# changelog

author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-41.el8
changelog:
  - kvm-block-rbd-pull-out-qemu_rbd_convert_options.patch [bz#1635585]
  - kvm-block-rbd-Attempt-to-parse-legacy-filenames.patch [bz#1635585]
  - kvm-block-rbd-add-deprecation-documentation-for-filename.patch [bz#1635585]
  - kvm-block-rbd-add-iotest-for-rbd-legacy-keyvalue-filenam.patch [bz#1635585]
  - Resolves: bz#1635585
    (rbd json format of 7.6 is incompatible with 7.5)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 2.12.0-42.el8
changelog:
  - kvm-luks-Allow-share-rw-on.patch [bz#1629701]
  - kvm-redhat-reenable-gluster-support.patch [bz#1599340]
  - kvm-redhat-bump-libusb-requirement.patch [bz#1627970]
  - Resolves: bz#1599340
    (Reenable glusterfs in qemu-kvm once BZ#1567292 gets fixed)
  - Resolves: bz#1627970
    (symbol lookup error: /usr/libexec/qemu-kvm: undefined symbol: libusb_set_option)
  - Resolves: bz#1629701
    ("share-rw=on" does not work for luks format image - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-configure-add-test-for-libudev.patch [bz#1636185]
  - kvm-qga-linux-report-disk-serial-number.patch [bz#1636185]
  - kvm-qga-linux-return-disk-device-in-guest-get-fsinfo.patch [bz#1636185]
  - kvm-qemu-error-introduce-error-warn-_report_once.patch [bz#1625173]
  - kvm-intel-iommu-start-to-use-error_report_once.patch [bz#1625173]
  - kvm-intel-iommu-replace-more-vtd_err_-traces.patch [bz#1625173]
  - kvm-intel_iommu-introduce-vtd_reset_caches.patch [bz#1625173]
  - kvm-intel_iommu-better-handling-of-dmar-state-switch.patch [bz#1625173]
  - kvm-intel_iommu-move-ce-fetching-out-when-sync-shadow.patch [bz#1625173 bz#1629616]
  - kvm-intel_iommu-handle-invalid-ce-for-shadow-sync.patch [bz#1625173 bz#1629616]
  - kvm-block-remove-bdrv_dirty_bitmap_make_anon.patch [bz#1518989]
  - kvm-block-simplify-code-around-releasing-bitmaps.patch [bz#1518989]
  - kvm-hbitmap-Add-advance-param-to-hbitmap_iter_next.patch [bz#1518989]
  - kvm-test-hbitmap-Add-non-advancing-iter_next-tests.patch [bz#1518989]
  - kvm-block-dirty-bitmap-Add-bdrv_dirty_iter_next_area.patch [bz#1518989]
  - kvm-blockdev-backup-add-bitmap-argument.patch [bz#1518989]
  - kvm-dirty-bitmap-switch-assert-fails-to-errors-in-bdrv_m.patch [bz#1518989]
  - kvm-dirty-bitmap-rename-bdrv_undo_clear_dirty_bitmap.patch [bz#1518989]
  - kvm-dirty-bitmap-make-it-possible-to-restore-bitmap-afte.patch [bz#1518989]
  - kvm-blockdev-rename-block-dirty-bitmap-clear-transaction.patch [bz#1518989]
  - kvm-qapi-add-transaction-support-for-x-block-dirty-bitma.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-add-user_locked-status-checker.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-fix-merge-permissions.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-allow-clear-on-disabled-bitmaps.patch [bz#1518989]
  - kvm-block-dirty-bitmaps-prohibit-enable-disable-on-locke.patch [bz#1518989]
  - kvm-block-backup-prohibit-backup-from-using-in-use-bitma.patch [bz#1518989]
  - kvm-nbd-forbid-use-of-frozen-bitmaps.patch [bz#1518989]
  - kvm-bitmap-Update-count-after-a-merge.patch [bz#1518989]
  - kvm-iotests-169-drop-deprecated-autoload-parameter.patch [bz#1518989]
  - kvm-block-qcow2-improve-error-message-in-qcow2_inactivat.patch [bz#1518989]
  - kvm-bloc-qcow2-drop-dirty_bitmaps_loaded-state-variable.patch [bz#1518989]
  - kvm-dirty-bitmaps-clean-up-bitmaps-loading-and-migration.patch [bz#1518989]
  - kvm-iotests-improve-169.patch [bz#1518989]
  - kvm-iotests-169-add-cases-for-source-vm-resuming.patch [bz#1518989]
  - kvm-pc-dimm-turn-alignment-assert-into-check.patch [bz#1630116]
  - Resolves: bz#1518989
    (RFE: QEMU Incremental live backup)
  - Resolves: bz#1625173
    ([NVMe Device Assignment] Guest could not boot up with q35+iommu)
  - Resolves: bz#1629616
    (boot guest with q35+vIOMMU+ device assignment, qemu terminal shows "qemu-kvm: VFIO_UNMAP_DMA: -22" when return assigned network devices from vfio driver to ixgbe in guest)
  - Resolves: bz#1630116
    (pc_dimm_get_free_addr: assertion failed: (QEMU_ALIGN_UP(address_space_start, align) == address_space_start))
  - Resolves: bz#1636185
    ([RFE] Report disk device name and serial number (qemu-guest-agent on Linux))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-43
changelog:
  - kvm-block-Make-more-block-drivers-compile-time-configura.patch [bz#1598842 bz#1598842]
  - kvm-RHEL8-Add-disable-configure-options-to-qemu-spec-fil.patch [bz#1598842]
  - Resolves: bz#1598842
    (Compile out unused block drivers)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-45
changelog:
  - kvm-target-ppc-add-basic-support-for-PTCR-on-POWER9.patch [bz#1639069]
  - kvm-linux-headers-Update-for-nested-KVM-HV-downstream-on.patch [bz#1639069]
  - kvm-target-ppc-Add-one-reg-id-for-ptcr.patch [bz#1639069]
  - kvm-ppc-spapr_caps-Add-SPAPR_CAP_NESTED_KVM_HV.patch [bz#1639069]
  - kvm-Re-enable-CONFIG_HYPERV_TESTDEV.patch [bz#1651195]
  - kvm-qxl-use-guest_monitor_config-for-local-renderer.patch [bz#1610163]
  - kvm-Declare-cirrus-vga-as-deprecated.patch [bz#1651994]
  - kvm-Do-not-build-bluetooth-support.patch [bz#1654651]
  - kvm-vfio-helpers-Fix-qemu_vfio_open_pci-crash.patch [bz#1645840]
  - kvm-balloon-Allow-multiple-inhibit-users.patch [bz#1650272]
  - kvm-Use-inhibit-to-prevent-ballooning-without-synchr.patch [bz#1650272]
  - kvm-vfio-Inhibit-ballooning-based-on-group-attachment-to.patch [bz#1650272]
  - kvm-vfio-ccw-pci-Allow-devices-to-opt-in-for-ballooning.patch [bz#1650272]
  - kvm-vfio-pci-Handle-subsystem-realpath-returning-NULL.patch [bz#1650272]
  - kvm-vfio-pci-Fix-failure-to-close-file-descriptor-on-err.patch [bz#1650272]
  - kvm-postcopy-Synchronize-usage-of-the-balloon-inhibitor.patch [bz#1650272]
  - Resolves: bz#1610163
    (guest shows border blurred screen with some resolutions when qemu boot with -device qxl-vga ,and guest on rhel7.6 has no  such question)
  - Resolves: bz#1639069
    ([IBM 8.0 FEAT] POWER9 - Nested virtualization in RHEL8.0 KVM for ppc64le - qemu-kvm side)
  - Resolves: bz#1645840
    (Qemu core dump when hotplug nvme:// drive via -blockdev)
  - Resolves: bz#1650272
    (Ballooning is incompatible with vfio assigned devices, but not prevented)
  - Resolves: bz#1651195
    (Re-enable hyperv-testdev device)
  - Resolves: bz#1651994
    (Declare the "Cirrus VGA" device emulation of QEMU as deprecated in RHEL8)
  - Resolves: bz#1654651
    (Qemu: hw: bt: keep bt/* objects from building [rhel-8.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-46
changelog:
  - kvm-qcow2-Give-the-refcount-cache-the-minimum-possible-s.patch [bz#1656507]
  - kvm-docs-Document-the-new-default-sizes-of-the-qcow2-cac.patch [bz#1656507]
  - kvm-qcow2-Fix-Coverity-warning-when-calculating-the-refc.patch [bz#1656507]
  - kvm-include-Add-IEC-binary-prefixes-in-qemu-units.h.patch [bz#1656507]
  - kvm-qcow2-Options-documentation-fixes.patch [bz#1656507]
  - kvm-include-Add-a-lookup-table-of-sizes.patch [bz#1656507]
  - kvm-qcow2-Make-sizes-more-humanly-readable.patch [bz#1656507]
  - kvm-qcow2-Avoid-duplication-in-setting-the-refcount-cach.patch [bz#1656507]
  - kvm-qcow2-Assign-the-L2-cache-relatively-to-the-image-si.patch [bz#1656507]
  - kvm-qcow2-Increase-the-default-upper-limit-on-the-L2-cac.patch [bz#1656507]
  - kvm-qcow2-Resize-the-cache-upon-image-resizing.patch [bz#1656507]
  - kvm-qcow2-Set-the-default-cache-clean-interval-to-10-min.patch [bz#1656507]
  - kvm-qcow2-Explicit-number-replaced-by-a-constant.patch [bz#1656507]
  - kvm-block-backend-Set-werror-rerror-defaults-in-blk_new.patch [bz#1657637]
  - kvm-qcow2-Fix-cache-clean-interval-documentation.patch [bz#1656507]
  - Resolves: bz#1656507
    ([RHEL.8] qcow2 cache is too small)
  - Resolves: bz#1657637
    (Wrong werror default for -device drive=<node-name>)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - qemu-kvm-2.12.0-47
changelog:
  - kvm-Disable-CONFIG_IPMI-and-CONFIG_I2C-for-ppc64.patch [bz#1640044]
  - kvm-Disable-CONFIG_CAN_BUS-and-CONFIG_CAN_SJA1000.patch [bz#1640042]
  - Resolves: bz#1640042
    (Disable CONFIG_CAN_BUS and CONFIG_CAN_SJA1000 config switches)
  - Resolves: bz#1640044
    (Disable CONFIG_I2C and CONFIG_IPMI in default-configs/ppc64-softmmu.mak)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-2.el8
changelog:
  - kvm-pc-7.5-compat-entries.patch [bz#1655820]
  - kvm-compat-Generic-HW_COMPAT_RHEL7_6.patch [bz#1655820]
  - kvm-pc-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-pc-Add-compat-for-pc-i440fx-rhel7.6.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-pc-q35-8.0.0-machine-type.patch [bz#1655820]
  - kvm-pc-Add-x-migrate-smi-count-off-to-PC_RHEL7_6_COMPAT.patch [bz#1655820]
  - kvm-clear-out-KVM_ASYNC_PF_DELIVERY_AS_PF_VMEXIT-for.patch [bz#1659604]
  - kvm-Add-edk2-Requires-to-qemu-kvm.patch [bz#1660208]
  - Resolves: bz#1655820
    (Can't migarate between rhel8 and rhel7 when guest has device "video")
  - Resolves: bz#1659604
    (8->7 migration failed: qemu-kvm: error: failed to set MSR 0x4b564d02 to 0x27fc13285)
  - Resolves: bz#1660208
    (qemu-kvm: Should depend on the architecture-appropriate guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-3.el8
changelog:
  - kvm-redhat-define-pseries-rhel8.0.0-machine-type.patch [bz#1656508]
  - Resolves: bz#1656508
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (ppc64le))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-4.el8
changelog:
  - kvm-hw-s390x-s390-virtio-ccw-Add-machine-types-for-RHEL8.patch [bz#1656510]
  - kvm-spapr-Add-H-Call-H_HOME_NODE_ASSOCIATIVITY.patch [bz#1661967]
  - kvm-redhat-Fixing-.gitpublish-to-include-AV-information.patch []
  - Resolves: bz#1656510
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (s390x))
  - Resolves: bz#1661967
    (Kernel prints the message "VPHN is not supported. Disabling polling...")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-5.el8
changelog:
  - kvm-virtio-Helper-for-registering-virtio-device-types.patch [bz#1648023]
  - kvm-virtio-Provide-version-specific-variants-of-virtio-P.patch [bz#1648023]
  - kvm-globals-Allow-global-properties-to-be-optional.patch [bz#1648023]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1648023]
  - kvm-aarch64-Add-virt-rhel8.0.0-machine-type-for-ARM.patch [bz#1656504]
  - kvm-aarch64-Set-virt-rhel8.0.0-max_cpus-to-512.patch [bz#1656504]
  - kvm-aarch64-Use-256MB-ECAM-region-by-default.patch [bz#1656504]
  - Resolves: bz#1648023
    (Provide separate device types for transitional virtio PCI devices - Fast Train)
  - Resolves: bz#1656504
    (Machine types for qemu-kvm based on rebase to qemu-3.1 (aarch64))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-6.el8
changelog:
  - kvm-spapr-Fix-ibm-max-associativity-domains-property-num.patch [bz#1653114]
  - kvm-cpus-ignore-ESRCH-in-qemu_cpu_kick_thread.patch [bz#1668205]
  - Resolves: bz#1653114
    (Incorrect NUMA nodes passed to qemu-kvm guest in ibm,max-associativity-domains property)
  - Resolves: bz#1668205
    (Guest quit with error when hotunplug cpu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-7.el8
changelog:
  - kvm-i386-kvm-expose-HV_CPUID_ENLIGHTMENT_INFO.EAX-and-HV.patch [bz#1653511]
  - kvm-i386-kvm-add-a-comment-explaining-why-.feat_names-ar.patch [bz#1653511]
  - Resolves: bz#1653511
    (qemu doesn't report all support cpu features which cause libvirt cannot get the support status of hv_tlbflush)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-9.el8
changelog:
  - kvm-migration-rdma-unregister-fd-handler.patch [bz#1666601]
  - kvm-s390x-tod-Properly-stop-the-KVM-TOD-while-the-guest-.patch [bz#1659127]
  - kvm-hw-s390x-Fix-bad-mask-in-time2tod.patch [bz#1659127]
  - Resolves: bz#1659127
    (Stress guest and stop it, then do live migration, guest hit call trace on destination end)
  - Resolves: bz#1666601
    ([q35] dst qemu core dumped when do rdma migration with Mellanox IB QDR card)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-10.el8
changelog:
  - kvm-throttle-groups-fix-restart-coroutine-iothread-race.patch [bz#1655947]
  - kvm-iotests-add-238-for-throttling-tgm-unregister-iothre.patch [bz#1655947]
  - Resolves: bz#1655947
    (qemu-kvm core dumped after unplug the device which was set io throttling parameters)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-11.el8
changelog:
  - kvm-Fix-fsfreeze-hook-path-in-the-man-page.patch [bz#1644985]
  - kvm-json-Fix-handling-when-not-interpolating.patch [bz#1668244]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)
  - Resolves: bz#1668244
    (qemu-img: /var/tmp/v2vovl9951f8.qcow2: CURL: Error opening file: The requested URL returned error: 404 Not Found)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-12.el8
changelog:
  - kvm-io-ensure-UNIX-client-doesn-t-unlink-server-socket.patch [bz#1665896]
  - kvm-scsi-disk-Don-t-use-empty-string-as-device-id.patch [bz#1668248]
  - kvm-scsi-disk-Add-device_id-property.patch [bz#1668248]
  - Resolves: bz#1665896
    (VNC unix listener socket is deleted after first client quits)
  - Resolves: bz#1668248
    ("An unknown error has occurred" when using cdrom to install the system with two blockdev disks.(when choose installation destination))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-13.el8
changelog:
  - kvm-Acceptance-tests-add-Linux-initrd-checking-test.patch [bz#1669922]
  - kvm-mmap-alloc-unfold-qemu_ram_mmap.patch [bz#1671519]
  - kvm-mmap-alloc-fix-hugetlbfs-misaligned-length-in-ppc64.patch [bz#1671519]
  - kvm-BZ1653590-Require-at-least-64kiB-pages-for-downstrea.patch [bz#1653590]
  - kvm-block-Fix-invalidate_cache-error-path-for-parent-act.patch [bz#1673014]
  - kvm-virtio-scsi-Move-BlockBackend-back-to-the-main-AioCo.patch [bz#1656276 bz#1662508]
  - kvm-scsi-disk-Acquire-the-AioContext-in-scsi_-_realize.patch [bz#1656276 bz#1662508]
  - kvm-virtio-scsi-Forbid-devices-with-different-iothreads-.patch [bz#1656276 bz#1662508]
  - Resolves: bz#1653590
    ([Fast train]had better stop qemu immediately while guest was making use of an improper page size)
  - Resolves: bz#1656276
    (qemu-kvm core dumped after hotplug the deleted disk with iothread parameter)
  - Resolves: bz#1662508
    (Qemu core dump when start guest with two disks using same drive)
  - Resolves: bz#1669922
    (Backport avocado-qemu tests for QEMU 3.1)
  - Resolves: bz#1671519
    (RHEL8.0 Snapshot3 - qemu doesn't free up hugepage memory when hotplug/hotunplug using memory-backend-file (qemu-kvm))
  - Resolves: bz#1673014
    (Local VM and migrated VM on the same host can run with same RAW file as visual disk source while without shareable configured or lock manager enabled)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-14.el8
changelog:
  - kvm-doc-fix-the-configuration-path.patch [bz#1644985]
  - Resolves: bz#1644985
    (The "fsfreeze-hook" script path shown by command "qemu-ga --help" or "man qemu-ga" is wrong - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-15.el8
changelog:
  - kvm-Add-raw-qcow2-nbd-and-luks-iotests-to-run-during-the.patch [bz#1664855]
  - kvm-Introduce-the-qemu-kvm-tests-rpm.patch [bz#1669924]
  - Resolves: bz#1664855
    (Run iotests in qemu-kvm build %check phase)
  - Resolves: bz#1669924
    (qemu-kvm packaging: Package the avocado_qemu tests and qemu-iotests in a new rpm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-16.el8
changelog:
  - kvm-fdc-Revert-downstream-disablement-of-device-floppy.patch [bz#1664997]
  - kvm-fdc-Restrict-floppy-controllers-to-RHEL-7-machine-ty.patch [bz#1664997]
  - Resolves: bz#1664997
    (Restrict floppy device to RHEL-7 machine types)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-17.el8
changelog:
  - kvm-block-Apply-auto-read-only-for-ro-whitelist-drivers.patch [bz#1678968]
  - Resolves: bz#1678968
    (-blockdev: auto-read-only is ineffective for drivers on read-only whitelist)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-18.el8
changelog:
  - kvm-target-i386-Disable-MPX-support-on-named-CPU-models.patch [bz#1661030]
  - kvm-i386-remove-the-new-CPUID-PCONFIG-from-Icelake-Serve.patch [bz#1661515]
  - kvm-i386-remove-the-INTEL_PT-CPUID-bit-from-named-CPU-mo.patch [bz#1661515]
  - kvm-Revert-i386-Add-CPUID-bit-for-PCONFIG.patch [bz#1661515]
  - Resolves: bz#1661030
    (Remove MPX support from 8.0 machine types)
  - Resolves: bz#1661515
    (Remove PCONFIG and INTEL_PT from Icelake-* CPU models)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-19.el8
changelog:
  - kvm-migration-Fix-cancel-state.patch [bz#1608649]
  - kvm-migration-rdma-Fix-qemu_rdma_cleanup-null-check.patch [bz#1608649]
  - Resolves: bz#1608649
    (Query-migrate get "failed" status after migrate-cancel)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-20.el8
changelog:
  - kvm-i386-Add-stibp-flag-name.patch [bz#1686260]
  - Resolves: bz#1686260
    (stibp is missing on qemu 3.0 and qemu 3.1)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-21.el8
changelog:
  - kvm-Remove-7-qcow2-and-luks-iotests-that-are-taking-25-s.patch [bz#1683473]
  - kvm-spapr-fix-out-of-bounds-write-in-spapr_populate_drme.patch [bz#1674438]
  - kvm-qcow2-include-LUKS-payload-overhead-in-qemu-img-meas.patch [bz#1655065]
  - kvm-iotests-add-LUKS-payload-overhead-to-178-qemu-img-me.patch [bz#1655065]
  - kvm-vnc-detect-and-optimize-pageflips.patch [bz#1666206]
  - kvm-Load-kvm-module-during-boot.patch [bz#1676907 bz#1685995]
  - kvm-hostmem-file-reject-invalid-pmem-file-sizes.patch [bz#1669053]
  - kvm-iotests-Fix-test-200-on-s390x-without-virtio-pci.patch [bz#1687582]
  - kvm-block-file-posix-do-not-fail-on-unlock-bytes.patch [bz#1652572]
  - Resolves: bz#1652572
    (QEMU core dumped if stop nfs service during migration)
  - Resolves: bz#1655065
    ([rhel.8.0][fast train]'qemu-img measure' size does not match the real allocated size for luks-inside-qcow2 image)
  - Resolves: bz#1666206
    (vnc server should detect page-flips and avoid sending fullscreen updates then.)
  - Resolves: bz#1669053
    (Guest call trace when boot with nvdimm device backed by /dev/dax)
  - Resolves: bz#1674438
    (RHEL8.0 - Guest reboot fails after memory hotplug multiple times (kvm))
  - Resolves: bz#1676907
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1683473
    (Remove 7 qcow2 & luks iotests from rhel8 fast train build %check phase)
  - Resolves: bz#1685995
    (/dev/kvm device exists but kernel module is not loaded on boot up causing VM start to fail in libvirt)
  - Resolves: bz#1687582
    (QEMU IOTEST 200 fails with 'virtio-scsi-pci is not a valid device model name')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-22.el8
changelog:
  - kvm-i386-kvm-Disable-arch_capabilities-if-MSR-can-t-be-s.patch [bz#1687578]
  - kvm-i386-Make-arch_capabilities-migratable.patch [bz#1687578]
  - Resolves: bz#1687578
    (Incorrect CVE vulnerabilities reported on Cascade Lake cpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-23.el8
changelog:
  - kvm-device_tree-Fix-integer-overflowing-in-load_device_t.patch [bz#1693173]
  - Resolves: bz#1693173
    (CVE-2018-20815 qemu-kvm: QEMU: device_tree: heap buffer overflow while loading device tree blob [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-24.el8
changelog:
  - kvm-x86-host-phys-bits-limit-option.patch [bz#1688915]
  - kvm-rhel-Set-host-phys-bits-limit-48-on-rhel-machine-typ.patch [bz#1688915]
  - Resolves: bz#1688915
    ([Intel 8.0 Alpha] physical bits should  <= 48  when host with 5level paging &EPT5 and qemu command with "-cpu qemu64" parameters.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-25.el8
changelog:
  - kvm-redhat-enable-tpmdev-passthrough.patch [bz#1688312]
  - kvm-exec-Only-count-mapped-memory-backends-for-qemu_getr.patch [bz#1680492]
  - kvm-Enable-libpmem-to-support-nvdimm.patch [bz#1705149]
  - Resolves: bz#1680492
    (Qemu quits suddenly while system_reset after hot-plugging unsupported memory by compatible guest on P9 with 1G huge page set)
  - Resolves: bz#1688312
    ([RFE] enable TPM passthrough at compile time (qemu-kvm))
  - Resolves: bz#1705149
    (libpmem support is not enabled in qemu-kvm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 3.1.0-26.el8
changelog:
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_LARGE_DECREMENTER.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-workaround-option-to-SPAPR_CAP_.patch [bz#1698711]
  - kvm-target-ppc-spapr-Add-SPAPR_CAP_CCF_ASSIST.patch [bz#1698711]
  - kvm-target-ppc-tcg-make-spapr_caps-apply-cap-cfpc-sbbc-i.patch [bz#1698711]
  - kvm-target-ppc-spapr-Enable-mitigations-by-default-for-p.patch [bz#1698711]
  - kvm-slirp-ensure-there-is-enough-space-in-mbuf-to-null-t.patch [bz#1693076]
  - kvm-slirp-don-t-manipulate-so_rcv-in-tcp_emu.patch [bz#1693076]
  - Resolves: bz#1693076
    (CVE-2019-6778 qemu-kvm: QEMU: slirp: heap buffer overflow in tcp_emu() [rhel-av-8])
  - Resolves: bz#1698711
    (Enable Spectre / Meltdown mitigations by default in pseries-rhel8.0.0 machine type)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-2.el8
changelog:
  - kvm-target-i386-define-md-clear-bit.patch [bz#1703297 bz#1703304 bz#1703310 bz#1707274]
  - Resolves: bz#1703297
    (CVE-2018-12126 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Store Buffer Data Sampling (MSBDS) [rhel-av-8])
  - Resolves: bz#1703304
    (CVE-2018-12130 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS) [rhel-av-8])
  - Resolves: bz#1703310
    (CVE-2018-12127 virt:8.0.0/qemu-kvm: hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS) [rhel-av-8])
  - Resolves: bz#1707274
    (CVE-2019-11091 virt:8.0.0/qemu-kvm: hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM) [rhel-av-8.1.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-3.el8
changelog:
  - kvm-redhat-fix-cut-n-paste-garbage-in-hw_compat-comments.patch [bz#1709726]
  - kvm-compat-Generic-hw_compat_rhel_8_0.patch [bz#1709726]
  - kvm-redhat-sync-pseries-rhel7.6.0-with-rhel-av-8.0.1.patch [bz#1709726]
  - kvm-redhat-define-pseries-rhel8.1.0-machine-type.patch [bz#1709726]
  - Resolves: bz#1709726
    (Forward and backward migration failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-4.el8
changelog:
  - kvm-Disable-VXHS-support.patch [bz#1714937]
  - kvm-aarch64-Add-virt-rhel8.1.0-machine-type-for-ARM.patch [bz#1713735]
  - kvm-aarch64-Allow-ARM-VIRT-iommu-option-in-RHEL8.1-machi.patch [bz#1713735]
  - kvm-usb-call-reset-handler-before-updating-state.patch [bz#1713679]
  - kvm-usb-host-skip-reset-for-untouched-devices.patch [bz#1713679]
  - kvm-usb-host-avoid-libusb_set_configuration-calls.patch [bz#1713679]
  - kvm-aarch64-Compile-out-IOH3420.patch [bz#1627283]
  - kvm-vl-Fix-drive-blockdev-persistent-reservation-managem.patch [bz#1714891]
  - kvm-vl-Document-why-objects-are-delayed.patch [bz#1714891]
  - Resolves: bz#1627283
    (Compile out IOH3420 on aarch64)
  - Resolves: bz#1713679
    (Detached device when trying to upgrade USB device firmware when in doing USB Passthrough via QEMU)
  - Resolves: bz#1713735
    (Allow ARM VIRT iommu option in RHEL8.1 machine)
  - Resolves: bz#1714891
    (Guest with persistent reservation manager for a disk fails to start)
  - Resolves: bz#1714937
    (Disable VXHS support)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.0.0-5.el8
changelog:
  - kvm-qemu-kvm.spec-bump-libseccomp-2.4.0.patch [bz#1720306]
  - kvm-qxl-check-release-info-object.patch [bz#1712717]
  - kvm-target-i386-add-MDS-NO-feature.patch [bz#1722839]
  - kvm-block-file-posix-Unaligned-O_DIRECT-block-status.patch [bz#1588356]
  - kvm-iotests-Test-unaligned-raw-images-with-O_DIRECT.patch [bz#1588356]
  - kvm-rh-set-CONFIG_BOCHS_DISPLAY-y-for-x86.patch [bz#1707118]
  - Resolves: bz#1588356
    (qemu crashed on the source host when do storage migration with source qcow2 disk created by 'qemu-img')
  - Resolves: bz#1707118
    (enable device: bochs-display (QEMU))
  - Resolves: bz#1712717
    (CVE-2019-12155 qemu-kvm: QEMU: qxl: null pointer dereference while releasing spice resources [rhel-av-8])
  - Resolves: bz#1720306
    (VM failed to start with error "failed to install seccomp syscall filter in the kernel")
  - Resolves: bz#1722839
    ([Intel 8.1 FEAT] MDS_NO exposure to guest - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.0.0-6.el8
changelog:
  - kvm-x86_64-rh-devices-add-missing-TPM-passthrough.patch [bz#1519013]
  - kvm-x86_64-rh-devices-enable-TPM-emulation.patch [bz#1519013]
  - kvm-vfio-increase-the-cap-on-number-of-assigned-devices-.patch [bz#1719823]
  - Resolves: bz#1519013
    ([RFE] QEMU Software TPM support (vTPM, or TPM emulation))
  - Resolves: bz#1719823
    ([RHEL 8.1] [RFE] increase the maximum of vfio devices to more than 32 in qemu-kvm)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.1.0-1.el8
changelog:
  - Rebase to qemu 4.1.0 rc4 [bz#1705235]
  - Resolves: bz#1705235
    (Rebase qemu-kvm for RHEL-AV 8.1.0)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-2.el8
changelog:
  - kvm-spec-Update-seavgabios-dependency.patch [bz#1725664]
  - kvm-pc-Don-t-make-die-id-mandatory-unless-necessary.patch [bz#1741451]
  - kvm-display-bochs-fix-pcie-support.patch [bz#1733977 bz#1740692]
  - kvm-spapr-Reset-CAS-IRQ-subsystem-after-devices.patch [bz#1733977]
  - kvm-spapr-xive-Fix-migration-of-hot-plugged-CPUs.patch [bz#1733977]
  - kvm-riscv-roms-Fix-make-rules-for-building-sifive_u-bios.patch [bz#1733977 bz#1740692]
  - kvm-Update-version-for-v4.1.0-release.patch [bz#1733977 bz#1740692]
  - Resolves: bz#1725664
    (Update seabios dependency)
  - Resolves: bz#1733977
    (Qemu core dumped: /home/ngu/qemu/hw/intc/xics_kvm.c:321: ics_kvm_set_irq: Assertion `kernel_xics_fd != -1' failed)
  - Resolves: bz#1740692
    (Backport QEMU 4.1.0 rc5 & ga patches)
  - Resolves: bz#1741451
    (Failed to hot-plug vcpus)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-3.el8
changelog:
  - kvm-x86-machine-types-pc_rhel_8_0_compat.patch [bz#1719649]
  - kvm-x86-machine-types-q35-Fixup-units_per_default_bus.patch [bz#1719649]
  - kvm-x86-machine-types-Fixup-dynamic-sysbus-entries.patch [bz#1719649]
  - kvm-x86-machine-types-add-pc-q35-rhel8.1.0.patch [bz#1719649]
  - kvm-machine-types-Update-hw_compat_rhel_8_0-from-hw_comp.patch [bz#1719649]
  - kvm-virtio-Make-disable-legacy-disable-modern-compat-pro.patch [bz#1719649]
  - Resolves: bz#1719649
    (8.1 machine type for x86)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-4.el8
changelog:
  - kvm-RHEL-disable-hostmem-memfd.patch [bz#1738626 bz#1740797]
  - Resolves: bz#1738626
    (Disable memfd in QEMU)
  - Resolves: bz#1740797
    (Disable memfd in QEMU)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-5.el8
changelog:
  - kvm-redhat-s390x-Rename-s390-ccw-virtio-rhel8.0.0-to-s39.patch [bz#1693772]
  - kvm-redhat-s390x-Add-proper-compatibility-options-for-th.patch [bz#1693772]
  - kvm-enable-virgl.patch [bz#1559740]
  - kvm-redhat-update-pseries-rhel8.1.0-machine-type.patch [bz#1744170]
  - kvm-Do-not-run-iotests-on-brew-build.patch [bz#1742197 bz#1742819]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1693772
    ([IBM zKVM] RHEL AV 8.1.0 machine type update for s390x)
  - Resolves: bz#1742197
    (Remove iotests from qemu-kvm builds [RHEL AV 8.1.0])
  - Resolves: bz#1742819
    (Remove iotests from qemu-kvm builds [RHEL 8.1.0])
  - Resolves: bz#1744170
    ([IBM Power] New 8.1.0 machine type for pseries)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-6.el8
changelog:
  - kvm-memory-Refactor-memory_region_clear_coalescing.patch [bz#1743142]
  - kvm-memory-Split-zones-when-do-coalesced_io_del.patch [bz#1743142]
  - kvm-memory-Remove-has_coalesced_range-counter.patch [bz#1743142]
  - kvm-memory-Fix-up-memory_region_-add-del-_coalescing.patch [bz#1743142]
  - kvm-enable-virgl-for-real-this-time.patch [bz#1559740]
  - Resolves: bz#1559740
    ([RFE] Enable virgl as TechPreview (qemu))
  - Resolves: bz#1743142
    (Boot guest with multiple e1000 devices, qemu will crash after several guest reboots: kvm_mem_ioeventfd_add: error adding ioeventfd: No space left on device (28))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-7.el8
changelog:
  - kvm-trace-Clarify-DTrace-SystemTap-help-message.patch [bz#1516220]
  - kvm-socket-Add-backlog-parameter-to-socket_listen.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_syn.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_channel_socket_asy.patch [bz#1726898]
  - kvm-socket-Add-num-connections-to-qio_net_listener_open_.patch [bz#1726898]
  - kvm-multifd-Use-number-of-channels-as-listen-backlog.patch [bz#1726898]
  - kvm-pseries-Fix-compat_pvr-on-reset.patch [bz#1744107]
  - kvm-spapr-Set-compat-mode-in-spapr_core_plug.patch [bz#1744107]
  - Resolves: bz#1516220
    (-trace help prints an incomplete list of trace events)
  - Resolves: bz#1726898
    (Parallel migration fails with error "Unable to write to socket: Connection reset by peer" now and then)
  - Resolves: bz#1744107
    (Migration from P8(qemu4.1) to P9(qemu4.1), after migration, qemu crash on destination with error message "qemu-kvm: error while loading state for instance 0x1 of device 'cpu'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-8.el8
changelog:
  - kvm-migration-Do-not-re-read-the-clock-on-pre_save-in-ca.patch [bz#1747836]
  - kvm-ehci-fix-queue-dev-null-ptr-dereference.patch [bz#1746790]
  - kvm-spapr-Use-SHUTDOWN_CAUSE_SUBSYSTEM_RESET-for-CAS-reb.patch [bz#1743477]
  - kvm-file-posix-Handle-undetectable-alignment.patch [bz#1749134]
  - kvm-block-posix-Always-allocate-the-first-block.patch [bz#1749134]
  - kvm-iotests-Test-allocate_first_block-with-O_DIRECT.patch [bz#1749134]
  - Resolves: bz#1743477
    (Since bd94bc06479a "spapr: change default interrupt mode to 'dual'", QEMU resets the machine to select the appropriate interrupt controller. And -no-reboot prevents that.)
  - Resolves: bz#1746790
    (qemu core dump while migrate from RHEL7.6 to RHEL8.1)
  - Resolves: bz#1747836
    (Call traces after guest migration due to incorrect handling of the timebase)
  - Resolves: bz#1749134
    (I/O error when virtio-blk disk is backed by a raw image on 4k disk)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-9.el8
changelog:
  - kvm-migration-always-initialise-ram_counters-for-a-new-m.patch [bz#1734316]
  - kvm-migration-add-qemu_file_update_transfer-interface.patch [bz#1734316]
  - kvm-migration-add-speed-limit-for-multifd-migration.patch [bz#1734316]
  - kvm-migration-update-ram_counters-for-multifd-sync-packe.patch [bz#1734316]
  - kvm-spapr-pci-Consolidate-de-allocation-of-MSIs.patch [bz#1750200]
  - kvm-spapr-pci-Free-MSIs-during-reset.patch [bz#1750200]
  - Resolves: bz#1734316
    (multifd migration does not honour speed limits, consumes entire bandwidth of NIC)
  - Resolves: bz#1750200
    ([RHEL8.1][QEMU4.1]boot up guest with vf device,then system_reset guest,error prompt(qemu-kvm: Can't allocate MSIs for device 2800: IRQ 4904 is not free))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-10.el8
changelog:
  - kvm-spapr-xive-Mask-the-EAS-when-allocating-an-IRQ.patch [bz#1748725]
  - kvm-block-create-Do-not-abort-if-a-block-driver-is-not-a.patch [bz#1746267]
  - kvm-virtio-blk-Cancel-the-pending-BH-when-the-dataplane-.patch [bz#1717321]
  - kvm-Using-ip_deq-after-m_free-might-read-pointers-from-a.patch [bz#1749737]
  - Resolves: bz#1717321
    (qemu-kvm core dumped when repeat "system_reset" multiple times during guest boot)
  - Resolves: bz#1746267
    (qemu coredump: qemu-kvm: block/create.c:68: qmp_blockdev_create: Assertion `drv' failed)
  - Resolves: bz#1748725
    ([ppc][migration][v6.3-rc1-p1ce8930]basic migration failed with "qemu-kvm: KVM_SET_DEVICE_ATTR failed: Group 3 attr 0x0000000000001309: Device or resource busy")
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-11.el8
changelog:
  - kvm-blockjob-update-nodes-head-while-removing-all-bdrv.patch [bz#1746631]
  - kvm-hostmem-file-fix-pmem-file-size-check.patch [bz#1724008 bz#1736788]
  - kvm-memory-fetch-pmem-size-in-get_file_size.patch [bz#1724008 bz#1736788]
  - kvm-pr-manager-Fix-invalid-g_free-crash-bug.patch [bz#1753992]
  - Resolves: bz#1724008
    (QEMU core dumped "memory_region_get_ram_ptr: Assertion `mr->ram_block' failed")
  - Resolves: bz#1736788
    (QEMU core dumped if boot guest with nvdimm backed by /dev/dax0.0 and option pmem=off)
  - Resolves: bz#1746631
    (Qemu core dump when do block commit under stress)
  - Resolves: bz#1753992
    (core dump when testing persistent reservation in guest)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-12.el8
changelog:
  - kvm-block-Use-QEMU_IS_ALIGNED.patch [bz#1745922]
  - kvm-block-qcow2-Fix-corruption-introduced-by-commit-8ac0.patch [bz#1745922]
  - kvm-block-qcow2-refactor-encryption-code.patch [bz#1745922]
  - kvm-qemu-iotests-Add-test-for-bz-1745922.patch [bz#1745922]
  - Resolves: bz#1745922
    (Luks-inside-qcow2 snapshot cannot boot after 'qemu-img rebase')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-13.el8
changelog:
  - kvm-nbd-server-attach-client-channel-to-the-export-s-Aio.patch [bz#1748253]
  - kvm-virtio-blk-schedule-virtio_notify_config-to-run-on-m.patch [bz#1744955]
  - Resolves: bz#1744955
    (Qemu hang when block resize a qcow2 image)
  - Resolves: bz#1748253
    (QEMU crashes (core dump) when using the integrated NDB server with data-plane)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-14.el8
changelog:
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1751934]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1764721]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1764721]
  - Resolves: bz#1751934
    (Fail to install guest when xfs is the host filesystem)
  - Resolves: bz#1764721
    (qcow2 image corruption due to incorrect locking in preallocation detection)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-15.el8
changelog:
  - kvm-virtio-blk-Add-blk_drain-to-virtio_blk_device_unreal.patch [bz#1706759]
  - kvm-Revert-qcow2-skip-writing-zero-buffers-to-empty-COW-.patch [bz#1772473]
  - kvm-coroutine-Add-qemu_co_mutex_assert_locked.patch [bz#1772473]
  - kvm-qcow2-Fix-corruption-bug-in-qcow2_detect_metadata_pr.patch [bz#1772473]
  - Resolves: bz#1706759
    (qemu core dump when unplug a 16T GPT type disk from win2019 guest)
  - Resolves: bz#1772473
    (Import fixes from 8.1.0 into 8.1.1 branch)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-16.el8
changelog:
  - kvm-curl-Keep-pointer-to-the-CURLState-in-CURLSocket.patch [bz#1745209]
  - kvm-curl-Keep-socket-until-the-end-of-curl_sock_cb.patch [bz#1745209]
  - kvm-curl-Check-completion-in-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Pass-CURLSocket-to-curl_multi_do.patch [bz#1745209]
  - kvm-curl-Report-only-ready-sockets.patch [bz#1745209]
  - kvm-curl-Handle-success-in-multi_check_completion.patch [bz#1745209]
  - kvm-curl-Check-curl_multi_add_handle-s-return-code.patch [bz#1745209]
  - kvm-vhost-user-save-features-if-the-char-dev-is-closed.patch [bz#1738768]
  - kvm-block-snapshot-Restrict-set-of-snapshot-nodes.patch [bz#1658981]
  - kvm-iotests-Test-internal-snapshots-with-blockdev.patch [bz#1658981]
  - kvm-qapi-Add-feature-flags-to-commands-in-qapi-introspec.patch [bz#1658981]
  - kvm-qapi-Allow-introspecting-fix-for-savevm-s-cooperatio.patch [bz#1658981]
  - kvm-block-Remove-backing-null-from-bs-explicit_-options.patch [bz#1773925]
  - kvm-iotests-Test-multiple-blockdev-snapshot-calls.patch [bz#1773925]
  - Resolves: bz#1658981
    (qemu failed to create internal snapshot via 'savevm' when using blockdev)
  - Resolves: bz#1738768
    (Guest fails to recover receiving packets after vhost-user reconnect)
  - Resolves: bz#1745209
    (qemu-img gets stuck when stream-converting from http)
  - Resolves: bz#1773925
    (Fail to do blockcommit with more than one snapshots)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-17.el8
changelog:
  - kvm-qemu-pr-helper-fix-crash-in-mpath_reconstruct_sense.patch [bz#1772322]
  - Resolves: bz#1772322
    (qemu-pr-helper: fix crash in mpath_reconstruct_sense)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.1.0-18.el8
changelog:
  - kvm-LUKS-support-preallocation.patch [bz#1534951]
  - kvm-nbd-add-empty-.bdrv_reopen_prepare.patch [bz#1718727]
  - kvm-qdev-qbus-add-hidden-device-support.patch [bz#1757796]
  - kvm-pci-add-option-for-net-failover.patch [bz#1757796]
  - kvm-pci-mark-devices-partially-unplugged.patch [bz#1757796]
  - kvm-pci-mark-device-having-guest-unplug-request-pending.patch [bz#1757796]
  - kvm-qapi-add-unplug-primary-event.patch [bz#1757796]
  - kvm-qapi-add-failover-negotiated-event.patch [bz#1757796]
  - kvm-migration-allow-unplug-during-migration-for-failover.patch [bz#1757796]
  - kvm-migration-add-new-migration-state-wait-unplug.patch [bz#1757796]
  - kvm-libqos-tolerate-wait-unplug-migration-state.patch [bz#1757796]
  - kvm-net-virtio-add-failover-support.patch [bz#1757796]
  - kvm-vfio-unplug-failover-primary-device-before-migration.patch [bz#1757796]
  - kvm-net-virtio-fix-dev_unplug_pending.patch [bz#1757796]
  - kvm-net-virtio-return-early-when-failover-primary-alread.patch [bz#1757796]
  - kvm-net-virtio-fix-re-plugging-of-primary-device.patch [bz#1757796]
  - kvm-net-virtio-return-error-when-device_opts-arg-is-NULL.patch [bz#1757796]
  - kvm-vfio-don-t-ignore-return-value-of-migrate_add_blocke.patch [bz#1757796]
  - kvm-hw-vfio-pci-Fix-double-free-of-migration_blocker.patch [bz#1757796]
  - Resolves: bz#1534951
    (RFE: Support preallocation mode for luks format)
  - Resolves: bz#1718727
    (Committing changes to the backing file over NBD fails with reopening files not supported)
  - Resolves: bz#1757796
    (RFE: support for net failover devices in qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-5.el8
changelog:
  - kvm-i386-Remove-cpu64-rhel6-CPU-model.patch [bz#1741345]
  - kvm-Reallocate-dirty_bmap-when-we-change-a-slot.patch [bz#1772774]
  - Resolves: bz#1741345
    (Remove the "cpu64-rhel6" CPU from qemu-kvm)
  - Resolves: bz#1772774
    (qemu-kvm core dump during migration+reboot ( Assertion `mem->dirty_bmap' failed ))


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-6.el8
changelog:
  - kvm-spapr-Don-t-trigger-a-CAS-reboot-for-XICS-XIVE-mode-.patch [bz#1733893]
  - kvm-vfio-pci-Don-t-remove-irqchip-notifier-if-not-regist.patch [bz#1782678]
  - kvm-virtio-don-t-enable-notifications-during-polling.patch [bz#1789301]
  - kvm-usbredir-Prevent-recursion-in-usbredir_write.patch [bz#1790844]
  - kvm-xhci-recheck-slot-status.patch [bz#1790844]
  - Resolves: bz#1733893
    (Boot a guest with "-prom-env 'auto-boot?=false'", SLOF failed to enter the boot entry after input "boot" followed by "0 > " on VNC)
  - Resolves: bz#1782678
    (qemu core dump after hot-unplugging the   XXV710/XL710 PF)
  - Resolves: bz#1789301
    (virtio-blk/scsi: fix notification suppression during AioContext polling)
  - Resolves: bz#1790844
    (USB related fixes)


