interface
  Resolves: rhbz#1965013
  - Update insights_client_filetrans_named_content()
  Resolves: rhbz#2081425
  - Allow transition to insights_client named content
  Resolves: rhbz#2081425
  - Add the insights_client_filetrans_named_content() interface
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 3
  Resolves: rhbz#2081425
  - Allow insights-client execute its private memfd: objects
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands 2
  Resolves: rhbz#2081425
  - Use insights_client_tmp_t instead of insights_client_var_tmp_t
  Resolves: rhbz#2081425
  - Change space indentation to tab in insights-client
  Resolves: rhbz#2081425
  - Use socket permissions sets in insights-client
  Resolves: rhbz#2081425
  - Update policy for insights-client to run additional commands
  Resolves: rhbz#2081425
  - Allow init_t to rw insights_client unnamed pipe
  Resolves: rhbz#2081425
  - Fix insights client
  Resolves: rhbz#2081425
  - Update kernel_read_unix_sysctls() for sysctl_net_unix_t handling
  Resolves: rhbz#2081425
  - Do not let system_cronjob_t create redhat-access-insights.log with var_log_t
  Resolves: rhbz#2081425
  - Allow stalld get scheduling policy of kernel threads
  Resolves: rhbz#2096776
  - Update samba-dcerpcd policy for kerberos usage
  Resolves: rhbz#2096521
  - Allow winbind_rpcd_t connect to self over a unix_stream_socket
  Resolves: rhbz#2096255
  - Allow dlm_controld send a null signal to a cluster daemon
  Resolves: rhbz#2095884
  - Allow dhclient manage pid files used by chronyd
  The chronyd_manage_pid_files() interface was added.
  - Resolves: rhbz#2094155
  Allow install_t nnp_domtrans to setfiles_mac_t
  - Resolves: rhbz#2073010
  - Allow rabbitmq to use systemd notify
  Resolves: rhbz#2056565
  - Allow ksmctl create hardware state information files
  Resolves: rhbz#2021131
  - Label /var/target with targetd_var_t
  Resolves: rhbz#2020169
  - Allow targetclid read generic SSL certificates
  Resolves: rhbz#2020169


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.36-1
changelog:
  - Allow targetclid read generic SSL certificates (fixed)
  Resolves: rhbz#2020169
  - Fix file context pattern for /var/target
  Resolves: rhbz#2020169
  - Use insights_client_etc_t in insights_search_config()
  Resolves: rhbz#1965013


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.37-1
changelog:
  - Allow targetclid read /var/target files
  Resolves: rhbz#2020169
  - Update samba-dcerpcd policy for kerberos usage 2
  Resolves: rhbz#2096521
  - Allow samba-dcerpcd work with sssd
  Resolves: rhbz#2096521
  - Allow stalld set scheduling policy of kernel threads
  Resolves: rhbz#2102224


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.38-1
changelog:
  - Allow some domains use sd_notify()
  Resolves: rhbz#2056565
  - Revert "Allow rabbitmq to use systemd notify"
  Resolves: rhbz#2056565
  - Update winbind_rpcd_t
  Resolves: rhbz#2102084
  - Update chronyd_pid_filetrans() to allow create dirs
  Resolves: rhbz#2101910
  - Allow keepalived read the contents of the sysfs filesystem
  Resolves: rhbz#2098130
  - Define LIBSEPOL version 3.4-1
  Resolves: rhbz#2095688


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.39-1
changelog:
  - Add support for systemd-network-generator
  Resolves: RHBZ#2111069
  - Allow systemd work with install_t unix stream sockets
  Resolves: rhbz#2111206
  - Allow sa-update to get init status and start systemd files
  Resolves: RHBZ#2061844


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.40-1
changelog:
  - Allow systemd-modules-load write to /dev/kmsg and send a message to syslogd
  Resolves: RHBZ#2088257
  - Allow systemd_hostnamed label /run/systemd/* as hostnamed_etc_t
  Resolves: RHBZ#1976684
  - Allow samba-bgqd get a printer list
  Resolves: rhbz#2112395
  - Allow networkmanager to signal unconfined process
  Resolves: RHBZ#2074414
  - Update NetworkManager-dispatcher policy
  Resolves: RHBZ#2101910
  - Allow openvswitch search tracefs dirs
  Resolves: rhbz#1988164
  - Allow openvswitch use its private tmpfs files and dirs
  Resolves: rhbz#1988164
  - Allow openvswitch fsetid capability
  Resolves: rhbz#1988164


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.41-1
changelog:
  - Allow unconfined domains to bpf all other domains
  Resolves: RHBZ#2112014
  - Allow stalld get and set scheduling policy of all domains.
  Resolves: rhbz#2105038
  - Allow unconfined_t transition to targetclid_home_t
  Resolves: RHBZ#2106360
  - Allow samba-bgqd to read a printer list
  Resolves: rhbz#2118977
  - Allow system_dbusd ioctl kernel with a unix stream sockets
  Resolves: rhbz#2085392
  - Allow chronyd bind UDP sockets to ptp_event ports.
  Resolves: RHBZ#2118631
  - Update tor_bind_all_unreserved_ports interface
  Resolves: RHBZ#2089486
  - Remove permissive domain for rhcd_t
  Resolves: rhbz#2119351
  - Allow unconfined and sysadm users transition for /root/.gnupg
  Resolves: rhbz#2121125
  - Add gpg_filetrans_admin_home_content() interface
  Resolves: rhbz#2121125
  - Update rhcd policy for executing additional commands
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution
  Resolves: rhbz#2119507
  - Add rpm setattr db files macro
  Resolves: rhbz#2119507
  - Add userdom_view_all_users_keys() interface
  Resolves: rhbz#2119507
  - Allow gpg read and write generic pty type
  Resolves: rhbz#2119507
  - Allow chronyc read and write generic pty type
  Resolves: rhbz#2119507


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.42-1
changelog:
  - Label /var/log/rhc-worker-playbook with rhcd_var_log_t
  Resolves: rhbz#2119351
  - Update insights-client policy (auditctl, gpg, journal)
  Resolves: rhbz#2107363


author: Zdenek Pytela <zpytela@redhat.com> - 34.1.43-1
changelog:
  - Update rhcd policy for executing additional commands 5
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 4
  Resolves: rhbz#2119351
  - Allow rhcd create rpm hawkey logs with correct label
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 3
  Resolves: rhbz#2119351
  - Allow sssd to set samba setting
  Resolves: rhbz#2121125
  - Allow journalctl read rhcd fifo files
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 5
  Resolves: rhbz#2121125
  - Confine insights-client systemd unit
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 4
  Resolves: rhbz#2121125
  - Update insights-client policy for additional commands execution 3
  Resolves: rhbz#2121125
  - Allow rhcd execute all executables
  Resolves: rhbz#2119351
  - Update rhcd policy for executing additional commands 2
  Resolves: rhbz#2119351
  - Update insights-client policy for additional commands execution 2
  Resolves: rhbz#2121125


author: EL Errata <el-errata_ww@oracle.com> - 34.1.43-1.0.1
changelog:
  - Allow system dbus daemon to watch generic /var/lib directory [Orabug: 34375044]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Nikola Knazekova <nknazeko@redhat.com> - 34.1.43-1.1
changelog:
  - Add domain_unix_read_all_semaphores() interface
  Resolves: rhbz#2136760
  - Allow rhcd compute selinux access vector
  Resolves: rhbz#2136760
  - Add file context entries for insights-client and rhc
  Resolves: rhbz#2136760
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2136760
  - Allow insights-client dbus chat with various services
  Resolves: rhbz#2136760
  - Allow insights-client tcp connect to various ports
  Resolves: rhbz#2136760
  - Allow insights-client run lpr and allow the proper role
  Resolves: rhbz#2136760
  - Allow insights-client work with pcp and manage user config files
  Resolves: rhbz#2136760
  - Allow insights-client dbus chat with abrt
  Resolves: rhbz#2136760
  - Allow insights client communicate with cupsd, mysqld, openvswitch, redis
  Resolves: rhbz#2136760
  - Allow insights client read raw memory devices
  Resolves: rhbz#2136760
  - Allow insights-client domain transition on semanage execution
  Resolves: rhbz#2136760
  - Allow insights-client create gluster log dir with a transition
  Resolves: rhbz#2136760
  - Allow insights-client manage generic locks
  Resolves: rhbz#2136760
  - Allow insights-client unix_read all domain semaphores
  Resolves: rhbz#2136760
  - Allow insights-client manage samba var dirs
  Resolves: rhbz#2136760
  - Allow insights-client send null signal to rpm and system cronjob
  Resolves: rhbz#2136760
  - Allow insights-client connect to postgresql with a unix socket
  Resolves: rhbz#2136760
  - Allow insights-client domtrans on unix_chkpwd execution
  Resolves: rhbz#2136760