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-7.el8
changelog:
  - kvm-tcp_emu-Fix-oob-access.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-IRC-commands.patch [bz#1791568]
  - kvm-slirp-use-correct-size-while-emulating-commands.patch [bz#1791568]
  - kvm-RHEL-hw-i386-disable-nested-PERF_GLOBAL_CTRL-MSR-sup.patch [bz#1559846]
  - Resolves: bz#1559846
    (Nested KVM: limit VMX features according to CPU models - Fast Train)
  - Resolves: bz#1791568
    (CVE-2020-7039 qemu-kvm: QEMU: slirp: OOB buffer access while emulating tcp protocols in tcp_emu() [rhel-av-8.2.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 4.2.0-8.el8
changelog:
  - kvm-target-arm-arch_dump-Add-SVE-notes.patch [bz#1725084]
  - kvm-vhost-Add-names-to-section-rounded-warning.patch [bz#1779041]
  - kvm-vhost-Only-align-sections-for-vhost-user.patch [bz#1779041]
  - kvm-vhost-coding-style-fix.patch [bz#1779041]
  - kvm-virtio-fs-fix-MSI-X-nvectors-calculation.patch [bz#1694164]
  - kvm-vhost-user-fs-remove-vhostfd-property.patch [bz#1694164]
  - kvm-build-rename-CONFIG_LIBCAP-to-CONFIG_LIBCAP_NG.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-upstream-headers.patch [bz#1694164]
  - kvm-virtiofsd-Pull-in-kernel-s-fuse.h.patch [bz#1694164]
  - kvm-virtiofsd-Add-auxiliary-.c-s.patch [bz#1694164]
  - kvm-virtiofsd-Add-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-Add-passthrough_ll.patch [bz#1694164]
  - kvm-virtiofsd-Trim-down-imported-files.patch [bz#1694164]
  - kvm-virtiofsd-Format-imported-files-to-qemu-style.patch [bz#1694164]
  - kvm-virtiofsd-remove-mountpoint-dummy-argument.patch [bz#1694164]
  - kvm-virtiofsd-remove-unused-notify-reply-support.patch [bz#1694164]
  - kvm-virtiofsd-Remove-unused-enum-fuse_buf_copy_flags.patch [bz#1694164]
  - kvm-virtiofsd-Fix-fuse_daemonize-ignored-return-values.patch [bz#1694164]
  - kvm-virtiofsd-Fix-common-header-and-define-for-QEMU-buil.patch [bz#1694164]
  - kvm-virtiofsd-Trim-out-compatibility-code.patch [bz#1694164]
  - kvm-vitriofsd-passthrough_ll-fix-fallocate-ifdefs.patch [bz#1694164]
  - kvm-virtiofsd-Make-fsync-work-even-if-only-inode-is-pass.patch [bz#1694164]
  - kvm-virtiofsd-Add-options-for-virtio.patch [bz#1694164]
  - kvm-virtiofsd-add-o-source-PATH-to-help-output.patch [bz#1694164]
  - kvm-virtiofsd-Open-vhost-connection-instead-of-mounting.patch [bz#1694164]
  - kvm-virtiofsd-Start-wiring-up-vhost-user.patch [bz#1694164]
  - kvm-virtiofsd-Add-main-virtio-loop.patch [bz#1694164]
  - kvm-virtiofsd-get-set-features-callbacks.patch [bz#1694164]
  - kvm-virtiofsd-Start-queue-threads.patch [bz#1694164]
  - kvm-virtiofsd-Poll-kick_fd-for-queue.patch [bz#1694164]
  - kvm-virtiofsd-Start-reading-commands-from-queue.patch [bz#1694164]
  - kvm-virtiofsd-Send-replies-to-messages.patch [bz#1694164]
  - kvm-virtiofsd-Keep-track-of-replies.patch [bz#1694164]
  - kvm-virtiofsd-Add-Makefile-wiring-for-virtiofsd-contrib.patch [bz#1694164]
  - kvm-virtiofsd-Fast-path-for-virtio-read.patch [bz#1694164]
  - kvm-virtiofsd-add-fd-FDNUM-fd-passing-option.patch [bz#1694164]
  - kvm-virtiofsd-make-f-foreground-the-default.patch [bz#1694164]
  - kvm-virtiofsd-add-vhost-user.json-file.patch [bz#1694164]
  - kvm-virtiofsd-add-print-capabilities-option.patch [bz#1694164]
  - kvm-virtiofs-Add-maintainers-entry.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-create-new-files-in-caller-.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-lo_map-for-ino-fh-indir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-ino_map-to-hide-lo_inod.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-dirp_map-to-hide-lo_dir.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fd_map-to-hide-file-des.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-fallback-for-racy-ops.patch [bz#1694164]
  - kvm-virtiofsd-validate-path-components.patch [bz#1694164]
  - kvm-virtiofsd-Plumb-fuse_bufvec-through-to-do_write_buf.patch [bz#1694164]
  - kvm-virtiofsd-Pass-write-iov-s-all-the-way-through.patch [bz#1694164]
  - kvm-virtiofsd-add-fuse_mbuf_iter-API.patch [bz#1694164]
  - kvm-virtiofsd-validate-input-buffer-sizes-in-do_write_bu.patch [bz#1694164]
  - kvm-virtiofsd-check-input-buffer-size-in-fuse_lowlevel.c.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_lookup.patch [bz#1694164]
  - kvm-virtiofsd-prevent-.-escape-in-lo_do_readdir.patch [bz#1694164]
  - kvm-virtiofsd-use-proc-self-fd-O_PATH-file-descriptor.patch [bz#1694164]
  - kvm-virtiofsd-sandbox-mount-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-an-empty-network-namespace.patch [bz#1694164]
  - kvm-virtiofsd-move-to-a-new-pid-namespace.patch [bz#1694164]
  - kvm-virtiofsd-add-seccomp-whitelist.patch [bz#1694164]
  - kvm-virtiofsd-Parse-flag-FUSE_WRITE_KILL_PRIV.patch [bz#1694164]
  - kvm-virtiofsd-cap-ng-helpers.patch [bz#1694164]
  - kvm-virtiofsd-Drop-CAP_FSETID-if-client-asked-for-it.patch [bz#1694164]
  - kvm-virtiofsd-set-maximum-RLIMIT_NOFILE-limit.patch [bz#1694164]
  - kvm-virtiofsd-fix-libfuse-information-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-syslog-command-line-option.patch [bz#1694164]
  - kvm-virtiofsd-print-log-only-when-priority-is-high-enoug.patch [bz#1694164]
  - kvm-virtiofsd-Add-ID-to-the-log-with-FUSE_LOG_DEBUG-leve.patch [bz#1694164]
  - kvm-virtiofsd-Add-timestamp-to-the-log-with-FUSE_LOG_DEB.patch [bz#1694164]
  - kvm-virtiofsd-Handle-reinit.patch [bz#1694164]
  - kvm-virtiofsd-Handle-hard-reboot.patch [bz#1694164]
  - kvm-virtiofsd-Kill-threads-when-queues-are-stopped.patch [bz#1694164]
  - kvm-vhost-user-Print-unexpected-slave-message-types.patch [bz#1694164]
  - kvm-contrib-libvhost-user-Protect-slave-fd-with-mutex.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-add-renameat2-support.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-disable-readdirplus-on-cach.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-control-readdirplus.patch [bz#1694164]
  - kvm-virtiofsd-rename-unref_inode-to-unref_inode_lolocked.patch [bz#1694164]
  - kvm-virtiofsd-fail-when-parent-inode-isn-t-known-in-lo_d.patch [bz#1694164]
  - kvm-virtiofsd-extract-root-inode-init-into-setup_root.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-clean-up-cache-related-opti.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-use-hashtable.patch [bz#1694164]
  - kvm-virtiofsd-Clean-up-inodes-on-destroy.patch [bz#1694164]
  - kvm-virtiofsd-support-nanosecond-resolution-for-file-tim.patch [bz#1694164]
  - kvm-virtiofsd-fix-error-handling-in-main.patch [bz#1694164]
  - kvm-virtiofsd-cleanup-allocated-resource-in-se.patch [bz#1694164]
  - kvm-virtiofsd-fix-memory-leak-on-lo.source.patch [bz#1694164]
  - kvm-virtiofsd-add-helper-for-lo_data-cleanup.patch [bz#1694164]
  - kvm-virtiofsd-Prevent-multiply-running-with-same-vhost_u.patch [bz#1694164]
  - kvm-virtiofsd-enable-PARALLEL_DIROPS-during-INIT.patch [bz#1694164]
  - kvm-virtiofsd-fix-incorrect-error-handling-in-lo_do_look.patch [bz#1694164]
  - kvm-Virtiofsd-fix-memory-leak-on-fuse-queueinfo.patch [bz#1694164]
  - kvm-virtiofsd-Support-remote-posix-locks.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_lowlevel_is_virtio-in-fuse_sessio.patch [bz#1694164]
  - kvm-virtiofsd-prevent-fv_queue_thread-vs-virtio_loop-rac.patch [bz#1694164]
  - kvm-virtiofsd-make-lo_release-atomic.patch [bz#1694164]
  - kvm-virtiofsd-prevent-races-with-lo_dirp_put.patch [bz#1694164]
  - kvm-virtiofsd-rename-inode-refcount-to-inode-nlookup.patch [bz#1694164]
  - kvm-libvhost-user-Fix-some-memtable-remap-cases.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-fix-refcounting-on-remove-r.patch [bz#1694164]
  - kvm-virtiofsd-introduce-inode-refcount-to-prevent-use-af.patch [bz#1694164]
  - kvm-virtiofsd-do-not-always-set-FUSE_FLOCK_LOCKS.patch [bz#1694164]
  - kvm-virtiofsd-convert-more-fprintf-and-perror-to-use-fus.patch [bz#1694164]
  - kvm-virtiofsd-Reset-O_DIRECT-flag-during-file-open.patch [bz#1694164]
  - kvm-virtiofsd-Fix-data-corruption-with-O_APPEND-write-in.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Use-cache_readdir-for-direc.patch [bz#1694164]
  - kvm-virtiofsd-add-definition-of-fuse_buf_writev.patch [bz#1694164]
  - kvm-virtiofsd-use-fuse_buf_writev-to-replace-fuse_buf_wr.patch [bz#1694164]
  - kvm-virtiofsd-process-requests-in-a-thread-pool.patch [bz#1694164]
  - kvm-virtiofsd-prevent-FUSE_INIT-FUSE_DESTROY-races.patch [bz#1694164]
  - kvm-virtiofsd-fix-lo_destroy-resource-leaks.patch [bz#1694164]
  - kvm-virtiofsd-add-thread-pool-size-NUM-option.patch [bz#1694164]
  - kvm-virtiofsd-Convert-lo_destroy-to-take-the-lo-mutex-lo.patch [bz#1694164]
  - kvm-virtiofsd-passthrough_ll-Pass-errno-to-fuse_reply_er.patch [bz#1694164]
  - kvm-virtiofsd-stop-all-queue-threads-on-exit-in-virtio_l.patch [bz#1694164]
  - kvm-virtiofsd-add-some-options-to-the-help-message.patch [bz#1694164]
  - kvm-redhat-ship-virtiofsd-vhost-user-device-backend.patch [bz#1694164]
  - Resolves: bz#1694164
    (virtio-fs: host<->guest shared file system (qemu))
  - Resolves: bz#1725084
    (aarch64: support dumping SVE registers)
  - Resolves: bz#1779041
    (netkvm: no connectivity Windows guest with q35 + hugepages + vhost + hv_synic)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-9.el8
changelog:
  - kvm-ppc-Deassert-the-external-interrupt-pin-in-KVM-on-re.patch [bz#1776638]
  - kvm-xics-Don-t-deassert-outputs.patch [bz#1776638]
  - kvm-ppc-Don-t-use-CPUPPCState-irq_input_state-with-moder.patch [bz#1776638]
  - kvm-trace-update-qemu-trace-stap-to-Python-3.patch [bz#1787395]
  - kvm-redhat-Remove-redundant-fix-for-qemu-trace-stap.patch [bz#1787395]
  - kvm-iscsi-Cap-block-count-from-GET-LBA-STATUS-CVE-2020-1.patch [bz#1794503]
  - kvm-tpm-ppi-page-align-PPI-RAM.patch [bz#1787444]
  - kvm-target-arm-kvm-trivial-Clean-up-header-documentation.patch [bz#1647366]
  - kvm-target-arm-kvm64-kvm64-cpus-have-timer-registers.patch [bz#1647366]
  - kvm-tests-arm-cpu-features-Check-feature-default-values.patch [bz#1647366]
  - kvm-target-arm-kvm-Implement-virtual-time-adjustment.patch [bz#1647366]
  - kvm-target-arm-cpu-Add-the-kvm-no-adjvtime-CPU-property.patch [bz#1647366]
  - kvm-migration-Define-VMSTATE_INSTANCE_ID_ANY.patch [bz#1529231]
  - kvm-migration-Change-SaveStateEntry.instance_id-into-uin.patch [bz#1529231]
  - kvm-apic-Use-32bit-APIC-ID-for-migration-instance-ID.patch [bz#1529231]
  - Resolves: bz#1529231
    ([q35] VM hangs after migration with 200 vCPUs)
  - Resolves: bz#1647366
    (aarch64: Add support for the kvm-no-adjvtime ARM CPU feature)
  - Resolves: bz#1776638
    (Guest failed to boot up after system_reset  20 times)
  - Resolves: bz#1787395
    (qemu-trace-stap list : TypeError: startswith first arg must be bytes or a tuple of bytes, not str)
  - Resolves: bz#1787444
    (Broken postcopy migration with vTPM device)
  - Resolves: bz#1794503
    (CVE-2020-1711 qemu-kvm: QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-10.el8
changelog:
  - kvm-i386-Resolve-CPU-models-to-v1-by-default.patch [bz#1779078 bz#1787291 bz#1779078 bz#1779078]
  - kvm-iotests-Support-job-complete-in-run_job.patch [bz#1781637]
  - kvm-iotests-Create-VM.blockdev_create.patch [bz#1781637]
  - kvm-block-Activate-recursively-even-for-already-active-n.patch [bz#1781637]
  - kvm-hmp-Allow-using-qdev-ID-for-qemu-io-command.patch [bz#1781637]
  - kvm-iotests-Test-external-snapshot-with-VM-state.patch [bz#1781637]
  - kvm-iotests.py-Let-wait_migration-wait-even-more.patch [bz#1781637]
  - kvm-blockdev-fix-coding-style-issues-in-drive_backup_pre.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_drive_backup-and-drive-backup-tra.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-unify-qmp_blockdev_backup-and-blockdev-back.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-honor-bdrv_try_set_aio_context-context-requ.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-backup-top-Begin-drain-earlier.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-block-backup-top-Don-t-acquire-context-while-droppin.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Acquire-AioContext-on-dirty-bitmap-function.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-blockdev-Return-bs-to-the-proper-context-on-snapshot.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-iotests-Test-handling-of-AioContexts-with-some-block.patch [bz#1745606 bz#1746217 bz#1773517 bz#1779036 bz#1782111 bz#1782175 bz#1783965]
  - kvm-target-arm-monitor-query-cpu-model-expansion-crashed.patch [bz#1801320]
  - kvm-docs-arm-cpu-features-Make-kvm-no-adjvtime-comment-c.patch [bz#1801320]
  - Resolves: bz#1745606
    (Qemu hang when do incremental live backup in transaction mode without bitmap)
  - Resolves: bz#1746217
    (Src qemu hang when do storage vm migration during guest installation)
  - Resolves: bz#1773517
    (Src qemu hang when do storage vm migration with dataplane enable)
  - Resolves: bz#1779036
    (Qemu coredump when do snapshot in transaction mode with one snapshot path not exist)
  - Resolves: bz#1779078
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm))
  - Resolves: bz#1781637
    (qemu crashed when do mem and disk snapshot)
  - Resolves: bz#1782111
    (Qemu hang when do full backup on multi-disks with one job's 'job-id' missed in transaction mode(data plane enable))
  - Resolves: bz#1782175
    (Qemu core dump when add persistent bitmap(data plane enable))
  - Resolves: bz#1783965
    (Qemu core dump when do backup with sync: bitmap and no bitmap provided)
  - Resolves: bz#1787291
    (RHVH 4.4: Failed to run VM on 4.3/4.4 engine (Exit message: the CPU is incompatible with host CPU: Host CPU does not provide required features: hle, rtm) [rhel-8.1.0.z])
  - Resolves: bz#1801320
    (aarch64: backport query-cpu-model-expansion and adjvtime document fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-11.el8
changelog:
  - kvm-spapr-Enable-DD2.3-accelerated-count-cache-flush-in-.patch [bz#1796240]
  - kvm-util-add-slirp_fmt-helpers.patch [bz#1798994]
  - kvm-tcp_emu-fix-unsafe-snprintf-usages.patch [bz#1798994]
  - kvm-virtio-add-ability-to-delete-vq-through-a-pointer.patch [bz#1791590]
  - kvm-virtio-make-virtio_delete_queue-idempotent.patch [bz#1791590]
  - kvm-virtio-reset-region-cache-when-on-queue-deletion.patch [bz#1791590]
  - kvm-virtio-net-delete-also-control-queue-when-TX-RX-dele.patch [bz#1791590]
  - Resolves: bz#1791590
    ([Q35] No "DEVICE_DELETED" event in qmp after unplug virtio-net-pci device)
  - Resolves: bz#1796240
    (Enable hw accelerated cache-count-flush by default for POWER9 DD2.3 cpus)
  - Resolves: bz#1798994
    (CVE-2020-8608 qemu-kvm: QEMU: Slirp: potential OOB access due to unsafe snprintf() usages [rhel-av-8.2.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-12.el8
changelog:
  - kvm-vhost-user-gpu-Drop-trailing-json-comma.patch [bz#1805334]
  - Resolves: bz#1805334
    (vhost-user/50-qemu-gpu.json is not valid JSON)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-13.el8
changelog:
  - kvm-target-i386-kvm-initialize-feature-MSRs-very-early.patch [bz#1791648]
  - kvm-target-i386-add-a-ucode-rev-property.patch [bz#1791648]
  - kvm-target-i386-kvm-initialize-microcode-revision-from-K.patch [bz#1791648]
  - kvm-target-i386-fix-TCG-UCODE_REV-access.patch [bz#1791648]
  - kvm-target-i386-check-for-availability-of-MSR_IA32_UCODE.patch [bz#1791648]
  - kvm-target-i386-enable-monitor-and-ucode-revision-with-c.patch [bz#1791648]
  - kvm-qcow2-Fix-qcow2_alloc_cluster_abort-for-external-dat.patch [bz#1703907]
  - kvm-mirror-Store-MirrorOp.co-for-debuggability.patch [bz#1794692]
  - kvm-mirror-Don-t-let-an-operation-wait-for-itself.patch [bz#1794692]
  - Resolves: bz#1703907
    ([upstream]QEMU coredump when converting to qcow2: external data file images on block devices with copy_offloading)
  - Resolves: bz#1791648
    ([RFE] Passthrough host CPU microcode version to KVM guest if using CPU passthrough)
  - Resolves: bz#1794692
    (Mirror block job stops making progress)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-14.el8
changelog:
  - kvm-hw-smbios-set-new-default-SMBIOS-fields-for-Windows-.patch [bz#1782529]
  - kvm-migration-multifd-clean-pages-after-filling-packet.patch [bz#1738451]
  - kvm-migration-Make-sure-that-we-don-t-call-write-in-case.patch [bz#1738451]
  - kvm-migration-multifd-fix-nullptr-access-in-terminating-.patch [bz#1738451]
  - kvm-migration-multifd-fix-destroyed-mutex-access-in-term.patch [bz#1738451]
  - kvm-multifd-Make-sure-that-we-don-t-do-any-IO-after-an-e.patch [bz#1738451]
  - kvm-qemu-file-Don-t-do-IO-after-shutdown.patch [bz#1738451]
  - kvm-migration-Don-t-send-data-if-we-have-stopped.patch [bz#1738451]
  - kvm-migration-Create-migration_is_running.patch [bz#1738451]
  - kvm-migration-multifd-fix-nullptr-access-in-multifd_send.patch [bz#1738451]
  - kvm-migration-Maybe-VM-is-paused-when-migration-is-cance.patch [bz#1738451]
  - kvm-virtiofsd-Remove-fuse_req_getgroups.patch [bz#1797064]
  - kvm-virtiofsd-fv_create_listen_socket-error-path-socket-.patch [bz#1797064]
  - kvm-virtiofsd-load_capng-missing-unlock.patch [bz#1797064]
  - kvm-virtiofsd-do_read-missing-NULL-check.patch [bz#1797064]
  - kvm-tools-virtiofsd-fuse_lowlevel-Fix-fuse_out_header-er.patch [bz#1797064]
  - kvm-virtiofsd-passthrough_ll-cleanup-getxattr-listxattr.patch [bz#1797064]
  - kvm-virtiofsd-Fix-xattr-operations.patch [bz#1797064]
  - Resolves: bz#1738451
    (qemu on src host core dump after set multifd-channels and do migration twice (first migration execute migrate_cancel))
  - Resolves: bz#1782529
    (Windows Update Enablement with default smbios strings in qemu)
  - Resolves: bz#1797064
    (virtiofsd: Fixes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-15.el8
changelog:
  - kvm-block-nbd-Fix-hang-in-.bdrv_close.patch [bz#1640894]
  - kvm-block-Generic-file-creation-fallback.patch [bz#1640894]
  - kvm-file-posix-Drop-hdev_co_create_opts.patch [bz#1640894]
  - kvm-iscsi-Drop-iscsi_co_create_opts.patch [bz#1640894]
  - kvm-iotests-Add-test-for-image-creation-fallback.patch [bz#1640894]
  - kvm-block-Fix-leak-in-bdrv_create_file_fallback.patch [bz#1640894]
  - kvm-iotests-Use-complete_and_wait-in-155.patch [bz#1790482 bz#1805143]
  - kvm-block-Introduce-bdrv_reopen_commit_post-step.patch [bz#1790482 bz#1805143]
  - kvm-block-qcow2-Move-bitmap-reopen-into-bdrv_reopen_comm.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Refactor-blockdev-reopen-test-for-iothreads.patch [bz#1790482 bz#1805143]
  - kvm-block-bdrv_reopen-with-backing-file-in-different-Aio.patch [bz#1790482 bz#1805143]
  - kvm-block-Versioned-x-blockdev-reopen-API-with-feature-f.patch [bz#1790482 bz#1805143]
  - kvm-block-Make-bdrv_get_cumulative_perm-public.patch [bz#1790482 bz#1805143]
  - kvm-block-Relax-restrictions-for-blockdev-snapshot.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Fix-run_job-with-use_log-False.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Test-mirror-with-temporarily-disabled-target.patch [bz#1790482 bz#1805143]
  - kvm-block-Fix-cross-AioContext-blockdev-snapshot.patch [bz#1790482 bz#1805143]
  - kvm-iotests-Add-iothread-cases-to-155.patch [bz#1790482 bz#1805143]
  - kvm-qapi-Add-allow-write-only-overlay-feature-for-blockd.patch [bz#1790482 bz#1805143]
  - kvm-exec-rom_reset-Free-rom-data-during-inmigrate-skip.patch [bz#1809380]
  - Resolves: bz#1640894
    (Fix generic file creation fallback for qemu-img nvme:// image creation support)
  - Resolves: bz#1790482
    (bitmaps in backing images can't be modified)
  - Resolves: bz#1805143
    (allow late/lazy opening of backing chain for shallow blockdev-mirror)
  - Resolves: bz#1809380
    (guest hang during reboot process after migration from RHEl7.8 to RHEL8.2.0.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-16.el8
changelog:
  - kvm-migration-Rate-limit-inside-host-pages.patch [bz#1814336]
  - kvm-build-sys-do-not-make-qemu-ga-link-with-pixman.patch [bz#1811670]
  - Resolves: bz#1811670
    (Unneeded qemu-guest-agent dependency on pixman)
  - Resolves: bz#1814336
    ([POWER9] QEMU migration-test triggers a kernel warning)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-17.el8
changelog:
  - kvm-block-pass-BlockDriver-reference-to-the-.bdrv_co_cre.patch [bz#1816007]
  - kvm-block-trickle-down-the-fallback-image-creation-funct.patch [bz#1816007]
  - kvm-Revert-mirror-Don-t-let-an-operation-wait-for-itself.patch [bz#1794692]
  - kvm-mirror-Wait-only-for-in-flight-operations.patch [bz#1794692]
  - Resolves: bz#1794692
    (Mirror block job stops making progress)
  - Resolves: bz#1816007
    (qemu-img convert failed to convert with block device as target)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-18.el8_2
changelog:
  - kvm-job-take-each-job-s-lock-individually-in-job_txn_app.patch [bz#1817621]
  - kvm-replication-assert-we-own-context-before-job_cancel_.patch [bz#1817621]
  - kvm-backup-don-t-acquire-aio_context-in-backup_clean.patch [bz#1817621]
  - kvm-block-backend-Reorder-flush-pdiscard-function-defini.patch [bz#1817621]
  - kvm-block-Increase-BB.in_flight-for-coroutine-and-sync-i.patch [bz#1817621]
  - kvm-block-Fix-blk-in_flight-during-blk_wait_while_draine.patch [bz#1817621]
  - Resolves: bz#1817621
    (Crash and deadlock with block jobs when using io-threads)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-19.el8_2
changelog:
  - kvm-target-i386-do-not-set-unsupported-VMX-secondary-exe.patch [bz#1822682]
  - Resolves: bz#1822682
    (QEMU-4.2 fails to start a VM on Azure)


author: Jon Maloy <jmaloy@redhat.com> - 4.2.0-20.el8
changelog:
  - kvm-pcie_root_port-Add-hotplug-disabling-option.patch [bz#1790899]
  - kvm-compat-disable-edid-for-virtio-gpu-ccw.patch [bz#1816793]
  - Resolves: bz#1790899
    ([RFE] QEMU devices should have the option to enable/disable hotplug/unplug)
  - Resolves: bz#1816793
    ('edid' compat handling missing for virtio-gpu-ccw)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-21.el8
changelog:
  - kvm-hw-pci-pcie-Forbid-hot-plug-if-it-s-disabled-on-the-.patch [bz#1820531]
  - kvm-hw-pci-pcie-Replace-PCI_DEVICE-casts-with-existing-v.patch [bz#1820531]
  - kvm-tools-virtiofsd-passthrough_ll-Fix-double-close.patch [bz#1817445]
  - kvm-virtiofsd-add-rlimit-nofile-NUM-option.patch [bz#1817445]
  - kvm-virtiofsd-stay-below-fs.file-max-sysctl-value-CVE-20.patch [bz#1817445]
  - kvm-virtiofsd-jail-lo-proc_self_fd.patch [bz#1817445]
  - kvm-virtiofsd-Show-submounts.patch [bz#1817445]
  - kvm-virtiofsd-only-retain-file-system-capabilities.patch [bz#1817445]
  - kvm-virtiofsd-drop-all-capabilities-in-the-wait-parent-p.patch [bz#1817445]
  - Resolves: bz#1817445
    (CVE-2020-10717 virt:8.2/qemu-kvm: QEMU: virtiofsd: guest may open maximum file descriptor to cause DoS [rhel-av-8])
  - Resolves: bz#1820531
    (qmp command query-pci get wrong result after hotplug device under hotplug=off controller)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-22.el8
changelog:
  - kvm-block-always-fill-entire-LUKS-header-space-with-zero.patch [bz#1775462]
  - kvm-numa-remove-not-needed-check.patch [bz#1600217]
  - kvm-numa-properly-check-if-numa-is-supported.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-initiator-information-for.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-memory-latency-and-bandwi.patch [bz#1600217]
  - kvm-numa-Extend-CLI-to-provide-memory-side-cache-informa.patch [bz#1600217]
  - kvm-hmat-acpi-Build-Memory-Proximity-Domain-Attributes-S.patch [bz#1600217]
  - kvm-hmat-acpi-Build-System-Locality-Latency-and-Bandwidt.patch [bz#1600217]
  - kvm-hmat-acpi-Build-Memory-Side-Cache-Information-Struct.patch [bz#1600217]
  - kvm-tests-numa-Add-case-for-QMP-build-HMAT.patch [bz#1600217]
  - kvm-tests-bios-tables-test-add-test-cases-for-ACPI-HMAT.patch [bz#1600217]
  - kvm-ACPI-add-expected-files-for-HMAT-tests-acpihmat.patch [bz#1600217]
  - Resolves: bz#1600217
    ([Intel 8.2.1 FEAT] KVM ACPI HMAT support - qemu-kvm  Fast Train)
  - Resolves: bz#1775462
    (Creating luks-inside-qcow2 images with cluster_size=2k/4k will get a corrupted image)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-23.el8
changelog:
  - kvm-target-arm-Fix-PAuth-sbox-functions.patch [bz#1813940]
  - kvm-Don-t-leak-memory-when-reallocation-fails.patch [bz#1749737]
  - kvm-Replace-remaining-malloc-free-user-with-glib.patch [bz#1749737]
  - kvm-Revert-RHEL-disable-hostmem-memfd.patch [bz#1839030]
  - kvm-block-introducing-bdrv_co_delete_file-interface.patch [bz#1827630]
  - kvm-block.c-adding-bdrv_co_delete_file.patch [bz#1827630]
  - kvm-crypto.c-cleanup-created-file-when-block_crypto_co_c.patch [bz#1827630]
  - Resolves: bz#1749737
    (CVE-2019-15890 qemu-kvm: QEMU: Slirp: use-after-free during packet reassembly [rhel-av-8])
  - Resolves: bz#1813940
    (CVE-2020-10702 virt:8.1/qemu-kvm: qemu: weak signature generation in Pointer Authentication support for ARM [rhel-av-8])
  - Resolves: bz#1827630
    (volume creation leaving uncleaned stuff behind on error (vol-clone/libvirt/qemu-kvm))
  - Resolves: bz#1839030
    (RFE: enable the "memfd" memory backend)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-24.el8
changelog:
  - kvm-target-i386-set-the-CPUID-level-to-0x14-on-old-machi.patch [bz#1513681]
  - kvm-block-curl-HTTP-header-fields-allow-whitespace-aroun.patch [bz#1841038]
  - kvm-block-curl-HTTP-header-field-names-are-case-insensit.patch [bz#1841038]
  - kvm-MAINTAINERS-fix-qcow2-bitmap.c-under-Dirty-Bitmaps-h.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Let-_make_test_img-parse-its-parameters.patch [bz#1779893 bz#1779904]
  - kvm-qemu_img-add-cvtnum_full-to-print-error-reports.patch [bz#1779893 bz#1779904]
  - kvm-block-Make-it-easier-to-learn-which-BDS-support-bitm.patch [bz#1779893 bz#1779904]
  - kvm-blockdev-Promote-several-bitmap-functions-to-non-sta.patch [bz#1779893 bz#1779904]
  - kvm-blockdev-Split-off-basic-bitmap-operations-for-qemu-.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Add-bitmap-sub-command.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Fix-test-178.patch [bz#1779893 bz#1779904]
  - kvm-qcow2-Expose-bitmaps-size-during-measure.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Factor-out-code-for-merging-bitmaps.patch [bz#1779893 bz#1779904]
  - kvm-qemu-img-Add-convert-bitmaps-option.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Add-test-291-to-for-qemu-img-bitmap-coverage.patch [bz#1779893 bz#1779904]
  - kvm-iotests-Add-more-skip_if_unsupported-statements-to-t.patch [bz#1778593]
  - kvm-iotests-don-t-use-format-for-drive_add.patch [bz#1778593]
  - kvm-iotests-055-refactor-compressed-backup-to-vmdk.patch [bz#1778593]
  - kvm-iotests-055-skip-vmdk-target-tests-if-vmdk-is-not-wh.patch [bz#1778593]
  - kvm-backup-Improve-error-for-bdrv_getlength-failure.patch [bz#1778593]
  - kvm-backup-Make-sure-that-source-and-target-size-match.patch [bz#1778593]
  - kvm-iotests-Backup-with-different-source-target-size.patch [bz#1778593]
  - kvm-iotests-109-Don-t-mirror-with-mismatched-size.patch [bz#1778593]
  - kvm-iotests-229-Use-blkdebug-to-inject-an-error.patch [bz#1778593]
  - kvm-mirror-Make-sure-that-source-and-target-size-match.patch [bz#1778593]
  - kvm-iotests-Mirror-with-different-source-target-size.patch [bz#1778593]
  - Resolves: bz#1513681
    ([Intel 8.2.1 Feat] qemu-kvm PT VMX -- Fast Train)
  - Resolves: bz#1778593
    (Qemu coredump when backup to a existing small size image)
  - Resolves: bz#1779893
    (RFE: Copy bitmaps with qemu-img convert)
  - Resolves: bz#1779904
    (RFE: ability to estimate bitmap space utilization for qcow2)
  - Resolves: bz#1841038
    (qemu-img: /var/tmp/v2vovl56bced.qcow2: CURL: Error opening file: Server does not support 'range' (byte ranges) with HTTP/2 server in VMware ESXi 7)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-25.el8
changelog:
  - kvm-enable-ramfb.patch [bz#1841068]
  - kvm-block-Add-flags-to-BlockDriver.bdrv_co_truncate.patch [bz#1780574]
  - kvm-block-Add-flags-to-bdrv-_co-_truncate.patch [bz#1780574]
  - kvm-block-backend-Add-flags-to-blk_truncate.patch [bz#1780574]
  - kvm-qcow2-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-raw-format-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-file-posix-Support-BDRV_REQ_ZERO_WRITE-for-truncate.patch [bz#1780574]
  - kvm-block-truncate-Don-t-make-backing-file-data-visible.patch [bz#1780574]
  - kvm-iotests-Add-qemu_io_log.patch [bz#1780574]
  - kvm-iotests-Filter-testfiles-out-in-filter_img_info.patch [bz#1780574]
  - kvm-iotests-Test-committing-to-short-backing-file.patch [bz#1780574]
  - kvm-qcow2-Forward-ZERO_WRITE-flag-for-full-preallocation.patch [bz#1780574]
  - kvm-i386-Add-MSR-feature-bit-for-MDS-NO.patch [bz#1769912]
  - kvm-i386-Add-macro-for-stibp.patch [bz#1769912]
  - kvm-target-i386-Add-new-bit-definitions-of-MSR_IA32_ARCH.patch [bz#1769912]
  - kvm-i386-Add-new-CPU-model-Cooperlake.patch [bz#1769912]
  - kvm-target-i386-Add-missed-features-to-Cooperlake-CPU-mo.patch [bz#1769912]
  - Resolves: bz#1769912
    ([Intel 8.2.1 Feature] introduce Cooper Lake cpu model - qemu-kvm Fast Train)
  - Resolves: bz#1780574
    (Data corruption with resizing short overlay over longer backing files)
  - Resolves: bz#1841068
    (RFE: please support the "ramfb" display device model)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 4.2.0-26.el8
changelog:
  - kvm-nbd-server-Avoid-long-error-message-assertions-CVE-2.patch [bz#1845384]
  - kvm-block-Call-attention-to-truncation-of-long-NBD-expor.patch [bz#1845384]
  - Resolves: bz#1845384
    (CVE-2020-10761 virt:8.2/qemu-kvm: QEMU: nbd: reachable assertion failure in nbd_negotiate_send_rep_verr via remote client [rhel-av-8])


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 4.2.0-27.el8
changelog:
  - kvm-hw-pci-pcie-Move-hot-plug-capability-check-to-pre_pl.patch [bz#1820531]
  - kvm-spec-Fix-python-shenigans-for-tests.patch [bz#1845779]
  - kvm-target-i386-Add-ARCH_CAPABILITIES-related-bits-into-.patch [bz#1840342]
  - Resolves: bz#1820531
    (qmp command query-pci get wrong result after hotplug device under hotplug=off controller)
  - Resolves: bz#1840342
    ([Intel 8.2.1 Bug] qemu-kvm Add ARCH_CAPABILITIES to Icelake-Server cpu model - Fast Train)
  - Resolves: bz#1845779
    (Install 'qemu-kvm-tests' failed as nothing provides /usr/libexec/platform-python3 - virt module 6972)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-28.el8
changelog:
  - kvm-virtio-blk-Refactor-the-code-that-processes-queued-r.patch [bz#1812765]
  - kvm-virtio-blk-On-restart-process-queued-requests-in-the.patch [bz#1812765]
  - kvm-Fix-use-afte-free-in-ip_reass-CVE-2020-1983.patch [bz#1838082]
  - Resolves: bz#1812765
    (qemu with iothreads enabled crashes on resume after enospc pause for disk extension)
  - Resolves: bz#1838082
    (CVE-2020-1983 virt:8.2/qemu-kvm: QEMU: slirp: use-after-free in ip_reass() function in ip_input.c [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 4.2.0-29.el8
changelog:
  - kvm-virtio-net-fix-removal-of-failover-device.patch [bz#1820120]
  - Resolves: bz#1820120
    (After hotunplugging the vitrio device and netdev, hotunpluging the failover VF will cause qemu core dump)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-1.el8
changelog:
  - Quick changelog fix to reflect the current fixes:
  - Resolve: bz#1781911
  - Resolve: bz#1841529
  - Resolve: bz#1842902
  - Resolve: bz#1818843
  - Resolve: bz#1819292
  - Resolve: bz#1801242


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-2.el8
changelog:
  - kvm-redhat-define-hw_compat_8_2.patch [bz#1853265]
  - Resolves: bz#1853265
    (Forward and backward migration from rhel-av-8.3.0(qemu-kvm-5.0.0) to rhel-av-8.2.1(qemu-kvm-4.2.0) failed with "qemu-kvm: error while loading state for instance 0x0 of device 'spapr'")


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-3.el8
changelog:
  - kvm-redhat-Update-hw_compat_8_2.patch [bz#1843348]
  - kvm-redhat-update-pseries-rhel8.2.0-machine-type.patch [bz#1843348]
  - kvm-Disable-TPM-passthrough-backend-on-ARM.patch [bz#1801242]
  - kvm-Require-libfdt-1.6.0.patch [bz#1867847]
  - Resolves: bz#1801242
    ([aarch64] vTPM support in machvirt)
  - Resolves: bz#1843348
    (8.3 machine types for POWER)
  - Resolves: bz#1867847
    ([ppc] virt module 7629: /usr/libexec/qemu-kvm: undefined symbol: fdt_check_full, version LIBFDT_1.2)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-4.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1867075]
  - kvm-machine-types-numa-set-numa_mem_supported-on-old-mac.patch [bz#1849707]
  - kvm-machine_types-numa-compatibility-for-auto_enable_num.patch [bz#1849707]
  - kvm-migration-Add-block-bitmap-mapping-parameter.patch [bz#1790492]
  - kvm-iotests.py-Let-wait_migration-return-on-failure.patch [bz#1790492]
  - kvm-iotests-Test-node-bitmap-aliases-during-migration.patch [bz#1790492]
  - Resolves: bz#1790492
    ('dirty-bitmaps' migration capability should allow configuring target nodenames)
  - Resolves: bz#1849707
    (8.3 machine types for x86 - 5.1 update)
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-5.el8
changelog:
  - kvm-Revert-i386-Fix-pkg_id-offset-for-EPYC-cpu-models.patch [bz#1873417]
  - kvm-Revert-target-i386-Enable-new-apic-id-encoding-for-E.patch [bz#1873417]
  - kvm-Revert-hw-i386-Move-arch_id-decode-inside-x86_cpus_i.patch [bz#1873417]
  - kvm-Revert-i386-Introduce-use_epyc_apic_id_encoding-in-X.patch [bz#1873417]
  - kvm-Revert-hw-i386-Introduce-apicid-functions-inside-X86.patch [bz#1873417]
  - kvm-Revert-target-i386-Cleanup-and-use-the-EPYC-mode-top.patch [bz#1873417]
  - kvm-Revert-hw-386-Add-EPYC-mode-topology-decoding-functi.patch [bz#1873417]
  - kvm-nvram-Exit-QEMU-if-NVRAM-cannot-contain-all-prom-env.patch [bz#1867739]
  - kvm-usb-fix-setup_len-init-CVE-2020-14364.patch [bz#1869715]
  - kvm-Remove-explicit-glusterfs-api-dependency.patch [bz#1872853]
  - kvm-disable-virgl.patch [bz#1831271]
  - Resolves: bz#1831271
    (Drop virgil acceleration support and remove virglrenderer dependency)
  - Resolves: bz#1867739
    (-prom-env does not validate input)
  - Resolves: bz#1869715
    (CVE-2020-14364 qemu-kvm: QEMU: usb: out-of-bounds r/w access issue while processing usb packets [rhel-av-8.3.0])
  - Resolves: bz#1872853
    (move the glusterfs dependency out of qemu-kvm-core to the glusterfs module)
  - Resolves: bz#1873417
    (AMD/NUMA topology - revert 5.1 changes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-6.el8
changelog:
  - kvm-spec-Move-qemu-pr-helper-back-to-usr-bin.patch [bz#1869635]
  - kvm-Bump-required-libusbx-version.patch [bz#1856591]
  - Resolves: bz#1856591
    (libusbx isn't updated with qemu-kvm)
  - Resolves: bz#1869635
    ('/usr/bin/qemu-pr-helper' is not a suitable pr helper: No such file or directory)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-7.el8
changelog:
  - kvm-target-ppc-Add-experimental-option-for-enabling-secu.patch [bz#1789757 bz#1870384]
  - kvm-target-arm-Move-start-powered-off-property-to-generi.patch [bz#1849483]
  - kvm-target-arm-Move-setting-of-CPU-halted-state-to-gener.patch [bz#1849483]
  - kvm-ppc-spapr-Use-start-powered-off-CPUState-property.patch [bz#1849483]
  - Resolves: bz#1789757
    ([IBM 8.4 FEAT] Add machine option to enable secure VM support)
  - Resolves: bz#1849483
    (Failed to boot up guest when hotplugging vcpus on bios stage)
  - Resolves: bz#1870384
    ([IBM 8.3 FEAT] Add interim/unsupported machine option to enable secure VM support for testing purposes)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-8.el8
changelog:
  - kvm-redhat-link-etc-qemu-ga-fsfreeze-hook-to-etc-qemu-kv.patch [bz#1738820]
  - kvm-seccomp-fix-killing-of-whole-process-instead-of-thre.patch [bz#1752376]
  - kvm-Revert-Drop-bogus-IPv6-messages.patch [bz#1867075]
  - kvm-block-rbd-add-namespace-to-qemu_rbd_strong_runtime_o.patch [bz#1821528]
  - Resolves: bz#1738820
    ('-F' option of qemu-ga command  cause the guest-fsfreeze-freeze command doesn't work)
  - Resolves: bz#1752376
    (qemu use SCMP_ACT_TRAP even SCMP_ACT_KILL_PROCESS is available)
  - Resolves: bz#1821528
    (missing namespace attribute when access the rbd image with namespace)
  - Resolves: bz#1867075
    (CVE-2020-10756 virt:8.3/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-9.el8
changelog:
  - kvm-hw-nvram-fw_cfg-fix-FWCfgDataGeneratorClass-get_data.patch [bz#1688978]
  - Resolves: bz#1688978
    (RFE: forward host preferences for cipher suites and CA certs to guest firmware)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-10.el8
changelog:
  - kvm-qemu-img-Support-bitmap-merge-into-backing-image.patch [bz#1877209]
  - Resolves: bz#1877209
    ('qemu-img bitmaps --merge' failed when trying to merge top volume bitmap to base volume bitmap)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-11.el8_3
changelog:
  - kvm-migration-increase-max-bandwidth-to-128-MiB-s-1-Gib-.patch [bz#1874004]
  - kvm-redhat-Make-all-generated-so-files-executable-not-on.patch [bz#1876635]
  - Resolves: bz#1874004
    (Live migration performance is poor during guest installation process on power host)
  - Resolves: bz#1876635
    (VM fails to start with a passthrough smartcard)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-12.el8_3
changelog:
  - kvm-virtio-skip-legacy-support-check-on-machine-types-le.patch [bz#1868449]
  - kvm-vhost-vsock-pci-force-virtio-version-1.patch [bz#1868449]
  - kvm-vhost-user-vsock-pci-force-virtio-version-1.patch [bz#1868449]
  - kvm-vhost-vsock-ccw-force-virtio-version-1.patch [bz#1868449]
  - Resolves: bz#1868449
    (vhost_vsock error: device is modern-only, use disable-legacy=on)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-13.el8_3
changelog:
  - kvm-x86-lpc9-let-firmware-negotiate-CPU-hotplug-with-SMI.patch [bz#1846886]
  - kvm-x86-cpuhp-prevent-guest-crash-on-CPU-hotplug-when-br.patch [bz#1846886]
  - kvm-x86-cpuhp-refuse-cpu-hot-unplug-request-earlier-if-n.patch [bz#1846886]
  - Resolves: bz#1846886
    (Guest hit soft lockup or reboots if hotplug vcpu under ovmf)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-14.el8_3
changelog:
  - kvm-virtiofsd-avoid-proc-self-fd-tempdir.patch [bz#1884276]
  - Resolves: bz#1884276
    (Pod with kata-runtime won't start, QEMU: "vhost_user_dev init failed, Operation not permitted" [mkdtemp failing in sandboxing])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-15.el8
changelog:
  - kvm-redhat-add-un-pre-install-systemd-hooks-for-qemu-ga.patch [bz#1882719]
  - kvm-rcu-Implement-drain_call_rcu.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-Rename-qmp_assert_error_class-to-qmp_expect.patch [bz#1812399 bz#1866707]
  - kvm-qtest-rename-qtest_qmp_receive-to-qtest_qmp_receive_.patch [bz#1812399 bz#1866707]
  - kvm-qtest-Reintroduce-qtest_qmp_receive-with-QMP-event-b.patch [bz#1812399 bz#1866707]
  - kvm-qtest-remove-qtest_qmp_receive_success.patch [bz#1812399 bz#1866707]
  - kvm-device-plug-test-use-qtest_qmp-to-send-the-device_de.patch [bz#1812399 bz#1866707]
  - kvm-qtest-switch-users-back-to-qtest_qmp_receive.patch [bz#1812399 bz#1866707]
  - kvm-qtest-check-that-drives-are-really-appearing-and-dis.patch [bz#1812399 bz#1866707]
  - kvm-qemu-iotests-qtest-rewrite-test-067-as-a-qtest.patch [bz#1812399 bz#1866707]
  - kvm-qdev-add-check-if-address-free-callback-for-buses.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi_bus-switch-search-direction-in-scsi_device.patch [bz#1812399 bz#1866707]
  - kvm-device_core-use-drain_call_rcu-in-in-qmp_device_add.patch [bz#1812399 bz#1866707]
  - kvm-device-core-use-RCU-for-list-of-children-of-a-bus.patch [bz#1812399 bz#1866707]
  - kvm-scsi-switch-to-bus-check_address.patch [bz#1812399 bz#1866707]
  - kvm-device-core-use-atomic_set-on-.realized-property.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi-bus-scsi_device_find-don-t-return-unrealiz.patch [bz#1812399]
  - kvm-scsi-scsi_bus-Add-scsi_device_get.patch [bz#1812399 bz#1866707]
  - kvm-virtio-scsi-use-scsi_device_get.patch [bz#1812399 bz#1866707]
  - kvm-scsi-scsi_bus-fix-races-in-REPORT-LUNS.patch [bz#1812399 bz#1866707]
  - kvm-tests-migration-fix-memleak-in-wait_command-wait_com.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-fix-the-order-of-buffered-events.patch [bz#1812399 bz#1866707]
  - kvm-libqtest-fix-memory-leak-in-the-qtest_qmp_event_ref.patch [bz#1812399 bz#1866707]
  - kvm-iotests-add-filter_qmp_virtio_scsi-function.patch [bz#1812399 bz#1866707]
  - kvm-iotests-rewrite-iotest-240-in-python.patch [bz#1812399 bz#1866707]
  - Resolves: bz#1812399
    (Qemu crash when detach disk with cache="none" discard="ignore" io="native")
  - Resolves: bz#1866707
    (qemu-kvm is crashing with error "scsi_target_emulate_report_luns: Assertion `i == n + 8' failed")
  - Resolves: bz#1882719
    (qemu-ga service still active and can work after qemu-guest-agent been removed)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.1.0-16.el8
changelog:
  - kvm-redhat-introduces-disable_everything-macro-into-the-.patch [bz#1884611]
  - kvm-redhat-scripts-extract_build_cmd.py-Avoid-listing-em.patch [bz#1884611]
  - kvm-redhat-Removing-unecessary-configurations.patch [bz#1884611]
  - kvm-redhat-Fixing-rh-local-build.patch [bz#1884611]
  - kvm-redhat-allow-Makefile-rh-prep-builddep-to-fail.patch [bz#1884611]
  - kvm-redhat-adding-rh-rpm-target.patch [bz#1884611]
  - kvm-redhat-move-shareable-files-from-qemu-kvm-core-to-qe.patch [bz#1884611]
  - kvm-redhat-Add-qemu-kiwi-subpackage.patch [bz#1884611]
  - Resolves: bz#1884611
    (Build kata-specific version of qemu)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-2.el8
changelog:
  - kvm-redhat-Define-hw_compat_8_3.patch [bz#1893935]
  - kvm-redhat-Add-spapr_machine_rhel_default_class_options.patch [bz#1893935]
  - kvm-redhat-Define-pseries-rhel8.4.0-machine-type.patch [bz#1893935]
  - kvm-redhat-s390x-add-rhel-8.4.0-compat-machine.patch [bz#1836282]
  - Resolves: bz#1836282
    (New machine type for qemu-kvm on s390x in RHEL-AV)
  - Resolves: bz#1893935
    (New machine type on RHEL-AV 8.4 for ppc64le)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-3.el8
changelog:
  - kvm-block-nvme-Implement-fake-truncate-coroutine.patch [bz#1848834]
  - kvm-spec-find-system-python-via-meson.patch [bz#1899619]
  - kvm-build-system-use-b_staticpic-false.patch [bz#1899619]
  - kvm-spapr-Fix-buffer-overflow-in-spapr_numa_associativit.patch [bz#1908693]
  - kvm-usb-hcd-xhci-pci-Fixup-capabilities-ordering-again.patch [bz#1912846]
  - kvm-qga-commands-posix-Send-CCW-address-on-s390x-with-th.patch [bz#1755075]
  - kvm-AArch64-machine-types-cleanup.patch [bz#1895276]
  - kvm-hw-arm-virt-Add-8.4-Machine-type.patch [bz#1895276]
  - kvm-udev-kvm-check-remove-the-exceeded-subscription-limi.patch [bz#1914463]
  - kvm-memory-Rename-memory_region_notify_one-to-memory_reg.patch [bz#1845758]
  - kvm-memory-Add-IOMMUTLBEvent.patch [bz#1845758]
  - kvm-memory-Add-IOMMU_NOTIFIER_DEVIOTLB_UNMAP-IOMMUTLBNot.patch [bz#1845758]
  - kvm-intel_iommu-Skip-page-walking-on-device-iotlb-invali.patch [bz#1845758]
  - kvm-memory-Skip-bad-range-assertion-if-notifier-is-DEVIO.patch [bz#1845758]
  - kvm-RHEL-Switch-pvpanic-test-to-q35.patch [bz#1885555]
  - kvm-8.4-x86-machine-type.patch [bz#1885555]
  - kvm-memory-clamp-cached-translation-in-case-it-points-to.patch [bz#1904392]
  - Resolves: bz#1848834
    (Failed to create luks format image on NVMe device)
  - Resolves: bz#1899619
    (QEMU 5.2 is built with PIC objects instead of PIE)
  - Resolves: bz#1908693
    ([ppc64le]boot up a guest with 128 numa nodes ,qemu got coredump)
  - Resolves: bz#1912846
    (qemu-kvm: Failed to load xhci:parent_obj during migration)
  - Resolves: bz#1755075
    ([qemu-guest-agent] fsinfo doesn't return disk info on s390x)
  - Resolves: bz#1895276
    (Machine types update for aarch64 for QEMU 5.2.0)
  - Resolves: bz#1914463
    (Remove KVM guest count and limit info message)
  - Resolves: bz#1845758
    (qemu core dumped: qemu-kvm: /builddir/build/BUILD/qemu-4.2.0/memory.c:1928: memory_region_notify_one: Assertion `entry->iova >= notifier->start && entry_end <= notifier->end' failed.)
  - Resolves: bz#1885555
    (8.4 machine types for x86)
  - Resolves: bz#1904392
    (CVE-2020-27821 virt:8.4/qemu-kvm: QEMU: heap buffer overflow in msix_table_mmio_write() in hw/pci/msix.c [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-4.el8
changelog:
  - kvm-Drop-bogus-IPv6-messages.patch [bz#1918061]
  - Resolves: bz#1918061
    (CVE-2020-10756 virt:rhel/qemu-kvm: QEMU: slirp: networking out-of-bounds read information disclosure vulnerability [rhel-av-8])


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-5.el8
changelog:
  - kvm-spapr-Allow-memory-unplug-to-always-succeed.patch [bz#1914069]
  - kvm-spapr-Improve-handling-of-memory-unplug-with-old-gue.patch [bz#1914069]
  - kvm-x86-cpu-Add-AVX512_FP16-cpu-feature.patch [bz#1838738]
  - kvm-q35-Increase-max_cpus-to-710-on-pc-q35-rhel8-machine.patch [bz#1904268]
  - kvm-config-enable-VFIO_CCW.patch [bz#1922170]
  - Resolves: bz#1914069
    ([ppc64le] have this fix for rhel8.4 av (spapr: Allow memory unplug to always succeed))
  - Resolves: bz#1838738
    ([Intel 8.4 FEAT] qemu-kvm Sapphire Rapids (SPR) New Instructions (NIs) - Fast Train)
  - Resolves: bz#1904268
    ([RFE] [HPEMC] qemu-kvm: support up to 710 VCPUs)
  - Resolves: bz#1922170
    (Enable vfio-ccw in AV)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-6.el8
changelog:
  - kvm-scsi-fix-device-removal-race-vs-IO-restart-callback-.patch [bz#1854811]
  - kvm-tracetool-also-strip-l-and-ll-from-systemtap-format-.patch [bz#1907264]
  - kvm-redhat-moving-all-documentation-files-to-qemu-kvm-do.patch [bz#1881170 bz#1924766]
  - kvm-hw-arm-smmuv3-Fix-addr_mask-for-range-based-invalida.patch [bz#1834152]
  - kvm-redhat-makes-qemu-respect-system-s-crypto-profile.patch [bz#1902219]
  - kvm-vhost-Unbreak-SMMU-and-virtio-iommu-on-dev-iotlb-sup.patch [bz#1925028]
  - kvm-docs-set-CONFDIR-when-running-sphinx.patch [bz#1902537]
  - Resolves: bz#1854811
    (scsi-bus.c: use-after-free due to race between device unplug and I/O operation causes guest crash)
  - Resolves: bz#1907264
    (systemtap: invalid or missing conversion specifier at the trace event vhost_vdpa_set_log_base)
  - Resolves: bz#1881170
    (split documentation from the qemu-kvm-core package to its own subpackage)
  - Resolves: bz#1924766
    (split documentation from the qemu-kvm-core package to its own subpackage [av-8.4.0])
  - Resolves: bz#1834152
    ([aarch64] QEMU SMMUv3 device: Support range invalidation)
  - Resolves: bz#1902219
    (QEMU doesn't honour system crypto policies)
  - Resolves: bz#1925028
    (vsmmuv3/vhost and virtio-iommu/vhost regression)
  - Resolves: bz#1902537
    (The default fsfreeze-hook path from man page and qemu-ga --help command are different)


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-7.el8
changelog:
  - kvm-virtio-Add-corresponding-memory_listener_unregister-.patch [bz#1903521]
  - kvm-block-Honor-blk_set_aio_context-context-requirements.patch [bz#1918966 bz#1918968]
  - kvm-nbd-server-Quiesce-coroutines-on-context-switch.patch [bz#1918966 bz#1918968]
  - kvm-block-Avoid-processing-BDS-twice-in-bdrv_set_aio_con.patch [bz#1918966 bz#1918968]
  - kvm-storage-daemon-Call-bdrv_close_all-on-exit.patch [bz#1918966 bz#1918968]
  - kvm-block-move-blk_exp_close_all-to-qemu_cleanup.patch [bz#1918966 bz#1918968]
  - Resolves: bz#1903521
    (hot unplug vhost-user cause qemu crash: qemu-kvm: ../softmmu/memory.c:2818: do_address_space_destroy: Assertion `QTAILQ_EMPTY(&as->listeners)' failed.)
  - Resolves: bz#1918966
    ([incremental_backup] qemu aborts if guest reboot during backup when using virtio-blk: "aio_co_schedule: Co-routine was already scheduled in 'aio_co_schedule'")
  - Resolves: bz#1918968
    ([incremental_backup] qemu deadlock after poweroff in guest during backup in nbd_export_close_all())


author: Eduardo Lima (Etrunko) <elima@redhat.com> - 5.2.0-8.el8
changelog:
  - kvm-block-nbd-only-detach-existing-iochannel-from-aio_co.patch [bz#1887883]
  - kvm-block-nbd-only-enter-connection-coroutine-if-it-s-pr.patch [bz#1887883]
  - kvm-nbd-make-nbd_read-return-EIO-on-error.patch [bz#1887883]
  - kvm-virtio-move-use-disabled-flag-property-to-hw_compat_.patch [bz#1907255]
  - kvm-virtiofsd-extract-lo_do_open-from-lo_open.patch [bz#1920740]
  - kvm-virtiofsd-optionally-return-inode-pointer-from-lo_do.patch [bz#1920740]
  - kvm-virtiofsd-prevent-opening-of-special-files-CVE-2020-.patch [bz#1920740]
  - kvm-spapr-Adjust-firmware-path-of-PCI-devices.patch [bz#1920941]
  - kvm-pci-reject-too-large-ROMs.patch [bz#1917830]
  - kvm-pci-add-romsize-property.patch [bz#1917830]
  - kvm-redhat-Add-some-devices-for-exporting-upstream-machi.patch [bz#1917826]
  - kvm-vhost-Check-for-valid-vdev-in-vhost_backend_handle_i.patch [bz#1880299]
  - Resolves: bz#1887883
    (qemu blocks client progress with various NBD actions)
  - Resolves: bz#1907255
    (Migrate failed with vhost-vsock-pci from RHEL-AV 8.3.1 to RHEL-AV 8.2.1)
  - Resolves: bz#1920740
    (CVE-2020-35517 virt:8.4/qemu-kvm: QEMU: virtiofsd: potential privileged host device access from guest [rhel-av-8.4.0])
  - Resolves: bz#1920941
    ([ppc64le] [AV]--disk cdimage.iso,bus=usb fails to boot)
  - Resolves: bz#1917830
    (Add romsize property to qemu-kvm)
  - Resolves: bz#1917826
    (Add extra device support to qemu-kvm, but not to rhel machine types)
  - Resolves: bz#1880299
    (vhost-user mq connection fails to restart after kill host testpmd which acts as vhost-user client)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-9.el8
changelog:
  - kvm-docs-generate-qemu-storage-daemon-qmp-ref-7-man-page.patch [bz#1901323]
  - kvm-docs-add-qemu-storage-daemon-1-man-page.patch [bz#1901323]
  - kvm-docs-Add-qemu-storage-daemon-1-manpage-to-meson.buil.patch [bz#1901323]
  - kvm-qemu-storage-daemon-Enable-object-add.patch [bz#1901323]
  - kvm-spec-Package-qemu-storage-daemon.patch [bz#1901323]
  - kvm-default-configs-Enable-vhost-user-blk.patch [bz#1930033]
  - kvm-qemu-nbd-Use-SOMAXCONN-for-socket-listen-backlog.patch [bz#1925345]
  - kvm-pcie-don-t-set-link-state-active-if-the-slot-is-empt.patch [bz#1917654]
  - Resolves: bz#1901323
    (QSD (QEMU Storage Daemon): basic support - TechPreview)
  - Resolves: bz#1930033
    (enable vhost-user-blk device)
  - Resolves: bz#1925345
    (qemu-nbd needs larger backlog for Unix socket listen())
  - Resolves: bz#1917654
    ([failover vf migration][RHEL84 vm] After start a vm with a failover vf + a failover virtio net device, the failvoer vf do not exist in the vm)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-10.el8
changelog:
  - kvm-migration-dirty-bitmap-Use-struct-for-alias-map-inne.patch [bz#1930757]
  - kvm-migration-dirty-bitmap-Allow-control-of-bitmap-persi.patch [bz#1930757]
  - kvm-qemu-iotests-300-Add-test-case-for-modifying-persist.patch [bz#1930757]
  - kvm-failover-fix-indentantion.patch [bz#1819991]
  - kvm-failover-Use-always-atomics-for-primary_should_be_hi.patch [bz#1819991]
  - kvm-failover-primary-bus-is-only-used-once-and-where-it-.patch [bz#1819991]
  - kvm-failover-Remove-unused-parameter.patch [bz#1819991]
  - kvm-failover-Remove-external-partially_hotplugged-proper.patch [bz#1819991]
  - kvm-failover-qdev_device_add-returns-err-or-dev-set.patch [bz#1819991]
  - kvm-failover-Rename-bool-to-failover_primary_hidden.patch [bz#1819991]
  - kvm-failover-g_strcmp0-knows-how-to-handle-NULL.patch [bz#1819991]
  - kvm-failover-Remove-primary_device_opts.patch [bz#1819991]
  - kvm-failover-remove-standby_id-variable.patch [bz#1819991]
  - kvm-failover-Remove-primary_device_dict.patch [bz#1819991]
  - kvm-failover-Remove-memory-leak.patch [bz#1819991]
  - kvm-failover-simplify-virtio_net_find_primary.patch [bz#1819991]
  - kvm-failover-should_be_hidden-should-take-a-bool.patch [bz#1819991]
  - kvm-failover-Rename-function-to-hide_device.patch [bz#1819991]
  - kvm-failover-virtio_net_connect_failover_devices-does-no.patch [bz#1819991]
  - kvm-failover-Rename-to-failover_find_primary_device.patch [bz#1819991]
  - kvm-failover-simplify-qdev_device_add-failover-case.patch [bz#1819991]
  - kvm-failover-simplify-qdev_device_add.patch [bz#1819991]
  - kvm-failover-make-sure-that-id-always-exist.patch [bz#1819991]
  - kvm-failover-remove-failover_find_primary_device-error-p.patch [bz#1819991]
  - kvm-failover-split-failover_find_primary_device_id.patch [bz#1819991]
  - kvm-failover-We-don-t-need-to-cache-primary_device_id-an.patch [bz#1819991]
  - kvm-failover-Caller-of-this-two-functions-already-have-p.patch [bz#1819991]
  - kvm-failover-simplify-failover_unplug_primary.patch [bz#1819991]
  - kvm-failover-Remove-primary_dev-member.patch [bz#1819991]
  - kvm-virtio-net-add-missing-object_unref.patch [bz#1819991]
  - kvm-x86-cpu-Populate-SVM-CPUID-feature-bits.patch [bz#1926785]
  - kvm-i386-Add-the-support-for-AMD-EPYC-3rd-generation-pro.patch [bz#1926785]
  - Resolves: bz#1930757
    (Allow control of block-dirty-bitmap persistence via 'block-bitmap-mapping')
  - Resolves: bz#1819991
    (Hostdev type interface with net failover enabled exists in domain xml and doesn't reattach to host after hot-unplug)
  - Resolves: bz#1926785
    ([RFE] AMD Milan - Add KVM/support for EPYC-Milan CPU Model - Fast Train)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-11.el8
changelog:
  - kvm-qxl-set-qxl.ssd.dcl.con-on-secondary-devices.patch [bz#1932190]
  - kvm-qxl-also-notify-the-rendering-is-done-when-skipping-.patch [bz#1932190]
  - kvm-virtiofsd-Save-error-code-early-at-the-failure-calls.patch [bz#1935071]
  - kvm-virtiofs-drop-remapped-security.capability-xattr-as-.patch [bz#1935071]
  - Resolves: bz#1932190
    (Timeout when dump the screen from 2nd VGA)
  - Resolves: bz#1935071
    (CVE-2021-20263 virt:8.4/qemu-kvm: QEMU: virtiofsd: 'security.capabilities' is not dropped with xattrmap option [rhel-av-8])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-12.el8
changelog:
  - kvm-scsi-disk-move-scsi_handle_rw_error-earlier.patch [bz#1927530]
  - kvm-scsi-disk-do-not-complete-requests-early-for-rerror-.patch [bz#1927530]
  - kvm-scsi-introduce-scsi_sense_from_errno.patch [bz#1927530]
  - kvm-scsi-disk-pass-SCSI-status-to-scsi_handle_rw_error.patch [bz#1927530]
  - kvm-scsi-disk-pass-guest-recoverable-errors-through-even.patch [bz#1927530]
  - kvm-hw-intc-arm_gic-Fix-interrupt-ID-in-GICD_SGIR-regist.patch [bz#1936948]
  - Resolves: bz#1927530
    (RHEL8 Hypervisor - OVIRT  - Issues seen on a virtualization guest with direct passthrough LUNS  pausing when a host gets a Thin threshold warning)
  - Resolves: bz#1936948
    (CVE-2021-20221 virt:av/qemu-kvm: qemu: out-of-bound heap buffer access via an interrupt ID field [rhel-av-8.4.0])


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-13.el8
changelog:
  - kvm-i386-acpi-restore-device-paths-for-pre-5.1-vms.patch [bz#1934158]
  - Resolves: bz#1934158
    (Windows guest looses network connectivity when NIC was configured with static IP)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-14.el8
changelog:
  - kvm-vhost-user-blk-fix-blkcfg-num_queues-endianness.patch [bz#1937004]
  - kvm-block-export-fix-blk_size-double-byteswap.patch [bz#1937004]
  - kvm-block-export-use-VIRTIO_BLK_SECTOR_BITS.patch [bz#1937004]
  - kvm-block-export-fix-vhost-user-blk-export-sector-number.patch [bz#1937004]
  - kvm-block-export-port-virtio-blk-discard-write-zeroes-in.patch [bz#1937004]
  - kvm-block-export-port-virtio-blk-read-write-range-check.patch [bz#1937004]
  - kvm-spec-ui-spice-sub-package.patch [bz#1936373]
  - kvm-spec-ui-opengl-sub-package.patch [bz#1936373]
  - Resolves: bz#1937004
    (vhost-user-blk server endianness and input validation fixes)
  - Resolves: bz#1936373
    (move spice & opengl modules to rpm subpackages)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-15.el8_4
changelog:
  - kvm-block-Simplify-qmp_block_resize-error-paths.patch [bz#1903511]
  - kvm-block-Fix-locking-in-qmp_block_resize.patch [bz#1903511]
  - kvm-block-Fix-deadlock-in-bdrv_co_yield_to_drain.patch [bz#1903511]
  - Resolves: bz#1903511
    (no response on  QMP command 'block_resize')


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 5.2.0-16.el8
changelog:
  - kvm-virtio-pci-compat-page-aligned-ATS.patch [bz#1942362]
  - Resolves: bz#1942362
    (Live migration with iommu from rhel8.3.1 to rhel8.4 fails: qemu-kvm: get_pci_config_device: Bad config data)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-17.el8
changelog:
  - kvm-redhat-s390x-add-rhel-8.5.0-compat-machine.patch [bz#1951476]
  - kvm-redhat-add-missing-entries-in-hw_compat_rhel_8_4.patch [bz#1957834]
  - kvm-redhat-Define-pseries-rhel8.5.0-machine-type.patch [bz#1957834]
  - Resolves: bz#1951476
    ([s390x] RHEL AV 8.5 new machine type for s390x)
  - Resolves: bz#1957834
    ([ppc64le] RHEL AV 8.5 new machine type for ppc64le)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-18.el8
changelog:
  - kvm-virtio-net-failover-add-missing-remove_migration_sta.patch [bz#1953045]
  - kvm-hw-arm-virt-Add-8.5-machine-type.patch [bz#1957667]
  - kvm-hw-arm-virt-Disable-PL011-clock-migration-through-hw.patch [bz#1957667]
  - kvm-arm-virt-Register-highmem-and-gic-version-as-class-p.patch [bz#1957667]
  - kvm-virtio-blk-Fix-rollback-path-in-virtio_blk_data_plan.patch [bz#1927108]
  - kvm-virtio-blk-Configure-all-host-notifiers-in-a-single-.patch [bz#1927108]
  - kvm-virtio-scsi-Set-host-notifiers-and-callbacks-separat.patch [bz#1927108]
  - kvm-virtio-scsi-Configure-all-host-notifiers-in-a-single.patch [bz#1927108]
  - kvm-hw-arm-smmuv3-Another-range-invalidation-fix.patch [bz#1929720]
  - Resolves: bz#1953045
    (qemu-kvm NULL pointer de-reference  during migration at migrate_fd_connect ->...-> notifier_list_notify)
  - Resolves: bz#1957667
    ([aarch64] Add 8.5 machine type)
  - Resolves: bz#1927108
    (It's too slow to load scsi  disk when use 384 vcpus)
  - Resolves: bz#1929720
    ([aarch64] Handle vsmmuv3 IOTLB invalidation with non power of 2 size)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-19.el8
changelog:
  - kvm-pc-bios-s390-ccw-don-t-try-to-read-the-next-block-if.patch [bz#1965626]
  - kvm-redhat-Install-the-s390-netboot.img-that-we-ve-built.patch [bz#1966463]
  - kvm-sockets-update-SOCKET_ADDRESS_TYPE_FD-listen-2-backl.patch [bz#1967177]
  - kvm-target-i386-sev-add-support-to-query-the-attestation.patch [bz#1957022]
  - kvm-spapr-Don-t-hijack-current_machine-boot_order.patch [bz#1960119]
  - kvm-target-i386-Add-CPU-model-versions-supporting-xsaves.patch [bz#1942914]
  - kvm-spapr-Remove-stale-comment-about-power-saving-LPCR-b.patch [bz#1940731]
  - kvm-spapr-Set-LPCR-to-current-AIL-mode-when-starting-a-n.patch [bz#1940731]
  - Resolves: bz#1965626
    (RHEL8.2 - QEMU BIOS fails to read stage2 loader (kvm))
  - Resolves: bz#1966463
    (Rebuild the s390-netboot.img for downstream instead of shipping the upstream image)
  - Resolves: bz#1967177
    (QEMU 6.0.0 socket_get_fd() fails with the error "socket_get_fd: too many connections")
  - Resolves: bz#1957022
    (SEV: Add support to query the attestation report)
  - Resolves: bz#1960119
    ([regression]Failed to reset guest)
  - Resolves: bz#1942914
    ([Hyper-V][RHEL8.4]Nested Hyper-V on KVM: On Intel CPU L1 2016 can not start with cpu model Skylake-Server-noTSX-IBRS or Skylake-Client-noTSX-IBRS)
  - Resolves: bz#1940731
    ([ppc64le] Hotplug vcpu device hit call trace:[qemu output] KVM: unknown exit, hardware reason 7fff9ce87ed8)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-20.el8
changelog:
  - kvm-x86-Add-x86-rhel8.5-machine-types.patch [bz#1957838]
  - kvm-redhat-x86-Enable-kvm-asyncpf-int-by-default.patch [bz#1967603]
  - kvm-yank-Unregister-function-when-using-TLS-migration.patch [bz#1964326]
  - Resolves: bz#1957838
    (8.5 machine types for x86)
  - Resolves: bz#1967603
    (Enable interrupt based asynchronous page fault mechanism by default)
  - Resolves: bz#1964326
    (Qemu core dump when do tls migration via tcp protocol)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-21.el8
changelog:
  - kvm-block-backend-add-drained_poll.patch [bz#1960137]
  - kvm-nbd-server-Use-drained-block-ops-to-quiesce-the-serv.patch [bz#1960137]
  - kvm-disable-CONFIG_USB_STORAGE_BOT.patch [bz#1866133]
  - kvm-doc-Fix-some-mistakes-in-the-SEV-documentation.patch [bz#1954750]
  - kvm-docs-Add-SEV-ES-documentation-to-amd-memory-encrypti.patch [bz#1954750]
  - kvm-docs-interop-firmware.json-Add-SEV-ES-support.patch [bz#1954750]
  - Resolves: bz#1960137
    ([incremental backup] qemu-kvm hangs when Rebooting the VM during full backup)
  - Resolves: bz#1866133
    (Disable usb-bot device in QEMU (unsupported))
  - Resolves: bz#1954750
    (firmware scheme for sev-es)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-22.el8
changelog:
  - kvm-redhat-Expose-upstream-machines-pc-4.2-and-pc-2.11.patch [bz#1897923]
  - kvm-redhat-Enable-FDC-device-for-upstream-machines-too.patch [bz#1897923]
  - kvm-redhat-Add-hw_compat_4_2_extra-and-apply-to-upstream.patch [bz#1897923]
  - kvm-ppc-pef.c-initialize-cgs-ready-in-kvmppc_svm_init.patch [bz#1789757]
  - kvm-virtio-gpu-handle-partial-maps-properly.patch [bz#1932279]
  - kvm-redhat-Fix-unversioned-Obsoletes-warning.patch [bz#1950405 bz#1967330]
  - kvm-redhat-Move-qemu-kvm-docs-dependency-to-qemu-kvm.patch [bz#1950405 bz#1967330]
  - kvm-redhat-introducting-qemu-kvm-hw-usbredir.patch [bz#1950405 bz#1967330]
  - kvm-spapr-Fix-EEH-capability-issue-on-KVM-guest-for-PCI-.patch [bz#1976015]
  - Resolves: bz#1897923
    (support Live Migration from Ubuntu 18.04 i440fx to RHEL)
  - Resolves: bz#1789757
    ([IBM 8.5 FEAT] Add machine option to enable secure VM support)
  - Resolves: bz#1932279
    ([aarch64] qemu core dumped when using smmuv3 and iommu_platform enabling at virtio-gpu-pci)
  - Resolves: bz#1950405
    (review qemu-kvm-core dependencies)
  - Resolves: bz#1967330
    (Make qemu-kvm use versioned obsoletes for qemu-kvm-ma and qemu-kvm-rhev)
  - Resolves: bz#1976015
    (spapr: Fix EEH capability issue on KVM guest for PCI passthru)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-23.el8
changelog:
  - kvm-Add-mtod_check.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-limit-vendor-specific-area-to-input-packet-mem.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-bootp-check-bootp_input-buffer-size.patch [bz#1970823]
  - kvm-upd6-check-udp6_input-buffer-size.patch [bz#1970842]
  - kvm-tftp-check-tftp_input-buffer-size.patch [bz#1970850]
  - kvm-tftp-introduce-a-header-structure.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-udp-check-upd_input-buffer-size.patch [bz#1970858]
  - kvm-Fix-DHCP-broken-in-libslirp-v4.6.0.patch [bz#1970823 bz#1970842 bz#1970850 bz#1970858]
  - kvm-redhat-use-the-standard-vhost-user-JSON-path.patch [bz#1804196]
  - Resolves: bz#1970823
    (CVE-2021-3592 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp) [rhel-av-8])
  - Resolves: bz#1970842
    (CVE-2021-3593 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp6) [rhel-av-8])
  - Resolves: bz#1970850
    (CVE-2021-3595 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp) [rhel-av-8])
  - Resolves: bz#1970858
    (CVE-2021-3594 virt:av/qemu-kvm: QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp) [rhel-av-8])
  - Resolves: bz#1804196
    (inconsistent paths for interop json files)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-24.el8
changelog:
  - kvm-s390x-css-Introduce-an-ESW-struct.patch [bz#1968326]
  - kvm-s390x-css-Split-out-the-IRB-sense-data.patch [bz#1968326]
  - kvm-s390x-css-Refactor-IRB-construction.patch [bz#1968326]
  - kvm-s390x-css-Add-passthrough-IRB.patch [bz#1968326]
  - kvm-vhost-user-blk-Fail-gracefully-on-too-large-queue-si.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Make-sure-to-set-Error-on-realize-fai.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Don-t-reconnect-during-initialisation.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Improve-error-reporting-in-realize.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Get-more-feature-flags-from-vhost-dev.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-virtio-Fail-if-iommu_platform-is-requested-but-unsup.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-blk-Check-that-num-queues-is-supported-by.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - kvm-vhost-user-Fix-backends-without-multiqueue-support.patch [bz#1935014 bz#1935019 bz#1935020 bz#1935031]
  - Resolves: bz#1968326
    ([vfio_ccw] I/O error when checking format - dasdfmt requires --force in quick mode when passed through)
  - Resolves: bz#1935014
    (qemu crash when attach vhost-user-blk-pci with option queue-size=4096)
  - Resolves: bz#1935019
    (qemu guest failed boot when attach vhost-user-blk-pci with option iommu_platform=on)
  - Resolves: bz#1935020
    (qemu guest failed boot when attach vhost-user-blk-pci with option packed=on)
  - Resolves: bz#1935031
    (qemu guest failed boot when attach vhost-user-blk-pci with unmatched num-queues with qsd)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-25.el8
changelog:
  - kvm-s390x-cpumodel-add-3931-and-3932.patch [bz#1976171]
  - kvm-file-posix-fix-max_iov-for-dev-sg-devices.patch [bz#1943653]
  - kvm-scsi-generic-pass-max_segments-via-max_iov-field-in-.patch [bz#1943653]
  - kvm-osdep-provide-ROUND_DOWN-macro.patch [bz#1943653]
  - kvm-block-backend-align-max_transfer-to-request-alignmen.patch [bz#1943653]
  - kvm-block-add-max_hw_transfer-to-BlockLimits.patch [bz#1943653]
  - kvm-file-posix-try-BLKSECTGET-on-block-devices-too-do-no.patch [bz#1943653]
  - Resolves: bz#1976171
    ([IBM 8.5 FEAT] CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#1943653
    (RHV VM pauses due to 'qemu-kvm' getting EINVAL on i/o to a direct lun with scsi passthrough enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-26
changelog:
  - kvm-acpi-pc-revert-back-to-v5.2-PCI-slot-enumeration.patch [bz#1977798]
  - kvm-migration-failover-reset-partially_hotplugged.patch [bz#1787194]
  - kvm-hmp-Fix-loadvm-to-resume-the-VM-on-success-instead-o.patch [bz#1959676]
  - kvm-migration-Move-bitmap_mutex-out-of-migration_bitmap_.patch [bz#1959729]
  - kvm-i386-cpu-Expose-AVX_VNNI-instruction-to-guest.patch [bz#1924822]
  - kvm-ratelimit-protect-with-a-mutex.patch [bz#1838221]
  - kvm-Update-Linux-headers-to-5.13-rc4.patch [bz#1838221]
  - kvm-i386-Add-ratelimit-for-bus-locks-acquired-in-guest.patch [bz#1838221]
  - kvm-iothread-generalize-iothread_set_param-iothread_get_.patch [bz#1930286]
  - kvm-iothread-add-aio-max-batch-parameter.patch [bz#1930286]
  - kvm-linux-aio-limit-the-batch-size-using-aio-max-batch-p.patch [bz#1930286]
  - kvm-block-nvme-Fix-VFIO_MAP_DMA-failed-No-space-left-on-.patch [bz#1848881]
  - Resolves: bz#1977798
    (RHEL8.5 guest network interface name changed after upgrade to qemu-6.0)
  - Resolves: bz#1787194
    (After canceling the migration of a vm with VF which enables failover, using "migrate -d tcp:invalid uri" to re-migrating the vm will cause the VF in vm to be hot-unplug.)
  - Resolves: bz#1959676
    (guest status is paused after loadvm on rhel8.5.0)
  - Resolves: bz#1959729
    (SAP/3TB VM migration slowness [idle db])
  - Resolves: bz#1924822
    ([Intel 8.5 FEAT] qemu-kvm AVX2 VNNI - Fast Train)
  - Resolves: bz#1838221
    ([Intel 8.5 FEAT]  qemu-kvm Bus Lock VM Exit - Fast Train)
  - Resolves: bz#1930286
    (randread and randrw regression with virtio-blk multi-queue)
  - Resolves: bz#1848881
    (nvme:// block driver can exhaust IOMMU DMAs, hanging the VM, possible data loss)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.0.0-27
changelog:
  - kvm-migration-move-wait-unplug-loop-to-its-own-function.patch [bz#1976852]
  - kvm-migration-failover-continue-to-wait-card-unplug-on-e.patch [bz#1976852]
  - kvm-aarch64-Add-USB-storage-devices.patch [bz#1974579]
  - Resolves: bz#1976852
    ([failover vf migration]  The failover vf will be unregistered  if canceling the migration whose status is "wait-unplug")
  - Resolves: bz#1974579
    (It's not possible to start installation from a virtual USB device on aarch64)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-28.el8
changelog:
  - kvm-iotests-Improve-and-rename-test-291-to-qemu-img-bitm.patch [bz#1946084]
  - kvm-qemu-img-Fail-fast-on-convert-bitmaps-with-inconsist.patch [bz#1946084]
  - kvm-qemu-img-Add-skip-broken-bitmaps-for-convert-bitmaps.patch [bz#1946084]
  - kvm-audio-Never-send-migration-section.patch [bz#1991671]
  - Resolves: bz#1946084
    (qemu-img convert --bitmaps fail if a bitmap is inconsistent)
  - Resolves: bz#1991671
    (vmstate differs between -audiodev and QEMU_AUDIO_DRV when no sound frontends devs present.)


author: Danilo Cesar Lemes de Paula <ddepaula@redhat.com> - 6.0.0-29.el8
changelog:
  - kvm-file-posix-Cap-max_iov-at-IOV_MAX.patch [bz#1994494]
  - kvm-migration-Move-yank-outside-qemu_start_incoming_migr.patch [bz#1974366]
  - Resolves: bz#1994494
    (VM remains in paused state when trying to write on a resized disk resides on iscsi)
  - Resolves: bz#1974366
    (Fail to set migrate incoming for 2nd time after the first time failed)


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-2
changelog:
  - kvm-qxl-fix-pre-save-logic.patch [bz#2002907]
  - kvm-redhat-Define-hw_compat_rhel_8_5.patch [bz#1998949]
  - kvm-redhat-Update-pseries-rhel8.5.0.patch [bz#1998949]
  - kvm-redhat-Add-s390x-machine-type-compatibility-update-f.patch [bz#1998950]
  - Resolves: bz#2002907
    (Unexpectedly failed when managedsave the guest which has qxl video device)
  - Resolves: bz#1998949
    (Add machine type compatibility update for 6.1 rebase [ppc64le])
  - Resolves: bz#1998950
    (Add machine type compatibility update for 6.1 rebase [s390x])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-3
changelog:
  - kvm-virtio-net-fix-use-after-unmap-free-for-sg.patch [bz#1999221]
  - Resolves: bz#1999221
    (CVE-2021-3748 virt:rhel/qemu-kvm: QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-4
changelog:
  - kvm-spec-Remove-qemu-kiwi-build.patch [bz#2002694]
  - kvm-hw-arm-virt-Add-hw_compat_rhel_8_5-to-8.5-machine-ty.patch [bz#1998947]
  - Resolves: bz#2002694
    (remove qemu-kiwi rpm from qemu-kvm sources in rhel-8.6)
  - Resolves: bz#1998947
    (Add machine type compatibility update for 6.1 rebase [aarch64])


author: Jon Maloy <jmaloy@redhat.com> - 6.1.0-5
changelog:
  - kvm-e1000-fix-tx-re-entrancy-problem.patch [bz#1930092]
  - kvm-hw-scsi-scsi-disk-MODE_PAGE_ALLS-not-allowed-in-MODE.patch [bz#2020720]
  - Resolves: bz#1930092
    (CVE-2021-20257 virt:rhel/qemu-kvm: QEMU: net: e1000: infinite loop while processing transmit descriptors [rhel-8.5.0])
  - Resolves: bz#2020720
    (CVE-2021-3930 virt:rhel/qemu-kvm: QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-2
changelog:
  - kvm-redhat-Add-rhel8.6.0-machine-type-for-s390x.patch [bz#2005325]
  - kvm-redhat-Define-pseries-rhel8.6.0-machine-type.patch [bz#2031041]
  - Resolves: bz#2005325
    (Fix CPU Model for new IBM Z Hardware - qemu part)
  - Resolves: bz#2031041
    (Add rhel-8.6.0 machine types for RHEL 8.6 [ppc64le])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-4
changelog:
  - kvm-hw-arm-virt-Register-iommu-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Register-its-as-a-class-property.patch [bz#2031039]
  - kvm-hw-arm-virt-Rename-default_bus_bypass_iommu.patch [bz#2031039]
  - kvm-hw-arm-virt-Add-8.6-machine-type.patch [bz#2031039]
  - kvm-hw-arm-virt-Check-no_tcg_its-and-minor-style-changes.patch [bz#2031039]
  - kvm-rhel-machine-types-x86-set-prefer_sockets.patch [bz#2029582]
  - Resolves: bz#2031039
    (Add rhel-8.6.0 machine types for RHEL 8.6 [aarch64])
  - Resolves: bz#2029582
    ([8.6] machine types: 6.2: Fix prefer_sockets)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-5
changelog:
  - kvm-acpi-validate-hotplug-selector-on-access.patch [bz#2036580]
  - kvm-x86-Add-q35-RHEL-8.6.0-machine-type.patch [bz#2031035]
  - Resolves: bz#2036580
    (CVE-2021-4158 virt:rhel/qemu-kvm: QEMU: NULL pointer dereference in pci_write() in hw/acpi/pcihp.c [rhel-8])
  - Resolves: bz#2031035
    (Add rhel-8.6.0 machine types for RHEL 8.6 [x86])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-6
changelog:
  - kvm-virtiofsd-Drop-membership-of-all-supplementary-group.patch [bz#2046198]
  - kvm-softmmu-fix-device-deletion-events-with-device-JSON-.patch [bz#2033279]
  - kvm-block-backend-prevent-dangling-BDS-pointers-across-a.patch [bz#2021778 bz#2036178]
  - kvm-iotests-stream-error-on-reset-New-test.patch [bz#2021778 bz#2036178]
  - kvm-block-rbd-fix-handling-of-holes-in-.bdrv_co_block_st.patch [bz#2037135]
  - kvm-block-rbd-workaround-for-ceph-issue-53784.patch [bz#2037135]
  - Resolves: bz#2046198
    (CVE-2022-0358 virt:av/qemu-kvm: QEMU: virtiofsd: potential privilege escalation via CVE-2018-13405 [rhel-8.6])
  - Resolves: bz#2033279
    ([wrb][qemu-kvm 6.2] The hot-unplugged device can not be hot-plugged back)
  - Resolves: bz#2021778
    (Qemu core dump when do full backup during system reset)
  - Resolves: bz#2036178
    (Qemu core dumped when do block-stream to a snapshot node on non-enough space storage)
  - Resolves: bz#2037135
    (Booting from Local Snapshot Core Dumped Whose Backing File Is Based on RBD)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-7
changelog:
  - kvm-numa-Enable-numa-for-SGX-EPC-sections.patch [bz#1518984]
  - kvm-numa-Support-SGX-numa-in-the-monitor-and-Libvirt-int.patch [bz#1518984]
  - kvm-doc-Add-the-SGX-numa-description.patch [bz#1518984]
  - kvm-Enable-SGX-RH-Only.patch [bz#1518984]
  - kvm-qapi-Cleanup-SGX-related-comments-and-restore-sectio.patch [bz#1518984]
  - kvm-block-io-Update-BSC-only-if-want_zero-is-true.patch [bz#2041480]
  - kvm-iotests-block-status-cache-New-test.patch [bz#2041480]
  - Resolves: bz#1518984
    ([Intel 8.6 Feat] qemu-kvm: SGX 1.5 (SGX1 + Flexible Launch Control) support)
  - Resolves: bz#2041480
    ([incremental_backup] Inconsistent block status reply in qemu-nbd)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-8
changelog:
  - kvm-block-nbd-Delete-reconnect-delay-timer-when-done.patch [bz#2035185]
  - kvm-block-nbd-Assert-there-are-no-timers-when-closed.patch [bz#2035185]
  - kvm-iotests.py-Add-QemuStorageDaemon-class.patch [bz#2035185]
  - kvm-iotests-281-Test-lingering-timers.patch [bz#2035185]
  - kvm-block-nbd-Move-s-ioc-on-AioContext-change.patch [bz#2035185]
  - kvm-iotests-281-Let-NBD-connection-yield-in-iothread.patch [bz#2035185]
  - Resolves: bz#2035185
    (Qemu core dump when start guest with nbd node or do block jobs to nbd node)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-9
changelog:
  - kvm-Revert-redhat-Add-hw_compat_4_2_extra-and-apply-to-u.patch [bz#2062613]
  - kvm-Revert-redhat-Enable-FDC-device-for-upstream-machine.patch [bz#2062613]
  - kvm-Revert-redhat-Expose-upstream-machines-pc-4.2-and-pc.patch [bz#2062613]
  - kvm-hw-virtio-vdpa-Fix-leak-of-host-notifier-memory-regi.patch [bz#2060843]
  - kvm-pci-expose-TYPE_XIO3130_DOWNSTREAM-name.patch [bz#2062610]
  - kvm-acpi-pcihp-pcie-set-power-on-cap-on-parent-slot.patch [bz#2062610]
  - kvm-vmxcap-Add-5-level-EPT-bit.patch [bz#2065207]
  - kvm-i386-Add-Icelake-Server-v6-CPU-model-with-5-level-EP.patch [bz#2065207]
  - kvm-acpi-fix-QEMU-crash-when-started-with-SLIC-table.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-expected-blobs-before-changing-.patch [bz#2062611]
  - kvm-tests-acpi-add-SLIC-table-test.patch [bz#2062611]
  - kvm-tests-acpi-SLIC-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-manually-pad-OEM_ID-OEM_TABLE_ID-for-test.patch [bz#2062611]
  - kvm-tests-acpi-whitelist-nvdimm-s-SSDT-and-FACP.slic-exp.patch [bz#2062611]
  - kvm-acpi-fix-OEM-ID-OEM-Table-ID-padding.patch [bz#2062611]
  - kvm-tests-acpi-update-expected-blobs.patch [bz#2062611]
  - kvm-tests-acpi-test-short-OEM_ID-OEM_TABLE_ID-values-in-.patch [bz#2062611]
  - kvm-rhel-workaround-for-lack-of-binary-patches-in-SRPM.patch [bz#2062611]
  - Resolves: bz#2062613
    (Revert IBM-specific Ubuntu-compatibility machine type for 8.6-AV GA [rhel-8.7.0])
  - Resolves: bz#2060843
    ([virtual network][vDPA] qemu crash after hot unplug vdpa device [rhel-8.7.0])
  - Resolves: bz#2062610
    (Do operation to disk will hang in the guest of target host after hotplugging and migrating [rhel-8.7.0])
  - Resolves: bz#2065207
    (Win11 (q35+edk2) guest broke after install wsl2 through 'wsl --install -d Ubuntu-20.04' [rhel-8.7.0])
  - Resolves: bz#2062611
    (Guest can not start with SLIC acpi table [rhel-8.7.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-10
changelog:
  - kvm-RHEL-disable-seqpacket-for-vhost-vsock-device-in-rhe.patch [bz#2068202]
  - kvm-block-Lock-AioContext-for-drain_end-in-blockdev-reop.patch [bz#2067118]
  - kvm-iotests-Test-blockdev-reopen-with-iothreads-and-thro.patch [bz#2067118]
  - kvm-s390x-css-fix-PMCW-invalid-mask.patch [bz#2071070]
  - kvm-Set-permission-on-installing-files.patch [bz#2072377]
  - Resolves: bz#2068202
    (RHEL 9.0 guest with vsock device migration failed from RHEL 9.0 > RHEL 8.6 [rhel-8.7.0])
  - Resolves: bz#2067118
    (qemu crash after execute blockdev-reopen with  iothread)
  - Resolves: bz#2071070
    (s390x/css: fix PMCW invalid mask)
  - Resolves: bz#2072377
    (Fix build warnings that occur when installing the keymap files)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-11
changelog:
  - kvm-hw-intc-arm_gicv3-Check-for-MEMTX_OK-instead-of-MEMT.patch [bz#1999236]
  - kvm-softmmu-physmem-Simplify-flatview_write-and-address_.patch [bz#1999236]
  - kvm-softmmu-physmem-Introduce-MemTxAttrs-memory-field-an.patch [bz#1999236]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-12
changelog:
  - kvm-display-qxl-render-fix-race-condition-in-qxl_cursor-.patch [bz#2040738]
  - kvm-vhost-vsock-detach-the-virqueue-element-in-case-of-e.patch [bz#2063262]
  - Resolves: bz#2040738
    (CVE-2021-4207 virt:rhel/qemu-kvm: QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow [rhel-8])
  - Resolves: bz#2063262
    (CVE-2022-26354 virt:rhel/qemu-kvm: QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-13
changelog:
  - kvm-s390x-ipl-support-extended-kernel-command-line-size.patch [bz#2043830]
  - kvm-virtio-net-fix-map-leaking-on-error-during-receive.patch [bz#2063206]
  - kvm-qcow2-Improve-refcount-structure-rebuilding.patch [bz#1519071]
  - kvm-iotests-108-Test-new-refcount-rebuild-algorithm.patch [bz#1519071]
  - kvm-qcow2-Add-errp-to-rebuild_refcount_structure.patch [bz#1519071]
  - kvm-iotests-108-Fix-when-missing-user_allow_other.patch [bz#1519071]
  - Resolves: bz#2043830
    ([IBM 8.7 FEAT] KVM: Allow long kernel command lines for QEMU)
  - Resolves: bz#2063206
    (CVE-2022-26353 virt:rhel/qemu-kvm: QEMU: virtio-net: map leaking on error during receive [rhel-8])
  - Resolves: bz#1519071
    (Fail to rebuild the reference count tables of qcow2 image on host block devices (e.g. LVs))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-14
changelog:
  - kvm-Revert-redhat-Add-some-devices-for-exporting-upstrea.patch [bz#2065043]
  - kvm-target-i386-properly-reset-TSC-on-reset.patch [bz#2070417]
  - kvm-ui-cursor-fix-integer-overflow-in-cursor_alloc-CVE-2.patch [bz#2040734]
  - Resolves: bz#2065043
    (Remove upstream-only devices from the qemu-kvm binary)
  - Resolves: bz#2070417
    (Windows guest hangs after updating and restarting from the guest OS [rhel-8.7.0])
  - Resolves: bz#2040734
    (CVE-2021-4206 virt:rhel/qemu-kvm: QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-15
changelog:
  - kvm-virtio-gpu-do-not-byteswap-padding.patch [bz#1916415]
  - kvm-linux-headers-update-to-5.16-rc1.patch [bz#1916415]
  - kvm-linux-headers-Update-headers-to-v5.17-rc1.patch [bz#1916415]
  - kvm-linux-headers-include-missing-changes-from-5.17.patch [bz#1916415]
  - kvm-x86-Fix-the-64-byte-boundary-enumeration-for-extende.patch [bz#1916415]
  - kvm-x86-Add-AMX-XTILECFG-and-XTILEDATA-components.patch [bz#1916415]
  - kvm-x86-Grant-AMX-permission-for-guest.patch [bz#1916415]
  - kvm-x86-Add-XFD-faulting-bit-for-state-components.patch [bz#1916415]
  - kvm-x86-Add-AMX-CPUIDs-enumeration.patch [bz#1916415]
  - kvm-x86-add-support-for-KVM_CAP_XSAVE2-and-AMX-state-mig.patch [bz#1916415]
  - kvm-x86-Support-XFD-and-AMX-xsave-data-migration.patch [bz#1916415]
  - kvm-target-i386-kvm-do-not-access-uninitialized-variable.patch [bz#1916415]
  - kvm-KVM-x86-workaround-invalid-CPUID-0xD-9-info-on-some-.patch [bz#1916415]
  - kvm-virtio-net-setup-vhost_dev-and-notifiers-for-cvq-onl.patch [bz#2069946]
  - kvm-virtio-net-align-ctrl_vq-index-for-non-mq-guest-for-.patch [bz#2069946]
  - kvm-vhost-vdpa-fix-improper-cleanup-in-net_init_vhost_vd.patch [bz#2069946]
  - kvm-vhost-net-fix-improper-cleanup-in-vhost_net_start.patch [bz#2069946]
  - kvm-vhost-vdpa-backend-feature-should-set-only-once.patch [bz#2069946]
  - kvm-vhost-vdpa-change-name-and-polarity-for-vhost_vdpa_o.patch [bz#2069946]
  - kvm-virtio-net-don-t-handle-mq-request-in-userspace-hand.patch [bz#2069946]
  - kvm-ide-Increment-BB-in-flight-counter-for-TRIM-BH.patch [bz#2029980]
  - kvm-block-Make-bdrv_refresh_limits-non-recursive.patch [bz#2072932]
  - kvm-iotests-Allow-using-QMP-with-the-QSD.patch [bz#2072932]
  - kvm-iotests-graph-changes-while-io-New-test.patch [bz#2072932]
  - Resolves: bz#1916415
    ([Intel 8.7 FEAT] qemu-kvm Sapphire Rapids (SPR) AMX Instructions)
  - Resolves: bz#2069946
    (PXE boot crash qemu when using multiqueue vDPA)
  - Resolves: bz#2029980
    (Failed assertion in IDE emulation with Ceph backend)
  - Resolves: bz#2072932
    (Qemu coredump when refreshing block limits on an actively used iothread block device [rhel.8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-16
changelog:
  - kvm-virtiofsd-Fix-breakage-due-to-fuse_init_in-size-chan.patch [bz#2097209]
  - kvm-hw-block-fdc-Prevent-end-of-track-overrun-CVE-2021-3.patch [bz#1951521]
  - kvm-tests-qtest-fdc-test-Add-a-regression-test-for-CVE-2.patch [bz#1951521]
  - Resolves: bz#2097209
    ([virtiofs] mount virtiofs failed: SELinux: (dev virtiofs, type virtiofs) getxattr errno 111)
  - Resolves: bz#1951521
    (CVE-2021-3507 virt:rhel/qemu-kvm: QEMU: fdc: heap buffer overflow in DMA read data transfers [rhel-8])


author: Camilla Conte <cconte@redhat.com> - 6.2.0-17
changelog:
  - kvm-migration-Never-call-twice-qemu_target_page_size.patch [bz#2072049]
  - kvm-multifd-Rename-used-field-to-num.patch [bz#2072049]
  - kvm-multifd-Add-missing-documentation.patch [bz#2072049]
  - kvm-multifd-The-variable-is-only-used-inside-the-loop.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_prepare-meth.patch [bz#2072049]
  - kvm-multifd-remove-used-parameter-from-send_recv_pages-m.patch [bz#2072049]
  - kvm-multifd-Fill-offset-and-block-for-reception.patch [bz#2072049]
  - kvm-multifd-Make-zstd-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-multifd-Make-zlib-compression-method-not-use-iovs.patch [bz#2072049]
  - kvm-migration-All-this-fields-are-unsigned.patch [bz#2072049]
  - kvm-multifd-Move-iov-from-pages-to-params.patch [bz#2072049]
  - kvm-multifd-Make-zlib-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Make-zstd-use-iov-s.patch [bz#2072049]
  - kvm-multifd-Remove-send_write-method.patch [bz#2072049]
  - kvm-multifd-Use-a-single-writev-on-the-send-side.patch [bz#2072049]
  - kvm-multifd-Use-normal-pages-array-on-the-send-side.patch [bz#2072049]
  - kvm-QIOChannel-Add-flags-on-io_writev-and-introduce-io_f.patch [bz#2072049]
  - kvm-QIOChannelSocket-Implement-io_writev-zero-copy-flag-.patch [bz#2072049]
  - kvm-migration-Add-zero-copy-send-parameter-for-QMP-HMP-f.patch [bz#2072049]
  - kvm-migration-Add-migrate_use_tls-helper.patch [bz#2072049]
  - kvm-multifd-multifd_send_sync_main-now-returns-negative-.patch [bz#2072049]
  - kvm-multifd-Send-header-packet-without-flags-if-zero-cop.patch [bz#2072049]
  - kvm-multifd-Implement-zero-copy-write-in-multifd-migrati.patch [bz#2072049]
  - kvm-QIOChannelSocket-Introduce-assert-and-reduce-ifdefs-.patch [bz#2072049]
  - kvm-QIOChannelSocket-Fix-zero-copy-send-so-socket-flush-.patch [bz#2072049]
  - kvm-migration-Change-zero_copy_send-from-migration-param.patch [bz#2072049]
  - kvm-migration-Add-migration_incoming_transport_cleanup.patch [bz#2097652]
  - kvm-migration-Allow-migrate-recover-to-run-multiple-time.patch [bz#2097652]
  - kvm-pc-bios-s390-ccw-virtio-Introduce-a-macro-for-the-DA.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-bootmap-Improve-the-guessing-logic-.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Simplify-fix-virtio_i.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Remove-virtio_assume_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Set-missing-status-bits-whil.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Read-device-config-after-fea.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-Beautify-the-code-for-readin.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-Split-virtio-scsi-code-from-virtio_.patch [bz#2098076]
  - kvm-pc-bios-s390-ccw-virtio-blkdev-Request-the-right-fea.patch [bz#2098076]
  - Resolves: bz#2072049
    (Pull  MSG_ZEROCOPY on QEMU Live Migration Patches into RHEL 8)
  - Resolves: bz#2097652
    (The migration port is not released if use it again for recovering postcopy migration)
  - Resolves: bz#2098076
    (virtio-blk: Can't boot fresh installation from used virtio-blk dasd disk under certain conditions)