author: EL Errata <el-errata_ww@oracle.com> - 34.1.43-1.0.3
changelog:
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow svirt_t domain to mmap svirt_image_t character files [Orabug: 34908824]
  - Allow system dbus daemon to watch generic /var/lib directory [Orabug: 34375044]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Revert "Dontaudit domain the fowner capability" [Orabug: 33952489]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow udev to watch fixed disk devices [Orabug: 33841093]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow cloud_init_t to dbus chat with systemd_logind_t [Orabug: 29399653]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.5-1
changelog:
  - Reuse tmpfs_t also for the ramfs filesystem
  Resolves: rhbz#2160391
  - Allow systemd-resolved watch tmpfs directories
  Resolves: rhbz#2160391
  - Allow hostname_t to read network sysctls.
  Resolves: rhbz#2161958
  - Allow ModemManager all permissions for netlink route socket
  Resolves: rhbz#2149560
  - Allow unconfined user filetransition for sudo log files
  Resolves: rhbz#2160388
  - Allow sudodomain use sudo.log as a logfile
  Resolves: rhbz#2160388
  - Allow nm-cloud-setup dispatcher plugin restart nm services
  Resolves: rhbz#2154414
  - Allow wg to send msg to kernel, write to syslog and dbus connections
  Resolves: rhbz#2149452
  - Allow rshim bpf cap2 and read sssd public files
  Resolves: rhbz#2080439
  - Allow svirt request the kernel to load a module
  Resolves: rhbz#2144735
  - Rebase selinux-policy to the latest one in rawhide
  Resolves: rhbz#2014606


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.6-1
changelog:
  - Allow modemmanager create hardware state information files
  Resolves: rhbz#2149560
  - Dontaudit ftpd the execmem permission
  Resolves: rhbz#2164434
  - Allow nm-dispatcher plugins read generic files in /proc
  Resolves: rhbz#2164845
  - Label systemd-journald feature LogNamespace
  Resolves: rhbz#2124797
  - Boolean: allow qemu-ga read ssh home directory
  Resolves: rhbz#1917024


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.7-1
changelog:
  - Allow staff_t getattr init pid chr & blk files and read krb5
  Resolves: rhbz#2112729
  - Allow firewalld to rw z90crypt device
  Resolves: rhbz#2166877
  - Allow httpd work with tokens in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.8-1
changelog:
  - Allow svirt to map svirt_image_t char files
  Resolves: rhbz#2170482
  - Fix opencryptoki file names in /dev/shm
  Resolves: rhbz#2166283


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.9-1
changelog:
  - Boolean: allow qemu-ga manage ssh home directory
  Resolves: rhbz#2178612
  - Allow wg load kernel modules, search debugfs dir
  Resolves: rhbz#2176487


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.10-1
changelog:
  - Add support for the passt_t domain
  Resolves: rhbz#2172268
  - Allow virtd_t and svirt_t work with passt
  Resolves: rhbz#2172268
  - Add new interfaces in the virt module
  Resolves: rhbz#2172268
  - Add passt interfaces defined conditionally
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1
changelog:
  - Allow passt manage qemu pid sock files
  Resolves: rhbz#2172268
  - Exclude passt.if from selinux-policy-devel
  Resolves: rhbz#2172268


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.11-1.1
changelog:
  - Allow dmidecode write to cloud-init tmp files
  Resolves: rhbz#2188391
  - Allow chronyd send a message to cloud-init over a datagram socket
  Resolves: rhbz#2188391
  - Allow cloud-init domain transition to insights-client domain
  Resolves: rhbz#2188391


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.2
changelog:
  - Allow kdumpctl_t to execmem [Orabug: 35381156]
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.3
changelog:
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: Darren Archibald <darren.archibald@oracle.com> - 38.1.11-2.0.1.3
changelog:
  - Oracle changes are now applied on top of new upstream patchset
  - Allow unconfined_service_t to create .gnupg labeled as gpg_secret_t
  Resolves: rhbz#2203797
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: David Sloboda <david.x.sloboda@oracle.com> - 38.1.11-2.0.1.4
changelog:
  - Oracle changes are now applied on top of new upstream patchset
  - Boolean: Allow virt_qemu_ga create ssh directory
  Resolves: rhbz#2226685
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  Resolves: rhbz#2226685
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  Resolves: rhbz#2229992
  - Allow firewalld rw ica_tmpfs_t files
  Resolves: rhbz#2233535
  - Allow systemd-timedated watch init runtime dir
  Resolves: rhbz#2232637


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.4-1
changelog:
  - Add lpr_roles  to system_r roles
  Resolves: rhbz#2152150
  - Allow insights client work with gluster and pcp
  Resolves: rhbz#2152150
  - Add interfaces in domain, files, and unconfined modules
  Resolves: rhbz#2152150
  - Label fwupdoffline and fwupd-detect-cet with fwupd_exec_t
  Resolves: rhbz#2152150
  - Add insights additional capabilities
  Resolves: rhbz#2152150
  - Revert "Allow insights-client run lpr and allow the proper role"
  Resolves: rhbz#2152150
  - Allow prosody manage its runtime socket files
  Resolves: rhbz#2157891
  - Allow syslogd read network sysctls
  Resolves: rhbz#2156068
  - Allow NetworkManager and wpa_supplicant the bpf capability
  Resolves: rhbz#2137085
  - Allow sysadm_t read/write ipmi devices
  Resolves: rhbz#2158419
  - Allow wireguard to create udp sockets and read net_conf
  Resolves: rhbz#2149452
  - Allow systemd-rfkill the bpf capability
  Resolves: rhbz#2149390
  - Allow load_policy_t write to unallocated ttys
  Resolves: rhbz#2145181
  - Allow winbind-rpcd manage samba_share_t files and dirs
  Resolves: rhbz#2150680


author: Pooja Senthil Kumar <pooja.senthil.kumar@oracle.com> - 38.1.11-2.0.1
changelog:
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Allow initrc_t to manage pid files used by chronyd [Orabug: 33520623]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make logrotate work with mls policy [Orabug: 32343731]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Enable policykit and sssd policy modules with minimum policy [Orabug: 29744511]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]


author: Zdenek Pytela <zpytela@redhat.com> - 38.1.15-1
changelog:
  - Add fs_delete_pstore_files() interface
  Resolves: rhbz#2181565
  - Add fs_read_pstore_files() interface
  Resolves: rhbz#2181565
  - Allow insights-client getsession process permission
  Resolves: rhbz#2214581
  - Allow insights-client work with pipe and socket tmp files
  Resolves: rhbz#2214581
  - Allow insights-client map generic log files
  Resolves: rhbz#2214581
  - Allow insights-client read unconfined service semaphores
  Resolves: rhbz#2214581
  - Allow insights-client get quotas of all filesystems
  Resolves: rhbz#2214581
  - Allow haproxy read hardware state information
  Resolves: rhbz#2164691
  - Allow cupsd dbus chat with xdm
  Resolves: rhbz#2143641
  - Allow dovecot_deliver_t create/map dovecot_spool_t dir/file
  Resolves: rhbz#2165863
  - Add none file context for polyinstantiated tmp dirs
  Resolves: rhbz#2099194
  - Add support for the systemd-pstore service
  Resolves: rhbz#2181565
  - Label /dev/userfaultfd with userfaultfd_t
  Resolves: rhbz#2175290
  - Allow collectd_t read proc_net link files
  Resolves: rhbz#2209650
  - Label smtpd with sendmail_exec_t
  Resolves: rhbz#2213573
  - Label msmtp and msmtpd with sendmail_exec_t
  Resolves: rhbz#2213573
  - Allow dovecot-deliver write to the main process runtime fifo files
  Resolves: rhbz#2211787
  - Allow subscription-manager execute ip
  Resolves: rhbz#2211566
  - Allow ftpd read network sysctls
  Resolves: rhbz#2175856