author: Camilla Conte <cconte@redhat.com> - 6.2.0-18
changelog:
  - kvm-linux-aio-fix-unbalanced-plugged-counter-in-laio_io_.patch [bz#2105410]
  - kvm-linux-aio-explain-why-max-batch-is-checked-in-laio_i.patch [bz#2105410]
  - Resolves: bz#2105410
    (Stalled IO Operations in VM)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-19
changelog:
  - kvm-migration-Introduce-ram_transferred_add.patch [bz#2110203]
  - kvm-migration-Tally-pre-copy-downtime-and-post-copy-byte.patch [bz#2110203]
  - kvm-QIOChannelSocket-Fix-zero-copy-flush-returning-code-.patch [bz#2110203]
  - kvm-Add-dirty-sync-missed-zero-copy-migration-stat.patch [bz#2110203]
  - kvm-migration-multifd-Report-to-user-when-zerocopy-not-w.patch [bz#2110203]
  - kvm-migration-Avoid-false-positive-on-non-supported-scen.patch [bz#2110203]
  - kvm-migration-add-remaining-params-has_-true-in-migratio.patch [bz#2110203]
  - kvm-QIOChannelSocket-Add-support-for-MSG_ZEROCOPY-IPV6.patch [bz#2110203]
  - kvm-pc-bios-s390-ccw-Fix-booting-with-logical-block-size.patch [bz#2112296]
  - Resolves: bz#2110203
    (zerocopy capability can be enabled when set migrate capabilities with multifd and compress/xbzrle together)
  - Resolves: bz#2112296
    (virtio-blk: Can't boot fresh installation from used 512 cluster_size image under certain conditions)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-20
changelog:
  - kvm-scsi-generic-Fix-emulated-block-limits-VPD-page.patch [bz#2120279]
  - Resolves: bz#2120279
    (Wrong max_sectors_kb and Maximum transfer length on the pass-through device [rhel-8.7])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-21
changelog:
  - kvm-backends-hostmem-Fix-support-of-memory-backend-memfd.patch [bz#2117149]
  - kvm-i386-reset-KVM-nested-state-upon-CPU-reset.patch [bz#2125271]
  - kvm-i386-do-kvm_put_msr_feature_control-first-thing-when.patch [bz#2125271]
  - Resolves: bz#2117149
    (Can't run when memory backing with hugepages and backend type memfd)
  - Resolves: bz#2125271
    ([RHEL8.7] Guests in VMX root operation fail to reboot with QEMU's 'system_reset' command [rhel-8.8.0])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-22
changelog:
  - kvm-redhat-Update-linux-headers-linux-kvm.h-to-v5.18-rc6.patch [bz#2124757]
  - kvm-target-s390x-kvm-Honor-storage-keys-during-emulation.patch [bz#2124757]
  - kvm-virtiofsd-use-g_date_time_get_microsecond-to-get-sub.patch [bz#2018885]
  - Resolves: bz#2124757
    (RHEL8: skey test in kvm_unit_test got failed)
  - Resolves: bz#2018885
    ([virtiofs] virtiofsd debug log's timestamp is NULL)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-23
changelog:
  - kvm-virtio-fix-the-condition-for-iommu_platform-not-supp.patch [bz#2116302]
  - kvm-virtio-fix-feature-negotiation-for-ACCESS_PLATFORM.patch [bz#2116302]
  - Resolves: bz#2116302
    (RHEL8.6 - virtiofs will not mount fs on secure execution guest)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-24
changelog:
  - kvm-s390x-pci-use-a-reserved-ID-for-the-default-PCI-grou.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-use-hard-coded-dma-range-in-reg_ioat.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-use-the-passthrough-measurement-update-int.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-supported-DT-information-to-clp-respon.patch [bz#1664378 bz#2043909]
  - kvm-Update-linux-headers-to-v6.0-rc4.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-add-routine-to-get-host-function-handle-fr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-for-load-store-interpretation.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-don-t-fence-interpreted-devices-without-MS.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-enable-adapter-event-notification-for-inte.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-let-intercept-devices-have-separate-PCI-gr.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pci-reflect-proper-maxstbl-for-groups-of-inter.patch [bz#1664378 bz#2043909]
  - kvm-s390x-s390-virtio-ccw-Switch-off-zPCI-enhancements-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-ERRP_GUARD.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-sh_info-variable.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-shdr_num-to-decrease-complexity.patch [bz#1664378 bz#2043909]
  - kvm-dump-Remove-the-section-if-when-calculating-the-memo.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-more-offset-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Introduce-dump_is_64bit-helper-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-phdr-note-writes.patch [bz#1664378 bz#2043909]
  - kvm-dump-Cleanup-dump_begin-write-functions.patch [bz#1664378 bz#2043909]
  - kvm-dump-Consolidate-elf-note-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Replace-opaque-DumpState-pointer-with-a-typed-o.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf_loads-to-write_elf_phdr_loads.patch [bz#1664378 bz#2043909]
  - kvm-dump-Refactor-dump_iterate-and-introduce-dump_filter.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-get_start_block.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-filter-area-variables.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rework-dump_calculate_size-function.patch [bz#1664378 bz#2043909]
  - kvm-dump-Split-elf-header-functions-into-prepare-and-wri.patch [bz#1664378 bz#2043909]
  - kvm-dump-Rename-write_elf-_phdr_note-to-prepare_elf-_phd.patch [bz#1664378 bz#2043909]
  - kvm-dump-simplify-a-bit-kdump-get_next_page.patch [bz#1664378 bz#2043909]
  - kvm-dump-fix-kdump-to-work-over-non-aligned-blocks.patch [bz#1664378 bz#2043909]
  - kvm-dump-Use-a-buffer-for-ELF-section-data-and-headers.patch [bz#1664378 bz#2043909]
  - kvm-dump-Write-ELF-section-headers-right-after-ELF-heade.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reorder-struct-DumpState.patch [bz#1664378 bz#2043909]
  - kvm-dump-Reintroduce-memory_offset-and-section_offset.patch [bz#1664378 bz#2043909]
  - kvm-dump-Add-architecture-section-and-section-string-tab.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-protected-dump-cap.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Introduce-PV-query-interface.patch [bz#1664378 bz#2043909]
  - kvm-include-elf.h-add-s390x-note-types.patch [bz#1664378 bz#2043909]
  - kvm-s390x-Add-KVM-PV-dump-interface.patch [bz#1664378 bz#2043909]
  - kvm-s390x-pv-Add-dump-support.patch [bz#1664378 bz#2043909]
  - kvm-ui-vnc-clipboard-fix-integer-underflow-in-vnc_client.patch [bz#2129760]
  - Resolves: bz#1664378
    ([IBM 8.8 FEAT] Enhanced Interpretation for PCI Functions (kvm) - qemu part)
  - Resolves: bz#2043909
    ([IBM 8.8 FEAT] KVM: Secure Execution guest dump encryption with customer keys - qemu part)
  - Resolves: bz#2129760
    (CVE-2022-3165 virt:rhel/qemu-kvm: QEMU: VNC: integer underflow in vnc_client_cut_text_ext leads to CPU exhaustion [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-25
changelog:
  - kvm-hw-acpi-Add-ospm_status-hook-implementation-for-acpi.patch [bz#2132609]
  - kvm-target-arm-kvm-Retry-KVM_CREATE_VM-call-if-it-fails-.patch [bz#2132609]
  - Resolves: bz#2132609
    (qemu-kvm: backport some aarch64 fixes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-26
changelog:
  - kvm-docs-system-s390x-Document-the-loadparm-machine-prop.patch [bz#2128225]
  - kvm-s390x-Register-TYPE_S390_CCW_MACHINE-properties-as-c.patch [bz#2128225]
  - kvm-ui-vnc.c-Fixed-a-deadlock-bug.patch [bz#2141896]
  - Resolves: bz#2128225
    ([s390x] [RHEL8][s390x-ccw bios] lacking document about parameter loadparm in qemu)
  - Resolves: bz#2141896
    (VMs hung on vnc_clipboard_send)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-27
changelog:
  - kvm-hw-display-qxl-Have-qxl_log_command-Return-early-if-.patch [bz#2148545]
  - kvm-hw-display-qxl-Document-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Pass-requested-buffer-size-to-qxl_phy.patch [bz#2148545]
  - kvm-hw-display-qxl-Avoid-buffer-overrun-in-qxl_phys2virt.patch [bz#2148545]
  - kvm-hw-display-qxl-Assert-memory-slot-fits-in-preallocat.patch [bz#2148545]
  - Resolves: bz#2148545
    (CVE-2022-4144 virt:rhel/qemu-kvm: QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-28
changelog:
  - kvm-s390x-tod-kvm-don-t-save-restore-the-TOD-in-PV-guest.patch [bz#2155448]
  - Resolves: bz#2155448
    (RHEL8.8 - KVM: s390: pv: don't allow userspace to set the clock under PV - QEMU part)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-29
changelog:
  - kvm-block-mirror-Do-not-wait-for-active-writes.patch [bz#2125119]
  - kvm-block-mirror-Drop-mirror_wait_for_any_operation.patch [bz#2125119]
  - kvm-block-mirror-Fix-NULL-s-job-in-active-writes.patch [bz#2125119]
  - kvm-accel-introduce-accelerator-blocker-API.patch [bz#2161188]
  - kvm-KVM-keep-track-of-running-ioctls.patch [bz#2161188]
  - kvm-kvm-Atomic-memslot-updates.patch [bz#2161188]
  - kvm-migration-Read-state-once.patch [bz#2074205]
  - kvm-s390x-pci-RPCIT-second-pass-when-mappings-exhausted.patch [bz#2163713]
  - kvm-s390x-pci-coalesce-unmap-operations.patch [bz#2163713]
  - kvm-s390x-pci-shrink-DMA-aperture-to-be-bound-by-vfio-DM.patch [bz#2163713]
  - kvm-s390x-pci-reset-ISM-passthrough-devices-on-shutdown-.patch [bz#2163713]
  - Resolves: bz#2125119
    (Mirror job with "copy-mode":"write-blocking" that used for storage migration can't converge under heavy I/O)
  - Resolves: bz#2161188
    (SVM: non atomic memslot updates cause boot failure with seabios and cpu-pm=on)
  - Resolves: bz#2074205
    (while live-migrating many instances concurrently, libvirt sometimes return internal error: migration was active, but no RAM info was set)
  - Resolves: bz#2163713
    ([s390x] VM fails to start with ISM passed through)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-30
changelog:
  - kvm-qcow2-Fix-theoretical-corruption-in-store_bitmap-err.patch [bz#2147617]
  - kvm-qemu-img-commit-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-img-bitmap-Report-errors-while-closing-the-imag.patch [bz#2147617]
  - kvm-qemu-iotests-Test-qemu-img-bitmap-commit-exit-code-o.patch [bz#2147617]
  - Resolves: bz#2147617
    (qemu-img finishes successfully while having errors in commit or bitmaps operations)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-31
changelog:
  - kvm-io-Add-support-for-MSG_PEEK-for-socket-channel.patch [bz#2137740]
  - kvm-migration-check-magic-value-for-deciding-the-mapping.patch [bz#2137740]
  - kvm-target-s390x-arch_dump-Fix-memory-corruption-in-s390.patch [bz#2168187]
  - Resolves: bz#2137740
    (Multifd migration fails under a weak network/socket ordering race)
  - Resolves: bz#2168187
    ([s390x] qemu-kvm coredumps when SE crashes)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-32.el8_8
changelog:
  - kvm-aio_wait_kick-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-qatomic-add-smp_mb__before-after_rmw.patch [bz#2168472]
  - kvm-qemu-thread-posix-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-qemu-thread-win32-cleanup-fix-document-QemuEvent.patch [bz#2168472]
  - kvm-edu-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-aio-wait-switch-to-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-qemu-coroutine-lock-add-smp_mb__after_rmw.patch [bz#2168472]
  - kvm-physmem-add-missing-memory-barrier.patch [bz#2168472]
  - kvm-async-update-documentation-of-the-memory-barriers.patch [bz#2168472]
  - kvm-async-clarify-usage-of-barriers-in-the-polling-case.patch [bz#2168472]
  - kvm-scsi-protect-req-aiocb-with-AioContext-lock.patch [bz#2090990]
  - kvm-dma-helpers-prevent-dma_blk_cb-vs-dma_aio_cancel-rac.patch [bz#2090990]
  - kvm-virtio-scsi-reset-SCSI-devices-from-main-loop-thread.patch [bz#2090990]
  - Resolves: bz#2168472
    (Guest hangs when starting or rebooting)
  - Resolves: bz#2090990
    (qemu crash with error scsi_req_unref(SCSIRequest *): Assertion `req->refcount > 0' failed or scsi_dma_complete(void *, int): Assertion `r->req.aiocb != NULL' failed [8.7.0])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-33
changelog:
  - kvm-s390x-pv-Implement-a-CGS-check-helper.patch [bz#2187159]
  - Resolves: bz#2187159
    (RHEL8.8 - KVM - Secure Guest crashed during booting with 248 vcpus)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-34
changelog:
  - kvm-migration-Handle-block-device-inactivation-failures-.patch [bz#2177957]
  - kvm-migration-Minor-control-flow-simplification.patch [bz#2177957]
  - kvm-migration-Attempt-disk-reactivation-in-more-failure-.patch [bz#2177957]
  - kvm-nbd-server-push-pending-frames-after-sending-reply.patch [bz#2035712]
  - kvm-nbd-server-Request-TCP_NODELAY.patch [bz#2035712]
  - Resolves: bz#2177957
    (Qemu core dump if cut off nfs storage during migration)
  - Resolves: bz#2035712
    ([qemu] Booting from Guest Image over NBD with TLS Is Slow)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-35
changelog:
  - kvm-virtiofsd-Add-basic-support-for-FUSE_SYNCFS-request.patch [bz#2196880]
  - kvm-s390-kvm-adjust-diag318-resets-to-retain-data.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SLDA-sign-bit-index.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-SRDA-CC-calculation.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-cc_calc_sla_64-missing-overflows.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-shifting-32-bit-values-for-more-tha.patch [bz#2169308 bz#2209605]
  - kvm-s390x-sigp-Reorder-the-SIGP-STOP-code.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRASL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-BRCL-with-a-large-negative-offset.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-condition.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-determination-of-overflow-cond.patch [bz#2169308 bz#2209605]
  - kvm-s390x-follow-qdev-tree-to-detect-SCSI-device-on-a-CC.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-the-accumulation-of-ccm-in-op_icm.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-writeback-to-v1-in-helper_vstl.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-fix-handling-of-zeroes-in-vfmin-vfmax.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-CLFIT-and-CLGIT-immediate-size.patch [bz#2169308 bz#2209605]
  - kvm-s390x-tcg-Fix-opcode-for-lzrf.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-Fix-emulation-of-the-VISTR-instruction.patch [bz#2169308 bz#2209605]
  - kvm-s390x-css-revert-SCSW-ctrl-flag-bits-on-error.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-Fix-and-improve-the-SACF-instructio.patch [bz#2169308 bz#2209605]
  - kvm-target-s390x-tcg-mem_helper-Test-the-right-bits-in-p.patch [bz#2169308 bz#2209605]
  - kvm-pc-bios-Add-support-for-List-Directed-IPL-from-ECKD-.patch [bz#2169308 bz#2209605]
  - Resolves: bz#2196880
    ([virtiofs] Backport FUSE_SYNCFS support)
  - Resolves: bz#2169308
    (Backport latest s390x-related fixes from upstream QEMU for qemu-kvm in RHEL 8.9)
  - Resolves: bz#2209605
    ([IBM 8.9 FEAT] KVM: ECKD List Directed IPL - virtio (qemu))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-36
changelog:
  - kvm-memory-prevent-dma-reentracy-issues.patch [bz#1999236]
  - kvm-async-Add-an-optional-reentrancy-guard-to-the-BH-API.patch [bz#1999236]
  - kvm-checkpatch-add-qemu_bh_new-aio_bh_new-checks.patch [bz#1999236]
  - kvm-hw-replace-most-qemu_bh_new-calls-with-qemu_bh_new_g.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-script-R.patch [bz#1999236]
  - kvm-bcm2835_property-disable-reentrancy-detection-for-io.patch [bz#1999236]
  - kvm-raven-disable-reentrancy-detection-for-iomem.patch [bz#1999236]
  - kvm-apic-disable-reentrancy-detection-for-apic-msi.patch [bz#1999236]
  - kvm-async-avoid-use-after-free-on-re-entrancy-guard.patch [bz#1999236]
  - kvm-memory-stricter-checks-prior-to-unsetting-engaged_in.patch [bz#1999236]
  - kvm-lsi53c895a-disable-reentrancy-detection-for-MMIO-reg.patch [bz#1999236]
  - kvm-hw-scsi-lsi53c895a-Fix-reentrancy-issues-in-the-LSI-.patch [bz#1999236]
  - kvm-target-i386-add-support-for-FLUSH_L1D-feature.patch [bz#2216203]
  - kvm-target-i386-add-support-for-FB_CLEAR-feature.patch [bz#2216203]
  - kvm-migration-Disable-postcopy-multifd-migration.patch [bz#2169733]
  - Resolves: bz#1999236
    (CVE-2021-3750 virt:rhel/qemu-kvm: QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free [rhel-8])
  - Resolves: bz#2216203
    ([qemu-kvm]VM reports vulnerabilty to mmio_stale_data on patched host with microcode)
  - Resolves: bz#2169733
    (Qemu on destination host crashed if migrate with postcopy and multifd enabled)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-37
changelog:
  - kvm-util-iov-Make-qiov_slice-public.patch [bz#2141964]
  - kvm-block-Collapse-padded-I-O-vecs-exceeding-IOV_MAX.patch [bz#2141964]
  - kvm-util-iov-Remove-qemu_iovec_init_extended.patch [bz#2141964]
  - kvm-iotests-iov-padding-New-test.patch [bz#2141964]
  - kvm-block-Fix-pad_request-s-request-restriction.patch [bz#2141964]
  - Resolves: bz#2141964
    (Guest hit EXT4-fs error on host 4K disk  when repeatedly hot-plug/unplug running IO disk)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-38
changelog:
  - kvm-qapi-i386-sev-Change-the-reduced-phys-bits-value-fro.patch [bz#2214840]
  - kvm-qemu-options.hx-Update-the-reduced-phys-bits-documen.patch [bz#2214840]
  - kvm-i386-sev-Update-checks-and-information-related-to-re.patch [bz#2214840]
  - kvm-i386-cpu-Update-how-the-EBX-register-of-CPUID-0x8000.patch [bz#2214840]
  - kvm-target-i386-kvm-Fix-disabling-MPX-on-cpu-host-with-M.patch [bz#2223947]
  - Resolves: bz#2214840
    ([AMDSERVER 8.9 Bug] Qemu SEV reduced-phys-bits fixes)
  - Resolves: bz#2223947
    ([RHEL8.9] qemu core dump with '-cpu host,mpx=off' on Cascadelake host)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-39
changelog:
  - kvm-vhost-vdpa-do-not-cleanup-the-vdpa-vhost-net-structu.patch [bz#2215786]
  - Resolves: bz#2215786
    (CVE-2023-3301 virt:rhel/qemu-kvm: QEMU: net: triggerable assertion due to race condition in hot-unplug [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-40
changelog:
  - kvm-ui-vnc-clipboard-fix-infinite-loop-in-inflate_buffer.patch [bz#2218488]
  - Resolves: bz#2218488
    (CVE-2023-3255 virt:rhel/qemu-kvm: QEMU: VNC: infinite loop in inflate_buffer() leads to denial of service [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-41
changelog:
  - kvm-s390x-ap-fix-missing-subsystem-reset-registration.patch [bz#2111390]
  - kvm-s390x-do-a-subsystem-reset-before-the-unprotect-on-r.patch [bz#2111390]
  - kvm-redhat-Update-linux-headers-for-kvm_s390_vm_cpu_uv_f.patch [bz#2111390]
  - kvm-target-s390x-kvm-Refactor-AP-functionalities.patch [bz#2111390]
  - kvm-target-s390x-AP-passthrough-for-PV-guests.patch [bz#2111390]
  - Resolves: bz#2111390
    ([IBM 8.10 FEAT] KVM: Enable Secure Execution Crypto Passthrough - qemu part)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-42
changelog:
  - kvm-target-s390x-dump-Remove-unneeded-dump-info-function.patch [RHEL-16696]
  - kvm-dump-Add-arch-cleanup-function.patch [RHEL-16696]
  - kvm-target-s390x-arch_dump-Add-arch-cleanup-function-for.patch [RHEL-16696]
  - Resolves: RHEL-16696
    (RHEL8 - KVM : Secure execution guest remains in "paused" state, post "virsh dump" failure (qemu-kvm))


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-43
changelog:
  - kvm-net-Provide-MemReentrancyGuard-to-qemu_new_nic.patch [RHEL-7309]
  - kvm-net-Update-MemReentrancyGuard-for-NIC.patch [RHEL-7309]
  - kvm-vhost-release-memory_listener-object-in-error-path.patch [RHEL-7567]
  - kvm-ui-fix-crash-when-there-are-no-active_console.patch [RHEL-2600]
  - Resolves: RHEL-7309
    (CVE-2023-3019 virt:rhel/qemu-kvm: QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest() [rhel-8])
  - Resolves: RHEL-7567
    ([RHEL8][clone]VM crash when guest running testpmd and delete created vhostuserclient port on host)
  - Resolves: RHEL-2600
    (qemu core dump occurs when client connects to VNC server because qemu cmd only adds vnc but without graphics device)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-44
changelog:
  - kvm-hw-ide-reset-cancel-async-DMA-operation-before-reset.patch [RHEL-15437]
  - kvm-tests-qtest-ahci-test-add-test-exposing-reset-issue-.patch [RHEL-15437]
  - Resolves: RHEL-15437
    (CVE-2023-5088 virt:rhel/qemu-kvm: QEMU: improper IDE controller reset can lead to MBR overwrite [rhel-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-45
changelog:
  - kvm-acpi-fix-acpi_index-migration.patch [RHEL-20189]
  - kvm-RHEL-Enable-x-not-migrate-acpi-index-for-all-pre-RHE.patch [RHEL-20189]
  - kvm-hw-arm-virt-Do-not-load-efi-virtio.rom-for-all-virti.patch [RHEL-14870]
  - Resolves: RHEL-20189
    ([RHEL.8.10.0]Failed to migrate guest with pc (i440x)  between RHELAV 8.4.0 and RHEL 8.10.0)
  - Resolves: RHEL-14870
    ([rhel8]ipxe-roms-qemu does not provide efi-virtio.rom)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-46
changelog:
  - kvm-MAINTAINERS-split-out-s390x-sections.patch [RHEL-18214]
  - kvm-s390x-pv-remove-semicolon-from-macro-definition.patch [RHEL-18214]
  - kvm-hw-s390x-pv-Restrict-Protected-Virtualization-to-sys.patch [RHEL-18214]
  - kvm-hw-s390x-Move-KVM-specific-PV-from-hw-to-target-s390.patch [RHEL-18214]
  - kvm-target-s390x-kvm-pv-Provide-some-more-useful-informa.patch [RHEL-18214]
  - Resolves: RHEL-18214
    ([RHEL8][Secure-execution][s390x]  The error message is not clear when boot up a SE guest with wrong encryption)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-47
changelog:
  - kvm-s390x-pci-avoid-double-enable-disable-of-aif.patch [RHEL-22411]
  - kvm-s390x-pci-refresh-fh-before-disabling-aif.patch [RHEL-22411]
  - kvm-s390x-pci-drive-ISM-reset-from-subsystem-reset.patch [RHEL-22411]
  - Resolves: RHEL-22411
    ([s390x] VM fails to start with ISM passed through)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-48
changelog:
  - kvm-iotests-add-filter_qmp_generated_node_ids.patch [RHEL-7353]
  - kvm-iotests-port-141-to-Python-for-reliable-QMP-testing.patch [RHEL-7353]
  - kvm-monitor-only-run-coroutine-commands-in-qemu_aio_cont.patch [RHEL-7353]
  - kvm-iotests-Make-144-deterministic-again.patch [RHEL-7353]
  - Resolves: RHEL-7353
    ([qemu-kvm] no response with QMP command device_add when repeatedly hotplug/unplug virtio disks [RHEL-8])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-49
changelog:
  - kvm-glib-compat-Introduce-g_memdup2-wrapper.patch [RHEL-19628]
  - kvm-ui-clipboard-mark-type-as-not-available-when-there-i.patch [RHEL-19628]
  - kvm-virtio-net-correctly-copy-vnet-header-when-flushing-.patch [RHEL-19496]
  - Resolves: RHEL-19628
    (CVE-2023-6683 virt:rhel/qemu-kvm: QEMU: VNC: NULL pointer dereference in qemu_clipboard_request() [rhel-8])
  - Resolves: RHEL-19496
    (CVE-2023-6693 virt:rhel/qemu-kvm: QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx() [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-50
changelog:
  - kvm-qcow2-Don-t-open-data_file-with-BDRV_O_NO_IO.patch [RHEL-35616]
  - kvm-iotests-244-Don-t-store-data-file-with-protocol-in-i.patch [RHEL-35616]
  - kvm-iotests-270-Don-t-store-data-file-with-json-prefix-i.patch [RHEL-35616]
  - kvm-block-introduce-bdrv_open_file_child-helper.patch [RHEL-35616]
  - kvm-block-Parse-filenames-only-when-explicitly-requested.patch [RHEL-35616]
  - Resolves: RHEL-35616
    (CVE-2024-4467 virt:rhel/qemu-kvm: QEMU: 'qemu-img info' leads to host file read/write [rhel-8.10.z])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-51.el8
changelog:
  - kvm-virtio-gpu-free-BHs-by-implementing-unrealize.patch [RHEL-32276]
  - kvm-virtio-gpu-reset-gfx-resources-in-main-thread.patch [RHEL-32276]
  - kvm-hw-virtio-Introduce-virtio_bh_new_guarded-helper.patch [RHEL-32276]
  - kvm-hw-display-virtio-gpu-Protect-from-DMA-re-entrancy-b.patch [RHEL-32276]
  - kvm-hw-char-virtio-serial-bus-Protect-from-DMA-re-entran.patch [RHEL-32276]
  - kvm-hw-virtio-virtio-crypto-Protect-from-DMA-re-entrancy.patch [RHEL-32276]
  - Resolves: RHEL-32276
    (CVE-2024-3446 virt:rhel/qemu-kvm: QEMU: virtio: DMA reentrancy issue leads to double free vulnerability [rhel-8])


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-52.el8
changelog:
  - kvm-nbd-server-Plumb-in-new-args-to-nbd_client_add.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Cap-default-max-connections.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Drop-non-negotiating-client.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Close-stray-clients-at-serv.patch [RHEL-52611]
  - kvm-vnc-increase-max-display-size.patch [RHEL-50854]
  - Resolves: RHEL-52611
    (CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])
  - Resolves: RHEL-50854
    (vnc: increase max display size to 4K)


author: Miroslav Rezanina <mrezanin@redhat.com> - 6.2.0-53.el8
changelog:
  - kvm-nbd-server-Favor-qemu_aio_context-over-iohandler-con.patch [RHEL-52611]
  - kvm-iotests-test-NBD-TLS-iothread.patch [RHEL-52611]
  - kvm-nbd-server-CVE-2024-7409-Avoid-use-after-free-when-c.patch [RHEL-52611]
  - Resolves: RHEL-52611
    (CVE-2024-7409 virt:rhel/qemu-kvm: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.1
changelog:
  - kvm-block-move-bdrv_qiov_is_aligned-to-file-posix.patch [RHEL-60553]
  - kvm-block-use-the-request-length-for-iov-alignment.patch [RHEL-60553]
  - Resolves: RHEL-60553
    (Frequent VM pauses on OpenShift Virtualization with Portworx storage)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.2
changelog:
  - kvm-Fix-thread-pool-size-default-value-in-the-man-page.patch [RHEL-26197]
  - Resolves: RHEL-26197
    (virtiofsd --help and manpage does not agree on --thread-pool-size default value)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.3
changelog:
  - kvm-qga-skip-bind-mounts-in-fs-list.patch [RHEL-59214]
  - Resolves: RHEL-59214
    (qemu-ga cannot freeze filesystems with sentinelone)


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.4
changelog:
  - kvm-target-s390x-report-deprecated-props-in-cpu-model-ex.patch [RHEL-88701]
  - kvm-target-s390x-flag-te-and-cte-as-deprecated.patch [RHEL-88701]
  - kvm-target-s390x-filter-deprecated-properties-based-on-m.patch [RHEL-88701]
  - kvm-target-s390x-move-deprecated-props-to-CpuModelExpans.patch [RHEL-88701]
  - kvm-redhat-Adjust-indentation-in-qapi-machine-target.jso.patch [RHEL-88701]
  - Resolves: RHEL-88701
    ([RHEL 8.10 qemu] KVM - Live migration of guest fails from z16-z17 [rhel-8.10.z])


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.0.8.4
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)
  - Sync Patch from source repo
  - fix psp device is not enabled
  - Support Hygon TKM run on CSV Guest
  - support Hygon CCP used in guest
  - Repair-CPU-hotplug-object-repeated-release-problem.patch
  - Dependency patches for Intel CWF platform


author: Quanxian Wang <quanxian.wang@intel.com> - 6.2.0-53.0.8.6
changelog:
  - Clearwater Forrest(CWF) Support
  - 1164-target-i386-Introduce-SierraForest-v2-model.patch
  - 1165-target-i386-Export-BHI_NO-bit-to-guests.patch
  - 1166-target-i386-Add-new-CPU-model-ClearwaterForest.patch
  - 1167-docs-Add-GNR-SRF-and-CWF-CPU-models.patch
  - 1168-target-i386-add-sha512-sm3-sm4-feature-bits.patch


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.0.1.2
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)


author: Xuchun Shang <xuchun.shang@linux.alibaba.com> - 6.2.0-53.0.1.3
changelog:
  - Sync Patch from source repo
  - 1120-qapi-qom-target-i386-csv-guest-Introduce-secret-head.patch
  - 1121-target-i386-kvm-Support-to-get-and-enable-extensions.patch
  - 1122-target-i386-csv-Request-to-set-private-memory-of-CSV.patch
  - 1123-target-i386-csv-Support-load-kernel-hashes-for-CSV3-.patch
  - 1124-target-i386-csv-Support-inject-secret-for-CSV3-guest.patch
  - 1125-i386-Avoid-explicitly-using-KVM_CAP_HYGON_COCO_EXT_C.patch
  - 1126-target-i386-sev-Return-0-if-sev_send_get_packet_len-.patch
  - 1127-target-i386-csv-The-CSV2-guest-running-on-the-recipi.patch
  - 1128-virtio-net-Fix-network-stall-at-the-host-side-waitin.patch


author: xiongmengbiao <xiongmengbiao@hygon.cn> - 6.2.0-53.0.1.5
changelog:
  - Support Hygon TKM run on CSV Guest
  - 1130-newfeature-hw-i386-add-mem2-option-for-qemu.patch
  - 1131-newfeature-hw-misc-psp-support-tkm-use-mem2-memory.patch
  - 1132-newfeature-hw-misc-psp-Pin-the-hugepage-memory-speci.patch


author: yangdepei <yangdepei@hygon.cn> - 6.2.0-53.0.1.6
changelog:
  - support Hygon CCP used in guest
  - 1133-newfeature-hw-vfio-add-hct-device-based-mediated-use.patch
  - 1134-newfeature-hw-vfio-hct-Change-MAX_CCP_CNT-from-16-to.patch
  - 1135-bugfix-hw-vfio-hct-fix-ccp-index-error-caused-by-uni.patch
  - 1136-newfeature-hw-vfio-hct-sharing-CCP-resources-between.patch
  - 1137-bugfix-hw-vfio-hct-exit-once-mdev-deivce-realize-fai.patch
  - 1138-bugfix-hw-vfio-hct-build-hct-device-in-default.patch


author: Jason Zeng <jason.zeng@intel.com> - 6.2.0-53.0.1.8
changelog:
  - Dependency patches for Intel CWF platform
  - 1140-target-i386-Allow-MCDT_NO-if-host-supports.patch
  - 1141-vmxcap-add-tertiary-execution-controls.patch
  - 1142-target-i386-add-support-for-VMX_SECONDARY_EXEC_ENABL.patch
  - 1143-target-i386-enumerate-bit-56-of-MSR_IA32_VMX_BASIC.patch
  - 1144-target-i386-fix-feature-dependency-for-WAITPKG.patch
  - 1145-target-i386-add-support-for-LAM-in-CPUID-enumeration.patch
  - 1146-target-i386-add-control-bits-support-for-LAM.patch
  - 1147-target-i386-add-support-for-FRED-in-CPUID-enumeratio.patch
  - 1148-target-i386-mark-CR4.FRED-not-reserved.patch
  - 1149-vmxcap-add-support-for-VMX-FRED-controls.patch
  - 1150-target-i386-enumerate-VMX-nested-exception-support.patch
  - 1151-target-i386-Add-get-set-migrate-support-for-FRED-MSR.patch
  - 1152-target-i386-Delete-duplicated-macro-definition-CR4_F.patch
  - 1153-target-i386-Add-VMX-control-bits-for-nested-FRED-sup.patch
  - 1154-target-i386-Raise-the-highest-index-value-used-for-a.patch
  - 1155-target-i386-Add-more-features-enumerated-by-CPUID.7..patch
  - 1156-target-i386-pass-X86CPU-to-x86_cpu_get_supported_fea.patch
  - 1157-i386-cpuid-Remove-subleaf-constraint-on-CPUID-leaf-1.patch
  - 1158-target-i386-Don-t-construct-a-all-zero-entry-for-CPU.patch
  - 1159-target-i386-Enable-fdp-excptn-only-and-zero-fcs-fds.patch
  - 1160-target-i386-Construct-CPUID-2-as-stateful-iff-times-.patch
  - 1161-target-i386-Make-invtsc-migratable-when-user-sets-ts.patch
  - 1162-target-i386-cpu-Fix-notes-for-CPU-models.patch


author: Mengbiao Xiong <xiongmengbiao@hygon.cn> - 6.2.0-53.0.8.7
changelog:
  - Support Hygon TKM (Trusted Key Management) Guest live migration
  - 1169-hw-misc-psp-support-live-migrate-for-vpsp-device.patch


author: yangdepei <yangdepei@hygon.cn> - 6.2.0-53.0.8.8
changelog:
  - Support Hygon HCT vCCP Guest live migration
  - 1170-hw-vfio-hct-support-start-with-ccp.ko-driver.patch
  - 1171-hw-vfio-hct-support-vfio-pci-multiple-processes.patch
  - 1172-hw-vfio-hct-support-live-migration-function-for-virt.patch
  - 1173-hw-vfio-hct-fix-virtual-machine-paused-due-to-obtain.patch
  - 1174-hw-vfio-hct-support-abort-migration-when-hct-excepti.patch


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.5
changelog:
  - kvm-io-move-websock-resource-release-to-close-method.patch [RHEL-120119]
  - kvm-io-fix-use-after-free-in-websocket-handshake-code.patch [RHEL-120119]
  - Resolves: RHEL-120119
    (CVE-2025-11234 virt:rhel/qemu-kvm: VNC WebSocket handshake use-after-free [rhel-8.10.z])


author: Jon Maloy <jmaloy@redhat.com> - 6.2.0-53.el8.6
changelog:
  - kvm-scsi-disk-Use-positive-return-value-for-status-in-dm.patch [RHEL-120737]
  - kvm-scsi-block-Don-t-skip-callback-for-sgio-error-status.patch [RHEL-120737]
  - kvm-scsi-disk-Add-warning-comments-that-host_status-erro.patch [RHEL-120737]
  - kvm-scsi-disk-Always-report-RESERVATION_CONFLICT-to-gues.patch [RHEL-120737]
  - kvm-scsi-disk-Apply-error-policy-for-host_status-errors-.patch [RHEL-120737]
  - Resolves: RHEL-120737
    (qemu hit io error and crash scsi-disk.c:554: scsi_write_data: Assertion `r->req.aiocb == NULL' failed)


author: Jacob Wang <jacob.wang@openanolis.org> - 6.2.0-53.1.0.6
changelog:
  - Adjust limit for virtiofsd minor version
  - Add loongarch supporti (lixianglai@loongson.cn)
  - Add package qemu-user-static (fuyuan.wh@alibaba-inc.com)
  - Modify-smbios-option-lack-and-Modify-the-maximum-num.patch (lixianglai@loongson.cn)
  - rename-kvm_msr_buf-with-kvm_csr_buf.patch (lixianglai@loongson.cn)
  - code-cleanup-for-loongarch-kvm.patch (lixianglai@loongson.cn)
  - Support-TPM.patch (lixianglai@loongson.cn)
  - kvm-csr-save-and-restore-optimization.patch (lixianglai@loongson.cn)
  - address-space-code-cleanup-on-7A-virt-machine.patch (lixianglai@loongson.cn)
  - Fix-irq-routing-and-fpu-option-to-compat-with-kernel.patch (lixianglai@loongson.cn)
  - Support-vfio-config.patch (lixianglai@loongson.cn)
  - pass-to-make-check.patch (lixianglai@loongson.cn)
  - fixup-can-t-find-cpu-type.patch (lixianglai@loongson.cn)
  - fix-smbios-type4-info-for-numa-support.patch (lixianglai@loongson.cn)
  - Fix-smp.cores-value.patch (lixianglai@loongson.cn)
  - Add-lbt-support-for-kvm.patch (lixianglai@loongson.cn)
  - Modify-the-ioctl-command-of-kvm.patch (lixianglai@loongson.cn)
  - Add-usb-storage-config-for-loongarch.patch (zhaotianrui@loongson.c)
  - Add-loongarch-into-QEMU_ARCH_VIRTIO_PCI-to-support-q.patch (zhaotianrui@loongson.c)
  - Fix-host-architecture-macro-of-LoongArch-to-HOST_LOO.patch (zhaotianrui@loongson.c)
  - Fix-LoongArch-KVM-header-macros.patch (zhaotianrui@loongson.c)
  - loongarch: Fixed the issue where qemu specifies the boot order (lixianglai@loongson.cn)
  - 0001-anolis-csv-i386-add-CSV-context.patch (jiangxin@hygon.cn)
  - 0002-anolis-csv-i386-add-command-to-initialize-CSV-contex.patch (jiangxin@hygon.cn)
  - 0003-anolis-csv-i386-add-command-to-load-data-to-guest-me.patch (jiangxin@hygon.cn)
  - 0004-anolis-csv-i386-add-command-to-load-vmcb-to-guest-me.patch (jiangxin@hygon.cn)
  - 0005-anolis-cpu-i386-populate-CPUID-0x8000_001F-when-CSV-.patch (jiangxin@hygon.cn)
  - 0006-anolis-csv-i386-CSV-guest-do-not-need-register-unreg.patch (jiangxin@hygon.cn)
  - 0007-anolis-target-i386-csv-load-initial-image-to-private.patch (jiangxin@hygon.cn)
  - 0008-anolis-vga-force-full-update-for-CSV-guest.patch (jiangxin@hygon.cn)
    (Hygon CSV3 feature)
  - Support Hygon CSV/CSV2 live migration, CSV2 reboot (hanliyang@hygon.cn)
  - Support CSV3 live migration (jiangxin@hygon.cn)
  - Support reuse ASID for CSV guests (hanliyang@hygon.cn)
  - Support tkm key isolation (xiongmengbiao@hygon.cn)
  - Add Hygon Dhyana-v3 and Dharma CPU model (zhouyanjing@hygon.cn)
  - Intel-SIG: Supprt Intel SPR/GNR/SRF new ISAs and cpu models (quanxian.wang@intel.com)
  - Intel-SIG: Supprt new SPR models (quanxian.wang@intel.com)
  - Intel-SIG: Sync more intel platform related features/fixes from upstream (jason.zeng@intel.com)
  - Sync Patch from source repo
  - fix psp device is not enabled
  - Support Hygon TKM run on CSV Guest
  - support Hygon CCP used in guest
  - Repair-CPU-hotplug-object-repeated-release-problem.patch
  - Dependency patches for Intel CWF platform
  - Add a CSV3 ioctl command to request Linux KVM update CSV3 VM's page attribute info
  - Clearwater Forrest(CWF) Support
  - 1164-target-i386-Introduce-SierraForest-v2-model.patch
  - 1165-target-i386-Export-BHI_NO-bit-to-guests.patch
  - 1166-target-i386-Add-new-CPU-model-ClearwaterForest.patch
  - 1167-docs-Add-GNR-SRF-and-CWF-CPU-models.patch
  - 1168-target-i386-add-sha512-sm3-sm4-feature-bits.patch
  - Support Hygon TKM (Trusted Key Management) Guest live migration
  - hw-misc-psp-support-live-migrate-for-vpsp-device.patch
  - Support Hygon HCT vCCP Guest live migration
  - 1170-hw-vfio-hct-support-start-with-ccp.ko-driver.patch
  - 1171-hw-vfio-hct-support-vfio-pci-multiple-processes.patch
  - 1172-hw-vfio-hct-support-live-migration-function-for-virt.patch
  - 1173-hw-vfio-hct-fix-virtual-machine-paused-due-to-obtain.patch
  - 1174-hw-vfio-hct-support-abort-migration-when-hct-excepti.patch
  - Support CSV3 Hostdata (FINISH_EX) and shared memory management
  - Fix check on CSV3 shared memory management capability


author: Zdenek Dohnal <zdohnal@redhat.com> - 7.1.1-5
changelog:
  - CVE-2018-9918 qpdf: stack exhaustion in QPDFObjectHandle and QPDF_Dictionary classes in libqpdf.a [fedora-all]


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-2
changelog:
  - Fix specific overflow in qtextlayout
  - Fix incorrect parsing of the strict-transport-security (HSTS) header
  - Fix buffer over-read via a crafted reply from a DNS server
    Resolves: bz#2209491


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-3
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410)
    Resolves: bz#2212753


author: Jan Grulich <jgrulich@redhat.com> - 5.15.3-4
changelog:
  - Don't allow remote attacker to bypass security restrictions caused by
    flaw in certificate validation (CVE-2023-34410) (version #2)
    Resolves: bz#2212753


author: Rex Dieter <rdieter@fedoraproject.org> - 5.10.1-3
changelog:
  - support %bootstrap, %check: add autotests
  - build with -O1 to workaround serious autotest/code failures (f28+, #1551246)


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-17
changelog:
  - Support grace period expirations past 2038 year for XFS
  - Add a synopsis for a project quota option in the quota tool
  - Add a --filesystem option to the quota tool
  - Complain that ext4 external quota files are deprecated


author: Petr Pisar <ppisar@redhat.com> - 1:4.06-2
changelog:
  - Remove a dead code from process_file() (upstream bug #54)
  - Fix a compilation warning in quotaops.c
  - Warn when kernel XFS large time stamp does fit into (32-bit) user-space
    time_t
  - Do not use a pointless compiler-internal __P() macro


author: Pavel Reichl <preichl@redhat.com> - 1:4.09-1
changelog:
  - Update to new upstream version
  - Add tmpfs quota support
  - Remove rhel-only patches that were merged upstream


author: Preston Brown <pbrown@redhat.com>
changelog:
  - 2.00 final, rolls in pretty much all our patches. :)
  - fix reporting of in use dquot entries from quotastats
  - change repquota man page to fix documentation of -v (#10330)
  - include warnquota.conf


author: Preston Brown <pbrown@redhat.com>
changelog:
  - quota 3.00 is required by recent kernel 2.4 changes
  - no warnquota included this time, not yet ported
  - quite a bit of work on quotacheck to make is backwards compatible
  - we will likely go back to "quota 2.00" as these projects merge...


author: Preston Brown <pbrown@redhat.com>
changelog:
  - fixed bug #52075 (problem with ext2 labels)
  - backup data files off by default in quotacheck, optional backup flag added
  - fix bug where giving a bad directory or device would cause 
    quotaon/quotacheck to simulate "-a" behaviour
  - if a device name (i.e /dev/hda1) is passed, look up the corresponding mount
    point


author: Philip Copeland <bryce@redhat.com> 3.06-1
changelog:
  - Ditched the 3.01-pre9 src base for 3.06
    Rebuilt without any patchs

  ============================================================


author: Philip Copeland <bryce@redhat.com> 3.06-3
changelog:
  - Bah, I'd dropped epoch from the spec file but seems
    we need this if you want to upgrade as the epoch
    number has precedence over the version/release
    numbers.


author: Philip Copeland <bryce@redhat.com> 3.06-5
changelog:
  - added --with-ext2direct=no to fix #73244
    without this users with UID's > 65535 will not
    be able to exist on a quota enabled FS


author: Steve Dickson <SteveD@RedHat.com> 3.15-2
changelog:
  - More review comments:
      - BuiltPreReq to BuiltReq
      - Removed '.' From Summary
      - Added 'GPLv2+' to License Tag
      - Condensed the _sysconfdir entries in to one line


author: Ondrej Vasik <ovasik@redhat.com> 3.15-5
changelog:
  - added symbolic link for quotaoff man page(#436110)
  - don't ship xqmstats.8 man page as we don't ship those
    binaries(#436100)


author: Ondrej Vasik <ovasik@redhat.com> 3.15-6
changelog:
  - added enable-ldapmail=try option(wonder how #133207
    got closed by FC-4 without it or warnquota.conf change)
  - dropped with-ext2direct=no option - this option is 
    invalid and original bug was fixed in 3.07


author: Ondrej Vasik <ovasik@redhat.com> 3.16-2
changelog:
  - upstream fix of some typos, string formats + 4TB+ fix
    for repquota
  - some additional stripping removal
  - change default mode of binaries from 555 to 755
    (strip error messages in build log)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-3
changelog:
  - Add support for -h option (do not show invalid option
    error) at edquota,setquota and quota (#457898)


author: Ondrej Vasik <ovasik@redhat.com> 3.16-4
changelog:
  - fix bug in warnquota which could result in bogus hostname
    and domainname (upstream)
  - remove IMMUTABLE flag from quota file in quotacheck(upstream)


author: Ondrej Vasik <ovasik@redhat.com> 1:3.16-5
changelog:
  - fix rpmlint warnings - absolute symlink and not using epoch
    in version in changelog (#226353)
  - rquota headers and manpage now in devel subpackage


author: Ondrej Vasik <ovasik@redhat.com> 1:3.17-4
changelog:
  - clarify statements about LDAP in warnquota conf
    (related to #490106)
  - fix parsing issue in warnquota.c(#490125)
  - enable rpcsetquota by default(#159292, #469753)


author: Petr Pisar <ppisar@redhat.com> 1:3.17-12
changelog:
  - Prevent corruptive read/write from/to NULL address in rpc.rquotad
    (Resolves #528581, example in #532342)
  - Fix spelling in summary


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-15
changelog:
  - Add quota_nld daemon init script (bug #634169)
  - Sub-package quota_nld files to weak dependecies
  - Sub-package warnquota files to weak dependecies


author: Petr Pisar <ppisar@redhat.com> - 1:3.17-16
changelog:
  - Break dependecies on main package as there are none
  - Add plain text documentation to each sub-package
  - Package additional documentation into `doc' sub-package


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.4.pre1
changelog:
  - Make RPC block factor dynamic (bug #667757)
  - Check whether set limits fit into the range supported by quota format
    (bug #668688)
  - Check set limits fit into the range supported by RPC transport (bug #668691)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.6.pre1
changelog:
  - Store quota_nld PID into PID file (bug #634137)
  - Do not allow non-root to control quota_nld service (bug #634137)
  - Add quotasync tool (bug #596794)
  - Implement quotacheck for GFS2 (bug #596794)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.9.pre1
changelog:
  - Explain meaning of the second column in repquota output
  - Make RPC handle properly host names with colons (i.e. IPv6 server host name)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-0.16.pre1
changelog:
  - Report quotacheck failures by return code (bug #717982)
  - Improve quotacheck error message (bug #717982)


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-1
changelog:
  - 4.00 bump
  - Remove unneeded LDAP linking patch
  - Prevent from stripping by configure option
  - Remove unneeded sed scripts on sources
  - Remove unneeded file removal


author: Petr Pisar <ppisar@redhat.com> - 1:4.00-2
changelog:
  - Remove unneeded cryptographic library build-time dependencies
  - Fortify build-time configuration
  - Migrate quota_nld service from sysvinit to systemd
  - Document --print-below option in quota_nld service


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-4
changelog:
  - Do not fiddle with quota files on XFS and GFS (bug #846296)
  - Make sure option -d at quotacheck provides at least as much information as
    option -v (SF#3602777)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-6
changelog:
  - Remove code for migration from systemv-style init script
  - Drop useless dependency on initscripts (bug #964440)


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-7
changelog:
  - Add LGPLv2+ and GPLv2 to license declaration
  - Correct changelog dates
  - Package additional LDAP scripts as a documentation
  - Package XFS-specific tools


author: Petr Pisar <ppisar@redhat.com> - 1:4.01-11
changelog:
  - Move /sbin/* files under /usr (bug #983179)
  - Harden executables due to rpc.rquotad and quota_nld daemons (bug #983179)
  - Document quotagrpadmins(5), quotatab(5), warnquota.conf(5), rcp.rquota(8)
    (bug #983179)


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-6
changelog:
  - Correct repquota indentation for file systems with hiden quota files
  - Remove unnecessary quota dependency from quota-devel package
  - Break licenses down to each package


author: Petr Pisar <ppisar@redhat.com> - 1:4.03-9
changelog:
  - Fix disabling features at build time
  - Fix a race between checking for and opening a directory to be scanned
  - Fix an undefined behavior on parsing yes-no answer
  - Check for setuid and setgid calls failure in edquota tool
  - Check for failures when reading edquota input
  - Check for failures when duplicating a file handle


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-3
changelog:
  - rpcgen tool split from glibc-common package
  - Pass TIRPC header files location to all RPC compilation units
  - Do not iterate over negative UIDs in repquota
  - Fix mistakes in warnquota reported by GCC 8


author: Petr Pisar <ppisar@redhat.com> - 1:4.04-4
changelog:
  - Avoid questions in quotacheck non-interactive mode
  - Report an error when quotacheck fails to cache quota files
  - Report an error if quota file magic is invalid


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-2
changelog:
  - Report an error if an RPC fails on an explicitly requested file system
    (upstream bug #134)
  - Fix Free Software Foundation's postal address (upstream bug #133)


author: Petr Pisar <ppisar@redhat.com> - 1:4.05-6
changelog:
  - Optimize out useless checking of file systems with hidden quota files
  - Fix warnquota --help output
  - Fix checking for the LDAP failures in the warnquota tool
  - Report detailed LDAP failures
  - Document CC_TO in warquota.conf is looked up with LDAP
  - Initialize all members of a configparams structure in warnquota
  - Free parsed configuration in warnquota


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-4
changelog:
  - Apply PR2675 to fix leftover temp dir bug (introduced in backported PR2625)
  - Apply PR2603 to ignore unused PV devices
  - Apply upstream PR2750 to avoid exclusion of wanted multipath devices
  - Remove unneeded xorriso dep on s390x (no ISO image support there)
  - Apply upstream PR2736 to add the EXCLUDE_{IP_ADDRESSES,NETWORK_INTERFACES}
    options


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-5
changelog:
  - Apply PR2795 to detect changes in system files between backup
    and rescue image
  - Apply PR2808 to exclude dev/watchdog* from recovery system
  - Backport upstream PRs 2827 and 2839 to pass -y to lvcreate instead of one "y"
    on stdin
  - Apply PR2811 to add the PRE/POST_RECOVERY_COMMANDS directives
  - Recommend dosfstools on x86 and aarch64, needed for EFI System Partition


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-6
changelog:
  - Restore usr/share/rear/output/PXE/default/820_copy_to_net.sh
    removed in 2.4-19 with rsync refactor.
    It is still needed to use a rsync OUTPUT_URL when OUTPUT=PXE and BACKUP=RSYNC


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-8
changelog:
  - Apply PR2903 to protect against colons in pvdisplay output
  - Apply PR2873 to fix initrd regeneration on s390x
  - Apply PR2431 to migrate XFS configuration files


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-10
changelog:
  - Apply PR 3027 to ensure correct creation of the rescue environment
    when a file is shrinking while being read
  - Backport PR 2774 to increase USB_UEFI_PART_SIZE to 1024 MiB
  - Apply upstream patch for temp dir usage with LUKS to ensure
    that during recovery an encrypted disk can be unlocked using a keyfile
  - Backport upstream PR 3031: Secure Boot support for OUTPUT=USB
  - Correct a mistake done when backporting PR 2691


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-12
changelog:
  - Skip invalid disk drives when saving layout PR 3047
  - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136
  - make initrd accessible only by root (CVE-2024-23301), PR 3123
  - Backport PR 3061 to save LVM pool metadata volume size in disk layout
    and restore it
  - Backport PR 3058 to skip useless xfs mount options when mounting
    during recovery, prevents mount errors like "logbuf size must be greater
    than or equal to log stripe size"


author: Pavel Cahyna <pcahyna@redhat.com> - 2.6-13
changelog:
  - Do not delete NetBackup logs in case of errors and save
    /usr/openv/netbackup/logs to the restored system after a successful recovery
  - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen
    with NetBackup 10.2.0.1


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 125-1.0.2
changelog:
  - Backport from fedora32
    Allow conditionally adding -fcommon to CFLAGS by defining %_legacy_common_support


author: Remi Collet <rcollet@redhat.com> - 4.0.10-2
changelog:
  - drop build dependency on pandoc
  - drop dependency on jemalloc #1591762
  - fix License (BSD and MIT)
  - add bundled libraries licences
  - cleanup conditions from spec file


author: Remi Collet <rcollet@redhat.com> - 5.0.3-2
changelog:
  - fix Heap buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10192
  - fix Stack buffer overflow in HyperLogLog triggered by malicious client
    CVE-2019-10193


author: Remi Collet <rcollet@redhat.com> - 5.0.3-4
changelog:
  - fix lua scripts can overflow the heap-based Lua stack
    CVE-2021-32626
  - fix integer overflow issue with Streams
    CVE-2021-32627
  - fix integer overflow bug in the ziplist data structure
    CVE-2021-32628
  - fix integer overflow issue with intsets
    CVE-2021-32687
  - fix integer overflow issue with strings
    CVE-2021-41099


author: Liwei Ge <geliwei@openanolis.org> - 6.2.17-1.0.1
changelog:
  - Support loongarch64 platform
  - cherry-pick `add sw patch $cbad809d90a96439e196e8610d5b1868bcca5d3d`. (nijie@wxiat.com)


author: Silas Sewell <silas@sewell.ch> - 1.2.6-3
changelog:
  - Add Fedora build flags
  - Send all scriplet output to /dev/null
  - Remove debugging flags
  - Add redis.conf check to init script


author: Fabian Deutsch <fabiand@fedoraproject.org> - 2.4.6-1
changelog:
  - Update to 2.4.6
  - systemd unit file added
  - Compiler flags changed to compile 2.4.6
  - Remove doc/ and Changelog


author: Fabian Deutsch <fabian.deutsch@gmx.de> - 2.6.16-1
changelog:
  - Update to 2.6.16
  - Fix rhbz#973151
  - Fix rhbz#656683
  - Fix rhbz#977357 (Jan Vcelak <jvcelak@fedoraproject.org>)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-1
changelog:
  - Upstream 2.8.14 (RHBZ #1136287)
  - Bugfix for lua scripting users (server crash)
  - Refresh patches
  - backport spec from EPEL7 (thanks Warren)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.14-2
changelog:
  - Cleanup spec
  - Fix shutdown for redis-{server,sentinel}
  - Backport fixes from Remi Collet repository (ie: sentinel working)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.15-1
changelog:
  - Upstream 2.8.15 (critical bugfix for sentinel)
  - Fix to sentinel systemd service and configuration (thanks Remi)
  - Refresh patch management


author: Remi Collet <remi@fedoraproject.org> - 2.8.17-1
changelog:
  - Upstream 2.8.17
  - fix redis-sentinel service unit file for systemd
  - fix redis-shutdown for sentinel
  - also use redis-shutdown in init scripts


author: Haïkel Guémar <hguemar@fedoraproject.org> - 2.8.19-1
changelog:
  - Upstream 2.8.19 (RHBZ #1175232)
  - Fix permissions for tmpfiles (RHBZ #1182913)
  - Add limits config files
  - Spec cleanups


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.0.2-1
changelog:
  - Upstream 3.0.2 (RHBZ #1228245)
  - Fix Lua sandbox escape and arbitrary code execution (RHBZ #1228331)


author: Haïkel Guémar <hguemar@fedoraproject.org> - 3.2.3-1
changelog:
  - Upstream 3.2.3
  - Security fix for CVE-2013-7458 (redis-cli history world readable)
  - RHBZ#1363670 RHBZ#1363671


author: Remi Collet <remi@fedoraproject.org> - 3.2.3-2
changelog:
  - add missing man pages #1374577
    using patch from https://github.com/antirez/redis/pull/3491
  - data and configuration should not be publicly readable #1374700
  - remove /var/run/redis with systemd #1374728
  - provide redis-check-rdb as a symlink to redis-server #1374736
    using patch from https://github.com/antirez/redis/pull/3494
  - move redis-shutdown to libexec


author: Nathan Scott <nathans@redhat.com> - 3.2.9-1
changelog:
  - Upstream 3.2.9
  - Add RuntimeDirectory=redis to systemd unit file (RHBZ #1454700)
  - Mark rundir as %ghost since it may disappear (tmpfs - #1454700)
  - Fix a shutdown failure with Unix domain sockets (RHBZ #1444988)


author: Nathan Scott <nathans@redhat.com> - 3.2.10-1
changelog:
  - Upstream 3.2.10 release
  - Ensure both the redis and redis-sentinel service files set correct perms
  - Dropped systemd tmpfiles source, handled directly in systemd service files


author: Nathan Scott <nathans@redhat.com> - 3.2.11-1
changelog:
  - Upstream 3.2.11 bug-fix-only release
  - Switch to using Type=notify for Redis systemd services (RHBZ #1172841)
  - Add Provides:bundled hiredis, linenoise, lua-libs clauses (RHBZ #788500)


author: Nathan Scott <nathans@redhat.com> - 4.0.2-1
changelog:
  - Upstream 4.0.2 release.  (RHBZ #1389592)
  - Add redis-devel for loadable module development.
  - Add redis-doc for man pages and detailed documentation.
  - Provide redis-check-aof as a symlink to redis-server also now.


author: Remi Collet <remi@remirepo.net> - 4.0.3-1
changelog:
  - Redis 4.0.3
  - fix ownership of /usr/share/doc/redis
  - use make_flags for test to avoid rebuild and failure
  - fix rpm macro location on EL-6
  - add /var/run/redis on EL-6
  - add spec file license header
  - drop duplicated documentation from main package
  - keep man in main page


author: Nathan Scott <nathans@redhat.com> - 4.0.4-1
changelog:
  - Upstream 4.0.4 release.
  - Update to current upstream redis-doc also.
  - Fix man page issues (RHBZ #1513594 and RHBZ #1515417).


author: Remi Collet <remi@remirepo.net> - 4.0.5-1
changelog:
  - Redis 4.0.5 - Released Thu Dec 1 16:03:32 CET 2017
  - Upgrade urgency CRITICAL: Redis 4.0.4 fix for PSYNC2 was broken,
    causing the slave to crash when receiving an RDB file from the
    master that contained a duplicated Lua script.


author: Mikolaj Izdebski <mizdebsk@redhat.com> - 1.0-10.5
changelog:
  - Install license file with javadoc package
  - Convert versioned javadoc to versionless
  - Update to current packaging guidelines
  - Remove msv provides and obsoletes


author: Mat Booth <mat.booth@redhat.com> - 2011.1-1
changelog:
  - Update to version released from new project location rhbz#981275
  - Build/install with maven instead of ant
  - Drop old javadoc rpm bug workaround


author: Kalev Lember <kalevlember@gmail.com> - 0.7.93-1
changelog:
  - Update to 0.7.93
  - Tighten deps with the _isa macro
  - Don't manually require pkgconfig; rpmbuild generates this automatically
  - Use license macro for the COPYING file


author: Alexander Scheel <ascheel@redhat.com> - 3.0.26-6
changelog:
  - CVE-2020-1695: Improper validation of response header in MediaTypeHeaderDelegate.java class
    Resolves: rh-bz#1845548


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-5
changelog:
  + rhythmbox-3.4.2-5
  - Remove LIRC plugin
  - Fix 2 build warnings
  - Remove BRs for removed visualiser plugin


author: Bastien Nocera <bnocera@redhat.com> - 3.4.2-7
changelog:
  + rhythmbox-3.4.2-7
  - Fix warnings in art search when playing a radio
  - Fix initial import never finishing
  - Fix multimedia keys integration in GNOME


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-20
changelog:
  - Add --path query option (#1940895)
  - Macroize find-debuginfo script location (#2019540)
  - Validate and require subkey binding sigs on PGP pubkeys (#1958480)
  - Fixes CVE-2021-3521


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-22
changelog:
  - Fix spurious %transfiletriggerpostun execution (#2023693)
  - Skip recorded symlinks in --setperms (#1900662)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-31
changelog:
  - Backport file handling code from rpm-4.19 to fix CVE-2021-35937,
    CVE-2021-35938 and CVE-2021-35939


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-32
changelog:
  - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63069)
  - Fix IMA signature lengths assumed constant (RHEL-39896)
  - Fix root relocation regression (RHEL-49494)
  - Report unsafe symlinks during installation as a specific case (RHEL-39897)
  - Don't segfault on missing priority tag (RHEL-39894)


author: Liwei Ge <geliwei@openanolis.org> - 4.14.4-32.0.1
changelog:
  - Rebrand for Anolis OS
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - Support loongarch for rpm
  - Add loongarch64 support for debugedit(doupengda@loongson.cn)
  - Modify the spec to add debugedit for loongarch64(zhangwenlong@loongson.cn)
  - Support and switch rpmdb to sqlite (flin@linux.alibaba.com)
  - conditional set relbuf for loongarch debugedit (geliwei@openanolis.org)
  - avoid dead loop in db3_dbiOpen when db_create failed (xuchunmei@linux.alibaba.com)
  - do not switch rpmdb to sqlite (xuchunmei@linux.alibaba.com)
  - Fix a copy-paste --help description of --whatconflicts (wangkaiqiang@inspur.com)
  - https://bugzilla.openanolis.cn/show_bug.cgi?id=8035 (wangkaiqiang@inspur.com)
  - Add sw64 Architecture (nijie@wxiat.com)
  - update config to support sw64 Architecture. (Weisson@linux.alibaba.com)
  - keep compatibility between sw and other architecture. (Weisson@linux.alibaba.com)
  - Fix compatibility of debugedit tool on sw_64 platform. (Weisson@linux.alibaba.com)
  - cherry-pick Add sw8a Architecture #d96aa474da407c806ef6b68c669f8027e366f302 (nijie@wxiat.com)
  - cherry-pick Add sw8a patch #923576a65dc00eb4fbe1f10a5d0027c4de1f5be0 (nijie@wxiat.com)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - adjust for rpmdb index name change
  - drop unnecessary vendor-macro patch for real
  - add ISA-dependencies among rpm subpackages
  - make lzma and sqlite deps conditional and disabled by default for now


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - rpm 4.5.90-0.git8424.1 (alpha snapshot)
  - adjust to build against Berkeley DB 4.5.20 from compat-db for now
  - add posttrans to clean up db environment mismatch after upgrade
  - forward-port devel autodeps patch


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8426.5
  - flip back to external bdb
  - fix tab vs spaces complaints from rpmlint
  - add dep for lzma and require unzip instead of zip in build (#310694)
  - add pkgconfig dependency to rpm-devel
  - drop ISA-dependencies for initial introduction
  - new snapshot from upstream for documentation fixes


author: Florian Festi <ffesti@redhat.com>
changelog:
  - 4.5.90-0.git8426.10
  - rpm-4.5.90-posttrans.patch
  - use header from rpmdb in posttrans to make anaconda happy


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - 4.5.90-0.git8461.1
  - new snapshot from upstream
  - fixes #68290, #455972, #446202, #453364, #456708, #456103, #456321, #456913,
    - partial fix for #457360


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - add support for noarch subpackages
  - fix segfault in case of insufficient disk space detected (#460146)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - fix parsing of boolean expressions in spec (#456103)
    (unbreaks pam, jpilot and maybe other builds)


author: Jindrich Novy <jnovy@redhat.com>
changelog:
  - create directory structure for rpmbuild prior to build if it doesn't exist (#455387)
  - create _topdir if it doesn't exist when installing SRPM
  - don't generate broken cpio in case of hardlink pointing on softlink,
    thanks to pixel@mandriva.com


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - add hack to support extracting gstreamer plugin provides (#438225)
  - fix another macro argument handling regression (#461180)


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to official 4.5.90 alpha tarball 
  - a big pile of misc bugfixes + translation updates
  - isa-macro generation fix for ppc (#464754)
  - avoid pulling in pile of perl dependencies for an unused script
  - handle both "invalid argument" and clear env version mismatch on posttrans


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc1 
  - fixes #465586, #466597, #465409, #216221, #466503, #466009, #463447...
  - avoid using %configure macro for now, it has unwanted side-effects on rpm


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - Make noarch sub-packages actually work
  - Fix defaultdocdir logic in installplatform to avoid hardwiring mandir


author: Panu Matilainen <pmatilai@redhat.com>
changelog:
  - update to 4.6.0-rc2
  - fixes #471820, #473167, #469355, #468319, #472507, #247374, #426672, #444661
  - enable automatic generation of pkg-config and libtool dependencies #465377


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.2
changelog:
  - change platform sharedstatedir to something more sensible (#185862)
  - add rpmdb_foo links to db utils for documentation compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-0.rc4.3
changelog:
  - extract mimehandler provides from .desktop files
  - preliminaries for extracting font provides (not enabled yet)
  - dont classify font metrics data as fonts
  - only run script dep extraction once per file, duh


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-1
changelog:
  - update to 4.6.0 final
  - revert libmagic looking into compressed files for now, breaks ooffice build


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-4
changelog:
  - inherit group tag from the main package (#470714)
  - ignore BuildArch tags for anyarch actions (#442105)
  - don't check package BuildRequires when doing --rmsource (#452477)
  - don't fail because of missing sources when only spec removal
    is requested (#472427)


author: Jindrich Novy <jnovy@redhat.com> - 4.6.0-5
changelog:
  - remove two offending hunks from anyarch patch causing that
    RPMTAG_BUILDARCHS isn't written to SRPMs


author: Panu Matilainen <pmatilai@redhat.com> - 4.6.0-7
changelog:
  - loosen up restrictions on dependency names (#455119)
  - handle inter-dependent pkg-config files for requires too (#473814)
  - error/warn on elf binaries in noarch package in build


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-0.beta1.9
changelog:
  - fix recorded file state of otherwise skipped files (#492947)
  - compress ChangeLog, drop old CHANGES file (#492440)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-1
changelog:
  - update to 4.7.0 final (http://rpm.org/wiki/Releases/4.7.0)
  - fixes #494049, #495429
  - dont permit test-suite failure anymore


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-2
changelog:
  - file classification tweaks for text files (#494817)
    - disable libmagic text token checks, it's way too error-prone
    - consistently classify all text as such and include description


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-3
changelog:
  - couple of merge-review fixes (#226377)
    - eliminate bogus leftover rpm:rpm rpmdb ownership
    - unescaped macro in changelog
  - fix find-lang --with-kde with KDE3 (#466009)
  - switch back to default file digest algorithm


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-4
changelog:
  - split cron-job into a sub-package to avoid silly deps on core rpm (#500722)
  - rpm requires coreutils but not in %post
  - build with libcap and libacl
  - fix pgp pubkey signature tag parsing


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-5
changelog:
  - don't mess up problem altNEVR in python ts.check() (#501068)
  - fix hardlink size calculation on build (#503020)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.0-8
changelog:
  - updated OSGi dependency extractor (#506471)
  - fix segfault in symlink fingerprinting (#505777)
  - fix invalid memory access causing bogus file dependency errors (#506323)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-5
changelog:
  - fix duplicate dependency filtering on build (#490378)
  - permit absolute paths in file lists again (#521760)
  - use permissions 444 for all .debug files (#522194)
  - add support for optional bugurl tag (#512774)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-6
changelog:
  - use relative paths within db environment (related to #507309, #507309...)
  - remove db environment on close in chrooted operation (related to above)
  - initialize rpmlib earlier in rpm2cpio (#523260)
  - fix file dependency tag extension formatting (#523282)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-7
changelog:
  - fix build with BDB 4.8.x by removing XA "support" from BDB backend 
  - perl dep extractor heredoc parsing improvements (#524929)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.1-8
changelog:
  - support multiple python implementations in brp-python-bytecompile (#531117)
  - make disk space problem reporting a bit saner (#517418)


author: Panu Matilainen <pmatilai@redhat.com> - 4.7.2-2
changelog:
  - missing error exit code from signing password checking (#496754)
  - dont fail build on unrecognized data files (#532489)
  - dont try to parse subkeys and secret keys (#436812)
  - fix chmod test on selinux, breaking %{_fixperms} macro (#543035)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.1
changelog:
  - update to 4.8.0-beta1 (http://rpm.org/wiki/Releases/4.8.0)
  - rpm-build conflicts with current ocaml-runtime


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-0.beta1.2
changelog:
  - fix noise from python bytecompile on non-python packages (#539635)
  - make all our -devel [build]requires isa-specific
  - trim out superfluous -devel dependencies from rpm-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-3
changelog:
  - fix segfault on failed url retrieval
  - fix verification error code depending on verbosity level
  - if anything in testsuite fails, dump out the log


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-8
changelog:
  - more fixes to postscript provides extractor (#562228)
  - avoid accessing unrelated mount points in disk space checking (#547548)
  - fix disk space checking with erasures present in transaction (#561160)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-11
changelog:
  - support single PPD providing driver for devices (#568351)
  - merge the psdriver patch pile into one
  - preserve empty lines in spec prep section (#573339)
  - teach python bindings about RPMTRANS_FLAG_NOCONTEXTS (related to #573111)
  - dont own localized man directories through find_lang (#569536)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-15
changelog:
  - handle non-existent dependency sets correctly in python (#593553)
  - make find-lang look in all locale dirs (#584866)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.0-16
changelog:
  - adjust to new pkg-config behavior wrt private dependencies (#596433)
  - rpm-build now requires pkgconfig >= 0.24


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-1
changelog:
  - update to 4.8.1 (http://rpm.org/wiki/Releases/4.8.1)
  - drop no longer needed patches
  - fix source url pointing to testing directory


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-2
changelog:
  - fix a potential getOutputFrom() error from font provide extraction
  - debug-friendlier message to aid finding other similar cases (#565223)


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-5
changelog:
  - create gdb index on debuginfo generation (#617166)
  - rpm-build now requires /usr/bin/gdb-add-index for consistent index creation
  - include COPYING in -apidocs for licensing guidelines compliance


author: Panu Matilainen <pmatilai@redhat.com> - 4.8.1-7
changelog:
  - bunch of spec tweaks, cleanups + corrections:
    - shorten rpm-build filelist a bit with glob use, reorder for saner grouping
    - missing isa in popt version dependency
    - only add rpmdb_foo symlinks for actually relevant db_* utils
    - drop no longer necessary file-devel dependency from rpm-devel
    - drop sqlite backend build-conditional
    - preliminaries for moving from db4 to libdb
  - use gnupg2 for signing as that's more likely to be installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.1
changelog:
  - rpm 4.9.0-beta1 (http://rpm.org/wiki/Releases/4.9.0)
    - drop no longer needed patches
    - adjust requires + buildrequires to match current needs
    - adjust rpmdb index ghosts to match the new release
    - split librpmbuild and librpmsign to a separate rpm-build-libs package
    - split rpmsign to its own package to allow signing without all the build goo
    - build-conditionalize plugins, disabled for now
    - gstreamer and printer dependency generation moving out
    - handle .so symlink dependencies with fileattrs
    - use gnupg2 for signing as that's what typically installed by default


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.3
changelog:
  - avoid division by zero in rpmdb size calculation (#671056)
  - fix secondary index iteration returing duplicate at end (#671149)
  - fix rebuilddb creating duplicate indexes for first header


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.beta1.5
changelog:
  - dont try to remove environment files if private env used (related to #671200)
  - unbreak mono dependency extraction (#673663)
  - complain instead of silent abort if cwd is not readable (#672576)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.1
changelog:
  - update to 4.9.0-rc1
  - drop upstream patches
  - nss packaging has changed, buildrequire nss-softokn-freebl-devel


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-0.rc1.4
changelog:
  - spec cosmetics clean up extra whitespace + group more logically
  - wipe out BDB environment at boot via tmpfiles.d


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-5
changelog:
  - verify some properties of replaced and wrong-colored files (#528383)
  - only list packages that would be generated on spec query (#693338)
  - preferred color packages should be erased last (#680261)
  - fix leaks when freeing a populated transaction set
  - take file state into account for file dependencies


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-8
changelog:
  - add dwarf-4 support to debugedit (#707677)
  - generate build-id symlinks for all filenames sharing a build-id (#641377)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.0-9
changelog:
  - fix crash if prep or changelog section in spec is empty (#706959)
  - fix crash on macro which undefines itself
  - fix script dependency generation with file 5.07 string changes (#712251)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-3
changelog:
  - adjust db util prefix & dependency due to #749293
  - warn but dont fail the build if STABS encountered by debugedit (#725378)


author: Kay Sievers <kay@redhat.com> - 4.9.1.2-8
changelog:
  - add temporary rpmlib patch to support filesystem transition
    https://fedoraproject.org/wiki/Features/UsrMove


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.1.2-13
changelog:
  - fix memory corruption on rpmdb size estimation (#766260)
  - fix couple of memleaks in python bindings (#782147)
  - fix regression in verify output formatting (#797964)
  - dont process spec include in false branch of if (#782970)
  - only warn on missing excluded files on build (#745629)
  - dont free up file info sets on test transactions


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11505.5
changelog:
  - add temporary fake library provides to get around deltarpm "bootstrap"
    dependency (yes its dirty)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11519.1
changelog:
  - newer git snapshot to keep patch-count down
  - fixes CVE-2012-0060, CVE-2012-0061 and CVE-2012-0815
  - fix obsoletes in installing set getting matched on provides (#810077)


author: Panu Matilainen <pmatilai@redhat.com> - 4.9.90-0.git11536.1
changelog:
  - newer git snapshot (#809402, #808750)
  - adjust posttrans script wrt bdb string change (#803866, #805613)


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.1
changelog:
  - update to 4.11 (http://rpm.org/wiki/Releases/4.11.0) post-alpha snapshot
  - drop/adjust patches as necessary


author: Panu Matilainen <pmatilai@redhat.com> - 4.10.90-0.git11989.3
changelog:
  - package /usr/lib/rpm/macros.d directory (related to #846679)
  - fixup a bunch of old incorrect dates in spec changelog


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.0-0.beta1.2
changelog:
  - armv7hl and armv7hnl should not have -mthumb (#901901)
  - fix duplicate directory ownership between rpm and rpm-build (#894201)
  - fix regression on paths shared between a real file/dir and a ghost


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-7
changelog:
  - fix build-time double-free on file capability processing (#956190)
  - fix relocation related regression on file sanity check (#1001553)
  - fix segfault on empty -p <lua> scriptlet body (#1004062)
  - fix source url, once again


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.1-11
changelog:
  - generate kmod(module.ko) provides for kernel (#1025513)
  - dont override CONFIG_SITE if already set (related to #962837)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-0.rc1.1
changelog:
  - update to 4.11.2-rc1 (http://rpm.org/wiki/Releases/4.11.2)
  - drop upstreamed patches, adjust others as needed
  - handle python egg-info's version munging in file lists


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-3
changelog:
  - dont eat newlines on parametrized macro invocations (#1045723)
  - fully reset file actions between rpmtsRun() calls (#1076552)
  - fix build and sign module initialization in python3 (#1064758)


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.2-6
changelog:
  - build with -fsanitize=address and -fsanitize=undefined for now
  - add spec build conditional for sanitizer build


author: Tom Callaway <spot@fedoraproject.org> - 4.11.2-10
changelog:
  - remove _isa from all BuildRequires (bz 554854)
    See: https://fedoraproject.org/wiki/Packaging:Guidelines#BuildRequires_and_.25.7B_isa.7D


author: Panu Matilainen <pmatilai@redhat.com> - 4.11.90-0.git12844.1
changelog:
  - Update to rpm 4.12-alpha ((http://rpm.org/wiki/Releases/4.12.0)
  - Drop/adjust patches as appropriate
  - New sub-package(s) for plugins


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0-0.beta1.1
changelog:
  - Update to 4.12.0-beta1 (http://rpm.org/wiki/Releases/4.12.0)
  - Fixes #1122004, #1111349, #1117912, #1123722
  - Drop upstreamed patches


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-1
changelog:
  - Update to rpm-4.12.0.1 final (http://rpm.org/wiki/Releases/4.12.0.1)
  - Temporary workaround payload size mismatch issue in rpm2cpio (#1142949)


author: Panu Matilainen <pmatilai@redhat.com> - 4.12.0.1-3
changelog:
  - Skip ghost files in payload (#1156497)
  - Fix size and archice size tag generation on big-endian systems


author: Lubos Kardos <lkardos@redhat.com> - 4.12.0.1-5
changelog:
  - Add check against malicious CPIO file name size (#1168715)
  - Fixes CVE-2014-8118
  - Fix race condidition where unchecked data is exposed in the file system
    (#1039811)
  - Fixes CVE-2013-6435


author: Lubos Kardos <lkardos@redhat.com> 4.12.0-11
changelog:
  - Pass _find_debuginfo_opts -g to eu-strip for executables (#1186563)
  - add_minidebug is not ran when strip_g is set (#1186563)


author: Lubos Kardos <lkardos@redhat.com> - 4.12.90-5
changelog:
  - If globbing of a filename fails, try use the filename without globbing.
    (#1246743)
  - Modify rpmIsGlob() to be more precise and compatible with glob().
    (#1246743)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.6
changelog:
  - If %_wrong_version_format_terminate_build is 1 then terminate build in case
    that version format is wrong i. e. epoch is not unsigned integer or version
    contains more separators (":", "-"). %_wrong_version_format_terminate_build
    is 1 by deafault (#1265700)


author: Lubos Kardos <lkardos@redhat.com> - 4.13-0.rc1.7
changelog:
  - Fix reading a memory right after the end of an allocated area (#1260248)
  - Add support for various types of dependencies to rpmdeps tool (#1247092)
  - fix %autopatch when patch do not exist (#1244172)


author: Lubos Kardos <lkardos@rpm.org> - 4.13.0-0.rc1.13
changelog:
  - Add possibility to disable file triggers
  - Fix unwanted multiple execution of filetriggers in dnf (#1282115)


author: Lubos Kardos <lkardos@redhat.com> - 4.13.0-0.rc1.20
changelog:
  - Revert using %configure, it causes problems
  - Temporary set %_gnu macro explictly, just for one build (#1303265)


author: Florian Festi <ffesti@rpm.org> - 4.13.0-0.rc1.24
changelog:
  - Also block idle and sleep in the systemd-inhibit plugin (#1297984)
  - Add support for MIPS release 6
  - Add mips32 mips64 mipsel and mipseb macros (#1285116)


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.31
changelog:
  - Enable --no-backup-if-mismatch by default in %patch macro (#884755)
  - Add %{_default_patch_flags} to %__patch which is used in %autosetup
  - Use fuzz settings for %autopatch/%autosetup


author: Lubos Kardos <lkardos@redhat.com> 4.13.0-0.rc1.33
changelog:
  - Fix sigsegv in stringFormat() (#1316903)
  - Fix reading rpmtd behind its size in formatValue() (#1316896)


author: Igor Gnatenko <ignatenko@redhat.com> - 4.13.0-0.rc1.41
changelog:
  - Add %{?system_python_abi}
  - rpm-python -> python2-rpm && rpm-python3 -> python3-rpm with providing old names
  - Fixes and cleanups


author: Thierry Vignaud <tvignaud@redhat.com> - 4.13.0-2
changelog:
  - Fix package name references in python sub-packages to match reality
  - Re-enable test-suite now that it works again


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0-11
changelog:
  - Fix malformed packages being generated around 4GB boundary (#1405570)
  - Resurrect debuginfo GDB index generation (#1410907)


author: Mark Wielaard <mjw@redhat.com> - 4.13.0.1-13
changelog:
  - Add tests fix for sed file build-id regexp matching.
  - Add fix for build-ids in non-executable ELF files (#1433837).


author: Panu Matilainen <pmatilai@redhat.com> - 4.13.0.1-17
changelog:
  - Work around missing python[23] during build dependency parse
  - Include ISA in the new python library version dependencies too


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-19
changelog:
  - Minisymtab should only be added for executables or shared libraries.
  - Add find-debuginfo.sh -n (debugedit --no-recompute-build-id) option.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-25
changelog:
  - Add support for debugsource and debuginfo subpackages
    - find-debuginfo-untangle-unique-build-options.patch
    - debugsrc-and-sub-debuginfo-packages.patch


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-28
changelog:
  - Add debugedit-prefix.patch.
  - Add find-debuginfo-filter-built-ins.patch.
  - Add find-debuginfo-dwz-multi.patch.
  - Add find-debuginfo-and-macro-docs.patch.


author: Mark Wielaard <mjw@fedoraproject.org> - 4.13.0.1-29
changelog:
  - Track patches using https://pagure.io/rpm-fedora
  - Use file list to explicitly set mode for build-id dirs/files
    (#1452893, #1458839)


author: Miro Hrončok <mhroncok@redhat.com> - 4.13.90-0.git14000.4
changelog:
  - Add platform-python bytecompilation patch: platform-python-bytecompile.patch
  - Add platform python deps generator patch: platform-python-abi.patch
  - Add a platform-python subpackage and remove system python related declarations
  - Build rpm without platform_python for bytecompilation
    (https://fedoraproject.org/wiki/Changes/Platform_Python_Stack)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.1
changelog:
  - Rebase to rpm 4.14.0-rc1 (http://rpm.org/wiki/Releases/4.14.0)
  - Re-enable SHA256 header digest generation (see #1480407)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.0-0.rc1.2
changelog:
  - Actually honor with/without libimaevm option
  - ima-evm-utils-devel >= 1.0 is required for rpm >= 4.14.0


author: Tomas Orsava <torsava@redhat.com> - 4.14.1-5
changelog:
  - Add envvar that will be present during RPM build,
    Part of a Fedora Change for F28: "Avoid /usr/bin/python in RPM build"
    https://fedoraproject.org/wiki/Changes/Avoid_usr_bin_python_in_RPM_Build


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.1-6
changelog:
  - Avoid unnecessary macro helper dependency on /usr/bin/python (#1538657)
  - Fix release of previous changelog entry


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-0.rc2.1
changelog:
  - Update to rpm 4.14.2-rc2
  - Fixes a regression in rpmlog error handling (#1597274)
  - Fixes several resource leaks found by covscan (#1602681)
  - Fixes DISTTAG not getting copied to source rpms (#1596193)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-1
changelog:
  - Buildrequire audit-libs-devel to actually enable the feature (#1607612)
  - Update to rpm 4.14.2 final (http://rpm.org/wiki/Releases/4.14.2)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-7
changelog:
  - Move python-macro-helper to main package where the macros are (#1651926)
  - Document --noverify in the man page (#1646458)
  - Handle unsupported digests the same as disabled ones (#1652529)


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-11
changelog:
  - Revised patch for Py3 string data as surrogate-escaped utf-8 (#1631292)
  - Add a .decode() method to returned Py3 strings for compatibility


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-14
changelog:
  - Verify packages before signing (#1646388)
  - Make rpmsign exist values more consistent with our other tools


author: Florian Festi <ffesti@redhat.com> - 4.14.2-16
changelog:
  - Sort list of hard linked files in find-debuginfo.sh (#1421272)
  - Correct rpm -ql exit value when optional -p is omitted (#1680610)
  - Show list of files only once when use rpm -ql and multiple rpm files (#1689898)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-23
changelog:
  - Use --dpbath only with full path (#1696408)
  - Fix memory leaks (#1714657)
  - Remove capabilities instead of setting empty caps via. --setcaps (#1700920)
  - Fix bash warning from solution for #1689810


author: Panu Matilainen <pmatilai@redhat.com> - 4.14.2-27
changelog:
  - Support generating build-id's from compressed ELF files (#1650074)
  - Compress annobit notes in find-debuginfo (#1719837)


author: Florian Festi <ffesti@redhat.com> - 4.14.2-31
changelog:
  - Parallelize /usr/lib/rpm/brp-strip-static-archive (#1691824)
  - Parallelize /usr/lib/rpm/check-buildroot (#1704354)


author: Florian Festi <ffesti@redhat.com> - 4.14.3-5
changelog:
  - Don't error out when replacing an invalid signature (#1874062)
  - Raise an expection when erasing a package fails in Python (#1872623)
  - Fix builds on NFS filesystems (#1840728)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-12
changelog:
  - Bump up the limit of signature header to 64MB (#1918777)
  - Add fapolicyd plugin (#1923167)
  - Unblock signals in forked scriptlets (#1913765)
  - Fix ambiguous diagnostics output on file triggers (#1883338)
  - Ensure ELF files get stripped when debuginfo is disabled (#1634084)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-13
changelog:
  - Fix minor issues found by COVSCAN in fapolicyd plugin
  - Actually honor libarchive bcond at configure time (#1902887)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-15
changelog:
  - Add out-of-bounds checks to hdrblobInit() (#1929445)
  - Fixes CVE-2021-20266
  - Fix regression in brp-strip causing kmods to lose SecureBoot sig (#1967291)


author: Michal Domonkos <mdomonko@redhat.com> - 4.14.3-16
changelog:
  - Add support for read-only sqlite rpmdb (#1938928)
  - Drop compat .decode() method from returned Py3 strings (#1840142)


author: Jarod Wilson <jarod@redhat.com> - 5-4
changelog:
  - Make hooks more resilient to missing info
  - Error out with a useful message when necessary info isn't there
  - Resolves: rhbz#1627122


author: Thomas Woerner <twoerner@redhat.com> - 8.10-7
changelog:
  - removed fakeroot requirement and all qa_robot scripts (RHBZ#1615605)
  - Fixed missing build requires for python3-devel


author: Michal Domonkos <mdomonko@redhat.com> - 8.10-8
changelog:
  - spectool: ignore query string in URL (RHBZ#1826299)
  - Fix TypeError in rpmdev-rmdevelrpms and rpmdev-checksig (RHBZ#1851499)


author: Todd Zullinger <tmz@pobox.com> - 1.10-9
changelog:
  - Update UsrLibBinaryException config to include .build-id
  - Ignore useless-provides on debuginfo provides (bz1489096)


author: Thomas Woerner <twoerner@redhat.com> - 1.10.13.1
changelog:
  - Fix unit test: use platform-python, py.test-3, no flake8 (RHBZ#1576803)
  - Update of ValidShells (RHBZ#1633698)
  - Remove Python2 paths from TagsCheck.py (RHBZ#1633698)
  - Enable bash-competion scripts (RHBZ#1577890)


author: Liming Sun <lsun@mellanox.com> - 2.0.2-1
changelog:
  - Remove unnecessary dependency in .spec and use make_build
  - Add package build for debian/ubuntu
  - Fix some format in the man page
  - Add check for syslog headers


author: Liming Sun <lsun@mellanox.com> - 2.0.3-1
changelog:
  - Enable pci device during probing
  - Map the pci resource0 file instead of /dev/mem
  - Add copyright header in bootstrap.sh
  - Add 'Requires' tag check in the rpm .spec for kernel-modules-extra
  - Fix the 'rshim --version' output


author: Liming Sun <lsun@mellanox.com> - 2.0.4-1
changelog:
  - Update .spec file according to review comments
  - Fix the 'KillMode' in rshim.service
  - Support process termination by SIGTERM
  - Fix some compiling warnings and configure issue for FreeBSD
  - Fix a read()/write() issue in rshim_pcie.c caused by optimization


author: Dean Nelson <dnelson@redhat.com> - 2.0.4-4
changelog:
  - Expose gating.yaml file in order to enable manual CI gating for rshim
    in RHEL-8.4, by bumping release and doing a Brew build.
  - Partially resolves: rhbz#1912248


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-1
changelog:
  - Update user-space rshim driver source to version 2.0.5.
  - Modify rshim.spec accordingly.
  - Resolves: rhbz#1950425


author: Dean Nelson <dnelson@redhat.com> - 2.0.5-2
changelog:
  - Add sysconfig/rshim file and update rshim.service to source it.
  - jbastian made the first cut of this patch, which needed to be
    modified due to the update to 2.0.5. And I chose to go with
    %autosetup to handle Patch0, instead of sticking with %setup.
  - Resolves: rhbz#1946349


author: Dean Nelson <dnelson@redhat.com> - 2.0.8-1
changelog:
  - Update user-space rshim driver source to version 2.0.8
  - Modify rshim.spec accordingly
  - Resolves: rhbz#2196852


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-9
changelog:
  - Add deleteStateOnFileMove imfile module option
    resolves: rhbz#1909639
  - Add inotify_rm_watch() inotify API call when object needs to be destroyed
    resolves: rhbz#2052403


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-10
changelog:
  - openssl: Correct gnutlsPriorityString (custom ciphers) behaviour
  - Fix error handling in gtlsRecordRecv that can cause 100 percent CPU usage
    resolves: rhbz#2046158
  - Address CVE-2022-24903, Heap-based overflow in TCP syslog server
    resolves: rhbz#2081401


author: Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
changelog:
  - Make rsyslog-relp require librelp>= 1.9.0
    resolves: rhbz#2029352
  - Reorder logrotate parameters to work with POSIXLY_CORRECT env var
    resolves: rhbz#2070496


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-14
changelog:
  - Fix wrong type conversion in cstrLen()
    resolves: rhbz#2157804
  - imjournal: by default retrieves _PID from journal as PID number
    resolves: rhbz#2176398
  - Systemd service file hardening
    resolves: rhbz#2176404


author: Attila Lakatos <alakatos@redhat.com> - 8.2102.0-15
changelog:
  - omelasticsearch: make compatible with elasticsearch>=8
  - add new action specific parameter esversion.major
    resolves: rhbz#2192955


author: Stephen Gallagher <sgallagh@redhat.com> - 0.11-15
changelog:
  - Temporarily disable -Werror=format-security to unbreak the build
  - Build with verbose command-line visible in the logs
  - Resolves: rhbz#1424270


author: John Kacur <jkacur@redhat.com> - 5.14.0-3
changelog:
  - Fix exit status when returning from calls to usage()
  Resolves: rhbz#2161423
  jiraProject == RHELPLAN-145250


author: John Kacur <jkacur@redhat.com> - 5.14.0-6
changelog:
  - Forward port the tests directory for ci testing
  Resolves: rhbz#2196611
  jiraProject == RHELPLAN-156801


author: John Kacur <jkacur@redhat.com> - 6.6.0-1
changelog:
  Update to rtla in linux-6.6.0
  - Add patch to use SYS_gettid and add -lpthread to the Makefile
  Resolves: RHEL-10081


author: Pavel Valena <pvalena@redhat.com> - 2.5.9-107
changelog:
  - Update to Ruby 2.5.9.
    * Remove Patch20: ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch; subsumed
    Resolves: rhbz#1757844
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1950308


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-108
changelog:
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix StartTLS stripping vulnerability in Net::IMAP
    Resolves: CVE-2021-32066
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810


author: Jun Aruga <jaruga@redhat.com> - 2.5.9-110
changelog:
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.
  - Fix by adding length limit option for methods that parses date strings.
    Resolves: CVE-2021-41817
  - CGI::Cookie.parse no longer decodes cookie names to prevent spoofing security
    prefixes in cookie names.
    Resolves: CVE-2021-41819


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-111
changelog:
  - Fix HTTP response splitting in CGI.
    Resolves: CVE-2021-33621
  - Fix Buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix ReDoS vulnerability in URI.
    Resolves: CVE-2023-28755
  - Fix ReDoS vulnerability in Time.
    Resolves: CVE-2023-28756


author: Jarek Prokop <jprokop@redhat.com> - 2.5.9-112
changelog:
  - Fix ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755.
    (CVE-2023-36617)
    Resolves: RHEL-5614
  - Fix Buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-34125
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-34117
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-33867
  - Fix REXML DoS parsing an XML with many `<`s in an attribute value.
    (CVE-2024-35176)
    Resolves: RHEL-37877


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 2.5.9-113.0.1
changelog:
  - Fix FTBFS due to glibc 2.31.9000 implementing lchmod(2), compatible with glibc2.28 also
    * Patch: ruby-2.8.0-Brace-the-fact-that-lchmod-can-EOPNOTSUPP.patch
    * Patch: ruby-2.8.0-Moved-not-implemented-method-tests.patch
  - Avoid possible timeout errors in TestBugReporter#test_bug_reporter_add.
    * Patch: ruby-2.7.1-Timeout-the-test_bug_reporter_add-witout-raising-err.patch


author: Toru Hoshina <hoshina@best.com>
changelog:
  - Modified SPEC in order to install libruby.a so that it should be used by
    another ruby entention.
  - 2nd release.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/12/2000 CVS).
  - Added manuals and FAQs.
  - Split into ruby, ruby-devel, ruby-tcltk, ruby-docs, irb.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/20/2000 CVS).
  - Removed ruby-list.23190.patch(included into ruby_cvs.patch).
  - Added ruby-dev.10054.patch.


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.4(06/22/2000 CVS).
  - Removed ruby-dev.10054.patch(included into ruby_cvs.patch).


author: akira yamada <akira@redhat.com>
changelog:
  - Updated to version 1.4.6.
  - removed ruby-dev.10123.patch(included into ruby-1.4.6).
  - Added ruby_cvs.2000082901.patch(upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Updated to upstream version 1.6.1.
  - Removed ruby_cvs.2000082901.patch and added ruby_cvs.2000092718.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000092718.patch and added ruby_cvs.2000100218.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100218.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000100313.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000100313.patch and added ruby_cvs.2000101117.patch
    (upgraded ruby to latest cvs version).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101117.patch and added ruby_cvs.2000101901.patch
    (upgraded ruby to latest cvs version).
  - Added ruby-dev.11262.patch.
  - Added ruby-dev.11265.patch.


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000101901.patch, added ruby_cvs.2000121413.patch
    (upgraded ruby to latest cvs version).
  - Removed ruby-dev.11262.patch, ruby-dev.11265.patch,
    and ruby-dev.11268.patch (included into above patch).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000121413.patch, added ruby_cvs.2000122019.patch
    (upgraded ruby to latest cvs version).
  - new package: libruby


author: akira yamada <akira@vinelinux.org>
changelog:
  - Removed ruby_cvs.2000122019.patch, added ruby_cvs.2000122215.patch
    (upgraded ruby to latest cvs version, 1.6.2-preview4).


author: akira yamada <akira@vinelinux.org>
changelog:
  - Applied patch: upgraded to cvs version (2001-01-15):
    fixed minor bugs(e.g. ruby makes extention librares too large...).


author: akira yamada <akira@vinelinux.org>
changelog:
  - fixed bad group for libruby.
  - Applied patch: upgraded to cvs version (2001-02-08):
    fixed minor bugs.


author: Bernhard Rosenkraenzer <bero@redhat.com> 1.6.4-2
changelog:
  - Remove Japanese description and summaries; they belong in specspo and
    break rpm
  - Clean up specfile
  - Mark language specific files (README.jp) as such
  - bzip2 sources
  - rename the libruby package to ruby-libs for consistency
  - Exclude ia64 (doesn't build - the code doesn't seem to be 64-bit clean
    [has been excluded on alpha forever])


author: Akira TAGOH <tagoh@redhat.com> 1.6.6-1
changelog:
  - New upstream release.
  - Applied bug fix patches:
    - ruby-1.6.6-501-ruby-mode.patch: ruby-talk#30479: disables font-lock
      coloring.
    - ruby-1.6.6-100.patch: ruby-talk#30203: Ruby 1.6.6 bug and fix
                            ruby-list#33047: regex bug
                            PR#230: problem with -d in 1.6.6
  - Added ruby-mode and ruby-mode-xemacs packages.
  - Ruby works fine for ia64. so re-enable to build with ia64.
    (probably it should be worked for alpha)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-1
changelog:
  - New upstream release.
  - ruby-1.6.6-100.patch, ruby-1.6.6-501-ruby-mode.patch:
    removed. these patches no longer should be needed.
  - ruby-1.6.7-500-marshal-proc.patch: applied a fix patch.
    (ruby-dev#16178: Marshal::dump should call Proc#call.)
  - ruby-1.6.7-501-class-var.patch: applied a fix patch.
    (ruby-talk#35157: class vars broken in 1.6.7)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-2
changelog:
  - ruby-man-1.4.6-jp.tar.bz2: removed.
  - ruby-refm-rdp-1.4.7-ja-html.tar.bz2: uses it instead of.
  - ruby-1.6.7-500-marshal-proc.patch, ruby-1.6.7-501-class-var.patch:
    removed.
  - ruby-1.6.7-100.patch: applied a bug fix patch.
    (ruby-dev#16274: patch for 'wm state')
    (PR#206ja: SEGV handle EXIT)
  - ruby-1.6.7-101.patch: applied a bug fix patch.
    (ruby-list#34313: singleton should not be Marshal.dump'ed)
    (ruby-dev#16411: block local var)
  - ruby-1.6.7-102.patch: applied a bug fix patch.
    (handling multibyte chars is partially broken)
  - ruby-1.6.7-103.patch: applied a bug fix patch.
    (ruby-dev#16462: preserve reference for GC, but link should be cut)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-10
changelog:
  - moved sitedir to /usr/lib/ruby/site_ruby again according as our perl and
    python.
  - ruby-1.6.7-resolv1.patch, ruby-1.6.7-resolv2.patch: applied to fix 'Too many
    open files - "/etc/resolv.conf"' issue. (Bug#64830)


author: Akira TAGOH <tagoh@redhat.com> 1.6.7-11
changelog:
  - use %configure macro instead of configure script.
  - use the latest config.{sub,guess}.
  - get archname from rbconfig.rb for %dir
  - applied some patches from Debian:
    - 801_extmk.rb-shellwords.patch: use Shellwords
    - 801_mkmf.rb-shellwords.patch: mkmf.rb creates bad Makefile. the Makefile
      links libruby.a to the target.
    - 803_sample-fix-shbang.patch: all sample codes should be
      s|/usr/local/bin|/usr/bin|g
    - 804_parse.y-new-bison.patch: fix syntax warning.
    - 805_uri-bugfix.patch: uri.rb could not handle correctly broken mailto-uri.
  - add ExcludeArch x86_64 temporarily to fix Bug#74581. Right now ruby can't be
    built on x86_64.


author: Elliot Lee <sopwith@redhat.com> 1.6.7-13
changelog:
  - Remove ExcludeArch: x86_64
  - Fix x86_64 ruby with long2int.patch (ruby was assuming that sizeof(long)
    == sizeof(int). The patch does not fix the source of the problem, just
    makes it a non-issue.)
  - _smp_mflags


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-1
changelog:
  - New upstream release.
  - removed some patches. it's no longer needed.
    - ruby-1.6.7-100.patch
    - ruby-1.6.7-101.patch
    - ruby-1.6.7-102.patch
    - ruby-1.6.7-103.patch
    - 801_extmk.rb-shellwords.patch
    - 801_mkmf.rb-shellwords.patch
    - 804_parse.y-new-bison.patch
    - 805_uri-bugfix.patch
    - ruby-1.6.6-900_XXX_strtod.patch
    - ruby-1.6.7-sux0rs.patch
    - ruby-1.6.7-libobj.patch


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-2
changelog:
  - ruby-1.6.8-require.patch: applied to fix the search bug in require.
  - don't apply long2int patch to s390 and s390x. it doesn't work.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-7
changelog:
  - fix the gcc warnings. (#82192)
  - ruby-1.6.8-fix-x86_64.patch: correct a patch.
    NOTE: DON'T USE THIS PATCH FOR BIG ENDIAN ARCHITECTURE.
  - ruby-1.6.7-long2int.patch: removed.


author: Akira TAGOH <tagoh@redhat.com> 1.6.8-9
changelog:
  - ruby-1.6.8-castnode.patch: handling the nodes with correct cast.
    use this patch now instead of ruby-1.6.8-fix-x86_64.patch.


author: Akira TAGOH <tagoh@redhat.com> 1.8.1-1
changelog:
  - New upstream release.
  - don't use any optimization for ia64 to avoid the build failure.
  - ruby-1.8.1-ia64-stack-limit.patch: applied to fix SystemStackError when the optimization is disabled.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.1-9
changelog:
  - ruby-1.8.1-cgi-dos.patch: security fix [CAN-2004-0983]
  - ruby-1.8.1-cgi_session_perms.patch: security fix [CAN-2004-0755]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-1
changelog:
  - New upstream release.
  - ruby-1.8.1-ia64-stack-limit.patch: removed - it's no longer needed.
  - ruby-1.8.1-cgi_session_perms.patch: likewise.
  - ruby-1.8.1-cgi-dos.patch: likewise.
  - generated Ruby interactive documentation - senarated package.
    it's now provided as ri package. (#141806)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-7
changelog:
  - ruby-1.8.2-deadcode.patch: removed the dead code from the source. (#146108)
  - make sure that all documentation files in ruby-docs are the world-
    readable. (#147279)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.2-9
changelog:
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: fixed the arbitrary command execution
    on XMLRPC server. (#161096)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-1
changelog:
  - New upstream release.
  - Build-Requires xorg-x11-devel instead of XFree86-devel.
  - ruby-multilib.patch: applied for only 64-bit archs.
  - ruby-1.8.2-xmlrpc-CAN-2005-1992.patch: removed. it has already been in upstream.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-3
changelog:
  - fixed the wrong file list. the external library for tcl/tk was included
    in ruby-libs unexpectedly.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.3-4
changelog:
  - moved the documents from ruby-libs to ruby-docs, which contains the arch
    specific thing and to be multilib support. (#168826)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-0.4.preview2
changelog:
  - updates to 1.8.4-preview2.
  - renamed the packages to ruby-* (#175765)
    - irb  -> ruby-irb
    - rdoc -> ruby-rdoc
    - ri   -> ruby-ri
  - added tcl-devel and tk-devel into BuildRequires.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-1
changelog:
  - New upstream release.
    - fixed a missing return statement. (#140833)
    - fixed an use of uninitialized variable. (#144890)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-3
changelog:
  - ruby-1.8.4-no-eaccess.patch: backported from ruby CVS to avoid conflict
    between newer glibc. (#179835)


author: Akira TAGOH <tagoh@redhat.com>
changelog:
  - ruby-rubyprefix.patch: moved all arch-independent modules under /usr/lib/ruby
    and keep arch-dependent modules under /usr/lib64/ruby for 64bit archs.
    so 'rubylibdir', 'sitelibdir' and 'sitedir' in Config::CONFIG points to
    the kind of /usr/lib/ruby now. (#184199)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-6
changelog:
  - ruby-deprecated-search-path.patch: added the deprecated installation paths
    to the search path for the backward compatibility.
  - added a Provides: ruby(abi) to ruby-libs.
  - ruby-1.8.4-64bit-pack.patch: backport patch from upstream to fix unpack("l")
    not working on 64bit arch and integer overflow on template "w". (#189350)
  - updated License tag to be more comfortable, and with a pointer to get more
    details, like Python package does. (#179933)
  - clean up.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-7
changelog:
  - exclude ppc64 to make ruby-mode package. right now emacs.ppc64 isn't provided
    and buildsys became much stricter.
  - ruby-deprecated-sitelib-search-path.patch: applied to add more search path
    for backward compatiblity.
  - added byacc to BuildReq. (#194161)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.4-11
changelog:
  - security fixes [CVE-2006-3694]
    - ruby-1.8.4-fix-insecure-dir-operation.patch:
    - ruby-1.8.4-fix-insecure-regexp-modification.patch: fixed the insecure
      operations in the certain safe-level restrictions. (#199538)
    - ruby-1.8.4-fix-alias-safe-level.patch: fixed to not bypass the certain
      safe-level restrictions. (#199543)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-1
changelog:
  - New upstream release.
  - removed the unnecessary patches:
    - ruby-1.8.4-no-eaccess.patch
    - ruby-1.8.4-64bit-pack.patch
    - ruby-1.8.4-fix-insecure-dir-operation.patch
    - ruby-1.8.4-fix-insecure-regexp-modification.patch
    - ruby-1.8.4-fix-alias-safe-level.patch
  - build with --enable-pthread except on ppc.
  - ruby-1.8.5-hash-memory-leak.patch: backported from CVS to fix a memory leak
    on Hash. [ruby-talk:211233]


author: Akira TAGOH <tagoh@redhat.com> - 1.8.5-4
changelog:
  - security fix release.
  - ruby-1.8.5-cgi-CVE-2006-5467.patch: fix a CGI multipart parsing bug that
    causes the denial of service. (#212396)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.36-3
changelog:
  - ruby-r12567.patch: backport patch from upstream svn to get rid of
    the unnecessary declarations. (#245446)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-1
changelog:
  - New upstream release.
    - ruby-r12567.patch: removed.
  - ruby-1.8.6-CVE-2007-5162.patch: security fix for Net::HTTP that is
    insufficient verification of SSL certificate.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.110-2
changelog:
  - Enable pthread support for ppc too. (#201452)
  - Fix unexpected dependencies appears in ruby-libs. (#253325)


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-1
changelog:
  - New upstream release.
  - ruby-1.8.6.111-CVE-2007-5162.patch: Update a bit with backporting the changes
     at trunk to enable the fix without any modifications on the users' scripts.
     Note that Net::HTTP#enable_post_connection_check isn't available anymore.
     If you want to disable this post-check, you should give OpenSSL::SSL::VERIFY_NONE
     to Net::HTTP#verify_mode= instead of.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.111-3
changelog:
  - Clean up the spec file.
  - Remove ruby-man-1.4.6 stuff. this is entirely the out-dated document.
    this could be replaced by ri.
  - Disable the static library building.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.114-1
changelog:
  - Security fix for CVE-2008-1145.
  - Improve a spec file. (#226381)
    - Correct License tag.
    - Fix a timestamp issue.
    - Own a arch-specific directory.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-1
changelog:
  - New upstream release.
  - Security fixes. (#452295)
    - CVE-2008-1891: WEBrick CGI source disclosure.
    - CVE-2008-2662: Integer overflow in rb_str_buf_append().
    - CVE-2008-2663: Integer overflow in rb_ary_store().
    - CVE-2008-2664: Unsafe use of alloca in rb_str_format().
    - CVE-2008-2725: Integer overflow in rb_ary_splice().
    - CVE-2008-2726: Integer overflow in rb_ary_splice().
  - ruby-1.8.6.111-CVE-2007-5162.patch: removed.
  - Build ruby-mode package for all archtectures.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.230-3
changelog:
  - Backported from upstream SVN to fix a segfault issue. (#452825)
  - Backported from upstream SVN to fix an integer overflow in rb_ary_fill.


author: Akira TAGOH <tagoh@redhat.com> - 1.8.6.287-1
changelog:
  - New upstream release.
  - Security fixes.
    - CVE-2008-3655: Ruby does not properly restrict access to critical
                     variables and methods at various safe levels.
    - CVE-2008-3656: DoS vulnerability in WEBrick.
    - CVE-2008-3657: Lack of taintness check in dl.
    - CVE-2008-1447: DNS spoofing vulnerability in resolv.rb.
    - CVE-2008-3443: Memory allocation failure in Ruby regex engine.
  - Remove the unnecessary backported patches.