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.16-1
changelog:
  - Remove permissive from fdo
  Resolves: rhbz#2026795
  - Add the qatlib  module
  Resolves: rhbz#2080443
  - Add the fdo module
  Resolves: rhbz#2026795
  - Add the booth module to modules.conf
  Resolves: rhbz#2128833
  - Add policy for FIDO Device Onboard
  Resolves: rhbz#2026795
  - Create policy for qatlib
  Resolves: rhbz#2080443
  - Add policy for boothd
  Resolves: rhbz#2128833
  - Add list_dir_perms to kerberos_read_keytab
  Resolves: rhbz#2112729
  - Allow nsd_crond_t write nsd_var_run_t & connectto nsd_t
  Resolves: rhbz#2209973
  - Allow collectd_t read network state symlinks
  Resolves: rhbz#2209650
  - Revert "Allow collectd_t read proc_net link files"
  Resolves: rhbz#2209650
  - Allow insights-client execmem
  Resolves: rhbz#2207894
  - Label udf tools with fsadm_exec_t
  Resolves: rhbz#2039774


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.17-1
changelog:
  - Add the qatlib  module
  Resolves: rhbz#2080443
  - Add the fdo module
  Resolves: rhbz#2026795
  - Add the booth module to modules.conf
  Resolves: rhbz#2128833


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.18-1
changelog:
  - Boolean: Allow virt_qemu_ga create ssh directory
  Resolves: rhbz#2181402
  - Allow virt_qemu_ga_t create .ssh dir with correct label
  Resolves: rhbz#2181402
  - Set default ports for keylime policy
  Resolves: RHEL-594
  - Allow unconfined service inherit signal state from init
  Resolves: rhbz#2186233
  - Allow sa-update connect to systemlog services
  Resolves: rhbz#2220643
  - Allow sa-update manage spamc home files
  Resolves: rhbz#2220643
  - Label only /usr/sbin/ripd and ripngd with zebra_exec_t
  Resolves: rhbz#2213605
  - Add the files_getattr_non_auth_dirs() interface
  Resolves: rhbz#2076933
  - Update policy for the sblim-sfcb service
  Resolves: rhbz#2076933
  - Define equivalency for /run/systemd/generator.early
  Resolves: rhbz#2213516


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.19-1
changelog:
  - Allow qatlib to read sssd public files
  Resolves: rhbz#2080443
  - Fix location for /run/nsd
  Resolves: rhbz#2181600
  - Allow samba-rpcd work with passwords
  Resolves: rhbz#2107092
  - Allow rpcd_lsad setcap and use generic ptys
  Resolves: rhbz#2107092
  - Allow gpsd,oddjob,oddjob_mkhomedir rw user domain pty
  Resolves: rhbz#2223305
  - Allow keepalived to manage its tmp files
  Resolves: rhbz#2179212
  - Allow nscd watch system db dirs
  Resolves: rhbz#2152124


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.20-1
changelog:
  - Allow user_u and staff_u get attributes of non-security dirs
  Resolves: rhbz#2215507
  - Allow cloud_init create dhclient var files and init_t manage net_conf_t
  Resolves: rhbz#2225418
  - Allow samba-dcerpc service manage samba tmp files
  Resolves: rhbz#2230365
  - Update samba-dcerpc policy for printing
  Resolves: rhbz#2230365
  - Allow sysadm_t run kernel bpf programs
  Resolves: rhbz#2229936
  - allow mon_procd_t self:cap_userns sys_ptrace
  Resolves: rhbz#2221986
  - Remove nsplugin_role from mozilla.if
  Resolves: rhbz#2221251
  - Allow unconfined user filetrans chrome_sandbox_home_t
  Resolves: rhbz#2187893
  - Allow pdns name_bind and name_connect all ports
  Resolves: rhbz#2047945
  - Allow insights-client read and write cluster tmpfs files
  Resolves: rhbz#2221631
  - Allow ipsec read nsfs files
  Resolves: rhbz#2230277
  - Allow upsmon execute upsmon via a helper script
  Resolves: rhbz#2228403
  - Fix labeling for no-stub-resolv.conf
  Resolves: rhbz#2148390
  - Add use_nfs_home_dirs boolean for mozilla_plugin
  Resolves: rhbz#2214298
  - Change wording in /etc/selinux/config
  Resolves: rhbz#2143153