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-4
changelog:
  - Use bison to regenerate parse.c to keep the original format of error
    messages (bug 530275 comment 4)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.383-5
changelog:
  - Change mkmf.rb to use LIBRUBYARG_SHARED so that have_library() works
    without libruby-static.a (bug 428384)
  - And move libruby-static.a to -static subpackage


author: Jeroen van Meeuwen <j.van.meeuwen@ogd.nl> - 1.8.6.388-8
changelog:
  - Backport openssl/digest functions providing digest and hexdigest functions
    directly in OpenSSL::Digest.methods
  - Make sure that Red Hat people version their changelog entries
  - This is actually release #1, but now needs to be release #7


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-2
changelog:
  - tcltk: Give up using potentially unmaintained ruby_1_8_6 branch
    and instead completely replace with ruby_1_8 branch head
    (at this time, using rev 27738)
    (seems to fix 560053, 590503)
  - Fix Japanese encoding strings under ruby-tcltk/ext/tk/sample/


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-3
changelog:
  - ruby-1.8.x-null-class-must-be-Qnil.patch (bug 530407)
  - Recreate some patches using upstream svn when available, and
    add some comments for patches


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-4
changelog:
  - Patch36 (ruby-1.8.x-RHASH_SIZE-rb_hash_lookup-def.patch)
    also backport rb_hash_lookup definition (bug 592936)


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.6.399-5
changelog:
  - Retry for bug 559158, Simplify the OpenSSL::Digest class
    pull more change commits from ruby_1_8 branch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.249-3
changelog:
  - Integrated Jim Meyering's feedback and changes in to:
  - remove trailing blanks
  - placate rpmlint
  - ruby_* definitions: do not use trailing slashes in directory names
  - _normalized_cpu: simplify definition


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-1
changelog:
  - integrate more of jmeyering's and mtaska's feedback
  - removed emacs bits that are now shipped with the emacs package
  - various patch and spec cleanup
  - rebased to ruby 1.8.7 patch 299, removed patches no longer needed:
     ruby-1.8.7-openssl-1.0.patch, ruby-1.8.7-rb_gc_guard_ptr-optimization.patch


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-2
changelog:
  - readded bits to pull tk package from upstream source branch
  - removed unecessary .tk.old dir
  - renamed macros which may cause confusion, removed unused ones


author: Mohammed Morsi <mmorsi@redhat.com> - 1.8.7.299-3
changelog:
  - updated packaged based on feedback (from mtasaka)
  - added comments to all patches / sources
  - obsoleted ruby-mode, as it's now provided by the emacs package itself
  - readded missing documentation
  - various small compatability/regression fixes


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.299-4
changelog:
  - Cleanup spec file
  - Make -irb, -rdoc subpackage noarch
  - Make dependencies between arch-dependent subpackages isa specific
  - Improve sample documentation gathering


author: Mamoru Tasaka <mtasaka@ioa.s.u-tokyo.ac.jp> - 1.8.7.302-1
changelog:
  - Update to 1.8.7.302
  - CVE-2010-0541 (bug 587731) is fixed in this version
  - Update ext/tk to the latest head


author: Mamoru Tasaka <mtasaka@fedoraproject.org> - 1.8.7.352-1
changelog:
  - Update to 1.8.7 p352
  - CVE-2011-2686 is fixed in this version (bug 722415)
  - Update ext/tk to the latest git
  - Remove duplicate path entry (bug 718695)


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-2
changelog:
  - Install RubyGems outside of Ruby directory structure.
  - RubyGems has not its own -devel subpackage.
  - Enhanced macros.ruby and macros.rubygems.
  - All tests are green now (bkabrda).


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-4
changelog:
  - Bundled gems moved into dedicated directories and subpackages.
  - Create and own RubyGems directories for binary extensions.
  - Fix build with GCC 4.7.


author: Vít Ondruch <vondruch@redhat.com> - 1.9.3.0-5
changelog:
  - Initial release of Ruby 1.9.3.
  - Add rubygems dependency on io-console for user interactions.
  - Gems license clarification.


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.286-19
changelog:
  - Update to 1.9.3 p286
  - Don't create files when NUL-containing path name is passed
    (bug 865940, CVE-2012-4522)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.327-21
changelog:
  - Update to 1.9.3.327
  - Fix Hash-flooding DoS vulnerability on MurmurHash function
    (CVE-2012-5371)


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 1.9.3.374-27
changelog:
  - Update to 1.9.3 p374
  - Fix provided variables in pkgconfig (bug 789532:
    Vít Ondruch <vondruch@redhat.com>)


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-0.1.r39387
changelog:
  - Upgrade to Ruby 2.0.0 (r39387).
  - Introduce %gem_install macro.
  - Build against libdb instead of libdb4 (rhbz#894022).
  - Move native extensions from exts to ruby directory.
  - Enable most of the PPC test suite.
  - Change ruby(abi) -> ruby(release).
  - Rename ruby executable to ruby-mri, to be prepared for RubyPick.
  - Add ruby(runtime_executable) virtual provide, which is later used
    by RubyPick.
  - RDoc now depends on JSON.
  - Try to make -doc subpackage noarch again, since the new RDoc should resolve
    the arch dependent issues (https://github.com/rdoc/rdoc/issues/71).
  - Enable SystemTap support.
  - Add TapSet for Ruby.
  - Split Psych into rubygem-psych subpackage.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-1
changelog:
  - Update to Ruby 2.0.0-p0.
  - Change %{ruby_extdir} to %{ruby_extdir_mri} in preparation for better
    JRuby support.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-3
changelog:
  - Avoid "method redefined;" warnings due to modified operating_system.rb.
  - Fix strange paths created during build of binary gems.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.0-7
changelog:
  - Macro definition moved into macros.ruby and macros.rubygems files.
  - Added filtering macros.
  - Filter automatically generated provides of private libraries (rhbz#947408).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.195-8
changelog:
  - Update to Ruby 2.0.0-p195 (rhbz#917374).
  - Fix object taint bypassing in DL and Fiddle (CVE-2013-2065).
  - Fix build against OpenSSL with enabled ECC curves.
  - Add aarch64 support (rhbz#926463).


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-9
changelog:
  - Update to Ruby 2.0.0-p247 (rhbz#979605).
  - Fix CVE-2013-4073.
  - Fix for wrong makefiles created by mkmf (rhbz#921650).
  - Add support for ABRT autoloading.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-13
changelog:
  - Fixes multilib conlicts of .gemspec files.
  - Make symlinks for psych gem to ruby stdlib dirs (rhbz#979133).
  - Use system-wide cert.pem.


author: Vít Ondruch <vondruch@redhat.com> - 2.0.0.247-14
changelog:
  - Add forgotten psych.rb link into rubygem-psych to fix "private method `load'
    called for Psych:Moduler" error (rhbz#979133).


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-17
changelog:
  - Upgrade to Ruby 2.1.0.
  - Move RPM macros into /usr/lib/rpm/macros.d directory.
  - Allow MD5 in OpenSSL for tests.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.0-18
changelog:
  - Don't generate documentation on unexpected places.
  - Detect if rubygems are running under rpmbuild and install gem binary
    extensions into appropriate place.
  - Add support for ppc64le arch (rhbz#1053263).
  - Re-enable some test cases, which are passing now with Kernel 3.12.8+.
  - Backport fix for floating point issues on i686.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.1-20
changelog:
  - Remove useless exclude (rhbz#1065897).
  - Extract load macro into external file and include it.
  - Kill bundled certificates.


author: Vít Ondruch <vondruch@redhat.com> - 2.1.4-24
changelog:
  - Update to Ruby 2.1.4.
  - Include only vendor directories, not their content (rhbz#1114071).
  - Fix "invalid regex" warning for non-rubygem packages (rhbz#1154067).
  - Use load macro introduced in RPM 4.12.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.0-1
changelog:
  - Upgrade to Ruby 2.2.0.
  - Explicitly list RubyGems directories to avoid accidentaly packaged content.
  - Split test-unit and power_assert gems into separate sub-packages.
  - Drop libdb dependency in favor of gdbm.


author: Vít Ondruch <vondruch@redhat.com> - 2.2.2-40
changelog:
  - Fix upgrade path (rubygem-io-console's version was recently bumped in F21
    and makes the higher release to win).


author: Vít Ondruch <vondruch@redhat.com> - 2.3.0-50
changelog:
  - Upgrade to Ruby 2.3.0.
  - Move gemified net-telnet into subpackage.
  - Add did_you_mean subpackage.
  - Add virtual provides for CCAN copylibs.
  - Use weak dependencies.


author: Vít Ondruch <vondruch@redhat.com> - 2.3.1-59
changelog:
  - Continue to use OpenSSL 1.0 for the moment.
  - Add gemspec_add_dep and gemspec_remove_dep macros.
  - Harden package.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.0-70
changelog:
  - Upgrade to Ruby 2.4.0.
  - Move gemified xmlrpc into subpackage.
  - Move gemified openssl into subpackage.
  - Tk is removed from stdlib.
  - Extend 'gem_' macros for pre-release version support.


author: Vít Ondruch <vondruch@redhat.com> - 2.4.1-83
changelog:
  - Fix "IOError: stream closed" errors affecting Puma.
  - Temporary disable checksec on PPC64LE (rhbz#1479302).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.0-89
changelog:
  - Drop obsolete ldconfig scriptlets.
  - Add GMP dependency.
  - Use 'with' operator in RPM dependency generator.
  - Add conflicts RPM generator.
  - Fix thread_safe test suite segfaults.
  - Fix invalid licenses.


author: Pavel Valena <pvalena@redhat.com> - 2.5.0-89
changelog:
  - Fix: Multiple vulnerabilities in RubyGems
    https://bugzilla.redhat.com/show_bug.cgi?id=1547431
    https://www.ruby-lang.org/en/news/2018/02/17/multiple-vulnerabilities-in-rubygems/


author: Florian Weimer <fweimer@redhat.com> - 2.5.0-89
changelog:
  - Rebuild with new LDFLAGS from redhat-rpm-config
  - Use --with-setjmp-type=setjmp on aarch64 to work around gcc issue (#1545239)


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-92
changelog:
  - Conflict requirement needs to generate dependency.
  - Stop using --with-setjmp-type=setjmp on aarch64 (rhbz#1545239).


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-97
changelog:
  - Fix TLS 1.3 issues.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3.patch
    * ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with-TLS-1.3.patch
    Related: rhbz#1616213


author: Jun Aruga <jaruga@redhat.com> - 2.5.1-99
changelog:
  - Fix generated rdoc template issues.
    * ruby-2.6.0-rdoc-6.0.1-fix-template-typo.patch
    Resolves: rhbz#1612026


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-99
changelog:
  - Additional OpenSSL 1.1.1 fixes.
    * ruby-2.6.0-fix-test-failure-with-TLS-1.3-maint.patch
    * ruby-2.6.0-config-support-include-directive.patch
    * ruby-2.6.0-use-larger-keys-for-SSL-tests.patch
    Related: rhbz#1616213


author: Vít Ondruch <vondruch@redhat.com> - 2.5.1-100
changelog:
  - Properly harden package using -fstack-protector-strong.
    * ruby-2.6.0-configure-fstack-protector-strong.patch
    Resolves: rhbz#1624168


author: Vít Ondruch <vondruch@redhat.com> - 2.5.5-104
changelog:
  - Update to Ruby 2.5.5.
    * Remove Patch25: ruby-2.6.0-Update-for-tzdata-2018f.patch; subsumed
    * Remove Patch11: ruby-2.6.0-Try-to-update-cert.patch; subsumed
    * Remove Patch19: ruby-2.6.0-net-http-net-ftp-fix-session-resumption-with
        -TLS-1.3.patch; subsumed
    Resolves: rhbz#1688758
  - Don't ship .stp files when SystemTap support is disabled.
    Related: rhbz#1657915
  - Fix CovScan issues.
    Resolves: rhbz#1628592


author: Jun Aruga <jaruga@redhat.com> - 2.5.5-105
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1688758
  - Fix rdoc gzipped javascript pages are not the same across multilib.
    Resolves: rhbz#1719647


author: Vít Ondruch <vondruch@redhat.com> - 2.5.9-114
changelog:
  - Fix integer overflow in search_in_range function in regexec.c (CVE-2019-19012).
    Resolves: RHEL-87505


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-105
changelog:
  - Update to Ruby 2.6.3 by merging Fedora master branch (commit: 1cc2a49)
    * Properly generate "ruby(rubygems)" versioned dependencies.
    * Extract composition of dependecy strings into helper.
    * Loosen RDoc dependency.
    * Upstream fix adding -C flag instead of changing directory for gem build.
    * Remove obsolete Group tag
    * Fix ".include =" support in openssl.cnf.
    * Link IRB back to StdLib.
    * Link IRB files instead of directories.
    * Exclude irb.rb from ruby-libs.
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 2.6.3-106
changelog:
  - Use ffi_closure_alloc to avoid segmentation fault by libffi on aarch64.
    Resolves: rhbz#1727832
  - Properly support %prerelease in %gemspec_ macros.
    Related: rhbz#1672575


author: Jarek Prokop <jprokop@redhat.com> - 2.6.7-107
changelog:
  - Upgrade to Ruby 2.6.7.
    Resolves: rhbz#1757846
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given an address
    containing leading zero
    Resolves: rhbz#1950307
  - Fix: Rubygem-bundler: Don't use insecure tmp directory as home
    allows for execution of malicious code.
    Resolves: CVE-2019-3881


author: Jun Aruga <jaruga@redhat.com> - 2.6.9-108
changelog:
  - Upgrade to Ruby 2.6.9.
  - Skip JIT tests in RHEL 8.
  - Fix the issues required to start the "make test-bundler" itself.
  - Fix Bundler dependency confusion.
    Resolves: CVE-2020-36327


author: Vít Ondruch <vondruch@redhat.com> - 2.6.10-109
changelog:
  - Upgrade to Ruby 2.6.10.
    Resolves: rhbz#2088415
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739
  - Fix FTBFS due to an incompatible load directive.
  - Fix a fiddle import test on an optimized glibc on Power 9.


author: Jun Aruga <jaruga@redhat.com> - 2.7.1-132
changelog:
  - Update to Ruby 2.7.1 by merging Fedora master branch (commit: 2981648)
    * Skip unstable tests on s390x.
    * Skip JIT tests in RHEL 8.
    Resolves: rhbz#1817135


author: Vít Ondruch <vondruch@redhat.com> - 2.7.1-133
changelog:
  - Fix `require` behavior allowing to load libraries multiple times.
    Resolves: rhbz#1842989
  - Add ruby-default-gems dependency on irb.


author: Pavel Valena <pvalena@redhat.com> - 2.7.3-136
changelog:
  - Upgrade to Ruby 2.7.3.
    Resolves: rhbz#1947938
  - Resolv::DNS: timeouts if multiple IPv6 name servers are given and address
    contains leading zero
    Resolves: rhbz#1944227


author: Jun Aruga <jaruga@redhat.com> - 2.7.4-137
changelog:
  - Upgrade to Ruby 2.7.4.
  - Fix command injection vulnerability in RDoc.
    Resolves: CVE-2021-31799
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    Resolves: CVE-2021-31810
  - Fix StartTLS stripping vulnerability in Net::IMAP.
    Resolves: CVE-2021-32066
  - Upgrade to Bundler 2.2.24.
    Resolves: CVE-2020-36327


author: Jarek Prokop <jprokop@redhat.com> - 2.7.6-138
changelog:
  - Upgrade to Ruby 2.7.6.
    Resolves: rhbz#2109424
  - Fix FTBFS due to an incompatible load directive.
    Related: rhbz#2109424
  - Fix a fiddle import test on an optimized glibc on Power 9.
    Related: rhbz#2109424
  - Fix regular Expression Denial of Service Vulnerability of Date Parsing Methods.
    Resolves: CVE-2021-41817
  - Fix cookie prefix spoofing in CGI::Cookie.parse.
    Resolves: CVE-2021-41819
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jarek Prokop <jprokop@redhat.com> - 3.0.1-138
changelog:
  - Upgrade to Ruby 3.0.1 by merging Fedora rawhide branch (commit: 6b2ff68).
    * Add missing `rubygem-` prefix for bundled provide of 'connection_pool'.
    * Pass ldflags to gem install via CONFIGURE_ARGS
    * Remove IRB dependency from rubygem-rdoc.
    * Fix flaky excon test suite.
    * Properly support DWARF5 debug information.
        Related: rhbz#1920533
    * Bundle OpenSSL into StdLib.
    * Fix SEGFAULT in rubygem-shoulda-matchers test suite.
    * Provide `gem.build_complete` file for binary gems.
    * Re-enable test suite.
    * ruby-default-gems have to depend on rubygem(io-console) due to reline.
    * Fix SEGFAULT preventing rubygem-unicode to build on armv7hl.
    * Add support for reworked RubyGems plugins.
    * Use proper path for plugin wrappers.
    * Extract RSS and REXML into separate subpackages, because they were moved from
       default gems to bundled gems.
    * Drop Net::Telnet and XMLRPC packages, because they were dropped from Ruby.
    Resolves: rhbz#1938942
  - Fix FTBFS due to an incompatible load directive.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-139
changelog:
  - Upgrade to Ruby 3.0.2.
    Related: rhbz#1938942
  - Fix command injection vulnerability in RDoc. (CVE-2021-31799)
  - Fix FTP PASV command response can cause Net::FTP to connect to arbitrary host.
    (CVE-2021-31810)
  - Fix StartTLS stripping vulnerability in Net::IMAP (CVE-2021-32066)
  - Fix dependencies of gems with explicit source installed from a
    different source. (CVE-2020-36327)
  - Pass ldflags to gem install via CONFIGURE_ARGS.
    The same comment on the changelog 3.0.1-138 was wrong.


author: Jarek Prokop <jprokop@redhat.com> - 3.0.2-140
changelog:
  - Fix rubygem-irb upgrade not working due to directory -> symlink conversion.
    Resolves: rhbz#2010949


author: Jarek Prokop <jprokop@redhat.com> - 3.0.4-141
changelog:
  - Upgrade to Ruby 3.0.4.
    Resolves: rhbz#2096346
    Resolves: rhbz#2000056
  - Fix double free in Regexp compilation.
    Resolves: CVE-2022-28738
  - Fix buffer overrun in String-to-Float conversion.
    Resolves: CVE-2022-28739


author: Jun Aruga <jaruga@redhat.com> - 3.0.7-142
changelog:
  - Upgrade to Ruby 3.0.7.
    Resolves: RHEL-36189
  - Fix HTTP response splitting in CGI.
    Resolves: RHEL-36193
  - Fix ReDoS vulnerability in URI.
    Resolves: RHEL-36196
  - Fix ReDoS vulnerability in Time.
    Resolves: RHEL-36205
  - Fix buffer overread vulnerability in StringIO.
    Resolves: RHEL-36198
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    Resolves: RHEL-36200
  - Fix arbitrary memory address read vulnerability with Regex search.
    Resolves: RHEL-36203


author: Jarek Prokop <jprokop@redhat.com> - 3.3.1-2
changelog:
  - Upgrade to Ruby 3.3.1.
    Resolves: RHEL-37446
  - Fix buffer overread vulnerability in StringIO.
    (CVE-2024-27280)
    Resolves: RHEL-37448
  - Fix RCE vulnerability with .rdoc_options in RDoc.
    (CVE-2024-27281)
    Resolves: RHEL-37449
  - Fix Arbitrary memory address read vulnerability with Regex search.
    (CVE-2024-27282)
    Resolves: RHEL-37447


author: Jarek Prokop <jprokop@redhat.com> - 3.3.5-3
changelog:
  - Upgrade to Ruby 3.3.5
    Resolves: RHEL-55409
  - Fix DoS vulnerability in rexml.
    (CVE-2024-39908)
    (CVE-2024-41946)
    (CVE-2024-43398)
    Resolves: RHEL-57049
    Resolves: RHEL-57054
    Resolves: RHEL-57069
  - Fix REXML DoS when parsing an XML having many specific characters such as
    whitespace character, >] and ]>.
    (CVE-2024-41123)
    Resolves: RHEL-52783


author: Jarek Prokop <jprokop@redhat.com> - 3.3.8-4
changelog:
  - Upgrade to Ruby 3.3.8.
    Resolves: RHEL-68632
  - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186)
  - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219)
  - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221)


author: Jun Aruga <jaruga@redhat.com> - 3.3.10-5
changelog:
  - Upgrade to Ruby 3.3.10.
    Resolves: RHEL-106820
  - Fix possible denial of service in resolv gem (CVE-2025-24294)
  - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)
  - Fix REXML denial of service. (CVE-2025-58767)
    Resolves: RHEL-122012


author: Jarek Prokop <jprokop@redhat.com> - 3.3.10-6
changelog:
  - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316)
    Resolves: RHEL-171247


author: Jozef Zigmund <jzigmund@redhat.com> - 1.0.3-2
changelog:
  - Add ruby(abi) dependency
  - Add using macro %{geminstdir} in files section
  - Add subpackage doc for doc files
  - Removed .gitignore file
  - Removed rubygem-thor from vendor folder
  - Add dependency rubygem(thor)


author: Vít Ondruch <vondruch@redhat.com> - 1.0.9-2
changelog:
  - More concise summary
  - Do not remove manpages, they are used internally
  - Added buildroot cleanup in clean section


author: Josef Stribny <jstribny@redhat.com> - 1.7.6-2
changelog:
  - Keep ssl_certs/certificate_manager.rb file (used in tests)
  - Correctly add load paths for gems during tests


author: Jun Aruga <jaruga@redhat.com> - 0.5.2-1
changelog:
  - New upstream release 0.5.2 by merging Fedora master branch (commit: cc15309)
    Resolves: rhbz#1672575


author: Jun Aruga <jaruga@redhat.com> - 0.5.3-1
changelog:
  - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475)
    Resolves: rhbz#1817135


author: Jarek Prokop <jprokop@redhat.com> 0.5.3-2
changelog:
  - Update by merging Fedora rawhide branch (commit: 81e2cc9)
  - Fix Mysql2::Result test for Ruby 3.1.
  - Remove gem_make.out and mkmf.log files from the binary RPM package.
  - Fix test assertion for mariadb-connector-c.
    Related: rhbz#2063772


author: lihaipeng <lihaipeng@openanolis.org> - 1.0.0-3.0.1
changelog:
  - Changed the way how/when parameters are interpret
  - Reference https://github.com/ged/ruby-pg/commit/73cd5e158ba4af73243c22f8918b1754256db17b


author: Jun Aruga <jaruga@redhat.com> - 1.1.4-1
changelog:
  - Update to pg 1.1.4 by merging Fedora master branch (commit: 397796e)
    * BuildRequires: s/postgresql-devel/libpq-devel/
    * Add marking lines at the start and end of the setup.log
    Resolves: rhbz#1672575


author: Mamoru TASAKA <mtasaka@fedoraproject.org> - 3.5.0-3
changelog:
  - Always use full tar.gz for installed files and
    keep using gem file for gem spec (ref: bug 1425220)


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.10-1
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.1.10
  - require container-selinux >= 2.224.0 for dmz feature
  - Related: Jira:RHEL-2110


author: Lokesh Mandvekar <lsm5@redhat.com> - 0.0.8-1.git4155b68
changelog:
  - Resolves: rhbz#1277245 - bump to 0.0.8
  - Resolves: rhbz#1302363 - criu is a runtime dep
  - Resolves: rhbz#1302348 - libseccomp-golang is bundled in Godeps
  - manpages included


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-1.rc2
changelog:
  - Resolves: #1412239 - *CVE-2016-9962* - set init processes as non-dumpable,
  runc patch from Michael Crosby <crosbymichael@gmail.com>


author: Lokesh Mandvekar <lsm5@redhat.com> - 1.0.0-9.1.gitf8ce01d
changelog:
  - Resolves: #1447078 - change default root path
  - add commit e800860 from runc @projectatomic/change-root-path


author: Frantisek Kluknavsky <fkluknav@redhat.com> - 1.0.0-24.rc4.dev.gitc6e4a1e.1
changelog:
  - rebase to c6e4a1ebeb1a72b529c6f1b6ee2b1ae5b868b14f
  - https://github.com/opencontainers/runc/pull/1651


author: Dan Walsh <dwalsh@redhat.com> - 2:1.0.0-40.rc5.dev.gitad0f525
changelog:
  - Remove sysclt handling, not needed in RHEL8
  - Make sure package built with seccomp flags
  - Remove rectty
  - Add completions


author: Dan Walsh <dwalsh@redhat.name> - 2:1.0.0-46.dev.gitb4e2ecb
changelog:
  - Add patch https://github.com/opencontainers/runc/pull/1807 to allow
  - runc and podman to work with sd_notify


author: Jindrich Novy <jnovy@redhat.com> - 1.0.0-68.rc92
changelog:
  - update to https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  - propagate proper CFLAGS to CGO_CFLAGS to assure code hardening and optimization
  - Related: #1821193


author: Jindrich Novy <jnovy@redhat.com> - 1:1.0.3-6
changelog:
  - Fix every podman run invocation generates two "Couldn't stat device
    /dev/char/10:200: No such file or directory" lines in the journal
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.3-3
changelog:
  - fix "Error: runc: exec failed: unable to start container process:
    open /dev/pts/0: operation not permitted: OCI permission denied"
  - Related: #2061390


author: Matej Habrnal <mhabrnal@redhat.com> 0.21-1
changelog:
  - New upstream version
    - Introduce 'serial' field in uReport
    - normalization: actualize list of functions


author: Jakub Filak <jakub@thefilaks.net> 0.22-1
changelog:
  - New upstream version
    - Added support fof JavaScript (V8) stack traces
    - Most parts of the in-hook core unwinder callable under unprivileged user
    - GDB core unwinder limits number of unwound frames
    - Fixed a pair of compile warnings - Chris Redmon <credmonster@gmail.com>


author: Matej Habrnal <mhabrnal@redhat.com> 0.23-1
changelog:
  - New upstream version
    - Allow rpm to be optional at build time
    - Do not use deprecated fedorahosted.org


author: Julius Milan <jmilan@redhat.com> 0.24-1
changelog:
  - New upstream version
    - Allow to report unpackaged problems
    - apidoc: generate html docs using doxygen
    - Fix parsing of subset of arm kernel oopses


author: Martin Kutlak <mkutlak@redhat.com> 0.25-1
changelog:
  - New upstream version
   - Normalization: actualize list of functions
   - Fix some compilation warnings
   - Allow to build python3 for rhel8
   - Makefile: add make release-* subcommands
   - Elfutils: Add missing stubs from earlier commit


author: Matej Habrnal <mhabrnal@redhat.com> 0.26-1
changelog:
  - spec: fix Allow python2 to be optional at build time
  - Allow python2 to be optional at build time
  - normalization: actualize list of functions
  - Append Python interpreter as related package
  - makefile: create .tar.xz with make release


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-1
changelog:
  - rebase to upstream v1.4.2
  - make sbd default to do pacemakerd-api handshake
  - conflict with pacemaker-libs < 2.0.5-4 to assure pacemaker
    is defaulting to pacemakerd-api handshake

    Resolves: rhbz#1903730
    Resolves: rhbz#1873135


author: Klaus Wenninger <kwenning@redhat.com> - 1.4.2-3
changelog:
  - change the default for SBD_WATCHDOG_TIMEOUT to 10s
    s390(x) stays at 15s as before

    Resolves: rhbz#1922143


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.0-2
changelog:
  - reverted watchdog_timeout_default to 5s
    (slipped in via an unreleased change on 8.4.0 branch)

    Resolves: rhbz#1980797


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-1
changelog:
  - rebase to upstream v1.5.2
  - convert license naming to SPDX
  - make static analysis happy with a few checks & rearanges with
    dynamic-memory-management

    Resolves: rhbz#2168567


author: Klaus Wenninger <kwenning@redhat.com> - 1.5.2-2
changelog:
  - add required tests subdirectory in addition to gating.yaml
    that had already been brought over before

    Related: rhbz#2168567


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-10
changelog:
  - Fix docdir patch (patch Makefile.am, not Makefile.in)
  - Use correct short name for Eclipse Public License 1.0
  - Use %license
  - Add explicit dependencies for libraries in Makefile.am (fixes FTBFS)
    Resolves: #1606302


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.6.4-14
changelog:
  - Fix getting of InstallDate property, improve it to work on non en_US locales
    and update support for recent Fedora distributions
    Resolves: #1776670


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.9-24
changelog:
  - Fix important coverity issues
    Resolves: #1989603
  - Fix incorrect use of temporary paths
    Resolves: #1989605


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 0.5.0-1
changelog:
  - Update to latest upstream version
  - Change license to Eclipse Public License 1.0
  - Use %license
  - Fix URL


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-10
changelog:
  - Fix null pointer (DoS) vulnerability via POST request to /cimom (CVE-2018-6644)
    (patch by Adam Majer)


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 1.4.9-16
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Remove %defattr
    Resolves: #1638007


author: Vitezslav Crhonek <vcrhonek@redhat.com> - 2.2.8-9
changelog:
  - Use %license for file which contains the text of the license
  - Change versioned docdir to unversioned and rename the docdir to match
    the package name
  - Fix license tag
    Resolves: #1638015


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.72-1
changelog:
  - Rebase to a new upstream release 0.1.72 (RHEL-25250)
  - Increase CIS standards coverage regarding SSH and cron (RHEL-1314)
  - Increase compatibility of accounts_tmout rule for ksh (RHEL-16896 and RHEL-1811)
  - Align Ansible and Bash remediation in sssd_certificate_verification rule (RHEL-1313)
  - Add a warning to rule service_rngd_enabled about rule applicability (RHEL-1819)
  - Add rule to terminate idle user sessions after defined time (RHEL-1801)
  - Allow spaces around equal sign in /etc/sudoers (RHEL-1904)
  - Add remediation for rule fapolicy_default_deny (RHEL-1817)
  - Fix invalid syntax in file /usr/share/scap-security-guide/ansible/rhel8-playbook-ospp.yml (RHEL-19127)
  - Refactor ensure_pam_wheel_group_empty (RHEL-1905)
  - Prevent remediation of display_login_attempts rule from creating redundant configuration entries (RHEL-1809)
  - Update PCI-DSS to v4 (RHEL-1808)
  - Fix regex in Ansible remediation of configure_ssh_crypto_policy (RHEL-1820)


author: Jan Černý <jcerny@redhat.com> - 0.1.73-1
changelog:
  - Rebase scap-security-guide package to version 0.1.73 (RHEL-36733)
  - Change crypto policy used in the CUI profile to FIPS (RHEL-30346)
  - Fix file path identification in Rsyslog configuration (RHEL-17202)
  - Use a correct chrony server address in STIG profile (RHEL-1814)
  - Don't BuildRequire /usr/bin/python3 (RHEL-2244)


author: Matthew Burket <mburket@redhat.com> - 0.1.74-1
changelog:
  - Rebase to a new upstream release 0.1.74 (RHEL-53913)
  - Improve Rsyslog rules to support RainerScript syntax (RHEL-1816)
  - Update password hashing settings for ANSSI-BP-028 (RHEL-54390)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.74-3
changelog:
  - fix build
  - keep firefox and rhel8 ds-1.2 files in the package in form of symbolic links to regular ds files


author: Matthew Burket <mburket@redhat.com> - 0.1.75-1
changelog:
  - Rebase scap-security-guide to the latest upstream version (RHEL-66153)
  - detection of Grub2 kernel command line arguments has been enhanced to cover more use cases (RHEL-53365)


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-2
changelog:
  - Provide manual page for scap-security-guide
  - Remove percent sign from spec's changelog to silence rpmlint warning
  - Convert RHEL6 'Restrict Root Logins' section's rules to Fedora
  - Convert RHEL6 'Set Password Expiration Parameter' rules to Fedora
  - Introduce 'Account and Access Control' section
  - Convert RHEL6 'Verify Proper Storage and Existence of Password Hashes' section's
    rules to Fedora
  - Set proper name of the build directory in the spec's setup macro.
  - Replace hard-coded paths with macros. Preserve attributes when copying files.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1-3
changelog:
  - Add .gitignore for Fedora output directory
  - Set up Fedora release name and CPE based on build system properties
  - Use correct file paths in scap-security-guide(8) manual page
    (RH BZ#1018905, c#10)
  - Apply further changes motivated by scap-security-guide Fedora RPM review
    request (RH BZ#1018905, c#8):
    * update package description,
    * make content files to be owned by the scap-security-guide package,
    * remove Fedora release number from generated content files,
    * move HTML form of the guide under the doc directory (together
      with that drop fedora/content subdir and place the content
      directly under fedora/ subdir).
  - Fixes for scap-security-guide Fedora RPM review request (RH BZ#1018905):
    * drop Fedora release from package provided files' final path (c#5),
    * drop BuildRoot, selected Requires:, clean section, drop chcon for
      manual page, don't gzip man page (c#4),
    * change package's description (c#4),
    * include PD license text (#c4).


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.3-1
changelog:
  - Update versioning scheme - move fedorassgrelease to be part of
    upstream version. Rename it to fedorassgversion to avoid name collision
    with Fedora package release.


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.4-1
changelog:
  - Fix remediation for sshd set keepalive (ClientAliveCountMax) and move
    it to /shared
  - Add shared remediations for sshd disable empty passwords and
    sshd set idle timeout
  - Shared remediation for sshd disable root login
  - Add empty -compat subpackage to ensure backward-compatibility with
    openscap-content and firstaidkit-plugin-openscap packages (RH BZ#1040335)
  - OVAL check for sshd disable root login
  - Fix typo in OVAL check for sshd disable empty passwords
  - OVAL check for sshd disable empty passwords
  - Unselect no shelllogin for systemaccounts rule from being run by default
  - Rename XCCDF rules
  - Revert Set up Fedora release name and CPE based on build system properties
  - Shared OVAL check for Verify that Shared Library Files Have Root Ownership
  - Shared OVAL check for Verify that System Executables Have Restrictive Permissions
  - Shared OVAL check for Verify that System Executables Have Root Ownership
  - Shared OVAL check for Verify that Shared Library Files Have Restrictive
    Permissions
  - Fix remediation for Disable Prelinking rule
  - OVAL check and remediation for sshd's ClientAliveCountMax rule
  - OVAL check for sshd's ClientAliveInterval rule
  - Include descriptions for permissions section, and rules for checking
    permissions and ownership of shared library files and system executables
  - Disable selected rules by default
  - Add remediation for Disable Prelinking rule
  - Adjust service-enable-macro, service-disable-macro XSLT transforms
    definition to evaluate to proper systemd syntax
  - Fix service_ntpd_enabled OVAL check make validate to pass again
  - Include patch from Šimon Lukašík to obsolete openscap-content
    package (RH BZ#1028706)
  - Add OVAL check to test if there's is remote NTP server configured for
    time data
  - Add system settings section for the guide (to track system wide
    hardening configurations)
  - Include disable prelink rule and OVAL check for it
  - Initial OVAL check if ntpd service is enabled. Add package_installed
    OVAL templating directory structure and functionality.
  - Include services section, and XCCDF description for selected ntpd's
    sshd's service rules
  - Include remediations for login.defs' based password minimum, maximum and
    warning age rules
  - Include directory structure to support remediations
  - Add SCAP "replace or append pattern value in text file based on variable"
    remediation script generator
  - Add remediation for "Set Password Minimum Length in login.defs" rule


author: Jan iankko Lieskovsky <jlieskov@redhat.com> 0.1.5-1
changelog:
  - Fix fedora-srpm and fedora-rpm Make targets to work again
  - Include RHEL-6 and RHEL-7 datastream files to support remote RHEL system scans
  - EOL for Fedora 18 support
  - Include Fedora datastream file for remote Fedora system scans


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.5-3
changelog:
  - Rebase the RHEL part of SSG to the latest upstream version (0.1.18)
  - Add STIG DISCLAIMER to the shipped documentation


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.22-1
changelog:
  - update to the latest upstream release
  - only DataStream file is now available for Fedora
  - start distributing security baseline for Firefox
  - start distributing security baseline for Java RunTime deployments


author: Šimon Lukašík <slukasik@redhat.com> - 0.1.24-1
changelog:
  - update to the latest upstream release
  - created doc sub-package to ship all the guides
  - start distributing centos and scientific linux content
  - rename java content to jre


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.29-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.29 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.29
  - Do not ship Firefox/DISCLAIMER documentation file since it has been removed
    in 0.1.29 upstream release


author: Jan iankko Lieskovsky <jlieskov@redhat.com> - 0.1.30-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.30 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.30
  - Drop shell library for remediation functions since it is not required
    starting from 0.1.30 release any more


author: Martin Preisler <mpreisle@redhat.com> - 0.1.31-1
changelog:
  - update to the latest upstream release
  - new default location for content /usr/share/scap/ssg
  - install HTML tables in the doc subpackage


author: Watson Sato <wsato@redhat.com> - 0.1.35-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.35 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.35


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.36-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.36 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.36


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.37-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.37 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.37


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.38-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.38 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.38


author: Jan Černý <jcerny@redhat.com> - 0.1.39-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.39 release:
    https://github.com/OpenSCAP/scap-security-guide/releases/tag/v0.1.39
  - Fix spec file to build using Python 3
  - Fix License because upstream changed to BSD-3


author: Watson Sato <wsato@redhat.com> - 0.1.40-3
changelog:
  - Use explicit path BuildRequires to get /usr/bin/python3 inside the buildroot
  - Only build content for rhel8 products


author: Watson Yuuma Sato <wsato@redhat.com> - 0.1.41-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.41 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.41
  - Add RHEL8 Product with OSPP4.2 and PCI-DSS Profiles


author: Matěj Týč <matyc@redhat.com> - 0.1.42-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.42 release:
    https://github.com/ComplianceAsCode/content/releases/tag/v0.1.42
  - System-wide crypto policies are introduced for RHEL8
  - Patches introduced the RHEL8 product were dropped, as it has been upstreamed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-3
changelog:
  - Added FIPS mode rule for the OSPP profile.
  - Split the installed_OS_is certified rule.
  - Explicitly disabled OSP13, RHV4 and Example products.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-5
changelog:
  - Fixed profiles descriptions, so they don't contain literal '\n'.
  - Made the configure_kerberos_crypto_policy OVAL more robust.
  - Made OVAL for libreswan and bind work as expected when those packages are not installed.


author: Matěj Týč <matyc@redhat.com> - 0.1.42-6
changelog:
  - Further fix of profiles descriptions, so they don't contain literal '\'.
  - Removed obsolete sshd rule from the OSPP profile.


author: Jan Černý <jcerny@redhat.com> - 0.1.42-7
changelog:
  - Introduce Podman backend for SSG Test suite
  - Update bind and libreswan crypto policy test scenarios


author: Matěj Týč <matyc@redhat.com> - 0.1.42-9
changelog:
  - Fixed Crypto Policy OVAL for NSS
  - Got rid of rules requiring packages dropped in RHEL8.
  - Profile descriptions fixes.


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.42-11
changelog:
  - Assign CCE to rules from OSPP profile which were missing the identifier.
  - Fix regular expression for Audit rules ordering
  - Account for Audit rules flags parameter position within syscall
  - Add remediations for Audit rules file path
  - Add Audit rules for modification of /etc/shadow and /etc/gshadow
  - Add Ansible and Bash remediations for directory_access_var_log_audit rule
  - Add a Bash remediation for Audit rules that require ordering


author: Matěj Týč <matyc@redhat.com> - 0.1.44-2
changelog:
  - Ported changelog from late 8.0 builds.
  - Disabled build of the OL8 product, updated other components of the cmake invocation.


author: Milan Lysonek <mlysonek@redhat.com> - 0.1.45-2
changelog:
  - Use crypto-policy rules in OSPP profile.
  - Re-enable FIREFOX and JRE product in build.
  - Change test suite logging message about missing profile from ERROR to WARNING.
  - Build only one version of SCAP content at a time.


author: Watson Sato <wsato@redhat.com> - 0.1.46-1
changelog:
  - Update to latest upstream SCAP-Security-Guide-0.1.46 release
  - Align OSPP Profile with Common Criteria Requirements (RHBZ#1714798)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.48-4
changelog:
  - Drop rsyslog rules from OSPP profile
  - Update COBIT URI
  - Add rules for strong source of RNG entropy
  - Enable build of RHEL8 STIG Profile (RHBZ#1755447)
  - STIG profile: added rsyslog rules and updated SRG mappings
  - Split audit rules according to audit component (RHBZ#1791312)


author: Watson Sato <wsato@redhat.com> - 0.1.50-2
changelog:
  - Fix Ansible for no_direct_root_logins
  - Fix Ansible template for SELinux booleans
  - Add CCEs to rules in RHEL8 CIS Profile (RHBZ#1760734)


author: Watson Sato <wsato@redhat.com> - 0.1.50-3
changelog:
  - HIPAA Profile (RHBZ#1832760)
    - Enable build of RHEL8 HIPAA Profile
    - Add kickstarts for HIPAA
  - CIS Profile (RHBZ#1760734)
    - Add Ansible fix for sshd_set_max_sessions
    - Add CIS Profile content attribution to Center for Internet Security


author: Matěj Týč <matyc@redhat.com> - 0.1.50-10
changelog:
  - Update the scapval invocation (RHBZ#1815007)
  - Re-added the SSH Crypto Policy rule to OSPP, and added an SRG to the rule (RHBZ#1815007)
  - Change the spec file macro invocation from patch to Patch
  - Fix the rekey limit in ssh/sshd rules (RHBZ#1813066)


author: Matěj Týč <matyc@redhat.com> - 0.1.50-11
changelog:
  - fixed link in a grub2 rule description (rhbz#1854854)
  - fixed selinux_all_devicefiles_labeled rule (rhbz#1852367)
  - fixed no_shelllogin_for_systemaccounts on ubi8 (rhbz#1836873)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-3
changelog:
  - Enforce pam_wheel for "su" in the OSPP profile (RHBZ#1884062)
  - Fix case insensitive checking in rsyslog_remote_tls (RHBZ#1899032)
  - Exclude kernel_trust_cpu_rng related rules on s390x (RHBZ#1899041)
  - Create a SSH_USE_STRONG_RNG rule for SSH client and select it in OSPP profile (RHBZ#1884067)
  - Disable usbguard rules on s390x architecture (RHBZ#1899059)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.53-4
changelog:
  - Fix description of rule installed_OS_is_vendor_supported (RHBZ#1914193)
  - Fix RHEL6 CPE dictionary (RHBZ#1899059)
  - Fix SRG mapping references for ssh_client_rekey_limit and use_pam_wheel_for_su (RHBZ#1914853)


author: Watson Sato <wsato@redhat.com> - 0.1.54-1
changelog:
  - Update to the latest upstream release (RHBZ#1889344)
  - Add Minimal, Intermediary and Enhanced ANSSI Profiles (RHBZ#1778188)


author: Marcus Burghardt <maburgha@redhat.com> - 0.1.57-2
changelog:
  - Update Ansible login banner fixes to avoid unnecessary updates (RHBZ#1857179)
  - Include tests for Ansible Playbooks that remove and reintroduce files.
  - Update RHEL8 STIG profile to V1R3 (RHBZ#1993056) 
  - Improve Audit Rules remediation to group similar syscalls (RHBZ#1876483)
  - Reestructure RHEL7 and RHEL8 CIS profiles according to the policy (RHBZ#1993197)
  - Add Kickstart files for ISM profile (RHBZ#1955373)
  - Fix broken RHEL7 documentation links (RHBZ#1966577)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.57-3
changelog:
  - Fix remaining audit rules file permissions (RHBZ#1993056)
  - Mark a STIG service rule as machine only (RHBZ#1993056)
  - Fix a remaining broken RHEL7 documentation link. (RHBZ#1966577)


author: Matej Tyc <matyc@redhat.com> - 0.1.58-1
changelog:
  - Rebase to a new upstream release. (RHBZ#2014485)
  - Add a VM wait handling to fix issues with tests.


author: Watson Sato <wsato@redhat.com> - 0.1.60-2
changelog:
  - Update RHEL8 STIG profile to V1R5 (RHBZ#2049555)
  - Align audit rules for OSPP profile (RHBZ#2000264)
  - Fix rule selection in ANSSI Enhanced profile (RHBZ#2053587)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-3
changelog:
  - Update sudoers rules in RHEL8 STIG V1R5 (RHBZ#2049555)
  - Add missing SRG references in RHEL8 STIG V1R5 rules (RHBZ#2049555)
  - Update chronyd_or_ntpd_set_maxpoll to disregard server and poll directives (RHBZ#2026301)
  - Fix GRUB2 rule template to configure the module correctly on RHEL8 (RHBZ#2030966)
  - Update GRUB2 rule descriptions (RHBZ#2014485)
  - Make package_rear_installed not applicable on AARCH64 (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-4
changelog:
  - Fix Ansible service disabled tasks (RHBZ#2014485)
  - Set rule package_krb5-workstation_removed as not applicable on RHV (RHBZ#2055149)


author: Gabriel Becker <ggasparb@redhat.com> - 0.1.60-5
changelog:
  - Remove tmux process runinng check in configure_bashrc_exec_tmux (RHBZ#2055860)
  - Fix issue with getting STIG items in create_scap_delta_tailoring.py (RHBZ#2014485)
  - Update rule enable_fips_mode to check only for technical state (RHBZ#2014485)


author: Watson Sato <wsato@redhat.com> - 0.1.60-8
changelog:
  - Update to ensure a sysctl option is not defined in multiple files (RHBZ#2079241)
  - Update RHEL8 STIG profile to V1R6 (RHBZ#2079241)


author: Watson Sato <wsato@redhat.com> - 0.1.60-9
changelog:
  - Fix validation of OVAL 5.10 content (RHBZ#2079241)
  - Fix Ansible sysctl remediation (RHBZ#2079241)


author: Vojtech Polasek <vpolasek@redhat.com> - 0.1.63-2
changelog:
  - aligning with the latest STIG update (RHBZ#2112937)
  - OSPP: use Authselect minimal profile (RHBZ#2117192)
  - OSPP: change rules for protecting of boot (RHBZ#2116440)
  - add warning about configuring of TCP queues to rsyslog_remote_loghost (RHBZ#2078974)
  - fix handling of Defaults clause in sudoers (RHBZ#2083109)
  - make rules checking for mount options of /tmp and /var/tmp applicable only when the partition really exists (RHBZ#2032403)
  - fix handling of Rsyslog include directives (RHBZ#2075384)


author: Watson Sato <wsato@redhat.com> - 0.1.63-5
changelog:
  - Update RHEL8 STIG profile to V1R8 (RHBZ#2148446)
  - Add rule warning for sysctl IPv4 forwarding config (RHBZ#2118758)
  - Fix remediation for firewalld_sshd_port_enabled (RHBZ#2116474)
  - Fix compatibility with Ansible 2.14


author: Watson Sato <wsato@redhat.com> - 0.1.66-1
changelog:
  - Rebase to a new upstream release 0.1.66 (RHBZ#2158404)
  - Update RHEL8 STIG profile to V1R9 (RHBZ#2152658)
  - Fix levels of CIS rules (RHBZ#2162803)
  - Remove unused RHEL8 STIG control file (RHBZ#2156192)
  - Fix accounts_password_pam_unix_remember's check and remediations (RHBZ#2153547)
  - Fix handling of space in sudo_require_reauthentication (RHBZ#2152208)
  - Add rule for audit immutable login uids (RHBZ#2151553)
  - Fix remediation of audit watch rules (RHBZ#2119356)
  - Align file_permissions_sshd_private_key with DISA Benchmark (RHBZ#2115343)
  - Fix applicability of kerberos rules (RHBZ#2099394)
  - Add support rainer scripts in rsyslog rules (RHBZ#2072444)


author: Jan Černý <jcerny@redhat.com> - 0.1.69-1
changelog:
  - Rebase to a new upstream release 0.1.69 (RHBZ#2221695)
  - Fixed CCE link URL (RHBZ#2178516)
  - align remediations with rule description for rule configuring OpenSSL cryptopolicy (RHBZ#2192893)
  - Add rule audit_rules_login_events_faillock to STIG profile (RHBZ#2167999)
  - Fixed rules related to AIDE configuration (RHBZ#2175684)
  - Allow default permissions for files stored on EFI FAT partitions (RHBZ#2184487)
  - Add appropriate STIGID to accounts_passwords_pam_faillock_interval rule (RHBZ#2209073)
  - improved and unified OVAL checks checking for interactive users (RHBZ#2157877)
  - update ANSSI BP-028 profiles to be aligned with version 2.0 (RHBZ#2155789)
  - unify OVAL checks to correctly identify interactive users (RHBZ#2178740)
  - make rule checking for Postfix unrestricted relay accept more variants of valid configuration syntax (RHBZ#2170530)
  - Fixed excess quotes in journald configuration files (RHBZ#2169857)
  - rules related to polyinstantiated directories are not applied when building images for Image Builder (RHBZ#2130182)
  - evaluation and remediation of rules related to mount points have been enhanced for Image Builder (RHBZ#2130185)
  - do not enable FIPS mode when creating hardened images for Image Builder (RHBZ#2130181)
  - Correct URL used to download CVE checks (RHBZ#2222583)
  - mention exact required configuration value in description of some PAM related rules (RHBZ#2175882)
  - make mount point related rules not applicable when no such mount points exist (RHBZ#2176008)
  - improve checks determining if FIPS mode is enabled (RHBZ#2129100)


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-94802)
  - STIG: do not remediate rule disabling user namespaces (RHEL-76750)


author: Matthew Burket <mburket@redhat.com> - 0.1.77-1
changelog:
  - Rebase scap-security-guide to the latest upstream version 0.1.77 (RHEL-94802)
  - STIG: do not remediate rule disabling user namespaces (RHEL-76750)


author: Matthew Burket <mburket@redhat.com> - 0.1.78-1
changelog:
  - Rebase scap-security-guide to the latest upstream version 0.1.78 (RHEL-111011)
  - Rule service_rngd_enabled is now evaluated on RHEL >= 8.4 in case kernel is not in FIPS mode (RHEL-95188)
  - Use default order in rule configure_gnutls_tls_crypto_policy (RHEL-1821)
  - Renable building of bash scripts (RHEL-105501)


author: Artem Denisov <adenisov@redhat.com> - 0.1.79-1
changelog:
  - Rebase scap-security-guide to the latest upstream version 0.1.79 (RHEL-130249)
  - Introduce configure_custom_crypto_policy_cis rule to restrict weak ciphers in RHEL CIS profiles (RHEL-111896)
  - Cover configuration of maxseq parameter in pwquality in all CIS profiles (RHEL-128593)
  - Add missing requirement to configure_custom_crypto_policy_cis rule (RHEL-76009)
  - Enable sshd_disable_forwarding rule for RHEL8 (RHEL-76009)
  - Fix idempotency of network_ipv6_privacy_extensions rule (RHEL-106813)
  - Make enable_authselect rule not applicable in containers (RHEL-84439)


author: Vit Mojzis <vmojzis@redhat.com> - 4.2.1-3
changelog:
  - Use 
    CFLAGS="${CFLAGS:--O2 -g}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld}" ; export LDFLAGS instead of -O2 -g


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-1
changelog:
  - SETools 4.3.0 release (#1820079)
  - Revised sediff method for TE rules. This drastically reduced memory and run time.
  - Added infiniband context support to seinfo, sediff, and apol.
  - Added apol configuration for location of Qt assistant.
  - Fixed sediff issue where properties header would display when not requested.
  - Fixed sediff issue with type_transition file name comparison.
  - Fixed permission map socket sendto information flow direction.
  - Added methods to TypeAttribute class to make it a complete Python collection.
  - Genfscon now will look up classes rather than using fixed values which
    were dropped from libsepol.
  - setools requires -console, -console-analyses and -gui packages (#1820078)


author: Vit Mojzis <vmojzis@redhat.com> - 4.3.0-4
changelog:
  - Disable/remove neverallow options in frontends (#2184141)
  - AVRuleXperm: Fix permission set creation for AVTAB_XPERMS_IOCTLDRIVER (#2174376)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.24-2
changelog:
  - Optimize get_rpm_nvr_by_type by adding a cache (#1794807)
  - Stop building seappletlegacy (#1878792)
  - Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-1
changelog:
  - Revert "Replace pydbus with dasbus"
  - Fix typos in --help, man pages and developer's guide (#2028226)
  - Do not use Python slip package
  - Stop SetroubleshootFixit after 10 seconds of inactivity
  - Fix plugin exception reporting
  - export alert dbus signal
  - Make sure local_policy_package is not None
  - sealert: add "Last Seen" column to alert list


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-4
changelog:
  - Decrease setroubleshootd priority and limit RAM utilization to 1GB (#2064727)
  - doc: Document performance related changes


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.26-6
changelog:
  - Fix shebang of SetroubleshootPrivileged.py (#2231023)
  - Check that SELinux is enabled before running (#2178950)


author: Petr Lautrbach <plautrba@redhat.com> - 3.3.10-1
changelog:
  - Handle no "allowed_target_types" properly
  - bind_ports: Do not use when there are no allowed_target_types
  - Fix summary and "if" text for AVCs with unknown target path
  - plugins: Update translations


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.10-2
changelog:
  - update "file" plugin (#1649818)
  - Update "xen_image" plugin (#1649831)
  - Update qemu_blk_image and qemu_file_image (#1649838)


author: Vit Mojzis <vmojzis@redhat.com> - 3.3.12-1
changelog:
  - Use get_package_nvr* functions instead of get_rpm_nvr*
  - Update deprecated type references (#1829306)


author: Tomas Bzatek <tbzatek@redhat.com> - 1.44-3
changelog:
  - Fix sg_turs help invocation in an old mode (#1683343)
  - Fix sg_raw printing error about device not specified on version request (#1627657)


author: Petr Pisar <ppisar@redhat.com> - 4.15.2-10
changelog:
  - License corrected to "GPLv3+ and (GPLv3+ and BSD) and (LGPLv3+ or BSD) and
    LGPLv2+ and Public Domain and GFDL"


author: Nathan Scott <nathans@redhat.com> - 0.6.2-1
changelog:
  - Switch to enabling the Java 8+ maven modules only now.
  - Add unitsofmeasurement prefix to package name.
  - Update to latest upstream sources.


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/1c2ab99)
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/d0a0f1a)
  - Resolves: RHEL-28226


author: Lokesh Mandvekar <lsm5@redhat.com> - 2:1.14.3-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/4a2bc3a)
  - Resolves: RHEL-28226


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.3-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/5f2b9af)
  - Resolves: RHEL-28728


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.4-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/78d9c9a)
  - Resolves: RHEL-40852


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.5-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.14
    (https://github.com/containers/skopeo/commit/072072b)
  - Resolves: RHEL-40801


author: Lokesh Mandvekar <lsm5@fedoraproject.org> - 0.1.13-5
changelog:
  - include go-srpm-macros and compiler(go-compiler) in fedora conditionals
  - define %gobuild if not already
  - add patch to build with older version of golang


author: dwalsh <dwalsh@redhat.com> - 0.1.21-1.dev.git0b73154
changelog:
  - Add support for storage.conf and storage-config.5.md from github container storage package
  - Bump to the latest version of skopeo
  - vendor.conf: add ostree-go
  - it is used by containers/image for pulling images to the OSTree storage.
  - fail early when image os does not match host os
  - Improve documentation on what to do with containers/image failures in test-skopeo
  -   We now have the docker-archive: transport
  -   Integration tests with built registries also exist
  - Support /etc/docker/certs.d
  - update image-spec to v1.0.0-rc6


author: dwalsh <dwalsh@redhat.com> - 0.1.22-1.dev.git5d24b67
changelog:
  -  Give more useful help when explaining usage
  -  Also specify container-storage as a valid transport
  -  Remove docker reference wherever possible
  -  vendor in ostree fixes


author: dwalsh <dwalsh@redhat.com> - 0.1.23-6.dev.git1bbd87
changelog:
  - Change name of storage.conf.5 man page to containers-storage.conf.5, since
  it conflicts with inn package
  - Also remove default to "overalay" in the configuration, since we should
  - allow containers storage to pick the best default for the platform.


author: dwalsh <dwalsh@redhat.com> - 0.1.24-4.dev.git28d4e08
changelog:
  - Update container/storage.conf and containers-storage.conf man page
  - Default override to true so it is consistent with RHEL.


author: dwalsh <dwalsh@redhat.com> - 0.1.25-1.git7fd6f66b
changelog:
  -   Fix CVE in tar-split
  -   copy: add shared blob directory support for OCI sources/destinations
  -   Aligning Docker version between containers/image and skopeo
  -   Update image-tools, and remove the duplicate Sirupsen/logrus vendor
  -   makefile: use -buildmode=pie


author: dwalsh <dwalsh@redhat.com> - 0.1.25-2.git2e8377a7
changelog:
  -  Add manifest type conversion to skopeo copy
  -  User can select from 3 manifest types: oci, v2s1, or v2s2
  -   e.g skopeo copy --format v2s1 --compress-blobs docker-archive:alp.tar dir:my-directory


author: dwalsh <dwalsh@redhat.com> - 0.1.27-1.git
changelog:
  - Fix Conflicts to Obsoletes
  - Add better docs to man pages.
  - Use credentials from authfile for skopeo commands
  - Support storage="" in /etc/containers/storage.conf
  - Add global --override-arch and --override-os options


author: dwalsh <dwalsh@redhat.com> - 0.1.29-1.git
changelog:
  - bump to 0.1.29-1
  - Updated containers/image
      docker-archive generates docker legacy compatible images
      Do not create $DiffID subdirectories for layers with no configs
      Ensure the layer IDs in legacy docker/tarfile metadata are unique
      docker-archive: repeated layers are symlinked in the tar file
      sysregistries: remove all trailing slashes
      Improve docker/* error messages
      Fix failure to make auth directory
      Create a new slice in Schema1.UpdateLayerInfos
      Drop unused storageImageDestination.{image,systemContext}
      Load a *storage.Image only once in storageImageSource
      Support gzip for docker-archive files
      Remove .tar extension from blob and config file names
      ostree, src: support copy of compressed layers
      ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size
      image: fix docker schema v1 -> OCI conversion
      Add /etc/containers/certs.d as default certs directory


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-1.git0144aa8
changelog:
  - Resolves: #1580938 - resolve FTBFS
  - Resolves: #1583762 - remove dependency on btrfs-progs-devel
  - bump to v0.1.31 (from master)
  - built commit ca3bff6
  - use go-toolset deps for rhel8


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-4.git0144aa8
changelog:
  - Resolves: #1597629 - handle dependency issue for skopeo-containers
  - rename skopeo-containers to containers-common as in Fedora


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.31-7.git0144aa8
changelog:
  - build with %gobuild
  - use scl-ized go-toolset as dep
  - disable i686 builds temporarily because of go-toolset issues


author: Lokesh Mandvekar <lsm5@redhat.com> - 1:0.1.32-4.git1715c90
changelog:
  - Fixes @openshift/machine-config-operator#669
  - install /etc/containers/oci/hooks.d and /etc/containers/certs.d


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-2
changelog:
  - comment out mountopt option in order to fix gating tests
    see bug 1769769
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:0.1.40-4
changelog:
  - fix symlinks in /usr/share/rhel/secrets and make
    subscription-manager soft dependency to make them work
  - Related: RHELPLAN-25139


author: Jindrich Novy <jnovy@redhat.com> - 1:1.1.0-2
changelog:
  - fix "CVE-2020-14040 skopeo: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-8]"
  - Resolves: #1854719


author: Eduardo Santiago <santiago@redhat.com> - 1:1.1.0-3
changelog:
  - fix broken gating tests: docker unexpectedly removed htpasswd from
    their 'registry:2' image, so we now use htpasswd from httpd-tools on host.


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-1
changelog:
  - update vendored component versions
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-5
changelog:
  - assure "NET_RAW" is always defined
  - support rhel-shortnames.conf with generated shortname/registry aliases
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-6
changelog:
  - fix rhel-shortnames.conf generation (avoid duplicates and records
    with invalid URL)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/2e90a8a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/a05ddb8)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/6c0e35a)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/b4210c0)
  - Resolves: #1914884


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.1-13
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/3abb778)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.2
    (https://github.com/containers/skopeo/commit/e72dd9c)
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-2
changelog:
  - use rhel-shortnames only from trusted registries
  - sync with config files from current versions of vendored projects
  - Resolves: #1933775
  - Resolves: #1933776


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-3
changelog:
  - use infra_image = "registry.redhat.io/rhel8/pause" in contiainers.conf
  - add update-vendored.sh script which will always assure we ship
    documentation/configs for versions vendored in podman, buildah and
    skopeo
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-4
changelog:
  - use infra_image = "registry.redhat.io/ubi8/pause" in containers.conf
    (unlike previous one ubi8/pause doesn't require authentication)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.2-5
changelog:
  - require crun >= 0.19 and set it as default OCI runtime
  - add ensure() function to update.sh so that configuration statements
    can be easily amended/reviewed
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-1
changelog:
  - update to skopeo-1.2.3
  - sync with Fedora deps
  - fix typo in upstream Makefile
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.2.3-2
changelog:
  - assure runc is set as default runtime in RHEL8
  - update shortnames from upstream
  - sync vendored component versions with upstream
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.0-3
changelog:
  - update to new versions of vendored components
  - fail is there is an issue in communication with Pyxis API
  - understand devel branch in update.sh script
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.3
    (https://github.com/containers/skopeo/commit/038f70e)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.3.1-4
changelog:
  - add direct runc dependency to avoid situation when runc is listed
    as default runtime but only crun is present in RHEL8
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-1
changelog:
  - update vendored components
  - ship /etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release only on non-RHEL and
    CentOS distros
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.0-7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/ea32394)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/130f32f)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.2-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.4
    (https://github.com/containers/skopeo/commit/01e51ce)
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/47b8082)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/177443f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/31b8981)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.5
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/db1e814)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.6
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/c5a5199)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.7
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/25d3e7b)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.8
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/4d3588e)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.9
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/86fa758)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.10
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/53cf287)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.11
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/a95b0cc)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.4.1-0.12
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/ff88d3f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/fc81803)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/116e75f)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 1:1.5.1-0.3
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/main
    (https://github.com/containers/skopeo/commit/9c9a9f3)
  - Related: #2001445


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.2-0.4
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/8191ef3)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.3-0.1
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/d79588e)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.11.3-0.2
changelog:
  - update to the latest content of https://github.com/containers/skopeo/tree/release-1.11
    (https://github.com/containers/skopeo/commit/7e11ab4)
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 2:1.12.0-2
changelog:
  - rebuild for following CVEs:
  CVE-2022-41724 CVE-2022-41725 CVE-2023-24537 CVE-2023-24538 CVE-2023-24534 CVE-2023-24536 CVE-2022-41723 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400
  - Resolves: #2179951
  - Resolves: #2187319
  - Resolves: #2187367
  - Resolves: #2203682
  - Resolves: #2207513


author: Jindrich Novy <jnovy@redhat.com> - 2:1.14.0-2
changelog:
  - update to latest content of https://github.com/containers/skopeo/releases/tag/1.14.0
    (https://github.com/containers/skopeo/commit/6abf96bb82666fbb3d4ad9faf1812e5ae2d31a74)


author: Jindrich Novy <jnovy@redhat.com> - 1.1.7-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.7
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.1.8-1
changelog:
  - update to
    https://github.com/rootless-containers/slirp4netns/releases/tag/v1.1.8
  - Related: #1883490


author: Jindrich Novy <jnovy@redhat.com> - 1.2.0-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.0
  - Related: #2061390


author: Jindrich Novy <jnovy@redhat.com> - 1.2.1-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1
  - Related: #2176055


author: Jindrich Novy <jnovy@redhat.com> - 1.2.2-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2
  - Related: Jira:RHEL-2110


author: Jindrich Novy <jnovy@redhat.com> - 1.2.3-1
changelog:
  - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3
  - Related: Jira:RHEL-2110


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-1
changelog:
  - New upstream release with many enhancements and bugfixes
  - Metainfo file for AppData/Software Center
  - Drop patch for Fedora bug#803234 which is fixed upstream


author: Rajeesh K V <rajeeshknambiar@fedoraproject.org> 6.1-3
changelog:
  - Updated license for AnjaliOldLipi to OFL 1.1
  - Drop the email confirmation on AnjaliOldLipi license


author: Bhupesh Sharma <bhsharma@redhat.com> - 1.1.8-1
changelog:
  - Rebase to latest github version Snappy-1.1.8
  - Also change the URL to reflect to the updated github location.


author: Paul Wouters <pwouters@redhat.com> - 1.7.4.1-1
changelog:
  - Resolves: rhbz#1805132 socat does not recognize IP addresses of the SAN extensions in ssl mode
  - Resolves: rhbz#1870279 Transfer via socat fails with openssl enabled
  - Resolves: rhbz#1914989 Socat udp4-recvfrom cause endless loop error when target is not vaild


author: Paul Wouters <paul@xelerance.com> 1.5.0.0-4
changelog:
  - Some filesystem defines moved from their specific (ext2)
    filesystem defines into the generic <linux/fs.h>.


author: Caolán McNamara <caolanm@redhat.com> - 1.7.1.1-5
changelog:
  - recreate autoconf to get correct includes when determining type
    sizes in order to build correctly


author: Paul Wouters <paul@xelerance.com> - 1.7.1.2-1
changelog:
  - Upgraded to 1.7.1.2
  - Link against compat-readline5 for GPLv2 license (Miroslav Lichvar)
    (bz #511310)


author: Paul Wouters <paul@xelerance.com> - 1.7.1.3-1
changelog:
  - Upgrade to 1.7.1.3
  - Includes fix for CVE-2010-2799 Stack overflow by lexical scanning of nested
    character patterns
  - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=620430


author: Paul Wouters <paul@nohats.ca> - 1.7.2.0-1
changelog:
  - Upgraded to 1.7.2.0 which allows tun/tap interfaces without IP address
    and introduces options openssl-compress and max-children.


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.1-1
changelog:
  - Updated to 1.7.2.1 for CVE-2012-0219, rhbz#821553, rhbz#821688
  - Remove patch merged upstream
  - Remove --disable-fips from configure


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.2-2
changelog:
  - Added two patches that fixes some -Wformat warnings. these fix 2 of 3
    failing test cases from test.sh
  - Enabled hardening with full relro/pie
  - Switch from readline5 to readline(6)


author: Paul Wouters <pwouters@redhat.com> - 1.7.2.4-1
changelog:
  - Updated to 1.7.2.4 which contains many bugfixes
  - Run tests in make check
  - Add build dependancies for make test


author: Paul Wouters <pwouters@redhat.com> - 1.7.3.2-1
changelog:
  - Resolves rhbz#1404290 socat build failure on rawhide
  - Resolves rhbz#1416597 socat-1.7.3.2 is available
  - Resolves rhbz#1417483 Failed DNS resolution causes SIGSEGV and endless loop
  - Removed obsoleted patch


author: Andreas Schneider <asn@redhat.com> - 1.1.8-1
changelog:
  - Update to version 1.1.8
    * Added support for openat()
    * Added support for open64() and fopen64()
    * Always enabled logging support
    * Increased maximum for wrapped interfaces to 64
    * Improved fd duplication code
    * Fixed strict-aliasing issues
    * Fixed some use after free issues
    * Fixed issues on ppc64le


author: Andreas Schneider <asn@redhat.com> - 1.2.0-1
changelog:
  - Update to vesrion 1.2.0
    * Added threading support
    * Moved to modern cmake
    * Several smaller bugfixes


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-1
changelog:
  - Fixes: rhbz#1818877 - rebase to softhsm 2.6.0+
  - Fixes: rhbz#1701233 - support setting supported signature methods on the token


author: Alexander Bokovoy <abokovoy@redhat.com> - 2.6.0-3
changelog:
  - Fixes: rhbz#1834909 - softhsm use-after-free on process exit
  - Synchronize the final fix with Fedora


author: Jake Hunsaker <jhunsake@redhat.com> - 1.6-1
changelog:
  - Drop paramiko dependency, use OpenSSH ControlPersist instead
  - Layered cluster profiles can now accept base profile options
  - Debian/Ubuntu hosts now supported


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-1
changelog:
  - New upstream release
  - Overhaul mechanism of execution of sosreport in containers
  - Added RHCOS support
  - Added a 'none' cluster type


author: Jake Hunsaker <jhunsake@redhat.com> - 1.7-2
changelog:
  - Fix 'none' cluster type enablement
  - Update RHCOS image to RHEL 8 version
  - Fix execution from within a container


author: Hans de Goede <hdegoede@redhat.com> - 2.0.0-6
changelog:
  - The last round of security fixes also fixes CVE-2018-14044, CVE-2018-14045
    (rhbz#1601618, rhbz#1601620, rhbz#1601624, rhbz#1601625)


author: Sérgio Basto <sergio@serjux.com> - 2.1.1-1
changelog:
  - Update to 2.1.1
    Bugfixes: Fixed potential buffer overwrite bugs in WavFile routines. Replaced asserts with runtime exceptions.
    Android: Migrated the SoundTouch Android example to new Android Studio
    Automake: unset ACLOCAL in bootstrap script to avoid error in case earlier build script has set it


author: Ondřej Lysoněk <olysonek@redhat.com> - 3.4.2-10
changelog:
  - Fixed CVE-2018-11805
  - Resolves: rhbz#1787514
  - Fixed CVE-2020-1930
  - Resolves: rhbz#1820649
  - Fixed CVE-2020-1931
  - Resolves: rhbz#1820650


author: Miroslav Lichvar <mlichvar@redhat.com> - 1.2.0-1
changelog:
  - update to 1.2.0
  - use macro for ldconfig scriptlets
  - add gcc to build requirements
  - include soname in file list
  - use license macro


author: Uri Lublin <uril@redhat.com> - 8.3-1
changelog:
  - mingw-virt-viewer 9.0-1
  - spice-usbdk-win   1.0-22
  - mingw-spice-gtk   0.38-4
  - mingw-libgovirt   0.3.7-2
  - mingw-spice-protocol 0.14-2
    Related:  rhbz#1841952, rhbz#1179070, rhbz#1428402
    Related:  rhbz#1575043, rhbz#1640058, rhbz#1793019
    Related:  rhbz#1841951
    Related:  rhbz#1842532
    Related:  rhbz#1841949
    Related:  rhbz#1773899
    Related:  rhbz#1741202, rhbz#1741252


author: Uri Lublin <uril@redhat.com> - 8.4-1
changelog:
  - mingw-virt-viewer 9.0-3
  - mingw-libgovirt   0.3.7-5
  - mingw-spice-gtk   0.38-5
    Related: rhbz#844683
    Related: rhbz#1839104 rhbz#1874740 rhbz#1017261
    Related: rhbz#1918459


author: Uri Lublin <uril@redhat.com> - 8.5-5
changelog:
  - mingw-virt-viewer 9.0-6
    Resolves: rhbz#1997058
    Resolves: rhbz#1918877
    Related:  rhbz#1939111
    Related:  rhbz#1942919


author: Uri Lublin <uril@redhat.com> - 8.10-2
changelog:
  - mingw-virt-viewer 9.0-9
    Related: RHEL-116619
    Related: RHEL-76299
    Related: RHEL-99874
    Related: RHEL-96406
    Related: RHEL-96432
    Related: RHEL-100187
    Related: RHEL-103830


author: Uri Lublin <uril@redhat.com> - 8.10-3
changelog:
  - mingw-virt-viewer 9.0-10
    Related: RHEL-116619
    Related: RHEL-112538
    Related: RHEL-120235
    Related: RHEL-114628


author: Uri Lublin <uril@redhat.com> - 0.21.0-2
changelog:
  - Build without pciaccess
    Resolves: rhbz#1964922
  - Fix g_memdup deprecation warning with glib >= 2.68


author: Uri Lublin <uril@redhat.com> - 0.10.0-4
changelog:
  - Reset properly state of pending large messages upon disconnection
    Resolves rhbz#1548419
  - Return detailed message for file transfer
    Resolves rhbz#1520393


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - first build against glibc
  - patched out the use of setresuid(), which is available only on kernels
    2.1.44 and later


author: Cristian Gafton <gafton@redhat.com>
changelog:
  - updated the init script to use reconfigure option to restart squid instead
    of shutdown/restart (both safer and quicker)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - cache & log dirs shouldn't be world readable
  - remove preun script (leave logs & cache @ uninstall)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - switch to using group squid
  - turn off icmp (insecure)
  - update to 2.2.DEVEL3
  - build FAQ docs from source


author: Bernhard Rosenkraenzer <bero@redhat.com>
changelog:
  - Fix compliance with ftp RFCs
    (http://www.wu-ftpd.org/broken-clients.html)
  - Work around a bug in some versions of autoconf
  - BuildPrereq sgml-tools - we're using sgml2html


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix init script again (#11699)
  - add --enable-delay-pools (#11695)
  - update to STABLE3
  - update FAQ


author: Bill Nottingham <notting@redhat.com>
changelog:
  - fix path references in QUICKSTART (#15114)
  - fix initscript translations (#24086)
  - fix shutdown logic (#24234), patch from <jos@xos.nl>
  - add /etc/sysconfig/squid for daemon options & shutdown timeouts
  - three more bugfixes from the Squid people
  - update FAQ.sgml
  - build and ship auth modules (#23611)


author: Bill Nottingham <notting@redhat.com>
changelog:
  - update to 2.4.STABLE1 + patches
  - enable some more configure options (#24981)
  - oops, ship /etc/sysconfig/squid


author: Bill Nottingham <notting@redhat.com>
changelog:
  - 2.4.STABLE3 + patches
  - turn off HTCP at request of maintainers
  - leave SNMP enabled in the build, but disabled in the default config


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE3-0
changelog:
  - Spec file change to enable the nul storage module. bugzilla #74654
  - Upgrade to 2.5STABLE3 with current official patches.
  - Added --enable-auth="basic,ntlm": closes bugzilla #90145
  - Added --with-winbind-auth-challenge: closes bugzilla #78691
  - Added --enable-useragent-log and --enable-referer-log, closes
  - bugzilla #91884


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-1
changelog:
  - New upstream version.
  - Fix the Source: line in this spec file to point to the correct URL.
  - redo the -location patch to work with the new upstream version.


author: Jay Fenlason <fenlason@redhat.com>
changelog:
  - Incorporate many upstream patches
  - Include many spec file changes from D.Johnson <dj@www.uk.linux.org>


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE4-3
changelog:
  - Clean up the spec file to work on 64-bit platforms (use %{_libdir}
    instead of /usr/lib, etc)
  - Make the release number in the changelog section agree with reality.
  - use -fPIE rather than -fpie.  s390 fails with just -fpie


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-1
changelog:
  - New upstream version, obsoletes many patches.
  - Fix --datadir passed to configure.  Configure automatically adds /squid
    so we shouldn't.
  - Remove the problematic triggerpostun trigger, since is's broken, and FC2
    never shipped with that old version.
  - add %{?_smp_mflags} to make line.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE5-2
changelog:
  - Include the first 10 upstream patches
  - Add a patch for the correct location of the winbindd pipe.  This closes
    bugzilla #107561
  - Remove the change to ssl_support.c from squid-2.5.STABLE3-build patch
    This closes #117851
  - Include /etc/pam.d/squid .  This closes #113404
  - Include a patch to close #111254 (assignment in assert)
  - Change squid.init to put output messages in /var/log/squid/squid.out
    This closes #104697
  - Only useradd the squid user if it doesn't already exist, and error out
    if the useradd fails.  This closes #118718.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5STABLE5-5
changelog:
  - Merge current upstream patches.
  - Fix the -pipe patch to have the correct name of the winbind pipe.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-1
changelog:
  - New upstream version, with 32 upstream patches.
    This closes #133970, #133931, #131728, #128143, #126726

  - Change the permissions on /etc/squid/squid.conf to 640.  This closes
    bugzilla #125007


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE6-3
changelog:
  - include patch from Ulrich Drepper <drepper@redhat.com> to stop
    problems with O_NONBLOCK.  This closes #136049


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-1
changelog:
  - new upstream version, with 3 upstream patches.
    Updated the -build and -config patches
  - Include patch from Ulrich Drepper <frepper@redhat.com> to more
    intelligently close all file descriptors.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-2
changelog:
  - Add a triggerin on samba-common to make /var/cache/samba/winbindd_privileged
    accessable so that ntlm_auth will work.  It needs to be in this rpm,
    because the Samba RPM can't assume the squid user exists.
    Note that this will only work if the Samba RPM is recent enough to create
    that directory at install time instead of at winbindd startup time.
    That should be samba-common-3.0.0-15 or later.
    This fixes bugzilla #103726
  - Clean up extra whitespace in this spec file.
  - Add additional upstream patches. (Now 18 upstream patches).
  - patch #112 closes CAN-2005-0096 and CAN-2005-0097, remote DOS security holes.
  - patch #113 closes CAN-2005-0094, a remote buffer-overflow DOS security hole.
  - patch #114 closes CAN-2005-0095, a remote DOS security hole.
  - Remove the -nonbl (replaced by #104) and -close (replaced by #111) patches, since
    they're now fixed by upstream patches.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE7-4
changelog:
  - Include two more upstream patches for security vulns:
    bz#146783 Correct handling of oversized reply headers
    bz#146778 CAN-2005-0211 Buffer overflow in WCCP recvfrom() call


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE8-2
changelog:
  - new upstream version with 4 upstream patches.
  - Reorganize spec file to apply upstream patches first


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-4
changelog:
  - More upstream patches, including the fixed 2GB patch.
  - include the -libbind patch, which prevents squid from using the optional
    -lbind library, even if it's installed.


author: Jay Fenlason <fenlason@redhat.com> 7:2.5.STABLE9-6
changelog:
  - More upstream patches, including a fix for
    bz#157456 CAN-2005-1519 DNS lookups unreliable on untrusted networks


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-1
changelog:
  - new upstream version
  - enabled fakeauth utility (#154020)
  - enabled digest authentication scheme (#155882)
  - all error pages marked as config (#127836)
  - patch for 64bit statvfs interface (#153274)
  - added httpd config file for cachemgr.cgi (#112725)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE10-3
changelog:
  - removed "--enable-truncate" option (#165948)
  - added "--enable-cache-digests" option (#102134)
  - added "--enable-ident-lookups" option (#161640)
  - some clean up (#165949)


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE11-5
changelog:
  - fix for #171213 - CVE-2005-3258 Squid crash due to malformed FTP response
  - more fixes from upstream


author: Martin Stransky <stransky@redhat.com> 7:2.5.STABLE12-2
changelog:
  - rewriten patch squid-2.5.STABLE10-64bit.patch, it works with
    "--with-large-files" option now
  - fix for #72896 - squid does not support > 1024 file descriptors,
    new "--enable-fd-config" option for it.


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE1-1
changelog:
  - new upstream + the latest CVS snapshot from 2006/07/18
  - updated fd config patch
  - enabled epoll
  - fixed release format (#197405)
  - enabled WCCPv2 support (#198642)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-2
changelog:
  - upstream fixes:
    * Accept 00:00-24:00 as a valid time specification (upstream BZ #1794)
    * aioDone() could be called twice
    * Squid reconfiguration (upstream BZ #1800)


author: Martin Stransky <stransky@redhat.com> - 7:2.6.STABLE4-3
changelog:
  - added fix for #183869 - squid can abort when getting status
  - added upstream fixes:
      * Bug #1796: Assertion error HttpHeader.c:914: "str"
      * Bug #1779: Delay pools fairness, correction to first patch
      * Bug #1802: Crash on exit in certain conditions where cache.log is not writeable
      * Bug #1779: Delay pools fairness when multiple connections compete for bandwidth
      * Clarify the select/poll/kqueue/epoll configure --enable/disable options
  - reworked fd patch for STABLE4


author: Martin Bacovsky <mbacovsk@redhat.com> - 7:2.6.STABLE16-2
changelog:
  - our fd_config patch was replaced by upstream's version 
  - Source1 (FAQ.sgml) points to local source (upstream's moved to wiki)


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE2-1
changelog:
  - upgrade to latest upstream 3.0.STABLE2
  - check config file before starting (#428998)
  - whitespace unification of init script
  - some minor path changes in the QUICKSTART file
  - configure with the --with-filedescriptors=16384 option


author: Martin Nagy <mnagy@redhat.com> - 7:3.0.STABLE5-2
changelog:
  - fix configure detection of netfilter kernel headers (#435499),
    patch by aoliva@redhat.com
  - add support for negotiate authentication (#445337)


author: Jiri Skala <jskala@redhat.com> - 7:3.0.STABLE7-2
changelog:
  - used ncsa_auth.8 from man-pages. there will be this file removed due to conflict
  - fix #458593 noisy initscript
  - fix #463129 init script tests wrong conf file
  - fix #450352 - build.patch patches only generated files


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE13-2
changelog:
  - backported logfile.cc syslog parameters patch from 3.1 (b9443.patch)
  - GCC-4.4 workaround in src/wccp2.cc


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.0.STABLE17-2
changelog:
  - Bug #514014, update to 3.0.STABLE17 fixing the denial of service issues
    mentioned in Squid security advisory SQUID-2009_2.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-1
changelog:
  - Upgrade to next upstream release 3.1.0.13 with many new features
    * IPv6 support
    * NTLM-passthru
    * Kerberos/Negotiate authentication scheme support
    * Localized error pages based on browser language preferences
    * Follow X-Forwarded-For capability
    * and more..


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.13-7
changelog:
  - Include upstream patches fixing important operational issues
  - Enable ESI support now that it does not conflict with normal operation


author: Jiri Skala <jskala@redhat.com> 7:3.1.0.14-2
changelog:
  - fixed #532930 Syntactic error in /etc/init.d/squid
  - fixed #528453 cannot initialize cache_dir with user specified config file


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.15-3
changelog:
  - fixed #551302 PROXY needs libcap. Also increases security a little.
  - merged relevant upstream bugfixes waiting for next 3.1 release


author: Jiri Skala <jskala@redhat.com> - 7:3.1.0.16-4
changelog:
  - spec file modified to be fedora packaging guidline compliant
  - little shifting lines in init script header due to rpmlint complaint
  - fixes assertion during start up


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.0.16-6
changelog:
  - Patch for Squid security advisory SQUID-2010:2, denial of service
    issue in HTCP processing (CVE-2010-0639)


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.1-2
changelog:
  - Update to 3.1.1 Squid bug #2827 crash with assertion failed:
    FilledChecklist.cc:90: "conn() != NULL" under high load.


author: Jiri Skala <jskala@redhat.com>
changelog:
  - fixes #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.3-2
changelog:
  - Fully fix #548903 - "comm_open: socket failure: (97) Address family not supported by protocol" if IPv6 disabled
  - Various IPv6 related issues fixed, making tcp_outgoing_address behave
    as expected and no commResetFD warnings when using tproxy setups.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.4-1
changelog:
  - Upstream 3.1.4 bugfix release, issues relating to IPv6, TPROXY, Memory
    management, follow_x_forwarded_for, and stability fixes


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.1.5-2
changelog:
  - Upstream 3.1.5 bugfix release
  - Upstream patch for Bug #614665: Squid crashes with  ident auth
  - Upstream patches for various memory leaks


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.9-1
changelog:
  - upgrade to squid-3.2
  - fixes #720445 - Provide native systemd unit file
  - SysV initscript moved to subpackage
  - temproary disabled eCap


author: Jiri Skala <jskala@redhat.com> - 7:3.2.0.13-2
changelog:
  - fixes #747103 - squid does not start if /var/spool/squid is empty
  - fixes #747110 - squid does not start adding "memory_pools off"


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.2.0.14-6
changelog:
  - upstream gcc-4.7 patch
  - fix for bug #772483 running out of memory, mem_node growing out of bounds


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.3-2
changelog:
  - Resolved: #854356 - squid.service use PIDFile
  - Resolved: #859393 - Improve cache_swap script
  - Resolved: #791129 - disk space warning
  - Resolved: #862252 - reload on VPN or network up/down
  - Resolved: #867531 - run test suite during build
  - Resolved: #832684 - missing after dependency nss-lookup.target
  - Removed obsolete configure options


author: Michal Luscon <mluscon@redhat.com> - 7:3.2.9-1
changelog:
  - Update to latest upstream version 3.2.9
  - Fixed: CVE-2013-1839
  - Removed: makefile-patch (+make check)


author: Ville Skyttä <ville.skytta@iki.fi> - 7:3.3.4-2
changelog:
  - Fix basic auth and log daemon DB helper builds.
  - Use xz compressed tarball, fix source URLs.
  - Fix bogus dates in %changelog.


author: Michal Luscon <mluscon@redhat.com> - 7:3.3.9-1
changelog:
  - Update to latest upstream version 3.3.9
  - Fixed #976815: file descriptors are hard coded to 16384
  - Fixed: active ftp crashing
  - Fixed: offset of patches


author: Michal Luscon <mluscon@redhat.com> - 7:3.4.1-1
changelog:
  - Rebase to latest stable upstream release 3.4.1
  - Fixed #1034306: fails to build for AArch64
  - Fixed: active ftp


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.4.12-1
changelog:
  - Update to latest upstream version 3.4.12
  - bug #1173946: Disable -march=native compile time optimization, use Fedora defaults.


author: Henrik Nordstrom <henrik@henriknordstrom.net> - 7:3.5.2-2
changelog:
  - Update to latest upstream version 3.5.2
  - Remove deprecated (and renamed) squid_msnt_auth basic auth helper. Only
    performs LM authentication and not considered useful in todays networks.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.13-3
changelog:
  - Resolves: #1308866 - CVE-2016-2390 squid: incorrect server error 
    handling resulting in denial of service


author: Luboš Uhliarik <luhliari@redhat.com> - 7:3.5.15-1
changelog:
  - new version 3.5.15
  - Resolves: #1311585 - squid: Multiple Denial of Service issues in
    HTTP Response processing
  - Resolves: #1312267 - squid: SQUID-2016_2 advisory, multiple DoS issues


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.0.23-5
changelog:
  - Resolves: #1585617 - Build against libdb only instead of libdb4
  - disabled strict checking for now (squid can not be built with GCC8)


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-1
changelog:
  - Resolves: #1656871 - squid rebase to 4.4
  - Resolves: #1645148 - CVE-2018-19131 squid: Cross-Site Scripting when
    generating HTTPS response messages about TLS errors
  - Resolves: #1645156 - CVE-2018-19132 squid: Memory leak in SNMP query
    rejection code


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-6
changelog:
  - Resolves: #1679526 - Missing detailed configuration file
  - Resolves: #1703117 - RHEL 7 to 8 fails with squid installed because dirs
    changed to symlinks
  - Resolves: #1691741 - Squid cache_peer DNS lookup failed when not all lower
    case
  - Resolves: #1683527 - "Reloading" message on a fresh reboot after enabling
    squid


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-8
changelog:
  - Resolves: # 1738485 - CVE-2019-12527 squid:4/squid: heap-based buffer overflow
    in HttpHeader::getAuth


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.4-9
changelog:
  - Resolves: #1738583 - CVE-2019-12525 squid:4/squid: parsing of header
    Proxy-Authentication leads to memory corruption
  - Resolves: #1828369 - CVE-2020-11945 squid: improper access restriction upon
    Digest Authentication nonce replay could lead to remote code execution
  - Resolves: #1828370 - CVE-2019-12519 squid: improper check for new member in
    ESIExpression::Evaluate allows for stack buffer overflow


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-1
changelog:
  - new version 4.11
  - libsystemd integration
  - Resolves: #1829467 - squid:4 rebase
  - Resolves: #1828378 - CVE-2019-12521 squid:4/squid: off-by-one error in
    addStackElement allows for a heap buffer overflow and a crash
  - Resolves: #1828377 - CVE-2019-12520 squid:4/squid: improper input validation
    in request allows for proxy manipulation
  - Resolves: #1828375 - CVE-2019-12524 squid:4/squid: improper access restriction
    in url_regex may lead to security bypass
  - Resolves: #1820664 - CVE-2019-18860 squid: mishandles HTML in the host
    parameter to cachemgr.cgi which could result in squid behaving in unsecure way
  - Resolves: #1802514 - CVE-2020-8449 squid:4/squid: Improper input validation
    issues in HTTP Request processing
  - Resolves: #1802513 - CVE-2020-8450 squid:4/squid: Buffer overflow in a Squid
    acting as reverse-proxy
  - Resolves: #1802512 - CVE-2019-12528 squid:4/squid: Information Disclosure
    issue in FTP Gateway
  - Resolves: #1771288 - CVE-2019-18678 squid:4/squid: HTTP Request Splitting
    issue in HTTP message processing
  - Resolves: #1771283 - CVE-2019-18679 squid:4/squid: Information Disclosure
    issue in HTTP Digest Authentication
  - Resolves: #1771280 - CVE-2019-18677 squid:4/squid: Cross-Site Request Forgery
    issue in HTTP Request processing
  - Resolves: #1771275 - CVE-2019-12523 squid:4/squid: Improper input validation
    in URI processor
  - Resolves: #1771272 - CVE-2019-18676 squid:4/squid: Buffer overflow in URI
    processor
  - Resolves: #1771264 - CVE-2019-12526 squid:4/squid: Heap overflow issue in URN
    processing
  - Resolves: #1738581 - CVE-2019-12529 squid: OOB read in Proxy-Authorization
    header causes DoS


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-2
changelog:
  - Resolves: #1853130 - CVE-2020-15049 squid:4/squid: request smuggling and
    poisoning attack against the HTTP cache
  - Resolves: #1853136 - CVE-2020-14058 squid:4/squid: DoS in TLS handshake


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-3
changelog:
  - Resolves: #1871705 - CVE-2020-24606 squid: Improper Input Validation could
    result in a DoS
  - Resolves: #1871702 - CVE-2020-15811 squid: HTTP Request Splitting could result
    in cache poisoning
  - Resolves: #1871700 - CVE-2020-15810 squid: HTTP Request Smuggling could result
    in cache poisoning


author: Lubos Uhliarik <luhliari@redhat.com> - 7:4.11-5
changelog:
  - Resolves: #1944261 - CVE-2020-25097 squid:4/squid: improper input validation
    may allow a trusted client to perform HTTP Request Smuggling


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-2
changelog:
  - Resolves: #2006121 - SQUID shortens FTP Link wrong that contains a semi-colon
    and as a result is not able to download zip file.CODE 404 TO CLIENT)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-3
changelog:
  - Resolves: #1941506 - CVE-2021-28116 squid:4/squid: out-of-bounds read in WCCP
    protocol data may lead to information disclosure


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-5
changelog:
  - Resolves: #2130260 - CVE-2022-41318 squid:4/squid: buffer-over-read in SSPI and SMB
    authentication


author: Tomas Korbar <tkorbar@redhat.com> - 4.15-6
changelog:
  - Resolves: #2072988 - [RFE] Add the "IP_BIND_ADDRESS_NO_PORT"
    flag to sockets created for outgoing connections in the squid source code.