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.21-1
changelog:
  - Allow logrotate_t to map generic files in /etc
  Resolves: rhbz#2231257
  - Allow insights-client manage user temporary files
  Resolves: rhbz#2224737
  - Make insights_client_t an unconfined domain
  Resolves: rhbz#2225526


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.22-1
changelog:
  - Allow qatlib  to modify hardware state information.
  Resolves: rhbz#2080443
  - Update policy for fdo
  Resolves: rhbz#2229722
  - Allow gpsd, oddjob and oddjob_mkhomedir_t write user_tty_device_t chr_file
  Resolves: rhbz#2223305
  - Allow svirt to rw /dev/udmabuf
  Resolves: rhbz#2223727
  - Allow keepalived watch var_run dirs
  Resolves: rhbz#2186759


author: Nikola Knazekova <nknazeko@redhat.com> - 38.1.23-1
changelog:
  - Allow cups-pdf connect to the system log service
  Resolves: rhbz#2234765
  - Update policy for qatlib
  Resolves: rhbz#2080443


author: Naoki Tanaka <naoki.tanaka@oracle.com> - 38.1.23-1.0.1
changelog:
  - Allow kdumpctl_t to execmem [Orabug: 35381156]
  - Allow NetworkManager_dispatcher_dhclient_t to execute shells without a domain transition [Orabug: 35091334]
  - Allow NetworkManager_dispatcher_dhclient_t to read the DHCP configuration files [Orabug: 35122619]
  - Label /var/log/kdump.log with kdump_log_t [Orabug: 33810371]
  - Allow rpm_t sys_admin capability [Orabug: 34250651]
  - Make systemd_tmpfiles_t MLS trusted for lowering the level of files [Orabug: 33841245]
  - Allow nfsd_t to list exports_t dirs [Orabug: 33844301]
  - Allow fsadm_t to get attributes of cgroup filesystems [Orabug: 33841268]
  - Label /var/run/tmpfiles.d/static-nodes.conf with kmod_var_run_t [Orabug: 33841205]
  - Allow tuned_t to read the process state of all domains [Orabug: 33520684]
  - Make import-state work with mls policy [Orabug: 32636699]
  - Add map permission to lvm_t on lvm_metadata_t. [Orabug: 31405325]
  - Add comment for map on lvm_metadata_t. [Orabug: 31405325]
  - Make iscsiadm work with mls policy [Orabug: 32725411]
  - Make cloud-init work with mls policy [Orabug: 32430460]
  - Allow systemd-pstore to transfer files from /sys/fs/pstore [Orabug: 31594666]
  - Make smartd work with mls policy [Orabug: 32430379]
  - Allow sysadm_t to mmap modules_object_t files [Orabug: 32411855]
  - Allow tuned_t to execute systemd_systemctl_exec_t files [Orabug: 32355342]
  - Make udev work with mls policy [Orabug: 31405299]
  - Make tuned work with mls policy [Orabug: 31396024]
  - Make lsmd, rngd, and kdumpctl work with mls policy [Orabug: 31405378]
  - Allow virt_domain to mmap virt_content_t files [Orabug: 30932671]
  - Enable NetworkManager and dhclient to use initramfs-configured DHCP connection [Orabug: 30537515]
  - Allow udev_t to load modules [Orabug: 28260775]
  - Add vhost-scsi to be vhost_device_t type [Orabug: 27774921]
  - Fix container selinux policy [Orabug: 26427364]
  - Allow ocfs2_dlmfs to be mounted with ocfs2_dlmfs_t type. [Orabug: 13333429]
  - Add boolean qemu-ga to run unconfined script
  Resolves: rhbz#2093355
  - Allow cloud-init manage gpg admin home content
  Resolves: rhbz#2203797


author: Peter Jones <pjones@redhat.com> - 15-5
changelog:
  - Once more with the MokListRT config table patch added.
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-7
changelog:
  - Implement Lenny's workaround
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311


author: Peter Jones <pjones@redhat.com> - 15-8
changelog:
  - Fix a load-address-dependent forever loop.
    Resolves: rhbz#1861977
    Related: CVE-2020-10713
    Related: CVE-2020-14308
    Related: CVE-2020-14309
    Related: CVE-2020-14310
    Related: CVE-2020-14311
    Related: CVE-2020-15705
    Related: CVE-2020-15706
    Related: CVE-2020-15707


author: Alex Burmashev <alexander.burmashev@oracle.com> - 15.5-1.0.1
changelog:
  - Allow MokListTrusted to be enabled by default [Orabug: 33770149]
  - Add patchset to load additional certificates from vendor signed EFI binary [Orabug: 33770149]


author: Petr Pisar <ppisar@redhat.com> - 2.5.9-2
changelog:
  - Modernize spec file
  - License corrected to
    ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))


author: Dominik Mierzejewski <rpm@greysector.net> 1.3.5-1
changelog:
  - update to 1.3.5
  - update upstream location
  - include SO version in files list to avoid unexpected bumps
  - use modern macros
  - drop obsolete comments


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-4
changelog:
  - Don't start unbound-anchor before unbound service if DISABLE_UNBOUND_ANCHOR
    environment variable equals to "yes"
  - Resolves: rhbz#1951923


author: Artem Egorenkov <aegorenk@redhat.com> - 1.13.1-5
changelog:
  - Option --enable-linux-ip-local-port-range added to use system configured port range for libunbound on Linux
  - Resolves: rhbz#1952814


author: Tomas Popela <tpopela@redhat.com> - 1.8.1-3
changelog:
  - Drop PipeWire 0.2 requirement as Chrom[e|ium] 90 now depends on PipeWire 0.3
  - Resolves: rhbz#1929237


author: Jakub Hrozek <jhrozek@redhat.com> - 1.2.29-7
changelog:
  - compile without sha1 and md5
  - Resolves: rhbz#1936682 - xmlsec1 implements and/or uses the deprecated
                             SHA-1 algorithm by default


author: Merlin Mathesius <mmathesi@redhat.com> - 0:2.7.0-6
changelog:
  - Fix FTBFS by patching ValueAssertTest to adjust for changed format of
    mismatched string exception


author: Neal Gompa <ngompa13@gmail.com> - 1:7.5-49
changelog:
  - Add OrderWithRequires for freetype to ensure freetype is installed first
  - Move license files to license tag on file list


author: Adam Jackson <ajax@redhat.com> - 1.20.11-5
changelog:
  - Disable non-platform video driver probe, it should never be needed and the
    PCI probe code interferes with the (default) platform path.
    Resolves: #2000921


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-7
changelog:
  - CVE fix for: CVE-2021-4008 (#2030160), CVE-2021-4009 (#2030170),
    CVE-2021-4010 (#2030174), CVE-2021-4011 (#2030179)


author: Adam Jackson <ajax@redhat.com> - 1.20.11-8
changelog:
  - Only disable the PCI-specific driver probe, since we do still want fallback
    to fbdev to work.
    Resolves: #2029769


author: Olivier Fourdan <ofourdan@redhat.com> - 1.20.11-11
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2108157, rhbz#2108162


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-2
changelog:
  - CVE fix for: CVE-2021-4008 (#2038067), CVE-2021-4009 (#2038070),
    CVE-2021-4010 (#2038072), CVE-2021-4011 (#2038074)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.3-3
changelog:
  - CVE fix for: CVE-2022-2319/ZDI-CAN-16062, CVE-2022-2320/ZDI-CAN-16070
    Resolves: rhbz#2110440, rhbz#2110433


author: Peter Hutterer <peter.hutterer@redhat.com> - 21.1.3-5
changelog:
  - CVE fix for: CVE-2022-4283 (#2151803), CVE-2022-46340 (#2151778),
    CVE-2022-46341 (#2151783), CVE-2022-46342 (#2151786),
    CVE-2022-46343 (#2151793), CVE-2022-46344 (#2151796)


author: Olivier Fourdan <ofourdan@redhat.com> - 21.1.9-5
changelog:
  Fix for CVE-2023-6816, CVE-2024-0229, CVE-2024-21885, CVE-2024-21886,
    CVE-2024-0408, CVE-2024-0409