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-8
changelog:
  - Resolves: RHEL-18351 - squid:4/squid: Buffer over-read in the HTTP Message
    processing feature (CVE-2023-49285)
  - Resolves: RHEL-18342 - squid:4/squid: Incorrect Check of Function Return
    Value In Helper Process management (CVE-2023-49286)
  - Resolves: RHEL-18230 - squid:4/squid: Denial of Service in SSL Certificate
    validation (CVE-2023-46724)
  - Resolves: RHEL-15911 - squid:4/squid: NULL pointer dereference in the gopher
    protocol code (CVE-2023-46728)
  - Resolves: RHEL-18251 - squid crashes in assertion when a parent peer exists
  - Resolves: RHEL-14794 - squid: squid multiple issues in HTTP response caching
    (CVE-2023-5824)
  - Resolves: RHEL-14803 - squid: squid: Denial of Service in HTTP Digest
    Authentication (CVE-2023-46847)
  - Resolves: RHEL-14777 - squid: squid: Request/Response smuggling in HTTP/1.1
    and ICAP (CVE-2023-46846)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-9
changelog:
  - Resolves: RHEL-19552 - squid:4/squid: denial of service in HTTP request 
    parsing (CVE-2023-50269)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10
changelog:
  - Resolves: RHEL-28529 - squid:4/squid: Denial of Service in HTTP Chunked
    Decoding (CVE-2024-25111)
  - Resolves: RHEL-26088 - squid:4/squid: denial of service in HTTP header
    parser (CVE-2024-25617)


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.1
changelog:
  - Resolves: RHEL-56024 - (Regression) Transfer-encoding:chunked data is not sent
    to the client in its complementary


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.2
changelog:
  - Disable ESI support
  - Resolves: RHEL-65075 - CVE-2024-45802 squid:4/squid: Denial of Service
    processing ESI response content


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.3
changelog:
  - Resolves: RHEL-22593 - CVE-2024-23638 squid:4/squid: vulnerable to
    a Denial of Service attack against Cache Manager error responses


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.6
changelog:
  - Resolves: RHEL-84420 - A squid child process causes a memory reference error
    and the squid service terminates abnormally


author: Luboš Uhliarik <luhliari@redhat.com> - 7:4.15-10.9
changelog:
  - Resolves: RHEL-122484 - squid: Squid vulnerable to information disclosure via
    authentication credential leakage in error handling (CVE-2025-62168)


author: Tomas Korbar <tkorbar@redhat.com> - 7:4.15-10.10
changelog:
  - Resolves: RHEL-160675 - squid:4/squid: Squid: Denial of Service
    via crafted ICP traffic (CVE-2026-32748)
  - Resolves: RHEL-160674 - squid:4/squid: Squid: Denial of Service
    via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526)


author: Fernando Pacheco <fpacheco@redhat.com> - 1.16-1
changelog:
  - stald/utils: Space, lines and voids clenaups
  - stalld: Add an option to easily set stalld as SCHED_DEADLINE
  - stalld: Comments cleanup
  - src/utils: Comments cleanup
  - src/throttling: Comments cleanup
  - src/stalld.h Comments cleanup
    Resolves: rhbz#2068549


author: Leah Leshchinsky <lleshchi@redhat.com> - 1.17.1-1
changelog:
  - stalld: Fix memory leak in print_boosted_info()
  - utils: Check if the system is in lockdown mode
  - stalld: print process comm and cpu when boosting
  Resolves: rhbz#2120800


author: Parag Nemade <pnemade AT redhat DOT com> - 1.1.0-7
changelog:
  - Add metainfo file to show this font in gnome-software
  - Remove %clean section which is optional now
  - Remove buildroot which is optional now
  - Remove removal of buildroot in %install
  - Remove group tag


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-2
changelog:
  - Update to 2.0.0
  - Allow the user to interact with the daemon under conditions
    where a pool, filesystem, or blockdev is not fully functional.
  - Resolves: rhbz#1730493
  - Establish an environment variable for D-Bus timeout parameter.
  - Resolves: rhbz#1678631
  - Return detailed error messages on all error-appearing user actions.
  - Resolves: rhbz#1642393
  - Resolves: rhbz#1687869
  - Exit with error code 0 and error message on stderr for all command-line
    parsing errors.
  - Resolves: rhbz#1747564
  - Show more complete error messages on D-Bus method call failures.
  - Resolves: rhbz#1717460
  - Add version numbers to required packages
  - Resolves: rhbz#1717489


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.1-6
changelog:
  - Update to 2.1.1
  - Resolves: rhbz#1791472
  - Update RPM spec file
  - Resolves: rhbz#1827360
  - Error messages when creating a pool are more helpful
  - Resolves: rhbz#1734496
  - Support per-pool encryption of devices that form a pools data tier
  - Resolves: rhbz#1768580
  - Improve error handling on partial unlock failure of encrypted pools
  - Resolves: rhbz#1855520


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931670
  - Remove requirement for python3-semantic_version
  - Resolves: rhbz#1972355
  - Remove unnecessary keyutils Requires line


author: Dennis Keefe <dkeefe@redhat.com> - 2.0.0-4
changelog:
  - Update to 2.0.0
  - Resolves: rhbz#1760906
  - Fix a bug where last update time for variable length metadata was not set
    properly on startup:
  - Resolves: rhbz#1720399
  - Specify path of PID file as "/run/stratisd.pid" instead of 
    "/var/run/stratisd.pid".
  - Resolves: rhbz#1754649
  - For a particular log entry, reduce log level from INFO to DEBUG and make the
    log message more detailed:
  - Resolves: rhbz#1680052


author: Dennis Keefe <dkeefe@redhat.com> - 2.1.0-1
changelog:
  - Update to 2.1.0
  - Resolves: rhbz#1791473
  - Update Stratis RPM Spec File
  - Resolves: rhbz#1828487
  - Support per-pool encryption of the devices that form a pool's data tier
  - Resolves: rhbz#1768580
  - Improve systemd unit file description
  - Resolves: rhbz#1756525


author: Dennis Keefe <dkeefe@redhat.com> - 2.3.0-2
changelog:
  - Update to 2.3.0
  - Resolves: rhbz#1885328
  - Stratis devices inhabit an existing root directory path
  - Resolves: rhbz#1798244
  - Add Clevis Support
  - Resolves: rhbz#1868100
  - Improve stratisd log levels
  - Resolves: rhbz#1757976


author: Bryan Gurney <bgurney@redhat.com> - 2.4.0-3
changelog:
  - Update to 2.4.0
  - Resolves: rhbz#1931671
  - Improve stratis by adding Multi-threading
  - Resolves: rhbz#1927485
  - Dump stratis configuration on demand or in debug
  - Resolves: rhbz#1735475
  - Add noalign option to XFS creation on MDV
  - Resolves: rhbz#1908318
  - Cap thinpool metadata device size at devicemapper-set limit
  - Resolves: rhbz#1707461


author: Bryan Gurney <bgurney@redhat.com> - 2.4.2-1
changelog:
  - Update to 2.4.2
  - Resolves: rhbz#1931671
  - Ensure that binaries are installed with proper features enabled
  - Split dracut modules out to subpackage
  - Add additional dependencies in dracut module


author: John Kacur <jkacur@redhat.com> - 0.15.00-1
changelog:
  - Rebase to upstream V0.15.00
  - Add the following upstream patches
  - stress-shm: move /dev/shm check to earlier in the setup phase
  - stress-shm: skip stressor if /dev/shm is not mounted with tmpfs on linux
  - stress-sysfs: check for zero sysfs entries after pruning the directory
  Resolves: rhbz#2144070


author: John Kacur <jkacur@redhat.com> - 0.17.08-1
changelog:
  - Rebase to upstream V0.17.08
  - ARM: Don't declare inlined yield helper if yield is not available
  Resolves: RHEL-33304


author: John Kacur <jkacur@redhat.com> - 0.18.06-1
changelog:
  - Update the stress-ng-0.18.06 upstream
  - Include some upstream patches after 0.18.06
  Resolves: RHEL-65474


author: Petr Viktorin <pviktori@redhat.com> - 1.15.0-8
changelog:
  - Run sanity-check.py with Python 3
    https://bugzilla.redhat.com/show_bug.cgi?id=1595816
    https://bugzilla.redhat.com/show_bug.cgi?id=1610038


author: Christopher Snyder <csnyder@redhat.com>
changelog:
  - 1776461: Rebase subscription-manager-migration-data component to the latest
    upstream branch for RHEL 8.2.0 (csnyder@redhat.com)
  - 1776461: Update product certs to include those for 8.2 (csnyder@redhat.com)


author: Michael Catanzaro <mcatanzaro@redhat.com> - 3.28.3-3
changelog:
  - Use autosetup so WebKitGTK patch actually gets applied, and rewrite the patch to work
    Resolves: RHEL-26699


author: Tom Stellard <tstellar@redhat.com> - 4.0.2-2
changelog:
  - Use make macros
    https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
  - Disable Go tests


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.0-2.20200828git0c238a2
changelog:
  - Backport fixes from 0.4.0 stable branch. Resolves: rhbz#1868375
    (fixes usage of swtpm-localca with passwords when signing keys)


author: Marc-André Lureau <marcandre.lureau@redhat.com> - 0.4.2-1.20201201git2df14e3
changelog:
  - Update to 0.4.2, to address potential symlink vulnerabilities (CVE-2020-28407).
    Resolves: rhbz#1906043


author: <msekleta@redhat.com> - 11.7.3-7
changelog:
  - Don't trigger autofs mounts when running sadc (#2000910)
  - sar: Add missing %gnice CPU value for tickless CPU (#2000916)
  - sadf: Fix seg fault on empty data files (#1910841)
  - sar: Fix typo in manual page (#1877836)


author: Pavel Šimovec <psimovec@redhat.com> - 11.7.3-11
changelog:
  - fix the arithmetic overflow in allocate_structures() that is still possible on some 32 bit systems (CVE-2023-33204)


author: Lukáš Zaoral <lzaoral@redhat.com> - 11.7.3-13
changelog:
  - fix memory allocation errors with malformed sa files (RHEL-35511)
  - reorder patches to prevent errors during their application


author: Stan Cox <scox@redhat.com> - 4.7-1
changelog:
  - Upstream release, see wiki page below for detailed notes.
    https://sourceware.org/systemtap/wiki/SystemTapReleases


author: Frank Ch. Eigler <fche@redhat.com> - 4.8-2
changelog:
  - rhbz2156092 = rhbz1997192
  - rhbz2145241 = rhbz2145242
  - rhbz2156093 = rhbz2149223
  - rhbz2156095 = rhbz2149666
  - rhbz2156094 = rhbz2154430


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-4
changelog:
  - Removing build-time dependency on sharutils(rhbz#1587877)
  - Changing git dependency to smaller git-core


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.2-6
changelog:
  - Resolves: #1715423 - tcpdump pre creates user and groups unconditionally
  - Resolves: #1655622 - CVE-2018-19519 Stack-based buffer over-read in print-hncp.c:print_prefix() via crafted pcap


author: Michal Ruprich <mruprich@redhat.com> - 14:4.9.3-2
changelog:
  - Resolves: #1860216 - tcpdump can not parse mptcp options
  - Resolves: #1901635 - ppp decapsulator can be convinced to allocate a large amount of memory
  - Adding tedude test to gating


author: Hangbo Fan <fanhangbo.fhb@alibaba-inc.com> - 14:4.9.3-5.0.1
changelog:
  - Add doc sub package
  - cherry-pick `add sw patch #199f8102fc30b385b28c16494d2a683ecd265166`.(nijie@wuxiat.com)


author: Jan Macku <jamacku@redhat.com> - 6.22.03-1
changelog:
  - Update to tcsh-6.22.03
  - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch                              - applied by upstream
  - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch   - applied by upstream
  - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch  - applied by upstream


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-69
changelog:
  - Resolves: #1445259 - telnet won't build with latest gcc
  - added note about address resolution in manpage


author: Michal Ruprich <mruprich@redhat.com> - 1:0.17-73
changelog:
  - Resolves: #1602711 - Please review important issues found by covscan
  - Resolves: #1637085 - Option -i is missing in telnet in el8 but is available in el7


author: Parag Nemade <pnemade AT redhat DOT com> - 0.1-20
changelog:
  - Resolves:rh#921852 - Four culmus subpackages are not listed in build require
  - Added BR: and R: for the following packages
  - culmus-hadasim-clm-fonts, culmus-simple-clm-fonts
  - culmus-stamashkenaz-clm-fonts, culmus-stamsefarad-clm-fonts


author: Than Ngo <than@redhat.com> - 9:20200327-19
changelog:
  - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs


author: Weitao Zhou <zhouwt@linux.alibaba.com> - 9:20200406-26.0.1
changelog:
  - Fix gcc10 -fno-common compile issue for compatible with gcc10 build
  - anolis texlive add loongarch64(Yaxuan Liu)


author: Lukáš Zaoral <lzaoral@redhat.com> - 5.2-25
changelog:
  - Fix inconsistent --map-file option spelling in manual (rhbz#2066853)
  - Fix memory corruption in tftpd when filename remapping with macro \x
    is used (rhbz#2066862)


author: Weitao Zhou <zhouwt@linux.alibaba.com> 5.2-27.0.1
changelog:
  - Make configure an order-only prerequisite of aconfig.h.in
  - remove autoreconf in %build to fix parallel build error
  - use extern in header files when declaring global variables for compatible gcc10 build
  - Add doc sub package


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-7
changelog:
  - Fix CVE-2024-21886 tigervnc: xorg-x11-server: heap buffer overflow in DisableDevice
    Resolves: RHEL-20388
  - Fix CVE-2024-21885 tigervnc: xorg-x11-server: heap buffer overflow in XISendDeviceHierarchyEvent
    Resolves: RHEL-20382
  - Fix CVE-2024-0229 tigervnc: xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
    Resolves: RHEL-20530
  - Fix CVE-2023-6816 tigervnc: xorg-x11-server: Heap buffer overflow in DeviceFocusEvent and ProcXIQueryPointer
    Resolves: RHEL-21214


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-9
changelog:
  - Fix CVE-2024-31080 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents
    Resolves: RHEL-30755
  - Fix CVE-2024-31083 tigervnc: xorg-x11-server: User-after-free in ProcRenderAddGlyphs
    Resolves: RHEL-30767
  - Fix CVE-2024-31081 tigervnc: xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-10
changelog:
  - Drop patches that are already part of xorg-x11-server
    Resolves: RHEL-30755
    Resolves: RHEL-30767
    Resolves: RHEL-30761


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-14
changelog:
  - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability
    Resolves: RHEL-61999


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-15
changelog:
  - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor
    Resolves: RHEL-79397
  - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText()
    Resolves: RHEL-79401
  - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms()
    Resolves: RHEL-79386
  - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey()
    Resolves: RHEL-79380
  - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient()
    Resolves: RHEL-79369
  - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow()
    Resolves: RHEL-79364
  - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents()
    Resolves: RHEL-79360
  - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger()
    Resolves: RHEL-79348


author: Adam Tkac <atkac redhat com> 0.0.90-0.4.20090403svn3751
changelog:
  - update to r3751
  - patches merged
    - tigervnc-xclients.patch
    - tigervnc-clipboard.patch
    - tigervnc-rh212985.patch
  - basic RandR support in Xvnc (resize of the desktop)
  - use built-in libjpeg (SSE2/MMX accelerated encoding on x86 platform)
  - use Tight encoding by default
  - use TigerVNC icons


author: Adam Tkac <atkac redhat com> 0.0.90-0.6.20090427svn3789
changelog:
  - update to r3789
    - tigervnc-rh494801.patch merged
  - tigervnc-newfbsize.patch is no longer needed
  - fix problems when vncviewer and Xvnc run on different endianess (#496653)
  - UltraVNC and TightVNC clients work fine again (#496786)


author: Adam Tkac <atkac redhat com> 0.0.90-0.10
changelog:
  - rebuild against 1.6.1.901 X server (#497835)
  - disable i18n, vncviewer is not UTF-8 compatible (#501832)


author: Adam Tkac <atkac redhat com> 0.0.91-0.11
changelog:
  - update to 0.0.91 (1.0.0 RC1)
  - patches merged
    - tigervnc10-rh499401.patch
    - tigervnc10-rh497592.patch
    - tigervnc10-rh501832.patch
  - after discusion in upstream drop tigervnc-bounds.patch
  - configure flags cleanup


author: Adam Tkac <atkac redhat com> 0.0.91-0.13
changelog:
  - temporary use F11 Xserver base to make Xvnc compilable
  - BuildRequires: libXi-devel
  - don't ship tigervnc-server-module on s390/s390x


author: Adam Tkac <atkac redhat com> 1.0.0-2
changelog:
  - update underlying X source to 1.6.4-0.3.fc11
  - remove bogus '-nohttpd' parameter from /etc/sysconfig/vncservers (#525629)
  - initscript LSB compliance fixes (#523974)
  - improve -LowColorSwitch documentation and handling (#510185)
  - honor dotWhenNoCursor option (and it's changes) every time (#524340)


author: Adam Tkac <atkac redhat com> 1.0.90-0.1.20091221svn3929
changelog:
  - update to 1.0.90 snapshot
  - patches merged
    - tigervnc10-compat.patch
    - tigervnc10-rh510185.patch
    - tigervnc10-rh524340.patch
    - tigervnc10-rh516274.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.2.20091221svn3929
changelog:
  - add patch for upstream X.Org issue #25909
  - add libXdmcp-devel to build requires to build Xvnc with XDMCP support (#552322)


author: Adam Tkac <atkac redhat com> 1.0.90-0.4.20091221svn3929
changelog:
  - mark stack as non-executable in jpeg ASM code
  - add xorg-x11-xauth to Requires
  - add support for X.Org 1.8
  - drop shave sources, they are no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.6.20100219svn3993
changelog:
  - add mesa-dri-drivers and xkeyboard-config to -server Requires
  - update to r3993 1.0.90 snapshot
    - tigervnc11-noexecstack.patch merged
    - tigervnc11-xorg18.patch merged
    - xserver18.patch is no longer needed


author: Adam Tkac <atkac redhat com> 1.0.90-0.9.20100219svn3993
changelog:
  - add server-applet subpackage which contains Java vncviewer applet
  - fix Java applet; it didn't work when run from web browser
  - add xorg-x11-xkb-utils to server Requires


author: Adam Tkac <atkac redhat com> 1.0.90-0.10.20100420svn4030
changelog:
  - update to r4030 snapshot
  - patches merged to upstream
    - tigervnc11-rh522369.patch
    - tigervnc11-rh551262.patch
    - tigervnc11-r4002.patch
    - tigervnc11-r4014.patch


author: Adam Tkac <atkac redhat com> 1.0.90-0.11.20100420svn4030
changelog:
  - link libvnc.so "now" to catch "undefined symbol" errors during Xorg startup
  - use always XkbConvertCase instead of XConvertCase (#580159, #586406)
  - don't link libvnc.so against libXi.la, libdix.la and libxkb.la; use symbols
    from Xorg instead


author: Adam Tkac <atkac redhat com> 1.0.90-0.14.20100420svn4030
changelog:
  - fix memory leak in Xvnc input code (#597172)
  - don't crash when receive negative encoding (#600070)
  - explicitly disable udev configuration support
  - add gettext-autopoint to BR


author: Adam Tkac <atkac redhat com> 1.0.90-0.17.20100721svn4113
changelog:
  - update to r4113
  - patches merged
    - tigervnc11-rh586406.patch
    - tigervnc11-libvnc.patch
    - tigervnc11-rh597172.patch
    - tigervnc11-rh600070.patch
    - tigervnc11-options.patch
  - don't own %{_datadir}/icons directory (#614301)
  - minor improvements in the .desktop file (#616340)
  - bundled libjpeg configure requires nasm; is executed even if system-wide
    libjpeg is used


author: Adam Tkac <atkac redhat com> 1.0.90-0.19.20100813svn4123
changelog:
  - separate Xvnc, vncpasswd and vncconfig to -server-minimal subpkg (#626946)
  - move license to separate subpkg and Requires it from main subpkgs
  - Xvnc: handle situations when no modifiers exist well (#611677)


author: Adam Tkac <atkac redhat com> 1.0.90-0.20.20100813svn4123
changelog:
  - press fake modifiers correctly (#633931)
  - supress unneeded debug information emitted from initscript (#633645)


author: Adam Tkac <atkac redhat com> 1.0.90-0.24.20100813svn4123
changelog:
  - rebuild against xserver 1.10.X
  - 0001-Return-Success-from-generate_modkeymap-when-max_keys.patch merged


author: Adam Tkac <atkac redhat com> 1.0.90-0.25.20101208svn4225
changelog:
  - update to r4225
  - patches merged
    - tigervnc11-rh611677.patch
    - tigervnc11-rh633931.patch
    - tigervnc11-xorg1.10.patch
  - enable VeNCrypt and PAM support


author: Adam Tkac <atkac redhat com> - 1.0.90-3
changelog:
  - fix wrong usage of memcpy which caused screen artifacts (#652590)
  - don't point to inaccessible link in sysconfig/vncservers (#644975)


author: Adam Tkac <atkac redhat com> - 1.1.0-1
changelog:
  - update to 1.1.0
  - update the xorg11 patch
  - patches merged
    - tigervnc11-glx.patch
    - tigervnc11-CVE-2011-1775.patch
    - 0001-Use-memmove-instead-of-memcpy-in-fbblt.c-when-memory.patch


author: Adam Tkac <atkac redhat com> - 1.1.0-3
changelog:
  - don't build X.Org devel docs (#755782)
  - applet: BR generic java-devel instead of java-gcj-devel (#755783)
  - use runuser to start Xvnc in systemd service file (#754259)
  - don't attepmt to restart Xvnc session during update/erase (#753216)


author: Adam Tkac <atkac redhat com> - 1.1.0-5
changelog:
  - clean Xvnc's /tmp environment in service file before startup
  - fix building against the latest JAVA 7 and X.Org 1.12


author: Adam Tkac <atkac redhat com> 1.2.80-0.1.20120905svn4996
changelog:
  - update to 1.2.80
  - remove deprecated patches
    - tigervnc-102434.patch
    - tigervnc-viewer-reparent.patch
    - tigervnc11-java7.patch
  - patches merged
    - tigervnc11-xorg111.patch
    - tigervnc11-xorg112.patch


author: Adam Tkac <atkac redhat com> - 1.2.80-0.12.20130314svn5065
changelog:
  - include /etc/X11/xorg.conf.d/10-libvnc.conf sample configuration (#712482)
  - vncserver now honors specified -geometry parameter (#755947)


author: Tim Waugh <twaugh@redhat.com> 1.2.80-0.14.20130314svn5065
changelog:
  - Use systemd rpm macros (bug #850340).  Moved systemd requirements
    from main package to server sub-package.
  - Applied Debian patch to fix busy loop when run from inetd in nowait
    mode (bug #920373).
  - Added dependency on xorg-x11-xinit to server sub-package so that
    default window manager can be found (bug #896284, bug #923655).
  - Fixed bogus changelog date.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-3
changelog:
  - Avoid PIDFile problems in systemd unit file (bug #983232).
  - libvnc.so: don't use unexported key_is_down function.
  - Don't use shebang in vncserver script.


author: Tim Waugh <twaugh@redhat.com> 1.3.0-15
changelog:
  - Disable dri3 to enable building (bug #1063392).
  - Fixed heap-based buffer overflow (CVE-2014-0011, bug #1050928).


author: Tim Waugh <twaugh@redhat.com> - 1.3.1-8
changelog:
  - Input reset fixes from upstream (bug #1116956).
  - No longer need ppc64le patch as it's now in xorg-x11-server.
  - Rebased xserver114.patch again.


author: Tim Waugh <twaugh@redhat.com> - 1.4.2-1
changelog:
  - Rebased xserver116.patch against xorg-x11-server-1.17.1.
  - Allow build against xorg-x11-server-1.17.
  - 1.4.2.


author: Jan Grulich <jgrulich@redhat.com> - 1.6.0-4
changelog:
  - Utilize system-wide crypto policies
    Resolves: bz#1179345
  - Try to disable patch4 as it was previously written to support an
    older version of a different client and breaks some other usage
    Resolves: bz#1280440


author: Jan Grulich <jgrulich@redhat.com> - 1.7.1-3
changelog:
  - Bug 1438704 - CVE-2017-7392 CVE-2017-7393 CVE-2017-7394
                  CVE-2017-7395 CVE-2017-7396 tigervnc: various flaws
    + other upstream related fixes


author: Jan Grulich <jgrulich@redhat.com> - 1.9.0-7
changelog:
  - Improve coverity scan fixes
    Resolves: bz#1602714

    Inform whether view-only password is used or not
    Resolves: bz#1639169

    Backport fixes from RHEL 7
    Resolves: bz#1651254


author: Jan Grulich <jgrulich@redhat.com> - 1.10.1-5
changelog:
  - Install the HOWTO file to correct location
  - Add /usr/bin/vncserver file informing users to read the HOWTO.md file
    Resolves: bz#1790443


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-1
changelog:
  - Update to 1.11.0
    Resolves: bz#1880985
  - Backport fix to allow Tigervnc use boolean values in config files
    Resolves: bz#1883415


author: Jan Grulich <jgrulich@redhat.com> - 1.11.0-2
changelog:
  - Revert removal of vncserver
    Resolves: bz#1897504
  - Correctly start vncsession as a daemon
    Resolves: bz#1897498


author: Jan Grulich <jgrulich@redhat.com> - 1.12.0-4
changelog:
  - Added vncsession-restore script for SELinux policy migration
    Fix SELinux context for root user
    Resolves: bz#2021892


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-1
changelog:
  - 1.13.1
    Resolves: bz#2175748
  - Restore "--fallbacktofreeport" option in the vncserver script
    Resolves: bz#2174398


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-2
changelog:
  - xorg-x11-server: X.Org Server Overlay Window Use-After-Free Local Privilege
    Escalation Vulnerability
    Resolves: bz#2180306


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-4
changelog:
  - Fix CVE-2023-5380 tigervnc: xorg-x11-server: Use-after-free bug in DestroyWindow
    Resolves: RHEL-15236

  - Fix CVE-2023-5367 tigervnc: xorg-x11-server: Out-of-bounds write in XIChangeDeviceProperty/RRChangeOutputProperty
    Resolves: RHEL-15230


author: Jan Grulich <jgrulich@redhat.com> - 1.13.1-5
changelog:
  - Fix CVE-2023-6377 tigervnc: xorg-x11-server: out-of-bounds memory reads/writes in XKB button actions
    Resolves: RHEL-18410
  - Fix CVE-2023-6478 tigervnc: xorg-x11-server: out-of-bounds memory read in RRChangeOutputProperty and RRChangeProviderProperty
    Resolves: RHEL-18422


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-4
changelog:
  - Add option "ApproveLoggedUserOnly" allowing to connect only the user
    owning the running session
    Resolves: RHEL-91104


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-6
changelog:
  - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors
    Resolves: RHEL-97268
  - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294
  - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore
    Resolves: RHEL-97364
  - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension
    Resolves: RHEL-97397
  - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension
    Resolves: RHEL-97232


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-7
changelog:
  - Additional fix to CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension
    Resolves: RHEL-97294


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-8
changelog:
  - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation
    Resolves: RHEL-119979

  - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal
    Resolves: RHEL-120001

  - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap()
    Resolves: RHEL-120762


author: Jan Grulich <jgrulich@redhat.com> - 1.15.0-9
changelog:
  - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002,
    CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities
    Resolves: RHEL-163203
    Resolves: RHEL-163271
    Resolves: RHEL-163257
  - Fix CVE-2026-34352
    Resolves: RHEL-167760


author: Justin Stephenson <jstephen@redhat.com> - 8-1
changelog:
  - Release v8
  - Spec file fixes for EL6
  - Spec file improvements for Debian/Ubuntu pkg-config
  - Tlog-play improve authentication options
  - Handle piped in I/O from stdin and improve the main recording transfer exit
    condition.
  - Use empty string on hostname resolution failure


author: Justin Stephenson <jstephen@redhat.com> - 9-1
changelog:
  - Release v9
  - Add libutempter support
  - Require journal match filter
  - Add file reader match functionality
  - Restore cursor visibility and color attributes on tlog-play exit
  - Add "time" real clock timestamp message field
  - Various upstream CI improvements


author: Justin Stephenson <jstephen@redhat.com> - 11-1
changelog:
  - Fire SIGCHLD after utempter_add_record since it probably eats it.
  - Correct suse rpmbuild
  - Update debbuild for travis CI


author: Justin Stephenson <jstephen@redhat.com> - 12-1
changelog:
  - Release v12
  - Prevent infinite transfer loop on GDM login.
  - tlog-play: add journal namespace support.
  - tlitest: extend delay for limit-action delay test.


author: Justin Stephenson <jstephen@redhat.com> - 12.1
changelog:
  - Exit transfer loop when output fd is closed
  - Revert "Prevent infinite transfer loop on GDM login"


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-16
changelog:
  - Resolves: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Remove JDK subpackges which are unused


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-27
changelog:
  - Related: RHEL-12543
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-28
changelog:
  - Resolves: RHEL-13907
    tomcat: incorrectly parsed http trailer headers can cause request smuggling (CVE-2023-45648)
  - Resolves: RHEL-13904
    tomcat: improper cleaning of recycled objects could lead to information leak (CVE-2023-42795)
  - Resolves: RHEL-12951
    tomcat: FileUpload: DoS due to accumulation of temporary files on Windows (CVE-2023-42794)
  - Resolves: RHEL-12544
    tomcat: HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)
  - Resolves: RHEL-2386
    tomcat: Open Redirect vulnerability in FORM authentication (CVE-2023-41080)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-29
changelog:
  - Resolves: RHEL-17602
    tomcat: HTTP request smuggling via malformed trailer headers (CVE-2023-46589)
  - tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Sokratis Zappis <szappis@redhat.com> - 1:9.0.87-1.el8_10.1
changelog:
  - Resolves: RHEL-38548 - Amend tomcat package's changelog so that fixed CVEs are mentioned explicitly
  - Resolves: RHEL-35813 - Rebase tomcat to version 9.0.87
  - Resolves: RHEL-29255
    tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672)
  - Resolves: RHEL-29250
    tomcat: Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549)


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-6
changelog:
  - Resolves: #2173874 Tomcat installs older java even though newer java is installed
  - Sync with rhel-8.8.0 branch


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-7
changelog:
  - Related: #2173874 Tomcat installs older java even though newer java is installed
  - Bump release number


author: Hui Wang <huwang@redhat.com> - 1:9.0.62-10
changelog:
  - Resolves: #2210630 CVE-2023-28709 tomcat
  - Resolves: #2181448 CVE-2023-28708 tomcat: not including the secure attribute causes information disclosure
  - tomcat: Apache Commons FileUpload: FileUpload DoS with excessive parts (CVE-2023-24998)
    tomcat: JsonErrorReportValve injection (CVE-2022-45143)
    tomcat: request smuggling (CVE-2022-42252)
    tomcat: local privilege escalation vulnerability (CVE-2022-23181)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.3
changelog:
  - Resolves: RHEL-82934
    tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813)
  - Resolves: RHEL-71708
    tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.4
changelog:
  - Resolves: RHEL-91761
    tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650)
  - Resolves: RHEL-71971
    tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.5
changelog:
  - Resolves: RHEL-108486
    tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976)
  - Resolves: RHEL-108494
    tomcat: Dos in multipart upload (CVE-2025-48988)
  - Resolves: RHEL-108502
    tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125)
  - Resolves: RHEL-108510
    tomcat: Denial of service (CVE-2025-52434)
  - Resolves: RHEL-108524
    tomcat: Denial of service (CVE-2025-52520)
  - Resolves: RHEL-108518
    tomcat: Denial of service (CVE-2025-53506)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.6
changelog:
  - Resolves: RHEL-102193
    tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989)


author: Adam Krajcik <akrajcik@redhat.com> - 1:9.0.87-1.el8_10.7
changelog:
  - Resolves: RHEL-124507
    tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752)
  - Resolves: RHEL-91743
    tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651)


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-3
changelog:
  - Rebuild for CVE-2022-41723, CVE-2023-24534, CVE-2023-24536 and
    CVE-2023-24538
  Resolves: #2187345, #2187368, #2203690


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.4-7
changelog:
  - Rebuild for CVE-2023-29406, CVE-2023-39318 and CVE-2023-39319
  Resolves: RHEL-4231, RHEL-4475, RHEL-4502


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-1
changelog:
  - Update to 0.0.99.2
  - Make 'toolbox' create or fall back to a container if possible
  Resolves: #1914687
  - Related: #1934415


author: Jindrich Novy <jnovy@redhat.com> - 0.0.99.2-2
changelog:
  - Actually apply the patch to make 'toolbox' create or fall back to a
    container if possible
  - Support logging into a registry if necessary
  - Related: #1934415


author: Debarshi Ray <rishi@fedoraproject.org> - 0.0.99.3-2
changelog:
  - Update to 0.0.99.3
  - BuildRequire only systemd-rpm-macros as recommended by the Fedora packaging
    guidelines
  - Update the Summary to match upstream
  - Update the URL to point to the website
  Resolves: #2047290


author: Honggang Li <honli@redhat.com> - 4.2.10-25
changelog:
  - Rebase to latest Fedora release
  - Fix file conflicts in torque-devel multilib packages
  - Resolve: bz1853167


author: Kalev Lember <klember@redhat.com> - 3.38.2-2
changelog:
  - Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
  - Resolves: rhbz#1949422


author: Michal Schmidt <mschmidt@redhat.com> - 1.3.9-1
changelog:
  - Upstream release 1.3.9.
  - Add fixes for build errors with OpenSSL 1.1.
  - Add fixes for NULL cipher context use in seal/unseal.
  - spec file modernization.


author: Miloslav Trmac <mitr@redhat.com> - 1:3.2.4-8
changelog:
  - Fix at least a few obvious instances of C abuse (partly #74594 with patch by
    Sysoltsev Slawa)
  - Drop -Dcfree=free fix, not needed with current version


author: Than Ngo <than@redhat.com> 3.2.4-14
changelog:
  - fix #191825, buildrequire on imake
  - fix #173748, fig2dev still refers to /usr/X11R6/lib/X11/rgb.txt


author: Ville Skyttä <ville.skytta at iki.fi> - 1:3.2.5-7
changelog:
  - Get rid of csh dependency, add missing one on bc (#435993).
  - Build with $RPM_OPT_FLAGS (#329831).
  - Convert specfile to UTF-8.
  - Add URL, fix source URL.
  - Escape macros in changelog.
  - Improve summary.


author: Kamil Dudka <kdudka@redhat.com> - 1:3.2.5c-1
changelog:
  - new upstream release
  - patch to generate comments compliant with DSC 3.0, thanks to Ian Dall
    (#558380)


author: Kamil Dudka <kdudka@redhat.com> - 1:3.2.5d-11
changelog:
  - install man pages using the correct file name suffix
  - provide the fig2ps2tex.sh man page as a symlink


author: Jerry Snitselaar <jsnitsel@redhat.com> - 0.3.15-1
changelog:
  - Rebase to 0.3.15
  - Fix CVE-2020-24330 CVE-2020-24331 CVE-2020-24332
  resolves: rhbz#1725782 rhbz#1877517 rhbz#1882402 rhbz#1882414


author: Merlin Mathesius <mmathesi@redhat.com> - 1027-1
changelog:
  - Version bump. Now supported for all architectures.
  - Generate man pages since they are no longer included in source archive.


author: Jerry Snitselaar <jsnitsel@redhat.com> - 1234-5
changelog:
  - Move header files to ibmtss directory.
  - Check return value of TSS_Hash_Generate.
  resolves: rhbz#1636245


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: RHEL-17119
    - print all arguments of failing commands in error messages
    - plugin_sysctl: added support for sysctl names with slash
    - tuned-adm: added support for moving devices between plugin instances
    - api: added methods for retrieval of plugin instances and devices
    - plugin_cpu: amd-pstate mentioned instead of just intel_pstate
    - hotplug: do not report ENOENT errors on device remove
    - plugin_sysctl: expand variables when reporting overrides
    - plugin_acpi: new plugin which handles ACPI platform_profile
    - plugin_bootloader: skip calling rpm-ostree kargs in no-op case
    - plugin_cpu: support cstate settings of pm_qos_resume_latency_us
    - scheduler: add option for ignoring IRQs affinity
    - plugin_intel_uncore: new plugin for uncore setting


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17119
    - lower CPU usage by using runtime=0 in profiles using scheduler plugin
      resolves: RHEL-6869


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.22.1-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: RHEL-17119
    - renamed intel_uncore plugin to uncore
    - network-throughput: increased net.ipv4.tcp_rmem default value


author: zhangbinchen <zhangbinchen@openanolis.org> - 2.22.1-5.0.1
changelog:
  - Don't require syspurpose for Anolis OS
  - Turn on balance mode for Anolis OS
  - Remove python3-syspurpose requirement (gc-taifu@linux.alibaba.com)


author: Jan Vcelak <jvcelak@redhat.com> 2.1.0-1
changelog:
  - new release:
    - daemon: allow running without selected profile
    - daemon: fix profile merging, allow only safe characters in profile names
    - daemon: implement missing methods in DBus interface
    - daemon: implement profile recommendation
    - daemon: improve daemonization, PID file handling
    - daemon: improved device matching in profiles, negation possible
    - daemon: various internal improvements
    - executables: check for EUID instead of UID
    - executables: run python with -Es to increase security
    - plugins: cpu - fix cpupower execution
    - plugins: disk - fix option setting
    - plugins: mounts - new, currently supports only barriers control
    - plugins: sysctl - fix a bug preventing settings application
    - powertop2tuned: speedup, fix crashes with non-C locales
    - powertop2tuned: support for powertop 2.2 output
    - profiles: progress on replacing scripts with plugins
    - tuned-adm: bash completion - suggest profiles from all supported locations
    - tuned-adm: complete switch to D-bus
    - tuned-adm: full control to users with physical access


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.1.2-1
changelog:
  - new release:
    - systemtap {disk,net}devstat: fix typo in usage
    - switched to configobj parser
    - latency-performance: disabled THP
    - fixed fd leaks on subprocesses


author: Jan Vcelak <jvcelak@redhat.com> 2.2.0-1
changelog:
  - new release:
    - remove nobarrier from virtual-guest (data loss prevention)
    - devices enumeration via udev, instead of manual retrieval
    - support for dynamically inserted devices (currently disk plugin)
    - dropped rfkill plugins (bluetooth and wifi), the code didn't work


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.1-1
changelog:
  - new release:
    - audio plugin: fixed error handling in _get_timeout
    - removed cpupower dependency, added sysfs fallback
    - powertop2tuned: fixed parser crash on binary garbage
      resolves: rhbz#914933
    - cpu plugin: dropped multicore_powersave as kernel upstream already did
    - plugins: options manipulated by dynamic tuning are now correctly saved and restored
    - powertop2tuned: added alias -e for --enable option
    - powertop2tuned: new option -m, --merge-profile to select profile to merge
    - prefer transparent_hugepage over redhat_transparent_hugepage
    - recommend: use recommend.conf not autodetect.conf
    - tuned.service: switched to dbus type service
      resolves: rhbz#911445
    - tuned: new option --pid, -P to write PID file
    - tuned, tuned-adm: added new option --version, -v to show version
    - disk plugin: use APM value 254 for cleanup / APM disable instead of 255
      resolves: rhbz#905195
    - tuned: new option --log, -l to select log file
    - powertop2tuned: avoid circular deps in include (one level check only)
    - powertop2tuned: do not crash if powertop is not installed
    - net plugin: added support for wake_on_lan static tuning
      resolves: rhbz#885504
    - loader: fixed error handling
    - spec: used systemd-rpm macros
      resolves: rhbz#850347


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.2.2-1
changelog:
  - new-release:
    - cpu plugin: fixed cpupower workaround
    - cpu plugin: fixed crash if cpupower is installed


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-1
changelog:
  - new-release
    resolves: rhbz#1020743
    - audio plugin: fixed audio settings in standard profiles
      resolves: rhbz#1019805
    - video plugin: fixed tunings
    - daemon: fixed crash if preset profile is not available
      resolves: rhbz#953128
    - man: various updates and corrections
    - functions: fixed usb and bluetooth handling
    - tuned: switched to lightweighted pygobject3-base
    - daemon: added global config for dynamic_tuning
      resolves: rhbz#1006427
    - utils: added pmqos-static script for debug purposes
      resolves: rhbz#1015676
    - throughput-performance: various fixes
      resolves: rhbz#987570
    - tuned: added global option update_interval
    - plugin_cpu: added support for x86_energy_perf_policy
      resolves: rhbz#1015675
    - dbus: fixed KeyboardInterrupt handling
    - plugin_cpu: added support for intel_pstate
      resolves: rhbz#996722
    - profiles: various fixes
      resolves: rhbz#922068
    - profiles: added desktop profile
      resolves: rhbz#996723
    - tuned-adm: implemented non DBus fallback control
    - profiles: added sap profile
    - tuned: lowered CPU usage due to python bug
      resolves: rhbz#917587


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.3.0-2
changelog:
  - fixed race condition in the start/stop code
    resolves: rhbz#1028119
  - improved tuned responsiveness
    resolves: rhbz#1028122


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.0-1
changelog:
  - new-release
    resolves: rhbz#1093883
    - fixed traceback if profile cannot be loaded
      related: rhbz#953128
    - powertop2tuned: fixed traceback if rewriting file instead of dir
      resolves: rhbz#963441
    - throughput-performance: altered dirty ratios for better performance
      resolves: rhbz#1043533
    - latency-performance: leaving THP on its default
      resolves: rhbz#1064510
    - used throughput-performance profile on server by default
      resolves: rhbz#1063481
    - network-latency: added new profile
      resolves: rhbz#1052418
    - network-throughput: added new profile
      resolves: rhbz#1052421
    - recommend.conf: fixed config file
      resolves: rhbz#1069123
    - systemd: added cpupower.service conflict
      resolves: rhbz#1073392
    - balanced: used medium_power ALPM policy
    - added support for >, < assignment modifiers in tuned.conf
    - handled root block devices
    - balanced: used conservative CPU governor
      resolves: rhbz#1124125
    - plugins: added selinux plugin
    - plugin_net: added nf_conntrack_hashsize parameter
    - profiles: added atomic-host profile
      resolves: rhbz#1091977
    - profiles: added atomic-guest profile
      resolves: rhbz#1091979
    - moved profile autodetection from post install script to tuned daemon
      resolves: rhbz#1144067
    - profiles: included sap-hana and sap-hana-vmware profiles
    - man: structured profiles manual pages according to sub-packages
    - added missing hdparm dependency
      resolves: rhbz#1144858
    - improved error handling of switch_profile
      resolves: rhbz#1068699
    - tuned-adm: active: detect whether tuned deamon is running
      related: rhbz#1068699
    - removed active_profile from RPM verification
      resolves: rhbz#1104126
    - plugin_disk: readahead value can be now specified in sectors
      resolves: rhbz#1127127
    - plugins: added bootloader plugin
      resolves: rhbz#1044111
    - plugin_disk: added error counter to hdparm calls
    - plugins: added scheduler plugin
      resolves: rhbz#1100826
    - added tuned-gui


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.4.1-1
changelog:
  - new-release
    - fixed return code of tuned grub template
      resolves: rhbz#1151768
    - plugin_bootloader: fix for multiple parameters on command line
      related: rhbz#1148711
    - tuned-adm: fixed traceback on "tuned-adm list"
      resolves: rhbz#1149162
    - plugin_bootloader is automatically disabled if grub2 is not found
      resolves: rhbz#1150047
    - plugin_disk: set_spindown and set_APM made independent
      resolves: rhbz#976725


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.0-1
changelog:
  - new-release
    resolves: rhbz#1155052
    - add support for ethtool -C to tuned network plugin
      resolves: rhbz#1152539
    - add support for ethtool -K to tuned network plugin
      resolves: rhbz#1152541
    - add support for calculation of values for the kernel command line
      resolves: rhbz#1191595
    - no error output if there is no hdparm installed
      resolves: rhbz#1191775
    - do not run hdparm on hotplug events if there is no hdparm tuning
      resolves: rhbz#1193682
    - add oracle tuned profile
      resolves: rhbz#1196298
    - fix bash completions for tuned-adm
      resolves: rhbz#1207668
    - add glob support to tuned sysfs plugin
      resolves: rhbz#1212831
    - add tuned-adm verify subcommand
      resolves: rhbz#1212836
    - do not install tuned kernel command line to rescue kernels
      resolves: rhbz#1223864
    - add variables support
      resolves: rhbz#1225124
    - add built-in support for unit conversion into tuned
      resolves: rhbz#1225135
    - fix vm.max_map_count setting in sap-netweaver profile
      resolves: rhbz#1228562
    - add tuned profile for RHEL-RT
      resolves: rhbz#1228801
    - plugin_scheduler: added support for runtime tuning of processes
      resolves: rhbz#1148546
    - add support for changing elevators on xvd* devices (Amazon EC2)
      resolves: rhbz#1170152
    - add workaround to be run after systemd-sysctl
      resolves: rhbz#1189263
    - do not change settings of transparent hugepages if set in kernel cmdline
      resolves: rhbz#1189868
    - add tuned profiles for RHEL-NFV
      resolves: rhbz#1228803
    - plugin_bootloader: apply $tuned_params to existing kernels
      resolves: rhbz#1233004


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.5.1-1
changelog:
  - new-release
    related: rhbz#1155052
    - plugin_scheduler: work with nohz_full
      resolves: rhbz#1247184
    - fixed realtime-virtual-guest/host profiles packaged twice
      resolves: rhbz#1249028
    - fixed requirements of realtime and nfv profiles
    - fixed tuned-gui not starting
    - various other minor fixes


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.6.0-1
changelog:
  - new-release
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are missing
    - plugin_sysctl: fixed quoting of sysctl values
      resolves: rhbz#1254538
    - tuned-adm: added log file location hint to verify command output
    - libexec: fixed listdir and isdir in defirqaffinity.py
      resolves: rhbz#1252160
    - plugin_cpu: save and restore only intel pstate attributes that were changed
      resolves: rhbz#1252156
    - functions: fixed sysfs save to work with options
      resolves: rhbz#1251507
    - plugins: added scsi_host plugin
    - tuned-adm: fixed restart attempt if tuned is not running
    - spec: fixed post scriptlet to work without grub
      resolves: rhbz#1265654
    - tuned-profiles-nfv: fix find-lapictscdeadline-optimal.sh for CPUS where ns > 6500
      resolves: rhbz#1267284
    - functions: fixed restore_logs_syncing to preserve SELinux context on rsyslog.conf
      resolves: rhbz#1268901
    - realtime: set unboud workqueues cpumask
      resolves: rhbz#1259043
    - spec: correctly remove tuned footprint from /etc/default/grub
      resolves: rhbz#1268845
    - gui: fixed creation of new profile
      resolves: rhbz#1274609
    - profiles: removed nohz_full from the realtime profile
      resolves: rhbz#1274486
    - profiles: Added nohz_full and nohz=on to realtime guest/host profiles
      resolves: rhbz#1274445
    - profiles: fixed lapic_timer_adv_ns cache
      resolves: rhbz#1259452
    - plugin_sysctl: pass verification even if the option doesn't exist
      related: rhbz#1252153
    - added support for 'summary' and 'description' of profiles,
      extended D-Bus API for Cockpit
      related: rhbz#1228356


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-1
changelog:
  - new-release
    - gui: fixed save profile
      resolves: rhbz#1242491
    - tuned-adm: added --ignore-missing parameter
      resolves: rhbz#1243807
    - plugin_vm: added transparent_hugepage alias
      resolves: rhbz#1249610
    - plugins: added modules plugin
      resolves: rhbz#1249618
    - plugin_cpu: do not show error if cpupower or x86_energy_perf_policy are
      missing
      resolves: rhbz#1254417
    - tuned-adm: fixed restart attempt if tuned is not running
      resolves: rhbz#1258755
    - nfv: avoided race condition by using synchronous mode
      resolves: rhbz#1259039
    - realtime: added check for isolcpus sanity
      resolves: rhbz#1264128
    - pm_qos: fixed exception if PM_QoS is not available
      resolves: rhbz#1296137
    - plugin_sysctl: reapply system sysctl after Tuned sysctl are applied
      resolves: rhbz#1302953
    - atomic: increase number of inotify watches
      resolves: rhbz#1322001
    - realtime-virtual-host/guest: added rcu_nocbs kernel boot parameter
      resolves: rhbz#1334479
    - realtime: fixed kernel.sched_rt_runtime_us to be -1
      resolves: rhbz#1346715
    - tuned-adm: fixed detection of no_daemon mode
      resolves: rhbz#1351536
    - plugin_base: correctly strip assignment modifiers even if not used
      resolves: rhbz#1353142
    - plugin_disk: try to workaround embedded '/' in device names
      related: rhbz#1353142
    - sap-hana: explicitly setting kernel.numa_balancing = 0 for better performance
      resolves: rhbz#1355768
    - switched to polkit authorization
      resolves: rhbz#1095142
    - plugins: added scsi_host plugin
      resolves: rhbz#1246992
    - spec: fixed conditional support for grub2 to work with selinux
      resolves: rhbz#1351937
    - gui: added tuned icon and desktop file
      resolves: rhbz#1356369


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.0-2
changelog:
  - Fixed tuned-gui traceback (by tuned-gui-traceback-fix patch)
    Resolves: rhbz#1358846
  - Fixed 'tuned-adm list' traceback if daemon is not running
    (by tuned-adm-list-no-dbus-traceback-fix patch)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-1
changelog:
  - New release
    Resolves: rhbz#1362481
  - Dropped tuned-gui-traceback-fix and tuned-adm-list-no-dbus-traceback-fix
    patches (both upstreamed)


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.7.1-3
changelog:
  - Fixed traceback when non-existent profile is queried through
    tuned-adm profile_info
    Resolves: rhbz#1385145


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-1
changelog:
  - new release
    - rebase tuned to latest upstream
      resolves: rhbz#1388454
    - cpu-partitioning: enabled timer migration
      resolves: rhbz#1408308
    - cpu-partitioning: disabled kvmclock sync and ple
      resolves: rhbz#1395855
    - spec: muted error if there is no selinux support
      resolves: rhbz#1404214
    - units: implemented instance priority
      resolves: rhbz#1246172
    - bootloader: added support for initrd overlays
      resolves: rhbz#1414098
    - cpu-partitioning: set CPUAffinity early in initrd image
      resolves: rhbz#1394965
    - cpu-partitioning: set workqueue affinity early
      resolves: rhbz#1395899
    - scsi_host: fixed probing of ALPM, missing ALPM logged as info
      resolves: rhbz#1416712
    - added new profile cpu-partitioning
      resolves: rhbz#1359956
    - bootloader: improved inheritance
      resolves: rhbz#1274464
    - units: mplemented udev-based regexp device matching
      resolves: rhbz#1251240
    - units: introduced pre_script, post_script
      resolves: rhbz#1246176
    - realtime-virtual-host: accommodate new ktimersoftd thread
      resolves: rhbz#1332563
    - defirqaffinity: fixed traceback due to syntax error
      resolves: rhbz#1369791
    - variables: support inheritance of variables
      resolves: rhbz#1433496
    - scheduler: added support for cores isolation
      resolves: rhbz#1403309
    - tuned-profiles-nfv splitted to host/guest and dropped unneeded dependency
      resolves: rhbz#1413111
    - desktop: fixed typo in profile summary
      resolves: rhbz#1421238
    - with systemd don't do full rollback on shutdown / reboot
      resolves: rhbz#1421286
    - builtin functions: added virt_check function and support to include
      resolves: rhbz#1426654
    - cpulist_present: explicitly sorted present CPUs
      resolves: rhbz#1432240
    - plugin_scheduler: fixed initialization
      resolves: rhbz#1433496
    - log errors when applying a profile fails
      resolves: rhbz#1434360
    - systemd: added support for older systemd CPUAffinity syntax
      resolves: rhbz#1441791
    - scheduler: added workarounds for low level exceptions from
      python-linux-procfs
      resolves: rhbz#1441792
    - bootloader: workaround for adding tuned_initrd to new kernels on restart
      resolves: rhbz#1441797


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.8.0-6
changelog:
  - Dropped qemu-kvm-tools-rhev requirement, now satisfied by
    tuned-profiles-nfv-host-bin
    Related: rhbz#1504681


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1546598
    - script: show stderr output in the log
    - realtime-virtual-host: script.sh: add error checking
    - man: improved tuned-profiles-cpu-partitioning.7
    - bootloader: check if grub2_cfg_file_name is None in _remove_grub2_tuning()
    - plugin_scheduler: whitelist/blacklist processed also for thread names
    - bootloader: patch all GRUB2 config files
    - profiles: added mssql profile
    - tuned-adm: print log excerpt when changing profile
    - cpu-partitioning: use no_balance_cores instead of no_rebalance_cores
    - sysctl: support assignment modifiers as other plugins do
    - oracle: fixed ip_local_port_range parity warning
      resolves: rhbz#1527219
    - Fix verifying cpumask on systems with more than 32 cores
      resolves: rhbz#1528368
    - oracle: updated the profile to be in sync with KCS 39188
      resolves: rhbz#1447323


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-1
changelog:
  - new release
    - rebased tuned to latest upstream
      related: rhbz#1546598
    - IRQ affinity handled by scheduler plugin
      resolves: rhbz#1590937


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.10.0-9
changelog:
  - realtime-virtual-guest/host: start/stop rt-entsk daemon on
    initialization/shutdown
    resolves: rhbz#1619822


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.12.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1685585
    - sap-netweaver: changed values of kernel.shmall and kernel.shmmax to RHEL-8 defaults
      resolves: rhbz#1708418
    - sap-netweaver: changed value of kernel.sem to RHEL-8 default
      resolves: rhbz#1701394
    - sap-hana-vmware: dropped profile
      resolves: rhbz#1715541
    - s2kb function: fixed to be compatible with python3
      resolves: rhbz#1684122
    - do fallback to the powersave governor (balanced and powersave profiles)
      resolves: rhbz#1679205
    - added support for negation of CPU list
      resolves: rhbz#1676588
    - switched from sysctl tool to own implementation
      resolves: rhbz#1666678
    - realtime-virtual-host: added tsc-deadline=on to qemu cmdline
      resolves: rhbz#1554458
    - fixed handling of devices that have been removed and re-attached
      resolves: rhbz#1677730


author: Jaroslav Škarvada <jskarvad@redhat.com> - 2.13.0-0.1.rc1
changelog:
  - new release
    - rebased tuned to latest upstream
      resolves: rhbz#1738250
    - cpu: fixed checking if EPB is supported
      resolves: rhbz#1690929
    - scheduler: fixed IRQ SMP affinity verification to respect ignore_missing
      resolves: rhbz#1729936
    - realtime: enabled ktimer_lockless_check
      resolves: rhbz#1734096
    - plugins: support cpuinfo_regex and uname_regex matching
      resolves: rhbz#1748965
    - sysctl: made reapply_sysctl ignore configs from /usr
      resolves: rhbz#1759597
    - added support for multiple include directives
      resolves: rhbz#1760390
    - realtime: added nowatchdog kernel command line option
      resolves: rhbz#1767614


